Added NewPasswordException and updated UserService to throw this exception if the new password matches the current password. Introduced a new error code ERR_SEC_0007 for this scenario and added a matches method to PasswordEncryptionService for password comparison.
Introduces a new SUPERADMIN role in the Role enum. Updates UserService to handle SUPERADMIN users by setting firstLogin to false upon creation and excluding SUPERADMIN users from the getAllUsers() result. Also removes some fields from the mapToResponseDTO method.
Updated the getAllUsers method to exclude users who are not active, in addition to excluding admin users. This ensures only active, non-admin users are returned.
Introduces a new transactionCode field to the TransactionLog entity and updates TransactionLogService to set this field when creating transaction logs. Also adds TRANSACTION_CODE constant to FieldNameLength for column definition.
Introduced a transactionUri field to TransactionLog and updated TransactionLogService methods to accept and store the URI. Refactored deposit approval endpoints in DepositAccountController to use new URIs and updated AconnectURI and TokenBypassURI constants accordingly for individual and business deposit approvals.
Introduced separate endpoints and service methods for approving individual and business CRM applications. Updated URI constants and token bypass lists to support business CRM approval. Also added endpoint to check individual CRM applications by workflow reference.
Introduced PendingLoanApplicationController and PendingLoanApplicationService classes as part of the client module. These provide the initial structure for handling pending loan application logic.
Renamed InProcessDepositApplicationsController to PendingDepositApplicationsController and updated references from InProcessDepositApplicationsService to PendingDepositApplicationsService to reflect the new naming convention.
Replaced InProcessApplicationsController with PendingCRMApplicationsController to handle individual and business pending CRM applications. Updated InProcessApplicationsService to separate logic for individual and business workflows, adding new methods for pending CRM retrieval. Adjusted AconnectURI and TokenBypassURI constants to support new endpoints.
Introduced a new /first-login endpoint in AuthenticationController to handle password changes on first login. Added corresponding constant in SecurityURI and implemented firstLogin method in UserService to update password and firstLogin status.
Added an isDeleted field to the User model and updated the deleteUser method in UserService to perform a soft delete by setting isDeleted to true and isActive to false. Updated UserRepository with methods to filter out deleted users and adjusted getAllUsers to exclude admin roles.
Introduced a new endpoint and service method for individual loan approval. Updated AconnectURI and TokenBypassURI to include the new approval URI, and implemented the approval logic in LoanAccountService and LoanAccountController.
Introduced checks to ensure credit and debit amounts are present and greater than zero in transaction-related methods. Returns appropriate error responses if validation fails, improving input validation and error handling.
Introduces a new /reset-password endpoint in AuthenticationController, a ResetPasswordDTO for request payload, and a resetPassword method in UserService to handle password resets. Also updates SecurityURI with the new endpoint constant.
Introduced ChangePasswordDTO and implemented password change functionality in UserService and AuthenticationController. Added custom exceptions for existing email, username, and incorrect old password. Updated User entity and DTOs to include porOrgacode, and enforced uniqueness checks for userId and email. Enhanced ERRCode with new error codes and improved boolean field handling in User entity.
The SubscriptionFilter class and its contents have been fully commented out, effectively disabling its functionality. This change may be for debugging, refactoring, or temporary removal pending future updates.
Introduced the TransactionLog JPA entity for transaction logging. Added FieldNameConstant and DBFieldNameConstant enums for standardized field names, and expanded FieldNameLength with additional constants. Updated SecurityURI and AuthenticationController to support password change endpoint. Commented out request limiting logic in SubscriptionFilter.
Introduced the TransactionLog entity for transaction logging. Added FieldNameConstant and DBFieldNameConstant enums for standardized field names, and expanded FieldNameLength with additional constants. Updated SecurityURI and AuthenticationController to support password change endpoint. Fixed PermissionService to use the correct repository for user permission updates.
Introduced PermissionRepository for managing User entities and refactored PermissionService to use this new repository instead of UserRepository. This change streamlines permission-related operations and improves code organization.
Moved user permission management logic from UserService and UserController to new PermissionService and PermissionController classes. This improves separation of concerns and code organization. Also removed unused findByEmail method from UserRepository.
Naeem Ullah
Wasiullah Khan
Mazdak Gibran
Naeem Ullah