@ambushsoftworks/nestjs-auth-graphql 0.9.1 → 0.11.0

package/dist/strategies/jwt.strategy.js

@@ -11,6 +11,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
+var JwtStrategy_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.JwtStrategy = void 0;
 const common_1 = require("@nestjs/common");
@@ -19,15 +20,12 @@ const passport_jwt_1 = require("passport-jwt");
 const auth_service_1 = require("../services/auth.service");
 const default_jwt_payload_factory_1 = require("../services/default-jwt-payload-factory");
 const constants_1 = require("../constants");
+const cookies_1 = require("../utils/cookies");
+const realm_middleware_1 = require("../middleware/realm.middleware");
 function fromCookie(cookieName) {
-    return (req) => {
-        if (req && req.cookies && req.cookies[cookieName]) {
-            return req.cookies[cookieName];
-        }
-        return null;
-    };
+    return (req) => (0, cookies_1.readCookie)(req, cookieName);
 }
-let JwtStrategy = class JwtStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy) {
+let JwtStrategy = JwtStrategy_1 = class JwtStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy) {
     constructor(options, authService, jwtPayloadFactory) {
         const bearerExtractor = passport_jwt_1.ExtractJwt.fromAuthHeaderAsBearerToken();
         const cookieAuthEnabled = options.features?.cookieAuth === true;
@@ -45,13 +43,19 @@ let JwtStrategy = class JwtStrategy extends (0, passport_1.PassportStrategy)(pas
             passReqToCallback: true,
         });
         this.authService = authService;
+        this.logger = new common_1.Logger(JwtStrategy_1.name);
         this.jwtValidation = options.jwtValidation || 'full';
         this.jwtPayloadFactory = jwtPayloadFactory || new default_jwt_payload_factory_1.DefaultJwtPayloadFactory();
-        this.realmsEnabled = !!options.realmExtractorInstance;
+        this.realmExtractor = options.realmExtractorInstance;
+        this.realmSkip = options.realm?.skip;
     }
     async validate(req, payload) {
-        if (this.realmsEnabled) {
-            const requestRealm = req._realm;
+        if (this.realmExtractor) {
+            const request = req;
+            if (request._realm === undefined) {
+                await (0, realm_middleware_1.resolveRealm)(request, this.realmExtractor, this.realmSkip, this.logger);
+            }
+            const requestRealm = request._realm;
             const tokenRealm = payload.realm;
             if (!tokenRealm || tokenRealm !== requestRealm) {
                 throw new common_1.UnauthorizedException('Invalid token');
@@ -69,7 +73,7 @@ let JwtStrategy = class JwtStrategy extends (0, passport_1.PassportStrategy)(pas
     }
 };
 exports.JwtStrategy = JwtStrategy;
-exports.JwtStrategy = JwtStrategy = __decorate([
+exports.JwtStrategy = JwtStrategy = JwtStrategy_1 = __decorate([
     (0, common_1.Injectable)(),
     __param(0, (0, common_1.Inject)(constants_1.AUTH_MODULE_OPTIONS)),
     __param(2, (0, common_1.Optional)()),

