@flusys/nestjs-auth 3.0.0 → 4.0.0-lts

package/README.md

@@ -1,7 +1,7 @@
 # Authentication Package Guide
 
 > **Package:** `@flusys/nestjs-auth`
-> **Version:** 3.0.0
+> **Version:** 3.0.1
 > **Type:** Authentication system with JWT, email verification, multi-tenant, and company/branch support
 
 ## Table of Contents

package/cjs/config/index.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", {
     value: true
 });
 _export_star(require("./auth.constants"), exports);
+_export_star(require("./message-keys"), exports);
 function _export_star(from, to) {
     Object.keys(from).forEach(function(k) {
         if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {

package/cjs/config/message-keys.js

@@ -0,0 +1,150 @@
+// ==================== AUTH MODULE MESSAGE KEYS ====================
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get AUTH_MESSAGES () {
+        return AUTH_MESSAGES;
+    },
+    get AUTH_MODULE_MESSAGES () {
+        return AUTH_MODULE_MESSAGES;
+    },
+    get BRANCH_MESSAGES () {
+        return BRANCH_MESSAGES;
+    },
+    get COMPANY_MESSAGES () {
+        return COMPANY_MESSAGES;
+    },
+    get EMAIL_VERIFICATION_MESSAGES () {
+        return EMAIL_VERIFICATION_MESSAGES;
+    },
+    get USER_MESSAGES () {
+        return USER_MESSAGES;
+    },
+    get USER_PERMISSION_MESSAGES () {
+        return USER_PERMISSION_MESSAGES;
+    }
+});
+const AUTH_MESSAGES = {
+    LOGIN_SUCCESS: 'auth.login.success',
+    LOGIN_FAILED: 'auth.login.failed',
+    LOGIN_INVALID_CREDENTIALS: 'auth.login.invalid.credentials',
+    LOGIN_EMAIL_NOT_VERIFIED: 'auth.login.email.not.verified',
+    LOGIN_REQUIRES_SELECTION: 'auth.login.requires.selection',
+    LOGIN_ACCOUNT_DEACTIVATED: 'auth.login.account.deactivated',
+    LOGOUT_SUCCESS: 'auth.logout.success',
+    REGISTER_SUCCESS: 'auth.register.success',
+    REGISTER_FAILED: 'auth.register.failed',
+    REGISTER_EMAIL_EXISTS: 'auth.register.email.exists',
+    REGISTER_COMPANY_ALREADY_ASSIGNED: 'auth.register.company.already.assigned',
+    PASSWORD_CHANGE_SUCCESS: 'auth.password.change.success',
+    PASSWORD_CHANGE_FAILED: 'auth.password.change.failed',
+    PASSWORD_CHANGE_INVALID_CURRENT: 'auth.password.change.invalid.current',
+    PASSWORD_CHANGE_CURRENT_REQUIRED: 'auth.password.change.current.required',
+    PASSWORD_RESET_EMAIL_SENT: 'auth.password.reset.email.sent',
+    PASSWORD_RESET_SUCCESS: 'auth.password.reset.success',
+    PASSWORD_RESET_FAILED: 'auth.password.reset.failed',
+    TOKEN_REFRESH_SUCCESS: 'auth.token.refresh.success',
+    TOKEN_REQUIRED: 'auth.token.required',
+    TOKEN_INVALID: 'auth.token.invalid',
+    TOKEN_EXPIRED: 'auth.token.expired',
+    TOKEN_REVOKED: 'auth.token.revoked',
+    TOKEN_TOO_LARGE: 'auth.token.too.large',
+    COMPANY_SELECT_SUCCESS: 'auth.company.select.success',
+    COMPANY_SWITCH_SUCCESS: 'auth.company.switch.success',
+    COMPANY_LIST_SUCCESS: 'auth.company.list.success',
+    COMPANY_NO_ACCESS: 'auth.company.no.access',
+    COMPANY_NOT_FOUND: 'auth.company.not.found',
+    COMPANY_REQUIRED: 'auth.company.required',
+    COMPANY_FEATURE_NOT_ENABLED: 'auth.company.feature.not.enabled',
+    BRANCH_LIST_SUCCESS: 'auth.branch.list.success',
+    BRANCH_NO_ACCESS: 'auth.branch.no.access',
+    BRANCH_NOT_FOUND: 'auth.branch.not.found',
+    ME_SUCCESS: 'auth.me.success',
+    EMAIL_NOT_CONFIGURED: 'auth.email.not.configured',
+    EMAIL_SEND_FAILED: 'auth.email.send.failed',
+    SESSION_INVALID: 'auth.session.invalid',
+    SESSION_NOT_AVAILABLE: 'auth.session.not.available',
