@anarchitects/auth-nest 0.0.1 → 0.4.0

package/README.md

@@ -2,49 +2,208 @@
 
 NestJS services, controllers, and infrastructure for the Anarchitecture authentication domain. This package wires contract-driven DTOs from `@anarchitects/auth-ts`, orchestrates user lifecycle flows (registration, activation, login/logout, password management, email verification), and persists auth state through pluggable repositories.
 
+## Developer + AI Agent Start Here
+
+- Read this README before generating integration code for `@anarchitects/auth-nest`.
+- Start with `AuthModule.forRoot(...)` or `AuthModule.forRootFromConfig(...)` from the root entry point unless you need explicit layered composition.
+- Keep shared mail transport setup at app root via `@anarchitects/common-nest-mailer`; keep auth mailer infrastructure adapter-only.
+- Use DTO contracts from `@anarchitects/auth-ts` and preserve `presentation -> application <- infrastructure` boundaries.
+
 ## Features
 
-- Application layer (`JwtAuthService`, `BcryptHashService`, strategies) encapsulating business rules for tokens and password workflows.
-- Presentation controllers that expose REST handlers using shared DTOs.
-- Infrastructure persistence module (`PersistenceModule`) with TypeORM entities and repositories (users, roles, permissions, invalidated tokens).
-- Configurable persistence adapters to swap implementations while preserving the application contract.
+- **Application layer** – `JwtAuthService`, `BcryptHashService`, JWT Passport strategy, CASL-based `PoliciesService` and `AbilityFactory` encapsulating business rules for tokens, passwords, and fine-grained access control.
+- **Presentation layer** – `AuthController` exposing REST handlers for the full auth lifecycle, `PoliciesGuard` and `@Policies()` decorator for route-level authorization.
+- **Infrastructure persistence** – `PersistenceModule` with TypeORM entities and repositories (users, roles, permissions, invalidated tokens). Configurable adapters to swap implementations while preserving the application contract.
+- **Infrastructure mailer** – `AuthMailerModule` wrapper over shared `CommonMailerModule.forRoot(...)` provider wiring; `NodeMailerAdapter` is re-exported for compatibility.
+- **Config** – Typed `authConfig` namespace using `@nestjs/config` with an `InjectAuthConfig()` helper decorator.
 
 ## Installation
 
 ```bash
-npm install @anarchitects/auth-nest
+npm install @anarchitects/auth-nest @nestjs/common @nestjs/config @nestjs/core @nestjs/jwt @nestjs/passport @nestjs/platform-fastify @nestjs/typeorm typeorm
 # or
-yarn add @anarchitects/auth-nest
+yarn add @anarchitects/auth-nest @nestjs/common @nestjs/config @nestjs/core @nestjs/jwt @nestjs/passport @nestjs/platform-fastify @nestjs/typeorm typeorm
 ```
 
 Peer requirements:
 
-- `@nestjs/common`, `@nestjs/core`, `@nestjs/jwt`, `@nestjs/typeorm`
-- `@anarchitects/auth-ts` for DTOs and shared models
+- `@nestjs/common`, `@nestjs/core`, `@nestjs/jwt`, `@nestjs/typeorm`, `@nestjs/config`, `@nestjs/passport`
+- `@nestjs/platform-fastify`, `typeorm`
+
+The internal `@anarchitects/auth-ts` and `@anarchitects/common-nest-mailer` packages are installed transitively. Runtime utilities such as `@casl/ability`, `bcrypt`, and `passport-jwt` are direct dependencies of this package. Add `@nestjs-modules/mailer` only when your host app enables the shared/common mailer integration.