package/dist/strategies/jwt.strategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.strategy.js","sourceRoot":"","sources":["../../src/strategies/jwt.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAqF;AACrF,+CAAoD;AACpD,+CAAoD;AAEpD,2DAAuD;AAIvD,yFAAmF;AACnF,4CAAwE;AAQxE,SAAS,UAAU,CAAC,UAAkB;IACpC,OAAO,CAAC,GAAY,EAAiB,EAAE;QACrC,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,CAAW,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAGM,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,uBAAQ,CAAC;IAKzD,YAC+B,OAA0B,EAC/C,WAAwB,EAGhC,iBAAsC;QAEtC,MAAM,eAAe,GAAG,yBAAU,CAAC,2BAA2B,EAAE,CAAC;QAIjE,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,KAAK,IAAI,CAAC;QAChE,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,eAAe,IAAI,cAAc,CAAC;QAGzE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,aAAa;YAC9C,CAAC,CAAC,UAAU,cAAc,EAAE;YAC5B,CAAC,CAAC,cAAc,CAAC;QAEnB,MAAM,YAAY,GAAG,iBAAiB;YACpC,CAAC,CAAC,yBAAU,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC,CAAC;YACtE,CAAC,CAAC,eAAe,CAAC;QAEpB,KAAK,CAAC;YACJ,cAAc,EAAE,YAAY;YAC5B,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,OAAO,CAAC,SAAS;YAC9B,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QA1BK,gBAAW,GAAX,WAAW,CAAa;QA4BhC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC;QACrD,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,IAAI,IAAI,sDAAwB,EAAE,CAAC;QAC7E,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY,EAAE,OAAmB;QAE9C,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,YAAY,GAAI,GAA2B,CAAC,MAAM,CAAC;YACzD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;YACjC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAC/C,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAKD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAE7D,IAAI,IAAI,CAAC,aAAa,KAAK,cAAc,EAAE,CAAC;YAI1C,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9C,CAAC;QAKD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAE9E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAzEY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAOR,WAAA,IAAA,eAAM,EAAC,+BAAmB,CAAC,CAAA;IAE3B,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,+BAAmB,CAAC,CAAA;6CAFP,0BAAW;GAPvB,WAAW,CAyEvB"}
+{"version":3,"file":"jwt.strategy.js","sourceRoot":"","sources":["../../src/strategies/jwt.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA6F;AAC7F,+CAAoD;AACpD,+CAAoD;AAEpD,2DAAuD;AAKvD,yFAAmF;AACnF,4CAAwE;AAGxE,8CAA8C;AAC9C,qEAA8D;AAO9D,SAAS,UAAU,CAAC,UAAkB;IACpC,OAAO,CAAC,GAAY,EAAiB,EAAE,CAAC,IAAA,oBAAU,EAAC,GAAqC,EAAE,UAAU,CAAC,CAAC;AACxG,CAAC;AAGM,IAAM,WAAW,mBAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,uBAAQ,CAAC;IAOzD,YAC+B,OAA0B,EAC/C,WAAwB,EAGhC,iBAAsC;QAEtC,MAAM,eAAe,GAAG,yBAAU,CAAC,2BAA2B,EAAE,CAAC;QAIjE,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,KAAK,IAAI,CAAC;QAChE,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,eAAe,IAAI,cAAc,CAAC;QAGzE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,aAAa;YAC9C,CAAC,CAAC,UAAU,cAAc,EAAE;YAC5B,CAAC,CAAC,cAAc,CAAC;QAEnB,MAAM,YAAY,GAAG,iBAAiB;YACpC,CAAC,CAAC,yBAAU,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC,CAAC;YACtE,CAAC,CAAC,eAAe,CAAC;QAEpB,KAAK,CAAC;YACJ,cAAc,EAAE,YAAY;YAC5B,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,OAAO,CAAC,SAAS;YAC9B,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QA1BK,gBAAW,GAAX,WAAW,CAAa;QARjB,WAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;QAoCrD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC;QACrD,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,IAAI,IAAI,sDAAwB,EAAE,CAAC;QAC7E,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC;QACrD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY,EAAE,OAAmB;QAE9C,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,GAAqC,CAAC;YAQtD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAA,+BAAY,EAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChF,CAAC;YAED,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;YACpC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;YACjC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAC/C,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAKD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAE7D,IAAI,IAAI,CAAC,aAAa,KAAK,cAAc,EAAE,CAAC;YAI1C,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9C,CAAC;QAKD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAE9E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAxFY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IASR,WAAA,IAAA,eAAM,EAAC,+BAAmB,CAAC,CAAA;IAE3B,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,+BAAmB,CAAC,CAAA;6CAFP,0BAAW;GATvB,WAAW,CAwFvB"}