+    PROFILE_ACCESS_DENIED: 'auth.profile.access.denied',
+    PROFILE_SECTIONS_NOT_SUPPORTED: 'auth.profile.sections.not.supported',
+    LOGOUT_SERVICE_UNAVAILABLE: 'auth.logout.service.unavailable',
+    PASSWORD_RESET_TOKEN_EXPIRED: 'auth.password.reset.token.expired',
+    PASSWORD_RESET_TOKEN_USED: 'auth.password.reset.token.used'
+};
+const EMAIL_VERIFICATION_MESSAGES = {
+    VERIFICATION_SENT: 'email.verification.sent',
+    VERIFICATION_SUCCESS: 'email.verification.success',
+    VERIFICATION_FAILED: 'email.verification.failed',
+    VERIFICATION_TOKEN_INVALID: 'email.verification.token.invalid',
+    VERIFICATION_TOKEN_EXPIRED: 'email.verification.token.expired',
+    VERIFICATION_NOT_ENABLED: 'email.verification.not.enabled',
+    RESEND_SUCCESS: 'email.verification.resend.success',
+    RESEND_THROTTLED: 'email.verification.resend.throttled'
+};
+const USER_MESSAGES = {
+    CREATE_SUCCESS: 'user.create.success',
+    CREATE_MANY_SUCCESS: 'user.create.many.success',
+    GET_SUCCESS: 'user.get.success',
+    GET_ALL_SUCCESS: 'user.get.all.success',
+    UPDATE_SUCCESS: 'user.update.success',
+    UPDATE_MANY_SUCCESS: 'user.update.many.success',
+    DELETE_SUCCESS: 'user.delete.success',
+    RESTORE_SUCCESS: 'user.restore.success',
+    NOT_FOUND: 'user.not.found',
+    PROFILE_SUCCESS: 'user.profile.success',
+    PROFILE_UPDATE_SUCCESS: 'user.profile.update.success',
+    PROFILE_EXTRAS_SUCCESS: 'user.profile.extras.success',
+    PROFILE_SECTIONS_SUCCESS: 'user.profile.sections.success',
+    PROFILE_SECTION_DATA_SUCCESS: 'user.profile.section.data.success',
+    PROFILE_SECTION_UPDATE_SUCCESS: 'user.profile.section.update.success',
+    PROFILE_COMPLETION_SUCCESS: 'user.profile.completion.success',
+    EMAIL_VERIFY_SUCCESS: 'user.email.verify.success',
+    PHONE_VERIFY_SUCCESS: 'user.phone.verify.success',
+    STATUS_UPDATE_SUCCESS: 'user.status.update.success'
+};
+const COMPANY_MESSAGES = {
+    CREATE_SUCCESS: 'company.create.success',
+    CREATE_MANY_SUCCESS: 'company.create.many.success',
+    GET_SUCCESS: 'company.get.success',
+    GET_ALL_SUCCESS: 'company.get.all.success',
+    UPDATE_SUCCESS: 'company.update.success',
+    UPDATE_MANY_SUCCESS: 'company.update.many.success',
+    DELETE_SUCCESS: 'company.delete.success',
+    RESTORE_SUCCESS: 'company.restore.success',
+    NOT_FOUND: 'company.not.found'
+};
+const BRANCH_MESSAGES = {
+    CREATE_SUCCESS: 'branch.create.success',
+    CREATE_MANY_SUCCESS: 'branch.create.many.success',
+    GET_SUCCESS: 'branch.get.success',
+    GET_ALL_SUCCESS: 'branch.get.all.success',
+    UPDATE_SUCCESS: 'branch.update.success',
+    UPDATE_MANY_SUCCESS: 'branch.update.many.success',
+    DELETE_SUCCESS: 'branch.delete.success',
+    RESTORE_SUCCESS: 'branch.restore.success',
+    NOT_FOUND: 'branch.not.found'
+};
+const USER_PERMISSION_MESSAGES = {
+    COMPANY_ASSIGN_SUCCESS: 'user.permission.company.assign.success',
+    COMPANY_LIST_SUCCESS: 'user.permission.company.list.success',
+    BRANCH_ASSIGN_SUCCESS: 'user.permission.branch.assign.success',
+    BRANCH_LIST_SUCCESS: 'user.permission.branch.list.success',
+    BATCH_SUCCESS: 'user.permission.batch.success',
+    ALREADY_ASSIGNED: 'user.permission.already.assigned',
+    PERMISSION_NOT_FOUND: 'user.permission.not.found'
+};
+const AUTH_MODULE_MESSAGES = {
+    AUTH: AUTH_MESSAGES,
+    EMAIL_VERIFICATION: EMAIL_VERIFICATION_MESSAGES,
+    USER: USER_MESSAGES,
+    COMPANY: COMPANY_MESSAGES,
+    BRANCH: BRANCH_MESSAGES,
+    USER_PERMISSION: USER_PERMISSION_MESSAGES
+};

