@dismissible/nestjs-api 1.0.3-alpha.cdc64a4.0 → 2.0.2-alpha.99ffc23.0

package/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <a href="https://dismissible.io" target="_blank"><img src="../docs/images/dismissible_logo.png" width="120" alt="Dismissible" /></a>
+  <a href="https://dismissible.io" target="_blank"><img src="https://raw.githubusercontent.com/DismissibleIo/dismissible-api/main/docs/images/dismissible_logo.png" width="120" alt="Dismissible" /></a>
 </p>
 
 <p align="center">Never Show The Same Thing Twice!</p>
@@ -126,7 +126,7 @@ Enable Swagger documentation by setting `DISMISSIBLE_SWAGGER_ENABLED=true` and v
 | ------------------------------- | ------------------------------------------------------------------------- | ---------- |
 | `DISMISSIBLE_PORT`              | Port the API listens on                                                   | `3001`     |
 | `DISMISSIBLE_STORAGE_TYPE`      | Storage backend type eg. `postgres`, `dynamodb`, `memory`                 | `postgres` |
-| `DISMISSIBLE_RUN_STORAGE_SETUP` | Run database migrations on startup. Each storage type will have their own | `false`    |
+| `DISMISSIBLE_STORAGE_RUN_SETUP` | Run database migrations on startup. Each storage type will have their own | `false`    |
 
 ### Storage Settings
 
@@ -177,16 +177,20 @@ When enabled, Swagger documentation is published to the path specified by `DISMI
 
 You can secure your API with any OIDC-compliant provider (Auth0, Okta, Keycloak, etc.). This ensures that no one can fill your dismissible service with junk.
 
-| Variable                                   | Description                          | Default               |
-| ------------------------------------------ | ------------------------------------ | --------------------- |
-| `DISMISSIBLE_JWT_AUTH_ENABLED`             | Enable JWT authentication            | `false`               |
-| `DISMISSIBLE_JWT_AUTH_WELL_KNOWN_URL`      | OIDC discovery URL                   | _required_ if enabled |
-| `DISMISSIBLE_JWT_AUTH_ISSUER`              | Expected JWT issuer                  | _-_                   |
-| `DISMISSIBLE_JWT_AUTH_AUDIENCE`            | Expected JWT audience                | _-_                   |
-| `DISMISSIBLE_JWT_AUTH_ALGORITHMS`          | Allowed algorithms (comma-separated) | `RS256`               |
-| `DISMISSIBLE_JWT_AUTH_JWKS_CACHE_DURATION` | JWKS cache duration (ms)             | `600000`              |
-| `DISMISSIBLE_JWT_AUTH_REQUEST_TIMEOUT`     | Request timeout (ms)                 | `30000`               |
-| `DISMISSIBLE_JWT_AUTH_PRIORITY`            | Hook priority (lower runs first)     | `-100`                |
+| Variable                                   | Description                                 | Default               |
+| ------------------------------------------ | ------------------------------------------- | --------------------- |
+| `DISMISSIBLE_JWT_AUTH_ENABLED`             | Enable JWT authentication                   | `false`               |
+| `DISMISSIBLE_JWT_AUTH_WELL_KNOWN_URL`      | OIDC discovery URL                          | _required_ if enabled |
+| `DISMISSIBLE_JWT_AUTH_ISSUER`              | Expected JWT issuer                         | _-_                   |
+| `DISMISSIBLE_JWT_AUTH_AUDIENCE`            | Expected JWT audience                       | _-_                   |
+| `DISMISSIBLE_JWT_AUTH_ALGORITHMS`          | Allowed algorithms (comma-separated)        | `RS256`               |
+| `DISMISSIBLE_JWT_AUTH_JWKS_CACHE_DURATION` | JWKS cache duration (ms)                    | `600000`              |
+| `DISMISSIBLE_JWT_AUTH_REQUEST_TIMEOUT`     | Request timeout (ms)                        | `30000`               |
+| `DISMISSIBLE_JWT_AUTH_PRIORITY`            | Hook priority (lower runs first)            | `-100`                |
+| `DISMISSIBLE_JWT_AUTH_MATCH_USER_ID`       | Enable user ID matching                     | `true`                |
+| `DISMISSIBLE_JWT_AUTH_USER_ID_CLAIM`       | JWT claim key for user ID matching          | `sub`                 |
+| `DISMISSIBLE_JWT_AUTH_USER_ID_MATCH_TYPE`  | Match method: `exact`, `substring`, `regex` | `exact`               |
+| `DISMISSIBLE_JWT_AUTH_USER_ID_MATCH_REGEX` | Regex pattern (required if type=regex)      | _-_                   |
 
 ### CORS Settings
 
@@ -197,8 +201,8 @@ Cross-Origin Resource Sharing (CORS) controls which domains can access your API
 
 | Variable                           | Description                        | Default                                   |
 | ---------------------------------- | ---------------------------------- | ----------------------------------------- |
-| `DISMISSIBLE_CORS_ENABLED`         | Enable CORS                        | `true`                                    |
-| `DISMISSIBLE_CORS_ORIGINS`         | Allowed origins (comma-separated)  | `http://localhost:3000`                   |
+| `DISMISSIBLE_CORS_ENABLED`         | Enable CORS                        | `false`                                   |
+| `DISMISSIBLE_CORS_ORIGINS`         | Allowed origins (comma-separated)  | ``                                        |
 | `DISMISSIBLE_CORS_METHODS`         | Allowed HTTP methods               | `GET,POST,DELETE,OPTIONS`                 |
 | `DISMISSIBLE_CORS_ALLOWED_HEADERS` | Allowed headers                    | `Content-Type,Authorization,x-request-id` |
 | `DISMISSIBLE_CORS_CREDENTIALS`     | Allow credentials                  | `true`                                    |
@@ -283,6 +287,10 @@ jwtAuth:
   jwksCacheDuration: ${DISMISSIBLE_JWT_AUTH_JWKS_CACHE_DURATION:-600000}
   requestTimeout: ${DISMISSIBLE_JWT_AUTH_REQUEST_TIMEOUT:-30000}
   priority: ${DISMISSIBLE_JWT_AUTH_PRIORITY:--100}
+  matchUserId: ${DISMISSIBLE_JWT_AUTH_MATCH_USER_ID:-true}
+  userIdClaim: ${DISMISSIBLE_JWT_AUTH_USER_ID_CLAIM:-sub}
+  userIdMatchType: ${DISMISSIBLE_JWT_AUTH_USER_ID_MATCH_TYPE:-exact}
+  userIdMatchRegex: ${DISMISSIBLE_JWT_AUTH_USER_ID_MATCH_REGEX:-}
 
 validation:
   disableErrorMessages: ${DISMISSIBLE_VALIDATION_DISABLE_ERROR_MESSAGES:-true}
@@ -418,7 +426,7 @@ The fastest way to get started:
 # PostgreSQL (default)
 docker run -p 3001:3001 \
   -e DISMISSIBLE_STORAGE_TYPE=postgres \
-  -e DISMISSIBLE_RUN_STORAGE_SETUP=true \
+  -e DISMISSIBLE_STORAGE_RUN_SETUP=true \
   -e DISMISSIBLE_STORAGE_POSTGRES_CONNECTION_STRING="postgresql://user:password@host:5432/dismissible" \
   dismissibleio/dismissible-api:latest
 

package/bin/dismissible-storage-setup.js

@@ -12,6 +12,10 @@ switch (storageType) {
     console.log('Running DynamoDB storage setup...');
     execSync('npm run storage:setup:dynamodb', { stdio: 'inherit' });
     break;
+  case 'memory':
+    console.log('No setup required for In Memory storage...');
+    process.exit(0);
+    break;
   default:
     if (storageType) {
       console.log(`Warning: Unknown storage type '${storageType}'. Skipping storage setup.`);

package/config/.env.development.yaml

@@ -9,7 +9,12 @@ helmet:
   enabled: false
 
 cors:
-  enabled: false
+  enabled: true
+  origins: http://localhost:5173
+  methods: GET,POST,DELETE,OPTIONS
+  allowedHeaders: Content-Type,Authorization,x-request-id
+  credentials: true
+  maxAge: 86400
 
 storage:
   # postgres | dynamodb | memory
@@ -26,6 +31,16 @@ storage:
 jwtAuth:
   enabled: false
 
