@flusys/nestjs-auth 0.1.0-beta.3 → 1.1.0-beta

package/fesm/entities/pending-registration.entity.js

@@ -0,0 +1,115 @@
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+import { Column, CreateDateColumn, Entity, Index, PrimaryGeneratedColumn } from 'typeorm';
+export class PendingRegistration {
+    constructor(){
+        _define_property(this, "id", void 0);
+        _define_property(this, "email", void 0);
+        _define_property(this, "name", void 0);
+        _define_property(this, "phone", void 0);
+        _define_property(this, "passwordHash", void 0);
+        _define_property(this, "token", void 0);
+        _define_property(this, "expiresAt", void 0);
+        _define_property(this, "companyData", void 0);
+        _define_property(this, "createdAt", void 0);
+    }
+}
+_ts_decorate([
+    PrimaryGeneratedColumn('uuid'),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "id", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 255
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "email", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 255,
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "name", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 255,
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "phone", void 0);
+_ts_decorate([
+    Column({
+        type: 'text',
+        name: 'passwordHash'
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "passwordHash", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 64
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "token", void 0);
+_ts_decorate([
+    Column({
+        type: 'timestamp',
+        name: 'expires_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], PendingRegistration.prototype, "expiresAt", void 0);
+_ts_decorate([
+    Column({
+        type: 'json',
+        nullable: true,
+        name: 'company_data'
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "companyData", void 0);
+_ts_decorate([
+    CreateDateColumn({
+        type: 'timestamp',
+        name: 'created_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], PendingRegistration.prototype, "createdAt", void 0);
+PendingRegistration = _ts_decorate([
+    Entity('pending_registrations'),
+    Index('IDX_pending_reg_email', [
+        'email'
+    ], {
+        unique: true
+    }),
+    Index('IDX_pending_reg_token', [
+        'token'
+    ], {
+        unique: true
+    }),
+    Index('IDX_pending_reg_expires', [
+        'expiresAt'
+    ])
+], PendingRegistration);

package/fesm/entities/user-token.entity.js

@@ -0,0 +1,113 @@
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+import { Column, CreateDateColumn, Entity, Index, PrimaryGeneratedColumn } from 'typeorm';
+/**
+ * Token types for various user actions
+ */ export var TokenType = /*#__PURE__*/ function(TokenType) {
+    TokenType["PASSWORD_RESET"] = "password_reset";
+    TokenType["EMAIL_VERIFICATION"] = "email_verification";
+    TokenType["EMAIL_CHANGE"] = "email_change";
+    return TokenType;
+}({});
+export class UserToken {
+    constructor(){
+        _define_property(this, "id", void 0);
+        _define_property(this, "userId", void 0);
+        _define_property(this, "type", void 0);
+        _define_property(this, "token", void 0);
+        _define_property(this, "expiresAt", void 0);
+        _define_property(this, "usedAt", void 0);
+        _define_property(this, "metadata", void 0);
+        _define_property(this, "createdAt", void 0);
+    }
+}
+_ts_decorate([
+    PrimaryGeneratedColumn('uuid'),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "id", void 0);
+_ts_decorate([
+    Column({
+        type: 'uuid',
+        name: 'user_id'
+    }),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "userId", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 32
+    }),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "type", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 64
+    }),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "token", void 0);
+_ts_decorate([
+    Column({
+        type: 'timestamp',
+        name: 'expires_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], UserToken.prototype, "expiresAt", void 0);
+_ts_decorate([
+    Column({
+        type: 'timestamp',
+        name: 'used_at',
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], UserToken.prototype, "usedAt", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 255,
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], UserToken.prototype, "metadata", void 0);
+_ts_decorate([
+    CreateDateColumn({
+        type: 'timestamp',
+        name: 'created_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], UserToken.prototype, "createdAt", void 0);
+UserToken = _ts_decorate([
+    Entity('user_tokens'),
+    Index('IDX_user_token_token', [
+        'token'
+    ], {
+        unique: true
+    }),
+    Index('IDX_user_token_user_type', [
+        'userId',
+        'type'
+    ]),
+    Index('IDX_user_token_expires', [
+        'expiresAt'
+    ])
+], UserToken);

