@ciscode/authentication-kit 1.4.0 → 1.4.1

package/README.md

@@ -107,17 +107,18 @@ export class AppModule implements OnModuleInit {
 
 ## API Routes
 
-### Local Auth Routes (Public)
+### Local Auth Routes
 
 ```
-POST   /api/auth/register
-POST   /api/auth/verify-email
-POST   /api/auth/resend-verification
-POST   /api/auth/login
-POST   /api/auth/refresh-token
-POST   /api/auth/forgot-password
-POST   /api/auth/reset-password
-DELETE /api/auth/account (protected)
+POST   /api/auth/register              | Register new user (public)
+POST   /api/auth/verify-email          | Verify email with token (public)
+POST   /api/auth/resend-verification   | Resend verification email (public)
+POST   /api/auth/login                 | Login with credentials (public)
+POST   /api/auth/refresh-token         | Refresh access token (public)
+POST   /api/auth/forgot-password       | Request password reset (public)
+POST   /api/auth/reset-password        | Reset password with token (public)
+GET    /api/auth/me                    | Get current user profile (protected)
+DELETE /api/auth/account               | Delete own account (protected)
 ```
 
 ### OAuth Routes - Mobile Exchange (Public)
@@ -321,6 +322,54 @@ Content-Type: application/json
 }
 ```
 
+### Get Current User Profile
+
+**Request:**
+
+```json
+GET /api/auth/me
+Authorization: Bearer access-token
+```
+
+**Response:**
+
+```json
+{
+  "ok": true,
+  "data": {
+    "_id": "507f1f77bcf86cd799439011",
+    "fullname": {
+      "fname": "Test",
+      "lname": "User"
+    },
+    "username": "test-user",
+    "email": "user@example.com",
+    "avatar": "https://example.com/avatar.jpg",
+    "phoneNumber": "+1234567890",
+    "jobTitle": "Software Engineer",
+    "company": "Ciscode",
+    "isVerified": true,
+    "isBanned": false,
+    "roles": [
+      {
+        "_id": "507f1f77bcf86cd799439012",
+        "name": "user",
+        "permissions": [
+          {
+            "_id": "507f1f77bcf86cd799439013",
+            "name": "read:profile"
+          }
+        ]
+      }
+    ],
+    "createdAt": "2026-01-28T10:00:00.000Z",
+    "updatedAt": "2026-01-28T10:00:00.000Z"
+  }
+}
+```
+
+**Note:** Sensitive fields like `password` and `passwordChangedAt` are automatically excluded from the response.
+
 ### Delete Account
 
 **Request:**

package/dist/controllers/auth.controller.d.ts

@@ -19,6 +19,7 @@ export declare class AuthController {
     refresh(dto: RefreshTokenDto, req: Request, res: Response): Promise<Response<any, Record<string, any>>>;
     forgotPassword(dto: ForgotPasswordDto, res: Response): Promise<Response<any, Record<string, any>>>;
     resetPassword(dto: ResetPasswordDto, res: Response): Promise<Response<any, Record<string, any>>>;
+    getMe(req: Request, res: Response): Promise<Response<any, Record<string, any>>>;
     deleteAccount(req: Request, res: Response): Promise<Response<any, Record<string, any>>>;
     microsoftExchange(body: {
         idToken: string;

package/dist/controllers/auth.controller.js

@@ -84,6 +84,14 @@ let AuthController = class AuthController {
         const result = await this.auth.resetPassword(dto.token, dto.newPassword);
         return res.status(200).json(result);
     }
+    async getMe(req, res) {
+        var _a;
+        const userId = (_a = req.user) === null || _a === void 0 ? void 0 : _a.sub;
+        if (!userId)
+            return res.status(401).json({ message: 'Unauthorized.' });
+        const result = await this.auth.getMe(userId);
+        return res.status(200).json(result);
+    }
     async deleteAccount(req, res) {
         var _a;
         const userId = (_a = req.user) === null || _a === void 0 ? void 0 : _a.sub;
@@ -202,6 +210,15 @@ __decorate([
     __metadata("design:paramtypes", [reset_password_dto_1.ResetPasswordDto, Object]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "resetPassword", null);
+__decorate([
+    (0, common_1.Get)('me'),
+    (0, common_1.UseGuards)(authenticate_guard_1.AuthenticateGuard),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "getMe", null);
 __decorate([
     (0, common_1.Delete)('account'),
     (0, common_1.UseGuards)(authenticate_guard_1.AuthenticateGuard),

package/dist/services/auth.service.d.ts

@@ -21,6 +21,10 @@ export declare class AuthService {
         accessToken: string;
         refreshToken: string;
     }>;
+    getMe(userId: string): Promise<{
+        ok: boolean;
+        data: any;
+    }>;
     register(dto: RegisterDto): Promise<{
         id: any;
         email: string;

package/dist/services/auth.service.js

@@ -113,6 +113,31 @@ let AuthService = class AuthService {
         const refreshToken = this.signRefreshToken({ sub: userId, purpose: 'refresh' });
         return { accessToken, refreshToken };
     }
+    async getMe(userId) {
+        try {
+            const user = await this.users.findByIdWithRolesAndPermissions(userId);
+            if (!user) {
+                throw new common_1.NotFoundException('User not found');
+            }
+            if (user.isBanned) {
+                throw new common_1.ForbiddenException('Account has been banned. Please contact support');
+            }
+            // Return user data without sensitive information
+            const userObject = user.toObject ? user.toObject() : user;
+            const { password, passwordChangedAt, ...safeUser } = userObject;
+            return {
+                ok: true,
+                data: safeUser
+            };
+        }
+        catch (error) {
+            if (error instanceof common_1.NotFoundException || error instanceof common_1.ForbiddenException) {
+                throw error;
+            }
+            this.logger.error(`Get profile failed: ${error.message}`, error.stack, 'AuthService');
+            throw new common_1.InternalServerErrorException('Failed to retrieve profile');
+        }
+    }
     async register(dto) {
         try {
             // Generate username from fname-lname if not provided

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ciscode/authentication-kit",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "NestJS auth kit with local + OAuth, JWT, RBAC, password reset.",
   "publishConfig": {
     "access": "public"