@flusys/nestjs-auth 0.1.0-beta.3 → 1.1.0-beta

package/cjs/controllers/user.controller.js

@@ -10,11 +10,11 @@ Object.defineProperty(exports, "UserController", {
 });
 const _classes = require("@flusys/nestjs-shared/classes");
 const _decorators = require("@flusys/nestjs-shared/decorators");
+const _guards = require("@flusys/nestjs-shared/guards");
 const _interfaces = require("@flusys/nestjs-shared/interfaces");
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
 const _userdto = require("../dtos/user.dto");
-const _guards = require("@flusys/nestjs-shared/guards");
 const _userservice = require("../services/user.service");
 function _define_property(obj, key, value) {
     if (key in obj) {
@@ -43,52 +43,105 @@ function _ts_param(paramIndex, decorator) {
         decorator(target, key, paramIndex);
     };
 }
-let UserController = class UserController extends (0, _classes.createApiController)(_userdto.CreateUserDto, _userdto.UpdateUserDto, _userdto.UserResponseDto) {
-    // ==========================================================================
-    // CUSTOM ENDPOINTS (Beyond standard CRUD)
-    // ==========================================================================
-    /**
-   * Verify user email
-   */ async verifyEmail(id) {
+let UserController = class UserController extends (0, _classes.createApiController)(_userdto.CreateUserDto, _userdto.UpdateUserDto, _userdto.UserResponseDto, {
+    security: 'jwt'
+}) {
+    // Custom Endpoints
+    /** Get user profile with extras (roles, permissions, etc.) from enricher */ async getProfileWithExtras(id, user) {
+        const data = await this.service.getProfileWithExtras(id, user);
+        return {
+            success: true,
+            data
+        };
+    }
+    /** Verify user email */ async verifyEmail(id) {
         await this.service.verifyEmail(id);
         return {
             message: 'Email verified successfully'
         };
     }
-    /**
-   * Verify user phone
-   */ async verifyPhone(id) {
+    /** Verify user phone */ async verifyPhone(id) {
         await this.service.verifyPhone(id);
         return {
             message: 'Phone verified successfully'
         };
     }
-    /**
-   * Update user active status
-   *
-   * When company feature is disabled: Updates User.isActive directly
-   * When company feature is enabled: Updates UserCompanyPermission.isActive for logged user's company
-   */ async updateStatus(id, isActive, user) {
+    /** Update user active status. When company feature enabled, updates permission isActive for logged user's company. */ async updateStatus(id, isActive, user) {
         await this.service.updateStatus(id, isActive, user);
         return {
             message: 'Status updated successfully'
         };
     }
-    /**
-   * Update user profile
-   */ async profile(dto, user) {
+    /** Update user profile */ async profile(dto, user) {
         const data = await this.service.profile(dto, user);
         return {
+            success: true,
             message: 'Profile updated successfully',
             data
         };
     }
+    // ============================================
+    // Multi-Step Profile Endpoints (via Enricher)
+    // ============================================
+    /** Get profile section definitions */ async getProfileSections() {
+        const sections = await this.service.getProfileSections();
+        return {
+            success: true,
+            data: sections
+        };
+    }
+    /** Get specific profile section data */ async getProfileSectionData(id, sectionId, user) {
+        const data = await this.service.getProfileSectionData(id, sectionId, user);
+        return {
+            success: true,
+            data
+        };
+    }
+    /** Update specific profile section */ async updateProfileSection(id, sectionId, data, user) {
+        await this.service.updateProfileSection(id, sectionId, data, user);
+        return {
+            success: true,
+            message: 'Section updated successfully'
+        };
+    }
+    /** Get profile completion percentage */ async getProfileCompletion(id, user) {
+        const percentage = await this.service.getProfileCompletion(id, user);
+        return {
+            success: true,
+            data: {
+                completionPercentage: percentage
+            }
+        };
+    }
     constructor(service){
         super(service), _define_property(this, "service", void 0), this.service = service;
     }
 };
+_ts_decorate([
+    (0, _common.Post)(':id/profile-extras'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
+    (0, _swagger.ApiOperation)({
+        summary: 'Get user profile with extras',
+        description: 'Returns user profile along with extra data (roles, permissions, etc.) if UserEnricher is provided.'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    _ts_param(0, (0, _common.Param)('id')),