+rateLimiter:
+  enabled: true
+  points: ${DISMISSIBLE_RATE_LIMITER_POINTS:-10000}
+  duration: ${DISMISSIBLE_RATE_LIMITER_DURATION:-1}
+  blockDuration: ${DISMISSIBLE_RATE_LIMITER_BLOCK_DURATION:-1}
+  keyType: ${DISMISSIBLE_RATE_LIMITER_KEY_TYPE:-ip,origin,referrer}
+  keyMode: ${DISMISSIBLE_RATE_LIMITER_KEY_MODE:-any}
+  ignoredKeys: ${DISMISSIBLE_RATE_LIMITER_IGNORED_KEYS:-}
+  priority: ${DISMISSIBLE_RATE_LIMITER_PRIORITY:--101}
+
 validation:
   disableErrorMessages: false
   whitelist: false

package/config/.env.yaml

@@ -39,11 +39,31 @@ jwtAuth:
   wellKnownUrl: ${DISMISSIBLE_JWT_AUTH_WELL_KNOWN_URL:-}
   issuer: ${DISMISSIBLE_JWT_AUTH_ISSUER:-}
   audience: ${DISMISSIBLE_JWT_AUTH_AUDIENCE:-}
-  algorithms:
-    - ${DISMISSIBLE_JWT_AUTH_ALGORITHMS:-RS256}
+  algorithms: ${DISMISSIBLE_JWT_AUTH_ALGORITHMS:-RS256}
   jwksCacheDuration: ${DISMISSIBLE_JWT_AUTH_JWKS_CACHE_DURATION:-600000}
   requestTimeout: ${DISMISSIBLE_JWT_AUTH_REQUEST_TIMEOUT:-30000}
   priority: ${DISMISSIBLE_JWT_AUTH_PRIORITY:--100}
+  matchUserId: ${DISMISSIBLE_JWT_AUTH_MATCH_USER_ID:-true}
+  userIdMatchType: ${DISMISSIBLE_JWT_AUTH_USER_ID_MATCH_TYPE:-exact}
+  userIdMatchRegex: ${DISMISSIBLE_JWT_AUTH_USER_ID_MATCH_REGEX:-}
+  userIdClaim: ${DISMISSIBLE_JWT_AUTH_USER_ID_CLAIM:-sub}
+
+rateLimiter:
+  enabled: ${DISMISSIBLE_RATE_LIMITER_ENABLED:-false}
+  # Number of requests allowed per duration window
+  points: ${DISMISSIBLE_RATE_LIMITER_POINTS:-10000}
+  # Time window in seconds for rate limiting
+  duration: ${DISMISSIBLE_RATE_LIMITER_DURATION:-1}
+  # Optional: Duration in seconds to block requests after limit is exceeded (if not set, requests are allowed again after the duration window resets)
+  blockDuration: ${DISMISSIBLE_RATE_LIMITER_BLOCK_DURATION:-}
+  # Key type(s) for rate limiting: 'ip' (by IP address), 'origin' (by Origin header), 'referrer' (by Referer header). Can be comma-separated to combine types (e.g., 'ip,origin')
+  keyType: ${DISMISSIBLE_RATE_LIMITER_KEY_TYPE:-ip,origin,referrer}
+  # Mode for combining key types: 'and' (combine all), 'or' (use first available), 'any' (check all independently)
+  keyMode: ${DISMISSIBLE_RATE_LIMITER_KEY_MODE:-any}
+  # Optional: Comma-separated keys to bypass rate limiting. Matching is exact after trim+lowercase. For Origin/Referer, the URL hostname is matched (e.g. "https://google.com/search" matches "google.com").
+  ignoredKeys: ${DISMISSIBLE_RATE_LIMITER_IGNORED_KEYS:-}
+  # Hook priority (lower numbers run first)
+  priority: ${DISMISSIBLE_RATE_LIMITER_PRIORITY:--101}
 
 validation:
   disableErrorMessages: ${DISMISSIBLE_VALIDATION_DISABLE_ERROR_MESSAGES:-true}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dismissible/nestjs-api",
-  "version": "1.0.3-alpha.cdc64a4.0",
+  "version": "2.0.2-alpha.99ffc23.0",
   "description": "Dismissible API application",
   "main": "./src/index.js",
   "types": "./src/index.d.ts",
@@ -30,16 +30,17 @@
     "storage:setup:dynamodb": "npx dismissible-dynamodb-setup"
   },
   "dependencies": {
-    "@dismissible/nestjs-core": "1.0.3-alpha.cdc64a4.0",
-    "@dismissible/nestjs-item": "1.0.3-alpha.cdc64a4.0",
-    "@dismissible/nestjs-jwt-auth-hook": "1.0.3-alpha.cdc64a4.0",
-    "@dismissible/nestjs-storage": "1.0.3-alpha.cdc64a4.0",
-    "@dismissible/nestjs-postgres-storage": "1.0.3-alpha.cdc64a4.0",
-    "@dismissible/nestjs-dynamodb-storage": "1.0.3-alpha.cdc64a4.0",
-    "@dismissible/nestjs-logger": "1.0.3-alpha.cdc64a4.0",
-    "@nestjs/common": "11.1.10",
-    "@nestjs/core": "11.1.10",
-    "@nestjs/platform-fastify": "11.1.10",
+    "@dismissible/nestjs-core": "2.0.2-alpha.99ffc23.0",
+    "@dismissible/nestjs-item": "2.0.2-alpha.99ffc23.0",
+    "@dismissible/nestjs-jwt-auth-hook": "2.0.2-alpha.99ffc23.0",
+    "@dismissible/nestjs-storage": "2.0.2-alpha.99ffc23.0",
+    "@dismissible/nestjs-postgres-storage": "2.0.2-alpha.99ffc23.0",
+    "@dismissible/nestjs-dynamodb-storage": "2.0.2-alpha.99ffc23.0",
+    "@dismissible/nestjs-logger": "2.0.2-alpha.99ffc23.0",
+    "@dismissible/nestjs-rate-limiter-hook": "2.0.1",
+    "@nestjs/common": "11.1.11",
+    "@nestjs/core": "11.1.11",
+    "@nestjs/platform-fastify": "11.1.11",
     "fastify": "5.6.2",
     "@fastify/helmet": "13.0.2",
     "@fastify/static": "8.3.0",

