nis2-agile/public/js/api.js

/**
 * NIS2 Agile - API Client
 *
 * Client JavaScript per comunicare con il backend REST API.
 */

class NIS2API {
    constructor(baseUrl = '/nis2/api') {
        this.baseUrl = baseUrl;
        this.token = localStorage.getItem('nis2_access_token');
        this.refreshToken = localStorage.getItem('nis2_refresh_token');
        this.orgId = localStorage.getItem('nis2_org_id');
    }

    // ═══════════════════════════════════════════════════════════════════
    // HTTP Methods
    // ═══════════════════════════════════════════════════════════════════

    async request(method, endpoint, data = null, options = {}) {
        const url = `${this.baseUrl}${endpoint}`;
        const headers = {
            'Content-Type': 'application/json',
        };

        if (this.token) {
            headers['Authorization'] = `Bearer ${this.token}`;
        }

        if (this.orgId) {
            headers['X-Organization-Id'] = this.orgId;
        }

        const config = { method, headers };

        if (data && (method === 'POST' || method === 'PUT')) {
            config.body = JSON.stringify(data);
        }

        try {
            const response = await fetch(url, config);
            const json = await response.json();

            // Token expired - try refresh
            if (response.status === 401 && this.refreshToken && !options._isRetry) {
                const refreshed = await this.doRefreshToken();
                if (refreshed) {
                    return this.request(method, endpoint, data, { ...options, _isRetry: true });
                }
            }

            if (!json.success && !options.silent) {
                console.error(`[API] ${method} ${endpoint}:`, json.message);
            }

            return json;
        } catch (error) {
            console.error(`[API] Network error: ${method} ${endpoint}`, error);
            return { success: false, message: 'Errore di connessione al server' };
        }
    }

    get(endpoint) { return this.request('GET', endpoint); }
    post(endpoint, data) { return this.request('POST', endpoint, data); }
    put(endpoint, data) { return this.request('PUT', endpoint, data); }
    del(endpoint) { return this.request('DELETE', endpoint); }

    // ═══════════════════════════════════════════════════════════════════
    // Auth
    // ═══════════════════════════════════════════════════════════════════

    async login(email, password) {
        const result = await this.post('/auth/login', { email, password });
        if (result.success) {
            this.setTokens(result.data.access_token, result.data.refresh_token);
            if (result.data.organizations && result.data.organizations.length > 0) {
                const primary = result.data.organizations.find(o => o.is_primary) || result.data.organizations[0];
                this.setOrganization(primary.organization_id);
            }
        }
        return result;
    }

    async register(email, password, fullName) {
        const result = await this.post('/auth/register', { email, password, full_name: fullName });
        if (result.success) {
            this.setTokens(result.data.access_token, result.data.refresh_token);
        }
        return result;
    }

    async doRefreshToken() {
        try {
            const result = await this.post('/auth/refresh', { refresh_token: this.refreshToken });
            if (result.success) {
                this.setTokens(result.data.access_token, result.data.refresh_token);
                return true;
            }
        } catch (e) { /* ignore */ }
        this.logout();
        return false;
    }

    logout() {
        this.post('/auth/logout', {}).catch(() => {});
        this.clearTokens();
        window.location.href = '/nis2/login.html';
    }

    getMe() { return this.get('/auth/me'); }

    setTokens(access, refresh) {
        this.token = access;
        this.refreshToken = refresh;
        localStorage.setItem('nis2_access_token', access);
        localStorage.setItem('nis2_refresh_token', refresh);
    }

    clearTokens() {
        this.token = null;
        this.refreshToken = null;
        this.orgId = null;
        localStorage.removeItem('nis2_access_token');
        localStorage.removeItem('nis2_refresh_token');
        localStorage.removeItem('nis2_org_id');
    }

    setOrganization(orgId) {
        this.orgId = orgId;
        localStorage.setItem('nis2_org_id', orgId);
    }

    isAuthenticated() {
        return !!this.token;
    }

    // ═══════════════════════════════════════════════════════════════════
    // Organizations
    // ═══════════════════════════════════════════════════════════════════

    createOrganization(data) { return this.post('/organizations/create', data); }
    getCurrentOrg() { return this.get('/organizations/current'); }
    listOrganizations() { return this.get('/organizations/list'); }
    updateOrganization(id, data) { return this.put(`/organizations/${id}`, data); }
    classifyEntity(data) { return this.post('/organizations/classify', data); }