+
+## Exports
+
+| Import path                                          | Contents                                                                                                                                         |
+| ---------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `@anarchitects/auth-nest`                            | `AuthModule.forRoot(...)`, `AuthModule.forRootFromConfig(...)`, plus re-exports of layered entry points for convenience                          |
+| `@anarchitects/auth-nest/application`                | `AuthApplicationModule`, `AuthService`, `JwtAuthService`, `HashService`, `BcryptHashService`, `PoliciesService`, `AbilityFactory`, `JwtStrategy` |
+| `@anarchitects/auth-nest/presentation`               | `AuthPresentationModule`, `AuthController`, `PoliciesGuard`, `@Policies()` decorator                                                             |
+| `@anarchitects/auth-nest/infrastructure-persistence` | `AuthPersistenceModule`, `AuthUserRepository`, `TypeormAuthUserRepository`, migration                                                            |
+| `@anarchitects/auth-nest/infrastructure-mailer`      | `AuthMailerModule`, `NodeMailerAdapter`                                                                                                          |
+| `@anarchitects/auth-nest/config`                     | `authConfig`, `AuthConfig` type, `InjectAuthConfig()`                                                                                            |
+
+## Configuration
+
+The library reads configuration through `@nestjs/config` using a namespaced `authConfig` registered under the key `auth`. Set the following environment variables to customise behaviour:
+
+| Variable                    | Description                                                                          | Default                  |
+| --------------------------- | ------------------------------------------------------------------------------------ | ------------------------ |
+| `AUTH_JWT_SECRET`           | Secret key used to sign and verify JWTs. **Must** be overridden in production.       | `default_jwt_secret`     |
+| `AUTH_JWT_EXPIRATION`       | Token lifetime (e.g. `3600s`, `15m`, `1d`).                                          | `3600s`                  |
+| `AUTH_JWT_AUDIENCE`         | Expected `aud` claim in the JWT.                                                     | `your_audience`          |
+| `AUTH_JWT_ISSUER`           | Expected `iss` claim in the JWT.                                                     | `your_issuer`            |
+| `AUTH_ENCRYPTION_ALGORITHM` | Password hashing algorithm (`bcrypt`).                                               | `bcrypt`                 |
+| `AUTH_ENCRYPTION_KEY`       | Symmetric key for additional encryption needs. **Must** be overridden in production. | `default_encryption_key` |
+| `AUTH_PERSISTENCE`          | Persistence adapter key used by `forRootFromConfig(...)`.                            | `typeorm`                |
+| `AUTH_MAILER_PROVIDER`      | Domain mailer provider for `forRootFromConfig(...)` (`node` or `noop`).              | `node`                   |
+| `AUTH_STRATEGIES`           | Comma-separated auth strategies for config-driven module composition.                | `jwt`                    |
+
+> **Security note:** The defaults for `AUTH_JWT_SECRET` and `AUTH_ENCRYPTION_KEY` are intentionally insecure placeholders. Always provide strong, unique values in any deployed environment.
+
+### Injecting the config
+
+```ts
+import { InjectAuthConfig, AuthConfig } from '@anarchitects/auth-nest/config';
+
+@Injectable()
+export class MyService {
+  constructor(@InjectAuthConfig() private readonly config: AuthConfig) {}
+
+  someMethod() {
+    const secret = this.config.jwtSecret;
+  }
+}
+```
+
+Make sure to import `authConfig` into your module's `ConfigModule`:
+
+```ts
+import { ConfigModule } from '@nestjs/config';
+import { authConfig } from '@anarchitects/auth-nest/config';
+
+@Module({
+  imports: [ConfigModule.forRoot({ load: [authConfig] })],
+})
+export class AppModule {}
+```
 
 ## Usage
 
-### Importing modules
+### Easy mode (single facade import)
 
 ```ts
 import { Module } from '@nestjs/common';
-import { JwtModule } from '@nestjs/jwt';
-import { PersistenceModule } from '@anarchitects/auth-nest/infrastructure-persistence';
-import { PresentationModule } from '@anarchitects/auth-nest/presentation';
+import { ConfigModule } from '@nestjs/config';
+import {
+  CommonMailerModule,
+  mailerConfig,
+} from '@anarchitects/common-nest-mailer';
+import { AuthModule } from '@anarchitects/auth-nest';
+import { authConfig } from '@anarchitects/auth-nest/config';
 
 @Module({
   imports: [
-    JwtModule.register({
-      secret: process.env.JWT_SECRET,
-      signOptions: { expiresIn: '15m' },
+    ConfigModule.forRoot({
+      isGlobal: true,
+      load: [authConfig, mailerConfig],
+    }),
+    CommonMailerModule.forRootFromConfig(),
+    AuthModule.forRoot({
+      presentation: {
+        application: {
+          authStrategies: ['jwt'],
+          encryption: {
+            algorithm: 'bcrypt',
+            key: process.env.AUTH_ENCRYPTION_KEY!,
+          },
+          persistence: {
+            persistence: 'typeorm',
+          },
+        },
+      },
+      mailer: {
+        provider: 'node',
+      },
     }),
-    PersistenceModule.register({ persistence: 'typeorm' }),
-    PresentationModule,
   ],
 })
 export class AuthApiModule {}
 ```
 
+`AuthModule.forRoot(...)` is the preferred integration path when you want a full auth stack with minimal host-module wiring.
+
+Use `AuthModule.forRootFromConfig()` when you want module composition fully driven by `AUTH_*`
+variables exposed via `authConfig`.
