@flusys/nestjs-auth 3.0.0-rc → 3.0.0

package/cjs/controllers/authentication.controller.js

@@ -21,7 +21,6 @@ const _authenticationdto = require("../dtos/authentication.dto");
 const _cleartokeninterceptor = require("../interceptors/clear-token.interceptor");
 const _settokeninterceptor = require("../interceptors/set-token.interceptor");
 const _authconfigservice = require("../services/auth-config.service");
-const _authemailservice = require("../services/auth-email.service");
 const _authenticationservice = require("../services/authentication.service");
 function _define_property(obj, key, value) {
     if (key in obj) {
@@ -55,15 +54,6 @@ let AuthenticationController = class AuthenticationController {
         const frontendUrl = this.authConfig?.getFrontendUrl();
         return frontendUrl ? `${frontendUrl}${path}` : `${req.protocol}://${req.get('host')}${path}`;
     }
-    get emailService() {
-        if (!this.authEmailService) {
-            throw new Error('Email service is not configured');
-        }
-        return this.authEmailService;
-    }
-    get isEmailEnabled() {
-        return !!this.authEmailService;
-    }
     async login(loginDto) {
         const result = await this.authService.login(loginDto.email, loginDto.password);
         if ('requiresEmailVerification' in result) {
@@ -109,56 +99,11 @@ let AuthenticationController = class AuthenticationController {
             message: 'Password changed successfully'
         };
     }
-    async forgotPassword(req, dto) {
-        if (!this.isEmailEnabled) {
-            return {
-                success: false,
-                message: 'Email service is not configured'
-            };
-        }
-        return this.emailService.forgotPassword(dto.email, this.buildAuthUrl(req, '/auth/reset-password'));
-    }
-    async resetPassword(dto) {
-        if (!this.isEmailEnabled) {
-            return {
-                success: false,
-                message: 'Email service is not configured'
-            };
-        }
-        return this.emailService.resetPassword(dto.token, dto.newPassword);
-    }
-    async resendVerification(req, dto) {
-        if (!this.isEmailEnabled) {
-            return {
-                success: false,
-                message: 'Email service is not configured'
-            };
-        }
-        return this.emailService.resendVerificationEmail(dto.email, this.buildAuthUrl(req, '/auth/verify-email'));
-    }
-    /** Verify email - Verify email using token. Handles both pending registration and existing user verification. */ async verifyEmail(dto) {
-        if (!this.isEmailEnabled) {
-            return {
-                success: false,
-                message: 'Email service is not configured'
-            };
-        }
-        const result = await this.emailService.verifyEmail(dto.token);
-        if (result.type === 'pending') {
-            return this.authService.createUserFromPendingRegistration(result.pending);
-        }
-        return {
-            success: true,
-            message: result.message
-        };
-    }
-    constructor(authService, authConfig, authEmailService){
+    constructor(authService, authConfig){
         _define_property(this, "authService", void 0);
         _define_property(this, "authConfig", void 0);
-        _define_property(this, "authEmailService", void 0);
         this.authService = authService;
         this.authConfig = authConfig;
-        this.authEmailService = authEmailService;
     }
 };
 _ts_decorate([
@@ -437,131 +382,15 @@ _ts_decorate([
     ]),
     _ts_metadata("design:returntype", Promise)
 ], AuthenticationController.prototype, "changePassword", null);
-_ts_decorate([
-    (0, _common.Post)('forgot-password'),
-    (0, _common.HttpCode)(_common.HttpStatus.OK),
-    (0, _throttler.Throttle)({
-        default: {
-            limit: 3,
-            ttl: 300000
-        }
-    }),
-    (0, _swagger.ApiOperation)({
-        summary: 'Request password reset email'
-    }),
-    (0, _swagger.ApiBody)({
-        type: _authenticationdto.ForgotPasswordDto
-    }),
-    (0, _swagger.ApiResponse)({
-        status: 200,
-        type: _dtos.MessageResponseDto
-    }),
