@flusys/nestjs-auth 1.0.0-beta → 1.0.0

package/fesm/docs/auth-swagger.config.js

@@ -4,6 +4,16 @@
     'User Permissions',
     'Company Selection'
 ];
+/** Examples to exclude when company feature is disabled */ const COMPANY_EXAMPLE_EXCLUSIONS = [
+    {
+        pathPattern: '/auth/login',
+        method: 'post',
+        examples: [
+            'loginSuccessWithCompany',
+            'companySelection'
+        ]
+    }
+];
 /**
  * Schema properties to exclude when company feature is disabled
  *
@@ -48,16 +58,14 @@
         schemaName: 'RegistrationResponseDto',
         properties: [
             'company',
-            'branch',
-            'companyFeatureEnabled'
+            'branch'
         ]
     },
     {
         schemaName: 'LoginResponseDto',
         properties: [
             'company',
-            'branch',
-            'companyFeatureEnabled'
+            'branch'
         ]
     },
     {
@@ -92,7 +100,6 @@
             'id',
             'name',
             'slug',
-            'isActive',
             'logoId'
         ]
     },
@@ -102,7 +109,6 @@
             'id',
             'name',
             'slug',
-            'isActive',
             'logoId',
             'branches'
         ]
@@ -401,6 +407,7 @@ POST /auth/login → { accessToken, refreshToken, user }
         path: 'api/docs/auth',
         bearerAuth: true,
         excludeTags,
-        excludeSchemaProperties: enableCompanyFeature ? undefined : COMPANY_SCHEMA_EXCLUSIONS
+        excludeSchemaProperties: enableCompanyFeature ? undefined : COMPANY_SCHEMA_EXCLUSIONS,
+        excludeExamples: enableCompanyFeature ? undefined : COMPANY_EXAMPLE_EXCLUSIONS
     };
 }

