# Service Design Specification **auteurlabb-messagingcenter-service** documentation **Version:** `1.0.15` ## Scope This document provides a structured architectural overview of the `messagingCenter` microservice, detailing its configuration, data model, authorization logic, business rules, and API design. It has been automatically generated based on the service definition within Mindbricks, ensuring that the information reflects the source of truth used during code generation and deployment. The document is intended to serve multiple audiences: * **Service architects** can use it to validate design decisions and ensure alignment with broader architectural goals. * **Developers and maintainers** will find it useful for understanding the structure and behavior of the service, facilitating easier debugging, feature extension, and integration with other systems. * **Stakeholders and reviewers** can use it to gain a clear understanding of the service's capabilities and domain logic. > **Note for Frontend Developers**: While this document is valuable for understanding business logic and data interactions, please refer to the [Service API Documentation](#) for endpoint-level specifications and integration details. > **Note for Backend Developers**: Since the code for this service is automatically generated by Mindbricks, you typically won't need to implement or modify it manually. However, this document is especially valuable when you're building other services—whether within Mindbricks or externally—that need to interact with or depend on this service. It provides a clear reference to the service's data contracts, business rules, and API structure, helping ensure compatibility and correct integration. ## `MessagingCenter` Service Settings Facilitates secure messaging between filmmakers, studios, and investors, enabling message threads, moderation, and notifications for industry collaborations. ### Service Overview This service is configured to listen for HTTP requests on port `3002`, serving both the main API interface and default administrative endpoints. The following routes are available by default: * **API Test Interface (API Face):** `/` * **Swagger Documentation:** `/swagger` * **Postman Collection Download:** `/getPostmanCollection` * **Health Checks:** `/health` and `/admin/health` * **Current Session Info:** `/currentuser` * **Favicon:** `/favicon.ico` The service uses a **PostgreSQL** database for data storage, with the database name set to `auteurlabb-messagingcenter-service`. This service is accessible via the following environment-specific URLs: * **Preview:** `https://auteurlabb.prw.mindbricks.com/messagingcenter-api` * **Staging:** `https://auteurlabb-stage.mindbricks.co/messagingcenter-api` * **Production:** `https://auteurlabb.mindbricks.co/messagingcenter-api` ### Authentication & Security - **Login Required**: Yes This service requires user authentication for access. It supports both JWT and RSA-based authentication mechanisms, ensuring secure user sessions and data integrity. If a crud route also is configured to require login, it will check a valid JWT token in the request query/header/bearer/cookie. If the token is valid, it will extract the user information from the token and make the fetched session data available in the request context. ### Service Data Objects The service uses a **PostgreSQL** database for data storage, with the database name set to `auteurlabb-messagingcenter-service`. Data deletion is managed using a **soft delete** strategy. Instead of removing records from the database, they are flagged as inactive by setting the `isActive` field to `false`. | Object Name | Description | Public Access | |-------------|-------------|---------------| | `messageThread` | A thread (private or group) representing a conversation among platform users, optionally linked to a film project | accessPrivate | | `message` | A message sent in a thread between platform users, with moderation and delivery tracking. | accessPrivate | ## messageThread Data Object ### Object Overview **Description:** A thread (private or group) representing a conversation among platform users, optionally linked to a film project This object represents a core data structure within the service and acts as the blueprint for database interaction, API generation, and business logic enforcement. It is defined using the `ObjectSettings` pattern, which governs its behavior, access control, caching strategy, and integration points with other systems such as Stripe and Redis. ### Core Configuration - **Soft Delete:** Enabled — Determines whether records are marked inactive (`isActive = false`) instead of being physically deleted. - **Public Access:** accessPrivate — If enabled, anonymous users may access this object’s data depending on API-level rules. ### Composite Indexes - **uniqueGroupParticipantsProject**: [participantIds, isGroup, relatedProjectId] This composite index is defined to optimize query performance for complex queries involving multiple fields. The index also defines a conflict resolution strategy for duplicate key violations. When a new record would violate this composite index, the following action will be taken: **On Duplicate**: `throwError` An error will be thrown, preventing the insertion of conflicting data. ### Properties Schema | Property | Type | Required | Description | |----------|------|----------|-------------| | `participantIds` | ID | Yes | IDs of all participants in the thread (must be 2+ for group, exactly 2 for 1-1) | | `subject` | String | No | Optional subject for the thread, required for group or flagged; for 1-on-1 