@flusys/nestjs-auth 0.1.0-beta.3 → 1.0.0-rc

package/interfaces/user-enricher.interface.d.ts

@@ -0,0 +1,64 @@
+import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
+import { QueryRunner, SelectQueryBuilder } from 'typeorm';
+import { User } from '../entities/user.entity';
+import { IUser } from './user.interface';
+export interface IProfileSection {
+    id: string;
+    name: string;
+    order: number;
+    icon?: string;
+    required?: boolean;
+    hasFileUpload?: boolean;
+    editPermission?: string;
+}
+export interface IProfileSectionData {
+    sectionId: string;
+    data: Record<string, any>;
+    isComplete: boolean;
+    files?: IProfileFile[];
+}
+export interface IProfileFile {
+    field: string;
+    id: string;
+    name: string;
+    url?: string;
+    type?: string;
+}
+export interface IProfileExtras {
+    roles?: IProfileRole[];
+    actions?: IProfileAction[];
+    sections?: IProfileSectionData[];
+    completionPercentage?: number;
+}
+export interface IProfileRole {
+    id: string;
+    name: string;
+    description?: string | null;
+}
+export interface IProfileAction {
+    id: string;
+    name: string;
+    code: string;
+    description?: string | null;
+}
+export type IEnrichedUser = IUser & IProfileExtras;
+export interface IUserEnricher {
+    enrichListQuery?(query: SelectQueryBuilder<User>, user: ILoggedUserInfo | null): Promise<{
+        extraFields: string[];
+    }>;
+    enrichListItems?(users: IUser[], user: ILoggedUserInfo | null): Promise<IEnrichedUser[]>;
+    getProfileExtras?(userId: string, user: ILoggedUserInfo): Promise<IProfileExtras>;
+    updateProfileExtras?(userId: string, extras: Record<string, any>, queryRunner: QueryRunner): Promise<void>;
+    validateProfileExtras?(userId: string, extras: Record<string, any>, user: ILoggedUserInfo): Promise<void>;
+    getProfileSections?(): IProfileSection[];
+    getProfileSectionData?(userId: string, sectionId: string, user: ILoggedUserInfo): Promise<IProfileSectionData>;
+    updateProfileSection?(userId: string, sectionId: string, data: Record<string, any>, queryRunner: QueryRunner): Promise<void>;
+    handleSectionFileUpload?(userId: string, sectionId: string, field: string, fileInfo: {
+        name: string;
+        url: string;
+        size: number;
+        type: string;
+    }, queryRunner: QueryRunner): Promise<IProfileFile>;
+    handleSectionFileDelete?(userId: string, sectionId: string, field: string, fileId: string, queryRunner: QueryRunner): Promise<void>;
+    calculateProfileCompletion?(userId: string, user: ILoggedUserInfo): Promise<number>;
+}

package/interfaces/user.interface.d.ts

@@ -3,6 +3,7 @@ export interface IUserMini {
     id: string;
     email: string;
     name?: string;
+    phone?: string | null;
     profilePictureId?: string | null;
 }
 export interface IUser extends Identity {

package/modules/auth.module.d.ts

@@ -5,6 +5,5 @@ export declare class AuthModule {
     static forRootAsync(asyncOptions: AuthModuleAsyncOptions): DynamicModule;
     private static buildDynamicModule;
     private static createAsyncProviders;
-    private static getRepositoryProviders;
     static getEntities(enableCompanyFeature?: boolean): any[];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flusys/nestjs-auth",
-  "version": "0.1.0-beta.3",
+  "version": "1.0.0-rc",
   "description": "Authentication and authorization infrastructure for NestJS applications",
   "main": "cjs/index.js",
   "module": "fesm/index.js",
@@ -84,14 +84,14 @@
     "bcrypt": "^5.0.0 || ^6.0.0",
     "class-transformer": "^0.5.0",
     "class-validator": "^0.14.0",
-    "nodemailer": "^6.0.0",
+    "nodemailer": "^7.0.0",
     "passport": "^0.7.0",
     "passport-jwt": "^4.0.0",
     "passport-local": "^1.0.0",
     "typeorm": "^0.3.0"
   },
   "dependencies": {
-    "@flusys/nestjs-core": "0.1.0-beta.3",
-    "@flusys/nestjs-shared": "0.1.0-beta.3"
+    "@flusys/nestjs-core": "1.0.0-rc",
+    "@flusys/nestjs-shared": "1.0.0-rc"
   }
 }