package/fesm/interfaces/auth-email-provider.interface.js

@@ -0,0 +1,38 @@
+/**
+ * Auth Email Provider Interface
+ *
+ * This interface defines the contract for email sending in the auth module.
+ * It allows auth to work independently of the email module.
+ *
+ * To use email features in auth:
+ * 1. Provide AUTH_EMAIL_PROVIDER in your app module
+ * 2. Implement IAuthEmailProvider using EmailSendService from nestjs-email
+ *
+ * @example
+ * ```typescript
+ * // In app.module.ts or a provider file
+ * {
+ *   provide: AUTH_EMAIL_PROVIDER,
+ *   useFactory: (emailSendService: EmailSendService) => ({
+ *     sendPasswordResetEmail: async (email, token, resetUrl) => {
+ *       await emailSendService.sendTemplateEmail({
+ *         templateSlug: 'password-reset',
+ *         to: email,
+ *         variables: { resetUrl, token },
+ *       });
+ *     },
+ *     sendVerificationEmail: async (email, token, verifyUrl) => {
+ *       await emailSendService.sendTemplateEmail({
+ *         templateSlug: 'email-verification',
+ *         to: email,
+ *         variables: { verifyUrl, token },
+ *       });
+ *     },
+ *   }),
+ *   inject: [EmailSendService],
+ * }
+ * ```
+ */ /**
+ * Injection token for auth email provider
+ * Use this to provide the email implementation
+ */ export const AUTH_EMAIL_PROVIDER = 'AUTH_EMAIL_PROVIDER';

package/fesm/interfaces/authentication.interface.js

@@ -1,7 +1 @@
-// =============================================================================
-// TOKEN INTERFACES
-// =============================================================================
-/**
- * Login Response when company/branch selection is required
- * Frontend shows selection UI and calls /select endpoint with chosen company + branch
- */ export { };
+/** Login Response when email verification is required */ export { };

package/fesm/interfaces/index.js

@@ -1,5 +1,7 @@
 export * from './authentication.interface';
+export * from './auth-email-provider.interface';
 export * from './company-branch.interface';
 export * from './company.interface';
 export * from './user.interface';
+export * from './user-enricher.interface';
 export * from './auth-module-options.interface';

package/fesm/interfaces/user-enricher.interface.js

@@ -0,0 +1,26 @@
+/**
+ * User Enricher Provider Interface
+ *
+ * Allows consuming applications to extend user list and profile
+ * without modifying the base nestjs-auth package.
+ *
+ * This follows the Provider Interface Pattern:
+ * - nestjs-auth defines the interface (this file)
+ * - Consuming apps implement the interface
+ * - nestjs-auth optionally injects the implementation
+ *
+ * @example
+ * // In your app module
+ * providers: [
+ *   { provide: USER_ENRICHER, useClass: MyUserEnricher },
+ * ]
+ *
+ * // Your enricher implementation
+ * @Injectable()
+ * export class MyUserEnricher implements IUserEnricher {
+ *   async enrichListQuery(query, user) {
+ *     query.leftJoinAndSelect('user.department', 'department');
+ *     return { extraFields: ['department.name'] };
+ *   }
+ * }
+ */ export { };

package/fesm/modules/auth.module.js

@@ -17,14 +17,14 @@ import { Company, CompanyBranch, User, UserCompanyPermission } from '../entities
 import { JwtAuthGuard } from '@flusys/nestjs-shared/guards';
 import { ClearToken } from '../interceptors/clear-token.interceptor';
 import { SetToken } from '../interceptors/set-token.interceptor';
-import { AuthenticationService, BranchService, CompanySelectionSessionService, CompanyService, UserPermissionService, UserService } from '../services';
+import { AuthEmailService, AuthenticationService, BranchService, CompanySelectionSessionService, CompanyService, UserPermissionService, UserService } from '../services';
 import { JwtStrategy } from '../strategies/jwt.strategy';
 export class AuthModule {
     static forRoot(options) {
         return this.buildDynamicModule(options);
     }
     static forRootAsync(asyncOptions) {
-        const { global = false, includeController = true, bootstrapAppConfig: { enableCompanyFeature } = {}, imports: externalImports = [] } = asyncOptions;
+        const { global = false, includeController = true, bootstrapAppConfig: { enableCompanyFeature } = {}, imports: externalImports = [], providers: additionalProviders = [] } = asyncOptions;
         const asyncProviders = this.createAsyncProviders(asyncOptions);
         // Build imports
         const imports = [
@@ -51,6 +51,7 @@ export class AuthModule {
         // Build providers
         const providers = [
             ...asyncProviders,
+            ...additionalProviders,
             // Config & Infrastructure
             AuthConfigService,
             AuthDataSourceProvider,
@@ -58,6 +59,7 @@ export class AuthModule {
             JwtStrategy,
             JwtAuthGuard,
             AuthenticationService,
+            AuthEmailService,
             // Interceptors
             SetToken,
             ClearToken,
@@ -77,6 +79,7 @@ export class AuthModule {
             JwtStrategy,
             JwtAuthGuard,
             AuthenticationService,
+            AuthEmailService,
             UserService
         ];
         if (enableCompanyFeature) {
@@ -92,7 +95,7 @@ export class AuthModule {
         };
     }
     static buildDynamicModule(options) {
-        const { bootstrapAppConfig: { enableCompanyFeature } = {}, includeController = true, global = false } = options;
+        const { bootstrapAppConfig: { enableCompanyFeature } = {}, includeController = true, global = false, providers: additionalProviders = [] } = options;
         const imports = [
             PassportModule.register({
                 defaultStrategy: 'jwt'
@@ -118,6 +121,7 @@ export class AuthModule {
                 provide: AUTH_MODULE_OPTIONS,
                 useValue: options
             },
+            ...additionalProviders,
             // Config & Infrastructure
             AuthConfigService,
             AuthDataSourceProvider,
@@ -125,6 +129,7 @@ export class AuthModule {
             JwtStrategy,
             JwtAuthGuard,
             AuthenticationService,
+            AuthEmailService,
             // Interceptors
             SetToken,
             ClearToken,
@@ -143,6 +148,7 @@ export class AuthModule {
             JwtStrategy,
             JwtAuthGuard,
             AuthenticationService,
+            AuthEmailService,
             UserService
         ];
         if (enableCompanyFeature) {

