@flusys/nestjs-auth 3.0.0 → 4.0.0-rc

package/config/message-keys.d.ts

@@ -0,0 +1,218 @@
+export declare const AUTH_MESSAGES: {
+    readonly LOGIN_SUCCESS: "auth.login.success";
+    readonly LOGIN_FAILED: "auth.login.failed";
+    readonly LOGIN_INVALID_CREDENTIALS: "auth.login.invalid.credentials";
+    readonly LOGIN_EMAIL_NOT_VERIFIED: "auth.login.email.not.verified";
+    readonly LOGIN_REQUIRES_SELECTION: "auth.login.requires.selection";
+    readonly LOGIN_ACCOUNT_DEACTIVATED: "auth.login.account.deactivated";
+    readonly LOGOUT_SUCCESS: "auth.logout.success";
+    readonly REGISTER_SUCCESS: "auth.register.success";
+    readonly REGISTER_FAILED: "auth.register.failed";
+    readonly REGISTER_EMAIL_EXISTS: "auth.register.email.exists";
+    readonly REGISTER_COMPANY_ALREADY_ASSIGNED: "auth.register.company.already.assigned";
+    readonly PASSWORD_CHANGE_SUCCESS: "auth.password.change.success";
+    readonly PASSWORD_CHANGE_FAILED: "auth.password.change.failed";
+    readonly PASSWORD_CHANGE_INVALID_CURRENT: "auth.password.change.invalid.current";
+    readonly PASSWORD_CHANGE_CURRENT_REQUIRED: "auth.password.change.current.required";
+    readonly PASSWORD_RESET_EMAIL_SENT: "auth.password.reset.email.sent";
+    readonly PASSWORD_RESET_SUCCESS: "auth.password.reset.success";
+    readonly PASSWORD_RESET_FAILED: "auth.password.reset.failed";
+    readonly TOKEN_REFRESH_SUCCESS: "auth.token.refresh.success";
+    readonly TOKEN_REQUIRED: "auth.token.required";
+    readonly TOKEN_INVALID: "auth.token.invalid";
+    readonly TOKEN_EXPIRED: "auth.token.expired";
+    readonly TOKEN_REVOKED: "auth.token.revoked";
+    readonly TOKEN_TOO_LARGE: "auth.token.too.large";
+    readonly COMPANY_SELECT_SUCCESS: "auth.company.select.success";
+    readonly COMPANY_SWITCH_SUCCESS: "auth.company.switch.success";
+    readonly COMPANY_LIST_SUCCESS: "auth.company.list.success";
+    readonly COMPANY_NO_ACCESS: "auth.company.no.access";
+    readonly COMPANY_NOT_FOUND: "auth.company.not.found";
+    readonly COMPANY_REQUIRED: "auth.company.required";
+    readonly COMPANY_FEATURE_NOT_ENABLED: "auth.company.feature.not.enabled";
+    readonly BRANCH_LIST_SUCCESS: "auth.branch.list.success";
+    readonly BRANCH_NO_ACCESS: "auth.branch.no.access";
+    readonly BRANCH_NOT_FOUND: "auth.branch.not.found";
+    readonly ME_SUCCESS: "auth.me.success";
+    readonly EMAIL_NOT_CONFIGURED: "auth.email.not.configured";
+    readonly EMAIL_SEND_FAILED: "auth.email.send.failed";
+    readonly SESSION_INVALID: "auth.session.invalid";
+    readonly SESSION_NOT_AVAILABLE: "auth.session.not.available";
+    readonly PROFILE_ACCESS_DENIED: "auth.profile.access.denied";
+    readonly PROFILE_SECTIONS_NOT_SUPPORTED: "auth.profile.sections.not.supported";
+    readonly LOGOUT_SERVICE_UNAVAILABLE: "auth.logout.service.unavailable";
+    readonly PASSWORD_RESET_TOKEN_EXPIRED: "auth.password.reset.token.expired";
+    readonly PASSWORD_RESET_TOKEN_USED: "auth.password.reset.token.used";
+};
+export declare const EMAIL_VERIFICATION_MESSAGES: {
+    readonly VERIFICATION_SENT: "email.verification.sent";
+    readonly VERIFICATION_SUCCESS: "email.verification.success";
+    readonly VERIFICATION_FAILED: "email.verification.failed";
+    readonly VERIFICATION_TOKEN_INVALID: "email.verification.token.invalid";