package/services/auth-config.service.d.ts

@@ -1,8 +1,11 @@
 import { DatabaseMode, IDatabaseConfig, ITenantDatabaseConfig } from '@flusys/nestjs-core';
+import { IModuleConfigService } from '@flusys/nestjs-shared/interfaces';
 import { AuthModuleOptions, IAuthModuleConfig } from '../interfaces/auth-module-options.interface';
-export declare class AuthConfigService {
+export declare class AuthConfigService implements IModuleConfigService {
+    private readonly logger;
     private readonly options;
     private readonly config;
+    private refreshTokenSecretWarned;
     constructor(injectedOptions?: AuthModuleOptions);
     getDatabaseMode(): DatabaseMode;
     isMultiTenant(): boolean;
@@ -12,6 +15,7 @@ export declare class AuthConfigService {
     getRefreshTokenSecret(): string;
     getRefreshTokenExpiration(): string;
     getRefreshTokenCookieName(): string;
+    getFrontendUrl(): string | undefined;
     getDefaultDatabaseConfig(): IDatabaseConfig | undefined;
     getTenantDefaultDatabaseConfig(): IDatabaseConfig | undefined;
     getTenants(): ITenantDatabaseConfig[];

package/services/auth-email.service.d.ts

@@ -0,0 +1,51 @@
+import { AuthDataSourceProvider } from './auth-datasource.provider';
+import { PendingRegistration } from '../entities/pending-registration.entity';
+import { IAuthEmailProvider } from '../interfaces';
+export declare class AuthEmailService {
+    private readonly dataSourceProvider?;
+    private readonly emailProvider?;
+    private readonly logger;
+    private readonly PASSWORD_RESET_EXPIRY;
+    private readonly EMAIL_VERIFICATION_EXPIRY;
+    constructor(dataSourceProvider?: AuthDataSourceProvider, emailProvider?: IAuthEmailProvider);
+    private getUserRepository;
+    private getUserTokenRepository;
+    private getPendingRegistrationRepository;
+    isEmailEnabled(): boolean;
+    private generateToken;
+    private hashToken;
+    createPendingRegistration(data: {
+        email: string;
+        name?: string;
+        phone?: string;
+        password: string;
+        companyData?: PendingRegistration['companyData'];
+        verifyUrlBase: string;
+    }): Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    forgotPassword(email: string, resetUrlBase: string): Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    resetPassword(token: string, newPassword: string): Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    verifyEmail(token: string): Promise<{
+        type: 'pending';
+        pending: PendingRegistration;
+    } | {
+        type: 'verified';
+        message: string;
+    }>;
+    resendVerificationEmail(email: string, verifyUrlBase: string): Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    cleanupExpired(): Promise<{
+        deletedTokens: number;
+        deletedPending: number;
+    }>;
+}