package/cjs/controllers/authentication.controller.js

@@ -8,6 +8,7 @@ Object.defineProperty(exports, "AuthenticationController", {
         return AuthenticationController;
     }
 });
+const _config = require("../config");
 const _decorators = require("@flusys/nestjs-shared/decorators");
 const _dtos = require("@flusys/nestjs-shared/dtos");
 const _guards = require("@flusys/nestjs-shared/guards");
@@ -16,7 +17,6 @@ const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
 const _throttler = require("@nestjs/throttler");
 const _express = require("express");
-const _config = require("../config");
 const _authenticationdto = require("../dtos/authentication.dto");
 const _cleartokeninterceptor = require("../interceptors/clear-token.interceptor");
 const _settokeninterceptor = require("../interceptors/set-token.interceptor");
@@ -78,7 +78,10 @@ let AuthenticationController = class AuthenticationController {
         // Always check cookie first, then body - handles Browser, SSR, and Mobile/API
         const refreshToken = req.cookies?.[cookieName] || refreshTokenDto.refreshToken;
         if (!refreshToken) {
-            throw new _common.UnauthorizedException('Refresh token is required');
+            throw new _common.UnauthorizedException({
+                message: 'Refresh token is required',
+                messageKey: _config.AUTH_MESSAGES.TOKEN_REQUIRED
+            });
         }
         return this.authService.refreshToken(refreshToken);
     }
@@ -89,14 +92,16 @@ let AuthenticationController = class AuthenticationController {
         await this.authService.logout(userId);
         return {
             success: true,
-            message: 'Logged out successfully'
+            message: 'Logged out successfully',
+            messageKey: _config.AUTH_MESSAGES.LOGOUT_SUCCESS
         };
     }
     async changePassword(userId, dto) {
         await this.authService.changePassword(userId, dto.currentPassword, dto.newPassword);
         return {
             success: true,
-            message: 'Password changed successfully'
+            message: 'Password changed successfully',
+            messageKey: _config.AUTH_MESSAGES.PASSWORD_CHANGE_SUCCESS
         };
     }
     constructor(authService, authConfig){

package/cjs/controllers/branch.controller.js

@@ -41,6 +41,7 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 let BranchController = class BranchController extends (0, _classes.createApiController)(_companybranchdto.CreateCompanyBranchDto, _companybranchdto.UpdateCompanyBranchDto, _companybranchdto.CompanyBranchResponseDto, {
+    entityName: 'branch',
     security: {
         insert: {
             level: 'permission',