+
+Disable domain mailer wiring when not needed:
+
+```ts
+AuthModule.forRoot({
+  presentation: { application: { ... } },
+  mailer: { provider: 'noop' },
+});
+```
+
+### Layered composition (advanced)
+
+```ts
+import { Module } from '@nestjs/common';
+import { ConfigModule } from '@nestjs/config';
+import {
+  CommonMailerModule,
+  mailerConfig,
+} from '@anarchitects/common-nest-mailer';
+import { authConfig } from '@anarchitects/auth-nest/config';
+import { AuthApplicationModule } from '@anarchitects/auth-nest/application';
+import { AuthPresentationModule } from '@anarchitects/auth-nest/presentation';
+import { AuthMailerModule } from '@anarchitects/auth-nest/infrastructure-mailer';
+
+@Module({
+  imports: [
+    ConfigModule.forRoot({
+      isGlobal: true,
+      load: [authConfig, mailerConfig],
+    }),
+    CommonMailerModule.forRootFromConfig(),
+    AuthApplicationModule.forRoot({
+      authStrategies: ['jwt'],
+      encryption: {
+        algorithm: 'bcrypt',
+        key: process.env.AUTH_ENCRYPTION_KEY!,
+      },
+      persistence: { persistence: 'typeorm' },
+    }),
+    AuthPresentationModule.forRoot({
+      application: {
+        authStrategies: ['jwt'],
+        encryption: {
+          algorithm: 'bcrypt',
+          key: process.env.AUTH_ENCRYPTION_KEY!,
+        },
+        persistence: { persistence: 'typeorm' },
+      },
+    }),
+    AuthMailerModule.forRoot({
+      provider: 'node',
+    }),
+  ],
+})
+export class AuthApiModule {}
+```
+
+Use layered composition when you need to replace or selectively compose infrastructure/application concerns.
+
+## Mailer Migration Note
+
+`AuthMailerModule` is now adapter-only. It wraps shared `CommonMailerModule.forRoot(...)`
+provider wiring from `@anarchitects/common-nest-mailer` and no longer configures transport with
+`MailerModule.forRootAsync(...)`.
+Configure transport once at app root with `CommonMailerModule`.
+Set `mailer.provider: 'noop'` to disable active delivery behavior per domain.
+The shared mailer DI contract (`MailerPort`) and concrete `NodeMailerAdapter` now live in
+`@anarchitects/common-nest-mailer`.
+
 ### Injecting services
 
 ```ts
@@ -68,9 +227,47 @@ export class AuthController {
 ```ts
 import { TypeormAuthUserRepository } from '@anarchitects/auth-nest/infrastructure-persistence';
 
-await authUserRepository.invalidateTokens([hashedAccessToken, hashedRefreshToken], userId);
+await authUserRepository.invalidateTokens(
+  [hashedAccessToken, hashedRefreshToken],
+  userId,
+);
+```
+
+### Route-level authorization with policies
+
+```ts
+import { Controller, Get, UseGuards } from '@nestjs/common';
+import { PoliciesGuard, Policies } from '@anarchitects/auth-nest/presentation';
+
+@Controller('admin')
+@UseGuards(PoliciesGuard)
+export class AdminController {
+  @Get()
+  @Policies({ action: 'manage', subject: 'User' })
+  getAdminDashboard() {
+    return { status: 'ok' };
+  }
+}
 ```
 
+## REST endpoints
+
+The `AuthController` exposes the following routes (all prefixed with `/auth`):
+
+| Method  | Path                            | Description                            |
+| ------- | ------------------------------- | -------------------------------------- |
+| `POST`  | `/auth/register`                | Register a new user                    |
+| `PATCH` | `/auth/activate`                | Activate a user account                |
+| `POST`  | `/auth/login`                   | Log in and receive JWT tokens          |
+| `POST`  | `/auth/logout`                  | Log out and invalidate tokens          |
+| `PATCH` | `/auth/change-password/:userId` | Change password for a user             |
+| `POST`  | `/auth/forgot-password`         | Request a password-reset email         |
+| `POST`  | `/auth/reset-password`          | Reset password with token              |
+| `POST`  | `/auth/verify-email`            | Verify an email address                |
+| `PATCH` | `/auth/update-email/:userId`    | Update email for a user                |
+| `POST`  | `/auth/refresh-tokens/:userId`  | Refresh access/refresh tokens          |
+| `GET`   | `/auth/me`                      | Get logged-in user info and RBAC rules |
+
 ## Nx scripts
 
 - `nx build auth-nest` – bundle the Nest library.
@@ -82,6 +279,8 @@ await authUserRepository.invalidateTokens([hashedAccessToken, hashedRefreshToken
 - DTO shapes live in `@anarchitects/auth-ts`; update the contract and regenerate DTOs before extending this library.
 - Default persistence is TypeORM with schema-qualified tables (see `libs/auth/nest/src/infrastructure-persistence`).
 - Invalidated tokens use an unlogged cache table for quick revocation lookups.
+- Route schemas are defined in `@anarchitects/auth-ts/dtos` and imported into controller `@RouteSchema` decorators — do not define inline schemas.
+- OpenAPI metadata (`operationId`, `tags`) is assigned in `tools/api-specs/route-metadata.ts`, not in controllers.