package/services/authentication.service.d.ts

@@ -1,33 +1,38 @@
 import { JwtService } from '@nestjs/jwt';
-import { Repository } from 'typeorm';
 import { AuthConfigService } from './auth-config.service';
 import { AuthDataSourceProvider } from './auth-datasource.provider';
 import { RegistrationDto } from '../dtos/authentication.dto';
-import { LoginResponse, LoginResponseRequiresSelection, MeResponse } from '../interfaces/authentication.interface';
+import { HybridCache } from '@flusys/nestjs-shared/classes';
+import { LoginResponse, LoginResponseRequiresEmailVerification, LoginResponseRequiresSelection, MeResponse, RegistrationResponse } from '../interfaces/authentication.interface';
+import { AuthEmailService } from './auth-email.service';
 import { CompanyBranch } from '../entities/company-branch.entity';
 import { Company } from '../entities/company.entity';
-import { UserCompanyPermission } from '../entities/user-company-permission.entity';
-import { User } from '../entities/user.entity';
+import { PendingRegistration } from '../entities/pending-registration.entity';
 import { CompanySelectionSessionService } from './company-selection-session.service';
 export declare class AuthenticationService {
     private readonly jwtService;
     private readonly authConfig;
+    private readonly cacheManager?;
     private readonly dataSourceProvider?;
     private readonly sessionService?;
-    private readonly injectedUserRepository?;
-    private readonly injectedPermissionRepository?;
-    private readonly injectedCompanyRepository?;
-    private readonly injectedBranchRepository?;
+    private readonly authEmailService?;
     private readonly logger;
-    constructor(jwtService: JwtService, authConfig: AuthConfigService, dataSourceProvider?: AuthDataSourceProvider, sessionService?: CompanySelectionSessionService, injectedUserRepository?: Repository<User>, injectedPermissionRepository?: Repository<UserCompanyPermission>, injectedCompanyRepository?: Repository<Company>, injectedBranchRepository?: Repository<CompanyBranch>);
+    constructor(jwtService: JwtService, authConfig: AuthConfigService, cacheManager?: HybridCache, dataSourceProvider?: AuthDataSourceProvider, sessionService?: CompanySelectionSessionService, authEmailService?: AuthEmailService);
     private getUserRepository;
     private getPermissionRepository;
     private getCompanyRepository;
     private getBranchRepository;
-    login(email: string, password: string): Promise<LoginResponse | LoginResponseRequiresSelection>;
+    login(email: string, password: string): Promise<LoginResponse | LoginResponseRequiresSelection | LoginResponseRequiresEmailVerification>;
     private handleCompanyBasedLogin;
-    register(dto: RegistrationDto): Promise<LoginResponse>;
+    register(dto: RegistrationDto, verifyUrlBase?: string): Promise<RegistrationResponse | {
+        requiresEmailVerification: true;
+        message: string;
+    }>;
+    private createUserDirectly;
+    createUserFromPendingRegistration(pending: PendingRegistration): Promise<RegistrationResponse>;
+    private handleCompanyRegistrationFromPending;
     private handleCompanyRegistration;
+    private processCompanyRegistration;
     private generateSlug;
     select(sessionId: string, companyId: string, branchId: string): Promise<LoginResponse>;
     switchCompany(userId: string, companyId: string, branchId: string): Promise<LoginResponse>;
@@ -36,7 +41,9 @@ export declare class AuthenticationService {
         refreshToken: string;
     }>;
     changePassword(userId: string, currentPassword: string, newPassword: string): Promise<void>;
-    logout(_userId: string): Promise<void>;
+    logout(userId: string): Promise<void>;
+    isTokenRevoked(userId: string, tokenIssuedAt?: number): Promise<boolean>;
+    private parseExpiryToMs;
     getUserCompanies(userId: string): Promise<Company[]>;
     getUserBranches(userId: string, companyId: string): Promise<CompanyBranch[]>;
     getCompanyById(companyId: string): Promise<Company | null>;
@@ -47,4 +54,6 @@ export declare class AuthenticationService {
     private generateLoginResponse;
     private generateLoginResponseWithCompany;
     private generateCompanySelectionResponse;
+    private generateRegistrationResponse;
+    private generateRegistrationResponseWithCompany;
 }

package/services/branch.service.d.ts

@@ -1,7 +1,6 @@
 import { RequestScopedApiService, HybridCache } from '@flusys/nestjs-shared/classes';
 import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
 import { UtilsService } from '@flusys/nestjs-shared/modules';
-import { Logger } from '@nestjs/common';
 import { EntityTarget, Repository, SelectQueryBuilder } from 'typeorm';
 import { CreateCompanyBranchDto, UpdateCompanyBranchDto } from '../dtos/company-branch.dto';
 import { ICompanyBranch } from '../interfaces/company-branch.interface';
@@ -13,20 +12,18 @@ export declare class BranchService extends RequestScopedApiService<CreateCompany
     protected utilsService: UtilsService;
     private readonly dataSourceProvider;
     private readonly authConfig;
-    protected logger: Logger;
     constructor(cacheManager: HybridCache, utilsService: UtilsService, dataSourceProvider: AuthDataSourceProvider, authConfig: AuthConfigService);
     protected resolveEntity(): EntityTarget<CompanyBranch>;
     protected getDataSourceProvider(): AuthDataSourceProvider;
-    convertSingleDtoToEntity(dto: CreateCompanyBranchDto | UpdateCompanyBranchDto, _user: ILoggedUserInfo): Promise<CompanyBranch>;
     getSelectQuery(query: SelectQueryBuilder<CompanyBranch>, _user: ILoggedUserInfo | null, select?: string[]): Promise<{
         query: SelectQueryBuilder<CompanyBranch>;
         isRaw: boolean;
     }>;
-    protected getGlobalSearchQuery(query: SelectQueryBuilder<CompanyBranch>, search: string, _user: ILoggedUserInfo | null): Promise<{
+    protected getGlobalSearchQuery(query: SelectQueryBuilder<CompanyBranch>, search: string): Promise<{
         query: SelectQueryBuilder<CompanyBranch>;
         isRaw: boolean;
     }>;
-    protected getExtraManipulateQuery(query: SelectQueryBuilder<CompanyBranch>, _filterAndPaginationDto: any, user: ILoggedUserInfo | null): Promise<{
+    protected getExtraManipulateQuery(query: SelectQueryBuilder<CompanyBranch>, filterDto: any, user: ILoggedUserInfo | null): Promise<{
         query: SelectQueryBuilder<CompanyBranch>;
         isRaw: boolean;
     }>;

