@flusys/nestjs-auth 3.0.0-rc → 3.0.0

package/fesm/controllers/email-verification.controller.js

@@ -0,0 +1,210 @@
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+import { MessageResponseDto } from '@flusys/nestjs-shared/dtos';
+import { BadRequestException, Body, Controller, HttpCode, HttpStatus, Inject, Post, Req, UseInterceptors } from '@nestjs/common';
+import { ApiBody, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
+import { Throttle } from '@nestjs/throttler';
+import { Request } from 'express';
+import { ForgotPasswordDto, RegistrationResponseDto, ResendVerificationDto, ResetPasswordDto, VerifyEmailDto } from '../dtos/authentication.dto';
+import { SetToken } from '../interceptors/set-token.interceptor';
+import { AuthConfigService } from '../services/auth-config.service';
+import { AuthDataSourceProvider } from '../services/auth-datasource.provider';
+import { AuthEmailService } from '../services/auth-email.service';
+import { AuthenticationService } from '../services/authentication.service';
+export class EmailVerificationController {
+    ensureEmailVerificationEnabled() {
+        if (!this.dataSourceProvider.isEmailVerificationEnabled()) {
+            throw new BadRequestException('Email verification is not enabled for this tenant');
+        }
+    }
+    buildAuthUrl(req, path) {
+        const frontendUrl = this.authConfig.getFrontendUrl();
+        return frontendUrl ? `${frontendUrl}${path}` : `${req.protocol}://${req.get('host')}${path}`;
+    }
+    async forgotPassword(req, dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.forgotPassword(dto.email, this.buildAuthUrl(req, '/auth/reset-password'));
+    }
+    async resetPassword(dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.resetPassword(dto.token, dto.newPassword);
+    }
+    async resendVerification(req, dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.resendVerificationEmail(dto.email, this.buildAuthUrl(req, '/auth/verify-email'));
+    }
+    async verifyEmail(dto) {
+        this.ensureEmailVerificationEnabled();
+        const result = await this.authEmailService.verifyEmail(dto.token);
+        if (result.type === 'pending') {
+            return this.authService.createUserFromPendingRegistration(result.pending);
+        }
+        return {
+            success: true,
+            message: result.message
+        };
+    }
+    constructor(authService, authEmailService, authConfig, dataSourceProvider){
+        _define_property(this, "authService", void 0);
+        _define_property(this, "authEmailService", void 0);
+        _define_property(this, "authConfig", void 0);
+        _define_property(this, "dataSourceProvider", void 0);
+        this.authService = authService;
+        this.authEmailService = authEmailService;
+        this.authConfig = authConfig;
+        this.dataSourceProvider = dataSourceProvider;
+    }
+}
+_ts_decorate([
+    Post('forgot-password'),
+    HttpCode(HttpStatus.OK),
+    Throttle({
+        default: {
+            limit: 3,
+            ttl: 300000
+        }
+    }),
+    ApiOperation({
+        summary: 'Request password reset email'
+    }),
+    ApiBody({