package/cjs/controllers/company-selection.controller.js

@@ -8,6 +8,7 @@ Object.defineProperty(exports, "CompanySelectionController", {
         return CompanySelectionController;
     }
 });
+const _config = require("../config");
 const _decorators = require("@flusys/nestjs-shared/decorators");
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
@@ -54,6 +55,7 @@ let CompanySelectionController = class CompanySelectionController {
         return {
             success: true,
             message: 'User companies retrieved successfully',
+            messageKey: _config.AUTH_MESSAGES.COMPANY_LIST_SUCCESS,
             data: companies
         };
     }
@@ -62,6 +64,7 @@ let CompanySelectionController = class CompanySelectionController {
         return {
             success: true,
             message: 'Company branches retrieved successfully',
+            messageKey: _config.AUTH_MESSAGES.BRANCH_LIST_SUCCESS,
             data: branches
         };
     }

package/cjs/controllers/company.controller.js

@@ -41,6 +41,7 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 let CompanyController = class CompanyController extends (0, _classes.createApiController)(_companydto.CreateCompanyDto, _companydto.UpdateCompanyDto, _companydto.CompanyResponseDto, {
+    entityName: 'company',
     security: {
         insert: {
             level: 'permission',

package/cjs/controllers/email-verification.controller.js

@@ -8,6 +8,7 @@ Object.defineProperty(exports, "EmailVerificationController", {
         return EmailVerificationController;
     }
 });
+const _config = require("../config");
 const _dtos = require("@flusys/nestjs-shared/dtos");
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
@@ -49,7 +50,10 @@ function _ts_param(paramIndex, decorator) {
 let EmailVerificationController = class EmailVerificationController {
     ensureEmailVerificationEnabled() {
         if (!this.dataSourceProvider.isEmailVerificationEnabled()) {
-            throw new _common.BadRequestException('Email verification is not enabled for this tenant');
+            throw new _common.BadRequestException({
+                message: 'Email verification is not enabled for this tenant',
+                messageKey: _config.EMAIL_VERIFICATION_MESSAGES.VERIFICATION_NOT_ENABLED
+            });
         }
     }
     buildAuthUrl(req, path) {
@@ -76,7 +80,8 @@ let EmailVerificationController = class EmailVerificationController {
         }
         return {
             success: true,
-            message: result.message
+            message: result.message,
+            messageKey: result.messageKey
         };
     }
     constructor(authService, authEmailService, authConfig, dataSourceProvider){

package/cjs/controllers/user-permission.controller.js

@@ -9,6 +9,7 @@ Object.defineProperty(exports, "UserPermissionController", {
     }
 });
 const _nestjsshared = require("@flusys/nestjs-shared");
+const _config = require("../config");
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
 const _userpermissiondto = require("../dtos/user-permission.dto");
@@ -50,6 +51,7 @@ let UserPermissionController = class UserPermissionController {
         return {
             success: true,
             message: 'User companies retrieved successfully',
+            messageKey: _config.USER_PERMISSION_MESSAGES.COMPANY_LIST_SUCCESS,
             data: permissions.map((p)=>({
                     id: p.id,
                     userId: p.userId,
@@ -67,6 +69,7 @@ let UserPermissionController = class UserPermissionController {
         return {
             success: true,
             message: 'User branches retrieved successfully',
+            messageKey: _config.USER_PERMISSION_MESSAGES.BRANCH_LIST_SUCCESS,
             data: permissions.map((p)=>({
                     id: p.id,
                     userId: p.userId,
@@ -90,7 +93,12 @@ let UserPermissionController = class UserPermissionController {
         }
         return {
             success: true,
-            message: `Processed ${added} additions and ${removed} removals`
+            message: `Processed ${added} additions and ${removed} removals`,
+            messageKey: _config.USER_PERMISSION_MESSAGES.BATCH_SUCCESS,
+            messageVariables: {
+                added,
+                removed
+            }
         };
     }
     constructor(permissionService){