package/services/company-selection-session.service.d.ts

@@ -8,7 +8,7 @@ interface StoredSession {
 export declare class CompanySelectionSessionService {
     protected cacheManager: HybridCache;
     constructor(cacheManager: HybridCache);
-    createSession(userId: string, companyId?: string): Promise<string>;
+    createSession(userId: string): Promise<string>;
     getSession(sessionId: string): Promise<StoredSession | null>;
     consumeSession(sessionId: string): Promise<StoredSession | null>;
     deleteSession(sessionId: string): Promise<void>;

package/services/company.service.d.ts

@@ -1,7 +1,6 @@
 import { RequestScopedApiService, HybridCache } from '@flusys/nestjs-shared/classes';
 import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
 import { UtilsService } from '@flusys/nestjs-shared/modules';
-import { Logger } from '@nestjs/common';
 import { EntityTarget, Repository, SelectQueryBuilder } from 'typeorm';
 import { CreateCompanyDto, UpdateCompanyDto } from '../dtos/company.dto';
 import { Company } from '../entities/company.entity';
@@ -11,16 +10,14 @@ export declare class CompanyService extends RequestScopedApiService<CreateCompan
     protected cacheManager: HybridCache;
     protected utilsService: UtilsService;
     private readonly dataSourceProvider;
-    protected logger: Logger;
     constructor(cacheManager: HybridCache, utilsService: UtilsService, dataSourceProvider: AuthDataSourceProvider);
     protected resolveEntity(): EntityTarget<Company>;
     protected getDataSourceProvider(): AuthDataSourceProvider;
-    convertSingleDtoToEntity(dto: CreateCompanyDto | UpdateCompanyDto, _user: ILoggedUserInfo): Promise<Company>;
     getSelectQuery(query: SelectQueryBuilder<Company>, _user: ILoggedUserInfo | null, select?: string[]): Promise<{
         query: SelectQueryBuilder<Company>;
         isRaw: boolean;
     }>;
-    protected getGlobalSearchQuery(query: SelectQueryBuilder<Company>, search: string, _user: ILoggedUserInfo | null): Promise<{
+    protected getGlobalSearchQuery(query: SelectQueryBuilder<Company>, search: string): Promise<{
         query: SelectQueryBuilder<Company>;
         isRaw: boolean;
     }>;

package/services/index.d.ts

@@ -1,4 +1,5 @@
 export * from './authentication.service';
+export * from './auth-email.service';
 export * from './company-selection-session.service';
 export * from './user.service';
 export * from './company.service';

package/services/user-permission.service.d.ts

@@ -3,7 +3,6 @@ import { UserCompanyPermission } from '../entities/user-company-permission.entit
 import { AuthDataSourceProvider } from './auth-datasource.provider';
 export declare class UserPermissionService {
     private readonly dataSourceProvider;
-    private readonly logger;
     private _repository;
     constructor(dataSourceProvider: AuthDataSourceProvider);
     private getRepository;

