@flusys/nestjs-auth 0.1.0-beta.3 → 1.1.0-beta

package/cjs/entities/user-token.entity.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get TokenType () {
+        return TokenType;
+    },
+    get UserToken () {
+        return UserToken;
+    }
+});
+const _typeorm = require("typeorm");
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+var TokenType = /*#__PURE__*/ function(TokenType) {
+    TokenType["PASSWORD_RESET"] = "password_reset";
+    TokenType["EMAIL_VERIFICATION"] = "email_verification";
+    TokenType["EMAIL_CHANGE"] = "email_change";
+    return TokenType;
+}({});
+let UserToken = class UserToken {
+    constructor(){
+        _define_property(this, "id", void 0);
+        _define_property(this, "userId", void 0);
+        _define_property(this, "type", void 0);
+        _define_property(this, "token", void 0);
+        _define_property(this, "expiresAt", void 0);
+        _define_property(this, "usedAt", void 0);
+        _define_property(this, "metadata", void 0);
+        _define_property(this, "createdAt", void 0);
+    }
+};
+_ts_decorate([
+    (0, _typeorm.PrimaryGeneratedColumn)('uuid'),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "id", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'uuid',
+        name: 'user_id'
+    }),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "userId", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'varchar',
+        length: 32
+    }),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "type", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'varchar',
+        length: 64
+    }),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "token", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'timestamp',
+        name: 'expires_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], UserToken.prototype, "expiresAt", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'timestamp',
+        name: 'used_at',
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], UserToken.prototype, "usedAt", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'varchar',
+        length: 255,
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], UserToken.prototype, "metadata", void 0);
+_ts_decorate([
+    (0, _typeorm.CreateDateColumn)({
+        type: 'timestamp',
+        name: 'created_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], UserToken.prototype, "createdAt", void 0);
+UserToken = _ts_decorate([
+    (0, _typeorm.Entity)('user_tokens'),
+    (0, _typeorm.Index)('IDX_user_token_token', [
+        'token'
+    ], {
+        unique: true
+    }),
+    (0, _typeorm.Index)('IDX_user_token_user_type', [
+        'userId',
+        'type'
+    ]),
+    (0, _typeorm.Index)('IDX_user_token_expires', [
+        'expiresAt'
+    ])
+], UserToken);

package/cjs/interfaces/auth-email-provider.interface.js

@@ -0,0 +1,45 @@
+/**
+ * Auth Email Provider Interface
+ *
+ * This interface defines the contract for email sending in the auth module.
+ * It allows auth to work independently of the email module.
+ *
+ * To use email features in auth:
+ * 1. Provide AUTH_EMAIL_PROVIDER in your app module
+ * 2. Implement IAuthEmailProvider using EmailSendService from nestjs-email
+ *
+ * @example
+ * ```typescript
+ * // In app.module.ts or a provider file
+ * {
+ *   provide: AUTH_EMAIL_PROVIDER,
+ *   useFactory: (emailSendService: EmailSendService) => ({
+ *     sendPasswordResetEmail: async (email, token, resetUrl) => {
+ *       await emailSendService.sendTemplateEmail({
+ *         templateSlug: 'password-reset',
+ *         to: email,
+ *         variables: { resetUrl, token },
+ *       });
+ *     },
+ *     sendVerificationEmail: async (email, token, verifyUrl) => {
+ *       await emailSendService.sendTemplateEmail({
+ *         templateSlug: 'email-verification',
+ *         to: email,
+ *         variables: { verifyUrl, token },
+ *       });
+ *     },
+ *   }),
+ *   inject: [EmailSendService],
+ * }
+ * ```
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "AUTH_EMAIL_PROVIDER", {
+    enumerable: true,
+    get: function() {
+        return AUTH_EMAIL_PROVIDER;
+    }
+});
+const AUTH_EMAIL_PROVIDER = 'AUTH_EMAIL_PROVIDER';

package/cjs/interfaces/authentication.interface.js

@@ -1,6 +1,3 @@
-// =============================================================================
-// TOKEN INTERFACES
-// =============================================================================
 "use strict";
 Object.defineProperty(exports, "__esModule", {
     value: true