package/src/app.module.d.ts

@@ -1,11 +1,15 @@
 import { DynamicModule, ModuleMetadata, Type } from '@nestjs/common';
+import { IDismissibleLifecycleHook } from '@dismissible/nestjs-core';
 import { IDismissibleLogger } from '@dismissible/nestjs-logger';
 import { DefaultAppConfig } from './config/default-app.config';
+import { StorageType } from './storage/storage.config';
 export type AppModuleOptions = {
     configPath?: string;
     schema?: new () => DefaultAppConfig;
     logger?: Type<IDismissibleLogger>;
     imports?: DynamicModule[];
+    hooks?: Type<IDismissibleLifecycleHook>[];
+    storage?: StorageType;
 };
 export declare class AppModule {
     static forRoot(options?: AppModuleOptions): {

package/src/app.module.js

@@ -11,6 +11,8 @@ const path_1 = require("path");
 const nestjs_core_1 = require("@dismissible/nestjs-core");
 const dynamic_storage_module_1 = require("./storage/dynamic-storage.module");
 const nestjs_jwt_auth_hook_1 = require("@dismissible/nestjs-jwt-auth-hook");
+const nestjs_rate_limiter_hook_1 = require("@dismissible/nestjs-rate-limiter-hook");
+const class_transformer_1 = require("class-transformer");
 let AppModule = AppModule_1 = class AppModule {
     static forRoot(options) {
         return {
@@ -27,19 +29,25 @@ let AppModule = AppModule_1 = class AppModule {
                 }),
                 health_1.HealthModule,
                 ...(options?.imports ?? []),
+                nestjs_rate_limiter_hook_1.RateLimiterHookModule.forRootAsync({
+                    useFactory: (config) => {
+                        return config.rateLimiter ?? (0, class_transformer_1.plainToClass)(nestjs_rate_limiter_hook_1.RateLimiterHookConfig, { enabled: false });
+                    },
+                    inject: [options?.schema ?? app_config_1.AppConfig],
+                }),
                 nestjs_jwt_auth_hook_1.JwtAuthHookModule.forRootAsync({
                     useFactory: (config) => config,
                     inject: [nestjs_jwt_auth_hook_1.JwtAuthHookConfig],
                 }),
                 nestjs_core_1.DismissibleModule.forRoot({
                     logger: options?.logger,
-                    hooks: [nestjs_jwt_auth_hook_1.JwtAuthHook],
+                    hooks: [nestjs_jwt_auth_hook_1.JwtAuthHook, nestjs_rate_limiter_hook_1.RateLimiterHook, ...(options?.hooks ?? [])],
                     storage: dynamic_storage_module_1.DynamicStorageModule.forRootAsync({
                         // TODO: nestjs doesn't support optional dynamic modules.
                         //   So instead, we are just using the env vars to switch between modules.
                         //   This isn't ideal, but there's not a great option. I will look to see
                         //   if we can raise an issue similar to this: https://github.com/nestjs/nest/issues/9868
-                        storage: process.env.DISMISSIBLE_STORAGE_TYPE,
+                        storage: options?.storage ?? process.env.DISMISSIBLE_STORAGE_TYPE,
                     }),
                 }),
             ],

package/src/app.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.module.js","sourceRoot":"","sources":["../../../api/src/app.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAA6E;AAC7E,qCAAwC;AACxC,qCAAwC;AACxC,oDAAgD;AAChD,+BAA4B;AAC5B,0DAA6D;AAG7D,6EAAwE;AACxE,4EAI2C;AAWpC,IAAM,SAAS,iBAAf,MAAM,SAAS;IACpB,MAAM,CAAC,OAAO,CAAC,OAA0B;QACvC,OAAO;YACL,MAAM,EAAE,WAAS;YACjB,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,OAA0B;QACjD,OAAO;YACL,OAAO,EAAE;gBACP,qBAAY,CAAC,OAAO,CAAC;oBACnB,IAAI,EAAE,OAAO,EAAE,UAAU,IAAI,IAAA,WAAI,EAAC,SAAS,EAAE,WAAW,CAAC;oBACzD,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,sBAAS;iBACrC,CAAC;gBACF,qBAAY;gBACZ,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;gBAC3B,wCAAiB,CAAC,YAAY,CAAC;oBAC7B,UAAU,EAAE,CAAC,MAAyB,EAAE,EAAE,CAAC,MAAM;oBACjD,MAAM,EAAE,CAAC,wCAAiB,CAAC;iBAC5B,CAAC;gBACF,+BAAiB,CAAC,OAAO,CAAC;oBACxB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,KAAK,EAAE,CAAC,kCAAW,CAAC;oBACpB,OAAO,EAAE,6CAAoB,CAAC,YAAY,CAAC;wBACzC,yDAAyD;wBACzD,0EAA0E;wBAC1E,yEAAyE;wBACzE,yFAAyF;wBACzF,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAuC;qBAC7D,CAAC;iBACH,CAAC;aACH;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAnCY,8BAAS;oBAAT,SAAS;IADrB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,SAAS,CAmCrB"}
+{"version":3,"file":"app.module.js","sourceRoot":"","sources":["../../../api/src/app.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAA6E;AAC7E,qCAAwC;AACxC,qCAAwC;AACxC,oDAAgD;AAChD,+BAA4B;AAC5B,0DAAwF;AAGxF,6EAAwE;AACxE,4EAI2C;AAE3C,oFAI+C;AAC/C,yDAAiD;AAY1C,IAAM,SAAS,iBAAf,MAAM,SAAS;IACpB,MAAM,CAAC,OAAO,CAAC,OAA0B;QACvC,OAAO;YACL,MAAM,EAAE,WAAS;YACjB,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,OAA0B;QACjD,OAAO;YACL,OAAO,EAAE;gBACP,qBAAY,CAAC,OAAO,CAAC;oBACnB,IAAI,EAAE,OAAO,EAAE,UAAU,IAAI,IAAA,WAAI,EAAC,SAAS,EAAE,WAAW,CAAC;oBACzD,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,sBAAS;iBACrC,CAAC;gBACF,qBAAY;gBACZ,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;gBAC3B,gDAAqB,CAAC,YAAY,CAAC;oBACjC,UAAU,EAAE,CAAC,MAAwB,EAAE,EAAE;wBACvC,OAAO,MAAM,CAAC,WAAW,IAAI,IAAA,gCAAY,EAAC,gDAAqB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;oBACvF,CAAC;oBACD,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,sBAAS,CAAC;iBACvC,CAAC;gBACF,wCAAiB,CAAC,YAAY,CAAC;oBAC7B,UAAU,EAAE,CAAC,MAAyB,EAAE,EAAE,CAAC,MAAM;oBACjD,MAAM,EAAE,CAAC,wCAAiB,CAAC;iBAC5B,CAAC;gBACF,+BAAiB,CAAC,OAAO,CAAC;oBACxB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,KAAK,EAAE,CAAC,kCAAW,EAAE,0CAAe,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBAChE,OAAO,EAAE,6CAAoB,CAAC,YAAY,CAAC;wBACzC,yDAAyD;wBACzD,0EAA0E;wBAC1E,yEAAyE;wBACzE,yFAAyF;wBACzF,OAAO,EAAE,OAAO,EAAE,OAAO,IAAK,OAAO,CAAC,GAAG,CAAC,wBAAwC;qBACnF,CAAC;iBACH,CAAC;aACH;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAzCY,8BAAS;oBAAT,SAAS;IADrB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,SAAS,CAyCrB"}

