@flusys/nestjs-auth 1.0.0-beta → 1.1.0-beta

package/fesm/dtos/authentication.dto.js

@@ -503,16 +503,17 @@ _ts_decorate([
         _define_property(this, "company", void 0);
         _define_property(this, "branch", void 0);
         _define_property(this, "companyFeatureEnabled", void 0);
+        _define_property(this, "requiresEmailVerification", void 0);
     }
 }
 _ts_decorate([
-    ApiProperty({
+    ApiPropertyOptional({
         example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...'
     }),
     _ts_metadata("design:type", String)
 ], RegistrationResponseDto.prototype, "accessToken", void 0);
 _ts_decorate([
-    ApiProperty({
+    ApiPropertyOptional({
         example: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...'
     }),
     _ts_metadata("design:type", String)
@@ -539,12 +540,19 @@ _ts_decorate([
     _ts_metadata("design:type", typeof BranchInfoDto === "undefined" ? Object : BranchInfoDto)
 ], RegistrationResponseDto.prototype, "branch", void 0);
 _ts_decorate([
-    ApiProperty({
+    ApiPropertyOptional({
         example: true,
         description: 'Whether company feature is enabled'
     }),
     _ts_metadata("design:type", Boolean)
 ], RegistrationResponseDto.prototype, "companyFeatureEnabled", void 0);
+_ts_decorate([
+    ApiPropertyOptional({
+        example: true,
+        description: 'Whether email verification is required'
+    }),
+    _ts_metadata("design:type", Boolean)
+], RegistrationResponseDto.prototype, "requiresEmailVerification", void 0);
 /** Me Response DTO - Returned by GET /auth/me (user data only, no tokens) */ export class MeResponseDto {
     constructor(){
         _define_property(this, "user", void 0);
@@ -619,3 +627,84 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Array)
 ], CompanySelectionResponseDto.prototype, "companies", void 0);
+/** Login Response when email verification required */ export class LoginResponseRequiresEmailVerificationDto {
+    constructor(){
+        _define_property(this, "requiresEmailVerification", void 0);
+        _define_property(this, "email", void 0);
+        _define_property(this, "message", void 0);
+    }
+}
+_ts_decorate([
+    ApiProperty({
+        example: true
+    }),
+    _ts_metadata("design:type", Boolean)
+], LoginResponseRequiresEmailVerificationDto.prototype, "requiresEmailVerification", void 0);
+_ts_decorate([
+    ApiProperty({
+        example: 'john@example.com'
+    }),
+    _ts_metadata("design:type", String)
+], LoginResponseRequiresEmailVerificationDto.prototype, "email", void 0);
+_ts_decorate([
+    ApiProperty({
+        example: 'Please verify your email address before logging in.'
+    }),
+    _ts_metadata("design:type", String)
+], LoginResponseRequiresEmailVerificationDto.prototype, "message", void 0);
+// Email Auth DTOs
+/** Forgot Password Request DTO - Initiates password reset flow */ export class ForgotPasswordDto {
+    constructor(){
+        _define_property(this, "email", void 0);
+    }
+}
+_ts_decorate([
+    ApiProperty({
+        example: 'john@example.com',
+        description: 'Email address to send reset link to'
+    }),
+    IsEmail(),
+    IsNotEmpty(),
+    _ts_metadata("design:type", String)
+], ForgotPasswordDto.prototype, "email", void 0);
+/** Reset Password Request DTO - Resets password using token */ export class ResetPasswordDto {
+    constructor(){
+        _define_property(this, "token", void 0);
+        _define_property(this, "newPassword", void 0);
+    }
+}
+_ts_decorate([
+    ApiProperty({
+        example: 'a1b2c3d4e5f6...',
+        description: 'Password reset token from email'
+    }),
+    IsString(),
+    IsNotEmpty(),
+    _ts_metadata("design:type", String)
+], ResetPasswordDto.prototype, "token", void 0);
+_ts_decorate([
+    ApiProperty({
+        example: 'newSecurePassword123',
+        description: 'New password (min 6 chars)'
+    }),
+    IsString(),
+    IsNotEmpty(),
+    MinLength(6),
+    _ts_metadata("design:type", String)
+], ResetPasswordDto.prototype, "newPassword", void 0);
+/** Verify Email Request DTO - Verifies email using token */ export class VerifyEmailDto {
+    constructor(){
+        _define_property(this, "token", void 0);
+    }
+}
+_ts_decorate([
+    ApiProperty({
+        example: 'a1b2c3d4e5f6...',
+        description: 'Email verification token from email'
+    }),
+    IsString(),
+    IsNotEmpty(),
+    _ts_metadata("design:type", String)
+], VerifyEmailDto.prototype, "token", void 0);
+/** Resend Verification Email Request DTO - Same structure as ForgotPasswordDto */ export class ResendVerificationDto extends ForgotPasswordDto {
+}