package/fesm/dtos/authentication.dto.js

@@ -21,7 +21,8 @@ function _ts_metadata(k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
-import { IsEmail, IsNotEmpty, IsOptional, IsString, IsUUID, MaxLength, MinLength, ValidateIf } from 'class-validator';
+import { IsEmail, IsNotEmpty, IsOptional, IsString, IsUUID, MaxLength, ValidateIf } from 'class-validator';
+import { IsStrongPassword } from '../validators/password.validator';
 // Request DTOs
 /** Login Request DTO */ export class LoginDto {
     constructor(){
@@ -40,12 +41,12 @@ _ts_decorate([
 ], LoginDto.prototype, "email", void 0);
 _ts_decorate([
     ApiProperty({
-        example: '123456',
-        description: 'User password (min 6 chars)'
+        example: 'SecureP@ss1',
+        description: 'User password'
     }),
     IsString(),
     IsNotEmpty(),
-    MinLength(6),
+    MaxLength(128),
     _ts_metadata("design:type", String)
 ], LoginDto.prototype, "password", void 0);
 /** Registration Request DTO - Supports simple and company-based registration */ export class RegistrationDto {
@@ -84,13 +85,13 @@ _ts_decorate([
 ], RegistrationDto.prototype, "email", void 0);
 _ts_decorate([
     ApiProperty({
-        example: 'strongPassword123',
-        description: 'Password (min 6 chars)'
+        example: 'StrongP@ss123',
+        description: 'Password (min 8 chars, requires uppercase, lowercase, number, special char)'
     }),
     IsNotEmpty(),
     IsString(),
-    MinLength(6),
-    MaxLength(60),
+    IsStrongPassword(),
+    MaxLength(128),
     _ts_metadata("design:type", String)
 ], RegistrationDto.prototype, "password", void 0);
 _ts_decorate([
@@ -151,6 +152,7 @@ _ts_decorate([
     }),
     IsOptional(),
     IsString(),
+    MaxLength(500),
     _ts_metadata("design:type", String)
 ], RegistrationDto.prototype, "newCompanyAddress", void 0);
 /** Refresh Token Request DTO - refreshToken optional in body (browsers use HTTP-only cookie) */ export class RefreshTokenDto {
@@ -180,16 +182,17 @@ _ts_decorate([
     }),
     IsString(),
     IsNotEmpty(),
+    MaxLength(128),
     _ts_metadata("design:type", String)
 ], ChangePasswordDto.prototype, "currentPassword", void 0);
 _ts_decorate([
     ApiProperty({
-        example: 'newPassword456',
-        description: 'New password (min 6 chars)'
+        example: 'NewP@ssword456',
+        description: 'New password (min 8 chars, requires uppercase, lowercase, number, special char)'
     }),
     IsString(),
     IsNotEmpty(),
-    MinLength(6),
+    IsStrongPassword(),
     _ts_metadata("design:type", String)
 ], ChangePasswordDto.prototype, "newPassword", void 0);
 /** Select Company & Branch Request DTO - Used after login when user needs to select company and branch */ export class SelectDto {
@@ -358,7 +361,6 @@ _ts_decorate([
         _define_property(this, "id", void 0);
         _define_property(this, "name", void 0);
         _define_property(this, "slug", void 0);
-        _define_property(this, "isActive", void 0);
         _define_property(this, "logoId", void 0);
     }
 }
@@ -380,12 +382,6 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", String)
 ], BranchSelectionInfoDto.prototype, "slug", void 0);
-_ts_decorate([
-    ApiProperty({
-        example: true
-    }),
-    _ts_metadata("design:type", Boolean)
-], BranchSelectionInfoDto.prototype, "isActive", void 0);
 _ts_decorate([
     ApiPropertyOptional({
         example: '550e8400-e29b-41d4-a716-446655440077',
@@ -399,7 +395,6 @@ _ts_decorate([
         _define_property(this, "id", void 0);
         _define_property(this, "name", void 0);
         _define_property(this, "slug", void 0);
-        _define_property(this, "isActive", void 0);
         _define_property(this, "logoId", void 0);
         _define_property(this, "branches", void 0);
     }
@@ -422,12 +417,6 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", String)
 ], CompanyWithBranchesDto.prototype, "slug", void 0);
-_ts_decorate([
-    ApiProperty({
-        example: true
-    }),
-    _ts_metadata("design:type", Boolean)
-], CompanyWithBranchesDto.prototype, "isActive", void 0);
 _ts_decorate([
     ApiPropertyOptional({
         example: '550e8400-e29b-41d4-a716-446655440088',
@@ -452,7 +441,6 @@ _ts_decorate([
         _define_property(this, "user", void 0);
         _define_property(this, "company", void 0);
         _define_property(this, "branch", void 0);
-        _define_property(this, "companyFeatureEnabled", void 0);
     }
 }
 _ts_decorate([
@@ -488,13 +476,6 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", typeof BranchInfoDto === "undefined" ? Object : BranchInfoDto)
 ], LoginResponseDto.prototype, "branch", void 0);
-_ts_decorate([
-    ApiPropertyOptional({
-        example: true,
-        description: 'Whether company feature is enabled'
-    }),