package/src/app.setup.js

@@ -1,49 +1,18 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.configureApp = configureApp;
-const tslib_1 = require("tslib");
-const common_1 = require("@nestjs/common");
-const helmet_1 = tslib_1.__importDefault(require("@fastify/helmet"));
 const swagger_1 = require("./swagger");
 const cors_1 = require("./cors");
-const helmet_2 = require("./helmet");
+const helmet_1 = require("./helmet");
 const validation_1 = require("./validation");
+const nestjs_logger_1 = require("@dismissible/nestjs-logger");
 async function configureApp(app) {
-    const fastifyApp = app;
-    const helmetConfig = app.get(helmet_2.HelmetConfig);
-    if (helmetConfig.enabled) {
-        await fastifyApp.register(helmet_1.default, {
-            contentSecurityPolicy: helmetConfig.contentSecurityPolicy ?? true,
-            crossOriginEmbedderPolicy: helmetConfig.crossOriginEmbedderPolicy ?? true,
-            hsts: {
-                maxAge: helmetConfig.hstsMaxAge ?? 31536000,
-                includeSubDomains: helmetConfig.hstsIncludeSubDomains ?? true,
-                preload: helmetConfig.hstsPreload ?? false,
-            },
-        });
-    }
-    const corsConfig = app.get(cors_1.CorsConfig);
-    if (corsConfig.enabled) {
-        app.enableCors({
-            origin: corsConfig.origins ?? ['http://localhost:3001', 'http://localhost:5173'],
-            methods: corsConfig.methods ?? ['GET', 'POST', 'DELETE', 'OPTIONS'],
-            allowedHeaders: corsConfig.allowedHeaders ?? [
-                'Content-Type',
-                'Authorization',
-                'x-request-id',
-            ],
-            credentials: corsConfig.credentials ?? true,
-            maxAge: corsConfig.maxAge ?? 86400,
-        });
-    }
-    const validationConfig = app.get(validation_1.ValidationConfig);
-    app.useGlobalPipes(new common_1.ValidationPipe({
-        whitelist: validationConfig.whitelist ?? true,
-        forbidNonWhitelisted: validationConfig.forbidNonWhitelisted ?? true,
-        transform: validationConfig.transform ?? true,
-        disableErrorMessages: validationConfig.disableErrorMessages ?? true,
-    }));
-    const swaggerConfig = app.get(swagger_1.SwaggerConfig);
-    (0, swagger_1.configureAppWithSwagger)(app, swaggerConfig);
+    const logger = app.get(nestjs_logger_1.DISMISSIBLE_LOGGER);
+    logger.setContext('AppSetup');
+    logger.info('Configuring application');
+    await (0, helmet_1.configureAppWithHelmet)(app);
+    (0, cors_1.configureAppWithCors)(app);
+    (0, validation_1.configureAppWithValidation)(app);
+    (0, swagger_1.configureAppWithSwagger)(app);
 }
 //# sourceMappingURL=app.setup.js.map

package/src/app.setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.setup.js","sourceRoot":"","sources":["../../../api/src/app.setup.ts"],"names":[],"mappings":";;AAQA,oCA2CC;;AAnDD,2CAAkE;AAElE,qEAA4C;AAC5C,uCAAmE;AACnE,iCAAoC;AACpC,qCAAwC;AACxC,6CAAgD;AAEzC,KAAK,UAAU,YAAY,CAAC,GAAqB;IACtD,MAAM,UAAU,GAAG,GAA6B,CAAC;IAEjD,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC;IAC3C,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,UAAU,CAAC,QAAQ,CAAC,gBAAa,EAAE;YACvC,qBAAqB,EAAE,YAAY,CAAC,qBAAqB,IAAI,IAAI;YACjE,yBAAyB,EAAE,YAAY,CAAC,yBAAyB,IAAI,IAAI;YACzE,IAAI,EAAE;gBACJ,MAAM,EAAE,YAAY,CAAC,UAAU,IAAI,QAAQ;gBAC3C,iBAAiB,EAAE,YAAY,CAAC,qBAAqB,IAAI,IAAI;gBAC7D,OAAO,EAAE,YAAY,CAAC,WAAW,IAAI,KAAK;aAC3C;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,iBAAU,CAAC,CAAC;IACvC,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,GAAG,CAAC,UAAU,CAAC;YACb,MAAM,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;YAChF,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;YACnE,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI;gBAC3C,cAAc;gBACd,eAAe;gBACf,cAAc;aACf;YACD,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,IAAI;YAC3C,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,KAAK;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,gBAAgB,GAAG,GAAG,CAAC,GAAG,CAAC,6BAAgB,CAAC,CAAC;IACnD,GAAG,CAAC,cAAc,CAChB,IAAI,uBAAc,CAAC;QACjB,SAAS,EAAE,gBAAgB,CAAC,SAAS,IAAI,IAAI;QAC7C,oBAAoB,EAAE,gBAAgB,CAAC,oBAAoB,IAAI,IAAI;QACnE,SAAS,EAAE,gBAAgB,CAAC,SAAS,IAAI,IAAI;QAC7C,oBAAoB,EAAE,gBAAgB,CAAC,oBAAoB,IAAI,IAAI;KACpE,CAAC,CACH,CAAC;IAEF,MAAM,aAAa,GAAG,GAAG,CAAC,GAAG,CAAC,uBAAa,CAAC,CAAC;IAC7C,IAAA,iCAAuB,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"app.setup.js","sourceRoot":"","sources":["../../../api/src/app.setup.ts"],"names":[],"mappings":";;AAOA,oCASC;AAfD,uCAAoD;AACpD,iCAA8C;AAC9C,qCAAkD;AAClD,6CAA0D;AAC1D,8DAAoF;AAE7E,KAAK,UAAU,YAAY,CAAC,GAAqB;IACtD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAqB,kCAAkB,CAAC,CAAC;IAC/D,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC9B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAEvC,MAAM,IAAA,+BAAsB,EAAC,GAAG,CAAC,CAAC;IAClC,IAAA,2BAAoB,EAAC,GAAG,CAAC,CAAC;IAC1B,IAAA,uCAA0B,EAAC,GAAG,CAAC,CAAC;IAChC,IAAA,iCAAuB,EAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}

package/src/config/config.module.js

@@ -22,7 +22,6 @@ let ConfigModule = ConfigModule_1 = class ConfigModule {
                     schema: options.schema,
                     load: [
                         (0, nest_typed_config_1.fileLoader)({
-                            basename: process.env.NODE_ENV ? '.env' : `.env.${process.env.NODE_ENV}`,
                             searchFrom: configPath,
                             ignoreEnvironmentVariableSubstitution: ignoreEnvSubstitution,
                         }),