package/fesm/services/auth-config.service.js

@@ -29,76 +29,54 @@ import { Inject, Injectable, Optional } from '@nestjs/common';
 import { AuthModuleOptions } from '../interfaces/auth-module-options.interface';
 import { AUTH_MODULE_OPTIONS } from '../config/auth.constants';
 export class AuthConfigService {
-    // ==================== Database Mode ====================
-    /**
-   * Get database mode (single or multi-tenant)
-   */ getDatabaseMode() {
+    // Database Mode
+    /** Get database mode (single or multi-tenant) */ getDatabaseMode() {
         return this.options.bootstrapAppConfig?.databaseMode ?? 'single';
     }
-    /**
-   * Check if running in multi-tenant mode
-   */ isMultiTenant() {
+    /** Check if running in multi-tenant mode */ isMultiTenant() {
         return this.getDatabaseMode() === 'multi-tenant';
     }
-    // ==================== Feature Flags ====================
-    /**
-   * Check if company feature is enabled
-   */ isCompanyFeatureEnabled() {
+    // Feature Flags
+    /** Check if company feature is enabled */ isCompanyFeatureEnabled() {
         return this.options.bootstrapAppConfig?.enableCompanyFeature ?? false;
     }
-    // ==================== JWT Configuration ====================
-    /**
-   * Get JWT secret key
-   */ getJwtSecret() {
+    // JWT Configuration
+    /** Get JWT secret key */ getJwtSecret() {
         return this.config.jwtSecret ?? 'default-secret-change-in-production';
     }
-    /**
-   * Get JWT expiration time
-   */ getJwtExpiration() {
+    /** Get JWT expiration time */ getJwtExpiration() {
         return this.config.jwtExpiration ?? '1h';
     }
-    /**
-   * Get refresh token secret key
-   */ getRefreshTokenSecret() {
+    /** Get refresh token secret key */ getRefreshTokenSecret() {
         return this.config.refreshTokenSecret ?? this.getJwtSecret();
     }
-    /**
-   * Get refresh token expiration time
-   */ getRefreshTokenExpiration() {
+    /** Get refresh token expiration time */ getRefreshTokenExpiration() {
         return this.config.refreshTokenExpiration ?? '7d';
     }
-    /**
-   * Get refresh token cookie name
-   */ getRefreshTokenCookieName() {
+    /** Get refresh token cookie name */ getRefreshTokenCookieName() {
         return this.config.refreshTokenCookieName ?? 'fsn_refresh_token';
     }
-    // ==================== Database Configuration ====================
-    /**
-   * Get default database config
-   */ getDefaultDatabaseConfig() {
+    // Frontend Configuration
+    /** Get frontend URL for email links */ getFrontendUrl() {
+        return this.config.frontendUrl;
+    }
+    // Database Configuration
+    /** Get default database config */ getDefaultDatabaseConfig() {
         return this.config.defaultDatabaseConfig ?? this.config.tenantDefaultDatabaseConfig;
     }
-    /**
-   * Get tenant default database config (for multi-tenant)
-   */ getTenantDefaultDatabaseConfig() {
+    /** Get tenant default database config (for multi-tenant) */ getTenantDefaultDatabaseConfig() {
         return this.config.tenantDefaultDatabaseConfig;
     }
-    /**
-   * Get registered tenants
-   */ getTenants() {
+    /** Get registered tenants */ getTenants() {
         return this.config.tenants ?? [];
     }
-    // ==================== Raw Options ====================
-    /**
-   * Get full module options
-   */ getOptions() {
+    // Raw Options
+    /** Get full module options */ getOptions() {
         return {
             ...this.options
         };
     }
-    /**
-   * Get runtime config
-   */ getConfig() {
+    /** Get runtime config */ getConfig() {
         return {
             ...this.config
         };

