@aranzatech/aranza-auth 0.1.0

package/dist/mongo/index.js

@@ -0,0 +1,226 @@
+import { __decorateClass, resolveRegisterIdentifier, normalizeIdentifier, AUTH_REPOSITORY, AUTH_MODULE_OPTIONS } from '../chunk-DKYNHXY2.js';
+import { Injectable, Module } from '@nestjs/common';
+import { Prop, Schema, SchemaFactory, MongooseModule, getModelToken } from '@nestjs/mongoose';
+import { Types } from 'mongoose';
+
+function toAccount(doc) {
+  return {
+    id: doc._id.toString(),
+    ...doc.email != null ? { email: doc.email } : {},
+    ...doc.username != null ? { username: doc.username } : {},
+    emailVerified: doc.emailVerified,
+    disabled: doc.disabled,
+    createdAt: doc.createdAt,
+    updatedAt: doc.updatedAt
+  };
+}
+function toAccountWithSecrets(doc) {
+  return {
+    ...toAccount(doc),
+    passwordHash: doc.passwordHash,
+    refreshTokenHash: doc.refreshTokenHash ?? null
+  };
+}
+var MongoAuthRepository = class {
+  constructor(authModel, identifierField = "email") {
+    this.authModel = authModel;
+    this.identifierField = identifierField;
+  }
+  async create(data) {
+    const identifier = resolveRegisterIdentifier(
+      data,
+      this.identifierField
+    );
+    const created = new this.authModel({
+      email: this.identifierField === "email" ? identifier : data.email != null ? normalizeIdentifier(data.email) : void 0,
+      username: this.identifierField === "username" ? identifier : data.username != null ? normalizeIdentifier(data.username) : void 0,
+      passwordHash: data.passwordHash,
+      emailVerified: data.emailVerified ?? false,
+      disabled: false
+    });
+    const saved = await created.save();
+    return toAccount(saved);
+  }
+  async findByEmail(email) {
+    const doc = await this.authModel.findOne({ email: normalizeIdentifier(email) }).exec();
+    return doc != null ? toAccount(doc) : null;
+  }
+  async findByIdentifier(identifier) {
+    const doc = await this.authModel.findOne(this.identifierQuery(identifier)).exec();
+    return doc != null ? toAccount(doc) : null;
+  }
+  async findByIdentifierWithSecrets(identifier) {
+    const doc = await this.authModel.findOne(this.identifierQuery(identifier)).select("+passwordHash +refreshTokenHash").exec();
+    return doc != null ? toAccountWithSecrets(doc) : null;
+  }
+  async findById(id) {
+    if (!Types.ObjectId.isValid(id)) return null;
+    const doc = await this.authModel.findById(id).exec();
+    return doc != null ? toAccount(doc) : null;
+  }
+  async findByIdWithSecrets(id) {
+    if (!Types.ObjectId.isValid(id)) return null;
+    const doc = await this.authModel.findById(id).select("+passwordHash +refreshTokenHash").exec();
+    return doc != null ? toAccountWithSecrets(doc) : null;
+  }
+  async updateRefreshTokenHash(id, hash) {
+    if (!Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne({ _id: id }, { $set: { refreshTokenHash: hash } }).exec();
+  }
+  async updatePasswordHash(id, passwordHash) {
+    if (!Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne({ _id: id }, { $set: { passwordHash } }).exec();
+  }
+  async setEmailVerificationToken(id, tokenHash, expiresAt) {
+    if (!Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne(
+      { _id: id },
+      {
+        $set: {
+          emailVerificationTokenHash: tokenHash,
+          emailVerificationExpiresAt: expiresAt
+        }
+      }
+    ).exec();
+  }
+  async findByEmailVerificationTokenHash(tokenHash) {
+    const doc = await this.authModel.findOne({
+      emailVerificationTokenHash: tokenHash,
+      emailVerificationExpiresAt: { $gt: /* @__PURE__ */ new Date() }