package/cjs/controllers/user.controller.js

@@ -9,6 +9,7 @@ Object.defineProperty(exports, "UserController", {
     }
 });
 const _classes = require("@flusys/nestjs-shared/classes");
+const _config = require("../config");
 const _decorators = require("@flusys/nestjs-shared/decorators");
 const _guards = require("@flusys/nestjs-shared/guards");
 const _interfaces = require("@flusys/nestjs-shared/interfaces");
@@ -44,6 +45,7 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 let UserController = class UserController extends (0, _classes.createApiController)(_userdto.CreateUserDto, _userdto.UpdateUserDto, _userdto.UserResponseDto, {
+    entityName: 'user',
     security: {
         insert: {
             level: 'permission',
@@ -93,6 +95,8 @@ let UserController = class UserController extends (0, _classes.createApiControll
         const data = await this.service.getProfileWithExtras(id, user);
         return {
             success: true,
+            message: 'Profile extras retrieved successfully',
+            messageKey: _config.USER_MESSAGES.PROFILE_EXTRAS_SUCCESS,
             data
         };
     }
@@ -100,21 +104,24 @@ let UserController = class UserController extends (0, _classes.createApiControll
         await this.service.verifyEmail(id);
         return {
             success: true,
-            message: 'Email verified successfully'
+            message: 'Email verified successfully',
+            messageKey: _config.USER_MESSAGES.EMAIL_VERIFY_SUCCESS
         };
     }
     async verifyPhone(id) {
         await this.service.verifyPhone(id);
         return {
             success: true,
-            message: 'Phone verified successfully'
+            message: 'Phone verified successfully',
+            messageKey: _config.USER_MESSAGES.PHONE_VERIFY_SUCCESS
         };
     }
     async updateStatus(id, isActive, user) {
         await this.service.updateStatus(id, isActive, user);
         return {
             success: true,
-            message: 'Status updated successfully'
+            message: 'Status updated successfully',
+            messageKey: _config.USER_MESSAGES.STATUS_UPDATE_SUCCESS
         };
     }
     async profile(dto, user) {
@@ -122,6 +129,7 @@ let UserController = class UserController extends (0, _classes.createApiControll
         return {
             success: true,
             message: 'Profile updated successfully',
+            messageKey: _config.USER_MESSAGES.PROFILE_UPDATE_SUCCESS,
             data
         };
     }
@@ -130,6 +138,7 @@ let UserController = class UserController extends (0, _classes.createApiControll
         return {
             success: true,
             message: 'Profile sections retrieved successfully',
+            messageKey: _config.USER_MESSAGES.PROFILE_SECTIONS_SUCCESS,
             data: sections
         };
     }
@@ -138,6 +147,7 @@ let UserController = class UserController extends (0, _classes.createApiControll
         return {
             success: true,
             message: 'Profile section data retrieved successfully',
+            messageKey: _config.USER_MESSAGES.PROFILE_SECTION_DATA_SUCCESS,
             data
         };
     }
@@ -145,7 +155,8 @@ let UserController = class UserController extends (0, _classes.createApiControll
         await this.service.updateProfileSection(id, sectionId, data, user);
         return {
             success: true,
-            message: 'Section updated successfully'
+            message: 'Section updated successfully',
+            messageKey: _config.USER_MESSAGES.PROFILE_SECTION_UPDATE_SUCCESS
         };
     }
     async getProfileCompletion(id, user) {
@@ -153,6 +164,7 @@ let UserController = class UserController extends (0, _classes.createApiControll
         return {
             success: true,
             message: 'Profile completion retrieved successfully',
+            messageKey: _config.USER_MESSAGES.PROFILE_COMPLETION_SUCCESS,
             data: {
                 completionPercentage: percentage
             }

package/cjs/dtos/authentication.dto.js

@@ -685,6 +685,7 @@ let LoginResponseRequiresEmailVerificationDto = class LoginResponseRequiresEmail
         _define_property(this, "requiresEmailVerification", void 0);
         _define_property(this, "email", void 0);
         _define_property(this, "message", void 0);
+        _define_property(this, "messageKey", void 0);
     }
 };
 _ts_decorate([
@@ -705,6 +706,13 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", String)
 ], LoginResponseRequiresEmailVerificationDto.prototype, "message", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'auth.login.email.not.verified',
+        description: 'Translation key for localization'
+    }),
+    _ts_metadata("design:type", String)
+], LoginResponseRequiresEmailVerificationDto.prototype, "messageKey", void 0);
 let ForgotPasswordDto = class ForgotPasswordDto {
     constructor(){
         _define_property(this, "email", void 0);