package/fesm/entities/index.js

@@ -1,13 +1,19 @@
 export * from './company-branch.entity';
 export * from './company.entity';
+export * from './pending-registration.entity';
 export { PermissionType, UserCompanyPermission } from './user-company-permission.entity';
 export * from './user.entity';
+export * from './user-token.entity';
 import { CompanyBranch } from './company-branch.entity';
 import { Company } from './company.entity';
+import { PendingRegistration } from './pending-registration.entity';
 import { UserCompanyPermission } from './user-company-permission.entity';
 import { User } from './user.entity';
+import { UserToken } from './user-token.entity';
 export const CoreEntities = [
-    User
+    User,
+    UserToken,
+    PendingRegistration
 ];
 export const CompanyEntities = [
     Company,

package/fesm/entities/pending-registration.entity.js

@@ -0,0 +1,115 @@
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+import { Column, CreateDateColumn, Entity, Index, PrimaryGeneratedColumn } from 'typeorm';
+export class PendingRegistration {
+    constructor(){
+        _define_property(this, "id", void 0);
+        _define_property(this, "email", void 0);
+        _define_property(this, "name", void 0);
+        _define_property(this, "phone", void 0);
+        _define_property(this, "passwordHash", void 0);
+        _define_property(this, "token", void 0);
+        _define_property(this, "expiresAt", void 0);
+        _define_property(this, "companyData", void 0);
+        _define_property(this, "createdAt", void 0);
+    }
+}
+_ts_decorate([
+    PrimaryGeneratedColumn('uuid'),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "id", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 255
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "email", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 255,
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "name", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 255,
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "phone", void 0);
+_ts_decorate([
+    Column({
+        type: 'text',
+        name: 'passwordHash'
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "passwordHash", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 64
+    }),
+    _ts_metadata("design:type", String)
+], PendingRegistration.prototype, "token", void 0);
+_ts_decorate([
+    Column({
+        type: 'timestamp',
+        name: 'expires_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], PendingRegistration.prototype, "expiresAt", void 0);
+_ts_decorate([
+    Column({
+        type: 'json',
+        nullable: true,
+        name: 'company_data'
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "companyData", void 0);
+_ts_decorate([
+    CreateDateColumn({
+        type: 'timestamp',
+        name: 'created_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], PendingRegistration.prototype, "createdAt", void 0);
+PendingRegistration = _ts_decorate([
+    Entity('pending_registrations'),
+    Index('IDX_pending_reg_email', [
+        'email'
+    ], {
+        unique: true
+    }),
+    Index('IDX_pending_reg_token', [
+        'token'
+    ], {
+        unique: true
+    }),
+    Index('IDX_pending_reg_expires', [
+        'expiresAt'
+    ])
+], PendingRegistration);