package/dist/strategies/noop-facebook.strategy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"noop-facebook.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/noop-facebook.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAiB3D,qBACa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAY1D,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;CAUxE"}
+{"version":3,"file":"noop-facebook.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/noop-facebook.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAkB3D,qBACa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAY1D,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;CAQxE"}

package/dist/strategies/noop-facebook.strategy.js

@@ -9,6 +9,7 @@ var NoOpFacebookStrategy_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NoOpFacebookStrategy = void 0;
 const common_1 = require("@nestjs/common");
+const oauth_exceptions_1 = require("../exceptions/oauth.exceptions");
 let NoOpFacebookStrategy = NoOpFacebookStrategy_1 = class NoOpFacebookStrategy {
     constructor() {
         this.logger = new common_1.Logger(NoOpFacebookStrategy_1.name);
@@ -16,7 +17,7 @@ let NoOpFacebookStrategy = NoOpFacebookStrategy_1 = class NoOpFacebookStrategy {
     async verifyAccessToken(_accessToken) {
         this.logger.warn('[NoOpFacebookStrategy] Attempted to verify Facebook access token, but Facebook OAuth is not configured. ' +
             'Configure oauth.facebook.clientId and clientSecret in AuthModuleOptions to enable Facebook Login.');
-        throw new Error('Facebook OAuth not configured. Please provide oauth.facebook.clientId and clientSecret in AuthModuleOptions.');
+        throw new oauth_exceptions_1.OAuthProviderNotConfiguredException('facebook');
     }
 };
 exports.NoOpFacebookStrategy = NoOpFacebookStrategy;

package/dist/strategies/noop-facebook.strategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"noop-facebook.strategy.js","sourceRoot":"","sources":["../../src/strategies/noop-facebook.strategy.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAoD;AAmB7C,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAA1B;QACY,WAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAsBlE,CAAC;IAVC,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0GAA0G;YACxG,mGAAmG,CACtG,CAAC;QAEF,MAAM,IAAI,KAAK,CACb,8GAA8G,CAC/G,CAAC;IACJ,CAAC;CACF,CAAA;AAvBY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;GACA,oBAAoB,CAuBhC"}
+{"version":3,"file":"noop-facebook.strategy.js","sourceRoot":"","sources":["../../src/strategies/noop-facebook.strategy.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAoD;AAEpD,qEAAqF;AAkB9E,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAA1B;QACY,WAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAoBlE,CAAC;IARC,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0GAA0G;YACxG,mGAAmG,CACtG,CAAC;QAEF,MAAM,IAAI,sDAAmC,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC;CACF,CAAA;AArBY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;GACA,oBAAoB,CAqBhC"}

package/dist/strategies/noop-google.strategy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"noop-google.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/noop-google.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAiBvD,qBACa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAYxD,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAU9D"}
+{"version":3,"file":"noop-google.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/noop-google.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAkBvD,qBACa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAYxD,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAQ9D"}

package/dist/strategies/noop-google.strategy.js

@@ -9,6 +9,7 @@ var NoOpGoogleStrategy_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NoOpGoogleStrategy = void 0;
 const common_1 = require("@nestjs/common");
+const oauth_exceptions_1 = require("../exceptions/oauth.exceptions");
 let NoOpGoogleStrategy = NoOpGoogleStrategy_1 = class NoOpGoogleStrategy {
     constructor() {
         this.logger = new common_1.Logger(NoOpGoogleStrategy_1.name);
@@ -16,7 +17,7 @@ let NoOpGoogleStrategy = NoOpGoogleStrategy_1 = class NoOpGoogleStrategy {
     async verifyIdToken(_idToken) {
         this.logger.warn('[NoOpGoogleStrategy] Attempted to verify Google ID token, but Google OAuth is not configured. ' +
             'Configure oauth.google.clientId in AuthModuleOptions to enable Google Sign-In.');
-        throw new Error('Google OAuth not configured. Please provide oauth.google.clientId in AuthModuleOptions.');
+        throw new oauth_exceptions_1.OAuthProviderNotConfiguredException('google');
     }
 };
 exports.NoOpGoogleStrategy = NoOpGoogleStrategy;