+        type: ForgotPasswordDto
+    }),
+    ApiResponse({
+        status: 200,
+        type: MessageResponseDto
+    }),
+    _ts_param(0, Req()),
+    _ts_param(1, Body()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof Request === "undefined" ? Object : Request,
+        typeof ForgotPasswordDto === "undefined" ? Object : ForgotPasswordDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "forgotPassword", null);
+_ts_decorate([
+    Post('reset-password'),
+    HttpCode(HttpStatus.OK),
+    Throttle({
+        default: {
+            limit: 5,
+            ttl: 900000
+        }
+    }),
+    ApiOperation({
+        summary: 'Reset password using token'
+    }),
+    ApiBody({
+        type: ResetPasswordDto
+    }),
+    ApiResponse({
+        status: 200,
+        type: MessageResponseDto
+    }),
+    _ts_param(0, Body()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof ResetPasswordDto === "undefined" ? Object : ResetPasswordDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "resetPassword", null);
+_ts_decorate([
+    Post('resend-verification'),
+    HttpCode(HttpStatus.OK),
+    Throttle({
+        default: {
+            limit: 3,
+            ttl: 300000
+        }
+    }),
+    ApiOperation({
+        summary: 'Resend email verification link'
+    }),
+    ApiBody({
+        type: ResendVerificationDto
+    }),
+    ApiResponse({
+        status: 200,
+        type: MessageResponseDto
+    }),
+    _ts_param(0, Req()),
+    _ts_param(1, Body()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof Request === "undefined" ? Object : Request,
+        typeof ResendVerificationDto === "undefined" ? Object : ResendVerificationDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "resendVerification", null);
+_ts_decorate([
+    Post('verify-email'),
+    HttpCode(HttpStatus.OK),
+    Throttle({
+        default: {
+            limit: 10,
+            ttl: 60000
+        }
+    }),
+    UseInterceptors(SetToken),
+    ApiOperation({
+        summary: 'Verify email using token'
+    }),
+    ApiBody({
+        type: VerifyEmailDto
+    }),
+    ApiResponse({
+        status: 200,
+        type: MessageResponseDto
+    }),
+    ApiResponse({
+        status: 200,
+        type: RegistrationResponseDto
+    }),
+    _ts_param(0, Body()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof VerifyEmailDto === "undefined" ? Object : VerifyEmailDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "verifyEmail", null);
+EmailVerificationController = _ts_decorate([
+    ApiTags('Authentication'),
+    Controller('auth'),
+    _ts_param(0, Inject(AuthenticationService)),
+    _ts_param(1, Inject(AuthEmailService)),
+    _ts_param(2, Inject(AuthConfigService)),
+    _ts_param(3, Inject(AuthDataSourceProvider)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof AuthenticationService === "undefined" ? Object : AuthenticationService,
+        typeof AuthEmailService === "undefined" ? Object : AuthEmailService,
+        typeof AuthConfigService === "undefined" ? Object : AuthConfigService,
+        typeof AuthDataSourceProvider === "undefined" ? Object : AuthDataSourceProvider
+    ])
+], EmailVerificationController);

