SPRINT 3

.github/workflows/ci.yml

@@ -105,8 +105,7 @@ jobs:
         with:
           name: coverage
       - name: SonarQube Scan
-        uses: sonarsource/sonarqube-scan-action@master
+        uses: SonarSource/sonarqube-scan-action@v6
 
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}

clean.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+# Script para limpar Docker completamente
+
+echo "Parando todos os containers..."
+docker stop $(docker ps -aq) 2>/dev/null || echo "Nenhum container em execução."
+
+echo "Removendo todos os containers..."
+docker rm -f $(docker ps -aq) 2>/dev/null || echo "Nenhum container para remover."
+
+echo "Removendo todas as imagens..."
+docker rmi -f $(docker images -q) 2>/dev/null || echo "Nenhuma imagem para remover."
+
+echo "Removendo todos os volumes..."
+docker volume rm $(docker volume ls -q) 2>/dev/null || echo "Nenhum volume para remover."
+
+echo "Executando prune do sistema..."
+docker system prune -a --volumes -f
+
+echo "Limpeza completa do Docker!"

cmd/api/main.go

@@ -29,7 +29,7 @@ import (
 // @host      localhost:8080
 // @BasePath  /
 
-// @securityDefinitions.BearerAuth
+// @securityDefinitions.apiKey BearerAuth
 // @in header
 // @type http
 // @name Authorization

go.mod

@@ -8,6 +8,7 @@ require (
 	github.com/gin-contrib/cors v1.7.3
 	github.com/gin-gonic/gin v1.10.0
 	github.com/golang-jwt/jwt v3.2.2+incompatible
+	github.com/golang-jwt/jwt/v5 v5.2.2
 	github.com/google/uuid v1.6.0
 	github.com/joho/godotenv v1.5.1
 	github.com/redis/go-redis/v9 v9.7.0
@@ -17,6 +18,8 @@ require (
 	github.com/swaggo/swag v1.16.6
 	github.com/unrolled/secure v1.17.0
 	go.mongodb.org/mongo-driver v1.17.1
+	golang.org/x/crypto v0.42.0
+	golang.org/x/oauth2 v0.33.0
 	golang.org/x/sync v0.17.0
 	gorm.io/driver/sqlserver v1.6.1
 	gorm.io/gorm v1.31.0
@@ -77,7 +80,6 @@ require (
 	go.opentelemetry.io/otel/sdk v1.29.0 // indirect
 	go.opentelemetry.io/otel/trace v1.35.0 // indirect
 	golang.org/x/arch v0.12.0 // indirect
-	golang.org/x/crypto v0.42.0 // indirect
 	golang.org/x/mod v0.28.0 // indirect
 	golang.org/x/net v0.44.0 // indirect
 	golang.org/x/sys v0.36.0 // indirect

go.sum

@@ -274,6 +274,8 @@ golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
 golang.org/x/net v0.26.0/go.mod h1:5YKkiSynbBIh3p6iOc/vibscux0x38BZDkn8sCUPxHE=
 golang.org/x/net v0.44.0 h1:evd8IRDyfNBMBTTY5XRF1vaZlD+EmWx6x8PkhR04H/I=
 golang.org/x/net v0.44.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
+golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=

internal/middleware/jwt.go

@@ -63,7 +63,7 @@ func DecodeTokenJWT(token string) (jwt.MapClaims, error) {
 }
 
 // Auth is a middleware function that checks for a valid JWT token in the Authorization header
-func Auth() gin.HandlerFunc {
+func Auth(minAccesScope int64) gin.HandlerFunc {
 	return func(c *gin.Context) {
 		token := c.GetHeader("Authorization")
 		if token == "" {
@@ -88,6 +88,29 @@ func Auth() gin.HandlerFunc {
 			return
 		}
 
+		if claims["role"] == nil {
+			authError := dto.NewAuthErrorResponse(c, "Invalid token: missing role")
+			c.AbortWithStatusJSON(http.StatusUnauthorized, authError)
+			return
+		}
+
+		/*userRoleInt, ok := claims["role"].(int64)
+		if !ok {
+			userRoleFloatConv, okConv := claims["role"].(float64)
+			if !okConv {
+				authError := dto.NewAuthErrorResponse(c, "Invalid token: invalid role type")
+				c.AbortWithStatusJSON(http.StatusUnauthorized, authError)
+				return
+			}
+			userRoleInt = int64(userRoleFloatConv)
+		}
+
+		if userRoleInt > minAccesScope {
+			authError := dto.NewAuthErrorResponse(c, "Insufficient permissions")
+			c.AbortWithStatusJSON(http.StatusForbidden, authError)
+			return
+		}*/
+
 		c.Set("currentUser", claims)
 		c.Next()
 	}

internal/middleware/logger.go

@@ -190,12 +190,12 @@ func LoggerMiddleware(esLogger *logger.ElasticsearchLogger, config ...Middleware
 