may be null/empty. | | `relatedProjectId` | ID | No | (Optional) The project this thread is about. | | `isGroup` | Boolean | Yes | True if thread is a group chat, false if private 1-to-1 message. | | `createdBy` | ID | Yes | User who created the thread. | | `lastMessageAt` | Date | Yes | Timestamp of the last message in this thread (used for sorting). | | `threadStatus` | Enum | Yes | Status of the thread: active, archived, flagged. | * Required properties are mandatory for creating objects and must be provided in the request body if no default value is set. ### Array Properties `participantIds` Array properties can hold multiple values and are indicated by the `[]` suffix in their type. Avoid using arrays in properties that are used for relations, as they will not work correctly. Note that using connection objects instead of arrays is recommended for relations, as they provide better performance and flexibility. ### Default Values Default values are automatically assigned to properties when a new object is created, if no value is provided in the request body. Since default values are applied on db level, they should be literal values, not expressions.If you want to use expressions, you can use transposed parameters in any business API to set default values dynamically. - **participantIds**: [] - **createdBy**: '00000000-0000-0000-0000-000000000000' - **lastMessageAt**: new Date() - **threadStatus**: active ### Constant Properties `createdBy` Constant properties are defined to be immutable after creation, meaning they cannot be updated or changed once set. They are typically used for properties that should remain constant throughout the object's lifecycle. A property is set to be constant if the `Allow Update` option is set to `false`. ### Auto Update Properties `participantIds` `subject` `relatedProjectId` `isGroup` `lastMessageAt` `threadStatus` An update crud API created with the option `Auto Params` enabled will automatically update these properties with the provided values in the request body. If you want to update any property in your own business logic not by user input, you can set the `Allow Auto Update` option to false. These properties will be added to the update API's body parameters and can be updated by the user if any value is provided in the request body. ### Enum Properties Enum properties are defined with a set of allowed values, ensuring that only valid options can be assigned to them. The enum options value will be stored as strings in the database, but when a data object is created an addtional property with the same name plus an idx suffix will be created, which will hold the index of the selected enum option. You can use the index property to sort by the enum value or when your enum options represent a sequence of values. - **threadStatus**: [active, archived, flagged] ### Elastic Search Indexing `participantIds` `relatedProjectId` `isGroup` `createdBy` `lastMessageAt` `threadStatus` Properties that are indexed in Elastic Search will be searchable via the Elastic Search API. While all properties are stored in the elastic search index of the data object, only those marked for Elastic Search indexing will be available for search queries. ### Database Indexing `participantIds` `relatedProjectId` `isGroup` `createdBy` `lastMessageAt` `threadStatus` Properties that are indexed in the database will be optimized for query performance, allowing for faster data retrieval. Make a property indexed in the database if you want to use it frequently in query filters or sorting. ### Relation Properties `participantIds` `relatedProjectId` `createdBy` Mindbricks supports relations between data objects, allowing you to define how objects are linked together. You can define relations in the data object properties, which will be used to create foreign key constraints in the database. For complex joins operations, Mindbricks supportsa BFF pattern, where you can view dynamic and static views based on Elastic Search Indexes. Use db level relations for simple one-to-one or one-to-many relationships, and use BFF views for complex joins that require multiple data objects to be joined together. - **participantIds**: ID Relation to `user`.id The target object is a parent object, meaning that the relation is a one-to-many relationship from target to this object. On Delete: Set Null Required: Yes - **relatedProjectId**: ID Relation to `filmProject`.id The target object is a parent object, meaning that the relation is a one-to-many relationship from target to this object. On Delete: Set Null Required: No - **createdBy**: ID Relation to `user`.id The target object is a parent object, meaning that the relation is a one-to-many relationship from target to this object. On Delete: Set Null Required: Yes ### Session Data Properties `createdBy` Session data properties are used to store data that is specific to the user session, allowing for personalized experiences and temporary data storage. If a property is configured as session data, it will be automatically mapped to the related field in the user session during CRUD operations. Note that session data properties can not be mutated by the user, but only by the system. - **createdBy**: ID property will be mapped to the session parameter `userId`. This property is also used to store the owner of the session data, allowing for ownership checks and access control. ### Filter Properties `participantIds` `relatedProjectId` `threadStatus` Filter properties are used to define parameters that can be used in query filters, allowing for dynamic data retrieval based on user input or predefined criteria. These