package/fesm/controllers/index.js

@@ -1,5 +1,6 @@
 export * from './authentication.controller';
 export * from './company-selection.controller';
+export * from './email-verification.controller';
 export * from './user.controller';
 export * from './company.controller';
 export * from './branch.controller';

package/fesm/dtos/authentication.dto.js

@@ -23,8 +23,7 @@ function _ts_metadata(k, v) {
 import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
 import { IsEmail, IsNotEmpty, IsOptional, IsString, IsUUID, MaxLength, ValidateIf } from 'class-validator';
 import { IsStrongPassword } from '../validators/password.validator';
-// Request DTOs
-/** Login Request DTO */ export class LoginDto {
+export class LoginDto {
     constructor(){
         _define_property(this, "email", void 0);
         _define_property(this, "password", void 0);
@@ -49,19 +48,18 @@ _ts_decorate([
     MaxLength(128),
     _ts_metadata("design:type", String)
 ], LoginDto.prototype, "password", void 0);
-/** Registration Request DTO - Supports simple and company-based registration */ export class RegistrationDto {
+export class RegistrationDto {
     constructor(){
         _define_property(this, "name", void 0);
         _define_property(this, "email", void 0);
         _define_property(this, "password", void 0);
         _define_property(this, "phone", void 0);
-        // Company Feature Fields (Optional - only used when company feature is enabled)
         _define_property(this, "companySlug", void 0);
         _define_property(this, "branchSlug", void 0);
-        // New Company Creation Fields (Optional - for creating new company)
         _define_property(this, "newCompanyName", void 0);
         _define_property(this, "newCompanyPhone", void 0);
         _define_property(this, "newCompanyAddress", void 0);
+        _define_property(this, "additionalFields", void 0);
     }
 }
 _ts_decorate([
@@ -155,7 +153,18 @@ _ts_decorate([
     MaxLength(500),
     _ts_metadata("design:type", String)
 ], RegistrationDto.prototype, "newCompanyAddress", void 0);
-/** Refresh Token Request DTO - refreshToken optional in body (browsers use HTTP-only cookie) */ export class RefreshTokenDto {
+_ts_decorate([
+    ApiPropertyOptional({
+        example: {
+            prevCompanyName: 'Acme Corp',
+            employeeId: 'EMP001'
+        },
+        description: 'Additional fields for profile extension (handled by USER_ENRICHER)'
+    }),
+    IsOptional(),
+    _ts_metadata("design:type", typeof Record === "undefined" ? Object : Record)
+], RegistrationDto.prototype, "additionalFields", void 0);
+export class RefreshTokenDto {
     constructor(){
         _define_property(this, "refreshToken", void 0);
     }
@@ -169,7 +178,7 @@ _ts_decorate([
     IsString(),
     _ts_metadata("design:type", String)
 ], RefreshTokenDto.prototype, "refreshToken", void 0);
-/** Change Password Request DTO */ export class ChangePasswordDto {
+export class ChangePasswordDto {
     constructor(){
         _define_property(this, "currentPassword", void 0);
         _define_property(this, "newPassword", void 0);
@@ -195,7 +204,7 @@ _ts_decorate([
     IsStrongPassword(),
     _ts_metadata("design:type", String)
 ], ChangePasswordDto.prototype, "newPassword", void 0);
-/** Select Company & Branch Request DTO - Used after login when user needs to select company and branch */ export class SelectDto {
+export class SelectDto {
     constructor(){
         _define_property(this, "sessionId", void 0);
         _define_property(this, "companyId", void 0);
@@ -229,7 +238,7 @@ _ts_decorate([
     IsNotEmpty(),
     _ts_metadata("design:type", String)
 ], SelectDto.prototype, "branchId", void 0);
-/** Switch Company Request DTO - Used to switch company/branch after login */ export class SwitchCompanyDto {
+export class SwitchCompanyDto {
     constructor(){
         _define_property(this, "companyId", void 0);
         _define_property(this, "branchId", void 0);
@@ -253,8 +262,7 @@ _ts_decorate([
     IsNotEmpty(),
     _ts_metadata("design:type", String)
 ], SwitchCompanyDto.prototype, "branchId", void 0);
-// Response DTOs
-/** User Info DTO (used in responses) */ export class UserInfoDto {
+export class UserInfoDto {
     constructor(){
         _define_property(this, "id", void 0);
         _define_property(this, "email", void 0);
@@ -288,7 +296,7 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Object)
 ], UserInfoDto.prototype, "profilePictureId", void 0);
-/** Company Info DTO (used in responses) */ export class CompanyInfoDto {
+export class CompanyInfoDto {
     constructor(){
         _define_property(this, "id", void 0);
         _define_property(this, "name", void 0);
@@ -322,7 +330,7 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Object)