+    readonly VERIFICATION_TOKEN_EXPIRED: "email.verification.token.expired";
+    readonly VERIFICATION_NOT_ENABLED: "email.verification.not.enabled";
+    readonly RESEND_SUCCESS: "email.verification.resend.success";
+    readonly RESEND_THROTTLED: "email.verification.resend.throttled";
+};
+export declare const USER_MESSAGES: {
+    readonly CREATE_SUCCESS: "user.create.success";
+    readonly CREATE_MANY_SUCCESS: "user.create.many.success";
+    readonly GET_SUCCESS: "user.get.success";
+    readonly GET_ALL_SUCCESS: "user.get.all.success";
+    readonly UPDATE_SUCCESS: "user.update.success";
+    readonly UPDATE_MANY_SUCCESS: "user.update.many.success";
+    readonly DELETE_SUCCESS: "user.delete.success";
+    readonly RESTORE_SUCCESS: "user.restore.success";
+    readonly NOT_FOUND: "user.not.found";
+    readonly PROFILE_SUCCESS: "user.profile.success";
+    readonly PROFILE_UPDATE_SUCCESS: "user.profile.update.success";
+    readonly PROFILE_EXTRAS_SUCCESS: "user.profile.extras.success";
+    readonly PROFILE_SECTIONS_SUCCESS: "user.profile.sections.success";
+    readonly PROFILE_SECTION_DATA_SUCCESS: "user.profile.section.data.success";
+    readonly PROFILE_SECTION_UPDATE_SUCCESS: "user.profile.section.update.success";
+    readonly PROFILE_COMPLETION_SUCCESS: "user.profile.completion.success";
+    readonly EMAIL_VERIFY_SUCCESS: "user.email.verify.success";
+    readonly PHONE_VERIFY_SUCCESS: "user.phone.verify.success";
+    readonly STATUS_UPDATE_SUCCESS: "user.status.update.success";
+};
+export declare const COMPANY_MESSAGES: {
+    readonly CREATE_SUCCESS: "company.create.success";
+    readonly CREATE_MANY_SUCCESS: "company.create.many.success";
+    readonly GET_SUCCESS: "company.get.success";
+    readonly GET_ALL_SUCCESS: "company.get.all.success";
+    readonly UPDATE_SUCCESS: "company.update.success";
+    readonly UPDATE_MANY_SUCCESS: "company.update.many.success";
+    readonly DELETE_SUCCESS: "company.delete.success";
+    readonly RESTORE_SUCCESS: "company.restore.success";
+    readonly NOT_FOUND: "company.not.found";
+};
+export declare const BRANCH_MESSAGES: {
+    readonly CREATE_SUCCESS: "branch.create.success";
+    readonly CREATE_MANY_SUCCESS: "branch.create.many.success";
+    readonly GET_SUCCESS: "branch.get.success";
+    readonly GET_ALL_SUCCESS: "branch.get.all.success";
+    readonly UPDATE_SUCCESS: "branch.update.success";
+    readonly UPDATE_MANY_SUCCESS: "branch.update.many.success";
+    readonly DELETE_SUCCESS: "branch.delete.success";
+    readonly RESTORE_SUCCESS: "branch.restore.success";
+    readonly NOT_FOUND: "branch.not.found";
+};
+export declare const USER_PERMISSION_MESSAGES: {
+    readonly COMPANY_ASSIGN_SUCCESS: "user.permission.company.assign.success";
+    readonly COMPANY_LIST_SUCCESS: "user.permission.company.list.success";
+    readonly BRANCH_ASSIGN_SUCCESS: "user.permission.branch.assign.success";
+    readonly BRANCH_LIST_SUCCESS: "user.permission.branch.list.success";
+    readonly BATCH_SUCCESS: "user.permission.batch.success";
+    readonly ALREADY_ASSIGNED: "user.permission.already.assigned";
+    readonly PERMISSION_NOT_FOUND: "user.permission.not.found";
+};
+export declare const AUTH_MODULE_MESSAGES: {
+    readonly AUTH: {
+        readonly LOGIN_SUCCESS: "auth.login.success";