package/dist/strategies/noop-google.strategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"noop-google.strategy.js","sourceRoot":"","sources":["../../src/strategies/noop-google.strategy.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAoD;AAmB7C,IAAM,kBAAkB,0BAAxB,MAAM,kBAAkB;IAAxB;QACY,WAAM,GAAG,IAAI,eAAM,CAAC,oBAAkB,CAAC,IAAI,CAAC,CAAC;IAsBhE,CAAC;IAVC,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gGAAgG;YAC9F,gFAAgF,CACnF,CAAC;QAEF,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;CACF,CAAA;AAvBY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;GACA,kBAAkB,CAuB9B"}
+{"version":3,"file":"noop-google.strategy.js","sourceRoot":"","sources":["../../src/strategies/noop-google.strategy.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAoD;AAEpD,qEAAqF;AAkB9E,IAAM,kBAAkB,0BAAxB,MAAM,kBAAkB;IAAxB;QACY,WAAM,GAAG,IAAI,eAAM,CAAC,oBAAkB,CAAC,IAAI,CAAC,CAAC;IAoBhE,CAAC;IARC,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gGAAgG;YAC9F,gFAAgF,CACnF,CAAC;QAEF,MAAM,IAAI,sDAAmC,CAAC,QAAQ,CAAC,CAAC;IAC1D,CAAC;CACF,CAAA;AArBY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;GACA,kBAAkB,CAqB9B"}

package/dist/test-utils/execution-contexts.d.ts

@@ -0,0 +1,7 @@
+import { ExecutionContext } from '@nestjs/common';
+type Operation = 'query' | 'mutation' | 'subscription';
+export declare function httpExecutionContext(request: unknown): ExecutionContext;
+export declare function graphqlExecutionContext(gqlContext: unknown, operation?: Operation, operationName?: string): ExecutionContext;
+export declare function graphqlWsConnection(upgradeRequest: Record<string, any>): Record<string, any>;
+export {};
+//# sourceMappingURL=execution-contexts.d.ts.map

package/dist/test-utils/execution-contexts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-contexts.d.ts","sourceRoot":"","sources":["../../src/test-utils/execution-contexts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,KAAK,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,cAAc,CAAC;AAMvD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAUvE;AAMD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,OAAO,EACnB,SAAS,GAAE,SAAmB,EAC9B,aAAa,CAAC,EAAE,MAAM,GACrB,gBAAgB,CAalB;AAMD,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAQ5F"}

package/dist/test-utils/execution-contexts.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.httpExecutionContext = httpExecutionContext;
+exports.graphqlExecutionContext = graphqlExecutionContext;
+exports.graphqlWsConnection = graphqlWsConnection;
+const handler = () => undefined;
+class Resolver {
+}
+function httpExecutionContext(request) {
+    const args = [request, {}, () => undefined];
+    return {
+        getType: () => 'http',
+        getArgs: () => args,
+        getArgByIndex: (index) => args[index],
+        getHandler: () => handler,
+        getClass: () => Resolver,
+        switchToHttp: () => ({ getRequest: () => request }),
+    };
+}
+function graphqlExecutionContext(gqlContext, operation = 'query', operationName) {
+    const info = { operation: { operation, name: operationName ? { value: operationName } : undefined } };
+    const args = [{}, {}, gqlContext, info];
+    return {
+        getType: () => 'graphql',
+        getArgs: () => args,
+        getArgByIndex: (index) => args[index],
+        getHandler: () => handler,
+        getClass: () => Resolver,
+        switchToHttp: () => ({ getRequest: () => args[0], getResponse: () => args[1], getNext: () => args[2] }),
+    };
+}
+function graphqlWsConnection(upgradeRequest) {
+    return {
+        connectionInitReceived: true,
+        acknowledged: true,
+        subscriptions: {},
+        extra: { socket: {}, request: upgradeRequest },
+        connectionParams: {},
+    };
+}
+//# sourceMappingURL=execution-contexts.js.map

