@flusys/nestjs-auth 1.0.0-rc → 1.0.0

package/strategies/jwt.strategy.d.ts

@@ -1,13 +1,16 @@
 import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
 import { ModuleRef } from '@nestjs/core';
 import { Request } from 'express';
-import { AuthConfigService } from '../services/auth-config.service';
 import { TokenPayload, TokenPayloadWithCompany } from '../interfaces/authentication.interface';
+import { AuthConfigService } from '../services/auth-config.service';
 declare const JwtStrategy_base: new (...args: any) => any;
 export declare class JwtStrategy extends JwtStrategy_base {
     private readonly authConfig;
     private readonly moduleRef;
     constructor(authConfig: AuthConfigService, moduleRef: ModuleRef);
     validate(_req: Request, payload: TokenPayload | TokenPayloadWithCompany): Promise<ILoggedUserInfo>;
+    private resolveUserRepository;
+    private checkTokenRevocation;
+    private buildUserInfo;
 }
 export {};

package/cjs/dtos/user-company-permission.dto.js

@@ -1,110 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-function _export(target, all) {
-    for(var name in all)Object.defineProperty(target, name, {
-        enumerable: true,
-        get: Object.getOwnPropertyDescriptor(all, name).get
-    });
-}
-_export(exports, {
-    get AssignBranchPermissionDto () {
-        return AssignBranchPermissionDto;
-    },
-    get AssignCompanyPermissionDto () {
-        return AssignCompanyPermissionDto;
-    }
-});
-const _swagger = require("@nestjs/swagger");
-const _classvalidator = require("class-validator");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-let AssignCompanyPermissionDto = class AssignCompanyPermissionDto {
-    constructor(){
-        _define_property(this, "userId", void 0);
-        _define_property(this, "companyId", void 0);
-        _define_property(this, "metadata", void 0);
-    }
-};
-_ts_decorate([
-    (0, _swagger.ApiProperty)({
-        example: '550e8400-e29b-41d4-a716-446655440000',
-        description: 'User ID to assign company access to'
-    }),
-    (0, _classvalidator.IsUUID)(),
-    _ts_metadata("design:type", String)
-], AssignCompanyPermissionDto.prototype, "userId", void 0);
-_ts_decorate([
-    (0, _swagger.ApiProperty)({
-        example: '550e8400-e29b-41d4-a716-446655440001',
-        description: 'Company ID to grant access to'
-    }),
-    (0, _classvalidator.IsUUID)(),
-    _ts_metadata("design:type", String)
-], AssignCompanyPermissionDto.prototype, "companyId", void 0);
-_ts_decorate([
-    (0, _swagger.ApiPropertyOptional)({
-        example: {
-            role: 'member'
-        },
-        description: 'Additional permission metadata'
-    }),
-    (0, _classvalidator.IsOptional)(),
-    (0, _classvalidator.IsObject)(),
-    _ts_metadata("design:type", typeof Record === "undefined" ? Object : Record)
-], AssignCompanyPermissionDto.prototype, "metadata", void 0);
-let AssignBranchPermissionDto = class AssignBranchPermissionDto {
-    constructor(){
-        _define_property(this, "userId", void 0);
-        _define_property(this, "branchId", void 0);
-        _define_property(this, "metadata", void 0);
-    }
-};
-_ts_decorate([
-    (0, _swagger.ApiProperty)({
-        example: '550e8400-e29b-41d4-a716-446655440000',
-        description: 'User ID to assign branch access to'
-    }),
-    (0, _classvalidator.IsUUID)(),
-    _ts_metadata("design:type", String)
-], AssignBranchPermissionDto.prototype, "userId", void 0);
-_ts_decorate([
-    (0, _swagger.ApiProperty)({
-        example: '550e8400-e29b-41d4-a716-446655440002',
-        description: 'Branch ID to grant access to'
-    }),
-    (0, _classvalidator.IsUUID)(),
-    _ts_metadata("design:type", String)
-], AssignBranchPermissionDto.prototype, "branchId", void 0);
-_ts_decorate([
-    (0, _swagger.ApiPropertyOptional)({
-        example: {
-            role: 'staff'
-        },
-        description: 'Additional permission metadata'
-    }),
-    (0, _classvalidator.IsOptional)(),
-    (0, _classvalidator.IsObject)(),
-    _ts_metadata("design:type", typeof Record === "undefined" ? Object : Record)
-], AssignBranchPermissionDto.prototype, "metadata", void 0);