properties are automatically mapped as API parameters in the listing API's that have "Auto Params" enabled. - **participantIds**: ID has a filter named `participantId` - **relatedProjectId**: ID has a filter named `relatedProjectId` - **threadStatus**: Enum has a filter named `threadStatus` ## message Data Object ### Object Overview **Description:** A message sent in a thread between platform users, with moderation and delivery tracking. This object represents a core data structure within the service and acts as the blueprint for database interaction, API generation, and business logic enforcement. It is defined using the `ObjectSettings` pattern, which governs its behavior, access control, caching strategy, and integration points with other systems such as Stripe and Redis. ### Core Configuration - **Soft Delete:** Enabled — Determines whether records are marked inactive (`isActive = false`) instead of being physically deleted. - **Public Access:** accessPrivate — If enabled, anonymous users may access this object’s data depending on API-level rules. ### Composite Indexes - **messageThreadMessageOrder**: [threadId, sentAt] This composite index is defined to optimize query performance for complex queries involving multiple fields. The index also defines a conflict resolution strategy for duplicate key violations. When a new record would violate this composite index, the following action will be taken: **On Duplicate**: `doInsert` The new record will be inserted without checking for duplicates. This means that the composite index is designed for search purposes only. ### Properties Schema | Property | Type | Required | Description | |----------|------|----------|-------------| | `threadId` | ID | Yes | The parent thread of this message. | | `senderId` | ID | Yes | User ID of the sender. | | `content` | Text | Yes | The actual message content (body). | | `sentAt` | Date | Yes | When the message was sent. | | `readByIds` | ID | No | User IDs who have read the message (for read receipts). | | `moderationStatus` | Enum | Yes | Moderation status: normal (default), flagged (pending review), or removed by admin/moderation. | | `flaggedReason` | String | No | Reason for message being flagged (set by admin or reporting workflow). | | `adminAction` | String | No | Admin/moderator action/note taken regarding this message (set only by admin). | * Required properties are mandatory for creating objects and must be provided in the request body if no default value is set. ### Array Properties `readByIds` Array properties can hold multiple values and are indicated by the `[]` suffix in their type. Avoid using arrays in properties that are used for relations, as they will not work correctly. Note that using connection objects instead of arrays is recommended for relations, as they provide better performance and flexibility. ### Default Values Default values are automatically assigned to properties when a new object is created, if no value is provided in the request body. Since default values are applied on db level, they should be literal values, not expressions.If you want to use expressions, you can use transposed parameters in any business API to set default values dynamically. - **threadId**: '00000000-0000-0000-0000-000000000000' - **senderId**: '00000000-0000-0000-0000-000000000000' - **content**: 'text' - **sentAt**: new Date() - **moderationStatus**: normal ### Constant Properties `threadId` `senderId` `sentAt` Constant properties are defined to be immutable after creation, meaning they cannot be updated or changed once set. They are typically used for properties that should remain constant throughout the object's lifecycle. A property is set to be constant if the `Allow Update` option is set to `false`. ### Auto Update Properties `content` `readByIds` `moderationStatus` `flaggedReason` `adminAction` An update crud API created with the option `Auto Params` enabled will automatically update these properties with the provided values in the request body. If you want to update any property in your own business logic not by user input, you can set the `Allow Auto Update` option to false. These properties will be added to the update API's body parameters and can be updated by the user if any value is provided in the request body. ### Enum Properties Enum properties are defined with a set of allowed values, ensuring that only valid options can be assigned to them. The enum options value will be stored as strings in the database, but when a data object is created an addtional property with the same name plus an idx suffix will be created, which will hold the index of the selected enum option. You can use the index property to sort by the enum value or when your enum options represent a sequence of values. - **moderationStatus**: [normal, flagged, removed] ### Elastic Search Indexing `threadId` `senderId` `sentAt` `readByIds` `moderationStatus` Properties that are indexed in Elastic Search will be searchable via the Elastic Search API. While all properties are stored in the elastic search index of the data object, only those marked for Elastic Search indexing will be available for search queries. ### Database Indexing `threadId` `senderId` `sentAt` `moderationStatus` Properties that are indexed in the database will be optimized for query performance, allowing for faster data retrieval. Make a property indexed in the database if you want to use it frequently in query filters or sorting. ### Relation Properties `threadId` `senderId` `readByIds` Mindbricks supports relations between data objects, allowing you to define how objects are linked together. You can