    // ═══════════════════════════════════════════════════════════════════
    // Assessments
    // ═══════════════════════════════════════════════════════════════════

    listAssessments() { return this.get('/assessments/list'); }
    createAssessment(data) { return this.post('/assessments/create', data); }
    getAssessment(id) { return this.get(`/assessments/${id}`); }
    getAssessmentQuestions(id) { return this.get(`/assessments/${id}/questions`); }
    saveAssessmentResponse(id, data) { return this.post(`/assessments/${id}/respond`, data); }
    completeAssessment(id) { return this.post(`/assessments/${id}/complete`, {}); }
    getAssessmentReport(id) { return this.get(`/assessments/${id}/report`); }
    aiAnalyzeAssessment(id) { return this.post(`/assessments/${id}/ai-analyze`, {}); }

    // ═══════════════════════════════════════════════════════════════════
    // Dashboard
    // ═══════════════════════════════════════════════════════════════════

    getDashboardOverview() { return this.get('/dashboard/overview'); }
    getComplianceScore() { return this.get('/dashboard/compliance-score'); }
    getUpcomingDeadlines() { return this.get('/dashboard/upcoming-deadlines'); }
    getRecentActivity() { return this.get('/dashboard/recent-activity'); }
    getRiskHeatmap() { return this.get('/dashboard/risk-heatmap'); }

    // ═══════════════════════════════════════════════════════════════════
    // Risks
    // ═══════════════════════════════════════════════════════════════════

    listRisks(params = {}) { return this.get('/risks/list?' + new URLSearchParams(params)); }
    createRisk(data) { return this.post('/risks/create', data); }
    getRisk(id) { return this.get(`/risks/${id}`); }
    updateRisk(id, data) { return this.put(`/risks/${id}`, data); }
    deleteRisk(id) { return this.del(`/risks/${id}`); }
    getRiskMatrix() { return this.get('/risks/matrix'); }
    aiSuggestRisks() { return this.post('/risks/ai-suggest', {}); }

    // ═══════════════════════════════════════════════════════════════════
    // Incidents
    // ═══════════════════════════════════════════════════════════════════

    listIncidents(params = {}) { return this.get('/incidents/list?' + new URLSearchParams(params)); }
    createIncident(data) { return this.post('/incidents/create', data); }
    getIncident(id) { return this.get(`/incidents/${id}`); }
    updateIncident(id, data) { return this.put(`/incidents/${id}`, data); }
    sendEarlyWarning(id) { return this.post(`/incidents/${id}/early-warning`, {}); }
    sendNotification(id) { return this.post(`/incidents/${id}/notification`, {}); }
    sendFinalReport(id) { return this.post(`/incidents/${id}/final-report`, {}); }

    // ═══════════════════════════════════════════════════════════════════
    // Policies
    // ═══════════════════════════════════════════════════════════════════

    listPolicies(params = {}) { return this.get('/policies/list?' + new URLSearchParams(params)); }
    createPolicy(data) { return this.post('/policies/create', data); }
    getPolicy(id) { return this.get(`/policies/${id}`); }
    updatePolicy(id, data) { return this.put(`/policies/${id}`, data); }
    approvePolicy(id) { return this.post(`/policies/${id}/approve`, {}); }
    aiGeneratePolicy(category) { return this.post('/policies/ai-generate', { category }); }
    getPolicyTemplates() { return this.get('/policies/templates'); }

    // ═══════════════════════════════════════════════════════════════════
    // Supply Chain
    // ═══════════════════════════════════════════════════════════════════

    listSuppliers() { return this.get('/supply-chain/list'); }
    createSupplier(data) { return this.post('/supply-chain/create', data); }
    getSupplier(id) { return this.get(`/supply-chain/${id}`); }
    updateSupplier(id, data) { return this.put(`/supply-chain/${id}`, data); }
    assessSupplier(id, data) { return this.post(`/supply-chain/${id}/assess`, data); }

    // ═══════════════════════════════════════════════════════════════════
    // Training
    // ═══════════════════════════════════════════════════════════════════

    listCourses() { return this.get('/training/courses'); }
    getMyTraining() { return this.get('/training/assignments'); }
    getTrainingCompliance() { return this.get('/training/compliance-status'); }

    // ═══════════════════════════════════════════════════════════════════
    // Assets
    // ═══════════════════════════════════════════════════════════════════

    listAssets(params = {}) { return this.get('/assets/list?' + new URLSearchParams(params)); }
    createAsset(data) { return this.post('/assets/create', data); }
    getAsset(id) { return this.get(`/assets/${id}`); }
    updateAsset(id, data) { return this.put(`/assets/${id}`, data); }

    // ═══════════════════════════════════════════════════════════════════
    // Audit
    // ═══════════════════════════════════════════════════════════════════

    listControls() { return this.get('/audit/controls'); }
    updateControl(id, data) { return this.put(`/audit/controls/${id}`, data); }
    generateComplianceReport() { return this.get('/audit/report'); }
    getAuditLogs(params = {}) { return this.get('/audit/logs?' + new URLSearchParams(params)); }
    getIsoMapping() { return this.get('/audit/iso27001-mapping'); }
}

// Singleton globale
const api = new NIS2API();