package/fesm/entities/user-token.entity.js

@@ -0,0 +1,113 @@
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+import { Column, CreateDateColumn, Entity, Index, PrimaryGeneratedColumn } from 'typeorm';
+/**
+ * Token types for various user actions
+ */ export var TokenType = /*#__PURE__*/ function(TokenType) {
+    TokenType["PASSWORD_RESET"] = "password_reset";
+    TokenType["EMAIL_VERIFICATION"] = "email_verification";
+    TokenType["EMAIL_CHANGE"] = "email_change";
+    return TokenType;
+}({});
+export class UserToken {
+    constructor(){
+        _define_property(this, "id", void 0);
+        _define_property(this, "userId", void 0);
+        _define_property(this, "type", void 0);
+        _define_property(this, "token", void 0);
+        _define_property(this, "expiresAt", void 0);
+        _define_property(this, "usedAt", void 0);
+        _define_property(this, "metadata", void 0);
+        _define_property(this, "createdAt", void 0);
+    }
+}
+_ts_decorate([
+    PrimaryGeneratedColumn('uuid'),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "id", void 0);
+_ts_decorate([
+    Column({
+        type: 'uuid',
+        name: 'user_id'
+    }),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "userId", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 32
+    }),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "type", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 64
+    }),
+    _ts_metadata("design:type", String)
+], UserToken.prototype, "token", void 0);
+_ts_decorate([
+    Column({
+        type: 'timestamp',
+        name: 'expires_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], UserToken.prototype, "expiresAt", void 0);
+_ts_decorate([
+    Column({
+        type: 'timestamp',
+        name: 'used_at',
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], UserToken.prototype, "usedAt", void 0);
+_ts_decorate([
+    Column({
+        type: 'varchar',
+        length: 255,
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], UserToken.prototype, "metadata", void 0);
+_ts_decorate([
+    CreateDateColumn({
+        type: 'timestamp',
+        name: 'created_at'
+    }),
+    _ts_metadata("design:type", typeof Date === "undefined" ? Object : Date)
+], UserToken.prototype, "createdAt", void 0);
+UserToken = _ts_decorate([
+    Entity('user_tokens'),
+    Index('IDX_user_token_token', [
+        'token'
+    ], {
+        unique: true
+    }),
+    Index('IDX_user_token_user_type', [
+        'userId',
+        'type'
+    ]),
+    Index('IDX_user_token_expires', [
+        'expiresAt'
+    ])
+], UserToken);

package/fesm/interfaces/auth-email-provider.interface.js

@@ -0,0 +1,38 @@
+/**
+ * Auth Email Provider Interface
+ *
+ * This interface defines the contract for email sending in the auth module.
+ * It allows auth to work independently of the email module.
+ *
+ * To use email features in auth:
+ * 1. Provide AUTH_EMAIL_PROVIDER in your app module
+ * 2. Implement IAuthEmailProvider using EmailSendService from nestjs-email
+ *
+ * @example
+ * ```typescript
+ * // In app.module.ts or a provider file
+ * {
+ *   provide: AUTH_EMAIL_PROVIDER,
+ *   useFactory: (emailSendService: EmailSendService) => ({
+ *     sendPasswordResetEmail: async (email, token, resetUrl) => {
+ *       await emailSendService.sendTemplateEmail({
+ *         templateSlug: 'password-reset',
+ *         to: email,
+ *         variables: { resetUrl, token },
+ *       });
+ *     },
+ *     sendVerificationEmail: async (email, token, verifyUrl) => {
+ *       await emailSendService.sendTemplateEmail({
+ *         templateSlug: 'email-verification',
+ *         to: email,
+ *         variables: { verifyUrl, token },
+ *       });
+ *     },
+ *   }),
+ *   inject: [EmailSendService],
+ * }
+ * ```
+ */ /**
+ * Injection token for auth email provider
+ * Use this to provide the email implementation
+ */ export const AUTH_EMAIL_PROVIDER = 'AUTH_EMAIL_PROVIDER';

package/fesm/interfaces/authentication.interface.js

@@ -1 +1 @@
-/** Login Response when company/branch selection is required */ export { };
+/** Login Response when email verification is required */ export { };

package/fesm/interfaces/index.js

@@ -1,5 +1,7 @@
 export * from './authentication.interface';
+export * from './auth-email-provider.interface';
 export * from './company-branch.interface';
 export * from './company.interface';
 export * from './user.interface';
+export * from './user-enricher.interface';
 export * from './auth-module-options.interface';

package/fesm/interfaces/user-enricher.interface.js

@@ -0,0 +1,26 @@
+/**
+ * User Enricher Provider Interface
+ *
+ * Allows consuming applications to extend user list and profile
+ * without modifying the base nestjs-auth package.
+ *
+ * This follows the Provider Interface Pattern:
+ * - nestjs-auth defines the interface (this file)
+ * - Consuming apps implement the interface
+ * - nestjs-auth optionally injects the implementation
+ *
+ * @example
+ * // In your app module
+ * providers: [
+ *   { provide: USER_ENRICHER, useClass: MyUserEnricher },
+ * ]
+ *
+ * // Your enricher implementation
+ * @Injectable()
+ * export class MyUserEnricher implements IUserEnricher {
+ *   async enrichListQuery(query, user) {
+ *     query.leftJoinAndSelect('user.department', 'department');
+ *     return { extraFields: ['department.name'] };
+ *   }
+ * }
+ */ export { };