package/src/config/config.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.module.js","sourceRoot":"","sources":["../../../../api/src/config/config.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAA+D;AAC/D,yDAAkE;AAClE,+BAA4B;AAqBrB,IAAM,YAAY,oBAAlB,MAAM,YAAY;IACvB;;;;OAIG;IACH,MAAM,CAAC,OAAO,CAAmB,OAAgC;QAC/D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,IAAI,IAAA,WAAI,EAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACnE,MAAM,qBAAqB,GAAG,OAAO,CAAC,qCAAqC,IAAI,KAAK,CAAC;QAErF,OAAO;YACL,MAAM,EAAE,cAAY;YACpB,OAAO,EAAE;gBACP,qCAAiB,CAAC,OAAO,CAAC;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,IAAI,EAAE;wBACJ,IAAA,8BAAU,EAAC;4BACT,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;4BACxE,UAAU,EAAE,UAAU;4BACtB,qCAAqC,EAAE,qBAAqB;yBAC7D,CAAC;qBACH;iBACF,CAAC;aACH;YACD,OAAO,EAAE,CAAC,qCAAiB,CAAC;SAC7B,CAAC;IACJ,CAAC;CACF,CAAA;AA3BY,oCAAY;uBAAZ,YAAY;IAFxB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,YAAY,CA2BxB"}
+{"version":3,"file":"config.module.js","sourceRoot":"","sources":["../../../../api/src/config/config.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAA+D;AAC/D,yDAAkE;AAClE,+BAA4B;AAqBrB,IAAM,YAAY,oBAAlB,MAAM,YAAY;IACvB;;;;OAIG;IACH,MAAM,CAAC,OAAO,CAAmB,OAAgC;QAC/D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,IAAI,IAAA,WAAI,EAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACnE,MAAM,qBAAqB,GAAG,OAAO,CAAC,qCAAqC,IAAI,KAAK,CAAC;QAErF,OAAO;YACL,MAAM,EAAE,cAAY;YACpB,OAAO,EAAE;gBACP,qCAAiB,CAAC,OAAO,CAAC;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,IAAI,EAAE;wBACJ,IAAA,8BAAU,EAAC;4BACT,UAAU,EAAE,UAAU;4BACtB,qCAAqC,EAAE,qBAAqB;yBAC7D,CAAC;qBACH;iBACF,CAAC;aACH;YACD,OAAO,EAAE,CAAC,qCAAiB,CAAC;SAC7B,CAAC;IACJ,CAAC;CACF,CAAA;AA1BY,oCAAY;uBAAZ,YAAY;IAFxB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,YAAY,CA0BxB"}

package/src/config/default-app.config.d.ts

@@ -2,8 +2,10 @@ import { ServerConfig } from '../server/server.config';
 import { CorsConfig } from '../cors';
 import { HelmetConfig } from '../helmet';
 import { ValidationConfig } from '../validation';
+import { RateLimiterHookConfig } from '@dismissible/nestjs-rate-limiter-hook';
 export declare class DefaultAppConfig {
     readonly server: ServerConfig;
+    readonly rateLimiter?: RateLimiterHookConfig;
     readonly cors: CorsConfig;
     readonly helmet: HelmetConfig;
     readonly validation: ValidationConfig;

package/src/config/default-app.config.js

@@ -8,6 +8,7 @@ const server_config_1 = require("../server/server.config");
 const cors_1 = require("../cors");
 const helmet_1 = require("../helmet");
 const validation_1 = require("../validation");
+const nestjs_rate_limiter_hook_1 = require("@dismissible/nestjs-rate-limiter-hook");
 class DefaultAppConfig {
 }
 exports.DefaultAppConfig = DefaultAppConfig;
@@ -16,6 +17,12 @@ tslib_1.__decorate([
     (0, class_transformer_1.Type)(() => server_config_1.ServerConfig),
     tslib_1.__metadata("design:type", server_config_1.ServerConfig)
 ], DefaultAppConfig.prototype, "server", void 0);
+tslib_1.__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => nestjs_rate_limiter_hook_1.RateLimiterHookConfig),
+    tslib_1.__metadata("design:type", nestjs_rate_limiter_hook_1.RateLimiterHookConfig)
+], DefaultAppConfig.prototype, "rateLimiter", void 0);
 tslib_1.__decorate([
     (0, class_validator_1.ValidateNested)(),
     (0, class_transformer_1.Type)(() => cors_1.CorsConfig),

package/src/config/default-app.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"default-app.config.js","sourceRoot":"","sources":["../../../../api/src/config/default-app.config.ts"],"names":[],"mappings":";;;;AAAA,qDAAiD;AACjD,yDAAyC;AACzC,2DAAuD;AACvD,kCAAqC;AACrC,sCAAyC;AACzC,8CAAiD;AAEjD,MAAa,gBAAgB;CAgB5B;AAhBD,4CAgBC;AAbiB;IAFf,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,4BAAY,CAAC;sCACA,4BAAY;gDAAC;AAItB;IAFf,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,iBAAU,CAAC;sCACA,iBAAU;8CAAC;AAIlB;IAFf,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,qBAAY,CAAC;sCACA,qBAAY;gDAAC;AAItB;IAFf,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,6BAAgB,CAAC;sCACA,6BAAgB;oDAAC"}
+{"version":3,"file":"default-app.config.js","sourceRoot":"","sources":["../../../../api/src/config/default-app.config.ts"],"names":[],"mappings":";;;;AAAA,qDAA6D;AAC7D,yDAAyC;AACzC,2DAAuD;AACvD,kCAAqC;AACrC,sCAAyC;AACzC,8CAAiD;AACjD,oFAA8E;AAE9E,MAAa,gBAAgB;CAqB5B;AArBD,4CAqBC;AAlBiB;IAFf,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,4BAAY,CAAC;sCACA,4BAAY;gDAAC;AAKtB;IAHf,IAAA,4BAAU,GAAE;IACZ,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,gDAAqB,CAAC;sCACJ,gDAAqB;qDAAC;AAIpC;IAFf,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,iBAAU,CAAC;sCACA,iBAAU;8CAAC;AAIlB;IAFf,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,qBAAY,CAAC;sCACA,qBAAY;gDAAC;AAItB;IAFf,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,6BAAgB,CAAC;sCACA,6BAAgB;oDAAC"}

package/src/cors/cors.config.js

@@ -14,9 +14,10 @@ tslib_1.__decorate([
     tslib_1.__metadata("design:type", Boolean)
 ], CorsConfig.prototype, "enabled", void 0);
 tslib_1.__decorate([
+    (0, class_validator_1.ValidateIf)((o) => o.enabled === true),
     (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayNotEmpty)({ message: 'origins must not be empty when CORS is enabled' }),
     (0, class_validator_1.IsString)({ each: true }),
-    (0, class_validator_1.IsOptional)(),
     (0, nestjs_validation_1.TransformCommaSeparated)(),
     tslib_1.__metadata("design:type", Array)
 ], CorsConfig.prototype, "origins", void 0);

