donpat1to/Schichtenplaner
1
0
Fork 0
mirror of https://github.com/donpat1to/Schichtenplaner.git synced 2025-12-01 06:55:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

added Validation rules

Browse Source
This commit is contained in:
Patrick Mahnke-Hartmann
2025-10-30 19:13:09 +01:00
parent 0623957993
commit 82a30f6bb8
2 changed files with 27 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
backend/src/middleware/Validation/Authentication.md
View File

@@ -1,12 +1,19 @@
## Authentication ## Authentication
### \[ACTION: login\] ### \[ACTION: login\]
* Requires valid email and password format * Requires valid email and password format:
- Minimum 8 characters
- Must contain uppercase, lowercase, number and special character
* Server validates credentials before issuing token * Server validates credentials before issuing token
* Token and employee data stored in localStorage upon success * Token and employee data stored in localStorage upon success
### \[ACTION: register\] ### \[ACTION: register\]
* Requires email, password, and name * `Password` optional but strict validation:
- Minimum 8 characters
- Must contain uppercase, lowercase, number and special character
* `firstname` 1-100 characters and must not be empty
* `lastname` 1-100 characters and must not be empty
* Requires valid email
* Role is optional during registration * Role is optional during registration
* Automatically logs in user after successful registration * Automatically logs in user after successful registration

28
backend/src/middleware/Validation/Employee.md
View File

@@ -16,34 +16,42 @@
### \[ACTION: update last login\] ### \[ACTION: update last login\]
* Requires employee ID * Requires employee ID
* Fails silently if update fails (logs error but doesn't block user) * Fails silently if update fails (logs error but doesn`t block user)
## Employee ## Employee
### \[CREATE\] Employee ### \[CREATE\] Employee
* `firstname` must not be empty * `firstname` 1-100 characters and must not be empty
* `lastname` must not be empty * `lastname` 1-100 characters and must not be empty
* `password` must be at least 6 characters (in create mode) * `password` must be at least 6 characters (in create mode)
* `employeeType` must be selected * `employeeType` must be `manager`, `personell`, `apprentice`, or `guest`
* `canWorkAlone` optional boolean
* `isTrainee` optional boolean
* `isActive` optional boolean (default true)
* Contract type validation: * Contract type validation:
* `manager`, `apprentice` => `contractType` = flexible * `manager`, `apprentice` => `contractType` = flexible
* `guest` => `contractType` = undefined/NONE * `guest` => `contractType` = undefined/NONE
* `personell` => `contractType` = small || large * `personell` => `contractType` = small || large
### \[UPDATE\] Employee profile ### \[UPDATE\] Employee profile
* `firstname` must not be empty * `firstname` 1-100 characters and must not be empty
* `lastname` must not be empty * `lastname` 1-100 characters and must not be empty
* `employeeType` must be valid type if provided
* `contractType` must be valid type if provided
* `roles` must be valid array of roles if provided
* Only the employee themselves or admins can update * Only the employee themselves or admins can update
### \[UPDATE\] Employee password ### \[UPDATE\] Employee password
* `newPassword` must be at least 6 characters * `newPassword` optional but strict validation:
- Minimum 8 characters
- Must contain uppercase, lowercase, number and special character
* `newPassword` must match `confirmPassword` * `newPassword` must match `confirmPassword`
* For admin password reset: no `currentPassword` required * For admin password reset: no `currentPassword` required
* For self-password change: `currentPassword` required * For self-password change: `currentPassword` required
### \[UPDATE\] Employee roles ### \[UPDATE\] Employee roles
* Only users with role 'admin' can modify roles * Only users with role `admin` can modify roles
* At least one employee must maintain 'admin' role * At least one employee must maintain `admin` role
* Users cannot remove their own admin role * Users cannot remove their own admin role
### \[UPDATE\] Employee availability ### \[UPDATE\] Employee availability
@@ -56,7 +64,7 @@
* `shiftId` must be valid and exist in the current plan * `shiftId` must be valid and exist in the current plan
### \[ACTION: delete\] Employee ### \[ACTION: delete\] Employee
* Only users with role 'admin' can delete employees * Only users with role `admin` can delete employees
* Cannot delete yourself * Cannot delete yourself
* Cannot delete the last admin user * Cannot delete the last admin user
* User confirmation required before deletion * User confirmation required before deletion