package/cjs/guards/auth-throttler.guard.js

@@ -1,53 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "AuthThrottlerGuard", {
-    enumerable: true,
-    get: function() {
-        return AuthThrottlerGuard;
-    }
-});
-const _common = require("@nestjs/common");
-const _throttler = require("@nestjs/throttler");
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-let AuthThrottlerGuard = class AuthThrottlerGuard extends _throttler.ThrottlerGuard {
-    /**
-   * Generate tracker key combining IP and email for login attempts.
-   * This prevents attackers from brute-forcing multiple accounts from the same IP.
-   */ async getTracker(req) {
-        const ip = req.ip || req.headers?.['x-forwarded-for'] || 'unknown';
-        const body = req.body;
-        const email = body?.email || '';
-        return `auth:${ip}:${email}`;
-    }
-    /**
-   * Custom error message for rate limit exceeded.
-   */ throwThrottlingException() {
-        throw new _throttler.ThrottlerException('Too many authentication attempts. Please try again later.');
-    }
-    /**
-   * Skip rate limiting for authenticated users on certain endpoints.
-   */ async shouldSkip(context) {
-        const request = context.switchToHttp().getRequest();
-        const path = request.path || request.url || '';
-        // Remove query string for comparison
-        const pathOnly = path.split('?')[0];
-        // Skip rate limiting for authenticated endpoints (they have their own protection)
-        // Use exact match or prefix match to prevent bypass via path manipulation
-        const authenticatedEndpoints = [
-            '/auth/me',
-            '/auth/logout',
-            '/auth/change-password'
-        ];
-        return authenticatedEndpoints.some((endpoint)=>pathOnly === endpoint || pathOnly.startsWith(`${endpoint}/`));
-    }
-};
-AuthThrottlerGuard = _ts_decorate([
-    (0, _common.Injectable)()
-], AuthThrottlerGuard);

package/dtos/user-company-permission.dto.d.ts

@@ -1,10 +0,0 @@
-export declare class AssignCompanyPermissionDto {
-    userId: string;
-    companyId: string;
-    metadata?: Record<string, any>;
-}
-export declare class AssignBranchPermissionDto {
-    userId: string;
-    branchId: string;
-    metadata?: Record<string, any>;
-}

