@breadstone/archipel-platform-authentication 0.0.1

package/src/strategies/GoogleStrategy.js

@@ -0,0 +1,74 @@
+"use strict";
+// #region Imports
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoogleStrategy = void 0;
+const tslib_1 = require("tslib");
+const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_google_oauth20_1 = require("passport-google-oauth20");
+const SocialAuthPort_1 = require("../contracts/SocialAuthPort");
+// #endregion
+/**
+ * The `GoogleStrategy` integrates Google OAuth authentication.
+ *
+ * @public
+ */
+let GoogleStrategy = class GoogleStrategy extends (0, passport_1.PassportStrategy)(passport_google_oauth20_1.Strategy, 'google') {
+    // #endregion
+    // #region Ctor
+    /**
+     * Initializes a new instance of the `GoogleStrategy` class.
+     *
+     * @public
+     * @param socialAuth Social auth port instance.
+     * @param configService Configuration service instance.
+     */
+    constructor(socialAuth, configService) {
+        super({
+            clientID: configService.get('AUTH_GOOGLE_CLIENT_ID'),
+            clientSecret: configService.get('AUTH_GOOGLE_CLIENT_SECRET'),
+            callbackURL: configService.tryGet('AUTH_GOOGLE_CALLBACK_URL', '/auth/google/callback'),
+            scope: ['email', 'profile'],
+            state: true,
+        });
+        this._socialAuth = socialAuth;
+    }
+    // #endregion
+    // #region Methods
+    /**
+     * Validates the Google authentication payload.
+     *
+     * @public
+     * @param accessToken OAuth access token.
+     * @param refreshToken OAuth refresh token.
+     * @param profile Google profile data.
+     * @returns The authenticated user.
+     */
+    async validate(accessToken, refreshToken, profile) {
+        void accessToken;
+        void refreshToken;
+        const email = profile.emails?.[0]?.value;
+        if (!email) {
+            throw new common_1.UnauthorizedException('No email provided from Google');
+        }
+        const displayName = profile.displayName ?? profile.name?.givenName ?? profile.name?.familyName;
+        if (!displayName) {
+            throw new common_1.UnauthorizedException('No display name provided from Google');
+        }
+        const userName = profile.username ?? email.split('@')[0];
+        const user = await this._socialAuth.findOrCreateByProfile({
+            provider: 'google',
+            email: email,
+            userName: userName,
+            displayName: displayName,
+        });
+        return user;
+    }
+};
+exports.GoogleStrategy = GoogleStrategy;
+exports.GoogleStrategy = GoogleStrategy = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [SocialAuthPort_1.SocialAuthPort, archipel_platform_core_1.ConfigService])
+], GoogleStrategy);
+//# sourceMappingURL=GoogleStrategy.js.map

package/src/strategies/JwtStrategy.d.ts

@@ -0,0 +1,31 @@
+import { ConfigService } from '@breadstone/archipel-platform-core';
+import { Strategy } from 'passport-jwt';
+import { AuthSubjectPort } from '../contracts/AuthSubjectPort';
+import type { IAuthSubject } from '../contracts/IAuthSubject';
+import { JwtPayloadBase } from '../models/JwtPayloadBase';
+declare const JwtStrategy_base: new (...args: [opt: import("passport-jwt").StrategyOptionsWithRequest] | [opt: import("passport-jwt").StrategyOptionsWithoutRequest]) => Strategy & {
+    validate(...args: any[]): unknown;
+};
+/**
+ * JWT strategy for handling token validation.
+ */
+export declare class JwtStrategy extends JwtStrategy_base {
+    private readonly _authSubject;
+    /**
+     * Constructs a new instance of the `JwtStrategy` class.
+     *
+     * @public
+     * @param authSubject Auth subject port instance.
+     * @param configService Configuration service instance.
+     */
+    constructor(authSubject: AuthSubjectPort, configService: ConfigService);
+    /**
+     * Validates the authentication credentials.
+     *
+     * @public
+     * @param payload The decoded JWT payload
+     * @returns The authenticated user and this is also later available in the request.user object
+     */
+    validate(payload: JwtPayloadBase): Promise<IAuthSubject>;
+}
+export {};

