@ambushsoftworks/nestjs-auth-graphql 0.1.3

package/dist/strategies/jwt.strategy.js

@@ -0,0 +1,45 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtStrategy = void 0;
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_jwt_1 = require("passport-jwt");
+const auth_service_1 = require("../services/auth.service");
+const auth_module_1 = require("../auth.module");
+let JwtStrategy = class JwtStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy) {
+    constructor(options, authService) {
+        super({
+            jwtFromRequest: passport_jwt_1.ExtractJwt.fromAuthHeaderAsBearerToken(),
+            ignoreExpiration: false,
+            secretOrKey: options.jwtSecret,
+        });
+        this.options = options;
+        this.authService = authService;
+    }
+    async validate(payload) {
+        const user = await this.authService.validateUser(payload);
+        if (!user) {
+            throw new common_1.UnauthorizedException('Invalid token');
+        }
+        return user;
+    }
+};
+exports.JwtStrategy = JwtStrategy;
+exports.JwtStrategy = JwtStrategy = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(auth_module_1.AUTH_MODULE_OPTIONS)),
+    __metadata("design:paramtypes", [Object, auth_service_1.AuthService])
+], JwtStrategy);
+//# sourceMappingURL=jwt.strategy.js.map

package/dist/strategies/jwt.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.strategy.js","sourceRoot":"","sources":["../../src/strategies/jwt.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA2E;AAC3E,+CAAoD;AACpD,+CAAoD;AACpD,2DAAuD;AAGvD,gDAAwE;AAGjE,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,uBAAQ,CAAC;IACzD,YACuC,OAA0B,EACvD,WAAwB;QAEhC,KAAK,CAAC;YACJ,cAAc,EAAE,yBAAU,CAAC,2BAA2B,EAAE;YACxD,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,OAAO,CAAC,SAAS;SAC/B,CAAC,CAAC;QAPkC,YAAO,GAAP,OAAO,CAAmB;QACvD,gBAAW,GAAX,WAAW,CAAa;IAOlC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAmB;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAE1D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AArBY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,iCAAmB,CAAC,CAAA;6CACP,0BAAW;GAHvB,WAAW,CAqBvB"}

package/dist/utils/provider-helpers.d.ts

@@ -0,0 +1,12 @@
+export type SocialProvider = 'google' | 'facebook' | 'apple';
+export type ProviderIdField = 'googleId' | 'facebookId' | 'appleId';
+export interface UserAuthFields {
+    passwordHash: string | null;
+    googleId: string | null;
+    facebookId: string | null;
+    appleId: string | null;
+}
+export declare function getProviderField(provider: SocialProvider): ProviderIdField;
+export declare function hasOtherAuthMethods(user: UserAuthFields, excludeProvider: SocialProvider): boolean;
+export declare function countAuthMethods(user: UserAuthFields): number;
+//# sourceMappingURL=provider-helpers.d.ts.map

package/dist/utils/provider-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-helpers.d.ts","sourceRoot":"","sources":["../../src/utils/provider-helpers.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;AAC7D,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC;AAKpE,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAWD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,eAAe,CAO1E;AAYD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,cAAc,EACpB,eAAe,EAAE,cAAc,GAC9B,OAAO,CAUT;AAQD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAS7D"}

package/dist/utils/provider-helpers.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getProviderField = getProviderField;
+exports.hasOtherAuthMethods = hasOtherAuthMethods;
+exports.countAuthMethods = countAuthMethods;
+function getProviderField(provider) {
+    const mapping = {
+        google: 'googleId',
+        facebook: 'facebookId',
+        apple: 'appleId',
+    };
+    return mapping[provider];
+}
+function hasOtherAuthMethods(user, excludeProvider) {
+    const hasPassword = user.passwordHash != null && user.passwordHash.length > 0;
+    const hasGoogle = excludeProvider !== 'google' && user.googleId != null;
+    const hasFacebook = excludeProvider !== 'facebook' && user.facebookId != null;
+    const hasApple = excludeProvider !== 'apple' && user.appleId != null;
+    return hasPassword || hasGoogle || hasFacebook || hasApple;
+}
+function countAuthMethods(user) {
+    let count = 0;
+    if (user.passwordHash != null && user.passwordHash.length > 0)
+        count++;
+    if (user.googleId != null)
+        count++;
+    if (user.facebookId != null)
+        count++;
+    if (user.appleId != null)
+        count++;
+    return count;
+}
+//# sourceMappingURL=provider-helpers.js.map