 ], CompanyInfoDto.prototype, "logoId", void 0);
-/** Branch Info DTO (used in responses) */ export class BranchInfoDto {
+export class BranchInfoDto {
     constructor(){
         _define_property(this, "id", void 0);
         _define_property(this, "name", void 0);
@@ -356,7 +364,7 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Object)
 ], BranchInfoDto.prototype, "logoId", void 0);
-/** Branch Info for Selection (with additional fields) */ export class BranchSelectionInfoDto {
+export class BranchSelectionInfoDto {
     constructor(){
         _define_property(this, "id", void 0);
         _define_property(this, "name", void 0);
@@ -390,7 +398,7 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Object)
 ], BranchSelectionInfoDto.prototype, "logoId", void 0);
-/** Company with Branches DTO (for selection response) */ export class CompanyWithBranchesDto {
+export class CompanyWithBranchesDto {
     constructor(){
         _define_property(this, "id", void 0);
         _define_property(this, "name", void 0);
@@ -434,7 +442,7 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Array)
 ], CompanyWithBranchesDto.prototype, "branches", void 0);
-/** Login Response DTO - Returned on successful login with tokens */ export class LoginResponseDto {
+export class LoginResponseDto {
     constructor(){
         _define_property(this, "accessToken", void 0);
         _define_property(this, "refreshToken", void 0);
@@ -476,7 +484,7 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", typeof BranchInfoDto === "undefined" ? Object : BranchInfoDto)
 ], LoginResponseDto.prototype, "branch", void 0);
-/** Registration Response DTO - Returned on successful registration */ export class RegistrationResponseDto {
+export class RegistrationResponseDto {
     constructor(){
         _define_property(this, "accessToken", void 0);
         _define_property(this, "refreshToken", void 0);
@@ -526,7 +534,7 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Boolean)
 ], RegistrationResponseDto.prototype, "requiresEmailVerification", void 0);
-/** Me Response DTO - Returned by GET /auth/me (user data only, no tokens) */ export class MeResponseDto {
+export class MeResponseDto {
     constructor(){
         _define_property(this, "user", void 0);
         _define_property(this, "company", void 0);
@@ -554,7 +562,7 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", typeof BranchInfoDto === "undefined" ? Object : BranchInfoDto)
 ], MeResponseDto.prototype, "branch", void 0);
-/** Company Selection Response DTO - Returned when user has multiple companies/branches to choose from */ export class CompanySelectionResponseDto {
+export class CompanySelectionResponseDto {
     constructor(){
         _define_property(this, "requiresSelection", void 0);
         _define_property(this, "sessionId", void 0);
@@ -600,7 +608,7 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Array)
 ], CompanySelectionResponseDto.prototype, "companies", void 0);
-/** Login Response when email verification required */ export class LoginResponseRequiresEmailVerificationDto {
+export class LoginResponseRequiresEmailVerificationDto {
     constructor(){
         _define_property(this, "requiresEmailVerification", void 0);
         _define_property(this, "email", void 0);
@@ -625,8 +633,7 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", String)
 ], LoginResponseRequiresEmailVerificationDto.prototype, "message", void 0);
-// Email Auth DTOs
-/** Forgot Password Request DTO - Initiates password reset flow */ export class ForgotPasswordDto {
+export class ForgotPasswordDto {
     constructor(){
         _define_property(this, "email", void 0);
     }
@@ -640,7 +647,7 @@ _ts_decorate([
     IsNotEmpty(),
     _ts_metadata("design:type", String)
 ], ForgotPasswordDto.prototype, "email", void 0);
-/** Reset Password Request DTO - Resets password using token */ export class ResetPasswordDto {
+export class ResetPasswordDto {
     constructor(){
         _define_property(this, "token", void 0);
         _define_property(this, "newPassword", void 0);
@@ -665,7 +672,7 @@ _ts_decorate([
     IsStrongPassword(),
     _ts_metadata("design:type", String)
 ], ResetPasswordDto.prototype, "newPassword", void 0);
-/** Verify Email Request DTO - Verifies email using token */ export class VerifyEmailDto {
+export class VerifyEmailDto {
     constructor(){
         _define_property(this, "token", void 0);
     }
@@ -679,5 +686,5 @@ _ts_decorate([
     IsNotEmpty(),
     _ts_metadata("design:type", String)
 ], VerifyEmailDto.prototype, "token", void 0);
-/** Resend Verification Email Request DTO - Same structure as ForgotPasswordDto */ export class ResendVerificationDto extends ForgotPasswordDto {
+export class ResendVerificationDto extends ForgotPasswordDto {
 }