-    _ts_metadata("design:type", Boolean)
-], LoginResponseDto.prototype, "companyFeatureEnabled", void 0);
 /** Registration Response DTO - Returned on successful registration */ export class RegistrationResponseDto {
     constructor(){
         _define_property(this, "accessToken", void 0);
@@ -502,17 +483,17 @@ _ts_decorate([
         _define_property(this, "user", void 0);
         _define_property(this, "company", void 0);
         _define_property(this, "branch", void 0);
-        _define_property(this, "companyFeatureEnabled", void 0);
+        _define_property(this, "requiresEmailVerification", void 0);
     }
 }
 _ts_decorate([
-    ApiProperty({
+    ApiPropertyOptional({
         example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...'
     }),
     _ts_metadata("design:type", String)
 ], RegistrationResponseDto.prototype, "accessToken", void 0);
 _ts_decorate([
-    ApiProperty({
+    ApiPropertyOptional({
         example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...'
     }),
     _ts_metadata("design:type", String)
@@ -539,12 +520,12 @@ _ts_decorate([
     _ts_metadata("design:type", typeof BranchInfoDto === "undefined" ? Object : BranchInfoDto)
 ], RegistrationResponseDto.prototype, "branch", void 0);
 _ts_decorate([
-    ApiProperty({
+    ApiPropertyOptional({
         example: true,
-        description: 'Whether company feature is enabled'
+        description: 'Whether email verification is required'
     }),
     _ts_metadata("design:type", Boolean)
-], RegistrationResponseDto.prototype, "companyFeatureEnabled", void 0);
+], RegistrationResponseDto.prototype, "requiresEmailVerification", void 0);
 /** Me Response DTO - Returned by GET /auth/me (user data only, no tokens) */ export class MeResponseDto {
     constructor(){
         _define_property(this, "user", void 0);
@@ -619,3 +600,84 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Array)
 ], CompanySelectionResponseDto.prototype, "companies", void 0);
+/** Login Response when email verification required */ export class LoginResponseRequiresEmailVerificationDto {
+    constructor(){
+        _define_property(this, "requiresEmailVerification", void 0);
+        _define_property(this, "email", void 0);
+        _define_property(this, "message", void 0);
+    }
+}
+_ts_decorate([
+    ApiProperty({
+        example: true
+    }),
+    _ts_metadata("design:type", Boolean)
+], LoginResponseRequiresEmailVerificationDto.prototype, "requiresEmailVerification", void 0);
+_ts_decorate([
+    ApiProperty({
+        example: 'john@example.com'
+    }),
+    _ts_metadata("design:type", String)
+], LoginResponseRequiresEmailVerificationDto.prototype, "email", void 0);
+_ts_decorate([
+    ApiProperty({
+        example: 'Please verify your email address before logging in.'
+    }),
+    _ts_metadata("design:type", String)
+], LoginResponseRequiresEmailVerificationDto.prototype, "message", void 0);
+// Email Auth DTOs
+/** Forgot Password Request DTO - Initiates password reset flow */ export class ForgotPasswordDto {
+    constructor(){
+        _define_property(this, "email", void 0);
+    }
+}
+_ts_decorate([
+    ApiProperty({
+        example: 'john@example.com',
+        description: 'Email address to send reset link to'
+    }),
+    IsEmail(),
+    IsNotEmpty(),
+    _ts_metadata("design:type", String)
+], ForgotPasswordDto.prototype, "email", void 0);
+/** Reset Password Request DTO - Resets password using token */ export class ResetPasswordDto {
+    constructor(){
+        _define_property(this, "token", void 0);
+        _define_property(this, "newPassword", void 0);
+    }
+}
+_ts_decorate([
+    ApiProperty({
+        example: 'a1b2c3d4e5f6...',
+        description: 'Password reset token from email'
+    }),
+    IsString(),
+    IsNotEmpty(),
+    _ts_metadata("design:type", String)
+], ResetPasswordDto.prototype, "token", void 0);
+_ts_decorate([
+    ApiProperty({
+        example: 'NewSecureP@ss123',
+        description: 'New password (min 8 chars, requires uppercase, lowercase, number, special char)'
+    }),
+    IsString(),
+    IsNotEmpty(),
+    IsStrongPassword(),
+    _ts_metadata("design:type", String)
+], ResetPasswordDto.prototype, "newPassword", void 0);
+/** Verify Email Request DTO - Verifies email using token */ export class VerifyEmailDto {
+    constructor(){
+        _define_property(this, "token", void 0);
+    }
+}
+_ts_decorate([
+    ApiProperty({
+        example: 'a1b2c3d4e5f6...',
+        description: 'Email verification token from email'
+    }),
+    IsString(),
+    IsNotEmpty(),
+    _ts_metadata("design:type", String)
+], VerifyEmailDto.prototype, "token", void 0);
+/** Resend Verification Email Request DTO - Same structure as ForgotPasswordDto */ export class ResendVerificationDto extends ForgotPasswordDto {
+}