-    _ts_param(0, (0, _common.Req)()),
-    _ts_param(1, (0, _common.Body)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _express.Request === "undefined" ? Object : _express.Request,
-        typeof _authenticationdto.ForgotPasswordDto === "undefined" ? Object : _authenticationdto.ForgotPasswordDto
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], AuthenticationController.prototype, "forgotPassword", null);
-_ts_decorate([
-    (0, _common.Post)('reset-password'),
-    (0, _common.HttpCode)(_common.HttpStatus.OK),
-    (0, _throttler.Throttle)({
-        default: {
-            limit: 5,
-            ttl: 900000
-        }
-    }),
-    (0, _swagger.ApiOperation)({
-        summary: 'Reset password using token'
-    }),
-    (0, _swagger.ApiBody)({
-        type: _authenticationdto.ResetPasswordDto
-    }),
-    (0, _swagger.ApiResponse)({
-        status: 200,
-        type: _dtos.MessageResponseDto
-    }),
-    _ts_param(0, (0, _common.Body)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _authenticationdto.ResetPasswordDto === "undefined" ? Object : _authenticationdto.ResetPasswordDto
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], AuthenticationController.prototype, "resetPassword", null);
-_ts_decorate([
-    (0, _common.Post)('resend-verification'),
-    (0, _common.HttpCode)(_common.HttpStatus.OK),
-    (0, _throttler.Throttle)({
-        default: {
-            limit: 3,
-            ttl: 300000
-        }
-    }),
-    (0, _swagger.ApiOperation)({
-        summary: 'Resend email verification link'
-    }),
-    (0, _swagger.ApiBody)({
-        type: _authenticationdto.ResendVerificationDto
-    }),
-    (0, _swagger.ApiResponse)({
-        status: 200,
-        type: _dtos.MessageResponseDto
-    }),
-    _ts_param(0, (0, _common.Req)()),
-    _ts_param(1, (0, _common.Body)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _express.Request === "undefined" ? Object : _express.Request,
-        typeof _authenticationdto.ResendVerificationDto === "undefined" ? Object : _authenticationdto.ResendVerificationDto
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], AuthenticationController.prototype, "resendVerification", null);
-_ts_decorate([
-    (0, _common.Post)('verify-email'),
-    (0, _common.HttpCode)(_common.HttpStatus.OK),
-    (0, _throttler.Throttle)({
-        default: {
-            limit: 10,
-            ttl: 60000
-        }
-    }),
-    (0, _common.UseInterceptors)(_settokeninterceptor.SetToken),
-    (0, _swagger.ApiOperation)({
-        summary: 'Verify email using token'
-    }),
-    (0, _swagger.ApiBody)({
-        type: _authenticationdto.VerifyEmailDto
-    }),
-    (0, _swagger.ApiResponse)({
-        status: 200,
-        type: _dtos.MessageResponseDto
-    }),
-    (0, _swagger.ApiResponse)({
-        status: 200,
-        type: _authenticationdto.RegistrationResponseDto
-    }),
-    _ts_param(0, (0, _common.Body)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _authenticationdto.VerifyEmailDto === "undefined" ? Object : _authenticationdto.VerifyEmailDto
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], AuthenticationController.prototype, "verifyEmail", null);
 AuthenticationController = _ts_decorate([
     (0, _swagger.ApiTags)('Authentication'),
     (0, _common.Controller)('auth'),
     _ts_param(0, (0, _common.Inject)(_authenticationservice.AuthenticationService)),
     _ts_param(1, (0, _common.Optional)()),
     _ts_param(1, (0, _common.Inject)(_authconfigservice.AuthConfigService)),
-    _ts_param(2, (0, _common.Optional)()),
-    _ts_param(2, (0, _common.Inject)(_authemailservice.AuthEmailService)),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
         typeof _authenticationservice.AuthenticationService === "undefined" ? Object : _authenticationservice.AuthenticationService,
-        typeof _authconfigservice.AuthConfigService === "undefined" ? Object : _authconfigservice.AuthConfigService,
-        typeof _authemailservice.AuthEmailService === "undefined" ? Object : _authemailservice.AuthEmailService
+        typeof _authconfigservice.AuthConfigService === "undefined" ? Object : _authconfigservice.AuthConfigService
     ])
 ], AuthenticationController);