package/cjs/interfaces/index.js

@@ -3,9 +3,11 @@ Object.defineProperty(exports, "__esModule", {
     value: true
 });
 _export_star(require("./authentication.interface"), exports);
+_export_star(require("./auth-email-provider.interface"), exports);
 _export_star(require("./company-branch.interface"), exports);
 _export_star(require("./company.interface"), exports);
 _export_star(require("./user.interface"), exports);
+_export_star(require("./user-enricher.interface"), exports);
 _export_star(require("./auth-module-options.interface"), exports);
 function _export_star(from, to) {
     Object.keys(from).forEach(function(k) {

package/cjs/interfaces/user-enricher.interface.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});

package/cjs/modules/auth.module.js

@@ -34,7 +34,7 @@ let AuthModule = class AuthModule {
         return this.buildDynamicModule(options);
     }
     static forRootAsync(asyncOptions) {
-        const { global = false, includeController = true, bootstrapAppConfig: { enableCompanyFeature } = {}, imports: externalImports = [] } = asyncOptions;
+        const { global = false, includeController = true, bootstrapAppConfig: { enableCompanyFeature } = {}, imports: externalImports = [], providers: additionalProviders = [] } = asyncOptions;
         const asyncProviders = this.createAsyncProviders(asyncOptions);
         // Build imports
         const imports = [
@@ -61,6 +61,7 @@ let AuthModule = class AuthModule {
         // Build providers
         const providers = [
             ...asyncProviders,
+            ...additionalProviders,
             // Config & Infrastructure
             _authconfigservice.AuthConfigService,
             _authdatasourceprovider.AuthDataSourceProvider,
@@ -68,6 +69,7 @@ let AuthModule = class AuthModule {
             _jwtstrategy.JwtStrategy,
             _guards.JwtAuthGuard,
             _services.AuthenticationService,
+            _services.AuthEmailService,
             // Interceptors
             _settokeninterceptor.SetToken,
             _cleartokeninterceptor.ClearToken,
@@ -87,6 +89,7 @@ let AuthModule = class AuthModule {
             _jwtstrategy.JwtStrategy,
             _guards.JwtAuthGuard,
             _services.AuthenticationService,
+            _services.AuthEmailService,
             _services.UserService
         ];
         if (enableCompanyFeature) {
@@ -102,7 +105,7 @@ let AuthModule = class AuthModule {
         };
     }
     static buildDynamicModule(options) {
-        const { bootstrapAppConfig: { enableCompanyFeature } = {}, includeController = true, global = false } = options;
+        const { bootstrapAppConfig: { enableCompanyFeature } = {}, includeController = true, global = false, providers: additionalProviders = [] } = options;
         const imports = [
             _passport.PassportModule.register({
                 defaultStrategy: 'jwt'
@@ -128,6 +131,7 @@ let AuthModule = class AuthModule {
                 provide: _authconstants.AUTH_MODULE_OPTIONS,
                 useValue: options
             },
+            ...additionalProviders,
             // Config & Infrastructure
             _authconfigservice.AuthConfigService,
             _authdatasourceprovider.AuthDataSourceProvider,
@@ -135,6 +139,7 @@ let AuthModule = class AuthModule {
             _jwtstrategy.JwtStrategy,
             _guards.JwtAuthGuard,
             _services.AuthenticationService,
+            _services.AuthEmailService,
             // Interceptors
             _settokeninterceptor.SetToken,
             _cleartokeninterceptor.ClearToken,
@@ -153,6 +158,7 @@ let AuthModule = class AuthModule {
             _jwtstrategy.JwtStrategy,
             _guards.JwtAuthGuard,
             _services.AuthenticationService,
+            _services.AuthEmailService,
             _services.UserService
         ];
         if (enableCompanyFeature) {