 
 ## License
 

package/package.json

@@ -1,25 +1,27 @@
 {
   "name": "@anarchitects/auth-nest",
-  "version": "0.0.1",
+  "version": "0.4.0",
   "type": "commonjs",
   "main": "./src/index.js",
   "types": "./src/index.d.ts",
   "dependencies": {
+    "@anarchitects/auth-ts": "^0.4.0",
+    "@anarchitects/common-nest-mailer": "^0.3.0",
+    "@casl/ability": "^6.7.3",
+    "bcrypt": "^6.0.0",
+    "passport-jwt": "^4.0.1",
     "tslib": "^2.3.0",
+    "uuidv7": "^1.0.2"
+  },
+  "peerDependencies": {
     "@nestjs/common": "^11.0.0",
+    "@nestjs/config": "^4.0.2",
+    "@nestjs/core": "^11.0.0",
     "@nestjs/jwt": "^11.0.1",
-    "@anarchitects/auth-ts": "0.0.1",
-    "bcrypt": "^6.0.0",
     "@nestjs/passport": "^11.0.5",
-    "passport-jwt": "^4.0.1",
-    "@nestjs/config": "^4.0.2",
-    "@nestjs-modules/mailer": "^2.0.2",
-    "typeorm": "^0.3.27",
-    "uuidv7": "^1.0.2",
-    "@nestjs/typeorm": "^11.0.0",
     "@nestjs/platform-fastify": "^11.1.6",
-    "@casl/ability": "^6.7.3",
-    "@nestjs/core": "^11.0.0"
+    "@nestjs/typeorm": "^11.0.0",
+    "typeorm": "^0.3.27"
   },
   "publishConfig": {
     "access": "public"
@@ -37,9 +39,21 @@
       ],
       "presentation": [
         "src/presentation/index.d.ts"
+      ],
+      "config": [
+        "src/config/index.d.ts"
       ]
     }
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/anarchitects/anarchitecture-bricks-3tier.git",
+    "directory": "libs/auth/nest"
+  },
+  "homepage": "https://github.com/anarchitects/anarchitecture-bricks-3tier/tree/main/libs/auth/nest",
+  "bugs": {
+    "url": "https://github.com/anarchitects/anarchitecture-bricks-3tier/issues"
+  },
   "exports": {
     "./package.json": "./package.json",
     ".": {
@@ -57,4 +71,4 @@
     "./config": "./src/config/index.js",
     "./config/index": "./src/config/index.js"
   }
-}
+}

package/src/application/application.module-definition.d.ts

@@ -1,25 +1,8 @@
-export declare const ConfigurableModuleClass: import("@nestjs/common").ConfigurableModuleCls<{
-    authStrategies: string[];
-    encryption: {
-        algorithm: "bcrypt" | "argon2";
-        key: string;
-    };
-}, "forRoot", "create", {
+import type { ResolvedAuthApplicationModuleOptions } from '../config';
+export declare const ConfigurableModuleClass: import("@nestjs/common").ConfigurableModuleCls<ResolvedAuthApplicationModuleOptions, "forRoot", "create", {
     isGlobal?: boolean;
-}>, AUTH_APPLICATION_MODULE_OPTIONS: string | symbol, OPTIONS_TYPE: {
-    authStrategies: string[];
-    encryption: {
-        algorithm: "bcrypt" | "argon2";
-        key: string;
-    };
-} & Partial<{
+}>, AUTH_APPLICATION_MODULE_OPTIONS: string | symbol, OPTIONS_TYPE: ResolvedAuthApplicationModuleOptions & Partial<{
     isGlobal?: boolean;
-}>, ASYNC_OPTIONS_TYPE: import("@nestjs/common").ConfigurableModuleAsyncOptions<{
-    authStrategies: string[];
-    encryption: {
-        algorithm: "bcrypt" | "argon2";
-        key: string;
-    };
-}, "create"> & Partial<{
+}>, ASYNC_OPTIONS_TYPE: import("@nestjs/common").ConfigurableModuleAsyncOptions<ResolvedAuthApplicationModuleOptions, "create"> & Partial<{
     isGlobal?: boolean;
 }>;

package/src/application/application.module-definition.js.map

@@ -1 +1 @@
-{"version":3,"file":"application.module-definition.js","sourceRoot":"","sources":["../../../../../../libs/auth/nest/src/application/application.module-definition.ts"],"names":[],"mappings":";;;;AAAA,2CAA2D;AAE9C,KAKT,IAAI,kCAAyB,EAG7B;KACD,kBAAkB,CAAC,SAAS,CAAC;KAC7B,SAAS,CACR,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,GAAG,UAAU;IACb,MAAM,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;CACjC,CAAC,CACH;KACA,KAAK,EAAE,EAhBR,+BAAuB,+BACD,uCAA+B,4BACrD,oBAAY,oBACZ,0BAAkB,yBAaT"}
+{"version":3,"file":"application.module-definition.js","sourceRoot":"","sources":["../../../../../../libs/auth/nest/src/application/application.module-definition.ts"],"names":[],"mappings":";;;;AAAA,2CAA2D;AAG9C,KAKT,IAAI,kCAAyB,EAAwC;KACtE,kBAAkB,CAAC,SAAS,CAAC;KAC7B,SAAS,CACR,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,GAAG,UAAU;IACb,MAAM,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;CACjC,CAAC,CACH;KACA,KAAK,EAAE,EAbR,+BAAuB,+BACD,uCAA+B,4BACrD,oBAAY,oBACZ,0BAAkB,yBAUT"}