package/dist/test-utils/execution-contexts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-contexts.js","sourceRoot":"","sources":["../../src/test-utils/execution-contexts.ts"],"names":[],"mappings":";;AAQA,oDAUC;AAMD,0DAiBC;AAMD,kDAQC;AAnDD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC;AAChC,MAAM,QAAQ;CAAG;AAGjB,SAAgB,oBAAoB,CAAC,OAAgB;IACnD,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM;QACrB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;QACnB,aAAa,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7C,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;QACxB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;KACrB,CAAC;AACnC,CAAC;AAMD,SAAgB,uBAAuB,CACrC,UAAmB,EACnB,YAAuB,OAAO,EAC9B,aAAsB;IAEtB,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;IACtG,MAAM,IAAI,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACxC,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;QACnB,aAAa,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7C,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;QAGxB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;AACnC,CAAC;AAMD,SAAgB,mBAAmB,CAAC,cAAmC;IACrE,OAAO;QACL,sBAAsB,EAAE,IAAI;QAC5B,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,EAAE;QACjB,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;QAC9C,gBAAgB,EAAE,EAAE;KACrB,CAAC;AACJ,CAAC"}

package/dist/utils/cookies.d.ts

@@ -0,0 +1,2 @@
+export declare function readCookie(request: Record<string, any> | undefined, name: string): string | null;
+//# sourceMappingURL=cookies.d.ts.map

package/dist/utils/cookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/utils/cookies.ts"],"names":[],"mappings":"AAiBA,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiChG"}

package/dist/utils/cookies.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readCookie = readCookie;
+function readCookie(request, name) {
+    const parsed = request?.cookies?.[name];
+    if (typeof parsed === 'string' && parsed !== '') {
+        return parsed;
+    }
+    const header = request?.headers?.cookie;
+    if (typeof header !== 'string') {
+        return null;
+    }
+    for (const pair of header.split(';')) {
+        const separator = pair.indexOf('=');
+        if (separator === -1 || pair.slice(0, separator).trim() !== name) {
+            continue;
+        }
+        let value = pair.slice(separator + 1).trim();
+        if (value.length >= 2 && value.startsWith('"') && value.endsWith('"')) {
+            value = value.slice(1, -1);
+        }
+        if (value === '') {
+            return null;
+        }
+        try {
+            return decodeURIComponent(value);
+        }
+        catch {
+            return value;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=cookies.js.map

package/dist/utils/cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../src/utils/cookies.ts"],"names":[],"mappings":";;AAiBA,gCAiCC;AAjCD,SAAgB,UAAU,CAAC,OAAwC,EAAE,IAAY;IAC/E,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACjE,SAAS;QACX,CAAC;QAED,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/utils/execution-context.d.ts

@@ -1,3 +1,5 @@
 import { ExecutionContext } from '@nestjs/common';
-export declare function getRequestFromContext(context: ExecutionContext): Record<string, any>;
+export declare function getRequestFromContext(context: ExecutionContext): Record<string, any> | undefined;
+export declare function isWebSocketContext(context: ExecutionContext): boolean;
+export declare function requireRequestFromContext(context: ExecutionContext): Record<string, any>;
 //# sourceMappingURL=execution-context.d.ts.map

package/dist/utils/execution-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../src/utils/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAOlD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAMpF"}
+{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../src/utils/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAiC,MAAM,gBAAgB,CAAC;AAoBjF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAchG;AASD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAYrE;AAWD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAexF"}