package/cjs/controllers/email-verification.controller.js

@@ -0,0 +1,220 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "EmailVerificationController", {
+    enumerable: true,
+    get: function() {
+        return EmailVerificationController;
+    }
+});
+const _dtos = require("@flusys/nestjs-shared/dtos");
+const _common = require("@nestjs/common");
+const _swagger = require("@nestjs/swagger");
+const _throttler = require("@nestjs/throttler");
+const _express = require("express");
+const _authenticationdto = require("../dtos/authentication.dto");
+const _settokeninterceptor = require("../interceptors/set-token.interceptor");
+const _authconfigservice = require("../services/auth-config.service");
+const _authdatasourceprovider = require("../services/auth-datasource.provider");
+const _authemailservice = require("../services/auth-email.service");
+const _authenticationservice = require("../services/authentication.service");
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+let EmailVerificationController = class EmailVerificationController {
+    ensureEmailVerificationEnabled() {
+        if (!this.dataSourceProvider.isEmailVerificationEnabled()) {
+            throw new _common.BadRequestException('Email verification is not enabled for this tenant');
+        }
+    }
+    buildAuthUrl(req, path) {
+        const frontendUrl = this.authConfig.getFrontendUrl();
+        return frontendUrl ? `${frontendUrl}${path}` : `${req.protocol}://${req.get('host')}${path}`;
+    }
+    async forgotPassword(req, dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.forgotPassword(dto.email, this.buildAuthUrl(req, '/auth/reset-password'));
+    }
+    async resetPassword(dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.resetPassword(dto.token, dto.newPassword);
+    }
+    async resendVerification(req, dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.resendVerificationEmail(dto.email, this.buildAuthUrl(req, '/auth/verify-email'));
+    }
+    async verifyEmail(dto) {
+        this.ensureEmailVerificationEnabled();
+        const result = await this.authEmailService.verifyEmail(dto.token);
+        if (result.type === 'pending') {
+            return this.authService.createUserFromPendingRegistration(result.pending);
+        }
+        return {
+            success: true,
+            message: result.message
+        };
+    }
+    constructor(authService, authEmailService, authConfig, dataSourceProvider){
+        _define_property(this, "authService", void 0);
+        _define_property(this, "authEmailService", void 0);
+        _define_property(this, "authConfig", void 0);
+        _define_property(this, "dataSourceProvider", void 0);
+        this.authService = authService;
+        this.authEmailService = authEmailService;
+        this.authConfig = authConfig;
+        this.dataSourceProvider = dataSourceProvider;
+    }
+};
+_ts_decorate([
+    (0, _common.Post)('forgot-password'),
+    (0, _common.HttpCode)(_common.HttpStatus.OK),
+    (0, _throttler.Throttle)({
+        default: {
+            limit: 3,
+            ttl: 300000
+        }
+    }),
+    (0, _swagger.ApiOperation)({
+        summary: 'Request password reset email'
+    }),
+    (0, _swagger.ApiBody)({
+        type: _authenticationdto.ForgotPasswordDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: _dtos.MessageResponseDto
+    }),
+    _ts_param(0, (0, _common.Req)()),
+    _ts_param(1, (0, _common.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _express.Request === "undefined" ? Object : _express.Request,
+        typeof _authenticationdto.ForgotPasswordDto === "undefined" ? Object : _authenticationdto.ForgotPasswordDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "forgotPassword", null);
+_ts_decorate([
+    (0, _common.Post)('reset-password'),
+    (0, _common.HttpCode)(_common.HttpStatus.OK),
+    (0, _throttler.Throttle)({
+        default: {
+            limit: 5,
+            ttl: 900000
+        }
+    }),
+    (0, _swagger.ApiOperation)({
+        summary: 'Reset password using token'
+    }),
+    (0, _swagger.ApiBody)({
+        type: _authenticationdto.ResetPasswordDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: _dtos.MessageResponseDto
+    }),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _authenticationdto.ResetPasswordDto === "undefined" ? Object : _authenticationdto.ResetPasswordDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "resetPassword", null);
+_ts_decorate([
+    (0, _common.Post)('resend-verification'),
+    (0, _common.HttpCode)(_common.HttpStatus.OK),
+    (0, _throttler.Throttle)({
+        default: {
+            limit: 3,
+            ttl: 300000
+        }
+    }),
+    (0, _swagger.ApiOperation)({
+        summary: 'Resend email verification link'
+    }),
+    (0, _swagger.ApiBody)({
+        type: _authenticationdto.ResendVerificationDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: _dtos.MessageResponseDto
+    }),
+    _ts_param(0, (0, _common.Req)()),
+    _ts_param(1, (0, _common.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _express.Request === "undefined" ? Object : _express.Request,
+        typeof _authenticationdto.ResendVerificationDto === "undefined" ? Object : _authenticationdto.ResendVerificationDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "resendVerification", null);
+_ts_decorate([
+    (0, _common.Post)('verify-email'),
+    (0, _common.HttpCode)(_common.HttpStatus.OK),
+    (0, _throttler.Throttle)({
+        default: {
+            limit: 10,
+            ttl: 60000
+        }
+    }),
+    (0, _common.UseInterceptors)(_settokeninterceptor.SetToken),
+    (0, _swagger.ApiOperation)({
+        summary: 'Verify email using token'
+    }),
+    (0, _swagger.ApiBody)({
+        type: _authenticationdto.VerifyEmailDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: _dtos.MessageResponseDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: _authenticationdto.RegistrationResponseDto
+    }),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _authenticationdto.VerifyEmailDto === "undefined" ? Object : _authenticationdto.VerifyEmailDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "verifyEmail", null);
+EmailVerificationController = _ts_decorate([
+    (0, _swagger.ApiTags)('Authentication'),
+    (0, _common.Controller)('auth'),
+    _ts_param(0, (0, _common.Inject)(_authenticationservice.AuthenticationService)),
+    _ts_param(1, (0, _common.Inject)(_authemailservice.AuthEmailService)),
+    _ts_param(2, (0, _common.Inject)(_authconfigservice.AuthConfigService)),
+    _ts_param(3, (0, _common.Inject)(_authdatasourceprovider.AuthDataSourceProvider)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _authenticationservice.AuthenticationService === "undefined" ? Object : _authenticationservice.AuthenticationService,
+        typeof _authemailservice.AuthEmailService === "undefined" ? Object : _authemailservice.AuthEmailService,
+        typeof _authconfigservice.AuthConfigService === "undefined" ? Object : _authconfigservice.AuthConfigService,
+        typeof _authdatasourceprovider.AuthDataSourceProvider === "undefined" ? Object : _authdatasourceprovider.AuthDataSourceProvider
+    ])
+], EmailVerificationController);