package/src/application/application.module.d.ts

@@ -1,27 +1,7 @@
-import { AuthService } from './services/auth.service';
-import { JwtAuthService } from './services/jwt-auth.service';
-import { BcryptHashService } from './services/bcrypt-hash.service';
-import { ConfigurableModuleClass, OPTIONS_TYPE } from './application.module-definition';
-import { HashService } from './services/hash.service';
-import { AuthConfig } from '../config';
-import { JwtStrategy } from './strategies/jwt/strategy';
-import { PoliciesService } from './services/policies.service';
-export declare class ApplicationModule extends ConfigurableModuleClass {
-    private options;
-    private authConfig;
-    constructor(options: string | symbol, authConfig: AuthConfig);
-    static forRoot(options: typeof OPTIONS_TYPE): {
-        imports: import("@nestjs/common").DynamicModule[];
-        providers: (typeof JwtAuthService | typeof BcryptHashService | typeof JwtStrategy | typeof PoliciesService | {
-            provide: typeof HashService;
-            useExisting: typeof BcryptHashService;
-        } | {
-            provide: typeof AuthService;
-            useExisting: typeof JwtAuthService;
-        })[];
-        exports: (typeof AuthService | typeof HashService)[];
-        module: import("@nestjs/common").Type<any>;
-        global?: boolean;
-        controllers?: import("@nestjs/common").Type<any>[];
-    };
+import { DynamicModule } from '@nestjs/common';
+import { ConfigurableModuleClass } from './application.module-definition';
+import type { AuthApplicationModuleOptions } from '../config';
+export declare class AuthApplicationModule extends ConfigurableModuleClass {
+    static forRoot(options?: AuthApplicationModuleOptions): DynamicModule;
+    static forRootFromConfig(overrides?: AuthApplicationModuleOptions): DynamicModule;
 }

package/src/application/application.module.js

@@ -1,29 +1,31 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ApplicationModule = void 0;
+exports.AuthApplicationModule = void 0;
 const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const jwt_1 = require("@nestjs/jwt");
+const config_2 = require("../config");
+const application_module_definition_1 = require("./application.module-definition");
+const ability_factory_1 = require("./factories/ability.factory");
 const auth_service_1 = require("./services/auth.service");
-const jwt_auth_service_1 = require("./services/jwt-auth.service");
 const bcrypt_hash_service_1 = require("./services/bcrypt-hash.service");
-const application_module_definition_1 = require("./application.module-definition");
 const hash_service_1 = require("./services/hash.service");
-const jwt_1 = require("@nestjs/jwt");
-const config_1 = require("../config");
-const strategy_1 = require("./strategies/jwt/strategy");
+const jwt_auth_service_1 = require("./services/jwt-auth.service");
 const policies_service_1 = require("./services/policies.service");
-let ApplicationModule = class ApplicationModule extends application_module_definition_1.ConfigurableModuleClass {
-    constructor(options, authConfig) {
-        super();
-        this.options = options;
-        this.authConfig = authConfig;
-    }
-    static forRoot(options) {
-        const { authStrategies, encryption } = options;
-        const imports = [];
+const strategy_1 = require("./strategies/jwt/strategy");
+const infrastructure_persistence_1 = require("../infrastructure-persistence");
+let AuthApplicationModule = class AuthApplicationModule extends application_module_definition_1.ConfigurableModuleClass {
+    static forRoot(options = {}) {
+        const resolvedOptions = (0, config_2.resolveAuthApplicationModuleOptions)(options);
+        const { authStrategies, encryption, persistence } = resolvedOptions;
+        const imports = [
+            config_1.ConfigModule.forFeature(config_2.authConfig),