+        readonly LOGIN_FAILED: "auth.login.failed";
+        readonly LOGIN_INVALID_CREDENTIALS: "auth.login.invalid.credentials";
+        readonly LOGIN_EMAIL_NOT_VERIFIED: "auth.login.email.not.verified";
+        readonly LOGIN_REQUIRES_SELECTION: "auth.login.requires.selection";
+        readonly LOGIN_ACCOUNT_DEACTIVATED: "auth.login.account.deactivated";
+        readonly LOGOUT_SUCCESS: "auth.logout.success";
+        readonly REGISTER_SUCCESS: "auth.register.success";
+        readonly REGISTER_FAILED: "auth.register.failed";
+        readonly REGISTER_EMAIL_EXISTS: "auth.register.email.exists";
+        readonly REGISTER_COMPANY_ALREADY_ASSIGNED: "auth.register.company.already.assigned";
+        readonly PASSWORD_CHANGE_SUCCESS: "auth.password.change.success";
+        readonly PASSWORD_CHANGE_FAILED: "auth.password.change.failed";
+        readonly PASSWORD_CHANGE_INVALID_CURRENT: "auth.password.change.invalid.current";
+        readonly PASSWORD_CHANGE_CURRENT_REQUIRED: "auth.password.change.current.required";
+        readonly PASSWORD_RESET_EMAIL_SENT: "auth.password.reset.email.sent";
+        readonly PASSWORD_RESET_SUCCESS: "auth.password.reset.success";
+        readonly PASSWORD_RESET_FAILED: "auth.password.reset.failed";
+        readonly TOKEN_REFRESH_SUCCESS: "auth.token.refresh.success";
+        readonly TOKEN_REQUIRED: "auth.token.required";
+        readonly TOKEN_INVALID: "auth.token.invalid";
+        readonly TOKEN_EXPIRED: "auth.token.expired";
+        readonly TOKEN_REVOKED: "auth.token.revoked";
+        readonly TOKEN_TOO_LARGE: "auth.token.too.large";
+        readonly COMPANY_SELECT_SUCCESS: "auth.company.select.success";
+        readonly COMPANY_SWITCH_SUCCESS: "auth.company.switch.success";
+        readonly COMPANY_LIST_SUCCESS: "auth.company.list.success";
+        readonly COMPANY_NO_ACCESS: "auth.company.no.access";
+        readonly COMPANY_NOT_FOUND: "auth.company.not.found";
+        readonly COMPANY_REQUIRED: "auth.company.required";
+        readonly COMPANY_FEATURE_NOT_ENABLED: "auth.company.feature.not.enabled";
+        readonly BRANCH_LIST_SUCCESS: "auth.branch.list.success";
+        readonly BRANCH_NO_ACCESS: "auth.branch.no.access";
+        readonly BRANCH_NOT_FOUND: "auth.branch.not.found";
+        readonly ME_SUCCESS: "auth.me.success";
+        readonly EMAIL_NOT_CONFIGURED: "auth.email.not.configured";
+        readonly EMAIL_SEND_FAILED: "auth.email.send.failed";
+        readonly SESSION_INVALID: "auth.session.invalid";
+        readonly SESSION_NOT_AVAILABLE: "auth.session.not.available";
+        readonly PROFILE_ACCESS_DENIED: "auth.profile.access.denied";
+        readonly PROFILE_SECTIONS_NOT_SUPPORTED: "auth.profile.sections.not.supported";
+        readonly LOGOUT_SERVICE_UNAVAILABLE: "auth.logout.service.unavailable";
+        readonly PASSWORD_RESET_TOKEN_EXPIRED: "auth.password.reset.token.expired";
+        readonly PASSWORD_RESET_TOKEN_USED: "auth.password.reset.token.used";
+    };
+    readonly EMAIL_VERIFICATION: {
+        readonly VERIFICATION_SENT: "email.verification.sent";
+        readonly VERIFICATION_SUCCESS: "email.verification.success";
+        readonly VERIFICATION_FAILED: "email.verification.failed";
+        readonly VERIFICATION_TOKEN_INVALID: "email.verification.token.invalid";