package/src/strategies/JwtStrategy.js

@@ -0,0 +1,55 @@
+"use strict";
+// #region Imports
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtStrategy = void 0;
+const tslib_1 = require("tslib");
+const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_jwt_1 = require("passport-jwt");
+const AuthSubjectPort_1 = require("../contracts/AuthSubjectPort");
+// #endregion
+/**
+ * JWT strategy for handling token validation.
+ */
+let JwtStrategy = class JwtStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy) {
+    // #endregion
+    // #region Ctor
+    /**
+     * Constructs a new instance of the `JwtStrategy` class.
+     *
+     * @public
+     * @param authSubject Auth subject port instance.
+     * @param configService Configuration service instance.
+     */
+    constructor(authSubject, configService) {
+        super({
+            jwtFromRequest: passport_jwt_1.ExtractJwt.fromAuthHeaderAsBearerToken(),
+            ignoreExpiration: false, // Optional: Allow or disallow expired tokens
+            secretOrKey: configService.get('AUTH_JWT_SECRET'), // The secret used for signing tokens
+        });
+        this._authSubject = authSubject;
+    }
+    // #endregion
+    // #region Methods
+    /**
+     * Validates the authentication credentials.
+     *
+     * @public
+     * @param payload The decoded JWT payload
+     * @returns The authenticated user and this is also later available in the request.user object
+     */
+    async validate(payload) {
+        const user = await this._authSubject.findById(payload.id);
+        if (!user) {
+            throw new common_1.NotFoundException('User not found');
+        }
+        return user;
+    }
+};
+exports.JwtStrategy = JwtStrategy;
+exports.JwtStrategy = JwtStrategy = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [AuthSubjectPort_1.AuthSubjectPort, archipel_platform_core_1.ConfigService])
+], JwtStrategy);
+//# sourceMappingURL=JwtStrategy.js.map

package/src/strategies/LocalStrategy.d.ts

@@ -0,0 +1,31 @@
+import { Strategy } from 'passport-local';
+import { AuthSubjectPort } from '../contracts/AuthSubjectPort';
+import type { IAuthSubject } from '../contracts/IAuthSubject';
+declare const LocalStrategy_base: new (...args: [] | [options: import("passport-local").IStrategyOptionsWithRequest] | [options: import("passport-local").IStrategyOptions]) => Strategy & {
+    validate(...args: any[]): unknown;
+};
+/**
+ * Local strategy for user name and password login.
+ *
+ * @public
+ */
+export declare class LocalStrategy extends LocalStrategy_base {
+    private readonly _authSubject;
+    /**
+     * Constructs a new instance of the `LocalStrategy` class.
+     *
+     * @public
+     * @param authSubject Auth subject port instance.
+     */
+    constructor(authSubject: AuthSubjectPort);
+    /**
+     * Validates the authentication credentials.
+     *
+     * @public
+     * @param userName The user name
+     * @param password The password
+     * @returns The authenticated user and this is also later available in the request.user object
+     */
+    validate(userName: string, password: string): Promise<IAuthSubject>;
+}
+export {};

package/src/strategies/LocalStrategy.js

@@ -0,0 +1,56 @@
+"use strict";
+// #region Imports
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalStrategy = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_local_1 = require("passport-local");
+const AuthSubjectPort_1 = require("../contracts/AuthSubjectPort");
+// #endregion
+/**
+ * Local strategy for user name and password login.
+ *
+ * @public
+ */
+let LocalStrategy = class LocalStrategy extends (0, passport_1.PassportStrategy)(passport_local_1.Strategy) {
+    // #endregion
+    // #region Ctor
+    /**
+     * Constructs a new instance of the `LocalStrategy` class.
+     *
+     * @public
+     * @param authSubject Auth subject port instance.
+     */
+    constructor(authSubject) {
+        super();
+        this._authSubject = authSubject;
+    }
+    // #endregion
+    // #region Methods
+    /**
+     * Validates the authentication credentials.
+     *
+     * @public
+     * @param userName The user name
+     * @param password The password
+     * @returns The authenticated user and this is also later available in the request.user object
+     */
+    async validate(userName, password) {
+        const user = await this._authSubject.findByLogin(userName);
+        if (!user) {
+            throw new common_1.NotFoundException('User not found');
+        }
+        // TODO Check if we need bcrypt here...
+        if (user.password !== password) {
+            throw new common_1.UnauthorizedException('Invalid credentials');
+        }
+        return user;
+    }
+};
+exports.LocalStrategy = LocalStrategy;
+exports.LocalStrategy = LocalStrategy = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [AuthSubjectPort_1.AuthSubjectPort])
+], LocalStrategy);
+//# sourceMappingURL=LocalStrategy.js.map

