@ackplus/nest-auth 1.1.1 → 1.1.2

package/src/lib/auth/services/client-config.service.d.ts

@@ -0,0 +1,12 @@
+import { AuthConfigService } from '../../core/services/auth-config.service';
+import { TenantService } from '../../tenant/services/tenant.service';
+import { ClientConfigResponseDto } from '../dto/responses/client-config.response.dto';
+export declare class ClientConfigService {
+    private readonly authConfig;
+    private readonly tenantService;
+    constructor(authConfig: AuthConfigService, tenantService: TenantService);
+    getClientConfig(): Promise<ClientConfigResponseDto>;
+    private fetchTenants;
+    private resolveDefaultTenantId;
+}
+//# sourceMappingURL=client-config.service.d.ts.map

package/src/lib/auth/services/client-config.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-config.service.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/services/client-config.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAEtF,qBACa,mBAAmB;IAExB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa;gBADb,UAAU,EAAE,iBAAiB,EAC7B,aAAa,EAAE,aAAa;IAG3C,eAAe,IAAI,OAAO,CAAC,uBAAuB,CAAC;YA4G3C,YAAY;YAoBZ,sBAAsB;CAgBvC"}

package/src/lib/auth/services/{client-config.service.ts → client-config.service.js}

@@ -1,20 +1,19 @@
-import { Injectable } from '@nestjs/common';
-import { AuthConfigService } from '../../core/services/auth-config.service';
-import { TenantService } from '../../tenant/services/tenant.service';
-import { ClientConfigResponseDto } from '../dto/responses/client-config.response.dto';
-
-@Injectable()
-export class ClientConfigService {
-    constructor(
-        private readonly authConfig: AuthConfigService,
-        private readonly tenantService: TenantService,
-    ) { }
-
-    async getClientConfig(): Promise<ClientConfigResponseDto> {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientConfigService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const auth_config_service_1 = require("../../core/services/auth-config.service");
+const tenant_service_1 = require("../../tenant/services/tenant.service");
+let ClientConfigService = class ClientConfigService {
+    constructor(authConfig, tenantService) {
+        this.authConfig = authConfig;
+        this.tenantService = tenantService;
+    }
+    async getClientConfig() {
         const config = this.authConfig.getConfig();
         const tenants = await this.fetchTenants();
         const defaultTenantId = await this.resolveDefaultTenantId(config.defaultTenant);
-
         // Build SSO providers
         const ssoProviders = [];
         if (config.google) {
@@ -25,7 +24,6 @@ export class ClientConfigService {
             googleAuthUrl.searchParams.set('scope', 'openid email profile');
             googleAuthUrl.searchParams.set('access_type', 'offline');
             googleAuthUrl.searchParams.set('prompt', 'consent');
-
             ssoProviders.push({
                 id: 'google',
                 name: 'Google',
@@ -41,7 +39,6 @@ export class ClientConfigService {
             facebookAuthUrl.searchParams.set('redirect_uri', config.facebook.redirectUri);
             facebookAuthUrl.searchParams.set('scope', 'email');
             facebookAuthUrl.searchParams.set('response_type', 'code');
-
             ssoProviders.push({
                 id: 'facebook',
                 name: 'Facebook',
@@ -65,7 +62,6 @@ export class ClientConfigService {
             githubAuthUrl.searchParams.set('redirect_uri', config.github.redirectUri);
             githubAuthUrl.searchParams.set('scope', 'user:email');
             githubAuthUrl.searchParams.set('response_type', 'code');
-
             ssoProviders.push({
                 id: 'github',
                 name: 'GitHub',
@@ -75,9 +71,8 @@ export class ClientConfigService {
                 authorizationUrl: githubAuthUrl.toString(),
             });
         }
-
         // Build default config
-        const defaultConfig: ClientConfigResponseDto = {
+        const defaultConfig = {
             emailAuth: {
                 enabled: config.emailAuth?.enabled ?? false,
             },
@@ -105,7 +100,6 @@ export class ClientConfigService {
                 providers: ssoProviders,
             },
         };
-
         // Allow customization via factory function
         if (config.clientConfig?.factory) {
             const customized = await config.clientConfig.factory(defaultConfig, {
@@ -114,17 +108,14 @@ export class ClientConfigService {
             });
             return customized ?? defaultConfig;
         }
-
         return defaultConfig;
     }
-
-    private async fetchTenants(): Promise<Array<{ id: string; name: string; slug: string; isActive: boolean; metadata?: Record<string, any> }>> {
+    async fetchTenants() {
         try {
             const tenants = await this.tenantService.getTenants({
                 select: ['id', 'name', 'slug', 'metadata', 'isActive'],
                 order: { name: 'ASC' },
             });
-
             return tenants.map((tenant) => ({
                 id: tenant.id,
                 name: tenant.name,
@@ -132,26 +123,30 @@ export class ClientConfigService {
                 metadata: tenant.metadata ?? {},
                 isActive: tenant.isActive,
             }));
-        } catch (error) {
+        }
+        catch (error) {
             // Return empty array if tenant service fails (e.g., in single-tenant mode)
             return [];
         }
     }
-
-    private async resolveDefaultTenantId(
-        options?: { slug?: string; domain?: string },
-    ): Promise<string | null> {
+    async resolveDefaultTenantId(options) {
         if (!options?.slug && !options?.domain) {
             return null;
         }
-
         try {
             const tenant = options.slug
                 ? await this.tenantService.getTenantBySlug(options.slug)
-                : await this.tenantService.getTenantByDomain(options.domain!);
+                : await this.tenantService.getTenantByDomain(options.domain);
             return tenant?.id ?? null;
-        } catch (error) {
+        }
+        catch (error) {
             return null;
         }
     }
-}
+};
+exports.ClientConfigService = ClientConfigService;
+exports.ClientConfigService = ClientConfigService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [auth_config_service_1.AuthConfigService,
+        tenant_service_1.TenantService])
+], ClientConfigService);