+            infrastructure_persistence_1.AuthPersistenceModule.forRoot(persistence),
+        ];
         const providers = [];
         const exports = [];
-        providers.push(policies_service_1.PoliciesService);
+        providers.push(ability_factory_1.AbilityFactory, policies_service_1.PoliciesService);
         switch (encryption.algorithm) {
             case 'bcrypt':
                 providers.push(bcrypt_hash_service_1.BcryptHashService, {
@@ -40,6 +42,8 @@ let ApplicationModule = class ApplicationModule extends application_module_defin
         }
         if (authStrategies.includes('jwt')) {
             imports.push(jwt_1.JwtModule.registerAsync({
+                imports: [config_1.ConfigModule.forFeature(config_2.authConfig)],
+                inject: [config_2.authConfig.KEY],
                 useFactory: (authConfig) => ({
                     secret: authConfig.jwtSecret,
                     signOptions: {
@@ -56,18 +60,37 @@ let ApplicationModule = class ApplicationModule extends application_module_defin
             exports.push(auth_service_1.AuthService);
         }
         return {
-            ...super.forRoot(options),
+            ...super.forRoot(resolvedOptions),
             imports,
             providers,
             exports,
         };
     }
+    static forRootFromConfig(overrides = {}) {
+        const configOptions = (0, config_2.mapAuthConfigToApplicationModuleOptions)((0, config_2.authConfig)());
+        const moduleDefinition = this.forRoot({
+            ...configOptions,
+            ...overrides,
+            encryption: {
+                ...configOptions.encryption,
+                ...overrides.encryption,
+            },
+            persistence: {
+                ...configOptions.persistence,
+                ...overrides.persistence,
+            },
+        });
+        return {
+            ...moduleDefinition,
+            imports: [
+                config_1.ConfigModule.forFeature(config_2.authConfig),
+                ...(moduleDefinition.imports ?? []),
+            ],
+        };
+    }
 };
-exports.ApplicationModule = ApplicationModule;
-exports.ApplicationModule = ApplicationModule = tslib_1.__decorate([
-    (0, common_1.Module)({}),
-    tslib_1.__param(0, (0, common_1.Inject)(application_module_definition_1.AUTH_APPLICATION_MODULE_OPTIONS)),
-    tslib_1.__param(1, (0, config_1.InjectAuthConfig)()),
-    tslib_1.__metadata("design:paramtypes", [Object, Object])
-], ApplicationModule);
+exports.AuthApplicationModule = AuthApplicationModule;
+exports.AuthApplicationModule = AuthApplicationModule = tslib_1.__decorate([
+    (0, common_1.Module)({})
+], AuthApplicationModule);
 //# sourceMappingURL=application.module.js.map

package/src/application/application.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"application.module.js","sourceRoot":"","sources":["../../../../../../libs/auth/nest/src/application/application.module.ts"],"names":[],"mappings":";;;;AAAA,2CAAgD;AAChD,0DAAsD;AACtD,kEAA6D;AAC7D,wEAAmE;AACnE,mFAIyC;AACzC,0DAAsD;AACtD,qCAAwC;AACxC,sCAAyD;AACzD,wDAAwD;AACxD,kEAA8D;AAGvD,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,uDAAuB;IAC5D,YACmD,OAAwB,EAC7C,UAAsB;QAElD,KAAK,EAAE,CAAC;QAHyC,YAAO,GAAP,OAAO,CAAiB;QAC7C,eAAU,GAAV,UAAU,CAAY;IAGpD,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,OAA4B;QACzC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/C,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,SAAS,CAAC,IAAI,CAAC,kCAAe,CAAC,CAAC;QAChC,QAAQ,UAAU,CAAC,SAAS,EAAE,CAAC;YAC7B,KAAK,QAAQ;gBACX,SAAS,CAAC,IAAI,CAAC,uCAAiB,EAAE;oBAChC,OAAO,EAAE,0BAAW;oBACpB,WAAW,EAAE,uCAAiB;iBAC/B,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,0BAAW,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,QAAQ;gBACX,gEAAgE;gBAChE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D;gBACE,MAAM,IAAI,KAAK,CACb,qCAAqC,UAAU,CAAC,SAAS,EAAE,CAC5D,CAAC;QACN,CAAC;QACD,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CACV,eAAS,CAAC,aAAa,CAAC;gBACtB,UAAU,EAAE,CAAC,UAAsB