Intelligence
Amplified

// Secure user data management service
import { encrypt, validateAccess } from '../utils/security';
import { AuditLogger } from '../logging/audit';

interface UserProfile {
  id: string;
  email: string;
  permissions: string[];
  lastAccess: Date;
}

class UserService {
  private auditLog = new AuditLogger('UserService');

  async fetchUserProfile(userId: string): Promise<UserProfile> {
    // Log access attempt
    this.auditLog.info('User profile access', { userId });
    
    try {
      // Validate permissions
      await validateAccess(userId);
      
      const response = await fetch(`/api/v1/users/${userId}`, {
        headers: {
          'Authorization': `Bearer ${this.getSecureToken()}`,
          'X-Request-ID': this.generateRequestId()
        }
      });

      if (!response.ok) {
        throw new Error(`HTTP ${response.status}`);
      }

      const userData = await response.json();
      
      // Encrypt sensitive data before storage
      return {
        ...userData,
        email: encrypt(userData.email),
        permissions: userData.permissions || []
      };
      
    } catch (error) {
      this.auditLog.error('Profile fetch failed', { userId, error });
      throw error;
    }
  }

  private getSecureToken(): string {
    return localStorage.getItem('auth_token') || '';
  }

  private generateRequestId(): string {
    return crypto.randomUUID();
  }
}

export default new UserService();