+        readonly VERIFICATION_TOKEN_EXPIRED: "email.verification.token.expired";
+        readonly VERIFICATION_NOT_ENABLED: "email.verification.not.enabled";
+        readonly RESEND_SUCCESS: "email.verification.resend.success";
+        readonly RESEND_THROTTLED: "email.verification.resend.throttled";
+    };
+    readonly USER: {
+        readonly CREATE_SUCCESS: "user.create.success";
+        readonly CREATE_MANY_SUCCESS: "user.create.many.success";
+        readonly GET_SUCCESS: "user.get.success";
+        readonly GET_ALL_SUCCESS: "user.get.all.success";
+        readonly UPDATE_SUCCESS: "user.update.success";
+        readonly UPDATE_MANY_SUCCESS: "user.update.many.success";
+        readonly DELETE_SUCCESS: "user.delete.success";
+        readonly RESTORE_SUCCESS: "user.restore.success";
+        readonly NOT_FOUND: "user.not.found";
+        readonly PROFILE_SUCCESS: "user.profile.success";
+        readonly PROFILE_UPDATE_SUCCESS: "user.profile.update.success";
+        readonly PROFILE_EXTRAS_SUCCESS: "user.profile.extras.success";
+        readonly PROFILE_SECTIONS_SUCCESS: "user.profile.sections.success";
+        readonly PROFILE_SECTION_DATA_SUCCESS: "user.profile.section.data.success";
+        readonly PROFILE_SECTION_UPDATE_SUCCESS: "user.profile.section.update.success";
+        readonly PROFILE_COMPLETION_SUCCESS: "user.profile.completion.success";
+        readonly EMAIL_VERIFY_SUCCESS: "user.email.verify.success";
+        readonly PHONE_VERIFY_SUCCESS: "user.phone.verify.success";
+        readonly STATUS_UPDATE_SUCCESS: "user.status.update.success";
+    };
+    readonly COMPANY: {
+        readonly CREATE_SUCCESS: "company.create.success";
+        readonly CREATE_MANY_SUCCESS: "company.create.many.success";
+        readonly GET_SUCCESS: "company.get.success";
+        readonly GET_ALL_SUCCESS: "company.get.all.success";
+        readonly UPDATE_SUCCESS: "company.update.success";
+        readonly UPDATE_MANY_SUCCESS: "company.update.many.success";
+        readonly DELETE_SUCCESS: "company.delete.success";
+        readonly RESTORE_SUCCESS: "company.restore.success";
+        readonly NOT_FOUND: "company.not.found";
+    };
+    readonly BRANCH: {
+        readonly CREATE_SUCCESS: "branch.create.success";
+        readonly CREATE_MANY_SUCCESS: "branch.create.many.success";
+        readonly GET_SUCCESS: "branch.get.success";
+        readonly GET_ALL_SUCCESS: "branch.get.all.success";
+        readonly UPDATE_SUCCESS: "branch.update.success";
+        readonly UPDATE_MANY_SUCCESS: "branch.update.many.success";
+        readonly DELETE_SUCCESS: "branch.delete.success";
+        readonly RESTORE_SUCCESS: "branch.restore.success";
+        readonly NOT_FOUND: "branch.not.found";
+    };
+    readonly USER_PERMISSION: {
+        readonly COMPANY_ASSIGN_SUCCESS: "user.permission.company.assign.success";
+        readonly COMPANY_LIST_SUCCESS: "user.permission.company.list.success";
+        readonly BRANCH_ASSIGN_SUCCESS: "user.permission.branch.assign.success";
+        readonly BRANCH_LIST_SUCCESS: "user.permission.branch.list.success";
+        readonly BATCH_SUCCESS: "user.permission.batch.success";
+        readonly ALREADY_ASSIGNED: "user.permission.already.assigned";
+        readonly PERMISSION_NOT_FOUND: "user.permission.not.found";
+    };
+};

