@breadstone/archipel-platform-authentication 0.0.35 → 0.0.37

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@breadstone/archipel-platform-authentication",
-  "version": "0.0.35",
+  "version": "0.0.37",
   "description": "JWT and OAuth authentication, MFA, session management, and email verification for NestJS applications.",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -89,10 +89,10 @@
     "README.md"
   ],
   "dependencies": {
-    "@breadstone/archipel-platform-configuration": "0.0.35",
-    "@breadstone/archipel-platform-core": "0.0.35",
-    "@breadstone/archipel-platform-cryptography": "0.0.35",
-    "@breadstone/archipel-platform-mapping": "0.0.35",
+    "@breadstone/archipel-platform-configuration": "0.0.37",
+    "@breadstone/archipel-platform-core": "0.0.37",
+    "@breadstone/archipel-platform-cryptography": "0.0.37",
+    "@breadstone/archipel-platform-mapping": "0.0.37",
     "tslib": "2.8.1"
   },
   "peerDependencies": {

package/src/AuthModule.d.ts

@@ -72,6 +72,32 @@ export interface IAuthModuleOptions {
      * For multi-instance deployments, provide a Redis-backed implementation.
      */
     challengeStore?: Type<ChallengeStorePort>;
+    /**
+     * Optional middleware configuration.
+     * Controls registration of `LastActiveMiddleware` and `LimitRequestSizeMiddleware`.
+     * Both are enabled by default when omitted.
+     */
+    middleware?: IAuthMiddlewareOptions;
+}
+/**
+ * Configuration for the auth module's middleware registration.
+ *
+ * @public
+ */
+export interface IAuthMiddlewareOptions {
+    /**
+     * Configuration for the last-active tracking middleware.
+     * - `true` or `undefined`: enabled for all routes (default)
+     * - `false`: disabled entirely
+     */
+    lastActive?: boolean;
+    /**
+     * Configuration for the request size limit middleware on the register endpoint.
+     * - `undefined`: enabled with default path `'auth/register'`
+     * - `false`: disabled entirely
+     * - `string`: custom path for the register endpoint (relative, without global prefix)
+     */
+    requestSizeLimit?: false | string;
 }
 /**
  * The `AuthModule` handles JWT-based authentication,
@@ -89,6 +115,7 @@ export interface IAuthModuleOptions {
  * @public
  */
 export declare class AuthModule {
+    private static _options;
     /**
      * Registers the auth module with the provided port implementations.
      *

package/src/AuthModule.js

@@ -57,6 +57,7 @@ const VerificationService_1 = require("./services/VerificationService");
  * @public
  */
 let AuthModule = AuthModule_1 = class AuthModule {
+    // #endregion
     // #region Methods
     /**
      * Registers the auth module with the provided port implementations.
@@ -66,6 +67,7 @@ let AuthModule = AuthModule_1 = class AuthModule {
      * @returns The configured dynamic module.
      */
     static register(options) {
+        AuthModule_1._options = options;
         const portProviders = [
             { provide: AuthSubjectPort_1.AuthSubjectPort, useClass: options.authSubject },
             { provide: MfaSubjectPort_1.MfaSubjectPort, useClass: options.mfaSubject },
@@ -164,14 +166,20 @@ let AuthModule = AuthModule_1 = class AuthModule {
         };
     }
     configure(consumer) {
-        consumer.apply(archipel_platform_core_1.LimitRequestSizeMiddleware).forRoutes({
-            path: 'api/auth/register',
-            method: common_1.RequestMethod.POST,
-        });
-        consumer.apply(middlewares_1.LastActiveMiddleware).forRoutes({
-            path: '*',
-            method: common_1.RequestMethod.ALL,
-        });
+        const middleware = AuthModule_1._options?.middleware;
+        if (middleware?.requestSizeLimit !== false) {
+            const registerPath = typeof middleware?.requestSizeLimit === 'string' ? middleware.requestSizeLimit : 'auth/register';
+            consumer.apply(archipel_platform_core_1.LimitRequestSizeMiddleware).forRoutes({
+                path: registerPath,
+                method: common_1.RequestMethod.POST,
+            });
+        }
+        if (middleware?.lastActive !== false) {
+            consumer.apply(middlewares_1.LastActiveMiddleware).forRoutes({
+                path: '/{*path}',
+                method: common_1.RequestMethod.ALL,
+            });
+        }
     }
 };
 exports.AuthModule = AuthModule;