+    }).select("+emailVerificationTokenHash").exec();
+    return doc != null ? toAccount(doc) : null;
+  }
+  async markEmailVerified(id) {
+    if (!Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne(
+      { _id: id },
+      {
+        $set: { emailVerified: true },
+        $unset: {
+          emailVerificationTokenHash: "",
+          emailVerificationExpiresAt: ""
+        }
+      }
+    ).exec();
+  }
+  async setResetToken(id, tokenHash, expiresAt) {
+    if (!Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne(
+      { _id: id },
+      { $set: { resetTokenHash: tokenHash, resetTokenExpiresAt: expiresAt } }
+    ).exec();
+  }
+  async findByResetTokenHash(tokenHash) {
+    const doc = await this.authModel.findOne({
+      resetTokenHash: tokenHash,
+      resetTokenExpiresAt: { $gt: /* @__PURE__ */ new Date() }
+    }).select("+passwordHash +resetTokenHash").exec();
+    return doc != null ? toAccountWithSecrets(doc) : null;
+  }
+  async clearResetToken(id) {
+    if (!Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne(
+      { _id: id },
+      { $unset: { resetTokenHash: "", resetTokenExpiresAt: "" } }
+    ).exec();
+  }
+  identifierQuery(identifier) {
+    const normalized = normalizeIdentifier(identifier);
+    return this.identifierField === "email" ? { email: normalized } : { username: normalized };
+  }
+};
+MongoAuthRepository = __decorateClass([
+  Injectable()
+], MongoAuthRepository);
+var BASE_AUTH_ACCOUNT_MODEL = "AuthAccount";
+var BaseAuthAccountSchema = class {
+};
+__decorateClass([
+  Prop({ required: false, trim: true, lowercase: true, index: true })
+], BaseAuthAccountSchema.prototype, "email", 2);
+__decorateClass([
+  Prop({ required: false, trim: true, lowercase: true, index: true })
+], BaseAuthAccountSchema.prototype, "username", 2);
+__decorateClass([
+  Prop({ required: true, select: false })
+], BaseAuthAccountSchema.prototype, "passwordHash", 2);
+__decorateClass([
+  Prop({ required: false, select: false })
+], BaseAuthAccountSchema.prototype, "refreshTokenHash", 2);
+__decorateClass([
+  Prop({ type: Boolean, default: false })
+], BaseAuthAccountSchema.prototype, "emailVerified", 2);
+__decorateClass([
+  Prop({ type: Boolean, default: false })
+], BaseAuthAccountSchema.prototype, "disabled", 2);
+__decorateClass([
+  Prop({ required: false, select: false })
+], BaseAuthAccountSchema.prototype, "emailVerificationTokenHash", 2);
+__decorateClass([
+  Prop({ required: false })
+], BaseAuthAccountSchema.prototype, "emailVerificationExpiresAt", 2);
+__decorateClass([
+  Prop({ required: false, select: false })
+], BaseAuthAccountSchema.prototype, "resetTokenHash", 2);
+__decorateClass([
+  Prop({ required: false })
+], BaseAuthAccountSchema.prototype, "resetTokenExpiresAt", 2);
+BaseAuthAccountSchema = __decorateClass([
+  Schema({
+    timestamps: true,
+    collection: "auth_accounts"
+  })
+], BaseAuthAccountSchema);
+var baseAuthAccountSchema = SchemaFactory.createForClass(BaseAuthAccountSchema);
+baseAuthAccountSchema.index(
+  { email: 1 },
+  {
+    unique: true,
+    partialFilterExpression: { email: { $type: "string" } }
+  }
+);
+baseAuthAccountSchema.index(
+  { username: 1 },
+  {
+    unique: true,
+    partialFilterExpression: { username: { $type: "string" } }
+  }
+);
+
+// src/mongo/mongo-auth.module.ts
+var MongoAuthModule = class {
+  static forFeature(options) {
+    const name = options?.name ?? BASE_AUTH_ACCOUNT_MODEL;
+    const schema = options?.schema ?? baseAuthAccountSchema;
+    const identifierField = options?.identifierField ?? "email";
+    return {
+      module: MongoAuthModule,