package/fesm/modules/auth.module.js

@@ -17,14 +17,14 @@ import { Company, CompanyBranch, User, UserCompanyPermission } from '../entities
 import { JwtAuthGuard } from '@flusys/nestjs-shared/guards';
 import { ClearToken } from '../interceptors/clear-token.interceptor';
 import { SetToken } from '../interceptors/set-token.interceptor';
-import { AuthenticationService, BranchService, CompanySelectionSessionService, CompanyService, UserPermissionService, UserService } from '../services';
+import { AuthEmailService, AuthenticationService, BranchService, CompanySelectionSessionService, CompanyService, UserPermissionService, UserService } from '../services';
 import { JwtStrategy } from '../strategies/jwt.strategy';
 export class AuthModule {
     static forRoot(options) {
         return this.buildDynamicModule(options);
     }
     static forRootAsync(asyncOptions) {
-        const { global = false, includeController = true, bootstrapAppConfig: { enableCompanyFeature } = {}, imports: externalImports = [] } = asyncOptions;
+        const { global = false, includeController = true, bootstrapAppConfig: { enableCompanyFeature } = {}, imports: externalImports = [], providers: additionalProviders = [] } = asyncOptions;
         const asyncProviders = this.createAsyncProviders(asyncOptions);
         // Build imports
         const imports = [
@@ -51,6 +51,7 @@ export class AuthModule {
         // Build providers
         const providers = [
             ...asyncProviders,
+            ...additionalProviders,
             // Config & Infrastructure
             AuthConfigService,
             AuthDataSourceProvider,
@@ -58,6 +59,7 @@ export class AuthModule {
             JwtStrategy,
             JwtAuthGuard,
             AuthenticationService,
+            AuthEmailService,
             // Interceptors
             SetToken,
             ClearToken,
@@ -77,6 +79,7 @@ export class AuthModule {
             JwtStrategy,
             JwtAuthGuard,
             AuthenticationService,
+            AuthEmailService,
             UserService
         ];
         if (enableCompanyFeature) {
@@ -92,7 +95,7 @@ export class AuthModule {
         };
     }
     static buildDynamicModule(options) {
-        const { bootstrapAppConfig: { enableCompanyFeature } = {}, includeController = true, global = false } = options;
+        const { bootstrapAppConfig: { enableCompanyFeature } = {}, includeController = true, global = false, providers: additionalProviders = [] } = options;
         const imports = [
             PassportModule.register({
                 defaultStrategy: 'jwt'
@@ -118,6 +121,7 @@ export class AuthModule {
                 provide: AUTH_MODULE_OPTIONS,
                 useValue: options
             },
+            ...additionalProviders,
             // Config & Infrastructure
             AuthConfigService,
             AuthDataSourceProvider,
@@ -125,6 +129,7 @@ export class AuthModule {
             JwtStrategy,
             JwtAuthGuard,
             AuthenticationService,
+            AuthEmailService,
             // Interceptors
             SetToken,
             ClearToken,
@@ -143,6 +148,7 @@ export class AuthModule {
             JwtStrategy,
             JwtAuthGuard,
             AuthenticationService,
+            AuthEmailService,
             UserService
         ];
         if (enableCompanyFeature) {

package/fesm/services/auth-config.service.js

@@ -56,6 +56,10 @@ export class AuthConfigService {
     /** Get refresh token cookie name */ getRefreshTokenCookieName() {
         return this.config.refreshTokenCookieName ?? 'fsn_refresh_token';
     }
+    // Frontend Configuration
+    /** Get frontend URL for email links */ getFrontendUrl() {
+        return this.config.frontendUrl;
+    }
     // Database Configuration
     /** Get default database config */ getDefaultDatabaseConfig() {
         return this.config.defaultDatabaseConfig ?? this.config.tenantDefaultDatabaseConfig;

package/fesm/services/auth-datasource.provider.js

@@ -102,9 +102,11 @@ export class AuthDataSourceProvider extends MultiTenantDataSourceService {
     // Entity Management
     /** Get auth entities based on company feature flag */ async getAuthEntities(enableCompanyFeature) {
         const enable = enableCompanyFeature ?? this.getEnableCompanyFeature();
-        const { Company, CompanyBranch, User, UserCompanyPermission } = await import('../entities');
+        const { Company, CompanyBranch, User, UserCompanyPermission, UserToken, PendingRegistration } = await import('../entities');
         const coreEntities = [
-            User
+            User,
+            UserToken,
+            PendingRegistration
         ];
         const companyEntities = enable ? [
             Company,