+    _ts_param(1, (0, _decorators.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        String,
+        typeof _interfaces.ILoggedUserInfo === "undefined" ? Object : _interfaces.ILoggedUserInfo
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileWithExtras", null);
 _ts_decorate([
     (0, _common.Post)(':id/verify-email'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
     (0, _swagger.ApiOperation)({
         summary: 'Verify user email'
     }),
@@ -105,6 +158,8 @@ _ts_decorate([
 ], UserController.prototype, "verifyEmail", null);
 _ts_decorate([
     (0, _common.Post)(':id/verify-phone'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
     (0, _swagger.ApiOperation)({
         summary: 'Verify user phone'
     }),
@@ -121,6 +176,8 @@ _ts_decorate([
 ], UserController.prototype, "verifyPhone", null);
 _ts_decorate([
     (0, _common.Put)(':id/status'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
     (0, _swagger.ApiOperation)({
         summary: 'Update user active status',
         description: 'Updates user active status. When company feature is enabled, updates the status for the current company context.'
@@ -149,6 +206,8 @@ _ts_decorate([
 ], UserController.prototype, "updateStatus", null);
 _ts_decorate([
     (0, _common.Post)('profile'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
     (0, _swagger.ApiOperation)({
         summary: 'Update user profile'
     }),
@@ -164,11 +223,98 @@ _ts_decorate([
     ]),
     _ts_metadata("design:returntype", Promise)
 ], UserController.prototype, "profile", null);
+_ts_decorate([
+    (0, _common.Post)('profile-sections'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
+    (0, _swagger.ApiOperation)({
+        summary: 'Get profile section definitions',
+        description: 'Returns available profile sections for multi-step profile (if enricher configured).'
+    }),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", []),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileSections", null);
+_ts_decorate([
+    (0, _common.Post)(':id/profile-section/:sectionId'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
+    (0, _swagger.ApiOperation)({
+        summary: 'Get profile section data',
+        description: 'Returns data for a specific profile section.'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'sectionId',
+        description: 'Section identifier'
+    }),
+    _ts_param(0, (0, _common.Param)('id')),
+    _ts_param(1, (0, _common.Param)('sectionId')),
+    _ts_param(2, (0, _decorators.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        String,
+        String,
+        typeof _interfaces.ILoggedUserInfo === "undefined" ? Object : _interfaces.ILoggedUserInfo
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileSectionData", null);
+_ts_decorate([
+    (0, _common.Post)(':id/profile-section/:sectionId/update'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
+    (0, _swagger.ApiOperation)({
+        summary: 'Update profile section',
+        description: 'Updates a specific profile section data.'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'sectionId',
+        description: 'Section identifier'
+    }),
+    _ts_param(0, (0, _common.Param)('id')),
+    _ts_param(1, (0, _common.Param)('sectionId')),
+    _ts_param(2, (0, _common.Body)()),
+    _ts_param(3, (0, _decorators.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        String,
+        String,
+        typeof Record === "undefined" ? Object : Record,
+        typeof _interfaces.ILoggedUserInfo === "undefined" ? Object : _interfaces.ILoggedUserInfo
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "updateProfileSection", null);
+_ts_decorate([
+    (0, _common.Post)(':id/profile-completion'),
+    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _swagger.ApiBearerAuth)(),
+    (0, _swagger.ApiOperation)({
+        summary: 'Get profile completion percentage',
+        description: 'Returns overall profile completion percentage.'
+    }),
+    (0, _swagger.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    _ts_param(0, (0, _common.Param)('id')),
+    _ts_param(1, (0, _decorators.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        String,
+        typeof _interfaces.ILoggedUserInfo === "undefined" ? Object : _interfaces.ILoggedUserInfo
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileCompletion", null);
 UserController = _ts_decorate([
     (0, _swagger.ApiTags)('Users'),
-    (0, _swagger.ApiBearerAuth)(),
     (0, _common.Controller)('administration/users'),
-    (0, _common.UseGuards)(_guards.JwtAuthGuard),
     _ts_param(0, (0, _common.Inject)(_userservice.UserService)),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [

