Function bodies 163 total

    public void reactivateTenant(String tenantId, String modifiedBy) {
        PlatformTenant tenant = getTenant(tenantId);
        tenant.setIsActive(true);
        tenant.setStatus("Active");
        tenant.setModifiedBy(modifiedBy);
        tenant.setModifiedDate(new Timestamp(System.currentTimeMillis()));
        tenantRepository.save(tenant);
        log.info("Reactivated tenant: {}", tenant.getTenantName());
    }

    public TenantModule toggleModule(String tenantId, String moduleName, boolean enabled, String modifiedBy) {
        TenantModule module = moduleRepository.findByTenantIdAndModuleName(tenantId, moduleName)
                .orElseThrow(() -> new IllegalArgumentException(
                        "Module not found: " + moduleName + " for tenant: " + tenantId));

        module.setIsEnabled(enabled);
        if (enabled && module.getActivatedDate() == null) {
            module.setActivatedDate(new Date(System.currentTimeMillis()));
        }
        module.setModifiedBy(modifiedBy);
        module.setModifiedDate(new Timestamp(System.currentTimeMillis()));
        moduleRepository.save(module);

        // Provision in downstream service when a module is enabled
        if (enabled && "Operations".equals(moduleName)) {
            PlatformTenant tenant = getTenant(tenantId);
            try {
                operationsProvisioning.provisionTenant(tenant);
            } catch (Exception 

    public Map<String, Object> onboardTenant(TenantOnboardRequest request, String createdBy) {
        // Step 1: Create the tenant
        TenantCreateRequest createReq = new TenantCreateRequest();
        createReq.setTenantName(request.getTenantName());
        createReq.setDomain(request.getDomain());
        createReq.setIndustry(request.getIndustry());
        createReq.setPrimaryContactName(request.getPrimaryContactName());
        createReq.setPrimaryContactEmail(request.getPrimaryContactEmail());
        createReq.setPhone(request.getPhone());
        createReq.setAddress(request.getAddress());
        createReq.setLicenseType(request.getLicenseType());
        createReq.setLicenseExpiry(request.getLicenseExpiry());
        createReq.setMaxUsers(request.getMaxUsers());
        createReq.setNotes(request.getNotes());

        PlatformTenant tenant = createTenant(createReq, createdBy);

        // Step 2: Enable modules with license configuration
        List<String> enabledModu

    private String slugify(String name) {
        return name.toLowerCase()
                .replaceAll("[^a-z0-9\\s-]", "")
                .replaceAll("\\s+", "-")
                .replaceAll("-+", "-")
                .replaceAll("^-|-$", "");
    }

public class UserManagementService {

    private static final Logger log = LoggerFactory.getLogger(UserManagementService.class);
    private static final String TEMP_PASSWORD_CHARS = "ABCDEFGHJKLMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789!@#$%&*";
    private static final SecureRandom SECURE_RANDOM = new SecureRandom();

    @Autowired
    private AdminUserRepository userRepository;

    @Autowired
    private AdminRoleRepository roleRepository;

    @Autowired
    private PasswordEncoder passwordEncoder;

    @Autowired
    private EmailDomainValidator emailDomainValidator;

    @Transactional(readOnly = true)
    public List<AdminUser> getAllUsers() {
        return userRepository.findAll();
    }

    @Transactional(readOnly = true)
    public List<AdminUser> getActiveUsers() {
        return userRepository.findByIsActiveTrue();
    }

    @Transactional(readOnly = true)
    public AdminUser getUser(String userId) {
        return userRepository.findById(userId)
                .o

    public List<AdminUser> getAllUsers() {
        return userRepository.findAll();
    }

    public List<AdminUser> getActiveUsers() {
        return userRepository.findByIsActiveTrue();
    }

    public AdminUser getUser(String userId) {
        return userRepository.findById(userId)
                .orElseThrow(() -> new IllegalArgumentException("User not found: " + userId));
    }

    public AdminUser createUser(UserCreateRequest request, String createdBy) {
        String email = request.getEmail().toLowerCase().trim();

        // Enforce email domain restriction
        if (!emailDomainValidator.isEmailAllowed(email)) {
            throw new SecurityException("Email domain not allowed. Only @" +
                    emailDomainValidator.getAllowedDomainsSummary() + " addresses permitted.");
        }

        if (userRepository.existsByEmail(email)) {
            throw new IllegalArgumentException("Email already exists: " + email);
        }

        // Validate role exists
        roleRepository.findById(request.getRoleId())
                .orElseThrow(() -> new IllegalArgumentException("Role not found: " + request.getRoleId()));

        // Generate username from email
        String username = email.substring(0, email.indexOf("@"));
        if (userRepository.existsByUsername(username)) {
            username = username + "-" + UUID.randomUUID().toString()

    public AdminUser updateUser(String userId, UserCreateRequest request, String modifiedBy) {
        AdminUser user = getUser(userId);

        if (request.getFirstName() != null) user.setFirstName(request.getFirstName());
        if (request.getLastName() != null) user.setLastName(request.getLastName());
        if (request.getRoleId() != null) {
            roleRepository.findById(request.getRoleId())
                    .orElseThrow(() -> new IllegalArgumentException("Role not found: " + request.getRoleId()));
            user.setRoleId(request.getRoleId());
        }
        user.setModifiedBy(modifiedBy);
        user.setModifiedDate(new Timestamp(System.currentTimeMillis()));

        userRepository.save(user);
        log.info("Updated admin user: {}", user.getEmail());
        return user;
    }

    public void deactivateUser(String userId, String modifiedBy) {
        AdminUser user = getUser(userId);
        user.setIsActive(false);
        user.setModifiedBy(modifiedBy);
        user.setModifiedDate(new Timestamp(System.currentTimeMillis()));
        userRepository.save(user);
        log.info("Deactivated admin user: {}", user.getEmail());
    }

    public void resetPassword(String userId, String modifiedBy) {
        AdminUser user = getUser(userId);
        String tempPassword = generateTempPassword();
        user.setPasswordHash(passwordEncoder.encode(tempPassword));
        user.setMustChangePassword(true);
        user.setFailedAttempts(0);
        user.setLockedUntil(null);
        user.setModifiedBy(modifiedBy);
        user.setModifiedDate(new Timestamp(System.currentTimeMillis()));
        userRepository.save(user);
        log.info("Password reset for admin user: {}", user.getEmail());
        // TODO: Send password reset email with temp password
    }

    private String generateTempPassword() {
        StringBuilder sb = new StringBuilder(16);
        for (int i = 0; i < 16; i++) {
            sb.append(TEMP_PASSWORD_CHARS.charAt(SECURE_RANDOM.nextInt(TEMP_PASSWORD_CHARS.length())));
        }
        return sb.toString();
    }