package/cjs/dtos/user-permission.dto.js

@@ -256,6 +256,7 @@ let UserCompaniesResponseDto = class UserCompaniesResponseDto {
     constructor(){
         _define_property(this, "success", void 0);
         _define_property(this, "message", void 0);
+        _define_property(this, "messageKey", void 0);
         _define_property(this, "data", void 0);
     }
 };
@@ -271,6 +272,12 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", String)
 ], UserCompaniesResponseDto.prototype, "message", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'userPermission.company.list.success'
+    }),
+    _ts_metadata("design:type", String)
+], UserCompaniesResponseDto.prototype, "messageKey", void 0);
 _ts_decorate([
     (0, _swagger.ApiProperty)({
         description: 'List of companies the user has access to',
@@ -300,6 +307,7 @@ let UserBranchesResponseDto = class UserBranchesResponseDto {
     constructor(){
         _define_property(this, "success", void 0);
         _define_property(this, "message", void 0);
+        _define_property(this, "messageKey", void 0);
         _define_property(this, "data", void 0);
     }
 };
@@ -315,6 +323,12 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", String)
 ], UserBranchesResponseDto.prototype, "message", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'userPermission.branch.list.success'
+    }),
+    _ts_metadata("design:type", String)
+], UserBranchesResponseDto.prototype, "messageKey", void 0);
 _ts_decorate([
     (0, _swagger.ApiProperty)({
         description: 'List of branches the user has access to',

package/cjs/interceptors/set-token.interceptor.js

@@ -9,10 +9,10 @@ Object.defineProperty(exports, "SetToken", {
     }
 });
 const _utils = require("@flusys/nestjs-shared/utils");
+const _config = require("../config");
 const _common = require("@nestjs/common");
 const _buffer = require("buffer");
 const _rxjs = require("rxjs");
-const _config = require("../config");
 const _authconfigservice = require("../services/auth-config.service");
 function _define_property(obj, key, value) {
     if (key in obj) {
@@ -52,10 +52,13 @@ let SetToken = class SetToken {
         const req = context.switchToHttp().getRequest();
         const res = context.switchToHttp().getResponse();
         return next.handle().pipe((0, _rxjs.map)((value)=>{
-            if (!value?.refreshToken) return value;
+            if (typeof value !== 'object' || value === null || !('refreshToken' in value)) {
+                return value;
+            }
+            const response = value;
             if ((0, _utils.isBrowserRequest)(req)) {
-                this.setRefreshTokenCookie(req, res, value.refreshToken);
-                const { refreshToken, ...responseWithoutToken } = value;
+                this.setRefreshTokenCookie(req, res, String(response.refreshToken));
+                const { refreshToken, ...responseWithoutToken } = response;
                 return responseWithoutToken;
             }
             return value;
@@ -65,7 +68,13 @@ let SetToken = class SetToken {
         const rawCookieString = `${this.cookieName}=${tokenValue}; HttpOnly`;
         const estimatedBytes = _buffer.Buffer.byteLength(rawCookieString, 'utf8');
         if (estimatedBytes > _config.MAX_COOKIE_BYTES) {
-            throw new _common.PayloadTooLargeException(`Refresh token too large (≈${estimatedBytes} bytes)`);
+            throw new _common.PayloadTooLargeException({
+                message: `Refresh token too large (≈${estimatedBytes} bytes)`,
+                messageKey: _config.AUTH_MESSAGES.TOKEN_TOO_LARGE,
+                messageParams: {
+                    size: estimatedBytes
+                }
+            });
         }
         res.cookie(this.cookieName, tokenValue, {
             httpOnly: true,