+      imports: [MongooseModule.forFeature([{ name, schema }])],
+      providers: [
+        {
+          provide: MongoAuthRepository,
+          useFactory: (model, authOptions) => new MongoAuthRepository(
+            model,
+            authOptions?.identifierField ?? identifierField
+          ),
+          inject: [
+            getModelToken(name),
+            { token: AUTH_MODULE_OPTIONS, optional: true }
+          ]
+        },
+        {
+          provide: AUTH_REPOSITORY,
+          useExisting: MongoAuthRepository
+        }
+      ],
+      exports: [AUTH_REPOSITORY, MongooseModule]
+    };
+  }
+};
+MongoAuthModule = __decorateClass([
+  Module({})
+], MongoAuthModule);
+
+export { BASE_AUTH_ACCOUNT_MODEL, BaseAuthAccountSchema, MongoAuthModule, MongoAuthRepository, baseAuthAccountSchema };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/mongo/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/mongo/mongo-auth.repository.ts","../../src/mongo/schemas/base-auth-account.schema.ts","../../src/mongo/mongo-auth.module.ts"],"names":[],"mappings":";;;;;AAkBA,SAAS,UAAU,GAAA,EAA+C;AAChE,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,GAAA,CAAI,GAAA,CAAI,QAAA,EAAS;AAAA,IACrB,GAAI,IAAI,KAAA,IAAS,IAAA,GAAO,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAC;AAAA,IAChD,GAAI,IAAI,QAAA,IAAY,IAAA,GAAO,EAAE,QAAA,EAAU,GAAA,CAAI,QAAA,EAAS,GAAI,EAAC;AAAA,IACzD,eAAe,GAAA,CAAI,aAAA;AAAA,IACnB,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,WAAW,GAAA,CAAI,SAAA;AAAA,IACf,WAAW,GAAA,CAAI;AAAA,GACjB;AACF;AAEA,SAAS,qBACP,GAAA,EACwB;AACxB,EAAA,OAAO;AAAA,IACL,GAAG,UAAU,GAAG,CAAA;AAAA,IAChB,cAAc,GAAA,CAAI,YAAA;AAAA,IAClB,gBAAA,EAAkB,IAAI,gBAAA,IAAoB;AAAA,GAC5C;AACF;AAGO,IAAM,sBAAN,MAAqD;AAAA,EAC1D,WAAA,CACmB,SAAA,EACA,eAAA,GAAuC,OAAA,EACxD;AAFiB,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AACA,IAAA,IAAA,CAAA,eAAA,GAAA,eAAA;AAAA,EAChB;AAAA,EAEH,MAAM,OAAO,IAAA,EAAmD;AAC9D,IAAA,MAAM,UAAA,GAAa,yBAAA;AAAA,MACjB,IAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,OAAA,GAAU,IAAI,IAAA,CAAK,SAAA,CAAU;AAAA,MACjC,KAAA,EACE,IAAA,CAAK,eAAA,KAAoB,OAAA,GACrB,UAAA,GACA,IAAA,CAAK,KAAA,IAAS,IAAA,GACZ,mBAAA,CAAoB,IAAA,CAAK,KAAK,CAAA,GAC9B,MAAA;AAAA,MACR,QAAA,EACE,IAAA,CAAK,eAAA,KAAoB,UAAA,GACrB,UAAA,GACA,IAAA,CAAK,QAAA,IAAY,IAAA,GACf,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,GACjC,MAAA;AAAA,MACR,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,aAAA,EAAe,KAAK,aAAA,IAAiB,KAAA;AAAA,MACrC,QAAA,EAAU;AAAA,KACX,CAAA;AAED,IAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ,IAAA,EAAK;AACjC,IAAA,OAAO,UAAU,KAAK,CAAA;AAAA,EACxB;AAAA,EAEA,MAAM,YAAY,KAAA,EAAgD;AAChE,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,OAAA,CAAQ,EAAE,KAAA,EAAO,mBAAA,CAAoB,KAAK,CAAA,EAAG,CAAA,CAC7C,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,SAAA,CAAU,GAAG,CAAA,GAAI,IAAA;AAAA,EACxC;AAAA,EAEA,MAAM,iBAAiB,UAAA,EAAqD;AAC1E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,OAAA,CAAQ,KAAK,eAAA,CAAgB,UAAU,CAAC,CAAA,CACxC,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,SAAA,CAAU,GAAG,CAAA,GAAI,IAAA;AAAA,EACxC;AAAA,EAEA,MAAM,4BACJ,UAAA,EACwC;AACxC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,OAAA,CAAQ,IAAA,CAAK,eAAA,CAAgB,UAAU,CAAC,CAAA,CACxC,MAAA,CAAO,iCAAiC,EACxC,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,oBAAA,CAAqB,GAAG,CAAA,GAAI,IAAA;AAAA,EACnD;AAAA,EAEA,MAAM,SAAS,EAAA,EAA6C;AAC1D,IAAA,IAAI,CAAC,KAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,GAAG,OAAO,IAAA;AACxC,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,UAAU,QAAA,CAAS,EAAE,EAAE,IAAA,EAAK;AACnD,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,SAAA,CAAU,GAAG,CAAA,GAAI,IAAA;AAAA,EACxC;AAAA,EAEA,MAAM,oBAAoB,EAAA,EAAoD;AAC5E,IAAA,IAAI,CAAC,KAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,GAAG,OAAO,IAAA;AACxC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,QAAA,CAAS,EAAE,CAAA,CACX,MAAA,CAAO,iCAAiC,CAAA,CACxC,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,oBAAA,CAAqB,GAAG,CAAA,GAAI,IAAA;AAAA,EACnD;AAAA,EAEA,MAAM,sBAAA,CACJ,EAAA,EACA,IAAA,EACe;AACf,IAAA,IAAI,CAAC,KAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,IAAA,CAAK,SAAA,CACR,SAAA,CAAU,EAAE,KAAK,EAAA,EAAG,EAAG,EAAE,IAAA,EAAM,EAAE,gBAAA,EAAkB,IAAA,EAAK,EAAG,EAC3D,IAAA,EAAK;AAAA,EACV;AAAA,EAEA,MAAM,kBAAA,CAAmB,EAAA,EAAY,YAAA,EAAqC;AACxE,IAAA,IAAI,CAAC,KAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,IAAA,CAAK,SAAA,CACR,SAAA,CAAU,EAAE,KAAK,EAAA,EAAG,EAAG,EAAE,IAAA,EAAM,EAAE,YAAA,EAAa,EAAG,EACjD,IAAA,EAAK;AAAA,EACV;AAAA,EAEA,MAAM,yBAAA,CACJ,EAAA,EACA,SAAA,EACA,SAAA,EACe;AACf,IAAA,IAAI,CAAC,KAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,KAAK,SAAA,CACR,SAAA;AAAA,MACC,EAAE,KAAK,EAAA,EAAG;AAAA,MACV;AAAA,QACE,IAAA,EAAM;AAAA,UACJ,0BAAA,EAA4B,SAAA;AAAA,UAC5B,0BAAA,EAA4B;AAAA;AAC9B;AACF,MAED,IAAA,EAAK;AAAA,EACV;AAAA,EAEA,MAAM,iCACJ,SAAA,EACiC;AACjC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,OAAA,CAAQ;AAAA,MACP,0BAAA,EAA4B,SAAA;AAAA,MAC5B,0BAAA,EAA4B,EAAE,GAAA,kBAAK,IAAI,MAAK;AAAE,KAC/C,CAAA,CACA,MAAA,CAAO,6BAA6B,EACpC,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,SAAA,CAAU,GAAG,CAAA,GAAI,IAAA;AAAA,EACxC;AAAA,EAEA,MAAM,kBAAkB,EAAA,EAA2B;AACjD,IAAA,IAAI,CAAC,KAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,KAAK,SAAA,CACR,SAAA;AAAA,MACC,EAAE,KAAK,EAAA,EAAG;AAAA,MACV;AAAA,QACE,IAAA,EAAM,EAAE,aAAA,EAAe,IAAA,EAAK;AAAA,QAC5B,MAAA,EAAQ;AAAA,UACN,0BAAA,EAA4B,EAAA;AAAA,UAC5B,0BAAA,EAA4B;AAAA;AAC9B;AACF,MAED,IAAA,EAAK;AAAA,EACV;AAAA,EAEA,MAAM,aAAA,CACJ,EAAA,EACA,SAAA,EACA,SAAA,EACe;AACf,IAAA,IAAI,CAAC,KAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,KAAK,SAAA,CACR,SAAA;AAAA,MACC,EAAE,KAAK,EAAA,EAAG;AAAA,MACV,EAAE,IAAA,EAAM,EAAE,gBAAgB,SAAA,EAAW,mBAAA,EAAqB,WAAU;AAAE,MAEvE,IAAA,EAAK;AAAA,EACV;AAAA,EAEA,MAAM,qBACJ,SAAA,EACwC;AACxC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,OAAA,CAAQ;AAAA,MACP,cAAA,EAAgB,SAAA;AAAA,MAChB,mBAAA,EAAqB,EAAE,GAAA,kBAAK,IAAI,MAAK;AAAE,KACxC,CAAA,CACA,MAAA,CAAO,+BAA+B,EACtC,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,oBAAA,CAAqB,GAAG,CAAA,GAAI,IAAA;AAAA,EACnD;AAAA,EAEA,MAAM,gBAAgB,EAAA,EAA2B;AAC/C,IAAA,IAAI,CAAC,KAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,KAAK,SAAA,CACR,SAAA;AAAA,MACC,EAAE,KAAK,EAAA,EAAG;AAAA,MACV,EAAE,MAAA,EAAQ,EAAE,gBAAgB,EAAA,EAAI,mBAAA,EAAqB,IAAG;AAAE,MAE3D,IAAA,EAAK;AAAA,EACV;AAAA,EAEQ,gBAAgB,UAAA,EAAoB;AAC1C,IAAA,MAAM,UAAA,GAAa,oBAAoB,UAAU,CAAA;AACjD,IAAA,OAAO,IAAA,CAAK,oBAAoB,OAAA,GAC5B,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,QAAA,EAAU,UAAA,EAAW;AAAA,EAC7B;AACF;AArLa,mBAAA,GAAN,eAAA,CAAA;AAAA,EADN,UAAA;AAAW,CAAA,EACC,mBAAA,CAAA;ACtCN,IAAM,uBAAA,GAA0B;AAMhC,IAAM,wBAAN,MAA4B;AAiCnC;AA/BE,eAAA,CAAA;AAAA,EADC,IAAA,CAAK,EAAE,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,MAAM,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM;AAAA,CAAA,EADxD,qBAAA,CAEX,SAAA,EAAA,OAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADC,IAAA,CAAK,EAAE,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,MAAM,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM;AAAA,CAAA,EAJxD,qBAAA,CAKX,SAAA,EAAA,UAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADC,KAAK,EAAE,QAAA,EAAU,IAAA,EAAM,MAAA,EAAQ,OAAO;AAAA,CAAA,EAP5B,qBAAA,CAQX,SAAA,EAAA,cAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADC,KAAK,EAAE,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,OAAO;AAAA,CAAA,EAV7B,qBAAA,CAWX,SAAA,EAAA,kBAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADC,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,OAAO;AAAA,CAAA,EAb5B,qBAAA,CAcX,SAAA,EAAA,eAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADC,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,OAAO;AAAA,CAAA,EAhB5B,qBAAA,CAiBX,SAAA,EAAA,UAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADC,KAAK,EAAE,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,OAAO;AAAA,CAAA,EAnB7B,qBAAA,CAoBX,SAAA,EAAA,4BAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADC,IAAA,CAAK,EAAE,QAAA,EAAU,KAAA,EAAO;AAAA,CAAA,EAtBd,qBAAA,CAuBX,SAAA,EAAA,4BAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADC,KAAK,EAAE,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,OAAO;AAAA,CAAA,EAzB7B,qBAAA,CA0BX,SAAA,EAAA,gBAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADC,IAAA,CAAK,EAAE,QAAA,EAAU,KAAA,EAAO;AAAA,CAAA,EA5Bd,qBAAA,CA6BX,SAAA,EAAA,qBAAA,EAAA,CAAA,CAAA;AA7BW,qBAAA,GAAN,eAAA,CAAA;AAAA,EAJN,MAAA,CAAO;AAAA,IACN,UAAA,EAAY,IAAA;AAAA,IACZ,UAAA,EAAY;AAAA,GACb;AAAA,CAAA,EACY,qBAAA,CAAA;AAqCN,IAAM,qBAAA,GACX,aAAA,CAAc,cAAA,CAAe,qBAAqB;AAEpD,qBAAA,CAAsB,KAAA;AAAA,EACpB,EAAE,OAAO,CAAA,EAAE;AAAA,EACX;AAAA,IACE,MAAA,EAAQ,IAAA;AAAA,IACR,yBAAyB,EAAE,KAAA,EAAO,EAAE,KAAA,EAAO,UAAS;AAAE;AAE1D,CAAA;AAEA,qBAAA,CAAsB,KAAA;AAAA,EACpB,EAAE,UAAU,CAAA,EAAE;AAAA,EACd;AAAA,IACE,MAAA,EAAQ,IAAA;AAAA,IACR,yBAAyB,EAAE,QAAA,EAAU,EAAE,KAAA,EAAO,UAAS;AAAE;AAE7D,CAAA;;;ACtCO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,OAAO,WAAW,OAAA,EAAkD;AAClE,IAAA,MAAM,IAAA,GAAO,SAAS,IAAA,IAAQ,uBAAA;AAC9B,IAAA,MAAM,MAAA,GAAS,SAAS,MAAA,IAAU,qBAAA;AAClC,IAAA,MAAM,eAAA,GAAkB,SAAS,eAAA,IAAmB,OAAA;AAEpD,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,eAAA;AAAA,MACR,OAAA,EAAS,CAAC,cAAA,CAAe,UAAA,CAAW,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,CAAC,CAAC,CAAA;AAAA,MACvD,SAAA,EAAW;AAAA,QACT;AAAA,UACE,OAAA,EAAS,mBAAA;AAAA,UACT,UAAA,EAAY,CACV,KAAA,EACA,WAAA,KAEA,IAAI,mBAAA;AAAA,YACF,KAAA;AAAA,YACA,aAAa,eAAA,IAAmB;AAAA,WAClC;AAAA,UACF,MAAA,EAAQ;AAAA,YACN,cAAc,IAAI,CAAA;AAAA,YAClB,EAAE,KAAA,EAAO,mBAAA,EAAqB,QAAA,EAAU,IAAA;AAAK;AAC/C,SACF;AAAA,QACA;AAAA,UACE,OAAA,EAAS,eAAA;AAAA,UACT,WAAA,EAAa;AAAA;AACf,OACF;AAAA,MACA,OAAA,EAAS,CAAC,eAAA,EAAiB,cAAc;AAAA,KAC3C;AAAA,EACF;AACF;AAjCa,eAAA,GAAN,eAAA,CAAA;AAAA,EADN,MAAA,CAAO,EAAE;AAAA,CAAA,EACG,eAAA,CAAA","file":"index.js","sourcesContent":["import { Injectable } from \"@nestjs/common\";\nimport { Types, type Model } from \"mongoose\";\n\nimport type { AuthIdentifierField } from \"../interfaces/auth-config.interface\";\nimport type {\n  AuthAccountWithSecrets,\n  BaseAuthAccount,\n} from \"../interfaces/auth-hooks.interface\";\nimport type {\n  CreateAccountData,\n  IAuthRepository,\n} from \"../interfaces/auth-repository.interface\";\nimport {\n  normalizeIdentifier,\n  resolveRegisterIdentifier,\n} from \"../utils/identifier.util\";\nimport type { BaseAuthAccountDocument } from \"./schemas/base-auth-account.schema\";\n\nfunction toAccount(doc: BaseAuthAccountDocument): BaseAuthAccount {\n  return {\n    id: doc._id.toString(),\n    ...(doc.email != null ? { email: doc.email } : {}),\n    ...