,EAAE,EAAE,CAAC,CAAC;oBACvC,MAAM,EAAE,UAAU,CAAC,SAAS;oBAC5B,WAAW,EAAE;wBACX,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,CAAC;wBACjD,QAAQ,EAAE,UAAU,CAAC,WAAW;wBAChC,MAAM,EAAE,UAAU,CAAC,SAAS;qBAC7B;iBACF,CAAC;aACH,CAAC,CACH,CAAC;YACF,SAAS,CAAC,IAAI,CAAC,iCAAc,EAAE,sBAAW,EAAE;gBAC1C,OAAO,EAAE,0BAAW;gBACpB,WAAW,EAAE,iCAAc;aAC5B,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,0BAAW,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO;YACL,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACzB,OAAO;YACP,SAAS;YACT,OAAO;SACR,CAAC;IACJ,CAAC;CACF,CAAA;AAxDY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,eAAM,EAAC,EAAE,CAAC;IAGN,mBAAA,IAAA,eAAM,EAAC,+DAA+B,CAAC,CAAA;IACvC,mBAAA,IAAA,yBAAgB,GAAE,CAAA;;GAHV,iBAAiB,CAwD7B"}
+{"version":3,"file":"application.module.js","sourceRoot":"","sources":["../../../../../../libs/auth/nest/src/application/application.module.ts"],"names":[],"mappings":";;;;AAAA,2CAAuD;AACvD,2CAA8C;AAC9C,qCAAwC;AACxC,sCAKmB;AACnB,mFAGyC;AACzC,iEAA6D;AAC7D,0DAAsD;AACtD,wEAAmE;AACnE,0DAAsD;AACtD,kEAA6D;AAC7D,kEAA8D;AAC9D,wDAAwD;AACxD,8EAAsE;AAI/D,IAAM,qBAAqB,GAA3B,MAAM,qBAAsB,SAAQ,uDAAuB;IAChE,MAAM,CAAC,OAAO,CAAC,UAAwC,EAAE;QACvD,MAAM,eAAe,GACnB,IAAA,4CAAmC,EAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC;QACpE,MAAM,OAAO,GAAG;YACd,qBAAY,CAAC,UAAU,CAAC,mBAAU,CAAC;YACnC,kDAAqB,CAAC,OAAO,CAAC,WAAW,CAAC;SAC3C,CAAC;QACF,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,SAAS,CAAC,IAAI,CAAC,gCAAc,EAAE,kCAAe,CAAC,CAAC;QAChD,QAAQ,UAAU,CAAC,SAAS,EAAE,CAAC;YAC7B,KAAK,QAAQ;gBACX,SAAS,CAAC,IAAI,CAAC,uCAAiB,EAAE;oBAChC,OAAO,EAAE,0BAAW;oBACpB,WAAW,EAAE,uCAAiB;iBAC/B,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,0BAAW,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,QAAQ;gBACX,gEAAgE;gBAChE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D;gBACE,MAAM,IAAI,KAAK,CACb,qCAAqC,UAAU,CAAC,SAAS,EAAE,CAC5D,CAAC;QACN,CAAC;QACD,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CACV,eAAS,CAAC,aAAa,CAAC;gBACtB,OAAO,EAAE,CAAC,qBAAY,CAAC,UAAU,CAAC,mBAAU,CAAC,CAAC;gBAC9C,MAAM,EAAE,CAAC,mBAAU,CAAC,GAAG,CAAC;gBACxB,UAAU,EAAE,CAAC,UAAsB,EAAE,EAAE,CAAC,CAAC;oBACvC,MAAM,EAAE,UAAU,CAAC,SAAS;oBAC5B,WAAW,EAAE;wBACX,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,CAAC;wBACjD,QAAQ,EAAE,UAAU,CAAC,WAAW;wBAChC,MAAM,EAAE,UAAU,CAAC,SAAS;qBAC7B;iBACF,CAAC;aACH,CAAC,CACH,CAAC;YACF,SAAS,CAAC,IAAI,CAAC,iCAAc,EAAE,sBAAW,EAAE;gBAC1C,OAAO,EAAE,0BAAW;gBACpB,WAAW,EAAE,iCAAc;aAC5B,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,0BAAW,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO;YACL,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;YACjC,OAAO;YACP,SAAS;YACT,OAAO;SACR,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,iBAAiB,CACtB,YAA0C,EAAE;QAE5C,MAAM,aAAa,GAAG,IAAA,gDAAuC,EAAC,IAAA,mBAAU,GAAE,CAAC,CAAC;QAC5E,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC;YACpC,GAAG,aAAa;YAChB,GAAG,SAAS;YACZ,UAAU,EAAE;gBACV,GAAG,aAAa,CAAC,UAAU;gBAC3B,GAAG,SAAS,CAAC,UAAU;aACxB;YACD,WAAW,EAAE;gBACX,GAAG,aAAa,CAAC,WAAW;gBAC5B,GAAG,SAAS,CAAC,WAAW;aACzB;SACF,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,gBAAgB;YACnB,OAAO,EAAE;gBACP,qBAAY,CAAC,UAAU,CAAC,mBAAU,CAAC;gBACnC,GAAG,CAAC,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC;aACpC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAlFY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,qBAAqB,CAkFjC"}

package/src/application/index.d.ts

@@ -6,3 +6,4 @@ export * from './services/bcrypt-hash.service';
 export * from './services/policies.service';
 export * from './strategies/jwt/strategy';
 export * from './factories/ability.factory';
+export type { AuthApplicationModuleOptions } from '../config';

package/src/auth.module.d.ts

@@ -0,0 +1,7 @@
+import { DynamicModule } from '@nestjs/common';
+import type { AuthModuleOptions } from './config';
+export type { AuthModuleFeatures, AuthModuleOptions } from './config';
+export declare class AuthModule {
+    static forRoot(options?: AuthModuleOptions): DynamicModule;
+    static forRootFromConfig(overrides?: AuthModuleOptions): DynamicModule;