define relations in the data object properties, which will be used to create foreign key constraints in the database. For complex joins operations, Mindbricks supportsa BFF pattern, where you can view dynamic and static views based on Elastic Search Indexes. Use db level relations for simple one-to-one or one-to-many relationships, and use BFF views for complex joins that require multiple data objects to be joined together. - **threadId**: ID Relation to `messageThread`.id The target object is a parent object, meaning that the relation is a one-to-many relationship from target to this object. On Delete: Set Null Required: Yes - **senderId**: ID Relation to `user`.id The target object is a parent object, meaning that the relation is a one-to-many relationship from target to this object. On Delete: Set Null Required: Yes - **readByIds**: ID Relation to `user`.id The target object is a parent object, meaning that the relation is a one-to-many relationship from target to this object. On Delete: Set Null Required: No ### Session Data Properties `senderId` Session data properties are used to store data that is specific to the user session, allowing for personalized experiences and temporary data storage. If a property is configured as session data, it will be automatically mapped to the related field in the user session during CRUD operations. Note that session data properties can not be mutated by the user, but only by the system. - **senderId**: ID property will be mapped to the session parameter `userId`. This property is also used to store the owner of the session data, allowing for ownership checks and access control. ### Formula Properties `sentAt` Formula properties are used to define calculated fields that derive their values from other properties or external data. These properties are automatically calculated based on the defined formula and can be used for dynamic data retrieval. - **sentAt**: Date - Formula: `new Date()` - Calculate After Instance: No ### Filter Properties `threadId` `moderationStatus` Filter properties are used to define parameters that can be used in query filters, allowing for dynamic data retrieval based on user input or predefined criteria. These properties are automatically mapped as API parameters in the listing API's that have "Auto Params" enabled. - **threadId**: ID has a filter named `threadId` - **moderationStatus**: Enum has a filter named `moderationStatus` ## Business Logic messagingCenter has got 9 Business APIs to manage its internal and crud logic. For the details of each business API refer to its chapter. * [Create Messagethread](/businessLogic/createmessagethread) * [Get Messagethread](/businessLogic/getmessagethread) * [List Messagethreads](/businessLogic/listmessagethreads) * [Update Messagethread](/businessLogic/updatemessagethread) * [Create Message](/businessLogic/createmessage) * [Get Message](/businessLogic/getmessage) * [List Messages](/businessLogic/listmessages) * [Update Message](/businessLogic/updatemessage) * [Delete Message](/businessLogic/deletemessage) ## Service Library ### Functions #### validateParticipantsCount.js ```js module.exports = function validateParticipantsCount(participantIds,isGroup) { if (!Array.isArray(participantIds)) return false; const uniqueCount = new Set(participantIds).size; if (isGroup) { return uniqueCount >= 2; } else { return uniqueCount === 2; } }; ``` #### isThreadAccessibleByUser.js ```js module.exports = function isThreadAccessibleByUser(threadOrThreadCtx,session) { if(!threadOrThreadCtx||!session||!session.userId) return false; if(['superAdmin','admin'].includes(session.roleId)) return true; if(Array.isArray(threadOrThreadCtx.participantIds)) return threadOrThreadCtx.participantIds.includes(session.userId); return false; }; ``` #### canUpdateThread.js ```js module.exports = function canUpdateThread(apiContext,session,thread) { if(!session||!thread) return false; if(['superAdmin','admin'].includes(session.roleId)) return true; if(thread.createdBy===session.userId) return true; if(Array.isArray(thread.participantIds)&&thread.participantIds.includes(session.userId)){ // Only allow subject/threadStatus update for participants return true; } return false; }; ``` #### isMessageSendAllowed.js ```js module.exports = function isMessageSendAllowed(userId,thread) { if(!thread||!userId) return false; if(Array.isArray(thread.participantIds)){ return thread.participantIds.includes(userId); } return false; }; ``` #### canUpdateMessage.js ```js module.exports = function canUpdateMessage(session,msgInstance,updateInput) { if(!session||!msgInstance) return false; const isAdmin = ['superAdmin','admin'].includes(session.roleId); const upFields = Object.keys(updateInput||{}); // Only admin can update moderationStatus, flaggedReason, adminAction if( upFields.some(f=>['moderationStatus','flaggedReason','adminAction'].includes(f)) && !isAdmin )return false; // Only sender can update content if not flagged/removed if(upFields.includes('content')) { if(msgInstance.senderId===session.userId && ['normal'].includes(msgInstance.moderationStatus)){ return true; } return false; } return isAdmin; // allow if admin }; ``` #### canDeleteMessage.js ```js module.exports = function canDeleteMessage(session,msgInstance) { if(!session||!msgInstance) return false; if(['superAdmin','admin'].includes(session.roleId)) return true; if(msgInstance.senderId===session.userId && ['normal'].includes(msgInstance.moderationStatus)){ return true; } return false; }; ``` --- *This document was generated from the service architecture definition and should be kept in sync with implementation changes.*