(doc.username != null ? { username: doc.username } : {}),\n    emailVerified: doc.emailVerified,\n    disabled: doc.disabled,\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  };\n}\n\nfunction toAccountWithSecrets(\n  doc: BaseAuthAccountDocument,\n): AuthAccountWithSecrets {\n  return {\n    ...toAccount(doc),\n    passwordHash: doc.passwordHash,\n    refreshTokenHash: doc.refreshTokenHash ?? null,\n  };\n}\n\n@Injectable()\nexport class MongoAuthRepository implements IAuthRepository {\n  constructor(\n    private readonly authModel: Model<BaseAuthAccountDocument>,\n    private readonly identifierField: AuthIdentifierField = \"email\",\n  ) {}\n\n  async create(data: CreateAccountData): Promise<BaseAuthAccount> {\n    const identifier = resolveRegisterIdentifier(\n      data,\n      this.identifierField,\n    );\n\n    const created = new this.authModel({\n      email:\n        this.identifierField === \"email\"\n          ? identifier\n          : data.email != null\n            ? normalizeIdentifier(data.email)\n            : undefined,\n      username:\n        this.identifierField === \"username\"\n          ? identifier\n          : data.username != null\n            ? normalizeIdentifier(data.username)\n            : undefined,\n      passwordHash: data.passwordHash,\n      emailVerified: data.emailVerified ?? false,\n      disabled: false,\n    });\n\n    const saved = await created.save();\n    return toAccount(saved);\n  }\n\n  async findByEmail(email: string): Promise<BaseAuthAccount | null> {\n    const doc = await this.authModel\n      .findOne({ email: normalizeIdentifier(email) })\n      .exec();\n    return doc != null ? toAccount(doc) : null;\n  }\n\n  async findByIdentifier(identifier: string): Promise<BaseAuthAccount | null> {\n    const doc = await this.authModel\n      .findOne(this.identifierQuery(identifier))\n      .exec();\n    return doc != null ? toAccount(doc) : null;\n  }\n\n  async findByIdentifierWithSecrets(\n    identifier: string,\n  ): Promise<AuthAccountWithSecrets | null> {\n    const doc = await this.authModel\n      .findOne(this.identifierQuery(identifier))\n      .select(\"+passwordHash +refreshTokenHash\")\n      .exec();\n    return doc != null ? toAccountWithSecrets(doc) : null;\n  }\n\n  async findById(id: string): Promise<BaseAuthAccount | null> {\n    if (!Types.ObjectId.isValid(id)) return null;\n    const doc = await this.authModel.findById(id).exec();\n    return doc != null ? toAccount(doc) : null;\n  }\n\n  async findByIdWithSecrets(id: string): Promise<AuthAccountWithSecrets | null> {\n    if (!Types.ObjectId.isValid(id)) return null;\n    const doc = await this.authModel\n      .findById(id)\n      .select(\"+passwordHash +refreshTokenHash\")\n      .exec();\n    return doc != null ? toAccountWithSecrets(doc) : null;\n  }\n\n  async updateRefreshTokenHash(\n    id: string,\n    hash: string | null,\n  ): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne({ _id: id }, { $set: { refreshTokenHash: hash } })\n      .exec();\n  }\n\n  async updatePasswordHash(id: string, passwordHash: string): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne({ _id: id }, { $set: { passwordHash } })\n      .exec();\n  }\n\n  async setEmailVerificationToken(\n    id: string,\n    tokenHash: string,\n    expiresAt: Date,\n  ): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne(\n        { _id: id },\n        {\n          $set: {\n            emailVerificationTokenHash: tokenHash,\n            emailVerificationExpiresAt: expiresAt,\n          },\n        },\n      )\n      .exec();\n  }\n\n  async findByEmailVerificationTokenHash(\n    tokenHash: string,\n  ): Promise<BaseAuthAccount | null> {\n    const doc = await this.authModel\n      .findOne({\n        emailVerificationTokenHash: tokenHash,\n        emailVerificationExpiresAt: { $gt: new Date() },\n      })\n      .select(\"+emailVerificationTokenHash\")\n      .exec();\n    return doc != null ? toAccount(doc) : null;\n  }\n\n  async markEmailVerified(id: string): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne(\n        { _id: id },\n        {\n          $set: { emailVerified: true },\n          $unset: {\n            emailVerificationTokenHash: \"\",\n            emailVerificationExpiresAt: \"\",\n          },\n        },\n      )\n      .exec();\n  }\n\n  async setResetToken(\n    id: string,\n    tokenHash: string,\n    expiresAt: Date,\n  ): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne(\n        { _id: id },\n        { $set: { resetTokenHash: tokenHash, resetTokenExpiresAt: expiresAt } },\n      )\n      .exec();\n  }\n\n  async findByResetTokenHash(\n    tokenHash: string,\n  ): Promise<AuthAccountWithSecrets | null> {\n    const doc = await this.authModel\n      .findOne({\n        resetTokenHash: tokenHash,\n        resetTokenExpiresAt: { $gt: new Date() },\n      })\n      .select(\"+passwordHash +resetTokenHash\")\n      .exec();\n    return doc != null ? toAccountWithSecrets(doc) : null;\n  }\n\n  async clearResetToken(id: string): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne(\n        { _id: id },\n        { $unset: { resetTokenHash: \"\", resetTokenExpiresAt: \"\" } },\n      )\n      .exec();\n  }\n\n  private identifierQuery(identifier: string) {\n    const normalized = normalizeIdentifier(identifier);\n    return this.identifierField === \"email\"\n      ? { email: normalized }\n      : { username: normalized };\n  }\n}\n","import { Prop, Schema, SchemaFactory } from \"@nestjs/mongoose\";\nimport type { HydratedDocument } from \"mongoose\";\n\nexport const BASE_AUTH_ACCOUNT_MODEL = \"AuthAccount\";\n\n@Schema({\n  timestamps: true,\n  collection: \"auth_accounts\",\n})\nexport class BaseAuthAccountSchema {\n  @Prop({ required: false, trim: true, lowercase: true, index: true })\n  email?: string;\n\n  @Prop({ required: false, trim: true, lowercase: true, index: true })\n  username?: string;\n\n  @Prop({ required: true, select: false })\n  passwordHash!: string;\n\n  @Prop({ required: false, select: false })\n  refreshTokenHash?: string | null;\n\n  @Prop({ type: Boolean, default: false })\n  emailVerified!: boolean;\n\n  @Prop({ type: Boolean, default: false })\n  disabled!: boolean;\n\n  @Prop({ required: false, select: false })\n  emailVerificationTokenHash?: string;\n\n  @Prop({ required: false })\n  emailVerificationExpiresAt?: Date;\n\n  @Prop({ required: false, select: false })\n  resetTokenHash?: string;\n\n  @Prop({ required: false })\n  resetTokenExpiresAt?: Date;\n\n  createdAt!: Date;\n  updatedAt!: Date;\n}\n\nexport type BaseAuthAccountDocument = HydratedDocument<BaseAuthAccountSchema>;\n\nexport const baseAuthAccountSchema =\n  SchemaFactory.createForClass(BaseAuthAccountSchema);\n\nbaseAuthAccountSchema.index(\n  { email: 1 },\n  {\n    unique: true,\n    partialFilterExpression: { email: { $type: \"string\" } },\n  },\n);\n\nbaseAuthAccountSchema.index(\n  { username: 1 },\n  {\n    unique: true,\n    partialFilterExpression: { username: { $type: \"string\" } },\n  },\n);\n","import { DynamicModule, Module } from \"@nestjs/common\";\nimport { getModelToken } from \"@nestjs/mongoose\";\nimport { MongooseModule } from \"@nestjs/mongoose\";\nimport type { Model, Schema } from \"mongoose\";\n\nimport { AUTH_MODULE_OPTIONS, AUTH_REPOSITORY } from \"../constants/tokens\";\nimport type { AuthIdentifierField } from \"../interfaces/auth-config.interface\";\nimport type { AuthModuleOptions } from \"../interfaces/auth-config.interface\";\nimport { MongoAuthRepository } from \"./mongo-auth.repository\";\nimport {\n  BASE_AUTH_ACCOUNT_MODEL,\n  baseAuthAccountSchema,\n  type BaseAuthAccountDocument,\n} from \"./schemas/base-auth-account.schema\";\n\nexport