package/src/cors/cors.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"cors.config.js","sourceRoot":"","sources":["../../../../api/src/cors/cors.config.ts"],"names":[],"mappings":";;;;AAAA,qDAAqF;AACrF,yDAAyC;AACzC,sEAA2F;AAE3F,MAAa,UAAU;CAgCtB;AAhCD,gCAgCC;AA7BiB;IAFf,IAAA,2BAAS,GAAE;IACX,IAAA,oCAAgB,GAAE;;2CACe;AAMlB;IAJf,IAAA,yBAAO,GAAE;IACT,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,IAAA,4BAAU,GAAE;IACZ,IAAA,2CAAuB,GAAE;;2CACS;AAMnB;IAJf,IAAA,yBAAO,GAAE;IACT,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,IAAA,4BAAU,GAAE;IACZ,IAAA,2CAAuB,GAAE;;2CACS;AAMnB;IAJf,IAAA,yBAAO,GAAE;IACT,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,IAAA,4BAAU,GAAE;IACZ,IAAA,2CAAuB,GAAE;;kDACgB;AAK1B;IAHf,IAAA,2BAAS,GAAE;IACX,IAAA,4BAAU,GAAE;IACZ,IAAA,oCAAgB,GAAE;;+CACmB;AAKtB;IAHf,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;;0CACa"}
+{"version":3,"file":"cors.config.js","sourceRoot":"","sources":["../../../../api/src/cors/cors.config.ts"],"names":[],"mappings":";;;;AAAA,qDAQyB;AACzB,yDAAyC;AACzC,sEAA2F;AAE3F,MAAa,UAAU;CAiCtB;AAjCD,gCAiCC;AA9BiB;IAFf,IAAA,2BAAS,GAAE;IACX,IAAA,oCAAgB,GAAE;;2CACe;AAOlB;IALf,IAAA,4BAAU,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC;IACrC,IAAA,yBAAO,GAAE;IACT,IAAA,+BAAa,EAAC,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;IAC5E,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,IAAA,2CAAuB,GAAE;;2CACS;AAMnB;IAJf,IAAA,yBAAO,GAAE;IACT,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,IAAA,4BAAU,GAAE;IACZ,IAAA,2CAAuB,GAAE;;2CACS;AAMnB;IAJf,IAAA,yBAAO,GAAE;IACT,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,IAAA,4BAAU,GAAE;IACZ,IAAA,2CAAuB,GAAE;;kDACgB;AAK1B;IAHf,IAAA,2BAAS,GAAE;IACX,IAAA,4BAAU,GAAE;IACZ,IAAA,oCAAgB,GAAE;;+CACmB;AAKtB;IAHf,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;;0CACa"}

package/src/cors/cors.factory.d.ts

@@ -0,0 +1,2 @@
+import { INestApplication } from '@nestjs/common';
+export declare function configureAppWithCors(app: INestApplication): void;

package/src/cors/cors.factory.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configureAppWithCors = configureAppWithCors;
+const cors_config_1 = require("./cors.config");
+const nestjs_logger_1 = require("@dismissible/nestjs-logger");
+function configureAppWithCors(app) {
+    const logger = app.get(nestjs_logger_1.DISMISSIBLE_LOGGER);
+    logger.setContext('CORS');
+    const corsConfig = app.get(cors_config_1.CorsConfig);
+    if (corsConfig.enabled) {
+        // origins is guaranteed to be non-empty when enabled via @ValidateIf + @ArrayNotEmpty
+        app.enableCors({
+            origin: corsConfig.origins,
+            methods: corsConfig.methods ?? ['GET', 'POST', 'DELETE', 'OPTIONS'],
+            allowedHeaders: corsConfig.allowedHeaders ?? [
+                'Content-Type',
+                'Authorization',
+                'x-request-id',
+            ],
+            credentials: corsConfig.credentials ?? true,
+            maxAge: corsConfig.maxAge ?? 86400,
+        });
+        logger.info('CORS is enabled', { corsConfig });
+    }
+    else {
+        logger.info('CORS is disabled');
+    }
+}
+//# sourceMappingURL=cors.factory.js.map

package/src/cors/cors.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.factory.js","sourceRoot":"","sources":["../../../../api/src/cors/cors.factory.ts"],"names":[],"mappings":";;AAIA,oDAsBC;AAzBD,+CAA2C;AAC3C,8DAAoF;AAEpF,SAAgB,oBAAoB,CAAC,GAAqB;IACxD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAqB,kCAAkB,CAAC,CAAC;IAC/D,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,wBAAU,CAAC,CAAC;IAEvC,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,sFAAsF;QACtF,GAAG,CAAC,UAAU,CAAC;YACb,MAAM,EAAE,UAAU,CAAC,OAAQ;YAC3B,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;YACnE,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI;gBAC3C,cAAc;gBACd,eAAe;gBACf,cAAc;aACf;YACD,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,IAAI;YAC3C,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,KAAK;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}

package/src/cors/index.d.ts

@@ -1 +1,2 @@
 export * from './cors.config';
+export * from './cors.factory';

package/src/cors/index.js

@@ -2,4 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./cors.config"), exports);
+tslib_1.__exportStar(require("./cors.factory"), exports);
 //# sourceMappingURL=index.js.map

package/src/cors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../api/src/cors/index.ts"],"names":[],"mappings":";;;AAAA,wDAA8B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../api/src/cors/index.ts"],"names":[],"mappings":";;;AAAA,wDAA8B;AAC9B,yDAA+B"}

package/src/dismissible-nest-factory.d.ts

@@ -2,6 +2,8 @@ import { INestApplication } from '@nestjs/common';
 import { DefaultAppConfig } from './config/default-app.config';
 import { IDismissibleLogger } from '@dismissible/nestjs-logger';
 import { Type, DynamicModule } from '@nestjs/common';
+import { IDismissibleLifecycleHook } from '@dismissible/nestjs-hooks';
+import { StorageType } from './storage/storage.config';
 export interface IDismissibleNestApplication {
     getNestApplication(): INestApplication;
     start(): Promise<void>;
@@ -11,6 +13,8 @@ export interface IDismissibleNestFactoryOptions {
     schema?: new () => DefaultAppConfig;
     logger?: Type<IDismissibleLogger>;
     imports?: DynamicModule[];
+    hooks?: Type<IDismissibleLifecycleHook>[];
+    storage?: StorageType;
 }
 export declare class DismissibleNestFactory {
     static create(options?: IDismissibleNestFactoryOptions): Promise<IDismissibleNestApplication>;

package/src/dismissible-nest-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"dismissible-nest-factory.js","sourceRoot":"","sources":["../../../api/src/dismissible-nest-factory.ts"],"names":[],"mappings":";;;AACA,uCAA2C;AAC3C,+DAAkF;AAClF,6CAAyC;AACzC,0DAAsD;AACtD,2CAA2C;AAiB3C,MAAM,0BAA0B;IAC9B,YAA6B,GAA2B;QAA3B,QAAG,GAAH,GAAG,CAAwB;IAAG,CAAC;IAE5D,KAAK,CAAC,KAAK;QACT,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,4BAAY,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC;QACvC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;CACF;AAED,MAAa,sBAAsB;IACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,OAAwC;QAExC,MAAM,GAAG,GAAG,MAAM,kBAAW,CAAC,MAAM,CAClC,sBAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAC1B,IAAI,iCAAc,CAAC;YACjB,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO;SAC9B,CAAC,CACH,CAAC;QACF,MAAM,IAAA,wBAAY,EAAC,GAAG,CAAC,CAAC;QAExB,OAAO,IAAI,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;CACF;AAdD,wDAcC"}
+{"version":3,"file":"dismissible-nest-factory.js","sourceRoot":"","sources":["../../../api/src/dismissible-nest-factory.ts"],"names":[],"mappings":";;;AACA,uCAA2C;AAC3C,+DAAkF;AAClF,6CAAyC;AACzC,0DAAsD;AACtD,2CAA2C;AAqB3C,MAAM,0BAA0B;IAC9B,YAA6B,GAA2B;QAA3B,QAAG,GAAH,GAAG,CAAwB;IAAG,CAAC;IAE5D,KAAK,CAAC,KAAK;QACT,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,4BAAY,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC;QACvC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;CACF;AAED,MAAa,sBAAsB;IACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,OAAwC;QAExC,MAAM,GAAG,GAAG,MAAM,kBAAW,CAAC,MAAM,CAClC,sBAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAC1B,IAAI,iCAAc,CAAC;YACjB,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO;SAC9B,CAAC,CACH,CAAC;QACF,MAAM,IAAA,wBAAY,EAAC,GAAG,CAAC,CAAC;QAExB,OAAO,IAAI,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;CACF;AAdD,wDAcC"}