package/dist/utils/execution-context.js

@@ -1,12 +1,47 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getRequestFromContext = getRequestFromContext;
+exports.isWebSocketContext = isWebSocketContext;
+exports.requireRequestFromContext = requireRequestFromContext;
+const common_1 = require("@nestjs/common");
 const graphql_1 = require("@nestjs/graphql");
 function getRequestFromContext(context) {
-    const contextType = context.getType();
-    if (contextType === 'graphql') {
-        return graphql_1.GqlExecutionContext.create(context).getContext().req;
+    if (context.getType() !== 'graphql') {
+        return context.switchToHttp().getRequest();
     }
-    return context.switchToHttp().getRequest();
+    const gqlContext = graphql_1.GqlExecutionContext.create(context).getContext();
+    const req = gqlContext?.req;
+    if (req && !isGraphqlWsContext(req)) {
+        return req;
+    }
+    return gqlContext?.extra?.request ?? req?.extra?.request ?? undefined;
+}
+function isWebSocketContext(context) {
+    if (context.getType() !== 'graphql') {
+        return false;
+    }
+    const gqlExecutionContext = graphql_1.GqlExecutionContext.create(context);
+    const req = gqlExecutionContext.getContext()?.req;
+    if (req && !isGraphqlWsContext(req)) {
+        return false;
+    }
+    return gqlExecutionContext.getInfo()?.operation?.operation === 'subscription';
+}
+let warnedMissingRequest = false;
+function requireRequestFromContext(context) {
+    const request = getRequestFromContext(context);
+    if (request) {
+        return request;
+    }
+    if (!warnedMissingRequest) {
+        warnedMissingRequest = true;
+        new common_1.Logger('AuthGuard').warn('An auth guard found no request in the execution context and rejected the operation. ' +
+            'For GraphQL subscriptions on your own graphql-ws server, pass the connection context ' +
+            'through: useServer({ schema, context: (ctx) => ctx }, wsServer).');
+    }
+    throw new common_1.UnauthorizedException();
+}
+function isGraphqlWsContext(value) {
+    return typeof value === 'object' && 'connectionInitReceived' in value && 'extra' in value;
 }
 //# sourceMappingURL=execution-context.js.map

package/dist/utils/execution-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../src/utils/execution-context.ts"],"names":[],"mappings":";;AAOA,sDAMC;AAZD,6CAAsD;AAMtD,SAAgB,qBAAqB,CAAC,OAAyB;IAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAU,CAAC;IAC9C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,6BAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../src/utils/execution-context.ts"],"names":[],"mappings":";;AAoBA,sDAcC;AASD,gDAYC;AAWD,8DAeC;AAjFD,2CAAiF;AACjF,6CAAsD;AAmBtD,SAAgB,qBAAqB,CAAC,OAAyB;IAC7D,IAAI,OAAO,CAAC,OAAO,EAAU,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,UAAU,GAAG,6BAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;IACpE,MAAM,GAAG,GAAG,UAAU,EAAE,GAAG,CAAC;IAG5B,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,UAAU,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,EAAE,KAAK,EAAE,OAAO,IAAI,SAAS,CAAC;AACxE,CAAC;AASD,SAAgB,kBAAkB,CAAC,OAAyB;IAC1D,IAAI,OAAO,CAAC,OAAO,EAAU,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,mBAAmB,GAAG,6BAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,mBAAmB,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC;IAClD,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,mBAAmB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,KAAK,cAAc,CAAC;AAChF,CAAC;AAED,IAAI,oBAAoB,GAAG,KAAK,CAAC;AASjC,SAAgB,yBAAyB,CAAC,OAAyB;IACjE,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,oBAAoB,GAAG,IAAI,CAAC;QAC5B,IAAI,eAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAC1B,sFAAsF;YACpF,uFAAuF;YACvF,kEAAkE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,8BAAqB,EAAE,CAAC;AACpC,CAAC;AAGD,SAAS,kBAAkB,CAAC,KAA0B;IACpD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,IAAI,KAAK,IAAI,OAAO,IAAI,KAAK,CAAC;AAC5F,CAAC"}