package/cjs/controllers/index.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", {
 });
 _export_star(require("./authentication.controller"), exports);
 _export_star(require("./company-selection.controller"), exports);
+_export_star(require("./email-verification.controller"), exports);
 _export_star(require("./user.controller"), exports);
 _export_star(require("./company.controller"), exports);
 _export_star(require("./branch.controller"), exports);

package/cjs/dtos/authentication.dto.js

@@ -126,13 +126,12 @@ let RegistrationDto = class RegistrationDto {
         _define_property(this, "email", void 0);
         _define_property(this, "password", void 0);
         _define_property(this, "phone", void 0);
-        // Company Feature Fields (Optional - only used when company feature is enabled)
         _define_property(this, "companySlug", void 0);
         _define_property(this, "branchSlug", void 0);
-        // New Company Creation Fields (Optional - for creating new company)
         _define_property(this, "newCompanyName", void 0);
         _define_property(this, "newCompanyPhone", void 0);
         _define_property(this, "newCompanyAddress", void 0);
+        _define_property(this, "additionalFields", void 0);
     }
 };
 _ts_decorate([
@@ -226,6 +225,17 @@ _ts_decorate([
     (0, _classvalidator.MaxLength)(500),
     _ts_metadata("design:type", String)
 ], RegistrationDto.prototype, "newCompanyAddress", void 0);
+_ts_decorate([
+    (0, _swagger.ApiPropertyOptional)({
+        example: {
+            prevCompanyName: 'Acme Corp',
+            employeeId: 'EMP001'
+        },
+        description: 'Additional fields for profile extension (handled by USER_ENRICHER)'
+    }),
+    (0, _classvalidator.IsOptional)(),
+    _ts_metadata("design:type", typeof Record === "undefined" ? Object : Record)
+], RegistrationDto.prototype, "additionalFields", void 0);
 let RefreshTokenDto = class RefreshTokenDto {
     constructor(){
         _define_property(this, "refreshToken", void 0);