package/cjs/dtos/authentication.dto.js

@@ -27,12 +27,18 @@ _export(exports, {
     get CompanyWithBranchesDto () {
         return CompanyWithBranchesDto;
     },
+    get ForgotPasswordDto () {
+        return ForgotPasswordDto;
+    },
     get LoginDto () {
         return LoginDto;
     },
     get LoginResponseDto () {
         return LoginResponseDto;
     },
+    get LoginResponseRequiresEmailVerificationDto () {
+        return LoginResponseRequiresEmailVerificationDto;
+    },
     get MeResponseDto () {
         return MeResponseDto;
     },
@@ -45,6 +51,12 @@ _export(exports, {
     get RegistrationResponseDto () {
         return RegistrationResponseDto;
     },
+    get ResendVerificationDto () {
+        return ResendVerificationDto;
+    },
+    get ResetPasswordDto () {
+        return ResetPasswordDto;
+    },
     get SelectDto () {
         return SelectDto;
     },
@@ -53,6 +65,9 @@ _export(exports, {
     },
     get UserInfoDto () {
         return UserInfoDto;
+    },
+    get VerifyEmailDto () {
+        return VerifyEmailDto;
     }
 });
 const _swagger = require("@nestjs/swagger");
@@ -558,16 +573,17 @@ let RegistrationResponseDto = class RegistrationResponseDto {
         _define_property(this, "company", void 0);
         _define_property(this, "branch", void 0);
         _define_property(this, "companyFeatureEnabled", void 0);
+        _define_property(this, "requiresEmailVerification", void 0);
     }
 };
 _ts_decorate([
-    (0, _swagger.ApiProperty)({
+    (0, _swagger.ApiPropertyOptional)({
         example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...'
     }),
     _ts_metadata("design:type", String)
 ], RegistrationResponseDto.prototype, "accessToken", void 0);
 _ts_decorate([
-    (0, _swagger.ApiProperty)({
+    (0, _swagger.ApiPropertyOptional)({
         example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...'
     }),
     _ts_metadata("design:type", String)
@@ -594,12 +610,19 @@ _ts_decorate([
     _ts_metadata("design:type", typeof BranchInfoDto === "undefined" ? Object : BranchInfoDto)
 ], RegistrationResponseDto.prototype, "branch", void 0);
 _ts_decorate([
-    (0, _swagger.ApiProperty)({
+    (0, _swagger.ApiPropertyOptional)({
         example: true,
         description: 'Whether company feature is enabled'
     }),
     _ts_metadata("design:type", Boolean)
 ], RegistrationResponseDto.prototype, "companyFeatureEnabled", void 0);
+_ts_decorate([
+    (0, _swagger.ApiPropertyOptional)({
+        example: true,
+        description: 'Whether email verification is required'
+    }),
+    _ts_metadata("design:type", Boolean)
+], RegistrationResponseDto.prototype, "requiresEmailVerification", void 0);
 let MeResponseDto = class MeResponseDto {
     constructor(){
         _define_property(this, "user", void 0);
@@ -674,3 +697,83 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Array)
 ], CompanySelectionResponseDto.prototype, "companies", void 0);
+let LoginResponseRequiresEmailVerificationDto = class LoginResponseRequiresEmailVerificationDto {
+    constructor(){
+        _define_property(this, "requiresEmailVerification", void 0);
+        _define_property(this, "email", void 0);
+        _define_property(this, "message", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: true
+    }),
+    _ts_metadata("design:type", Boolean)
+], LoginResponseRequiresEmailVerificationDto.prototype, "requiresEmailVerification", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'john@example.com'
+    }),
+    _ts_metadata("design:type", String)
+], LoginResponseRequiresEmailVerificationDto.prototype, "email", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'Please verify your email address before logging in.'
+    }),
+    _ts_metadata("design:type", String)
+], LoginResponseRequiresEmailVerificationDto.prototype, "message", void 0);
+let ForgotPasswordDto = class ForgotPasswordDto {
+    constructor(){
+        _define_property(this, "email", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'john@example.com',
+        description: 'Email address to send reset link to'
+    }),
+    (0, _classvalidator.IsEmail)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], ForgotPasswordDto.prototype, "email", void 0);
+let ResetPasswordDto = class ResetPasswordDto {
+    constructor(){
+        _define_property(this, "token", void 0);
+        _define_property(this, "newPassword", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'a1b2c3d4e5f6...',
+        description: 'Password reset token from email'
+    }),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], ResetPasswordDto.prototype, "token", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'newSecurePassword123',
+        description: 'New password (min 6 chars)'
+    }),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.MinLength)(6),
+    _ts_metadata("design:type", String)
+], ResetPasswordDto.prototype, "newPassword", void 0);
+let VerifyEmailDto = class VerifyEmailDto {
+    constructor(){
+        _define_property(this, "token", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'a1b2c3d4e5f6...',
+        description: 'Email verification token from email'
+    }),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], VerifyEmailDto.prototype, "token", void 0);
+let ResendVerificationDto = class ResendVerificationDto extends ForgotPasswordDto {
+};