package/dist/utils/provider-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-helpers.js","sourceRoot":"","sources":["../../src/utils/provider-helpers.ts"],"names":[],"mappings":";;AA0BA,4CAOC;AAYD,kDAaC;AAQD,4CASC;AAjDD,SAAgB,gBAAgB,CAAC,QAAwB;IACvD,MAAM,OAAO,GAA4C;QACvD,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,YAAY;QACtB,KAAK,EAAE,SAAS;KACjB,CAAC;IACF,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAYD,SAAgB,mBAAmB,CACjC,IAAoB,EACpB,eAA+B;IAG/B,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAG9E,MAAM,SAAS,GAAG,eAAe,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACxE,MAAM,WAAW,GAAG,eAAe,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IAC9E,MAAM,QAAQ,GAAG,eAAe,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IAErE,OAAO,WAAW,IAAI,SAAS,IAAI,WAAW,IAAI,QAAQ,CAAC;AAC7D,CAAC;AAQD,SAAgB,gBAAgB,CAAC,IAAoB;IACnD,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,EAAE,CAAC;IACvE,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI;QAAE,KAAK,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI;QAAE,KAAK,EAAE,CAAC;IACrC,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI;QAAE,KAAK,EAAE,CAAC;IAElC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -0,0 +1,109 @@
+{
+  "name": "@ambushsoftworks/nestjs-auth-graphql",
+  "version": "0.1.3",
+  "description": "Production-grade authentication package for NestJS with GraphQL, supporting JWT, OAuth, email/SMS verification, and biometric auth",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "build:watch": "tsc --watch",
+    "test": "jest",
+    "test:watch": "jest --watch",
+    "test:cov": "jest --coverage",
+    "lint": "eslint \"{src,tests}/**/*.ts\" --fix",
+    "format": "prettier --write \"src/**/*.ts\" \"tests/**/*.ts\"",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "nestjs",
+    "graphql",
+    "authentication",
+    "jwt",
+    "oauth",
+    "email-verification",
+    "sms-verification",
+    "biometric",
+    "social-login",
+    "google-oauth",
+    "facebook-oauth",
+    "refresh-token",
+    "brute-force-protection"
+  ],
+  "author": "Ambush Softworks",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://gitlab.com/ambushworks/nestjs-auth-graphql.git"
+  },
+  "peerDependencies": {
+    "@nestjs/common": "^10.0.0",
+    "@nestjs/config": "^3.0.0",
+    "@nestjs/core": "^10.0.0",
+    "@nestjs/graphql": "^12.0.0",
+    "@nestjs/jwt": "^10.0.0",
+    "@nestjs/passport": "^10.0.0",
+    "@nestjs/throttler": "^6.0.0",
+    "graphql": "^16.0.0",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.0",
+    "reflect-metadata": "^0.2.0",
+    "rxjs": "^7.0.0"
+  },
+  "dependencies": {
+    "@sendgrid/mail": "^8.1.6",
+    "bcrypt": "^5.1.1",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.14.1",
+    "google-auth-library": "^10.5.0",
+    "libphonenumber-js": "^1.12.26",
+    "passport-google-oauth20": "^2.0.0",
+    "twilio": "^5.10.4"
+  },
+  "devDependencies": {
+    "@nestjs/cli": "^10.3.0",
+    "@nestjs/config": "^3.3.0",
+    "@nestjs/testing": "^10.3.1",
+    "@nestjs/throttler": "^6.4.0",
+    "@types/bcrypt": "^5.0.2",
+    "@types/jest": "^29.5.11",
+    "@types/node": "^20.11.5",
+    "@types/passport-google-oauth20": "^2.0.17",
+    "@types/passport-jwt": "^4.0.0",
+    "@typescript-eslint/eslint-plugin": "^6.19.0",
+    "@typescript-eslint/parser": "^6.19.0",
+    "eslint": "^8.56.0",
+    "eslint-config-prettier": "^9.1.0",
+    "eslint-plugin-prettier": "^5.1.3",
+    "graphql": "^16.12.0",
+    "jest": "^29.7.0",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.1",
+    "prettier": "^3.2.4",
+    "reflect-metadata": "^0.2.2",
+    "rxjs": "^7.8.2",
+    "ts-jest": "^29.1.1",
+    "typescript": "^5.3.3"
+  },
+  "jest": {
+    "moduleFileExtensions": [
+      "js",
+      "json",
+      "ts"
+    ],
+    "rootDir": "src",
+    "testRegex": ".*\\.spec\\.ts$",
+    "transform": {
+      "^.+\\.(t|j)s$": "ts-jest"
+    },
+    "collectCoverageFrom": [
+      "**/*.(t|j)s"
+    ],
+    "coverageDirectory": "../coverage",
+    "testEnvironment": "node"
+  }
+}