package/fesm/entities/index.js

@@ -10,20 +10,28 @@ import { PendingRegistration } from './pending-registration.entity';
 import { UserCompanyPermission } from './user-company-permission.entity';
 import { User } from './user.entity';
 import { UserToken } from './user-token.entity';
-export const CoreEntities = [
+const BaseEntities = [
     User,
-    UserToken,
+    UserToken
+];
+const EmailEntities = [
     PendingRegistration
 ];
-export const CompanyEntities = [
+const CompanyEntities = [
     Company,
     CompanyBranch,
     UserCompanyPermission
 ];
-export const AllEntities = [
-    ...CoreEntities,
-    ...CompanyEntities
-];
-export function getEntitiesByConfig(enableCompanyFeature) {
-    return enableCompanyFeature ? AllEntities : CoreEntities;
+export function getEntitiesByConfig(config) {
+    const { enableCompanyFeature = false, enableEmailVerification = true } = config;
+    const entities = [
+        ...BaseEntities
+    ];
+    if (enableEmailVerification) {
+        entities.push(...EmailEntities);
+    }
+    if (enableCompanyFeature) {
+        entities.push(...CompanyEntities);
+    }
+    return entities;
 }

package/fesm/entities/pending-registration.entity.js

@@ -31,6 +31,7 @@ export class PendingRegistration {
         _define_property(this, "token", void 0);
         _define_property(this, "expiresAt", void 0);
         _define_property(this, "companyData", void 0);
+        _define_property(this, "additionalFields", void 0);
         _define_property(this, "createdAt", void 0);
     }
 }
@@ -90,6 +91,14 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Object)
 ], PendingRegistration.prototype, "companyData", void 0);
+_ts_decorate([
+    Column({
+        type: 'json',
+        nullable: true,
+        name: 'additional_fields'
+    }),
+    _ts_metadata("design:type", Object)
+], PendingRegistration.prototype, "additionalFields", void 0);
 _ts_decorate([
     CreateDateColumn({
         type: 'timestamp',

package/fesm/interfaces/user-enricher.interface.js

@@ -1,26 +1,4 @@
 /**
- * User Enricher Provider Interface
- *
- * Allows consuming applications to extend user list and profile
- * without modifying the base nestjs-auth package.
- *
- * This follows the Provider Interface Pattern:
- * - nestjs-auth defines the interface (this file)
- * - Consuming apps implement the interface
- * - nestjs-auth optionally injects the implementation
- *
- * @example
- * // In your app module
- * providers: [
- *   { provide: USER_ENRICHER, useClass: MyUserEnricher },
- * ]
- *
- * // Your enricher implementation
- * @Injectable()
- * export class MyUserEnricher implements IUserEnricher {
- *   async enrichListQuery(query, user) {
- *     query.leftJoinAndSelect('user.department', 'department');
- *     return { extraFields: ['department.name'] };
- *   }
- * }
+ * User Enricher Provider Interface - allows apps to extend user list/profile
+ * without modifying nestjs-auth. Provide via: { provide: USER_ENRICHER, useClass: MyEnricher }
  */ export { };