package/cjs/services/auth-config.service.js

@@ -39,76 +39,54 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 let AuthConfigService = class AuthConfigService {
-    // ==================== Database Mode ====================
-    /**
-   * Get database mode (single or multi-tenant)
-   */ getDatabaseMode() {
+    // Database Mode
+    /** Get database mode (single or multi-tenant) */ getDatabaseMode() {
         return this.options.bootstrapAppConfig?.databaseMode ?? 'single';
     }
-    /**
-   * Check if running in multi-tenant mode
-   */ isMultiTenant() {
+    /** Check if running in multi-tenant mode */ isMultiTenant() {
         return this.getDatabaseMode() === 'multi-tenant';
     }
-    // ==================== Feature Flags ====================
-    /**
-   * Check if company feature is enabled
-   */ isCompanyFeatureEnabled() {
+    // Feature Flags
+    /** Check if company feature is enabled */ isCompanyFeatureEnabled() {
         return this.options.bootstrapAppConfig?.enableCompanyFeature ?? false;
     }
-    // ==================== JWT Configuration ====================
-    /**
-   * Get JWT secret key
-   */ getJwtSecret() {
+    // JWT Configuration
+    /** Get JWT secret key */ getJwtSecret() {
         return this.config.jwtSecret ?? 'default-secret-change-in-production';
     }
-    /**
-   * Get JWT expiration time
-   */ getJwtExpiration() {
+    /** Get JWT expiration time */ getJwtExpiration() {
         return this.config.jwtExpiration ?? '1h';
     }
-    /**
-   * Get refresh token secret key
-   */ getRefreshTokenSecret() {
+    /** Get refresh token secret key */ getRefreshTokenSecret() {
         return this.config.refreshTokenSecret ?? this.getJwtSecret();
     }
-    /**
-   * Get refresh token expiration time
-   */ getRefreshTokenExpiration() {
+    /** Get refresh token expiration time */ getRefreshTokenExpiration() {
         return this.config.refreshTokenExpiration ?? '7d';
     }
-    /**
-   * Get refresh token cookie name
-   */ getRefreshTokenCookieName() {
+    /** Get refresh token cookie name */ getRefreshTokenCookieName() {
         return this.config.refreshTokenCookieName ?? 'fsn_refresh_token';
     }
-    // ==================== Database Configuration ====================
-    /**
-   * Get default database config
-   */ getDefaultDatabaseConfig() {
+    // Frontend Configuration
+    /** Get frontend URL for email links */ getFrontendUrl() {
+        return this.config.frontendUrl;
+    }
+    // Database Configuration
+    /** Get default database config */ getDefaultDatabaseConfig() {
         return this.config.defaultDatabaseConfig ?? this.config.tenantDefaultDatabaseConfig;
     }
-    /**
-   * Get tenant default database config (for multi-tenant)
-   */ getTenantDefaultDatabaseConfig() {
+    /** Get tenant default database config (for multi-tenant) */ getTenantDefaultDatabaseConfig() {
         return this.config.tenantDefaultDatabaseConfig;
     }
-    /**
-   * Get registered tenants
-   */ getTenants() {
+    /** Get registered tenants */ getTenants() {
         return this.config.tenants ?? [];
     }
-    // ==================== Raw Options ====================
-    /**
-   * Get full module options
-   */ getOptions() {
+    // Raw Options
+    /** Get full module options */ getOptions() {
         return {
             ...this.options
         };
     }
-    /**
-   * Get runtime config
-   */ getConfig() {
+    /** Get runtime config */ getConfig() {
         return {
             ...this.config
         };