 		// Build HTTP context
 		httpContext := &logger.HTTPContext{
-			Method:       c.Request.Method,
-			URL:          c.Request.URL.String(),
-			Path:         c.Request.URL.Path,
-			Query:        c.Request.URL.RawQuery,
-			UserAgent:    c.Request.UserAgent(),
-			RemoteIP:     c.ClientIP(),
+			Method:    c.Request.Method,
+			URL:       c.Request.URL.String(),
+			Path:      c.Request.URL.Path,
+			Query:     c.Request.URL.RawQuery,
+			UserAgent: c.Request.UserAgent(),
+			// RemoteIP:     c.ClientIP(),
 			Headers:      headers,
 			StatusCode:   statusCode,
 			ResponseSize: int64(c.Writer.Size()),

internal/models/dto/terms_of_use.go

@@ -0,0 +1,130 @@
+package dto
+
+import "time"
+
+// TermsOfUseResponse representa a resposta com informações de um termo de uso
+type TermsOfUseResponse struct {
+	Id            int                `json:"id"`
+	Version       string             `json:"version"`
+	Title         string             `json:"title"`
+	Description   *string            `json:"description,omitempty"`
+	Content       string             `json:"content"`
+	IsActive      bool               `json:"isActive"`
+	EffectiveDate time.Time          `json:"effectiveDate"`
+	CreatedAt     time.Time          `json:"createdAt"`
+	Items         []TermItemResponse `json:"items,omitempty"`
+}
+
+// TermItemResponse representa a resposta com informações de um item de termo
+type TermItemResponse struct {
+	Id          int    `json:"id"`
+	TermId      int    `json:"termId"`
+	ItemOrder   int    `json:"itemOrder"`
+	Title       string `json:"title"`
+	Content     string `json:"content"`
+	IsMandatory bool   `json:"isMandatory"`
+	IsActive    bool   `json:"isActive"`
+}
+
+// CreateTermRequest representa a requisição para criar um novo termo
+type CreateTermRequest struct {
+	Version       string                  `json:"version" binding:"required"`
+	Title         string                  `json:"title" binding:"required"`
+	Description   *string                 `json:"description,omitempty"`
+	Content       string                  `json:"content" binding:"required"`
+	EffectiveDate *time.Time              `json:"effectiveDate,omitempty"`
+	Items         []CreateTermItemRequest `json:"items" binding:"required,min=1"`
+}
+
+// CreateTermItemRequest representa a requisição para criar um item de termo
+type CreateTermItemRequest struct {
+	ItemOrder   int    `json:"itemOrder" binding:"required,min=1"`
+	Title       string `json:"title" binding:"required"`
+	Content     string `json:"content" binding:"required"`
+	IsMandatory bool   `json:"isMandatory"`
+}
+
+// UpdateTermRequest representa a requisição para atualizar um termo
+type UpdateTermRequest struct {
+	Title         *string    `json:"title,omitempty"`
+	Description   *string    `json:"description,omitempty"`
+	Content       *string    `json:"content,omitempty"`
+	IsActive      *bool      `json:"isActive,omitempty"`
+	EffectiveDate *time.Time `json:"effectiveDate,omitempty"`
+}
+
+// UserConsentRequest representa a requisição de consentimento do usuário
+type UserConsentRequest struct {
+	TermId       int                      `json:"termId" binding:"required"`
+	ItemConsents []UserItemConsentRequest `json:"itemConsents" binding:"required,min=1"`
+}
+
+// UserItemConsentRequest representa o consentimento para um item específico
+type UserItemConsentRequest struct {
+	ItemId   int  `json:"itemId" binding:"required"`
+	Accepted bool `json:"accepted"`
+}
+
+// UserConsentResponse representa a resposta do consentimento registrado
+type UserConsentResponse struct {
+	Id           int                       `json:"id"`
+	UserId       int                       `json:"userId"`
+	TermId       int                       `json:"termId"`
+	TermVersion  string                    `json:"termVersion"`
+	ConsentDate  time.Time                 `json:"consentDate"`
+	IsActive     bool                      `json:"isActive"`
+	ItemConsents []UserItemConsentResponse `json:"itemConsents,omitempty"`
+}
+
+// UserItemConsentResponse representa a resposta do consentimento de item
+type UserItemConsentResponse struct {
+	ItemId      int    `json:"itemId"`
+	ItemTitle   string `json:"itemTitle"`
+	Accepted    bool   `json:"accepted"`
+	IsMandatory bool   `json:"isMandatory"`
+}
+
+// RevokeConsentRequest representa a requisição para revogar consentimento
+type RevokeConsentRequest struct {
+	TermId int     `json:"termId" binding:"required"`
+	Reason *string `json:"reason,omitempty"`
+}
+
+// UserConsentStatusResponse representa o status de consentimento do usuário
+type UserConsentStatusResponse struct {
+	UserId             int        `json:"userId"`
+	HasActiveConsent   bool       `json:"hasActiveConsent"`
+	CurrentTermId      *int       `json:"currentTermId,omitempty"`
+	CurrentTermVersion *string    `json:"currentTermVersion,omitempty"`
+	CurrentTermTitle   *string    `json:"currentTermTitle,omitempty"`
+	ConsentDate        *time.Time `json:"consentDate,omitempty"`
+	NeedsNewConsent    bool       `json:"needsNewConsent"`
+}
+
+// MyConsentStatusResponse representa o status completo de consentimento do usuário com termo e itens
+type MyConsentStatusResponse struct {
+	UserId           int                 `json:"userId"`
+	HasActiveConsent bool                `json:"hasActiveConsent"`
+	NeedsNewConsent  bool                `json:"needsNewConsent"`
+	Term             *TermsOfUseResponse `json:"term,omitempty"`
+	ConsentDate      *time.Time          `json:"consentDate,omitempty"`
+}
+
+// ListTermsResponse representa a lista de termos (para admin)
+type ListTermsResponse struct {
+	Terms      []TermsOfUseResponse `json:"terms"`
+	TotalCount int                  `json:"totalCount"`
+	Page       int                  `json:"page"`
+	PageSize   int                  `json:"pageSize"`
+}
+
+// TermStatisticsResponse representa estatísticas de consentimento de um termo
+type TermStatisticsResponse struct {
+	TermId              int       `json:"termId"`
+	TermVersion         string    `json:"termVersion"`
+	TotalUsers          int       `json:"totalUsers"`
+	UsersWithConsent    int       `json:"usersWithConsent"`
+	UsersWithoutConsent int       `json:"usersWithoutConsent"`
+	ConsentRate         float64   `json:"consentRate"` // Porcentagem
+	LastUpdate          time.Time `json:"lastUpdate"`
+}