package/cjs/services/auth-config.service.js

@@ -9,6 +9,7 @@ Object.defineProperty(exports, "AuthConfigService", {
     }
 });
 const _config = require("@flusys/nestjs-core/config");
+const _constants = require("@flusys/nestjs-shared/constants");
 const _common = require("@nestjs/common");
 const _authconstants = require("../config/auth.constants");
 const _authmoduleoptionsinterface = require("../interfaces/auth-module-options.interface");
@@ -57,7 +58,10 @@ let AuthConfigService = class AuthConfigService {
     // JWT Configuration
     getJwtSecret() {
         if (!this.config.jwtSecret) {
-            throw new _common.InternalServerErrorException('[AuthModule] JWT_SECRET is required - set via environment or module config');
+            throw new _common.InternalServerErrorException({
+                message: '[AuthModule] JWT_SECRET is required - set via environment or module config',
+                messageKey: _constants.SYSTEM_MESSAGES.CONFIG_REQUIRED
+            });
         }
         return this.config.jwtSecret;
     }
@@ -69,11 +73,10 @@ let AuthConfigService = class AuthConfigService {
             return this.config.refreshTokenSecret;
         }
         if (_config.envConfig.isProduction()) {
-            throw new _common.InternalServerErrorException('[AuthModule] REFRESH_TOKEN_SECRET is required in production - ' + 'using the same secret for access and refresh tokens is a security risk');
-        }
-        if (!this.refreshTokenSecretWarned) {
-            this.refreshTokenSecretWarned = true;
-            this.logger.warn('REFRESH_TOKEN_SECRET not configured - using JWT_SECRET as fallback. ' + 'For better security, configure a separate refresh token secret.');
+            throw new _common.InternalServerErrorException({
+                message: '[AuthModule] REFRESH_TOKEN_SECRET is required in production - using the same secret for access and refresh tokens is a security risk',
+                messageKey: _constants.SYSTEM_MESSAGES.CONFIG_REQUIRED
+            });
         }
         return this.getJwtSecret();
     }
@@ -88,10 +91,8 @@ let AuthConfigService = class AuthConfigService {
         return this.config.frontendUrl;
     }
     constructor(injectedOptions){
-        _define_property(this, "logger", new _common.Logger(AuthConfigService.name));
         _define_property(this, "options", void 0);
         _define_property(this, "config", void 0);
-        _define_property(this, "refreshTokenSecretWarned", false);
         this.options = injectedOptions ?? {
             global: false,
             includeController: true

package/cjs/services/auth-datasource.provider.js

@@ -8,7 +8,7 @@ Object.defineProperty(exports, "AuthDataSourceProvider", {
         return AuthDataSourceProvider;
     }
 });
-const _modules = require("@flusys/nestjs-shared/modules");
+const _nestjsshared = require("@flusys/nestjs-shared");
 const _common = require("@nestjs/common");
 const _core = require("@nestjs/core");
 const _express = require("express");
@@ -82,7 +82,7 @@ function _ts_param(paramIndex, decorator) {
         decorator(target, key, paramIndex);
     };
 }
-let AuthDataSourceProvider = class AuthDataSourceProvider extends _modules.MultiTenantDataSourceService {
+let AuthDataSourceProvider = class AuthDataSourceProvider extends _nestjsshared.MultiTenantDataSourceService {
     async getSingleDataSource() {
         if (!AuthDataSourceProvider.singleDataSource) {
             if (AuthDataSourceProvider.singleConnectionLock) {
@@ -91,7 +91,10 @@ let AuthDataSourceProvider = class AuthDataSourceProvider extends _modules.Multi
             const lockPromise = (async ()=>{
                 const config = this.getDefaultDatabaseConfig();
                 if (!config) {
-                    throw new _common.InternalServerErrorException('Default database config is not available');
+                    throw new _common.InternalServerErrorException({
+                        message: 'Default database config is not available',
+                        messageKey: _nestjsshared.SYSTEM_MESSAGES.DATABASE_CONFIG_NOT_AVAILABLE
+                    });
                 }
                 const ds = await this.createDataSourceFromConfig(config);
                 AuthDataSourceProvider.singleDataSource = ds;
@@ -154,7 +157,7 @@ let AuthDataSourceProvider = class AuthDataSourceProvider extends _modules.Multi
         return super.createDataSourceFromConfig(config, await this.getAuthEntities());
     }
     constructor(authOptions, request){
-        super(AuthDataSourceProvider.buildParentOptions(authOptions), request), _define_property(this, "authOptions", void 0), _define_property(this, "logger", void 0), this.authOptions = authOptions, this.logger = new _common.Logger(AuthDataSourceProvider.name);
+        super(AuthDataSourceProvider.buildParentOptions(authOptions), request), _define_property(this, "authOptions", void 0), this.authOptions = authOptions;
     }
 };
 _define_property(AuthDataSourceProvider, "tenantConnections", new Map());