package/src/lib/auth/services/cookie.service.d.ts

@@ -0,0 +1,10 @@
+import { Response } from 'express';
+export declare class CookieService {
+    private options;
+    constructor();
+    setAccessTokenCookie(response: Response, token: string): void;
+    setRefreshTokenCookie(response: Response, token: string): void;
+    clearCookies(response: Response): void;
+    setTokens(response: Response, accessToken: string, refreshToken: string): void;
+}
+//# sourceMappingURL=cookie.service.d.ts.map

package/src/lib/auth/services/cookie.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.service.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/services/cookie.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAMnC,qBACa,aAAa;IACtB,OAAO,CAAC,OAAO,CAAoB;;IAMnC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAS7D,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAS9D,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAKtC,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;CAIjF"}

package/src/lib/auth/services/cookie.service.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CookieService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const auth_constants_1 = require("../../auth.constants");
+const ms_1 = tslib_1.__importDefault(require("ms"));
+const auth_config_service_1 = require("../../core/services/auth-config.service");
+let CookieService = class CookieService {
+    constructor() {
+        this.options = auth_config_service_1.AuthConfigService.getOptions();
+    }
+    setAccessTokenCookie(response, token) {
+        response.cookie(auth_constants_1.ACCESS_TOKEN_COOKIE_NAME, token, {
+            httpOnly: true,
+            secure: this.options.cookieOptions.secure,
+            sameSite: this.options.cookieOptions.sameSite,
+            maxAge: (0, ms_1.default)(this.options.session.sessionExpiry),
+        });
+    }
+    setRefreshTokenCookie(response, token) {
+        response.cookie(auth_constants_1.REFRESH_TOKEN_COOKIE_NAME, token, {
+            httpOnly: true,
+            secure: this.options.cookieOptions.secure,
+            sameSite: this.options.cookieOptions.sameSite,
+            maxAge: (0, ms_1.default)(this.options.session.refreshTokenExpiry),
+        });
+    }
+    clearCookies(response) {
+        response.clearCookie(auth_constants_1.ACCESS_TOKEN_COOKIE_NAME);
+        response.clearCookie(auth_constants_1.REFRESH_TOKEN_COOKIE_NAME);
+    }
+    setTokens(response, accessToken, refreshToken) {
+        this.setAccessTokenCookie(response, accessToken);
+        this.setRefreshTokenCookie(response, refreshToken);
+    }
+};
+exports.CookieService = CookieService;
+exports.CookieService = CookieService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [])
+], CookieService);