package/src/helmet/helmet.factory.d.ts

@@ -0,0 +1,2 @@
+import { INestApplication } from '@nestjs/common';
+export declare function configureAppWithHelmet(app: INestApplication): Promise<void>;

package/src/helmet/helmet.factory.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configureAppWithHelmet = configureAppWithHelmet;
+const tslib_1 = require("tslib");
+const helmet_1 = tslib_1.__importDefault(require("@fastify/helmet"));
+const helmet_config_1 = require("./helmet.config");
+const nestjs_logger_1 = require("@dismissible/nestjs-logger");
+async function configureAppWithHelmet(app) {
+    const logger = app.get(nestjs_logger_1.DISMISSIBLE_LOGGER);
+    logger.setContext('Helmet');
+    const helmetConfig = app.get(helmet_config_1.HelmetConfig);
+    if (helmetConfig.enabled) {
+        const fastifyApp = app;
+        await fastifyApp.register(helmet_1.default, {
+            contentSecurityPolicy: helmetConfig.contentSecurityPolicy ?? true,
+            crossOriginEmbedderPolicy: helmetConfig.crossOriginEmbedderPolicy ?? true,
+            hsts: {
+                maxAge: helmetConfig.hstsMaxAge ?? 31536000,
+                includeSubDomains: helmetConfig.hstsIncludeSubDomains ?? true,
+                preload: helmetConfig.hstsPreload ?? false,
+            },
+        });
+        logger.info('Helmet is enabled', { helmetConfig });
+    }
+    else {
+        logger.info('Helmet is disabled');
+    }
+}
+//# sourceMappingURL=helmet.factory.js.map

package/src/helmet/helmet.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helmet.factory.js","sourceRoot":"","sources":["../../../../api/src/helmet/helmet.factory.ts"],"names":[],"mappings":";;AAMA,wDAoBC;;AAxBD,qEAA4C;AAC5C,mDAA+C;AAC/C,8DAAoF;AAE7E,KAAK,UAAU,sBAAsB,CAAC,GAAqB;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAqB,kCAAkB,CAAC,CAAC;IAC/D,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,4BAAY,CAAC,CAAC;IAE3C,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,GAA6B,CAAC;QACjD,MAAM,UAAU,CAAC,QAAQ,CAAC,gBAAa,EAAE;YACvC,qBAAqB,EAAE,YAAY,CAAC,qBAAqB,IAAI,IAAI;YACjE,yBAAyB,EAAE,YAAY,CAAC,yBAAyB,IAAI,IAAI;YACzE,IAAI,EAAE;gBACJ,MAAM,EAAE,YAAY,CAAC,UAAU,IAAI,QAAQ;gBAC3C,iBAAiB,EAAE,YAAY,CAAC,qBAAqB,IAAI,IAAI;gBAC7D,OAAO,EAAE,YAAY,CAAC,WAAW,IAAI,KAAK;aAC3C;SACF,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}

package/src/helmet/index.d.ts

@@ -1 +1,2 @@
 export * from './helmet.config';
+export * from './helmet.factory';

package/src/helmet/index.js

@@ -2,4 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./helmet.config"), exports);
+tslib_1.__exportStar(require("./helmet.factory"), exports);
 //# sourceMappingURL=index.js.map

package/src/helmet/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../api/src/helmet/index.ts"],"names":[],"mappings":";;;AAAA,0DAAgC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../api/src/helmet/index.ts"],"names":[],"mappings":";;;AAAA,0DAAgC;AAChC,2DAAiC"}

package/src/storage/storage.config.js

@@ -18,14 +18,6 @@ exports.StorageConfig = StorageConfig;
 tslib_1.__decorate([
     (0, class_validator_1.IsDefined)(),
     (0, class_validator_1.IsEnum)(StorageType),
-    (0, class_transformer_1.Transform)(({ value }) => {
-        if (!value)
-            return value;
-        if (Object.values(StorageType).includes(value)) {
-            return value;
-        }
-        return StorageType[value] || value;
-    }),
     tslib_1.__metadata("design:type", String)
 ], StorageConfig.prototype, "type", void 0);
 tslib_1.__decorate([

package/src/storage/storage.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage.config.js","sourceRoot":"","sources":["../../../../api/src/storage/storage.config.ts"],"names":[],"mappings":";;;;AAAA,qDAAgF;AAChF,yDAAoD;AACpD,kFAA6E;AAC7E,kFAA6E;AAE7E,IAAY,WAIX;AAJD,WAAY,WAAW;IACrB,gCAAiB,CAAA;IACjB,oCAAqB,CAAA;IACrB,oCAAqB,CAAA;AACvB,CAAC,EAJW,WAAW,2BAAX,WAAW,QAItB;AAED,MAAa,aAAa;CAuBzB;AAvBD,sCAuBC;AAbiB;IATf,IAAA,2BAAS,GAAE;IACX,IAAA,wBAAM,EAAC,WAAW,CAAC;IACnB,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACvB,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAoB,CAAC,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,WAAW,CAAC,KAAiC,CAAC,IAAI,KAAK,CAAC;IACjE,CAAC,CAAC;;2CACiC;AAMnB;IAJf,IAAA,4BAAU,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,QAAQ,CAAC;IAClD,IAAA,2BAAS,GAAE;IACX,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,+CAAqB,CAAC;sCACP,+CAAqB;+CAAC;AAMjC;IAJf,IAAA,4BAAU,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,QAAQ,CAAC;IAClD,IAAA,2BAAS,GAAE;IACX,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,+CAAqB,CAAC;sCACP,+CAAqB;+CAAC"}
+{"version":3,"file":"storage.config.js","sourceRoot":"","sources":["../../../../api/src/storage/storage.config.ts"],"names":[],"mappings":";;;;AAAA,qDAAgF;AAChF,yDAAyC;AACzC,kFAA6E;AAC7E,kFAA6E;AAE7E,IAAY,WAIX;AAJD,WAAY,WAAW;IACrB,gCAAiB,CAAA;IACjB,oCAAqB,CAAA;IACrB,oCAAqB,CAAA;AACvB,CAAC,EAJW,WAAW,2BAAX,WAAW,QAItB;AAED,MAAa,aAAa;CAgBzB;AAhBD,sCAgBC;AAbiB;IAFf,IAAA,2BAAS,GAAE;IACX,IAAA,wBAAM,EAAC,WAAW,CAAC;;2CACe;AAMnB;IAJf,IAAA,4BAAU,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,QAAQ,CAAC;IAClD,IAAA,2BAAS,GAAE;IACX,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,+CAAqB,CAAC;sCACP,+CAAqB;+CAAC;AAMjC;IAJf,IAAA,4BAAU,EAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,QAAQ,CAAC;IAClD,IAAA,2BAAS,GAAE;IACX,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,+CAAqB,CAAC;sCACP,+CAAqB;+CAAC"}