interface MongoAuthFeatureOptions {\n  /** Mongoose model name. Default: `AuthAccount`. */\n  name?: string;\n  /** Custom schema (e.g. extended with orgId, roleId). Default: base auth schema. */\n  schema?: Schema;\n  /** Identifier field when AuthModule options are not yet available. Default: `email`. */\n  identifierField?: AuthIdentifierField;\n}\n\n@Module({})\nexport class MongoAuthModule {\n  static forFeature(options?: MongoAuthFeatureOptions): DynamicModule {\n    const name = options?.name ?? BASE_AUTH_ACCOUNT_MODEL;\n    const schema = options?.schema ?? baseAuthAccountSchema;\n    const identifierField = options?.identifierField ?? \"email\";\n\n    return {\n      module: MongoAuthModule,\n      imports: [MongooseModule.forFeature([{ name, schema }])],\n      providers: [\n        {\n          provide: MongoAuthRepository,\n          useFactory: (\n            model: Model<BaseAuthAccountDocument>,\n            authOptions?: AuthModuleOptions,\n          ) =>\n            new MongoAuthRepository(\n              model,\n              authOptions?.identifierField ?? identifierField,\n            ),\n          inject: [\n            getModelToken(name),\n            { token: AUTH_MODULE_OPTIONS, optional: true },\n          ],\n        },\n        {\n          provide: AUTH_REPOSITORY,\n          useExisting: MongoAuthRepository,\n        },\n      ],\n      exports: [AUTH_REPOSITORY, MongooseModule],\n    };\n  }\n}"]}

package/package.json

@@ -0,0 +1,102 @@
+{
+  "name": "@aranzatech/aranza-auth",
+  "version": "0.1.0",
+  "description": "Módulo de autenticación extensible para NestJS — JWT, refresh tokens, register/login y adapter MongoDB",
+  "license": "MIT",
+  "author": "AranzaTech",
+  "keywords": [
+    "nestjs",
+    "auth",
+    "authentication",
+    "jwt",
+    "refresh-token",
+    "passport",
+    "mongodb",
+    "mongoose",
+    "aranzatech"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aapa96/aranza-auth.git"
+  },
+  "bugs": {
+    "url": "https://github.com/aapa96/aranza-auth/issues"
+  },
+  "homepage": "https://github.com/aapa96/aranza-auth#readme",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./mongo": {
+      "types": "./dist/mongo/index.d.ts",
+      "import": "./dist/mongo/index.js",
+      "require": "./dist/mongo/index.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "lint": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "deploy:npm": "npm install && npm run build && npm publish --access public"
+  },
+  "peerDependencies": {
+    "@nestjs/common": ">=11",
+    "@nestjs/core": ">=11",
+    "@nestjs/jwt": ">=11",
+    "@nestjs/mongoose": ">=11",
+    "@nestjs/passport": ">=11",
+    "bcryptjs": ">=2",
+    "class-transformer": ">=0.5",
+    "class-validator": ">=0.14",
+    "mongoose": ">=8",
+    "passport": ">=0.7",
+    "passport-jwt": ">=4",
+    "reflect-metadata": ">=0.2"
+  },
+  "peerDependenciesMeta": {
+    "@nestjs/mongoose": {
+      "optional": true
+    },
+    "mongoose": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@nestjs/common": "^11.0.1",
+    "@nestjs/core": "^11.0.1",
+    "@nestjs/jwt": "^11.0.2",
+    "@nestjs/mongoose": "^11.0.4",
+    "@nestjs/passport": "^11.0.5",
+    "@types/bcryptjs": "^2.4.6",
+    "@types/passport-jwt": "^4.0.1",
+    "@vitest/coverage-v8": "^4.1.7",
+    "bcryptjs": "^3.0.3",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.14.4",
+    "mongoose": "^8.19.1",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.1",
+    "reflect-metadata": "^0.2.2",
+    "rxjs": "^7.8.2",
+    "tsup": "^8.1.0",
+    "typescript": "^5.4.5",
+    "vitest": "^4.1.5"
+  }
+}