package/controllers/company-selection.controller.d.ts

@@ -8,11 +8,13 @@ export declare class CompanySelectionController {
     getUserCompanies(userId: string): Promise<{
         success: boolean;
         message: string;
+        messageKey: "auth.company.list.success";
         data: import("..").Company[];
     }>;
     getUserBranches(userId: string, companyId: string): Promise<{
         success: boolean;
         message: string;
+        messageKey: "auth.branch.list.success";
         data: import("..").CompanyBranch[];
     }>;
 }

package/controllers/user-permission.controller.d.ts

@@ -6,11 +6,15 @@ export declare class UserPermissionController {
     assignUserCompany(dto: AssignUserCompanyDto): Promise<{
         success: boolean;
         message: string;
+        messageKey: string;
+        messageVariables: Record<string, number>;
     }>;
     getUserCompanies(userId: string): Promise<UserCompaniesResponseDto>;
     assignUserBranch(dto: AssignUserBranchDto): Promise<{
         success: boolean;
         message: string;
+        messageKey: string;
+        messageVariables: Record<string, number>;
     }>;
     getUserBranches(userId: string, companyId?: string): Promise<UserBranchesResponseDto>;
     private processBatchPermissions;

package/controllers/user.controller.d.ts

@@ -17,6 +17,8 @@ export declare class UserController extends UserController_base {
     constructor(service: UserService);
     getProfileWithExtras(id: string, user: ILoggedUserInfo): Promise<{
         success: boolean;
+        message: string;
+        messageKey: "user.profile.extras.success";
         data: {
             user: IUser;
             extras?: import("..").IProfileExtras;
@@ -25,37 +27,45 @@ export declare class UserController extends UserController_base {
     verifyEmail(id: string): Promise<{
         success: boolean;
         message: string;
+        messageKey: "user.email.verify.success";
     }>;
     verifyPhone(id: string): Promise<{
         success: boolean;
         message: string;
+        messageKey: "user.phone.verify.success";
     }>;
     updateStatus(id: string, isActive: boolean, user: ILoggedUserInfo): Promise<{
         success: boolean;
         message: string;
+        messageKey: "user.status.update.success";
     }>;
     profile(dto: UpdateUserDto, user: ILoggedUserInfo): Promise<{
         success: boolean;
         message: string;
+        messageKey: "user.profile.update.success";
         data: string;
     }>;
     getProfileSections(): Promise<{
         success: boolean;
         message: string;
+        messageKey: "user.profile.sections.success";
         data: import("..").IProfileSection[];
     }>;
     getProfileSectionData(id: string, sectionId: string, user: ILoggedUserInfo): Promise<{
         success: boolean;
         message: string;
+        messageKey: "user.profile.section.data.success";
         data: import("..").IProfileSectionData;
     }>;
     updateProfileSection(id: string, sectionId: string, data: Record<string, any>, user: ILoggedUserInfo): Promise<{
         success: boolean;
         message: string;
+        messageKey: "user.profile.section.update.success";
     }>;
     getProfileCompletion(id: string, user: ILoggedUserInfo): Promise<{
         success: boolean;
         message: string;
+        messageKey: "user.profile.completion.success";
         data: {
             completionPercentage: number;
         };

package/dtos/authentication.dto.d.ts

@@ -92,6 +92,7 @@ export declare class LoginResponseRequiresEmailVerificationDto {
     requiresEmailVerification: true;
     email: string;
     message: string;
+    messageKey: string;
 }
 export declare class ForgotPasswordDto {
     email: string;

package/dtos/user-permission.dto.d.ts

@@ -28,10 +28,12 @@ export declare class UserBranchPermissionDto {
 export declare class UserCompaniesResponseDto {
     success: boolean;
     message: string;
+    messageKey: string;
     data: UserCompanyPermissionDto[];
 }
 export declare class UserBranchesResponseDto {
     success: boolean;
     message: string;
+    messageKey: string;
     data: UserBranchPermissionDto[];
 }

package/entities/index.d.ts

@@ -4,8 +4,17 @@ export * from './pending-registration.entity';
 export { PermissionType, UserCompanyPermission } from './user-company-permission.entity';
 export * from './user.entity';
 export * from './user-token.entity';
+import { CompanyBranch } from './company-branch.entity';
+import { Company } from './company.entity';
+import { PendingRegistration } from './pending-registration.entity';
+import { UserCompanyPermission } from './user-company-permission.entity';
+import { User } from './user.entity';
+import { UserToken } from './user-token.entity';
+declare const BaseEntities: (typeof User | typeof UserToken)[];
+declare const EmailEntities: (typeof PendingRegistration)[];
+declare const CompanyEntities: (typeof Company | typeof CompanyBranch | typeof UserCompanyPermission)[];
 export interface IAuthEntitiesConfig {
     enableCompanyFeature?: boolean;
     enableEmailVerification?: boolean;
 }
-export declare function getEntitiesByConfig(config: IAuthEntitiesConfig): any[];
+export declare function getEntitiesByConfig(config: IAuthEntitiesConfig): (typeof BaseEntities[number] | typeof EmailEntities[number] | typeof CompanyEntities[number])[];