package/services/user.service.d.ts

@@ -1,31 +1,34 @@
 import { RequestScopedApiService, HybridCache } from '@flusys/nestjs-shared/classes';
 import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
 import { UtilsService } from '@flusys/nestjs-shared/modules';
-import { Logger } from '@nestjs/common';
 import { EntityTarget, Repository } from 'typeorm';
 import { AuthConfigService } from './auth-config.service';
 import { AuthDataSourceProvider } from './auth-datasource.provider';
 import { CreateUserDto, UpdateUserDto } from '../dtos/user.dto';
 import { IUser } from '../interfaces/user.interface';
+import { IEnrichedUser, IProfileExtras, IProfileSection, IProfileSectionData, IUserEnricher } from '../interfaces/user-enricher.interface';
 import { User } from '../entities/user.entity';
 export declare class UserService extends RequestScopedApiService<CreateUserDto, UpdateUserDto, IUser, User, Repository<User>> {
     protected cacheManager: HybridCache;
     protected utilsService: UtilsService;
     private readonly dataSourceProvider;
     private readonly authConfig;
-    protected logger: Logger;
+    private readonly userEnricher?;
     private permissionRepository?;
     private dataSource?;
-    constructor(cacheManager: HybridCache, utilsService: UtilsService, dataSourceProvider: AuthDataSourceProvider, authConfig: AuthConfigService);
+    constructor(cacheManager: HybridCache, utilsService: UtilsService, dataSourceProvider: AuthDataSourceProvider, authConfig: AuthConfigService, userEnricher?: IUserEnricher);
     protected resolveEntity(): EntityTarget<User>;
     protected getDataSourceProvider(): AuthDataSourceProvider;
     protected ensureRepositoryInitialized(): Promise<void>;
-    updateLastLogin(id: string): Promise<void>;
+    private validateProfileOwnership;
     verifyEmail(id: string): Promise<void>;
     verifyPhone(id: string): Promise<void>;
     updateStatus(id: string, isActive: boolean, user?: ILoggedUserInfo | null): Promise<void>;
-    protected convertSingleDtoToEntity(dto: CreateUserDto | UpdateUserDto, user: any): Promise<User>;
+    protected convertSingleDtoToEntity(dto: CreateUserDto | UpdateUserDto, user: ILoggedUserInfo | null): Promise<User>;
     protected convertEntityToResponseDto(entity: User, isRaw: boolean): IUser;
+    private convertRawToResponseDto;
+    private convertEntityToDto;
+    protected convertEntityListToResponseListDto(entities: User[], isRaw: boolean): IUser[];
     protected getGlobalSearchQuery(query: any, search: string, _user: any): Promise<{
         query: any;
         isRaw: boolean;
@@ -35,5 +38,16 @@ export declare class UserService extends RequestScopedApiService<CreateUserDto,
         isRaw: boolean;
     }>;
     insert(dto: CreateUserDto, user: ILoggedUserInfo | null): Promise<IUser>;
-    profile(dto: UpdateUserDto, user: ILoggedUserInfo): Promise<string>;
+    getProfileWithExtras(userId: string, user: ILoggedUserInfo): Promise<{
+        user: IUser;
+        extras?: IProfileExtras;
+    }>;
+    getEnrichedList(users: IUser[], user: ILoggedUserInfo | null): Promise<IEnrichedUser[]>;
+    getProfileSections(): Promise<IProfileSection[]>;
+    getProfileSectionData(userId: string, sectionId: string, user: ILoggedUserInfo): Promise<IProfileSectionData | null>;
+    updateProfileSection(userId: string, sectionId: string, data: Record<string, any>, user: ILoggedUserInfo): Promise<void>;
+    getProfileCompletion(userId: string, user: ILoggedUserInfo): Promise<number>;
+    profile(dto: UpdateUserDto & {
+        extras?: Record<string, any>;
+    }, user: ILoggedUserInfo): Promise<string>;
 }

package/validators/password.validator.d.ts

@@ -0,0 +1,10 @@
+import { ValidationOptions } from 'class-validator';
+export interface PasswordComplexityOptions {
+    minLength?: number;
+    maxLength?: number;
+    requireUppercase?: boolean;
+    requireLowercase?: boolean;
+    requireNumber?: boolean;
+    requireSpecialChar?: boolean;
+}
+export declare function IsStrongPassword(options?: PasswordComplexityOptions, validationOptions?: ValidationOptions): (object: object, propertyName: string) => void;