package/src/swagger/swagger.factory.d.ts

@@ -1,3 +1,2 @@
 import { INestApplication } from '@nestjs/common';
-import { SwaggerConfig } from './swagger.config';
-export declare function configureAppWithSwagger(app: INestApplication, swaggerConfig: SwaggerConfig): void;
+export declare function configureAppWithSwagger(app: INestApplication): void;

package/src/swagger/swagger.factory.js

@@ -2,11 +2,17 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.configureAppWithSwagger = configureAppWithSwagger;
 const swagger_1 = require("@nestjs/swagger");
+const swagger_config_1 = require("./swagger.config");
+const nestjs_logger_1 = require("@dismissible/nestjs-logger");
 const swaggerDocumentOptions = {
     operationIdFactory: (_controllerKey, methodKey) => methodKey,
 };
-function configureAppWithSwagger(app, swaggerConfig) {
+function configureAppWithSwagger(app) {
+    const logger = app.get(nestjs_logger_1.DISMISSIBLE_LOGGER);
+    logger.setContext('Swagger');
+    const swaggerConfig = app.get(swagger_config_1.SwaggerConfig);
     if (swaggerConfig.enabled) {
+        logger.info('Swagger is enabled', { swaggerConfig });
         const { path = 'docs' } = swaggerConfig;
         const config = new swagger_1.DocumentBuilder()
             .setTitle('Dismissible')
@@ -18,5 +24,8 @@ function configureAppWithSwagger(app, swaggerConfig) {
             useGlobalPrefix: true,
         });
     }
+    else {
+        logger.info('Swagger is disabled');
+    }
 }
 //# sourceMappingURL=swagger.factory.js.map

package/src/swagger/swagger.factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"swagger.factory.js","sourceRoot":"","sources":["../../../../api/src/swagger/swagger.factory.ts"],"names":[],"mappings":";;AAQA,0DAeC;AAtBD,6CAAyF;AAGzF,MAAM,sBAAsB,GAA2B;IACrD,kBAAkB,EAAE,CAAC,cAAsB,EAAE,SAAiB,EAAE,EAAE,CAAC,SAAS;CAC7E,CAAC;AAEF,SAAgB,uBAAuB,CAAC,GAAqB,EAAE,aAA4B;IACzF,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,GAAG,MAAM,EAAE,GAAG,aAAa,CAAC;QAExC,MAAM,MAAM,GAAG,IAAI,yBAAe,EAAE;aACjC,QAAQ,CAAC,aAAa,CAAC;aACvB,cAAc,CAAC,8CAA8C,CAAC;aAC9D,UAAU,CAAC,KAAK,CAAC;aACjB,KAAK,EAAE,CAAC;QAEX,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,uBAAa,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC;QAChG,uBAAa,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,eAAe,EAAE;YAC9C,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}
+{"version":3,"file":"swagger.factory.js","sourceRoot":"","sources":["../../../../api/src/swagger/swagger.factory.ts"],"names":[],"mappings":";;AASA,0DAsBC;AA9BD,6CAAyF;AACzF,qDAAiD;AACjD,8DAAoF;AAEpF,MAAM,sBAAsB,GAA2B;IACrD,kBAAkB,EAAE,CAAC,cAAsB,EAAE,SAAiB,EAAE,EAAE,CAAC,SAAS;CAC7E,CAAC;AAEF,SAAgB,uBAAuB,CAAC,GAAqB;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAqB,kCAAkB,CAAC,CAAC;IAC/D,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,aAAa,GAAG,GAAG,CAAC,GAAG,CAAC,8BAAa,CAAC,CAAC;IAE7C,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;QACrD,MAAM,EAAE,IAAI,GAAG,MAAM,EAAE,GAAG,aAAa,CAAC;QAExC,MAAM,MAAM,GAAG,IAAI,yBAAe,EAAE;aACjC,QAAQ,CAAC,aAAa,CAAC;aACvB,cAAc,CAAC,8CAA8C,CAAC;aAC9D,UAAU,CAAC,KAAK,CAAC;aACjB,KAAK,EAAE,CAAC;QAEX,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,uBAAa,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC;QAChG,uBAAa,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,eAAe,EAAE;YAC9C,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/src/validation/index.d.ts

@@ -1 +1,2 @@
 export * from './validation.config';
+export * from './validation.factory';

package/src/validation/index.js

@@ -2,4 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./validation.config"), exports);
+tslib_1.__exportStar(require("./validation.factory"), exports);
 //# sourceMappingURL=index.js.map

package/src/validation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../api/src/validation/index.ts"],"names":[],"mappings":";;;AAAA,8DAAoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../api/src/validation/index.ts"],"names":[],"mappings":";;;AAAA,8DAAoC;AACpC,+DAAqC"}

package/src/validation/validation.factory.d.ts

@@ -0,0 +1,2 @@
+import { INestApplication } from '@nestjs/common';
+export declare function configureAppWithValidation(app: INestApplication): void;

package/src/validation/validation.factory.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configureAppWithValidation = configureAppWithValidation;
+const common_1 = require("@nestjs/common");
+const validation_config_1 = require("./validation.config");
+const nestjs_logger_1 = require("@dismissible/nestjs-logger");
+function configureAppWithValidation(app) {
+    const logger = app.get(nestjs_logger_1.DISMISSIBLE_LOGGER);
+    logger.setContext('Validation');
+    const validationConfig = app.get(validation_config_1.ValidationConfig);
+    logger.info('Registering ValidationPipe', { validationConfig });
+    app.useGlobalPipes(new common_1.ValidationPipe({
+        whitelist: validationConfig.whitelist ?? true,
+        forbidNonWhitelisted: validationConfig.forbidNonWhitelisted ?? true,
+        transform: validationConfig.transform ?? true,
+        disableErrorMessages: validationConfig.disableErrorMessages ?? true,
+    }));
+}
+//# sourceMappingURL=validation.factory.js.map

package/src/validation/validation.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.factory.js","sourceRoot":"","sources":["../../../../api/src/validation/validation.factory.ts"],"names":[],"mappings":";;AAIA,gEAcC;AAlBD,2CAAkE;AAClE,2DAAuD;AACvD,8DAAoF;AAEpF,SAAgB,0BAA0B,CAAC,GAAqB;IAC9D,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAqB,kCAAkB,CAAC,CAAC;IAC/D,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAChC,MAAM,gBAAgB,GAAG,GAAG,CAAC,GAAG,CAAC,oCAAgB,CAAC,CAAC;IAEnD,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAChE,GAAG,CAAC,cAAc,CAChB,IAAI,uBAAc,CAAC;QACjB,SAAS,EAAE,gBAAgB,CAAC,SAAS,IAAI,IAAI;QAC7C,oBAAoB,EAAE,gBAAgB,CAAC,oBAAoB,IAAI,IAAI;QACnE,SAAS,EAAE,gBAAgB,CAAC,SAAS,IAAI,IAAI;QAC7C,oBAAoB,EAAE,gBAAgB,CAAC,oBAAoB,IAAI,IAAI;KACpE,CAAC,CACH,CAAC;AACJ,CAAC"}