+}

package/src/auth.module.js

@@ -0,0 +1,60 @@
+"use strict";
+var AuthModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthModule = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const infrastructure_mailer_1 = require("./infrastructure-mailer");
+const presentation_1 = require("./presentation");
+const config_2 = require("./config");
+let AuthModule = AuthModule_1 = class AuthModule {
+    static forRoot(options = {}) {
+        const presentationModule = presentation_1.AuthPresentationModule.forRoot(options.presentation);
+        const mailerModule = infrastructure_mailer_1.AuthMailerModule.forRoot(options.mailer);
+        return {
+            module: AuthModule_1,
+            imports: [presentationModule, mailerModule],
+            exports: [presentationModule, mailerModule],
+        };
+    }
+    static forRootFromConfig(overrides = {}) {
+        const configOptions = (0, config_2.mapAuthConfigToAuthModuleOptions)((0, config_2.authConfig)());
+        const moduleDefinition = this.forRoot({
+            ...configOptions,
+            ...overrides,
+            presentation: {
+                ...configOptions.presentation,
+                ...overrides.presentation,
+                application: {
+                    ...configOptions.presentation?.application,
+                    ...overrides.presentation?.application,
+                    encryption: {
+                        ...configOptions.presentation?.application?.encryption,
+                        ...overrides.presentation?.application?.encryption,
+                    },
+                    persistence: {
+                        ...configOptions.presentation?.application?.persistence,
+                        ...overrides.presentation?.application?.persistence,
+                    },
+                },
+            },
+            mailer: {
+                ...configOptions.mailer,
+                ...overrides.mailer,
+            },
+        });
+        return {
+            ...moduleDefinition,
+            imports: [
+                config_1.ConfigModule.forFeature(config_2.authConfig),
+                ...(moduleDefinition.imports ?? []),
+            ],
+        };
+    }
+};
+exports.AuthModule = AuthModule;
+exports.AuthModule = AuthModule = AuthModule_1 = tslib_1.__decorate([
+    (0, common_1.Module)({})
+], AuthModule);
+//# sourceMappingURL=auth.module.js.map

package/src/auth.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../../../../libs/auth/nest/src/auth.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAAuD;AACvD,2CAA8C;AAC9C,mEAA2D;AAC3D,iDAAwD;AACxD,qCAAwE;AAMjE,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,MAAM,CAAC,OAAO,CAAC,UAA6B,EAAE;QAC5C,MAAM,kBAAkB,GAAG,qCAAsB,CAAC,OAAO,CACvD,OAAO,CAAC,YAAY,CACrB,CAAC;QACF,MAAM,YAAY,GAAG,wCAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,OAAO,EAAE,CAAC,kBAAkB,EAAE,YAAY,CAAC;YAC3C,OAAO,EAAE,CAAC,kBAAkB,EAAE,YAAY,CAAC;SAC5C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,YAA+B,EAAE;QACxD,MAAM,aAAa,GAAG,IAAA,yCAAgC,EAAC,IAAA,mBAAU,GAAE,CAAC,CAAC;QACrE,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC;YACpC,GAAG,aAAa;YAChB,GAAG,SAAS;YACZ,YAAY,EAAE;gBACZ,GAAG,aAAa,CAAC,YAAY;gBAC7B,GAAG,SAAS,CAAC,YAAY;gBACzB,WAAW,EAAE;oBACX,GAAG,aAAa,CAAC,YAAY,EAAE,WAAW;oBAC1C,GAAG,SAAS,CAAC,YAAY,EAAE,WAAW;oBACtC,UAAU,EAAE;wBACV,GAAG,aAAa,CAAC,YAAY,EAAE,WAAW,EAAE,UAAU;wBACtD,GAAG,SAAS,CAAC,YAAY,EAAE,WAAW,EAAE,UAAU;qBACnD;oBACD,WAAW,EAAE;wBACX,GAAG,aAAa,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW;wBACvD,GAAG,SAAS,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW;qBACpD;iBACF;aACF;YACD,MAAM,EAAE;gBACN,GAAG,aAAa,CAAC,MAAM;gBACvB,GAAG,SAAS,CAAC,MAAM;aACpB;SACF,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,gBAAgB;YACnB,OAAO,EAAE;gBACP,qBAAY,CAAC,UAAU,CAAC,mBAAU,CAAC;gBACnC,GAAG,CAAC,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC;aACpC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAhDY,gCAAU;qBAAV,UAAU;IADtB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,UAAU,CAgDtB"}