package/fesm/modules/auth.module.js

@@ -10,8 +10,8 @@ import { JwtModule } from '@nestjs/jwt';
 import { PassportModule } from '@nestjs/passport';
 import { JwtAuthGuard } from '@flusys/nestjs-shared/guards';
 import { AUTH_MODULE_OPTIONS } from '../config/auth.constants';
-import { AuthenticationController, BranchController, CompanyController, CompanySelectionController, UserController, UserPermissionController } from '../controllers';
-import { Company, CompanyBranch, User, UserCompanyPermission } from '../entities';
+import { AuthenticationController, BranchController, CompanyController, CompanySelectionController, EmailVerificationController, UserController, UserPermissionController } from '../controllers';
+import { getEntitiesByConfig } from '../entities';
 import { ClearToken } from '../interceptors/clear-token.interceptor';
 import { SetToken } from '../interceptors/set-token.interceptor';
 import { AuthEmailService, AuthenticationService, BranchService, CompanySelectionSessionService, CompanyService, UserPermissionService, UserService } from '../services';
@@ -36,9 +36,9 @@ export class AuthModule {
             ...options.providers ?? []
         ], options.imports);
     }
-    /** Build the dynamic module with shared logic */ static buildModule(options, providers, externalImports = []) {
+    static buildModule(options, providers, externalImports = []) {
         const { global = false, includeController = true, bootstrapAppConfig } = options;
-        const enableCompanyFeature = bootstrapAppConfig?.enableCompanyFeature ?? false;
+        const featureFlags = this.getFeatureFlags(bootstrapAppConfig);
         return {
             module: AuthModule,
             global,
@@ -46,15 +46,21 @@ export class AuthModule {
                 ...externalImports,
                 ...this.buildImports()
             ],
-            controllers: this.buildControllers(includeController, enableCompanyFeature),
+            controllers: this.buildControllers(includeController, featureFlags),
             providers: [
                 ...providers,
-                ...this.buildProviders(enableCompanyFeature)
+                ...this.buildProviders(featureFlags)
             ],
-            exports: this.buildExports(enableCompanyFeature)
+            exports: this.buildExports(featureFlags)
         };
     }
-    /** Common module imports */ static buildImports() {
+    static getFeatureFlags(bootstrapAppConfig) {
+        return {
+            enableCompanyFeature: bootstrapAppConfig?.enableCompanyFeature ?? false,
+            enableEmailVerification: bootstrapAppConfig?.enableEmailVerification ?? true
+        };
+    }
+    static buildImports() {
         return [
             PassportModule.register({
                 defaultStrategy: 'jwt'
@@ -64,35 +70,40 @@ export class AuthModule {
             UtilsModule
         ];
     }
-    /** Build controllers based on feature flags */ static buildControllers(includeController, enableCompanyFeature) {
+    static buildControllers(includeController, flags) {
         if (!includeController) return [];
         const controllers = [
             AuthenticationController,
             UserController
         ];
-        if (enableCompanyFeature) {
+        if (flags.enableEmailVerification) {
+            controllers.push(EmailVerificationController);
+        }
+        if (flags.enableCompanyFeature) {
             controllers.push(CompanySelectionController, CompanyController, BranchController, UserPermissionController);
         }
         return controllers;
     }
-    /** Core providers (without AUTH_MODULE_OPTIONS - that's added separately) */ static buildProviders(enableCompanyFeature) {
+    static buildProviders(flags) {
         const providers = [
             AuthConfigService,
             AuthDataSourceProvider,
             JwtStrategy,
             JwtAuthGuard,
             AuthenticationService,
-            AuthEmailService,
             SetToken,
             ClearToken,
             UserService
         ];
-        if (enableCompanyFeature) {
+        if (flags.enableEmailVerification) {
+            providers.push(AuthEmailService);
+        }
+        if (flags.enableCompanyFeature) {
             providers.push(CompanySelectionSessionService, CompanyService, BranchService, UserPermissionService);
         }
         return providers;
     }
-    /** Build module exports */ static buildExports(enableCompanyFeature) {
+    static buildExports(flags) {
         const exports = [
             PassportModule,
             AUTH_MODULE_OPTIONS,
@@ -101,15 +112,17 @@ export class AuthModule {
             JwtStrategy,
             JwtAuthGuard,
             AuthenticationService,
-            AuthEmailService,
             UserService
         ];
-        if (enableCompanyFeature) {
+        if (flags.enableEmailVerification) {
+            exports.push(AuthEmailService);
+        }
+        if (flags.enableCompanyFeature) {
             exports.push(CompanySelectionSessionService, CompanyService, BranchService, UserPermissionService);
         }
         return exports;
     }
-    /** Create async providers for forRootAsync */ static createAsyncProviders(options) {
+    static createAsyncProviders(options) {
         const staticOptions = {
             global: options.global,
             includeController: options.includeController,
@@ -166,15 +179,11 @@ export class AuthModule {
             }
         ];
     }
-    /** Get auth entities based on feature flags */ static getEntities(enableCompanyFeature = false) {
-        return enableCompanyFeature ? [
-            User,
-            Company,
-            CompanyBranch,
-            UserCompanyPermission
-        ] : [
-            User
-        ];
+    static getEntities(config) {
+        return getEntitiesByConfig({
+            enableCompanyFeature: config.enableCompanyFeature ?? false,
+            enableEmailVerification: config.enableEmailVerification ?? true
+        });
     }
 }
 AuthModule = _ts_decorate([