package/cjs/entities/index.js

@@ -9,15 +9,6 @@ function _export(target, all) {
     });
 }
 _export(exports, {
-    get AllEntities () {
-        return AllEntities;
-    },
-    get CompanyEntities () {
-        return CompanyEntities;
-    },
-    get CoreEntities () {
-        return CoreEntities;
-    },
     get PermissionType () {
         return _usercompanypermissionentity.PermissionType;
     },
@@ -47,9 +38,11 @@ function _export_star(from, to) {
     });
     return from;
 }
-const CoreEntities = [
+const BaseEntities = [
     _userentity.User,
-    _usertokenentity.UserToken,
+    _usertokenentity.UserToken
+];
+const EmailEntities = [
     _pendingregistrationentity.PendingRegistration
 ];
 const CompanyEntities = [
@@ -57,10 +50,16 @@ const CompanyEntities = [
     _companybranchentity.CompanyBranch,
     _usercompanypermissionentity.UserCompanyPermission
 ];
-const AllEntities = [
-    ...CoreEntities,
-    ...CompanyEntities
-];
-function getEntitiesByConfig(enableCompanyFeature) {
-    return enableCompanyFeature ? AllEntities : CoreEntities;
+function getEntitiesByConfig(config) {
+    const { enableCompanyFeature = false, enableEmailVerification = true } = config;
+    const entities = [
+        ...BaseEntities
+    ];
+    if (enableEmailVerification) {
+        entities.push(...EmailEntities);
+    }
+    if (enableCompanyFeature) {
+        entities.push(...CompanyEntities);
+    }
+    return entities;
 }

package/cjs/entities/pending-registration.entity.js

@@ -41,6 +41,7 @@ let PendingRegistration = class PendingRegistration {
         _define_property(this, "token", void 0);
         _define_property(this, "expiresAt", void 0);
         _define_property(this, "companyData", void 0);
+        _define_property(this, "additionalFields", void 0);
         _define_property(this, "createdAt", void 0);
     }
 };
@@ -100,6 +101,14 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Object)
 ], PendingRegistration.prototype, "companyData", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'json',
+        nullable: true,
+        name: 'additional_fields'
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "additionalFields", void 0);
 _ts_decorate([
     (0, _typeorm.CreateDateColumn)({
         type: 'timestamp',