package/src/strategies/MicrosoftStrategy.d.ts

@@ -0,0 +1,35 @@
+import { ConfigService } from '@breadstone/archipel-platform-core';
+import type { Profile as PassportProfile } from 'passport';
+import { Strategy } from 'passport-microsoft';
+import type { IAuthSubject } from '../contracts/IAuthSubject';
+import { SocialAuthPort } from '../contracts/SocialAuthPort';
+declare const MicrosoftStrategy_base: new (...args: [options: import("passport-microsoft").MicrosoftStrategyOptionsWithRequest] | [options: import("passport-microsoft").MicrosoftStrategyOptions]) => Strategy & {
+    validate(...args: any[]): unknown;
+};
+/**
+ * The `MicrosoftStrategy` integrates Microsoft OAuth authentication.
+ *
+ * @public
+ */
+export declare class MicrosoftStrategy extends MicrosoftStrategy_base {
+    private readonly _socialAuth;
+    /**
+     * Initializes a new instance of the `MicrosoftStrategy` class.
+     *
+     * @public
+     * @param socialAuth Social auth port instance.
+     * @param configService Configuration service instance.
+     */
+    constructor(socialAuth: SocialAuthPort, configService: ConfigService);
+    /**
+     * Validates the Microsoft authentication payload.
+     *
+     * @public
+     * @param accessToken OAuth access token.
+     * @param refreshToken OAuth refresh token.
+     * @param profile Microsoft profile data.
+     * @returns The authenticated user.
+     */
+    validate(accessToken: string, refreshToken: string, profile: PassportProfile): Promise<IAuthSubject>;
+}
+export {};

package/src/strategies/MicrosoftStrategy.js

@@ -0,0 +1,75 @@
+"use strict";
+// #region Imports
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MicrosoftStrategy = void 0;
+const tslib_1 = require("tslib");
+const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_microsoft_1 = require("passport-microsoft");
+const SocialAuthPort_1 = require("../contracts/SocialAuthPort");
+// #endregion
+/**
+ * The `MicrosoftStrategy` integrates Microsoft OAuth authentication.
+ *
+ * @public
+ */
+let MicrosoftStrategy = class MicrosoftStrategy extends (0, passport_1.PassportStrategy)(passport_microsoft_1.Strategy, 'microsoft') {
+    // #endregion
+    // #region Ctor
+    /**
+     * Initializes a new instance of the `MicrosoftStrategy` class.
+     *
+     * @public
+     * @param socialAuth Social auth port instance.
+     * @param configService Configuration service instance.
+     */
+    constructor(socialAuth, configService) {
+        super({
+            clientID: configService.get('AUTH_MICROSOFT_CLIENT_ID'),
+            clientSecret: configService.get('AUTH_MICROSOFT_CLIENT_SECRET'),
+            callbackURL: configService.tryGet('AUTH_MICROSOFT_CALLBACK_URL', '/auth/microsoft/callback'),
+            tenant: configService.tryGet('AUTH_MICROSOFT_TENANT', 'common'),
+            scope: ['user.read'],
+            state: true,
+        });
+        this._socialAuth = socialAuth;
+    }
+    // #endregion
+    // #region Methods
+    /**
+     * Validates the Microsoft authentication payload.
+     *
+     * @public
+     * @param accessToken OAuth access token.
+     * @param refreshToken OAuth refresh token.
+     * @param profile Microsoft profile data.
+     * @returns The authenticated user.
+     */
+    async validate(accessToken, refreshToken, profile) {
+        void accessToken;
+        void refreshToken;
+        const email = profile.emails?.[0]?.value;
+        if (!email) {
+            throw new common_1.UnauthorizedException('No email provided from Microsoft');
+        }
+        const displayName = profile.displayName ?? profile.name?.givenName ?? profile.name?.familyName;
+        if (!displayName) {
+            throw new common_1.UnauthorizedException('No display name provided from Microsoft');
+        }
+        const userName = profile.username ?? email.split('@')[0];
+        const user = await this._socialAuth.findOrCreateByProfile({
+            provider: 'microsoft',
+            email: email,
+            userName: userName,
+            displayName: displayName,
+        });
+        return user;
+    }
+};
+exports.MicrosoftStrategy = MicrosoftStrategy;
+exports.MicrosoftStrategy = MicrosoftStrategy = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [SocialAuthPort_1.SocialAuthPort, archipel_platform_core_1.ConfigService])
+], MicrosoftStrategy);
+//# sourceMappingURL=MicrosoftStrategy.js.map