package/cjs/entities/index.js

@@ -30,8 +30,10 @@ _export(exports, {
 });
 const _companybranchentity = _export_star(require("./company-branch.entity"), exports);
 const _companyentity = _export_star(require("./company.entity"), exports);
+const _pendingregistrationentity = _export_star(require("./pending-registration.entity"), exports);
 const _usercompanypermissionentity = require("./user-company-permission.entity");
 const _userentity = _export_star(require("./user.entity"), exports);
+const _usertokenentity = _export_star(require("./user-token.entity"), exports);
 function _export_star(from, to) {
     Object.keys(from).forEach(function(k) {
         if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
@@ -46,7 +48,9 @@ function _export_star(from, to) {
     return from;
 }
 const CoreEntities = [
-    _userentity.User
+    _userentity.User,
+    _usertokenentity.UserToken,
+    _pendingregistrationentity.PendingRegistration
 ];
 const CompanyEntities = [
     _companyentity.Company,

package/cjs/entities/pending-registration.entity.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "PendingRegistration", {
+    enumerable: true,
+    get: function() {
+        return PendingRegistration;
+    }
+});
+const _typeorm = require("typeorm");
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let PendingRegistration = class PendingRegistration {
+    constructor(){
+        _define_property(this, "id", void 0);
+        _define_property(this, "email", void 0);
+        _define_property(this, "name", void 0);
+        _define_property(this, "phone", void 0);
+        _define_property(this, "passwordHash", void 0);
+        _define_property(this, "token", void 0);
+        _define_property(this, "expiresAt", void 0);
+        _define_property(this, "companyData", void 0);
+        _define_property(this, "createdAt", void 0);
+    }
+};
+_ts_decorate([
+    (0, _typeorm.PrimaryGeneratedColumn)('uuid'),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "id", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'varchar',
+        length: 255
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "email", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'varchar',
+        length: 255,
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "name", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'varchar',
+        length: 255,
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "phone", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'text',
+        name: 'passwordHash'
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "passwordHash", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'varchar',
+        length: 64
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "token", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'timestamp',
+        name: 'expires_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], PendingRegistration.prototype, "expiresAt", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'json',
+        nullable: true,
+        name: 'company_data'
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "companyData", void 0);
+_ts_decorate([
+    (0, _typeorm.CreateDateColumn)({
+        type: 'timestamp',
+        name: 'created_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], PendingRegistration.prototype, "createdAt", void 0);
+PendingRegistration = _ts_decorate([
+    (0, _typeorm.Entity)('pending_registrations'),
+    (0, _typeorm.Index)('IDX_pending_reg_email', [
+        'email'
+    ], {
+        unique: true
+    }),
+    (0, _typeorm.Index)('IDX_pending_reg_token', [
+        'token'
+    ], {
+        unique: true
+    }),
+    (0, _typeorm.Index)('IDX_pending_reg_expires', [
+        'expiresAt'
+    ])
+], PendingRegistration);