package/cjs/modules/auth.module.js

@@ -46,9 +46,9 @@ let AuthModule = class AuthModule {
             ...options.providers ?? []
         ], options.imports);
     }
-    /** Build the dynamic module with shared logic */ static buildModule(options, providers, externalImports = []) {
+    static buildModule(options, providers, externalImports = []) {
         const { global = false, includeController = true, bootstrapAppConfig } = options;
-        const enableCompanyFeature = bootstrapAppConfig?.enableCompanyFeature ?? false;
+        const featureFlags = this.getFeatureFlags(bootstrapAppConfig);
         return {
             module: AuthModule,
             global,
@@ -56,15 +56,21 @@ let AuthModule = class AuthModule {
                 ...externalImports,
                 ...this.buildImports()
             ],
-            controllers: this.buildControllers(includeController, enableCompanyFeature),
+            controllers: this.buildControllers(includeController, featureFlags),
             providers: [
                 ...providers,
-                ...this.buildProviders(enableCompanyFeature)
+                ...this.buildProviders(featureFlags)
             ],
-            exports: this.buildExports(enableCompanyFeature)
+            exports: this.buildExports(featureFlags)
         };
     }
-    /** Common module imports */ static buildImports() {
+    static getFeatureFlags(bootstrapAppConfig) {
+        return {
+            enableCompanyFeature: bootstrapAppConfig?.enableCompanyFeature ?? false,
+            enableEmailVerification: bootstrapAppConfig?.enableEmailVerification ?? true
+        };
+    }
+    static buildImports() {
         return [
             _passport.PassportModule.register({
                 defaultStrategy: 'jwt'
@@ -74,35 +80,40 @@ let AuthModule = class AuthModule {
             _modules.UtilsModule
         ];
     }
-    /** Build controllers based on feature flags */ static buildControllers(includeController, enableCompanyFeature) {
+    static buildControllers(includeController, flags) {
         if (!includeController) return [];
         const controllers = [
             _controllers.AuthenticationController,
             _controllers.UserController
         ];
-        if (enableCompanyFeature) {
+        if (flags.enableEmailVerification) {
+            controllers.push(_controllers.EmailVerificationController);
+        }
+        if (flags.enableCompanyFeature) {
             controllers.push(_controllers.CompanySelectionController, _controllers.CompanyController, _controllers.BranchController, _controllers.UserPermissionController);
         }
         return controllers;
     }
-    /** Core providers (without AUTH_MODULE_OPTIONS - that's added separately) */ static buildProviders(enableCompanyFeature) {
+    static buildProviders(flags) {
         const providers = [
             _authconfigservice.AuthConfigService,
             _authdatasourceprovider.AuthDataSourceProvider,
             _jwtstrategy.JwtStrategy,
             _guards.JwtAuthGuard,
             _services.AuthenticationService,
-            _services.AuthEmailService,
             _settokeninterceptor.SetToken,
             _cleartokeninterceptor.ClearToken,
             _services.UserService
         ];
-        if (enableCompanyFeature) {
+        if (flags.enableEmailVerification) {
+            providers.push(_services.AuthEmailService);
+        }
+        if (flags.enableCompanyFeature) {
             providers.push(_services.CompanySelectionSessionService, _services.CompanyService, _services.BranchService, _services.UserPermissionService);
         }
         return providers;
     }
-    /** Build module exports */ static buildExports(enableCompanyFeature) {
+    static buildExports(flags) {
         const exports1 = [
             _passport.PassportModule,
             _authconstants.AUTH_MODULE_OPTIONS,
@@ -111,15 +122,17 @@ let AuthModule = class AuthModule {
             _jwtstrategy.JwtStrategy,
             _guards.JwtAuthGuard,
             _services.AuthenticationService,
-            _services.AuthEmailService,
             _services.UserService
         ];
-        if (enableCompanyFeature) {
+        if (flags.enableEmailVerification) {
+            exports1.push(_services.AuthEmailService);
+        }
+        if (flags.enableCompanyFeature) {
             exports1.push(_services.CompanySelectionSessionService, _services.CompanyService, _services.BranchService, _services.UserPermissionService);
         }
         return exports1;
     }
-    /** Create async providers for forRootAsync */ static createAsyncProviders(options) {
+    static createAsyncProviders(options) {
         const staticOptions = {
             global: options.global,
             includeController: options.includeController,
@@ -176,15 +189,11 @@ let AuthModule = class AuthModule {
             }
         ];
     }
-    /** Get auth entities based on feature flags */ static getEntities(enableCompanyFeature = false) {
-        return enableCompanyFeature ? [
-            _entities.User,
-            _entities.Company,
-            _entities.CompanyBranch,
-            _entities.UserCompanyPermission
-        ] : [
-            _entities.User
-        ];
+    static getEntities(config) {
+        return (0, _entities.getEntitiesByConfig)({
+            enableCompanyFeature: config.enableCompanyFeature ?? false,
+            enableEmailVerification: config.enableEmailVerification ?? true
+        });
     }
 };
 AuthModule = _ts_decorate([