internal/models/dto/users.go

@@ -8,19 +8,20 @@ import "time"
 
 // CreateUserRequest representa a requisição de criação de usuário
 type CreateUserRequest struct {
-	Name        string  `json:"name" binding:"required,min=3,max=200" example:"João Silva"`
-	Email       string  `json:"email" binding:"required,email,max=255" example:"joao.silva@example.com"`
-	Password    *string `json:"password,omitempty" binding:"omitempty,min=8,max=100" example:"SenhaSegura@123"`
-	UserType    string  `json:"userType" binding:"required,oneof=ADMIN MANAGER AGENT VIEWER" example:"AGENT" enums:"ADMIN,MANAGER,AGENT,VIEWER"`
-	MicrosoftId *string `json:"microsoftId,omitempty" binding:"omitempty,max=255" example:"a1b2c3d4-e5f6-7890-abcd-ef1234567890"`
+	Name        string             `json:"name" binding:"required,min=3,max=200" example:"João Silva"`
+	Email       string             `json:"email" binding:"required,email,max=255" example:"joao@example.com"`
+	Password    *string            `json:"password,omitempty" binding:"omitempty,min=8,max=100" example:"SenhaSegura@123"`
+	UserType    string             `json:"userType" binding:"required,oneof=ADMIN MANAGER SUPPORT" example:"SUPPORT" enums:"ADMIN,MANAGER,SUPPORT"`
+	TermConsent UserConsentRequest `json:"termConsent" binding:"required"` // Consentimento obrigatório
+	// MicrosoftId *string `json:"microsoftId,omitempty" binding:"omitempty,max=255" example:"a1b2c3d4-e5f6-7890-abcd-ef1234567890"`
 }
 