package/src/lib/auth/services/mfa.service.d.ts

@@ -0,0 +1,45 @@
+import { Repository } from 'typeorm';
+import { NestAuthMFASecret } from '../../auth/entities/mfa-secret.entity';
+import { MFAMethodEnum, MFAOptions } from '../../core/interfaces/mfa-options.interface';
+import { NestAuthUser } from '../../user/entities/user.entity';
+import { NestAuthOTP } from '../../auth/entities/otp.entity';
+export declare class MfaService {
+    private mfaSecretRepository;
+    private userRepository;
+    private otpRepository;
+    mfaConfig: MFAOptions;
+    constructor(mfaSecretRepository: Repository<NestAuthMFASecret>, userRepository: Repository<NestAuthUser>, otpRepository: Repository<NestAuthOTP>);
+    requireMfaEnabledForApp(throwError?: boolean): boolean;
+    private checkIsMfaEnabledForApp;
+    getVerifiedMethods(userId: string): Promise<MFAMethodEnum[]>;
+    getEnabledMethods(userId: string): Promise<MFAMethodEnum[]>;
+    sendMfaCode(userId: string, method: MFAMethodEnum): Promise<boolean>;
+    verifyMfa(userId: string, inputOtp: string, method: MFAMethodEnum): Promise<boolean>;
+    setupTotpDevice(userId: string, deviceName?: string): Promise<{
+        secret: string;
+        qrCode: string;
+    }>;
+    verifyTotpSetup(userId: string, secret: string, inputOtp: string): Promise<boolean>;
+    getTotpDevices(userId: string): Promise<{
+        id: string;
+        deviceName: string;
+        method: MFAMethodEnum;
+        lastUsedAt: Date;
+        createdAt: Date;
+        verified: boolean;
+    }[]>;
+    removeDevice(deviceId: string): Promise<void>;
+    isRequiresMfa(userId: string): Promise<boolean>;
+    isMfaEnabled(userId: string): Promise<boolean>;
+    markAsVerified(userId: string, deviceId: string): Promise<void>;
+    enableMFA(userId: string): Promise<void>;
+    disableMFA(userId: string): Promise<void>;
+    removeTotpDevice(deviceId: string): Promise<void>;
+    generateRecoveryCode(userId: string): Promise<string>;
+    resetMfa(userId: string, code: string): Promise<{
+        message: string;
+    }>;
+    getAvailableMethods(): MFAMethodEnum[];
+    hasRecoveryCode(userId: string): Promise<boolean>;
+}
+//# sourceMappingURL=mfa.service.d.ts.map

package/src/lib/auth/services/mfa.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.service.d.ts","sourceRoot":"","sources":["../../../../../../../packages/nest-auth/src/lib/auth/services/mfa.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAY,UAAU,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAG1E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,6CAA6C,CAAC;AAExF,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAO7D,qBACa,UAAU;IAMf,OAAO,CAAC,mBAAmB;IAG3B,OAAO,CAAC,cAAc;IAGtB,OAAO,CAAC,aAAa;IAVzB,SAAS,EAAE,UAAU,CAAA;gBAIT,mBAAmB,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAGlD,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,EAGxC,aAAa,EAAE,UAAU,CAAC,WAAW,CAAC;IAKlD,uBAAuB,CAAC,UAAU,GAAE,OAAc;IAUlD,OAAO,CAAC,uBAAuB;IAIzB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAiC5D,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAmC3D,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;IAyBpE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;IAmDpF,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAqBjG,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA6BnF,cAAc,CAAC,MAAM,EAAE,MAAM;;;;;;;;IAmB7B,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7C,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgB/C,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAW9C,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/D,SAAS,CAAC,MAAM,EAAE,MAAM;IAexB,UAAU,CAAC,MAAM,EAAE,MAAM;IASzB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjD,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUrD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IA6B1E,mBAAmB,IAAI,aAAa,EAAE;IAOhC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAY1D"}