package/fesm/dtos/index.js

@@ -1,6 +1,5 @@
 export * from './authentication.dto';
 export * from './company-branch.dto';
 export * from './company.dto';
-export * from './user-company-permission.dto';
 export * from './user.dto';
 export * from './user-permission.dto';

package/fesm/dtos/user-permission.dto.js

@@ -233,9 +233,23 @@ _ts_decorate([
  * User companies response
  */ export class UserCompaniesResponseDto {
     constructor(){
+        _define_property(this, "success", void 0);
+        _define_property(this, "message", void 0);
         _define_property(this, "data", void 0);
     }
 }
+_ts_decorate([
+    ApiProperty({
+        example: true
+    }),
+    _ts_metadata("design:type", Boolean)
+], UserCompaniesResponseDto.prototype, "success", void 0);
+_ts_decorate([
+    ApiProperty({
+        example: 'User companies retrieved successfully'
+    }),
+    _ts_metadata("design:type", String)
+], UserCompaniesResponseDto.prototype, "message", void 0);
 _ts_decorate([
     ApiProperty({
         description: 'List of companies the user has access to',
@@ -265,9 +279,23 @@ _ts_decorate([
  * User branches response
  */ export class UserBranchesResponseDto {
     constructor(){
+        _define_property(this, "success", void 0);
+        _define_property(this, "message", void 0);
         _define_property(this, "data", void 0);
     }
 }
+_ts_decorate([
+    ApiProperty({
+        example: true
+    }),
+    _ts_metadata("design:type", Boolean)
+], UserBranchesResponseDto.prototype, "success", void 0);
+_ts_decorate([
+    ApiProperty({
+        example: 'User branches retrieved successfully'
+    }),
+    _ts_metadata("design:type", String)
+], UserBranchesResponseDto.prototype, "message", void 0);
 _ts_decorate([
     ApiProperty({
         description: 'List of branches the user has access to',

package/fesm/dtos/user.dto.js

@@ -21,7 +21,8 @@ function _ts_metadata(k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
-import { IsBoolean, IsEmail, IsObject, IsOptional, IsString } from 'class-validator';
+import { IsBoolean, IsEmail, IsNotEmpty, IsObject, IsOptional, IsString, IsUUID, MaxLength } from 'class-validator';
+import { IsStrongPassword } from '../validators/password.validator';
 export class CreateUserDto {
     constructor(){
         _define_property(this, "name", void 0);
@@ -62,10 +63,13 @@ _ts_decorate([
 ], CreateUserDto.prototype, "email", void 0);
 _ts_decorate([
     ApiProperty({
-        example: 'password123',
-        description: 'Password'
+        example: 'SecureP@ss123',
+        description: 'Password (must meet complexity requirements)'
     }),
     IsString(),
+    IsNotEmpty(),
+    IsStrongPassword(),
+    MaxLength(128),
     _ts_metadata("design:type", String)
 ], CreateUserDto.prototype, "password", void 0);
 _ts_decorate([
@@ -118,6 +122,7 @@ export class UpdateUserDto {
         _define_property(this, "phone", void 0);
         _define_property(this, "email", void 0);
         _define_property(this, "password", void 0);
+        _define_property(this, "oldPassword", void 0);
         _define_property(this, "profilePictureId", void 0);
         _define_property(this, "isActive", void 0);
         _define_property(this, "emailVerified", void 0);
@@ -129,7 +134,7 @@ _ts_decorate([
     ApiProperty({
         description: 'User ID'
     }),
-    IsString(),
+    IsUUID(),
     _ts_metadata("design:type", String)
 ], UpdateUserDto.prototype, "id", void 0);
 _ts_decorate([
@@ -161,12 +166,22 @@ _ts_decorate([
 ], UpdateUserDto.prototype, "email", void 0);
 _ts_decorate([
     ApiPropertyOptional({
-        description: 'New password'
+        description: 'New password (must meet complexity requirements)'
     }),
     IsOptional(),
     IsString(),
+    IsStrongPassword(),
+    MaxLength(128),
     _ts_metadata("design:type", String)
 ], UpdateUserDto.prototype, "password", void 0);
+_ts_decorate([
+    ApiPropertyOptional({
+        description: 'Current password (required when changing password on own profile)'
+    }),
+    IsOptional(),
+    IsString(),
+    _ts_metadata("design:type", String)
+], UpdateUserDto.prototype, "oldPassword", void 0);
 _ts_decorate([
     ApiPropertyOptional({
         description: 'Profile picture file ID'