package/fesm/services/auth-datasource.provider.js

@@ -32,11 +32,8 @@ import { Request } from 'express';
 import { AuthModuleOptions } from '../interfaces/auth-module-options.interface';
 import { AUTH_MODULE_OPTIONS } from '../config/auth.constants';
 export class AuthDataSourceProvider extends MultiTenantDataSourceService {
-    // ==================== Override Static Cache Access Methods ====================
-    /**
-   * CRITICAL: Override to access Auth-specific static properties
-   * Without this, parent class methods would access parent's static properties
-   */ async getSingleDataSource() {
+    // Override Static Cache Access Methods
+    /** Override to access Auth-specific static properties */ async getSingleDataSource() {
         if (!AuthDataSourceProvider.singleDataSource) {
             if (AuthDataSourceProvider.singleConnectionLock) {
                 return AuthDataSourceProvider.singleConnectionLock;
@@ -60,9 +57,7 @@ export class AuthDataSourceProvider extends MultiTenantDataSourceService {
         }
         return AuthDataSourceProvider.singleDataSource;
     }
-    /**
-   * CRITICAL: Override to use Auth-specific static cache for tenant connections
-   */ async getOrCreateTenantConnection(tenant) {
+    /** Override to use Auth-specific static cache for tenant connections */ async getOrCreateTenantConnection(tenant) {
         // Return existing initialized connection from Auth-specific cache
         const existing = AuthDataSourceProvider.tenantConnections.get(tenant.id);
         if (existing?.isInitialized) {
@@ -85,10 +80,8 @@ export class AuthDataSourceProvider extends MultiTenantDataSourceService {
             AuthDataSourceProvider.connectionLocks.delete(tenant.id);
         }
     }
-    // ==================== Factory Methods ====================
-    /**
-   * Build parent options from AuthModuleOptions
-   */ static buildParentOptions(options) {
+    // Factory Methods
+    /** Build parent options from AuthModuleOptions */ static buildParentOptions(options) {
         return {
             bootstrapAppConfig: options.bootstrapAppConfig,
             defaultDatabaseConfig: options.config?.defaultDatabaseConfig,
@@ -96,31 +89,24 @@ export class AuthDataSourceProvider extends MultiTenantDataSourceService {
             tenants: options.config?.tenants
         };
     }
-    // ==================== Feature Flags ====================
-    /**
-   * Get global enable company feature flag
-   */ getEnableCompanyFeature() {
+    // Feature Flags
+    /** Get global enable company feature flag */ getEnableCompanyFeature() {
         return this.authOptions.bootstrapAppConfig?.enableCompanyFeature ?? false;
     }
-    /**
-   * Get enable company feature for specific tenant
-   * Falls back to global setting if not specified per-tenant
-   */ getEnableCompanyFeatureForTenant(tenant) {
+    /** Get enable company feature for specific tenant. Falls back to global setting. */ getEnableCompanyFeatureForTenant(tenant) {
         return tenant?.enableCompanyFeature ?? this.getEnableCompanyFeature();
     }
-    /**
-   * Get enable company feature for current request context
-   */ getEnableCompanyFeatureForCurrentTenant() {
+    /** Get enable company feature for current request context */ getEnableCompanyFeatureForCurrentTenant() {
         return this.getEnableCompanyFeatureForTenant(this.getCurrentTenant() ?? undefined);
     }
-    // ==================== Entity Management ====================
-    /**
-   * Get auth entities based on company feature flag
-   */ async getAuthEntities(enableCompanyFeature) {
+    // Entity Management
+    /** Get auth entities based on company feature flag */ async getAuthEntities(enableCompanyFeature) {
         const enable = enableCompanyFeature ?? this.getEnableCompanyFeature();
-        const { Company, CompanyBranch, User, UserCompanyPermission } = await import('../entities');
+        const { Company, CompanyBranch, User, UserCompanyPermission, UserToken, PendingRegistration } = await import('../entities');
         const coreEntities = [
-            User
+            User,
+            UserToken,
+            PendingRegistration
         ];
         const companyEntities = enable ? [
             Company,
@@ -132,10 +118,8 @@ export class AuthDataSourceProvider extends MultiTenantDataSourceService {
             ...companyEntities
         ];
     }
-    // ==================== Overrides ====================
-    /**
-   * Override to dynamically set entities based on tenant config
-   */ async createDataSourceFromConfig(config) {
+    // Overrides
+    /** Override to dynamically set entities based on tenant config */ async createDataSourceFromConfig(config) {
         const currentTenant = this.getCurrentTenant();
         const enableCompanyFeature = this.getEnableCompanyFeatureForTenant(currentTenant ?? undefined);
         const entities = await this.getAuthEntities(enableCompanyFeature);