package/fesm/dtos/user-company-permission.dto.js

@@ -1,98 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
-import { IsObject, IsOptional, IsUUID } from 'class-validator';
-/**
- * Assign Company Permission DTO
- * Used internally by UserPermissionService
- */ export class AssignCompanyPermissionDto {
-    constructor(){
-        _define_property(this, "userId", void 0);
-        _define_property(this, "companyId", void 0);
-        _define_property(this, "metadata", void 0);
-    }
-}
-_ts_decorate([
-    ApiProperty({
-        example: '550e8400-e29b-41d4-a716-446655440000',
-        description: 'User ID to assign company access to'
-    }),
-    IsUUID(),
-    _ts_metadata("design:type", String)
-], AssignCompanyPermissionDto.prototype, "userId", void 0);
-_ts_decorate([
-    ApiProperty({
-        example: '550e8400-e29b-41d4-a716-446655440001',
-        description: 'Company ID to grant access to'
-    }),
-    IsUUID(),
-    _ts_metadata("design:type", String)
-], AssignCompanyPermissionDto.prototype, "companyId", void 0);
-_ts_decorate([
-    ApiPropertyOptional({
-        example: {
-            role: 'member'
-        },
-        description: 'Additional permission metadata'
-    }),
-    IsOptional(),
-    IsObject(),
-    _ts_metadata("design:type", typeof Record === "undefined" ? Object : Record)
-], AssignCompanyPermissionDto.prototype, "metadata", void 0);
-/**
- * Assign Branch Permission DTO
- * Used internally by UserPermissionService
- */ export class AssignBranchPermissionDto {
-    constructor(){
-        _define_property(this, "userId", void 0);
-        _define_property(this, "branchId", void 0);
-        _define_property(this, "metadata", void 0);
-    }
-}
-_ts_decorate([
-    ApiProperty({
-        example: '550e8400-e29b-41d4-a716-446655440000',
-        description: 'User ID to assign branch access to'
-    }),
-    IsUUID(),
-    _ts_metadata("design:type", String)
-], AssignBranchPermissionDto.prototype, "userId", void 0);
-_ts_decorate([
-    ApiProperty({
-        example: '550e8400-e29b-41d4-a716-446655440002',
-        description: 'Branch ID to grant access to'
-    }),
-    IsUUID(),
-    _ts_metadata("design:type", String)
-], AssignBranchPermissionDto.prototype, "branchId", void 0);
-_ts_decorate([
-    ApiPropertyOptional({
-        example: {
-            role: 'staff'
-        },
-        description: 'Additional permission metadata'
-    }),
-    IsOptional(),
-    IsObject(),
-    _ts_metadata("design:type", typeof Record === "undefined" ? Object : Record)
-], AssignBranchPermissionDto.prototype, "metadata", void 0);

package/fesm/guards/auth-throttler.guard.js

@@ -1,43 +0,0 @@
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-import { Injectable } from '@nestjs/common';
-import { ThrottlerException, ThrottlerGuard } from '@nestjs/throttler';
-export class AuthThrottlerGuard extends ThrottlerGuard {
-    /**
-   * Generate tracker key combining IP and email for login attempts.
-   * This prevents attackers from brute-forcing multiple accounts from the same IP.
-   */ async getTracker(req) {
-        const ip = req.ip || req.headers?.['x-forwarded-for'] || 'unknown';
-        const body = req.body;
-        const email = body?.email || '';
-        return `auth:${ip}:${email}`;
-    }
-    /**
-   * Custom error message for rate limit exceeded.
-   */ throwThrottlingException() {
-        throw new ThrottlerException('Too many authentication attempts. Please try again later.');
-    }
-    /**
-   * Skip rate limiting for authenticated users on certain endpoints.
-   */ async shouldSkip(context) {
-        const request = context.switchToHttp().getRequest();
-        const path = request.path || request.url || '';
-        // Remove query string for comparison
-        const pathOnly = path.split('?')[0];
-        // Skip rate limiting for authenticated endpoints (they have their own protection)
-        // Use exact match or prefix match to prevent bypass via path manipulation
-        const authenticatedEndpoints = [
-            '/auth/me',
-            '/auth/logout',
-            '/auth/change-password'
-        ];
-        return authenticatedEndpoints.some((endpoint)=>pathOnly === endpoint || pathOnly.startsWith(`${endpoint}/`));
-    }
-}
-AuthThrottlerGuard = _ts_decorate([
-    Injectable()
-], AuthThrottlerGuard);

package/guards/auth-throttler.guard.d.ts

@@ -1,7 +0,0 @@
-import { ExecutionContext } from '@nestjs/common';
-import { ThrottlerGuard } from '@nestjs/throttler';
-export declare class AuthThrottlerGuard extends ThrottlerGuard {
-    protected getTracker(req: Record<string, unknown>): Promise<string>;
-    protected throwThrottlingException(): Promise<void>;
-    protected shouldSkip(context: ExecutionContext): Promise<boolean>;
-}