 // UpdateUserRequest representa a requisição de atualização de usuário
 type UpdateUserRequest struct {
 	Name     *string `json:"name,omitempty" binding:"omitempty,min=3,max=200" example:"João Silva Atualizado"`
 	Email    *string `json:"email,omitempty" binding:"omitempty,email,max=255" example:"joao.novo@example.com"`
 	Password *string `json:"password,omitempty" binding:"omitempty,min=8,max=100" example:"NovaSenha@456"`
-	UserType *string `json:"userType,omitempty" binding:"omitempty,oneof=ADMIN MANAGER AGENT VIEWER" example:"MANAGER" enums:"ADMIN,MANAGER,AGENT,VIEWER"`
+	UserType *string `json:"userType,omitempty" binding:"omitempty,oneof=ADMIN MANAGER SUPPORT" example:"MANAGER" enums:"ADMIN,MANAGER,SUPPORT"`
 	IsActive *bool   `json:"isActive,omitempty" example:"true"`
 }
 
@@ -36,8 +37,10 @@ type ChangePasswordRequest struct {
 
 // LoginRequest representa a requisição de login
 type LoginRequest struct {
-	Email    string `json:"email" binding:"required,email" example:"joao.silva@example.com"`
-	Password string `json:"password" binding:"required" example:"SenhaSegura@123"`
+	Email            string  `json:"email" binding:"required,email" example:"joao@example.com"`
+	Password         string  `json:"password" binding:"required_if=LoginType password" example:"SenhaSegura@123"`
+	LoginType        string  `json:"login_type" binding:"required,oneof=password microsoft" example:"password"`
+	MicrosoftIDToken *string `json:"microsoft_id_token,omitempty" example:"eyJhbGciOi..."` // optional for microsoft flow when front handles OAuth; not needed when backend-only
 }
 
 // MicrosoftAuthRequest representa a requisição de autenticação Microsoft
@@ -53,8 +56,8 @@ type MicrosoftAuthRequest struct {
 type UserResponse struct {
 	Id          int        `json:"id" example:"1"`
 	Name        string     `json:"name" example:"João Silva"`
-	Email       string     `json:"email" example:"joao.silva@example.com"`
-	UserType    string     `json:"userType" example:"AGENT" enums:"ADMIN,MANAGER,AGENT,VIEWER"`
+	Email       string     `json:"email" example:"joao@example.com"`
+	UserType    string     `json:"userType" example:"SUPPORT" enums:"ADMIN,MANAGER,SUPPORT"`
 	MicrosoftId *string    `json:"microsoftId,omitempty" example:"a1b2c3d4-e5f6-7890-abcd-ef1234567890"`
 	IsActive    bool       `json:"isActive" example:"true"`
 	CreatedAt   time.Time  `json:"createdAt" example:"2025-10-16T10:30:00Z"`