package/fesm/entities/index.js

@@ -1,13 +1,19 @@
 export * from './company-branch.entity';
 export * from './company.entity';
+export * from './pending-registration.entity';
 export { PermissionType, UserCompanyPermission } from './user-company-permission.entity';
 export * from './user.entity';
+export * from './user-token.entity';
 import { CompanyBranch } from './company-branch.entity';
 import { Company } from './company.entity';
+import { PendingRegistration } from './pending-registration.entity';
 import { UserCompanyPermission } from './user-company-permission.entity';
 import { User } from './user.entity';
+import { UserToken } from './user-token.entity';
 export const CoreEntities = [
-    User
+    User,
+    UserToken,
+    PendingRegistration
 ];
 export const CompanyEntities = [
     Company,

package/fesm/entities/pending-registration.entity.js

@@ -0,0 +1,115 @@
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+import { Column, CreateDateColumn, Entity, Index, PrimaryGeneratedColumn } from 'typeorm';
+export class PendingRegistration {
+    constructor(){
+        _define_property(this, "id", void 0);
+        _define_property(this, "email", void 0);
+        _define_property(this, "name", void 0);
+        _define_property(this, "phone", void 0);
+        _define_property(this, "passwordHash", void 0);
+        _define_property(this, "token", void 0);
+        _define_property(this, "expiresAt", void 0);
+        _define_property(this, "companyData", void 0);
+        _define_property(this, "createdAt", void 0);
+    }
+}
+_ts_decorate([
+    PrimaryGeneratedColumn('uuid'),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "id", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 255
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "email", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 255,
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "name", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 255,
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "phone", void 0);
+_ts_decorate([
+    Column({
+        type: 'text',
+        name: 'passwordHash'
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "passwordHash", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 64
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "token", void 0);
+_ts_decorate([
+    Column({
+        type: 'timestamp',
+        name: 'expires_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], PendingRegistration.prototype, "expiresAt", void 0);
+_ts_decorate([
+    Column({
+        type: 'json',
+        nullable: true,
+        name: 'company_data'
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "companyData", void 0);
+_ts_decorate([
+    CreateDateColumn({
+        type: 'timestamp',
+        name: 'created_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], PendingRegistration.prototype, "createdAt", void 0);
+PendingRegistration = _ts_decorate([
+    Entity('pending_registrations'),
+    Index('IDX_pending_reg_email', [
+        'email'
+    ], {
+        unique: true
+    }),
+    Index('IDX_pending_reg_token', [
+        'token'
+    ], {
+        unique: true
+    }),
+    Index('IDX_pending_reg_expires', [
+        'expiresAt'
+    ])
+], PendingRegistration);

package/fesm/entities/user-company-permission.entity.js

@@ -27,12 +27,6 @@ import { Company } from './company.entity';
 import { User } from './user.entity';
 export { PermissionType };
 export class UserCompanyPermission {
-    /* ---------- Helpers ---------- */ isCompanyPermission() {
-        return this.permissionType === PermissionType.COMPANY;
-    }
-    isBranchPermission() {
-        return this.permissionType === PermissionType.BRANCH;
-    }
     constructor(){
         _define_property(this, "id", void 0);
         /* ---------- Ownership ---------- */ _define_property(this, "userId", void 0);
@@ -69,11 +63,11 @@ _ts_decorate([
 ], UserCompanyPermission.prototype, "user", void 0);
 _ts_decorate([
     Column({
-        type: 'enum',
-        enum: PermissionType,
+        type: 'varchar',
+        length: 50,
         name: 'permission_type'
     }),
-    _ts_metadata("design:type", typeof PermissionType === "undefined" ? Object : PermissionType)
+    _ts_metadata("design:type", String)
 ], UserCompanyPermission.prototype, "permissionType", void 0);
 _ts_decorate([
     Column({