package/cjs/services/auth-datasource.provider.js

@@ -83,11 +83,8 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 let AuthDataSourceProvider = class AuthDataSourceProvider extends _modules.MultiTenantDataSourceService {
-    // ==================== Override Static Cache Access Methods ====================
-    /**
-   * CRITICAL: Override to access Auth-specific static properties
-   * Without this, parent class methods would access parent's static properties
-   */ async getSingleDataSource() {
+    // Override Static Cache Access Methods
+    /** Override to access Auth-specific static properties */ async getSingleDataSource() {
         if (!AuthDataSourceProvider.singleDataSource) {
             if (AuthDataSourceProvider.singleConnectionLock) {
                 return AuthDataSourceProvider.singleConnectionLock;
@@ -111,9 +108,7 @@ let AuthDataSourceProvider = class AuthDataSourceProvider extends _modules.Multi
         }
         return AuthDataSourceProvider.singleDataSource;
     }
-    /**
-   * CRITICAL: Override to use Auth-specific static cache for tenant connections
-   */ async getOrCreateTenantConnection(tenant) {
+    /** Override to use Auth-specific static cache for tenant connections */ async getOrCreateTenantConnection(tenant) {
         // Return existing initialized connection from Auth-specific cache
         const existing = AuthDataSourceProvider.tenantConnections.get(tenant.id);
         if (existing?.isInitialized) {
@@ -136,10 +131,8 @@ let AuthDataSourceProvider = class AuthDataSourceProvider extends _modules.Multi
             AuthDataSourceProvider.connectionLocks.delete(tenant.id);
         }
     }
-    // ==================== Factory Methods ====================
-    /**
-   * Build parent options from AuthModuleOptions
-   */ static buildParentOptions(options) {
+    // Factory Methods
+    /** Build parent options from AuthModuleOptions */ static buildParentOptions(options) {
         return {
             bootstrapAppConfig: options.bootstrapAppConfig,
             defaultDatabaseConfig: options.config?.defaultDatabaseConfig,
@@ -147,31 +140,24 @@ let AuthDataSourceProvider = class AuthDataSourceProvider extends _modules.Multi
             tenants: options.config?.tenants
         };
     }
-    // ==================== Feature Flags ====================
-    /**
-   * Get global enable company feature flag
-   */ getEnableCompanyFeature() {
+    // Feature Flags
+    /** Get global enable company feature flag */ getEnableCompanyFeature() {
         return this.authOptions.bootstrapAppConfig?.enableCompanyFeature ?? false;
     }
-    /**
-   * Get enable company feature for specific tenant
-   * Falls back to global setting if not specified per-tenant
-   */ getEnableCompanyFeatureForTenant(tenant) {
+    /** Get enable company feature for specific tenant. Falls back to global setting. */ getEnableCompanyFeatureForTenant(tenant) {
         return tenant?.enableCompanyFeature ?? this.getEnableCompanyFeature();
     }
-    /**
-   * Get enable company feature for current request context
-   */ getEnableCompanyFeatureForCurrentTenant() {
+    /** Get enable company feature for current request context */ getEnableCompanyFeatureForCurrentTenant() {
         return this.getEnableCompanyFeatureForTenant(this.getCurrentTenant() ?? undefined);
     }
-    // ==================== Entity Management ====================
-    /**
-   * Get auth entities based on company feature flag
-   */ async getAuthEntities(enableCompanyFeature) {
+    // Entity Management
+    /** Get auth entities based on company feature flag */ async getAuthEntities(enableCompanyFeature) {
         const enable = enableCompanyFeature ?? this.getEnableCompanyFeature();
-        const { Company, CompanyBranch, User, UserCompanyPermission } = await Promise.resolve().then(()=>/*#__PURE__*/ _interop_require_wildcard(require("../entities")));
+        const { Company, CompanyBranch, User, UserCompanyPermission, UserToken, PendingRegistration } = await Promise.resolve().then(()=>/*#__PURE__*/ _interop_require_wildcard(require("../entities")));
         const coreEntities = [
-            User
+            User,
+            UserToken,
+            PendingRegistration
         ];
         const companyEntities = enable ? [
             Company,
@@ -183,10 +169,8 @@ let AuthDataSourceProvider = class AuthDataSourceProvider extends _modules.Multi
             ...companyEntities
         ];
     }
-    // ==================== Overrides ====================
-    /**
-   * Override to dynamically set entities based on tenant config
-   */ async createDataSourceFromConfig(config) {
+    // Overrides
+    /** Override to dynamically set entities based on tenant config */ async createDataSourceFromConfig(config) {
         const currentTenant = this.getCurrentTenant();
         const enableCompanyFeature = this.getEnableCompanyFeatureForTenant(currentTenant ?? undefined);
         const entities = await this.getAuthEntities(enableCompanyFeature);