internal/models/entities/terms_of_use.go

@@ -0,0 +1,84 @@
+package entities
+
+import "time"
+
+// TermsOfUse representa um termo de uso com versionamento
+type TermsOfUse struct {
+	Id            int        `json:"id" gorm:"column:Id;primaryKey;autoIncrement"`
+	Version       string     `json:"version" gorm:"column:Version;type:nvarchar(50);not null;unique"`
+	Content       string     `json:"content" gorm:"column:Content;type:text;not null"`
+	Title         string     `json:"title" gorm:"column:Title;type:nvarchar(500);not null"`
+	Description   *string    `json:"description,omitempty" gorm:"column:Description;type:nvarchar(max)"`
+	IsActive      bool       `json:"isActive" gorm:"column:IsActive;type:bit;not null;default:1"`
+	EffectiveDate time.Time  `json:"effectiveDate" gorm:"column:EffectiveDate;type:datetime2;not null;default:GETDATE()"`
+	CreatedAt     time.Time  `json:"createdAt" gorm:"column:CreatedAt;type:datetime2;not null;default:GETDATE()"`
+	CreatedBy     *int       `json:"createdBy,omitempty" gorm:"column:CreatedBy;type:int"`
+	UpdatedAt     *time.Time `json:"updatedAt,omitempty" gorm:"column:UpdatedAt;type:datetime2"`
+	UpdatedBy     *int       `json:"updatedBy,omitempty" gorm:"column:UpdatedBy;type:int"`
+
+	// Relacionamentos
+	Items []TermItem `json:"items,omitempty" gorm:"foreignKey:TermId"`
+}
+
+// TableName especifica o nome da tabela no banco
+func (TermsOfUse) TableName() string {
+	return "dbo.TermsOfUse"
+}
+
+// TermItem representa um item de um termo (obrigatório ou opcional)
+type TermItem struct {
+	Id          int        `json:"id" gorm:"column:Id;primaryKey;autoIncrement"`
+	TermId      int        `json:"termId" gorm:"column:TermId;type:int;not null"`
+	ItemOrder   int        `json:"itemOrder" gorm:"column:ItemOrder;type:int;not null;default:1"`
+	Title       string     `json:"title" gorm:"column:Title;type:nvarchar(500);not null"`
+	Content     string     `json:"content" gorm:"column:Content;type:text;not null"`
+	IsMandatory bool       `json:"isMandatory" gorm:"column:IsMandatory;type:bit;not null;default:0"`
+	IsActive    bool       `json:"isActive" gorm:"column:IsActive;type:bit;not null;default:1"`
+	CreatedAt   time.Time  `json:"createdAt" gorm:"column:CreatedAt;type:datetime2;not null;default:GETDATE()"`
+	UpdatedAt   *time.Time `json:"updatedAt,omitempty" gorm:"column:UpdatedAt;type:datetime2"`
+}
+
+// TableName especifica o nome da tabela no banco
+func (TermItem) TableName() string {
+	return "dbo.TermItems"
+}
+
+// UserTermConsent representa o consentimento de um usuário para um termo
+type UserTermConsent struct {
+	Id            int        `json:"id" gorm:"column:Id;primaryKey;autoIncrement"`
+	UserId        int        `json:"userId" gorm:"column:UserId;type:int;not null"`
+	TermId        int        `json:"termId" gorm:"column:TermId;type:int;not null"`
+	ConsentDate   time.Time  `json:"consentDate" gorm:"column:ConsentDate;type:datetime2;not null;default:GETDATE()"`
+	IsActive      bool       `json:"isActive" gorm:"column:IsActive;type:bit;not null;default:1"`
+	IPAddress     *string    `json:"ipAddress,omitempty" gorm:"column:IPAddress;type:nvarchar(50)"`
+	UserAgent     *string    `json:"userAgent,omitempty" gorm:"column:UserAgent;type:nvarchar(500)"`
+	RevokedAt     *time.Time `json:"revokedAt,omitempty" gorm:"column:RevokedAt;type:datetime2"`
+	RevokedReason *string    `json:"revokedReason,omitempty" gorm:"column:RevokedReason;type:nvarchar(max)"`
+
+	// Relacionamentos
+	User         User              `json:"user,omitempty" gorm:"foreignKey:UserId"`
+	Term         TermsOfUse        `json:"term,omitempty" gorm:"foreignKey:TermId"`
+	ItemConsents []UserItemConsent `json:"itemConsents,omitempty" gorm:"foreignKey:UserConsentId"`
+}
+
+// TableName especifica o nome da tabela no banco
+func (UserTermConsent) TableName() string {
+	return "dbo.UserTermConsents"
+}
+
+// UserItemConsent representa o consentimento de um usuário para um item específico
+type UserItemConsent struct {
+	Id            int       `json:"id" gorm:"column:Id;primaryKey;autoIncrement"`
+	UserConsentId int       `json:"userConsentId" gorm:"column:UserConsentId;type:int;not null"`
+	ItemId        int       `json:"itemId" gorm:"column:ItemId;type:int;not null"`
+	Accepted      bool      `json:"accepted" gorm:"column:Accepted;type:bit;not null"`
+	ConsentDate   time.Time `json:"consentDate" gorm:"column:ConsentDate;type:datetime2;not null;default:GETDATE()"`
+
+	// Relacionamentos
+	Item TermItem `json:"item,omitempty" gorm:"foreignKey:ItemId"`
+}
+
+// TableName especifica o nome da tabela no banco
+func (UserItemConsent) TableName() string {
+	return "dbo.UserItemConsents"
+}