package/dist/utils/request-realm.d.ts

@@ -0,0 +1,2 @@
+export declare function realmForRequest(request: Record<string, any> | undefined, realmsEnabled: boolean): string | undefined;
+//# sourceMappingURL=request-realm.d.ts.map

package/dist/utils/request-realm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-realm.d.ts","sourceRoot":"","sources":["../../src/utils/request-realm.ts"],"names":[],"mappings":"AAaA,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,EACxC,aAAa,EAAE,OAAO,GACrB,MAAM,GAAG,SAAS,CAQpB"}

package/dist/utils/request-realm.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.realmForRequest = realmForRequest;
+const common_1 = require("@nestjs/common");
+function realmForRequest(request, realmsEnabled) {
+    const realm = request?._realm;
+    if (realmsEnabled && (realm === undefined || realm === null)) {
+        throw new common_1.BadRequestException('Realm required');
+    }
+    return realm;
+}
+//# sourceMappingURL=request-realm.js.map

package/dist/utils/request-realm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-realm.js","sourceRoot":"","sources":["../../src/utils/request-realm.ts"],"names":[],"mappings":";;AAaA,0CAWC;AAxBD,2CAAqD;AAarD,SAAgB,eAAe,CAC7B,OAAwC,EACxC,aAAsB;IAEtB,MAAM,KAAK,GAAG,OAAO,EAAE,MAAM,CAAC;IAE9B,IAAI,aAAa,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ambushsoftworks/nestjs-auth-graphql",
-  "version": "0.9.1",
+  "version": "0.11.0",
   "description": "Production-grade authentication package for NestJS with GraphQL, supporting JWT, OAuth, email/SMS verification, and biometric auth",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -18,10 +18,12 @@
     "test": "jest",
     "test:watch": "jest --watch",
     "test:cov": "jest --coverage",
-    "lint": "eslint \"src/**/*.ts\"",
+    "pretest:e2e": "npm run build",
+    "test:e2e": "jest --config test/e2e/jest.config.js --runInBand",
+    "lint": "eslint \"{src,test}/**/*.ts\"",
     "format": "prettier --write \"src/**/*.ts\" \"tests/**/*.ts\"",
     "prepublishOnly": "npm run build",
-    "lint:fix": "eslint \"src/**/*.ts\" --fix"
+    "lint:fix": "eslint \"{src,test}/**/*.ts\" --fix"
   },
   "keywords": [
     "nestjs",
@@ -75,8 +77,11 @@
     "twilio": "^5.10.4"
   },
   "devDependencies": {
+    "@apollo/server": "^4.13.0",
+    "@nestjs/apollo": "^12.2.2",
     "@nestjs/cli": "^10.3.0",
     "@nestjs/config": "^3.3.0",
+    "@nestjs/platform-express": "^10.4.22",
     "@nestjs/testing": "^10.3.1",
     "@nestjs/throttler": "^6.4.0",
     "@types/bcrypt": "^6.0.0",
@@ -84,18 +89,22 @@
     "@types/node": "^20.11.5",
     "@types/passport-google-oauth20": "^2.0.17",
     "@types/passport-jwt": "^4.0.0",
+    "@types/supertest": "^7.2.1",
     "@typescript-eslint/eslint-plugin": "^6.19.0",
     "@typescript-eslint/parser": "^6.19.0",
     "eslint": "^8.56.0",
     "eslint-config-prettier": "^9.1.0",
     "eslint-plugin-prettier": "^5.1.3",
     "graphql": "^16.12.0",
+    "graphql-ws": "^5.16.2",
     "jest": "^29.7.0",
     "prettier": "^3.2.4",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.8.2",
+    "supertest": "^7.2.2",
     "ts-jest": "^29.1.1",
-    "typescript": "^5.3.3"
+    "typescript": "^5.3.3",
+    "ws": "^8.21.3"
   },
   "jest": {
     "moduleFileExtensions": [