package/fesm/config/index.js

@@ -1 +1,2 @@
 export * from './auth.constants';
+export * from './message-keys';

package/fesm/config/message-keys.js

@@ -0,0 +1,118 @@
+// ==================== AUTH MODULE MESSAGE KEYS ====================
+export const AUTH_MESSAGES = {
+    LOGIN_SUCCESS: 'auth.login.success',
+    LOGIN_FAILED: 'auth.login.failed',
+    LOGIN_INVALID_CREDENTIALS: 'auth.login.invalid.credentials',
+    LOGIN_EMAIL_NOT_VERIFIED: 'auth.login.email.not.verified',
+    LOGIN_REQUIRES_SELECTION: 'auth.login.requires.selection',
+    LOGIN_ACCOUNT_DEACTIVATED: 'auth.login.account.deactivated',
+    LOGOUT_SUCCESS: 'auth.logout.success',
+    REGISTER_SUCCESS: 'auth.register.success',
+    REGISTER_FAILED: 'auth.register.failed',
+    REGISTER_EMAIL_EXISTS: 'auth.register.email.exists',
+    REGISTER_COMPANY_ALREADY_ASSIGNED: 'auth.register.company.already.assigned',
+    PASSWORD_CHANGE_SUCCESS: 'auth.password.change.success',
+    PASSWORD_CHANGE_FAILED: 'auth.password.change.failed',
+    PASSWORD_CHANGE_INVALID_CURRENT: 'auth.password.change.invalid.current',
+    PASSWORD_CHANGE_CURRENT_REQUIRED: 'auth.password.change.current.required',
+    PASSWORD_RESET_EMAIL_SENT: 'auth.password.reset.email.sent',
+    PASSWORD_RESET_SUCCESS: 'auth.password.reset.success',
+    PASSWORD_RESET_FAILED: 'auth.password.reset.failed',
+    TOKEN_REFRESH_SUCCESS: 'auth.token.refresh.success',
+    TOKEN_REQUIRED: 'auth.token.required',
+    TOKEN_INVALID: 'auth.token.invalid',
+    TOKEN_EXPIRED: 'auth.token.expired',
+    TOKEN_REVOKED: 'auth.token.revoked',
+    TOKEN_TOO_LARGE: 'auth.token.too.large',
+    COMPANY_SELECT_SUCCESS: 'auth.company.select.success',
+    COMPANY_SWITCH_SUCCESS: 'auth.company.switch.success',
+    COMPANY_LIST_SUCCESS: 'auth.company.list.success',
+    COMPANY_NO_ACCESS: 'auth.company.no.access',
+    COMPANY_NOT_FOUND: 'auth.company.not.found',
+    COMPANY_REQUIRED: 'auth.company.required',
+    COMPANY_FEATURE_NOT_ENABLED: 'auth.company.feature.not.enabled',
+    BRANCH_LIST_SUCCESS: 'auth.branch.list.success',
+    BRANCH_NO_ACCESS: 'auth.branch.no.access',
+    BRANCH_NOT_FOUND: 'auth.branch.not.found',
+    ME_SUCCESS: 'auth.me.success',
+    EMAIL_NOT_CONFIGURED: 'auth.email.not.configured',
+    EMAIL_SEND_FAILED: 'auth.email.send.failed',
+    SESSION_INVALID: 'auth.session.invalid',
+    SESSION_NOT_AVAILABLE: 'auth.session.not.available',
+    PROFILE_ACCESS_DENIED: 'auth.profile.access.denied',
+    PROFILE_SECTIONS_NOT_SUPPORTED: 'auth.profile.sections.not.supported',
+    LOGOUT_SERVICE_UNAVAILABLE: 'auth.logout.service.unavailable',
+    PASSWORD_RESET_TOKEN_EXPIRED: 'auth.password.reset.token.expired',
+    PASSWORD_RESET_TOKEN_USED: 'auth.password.reset.token.used'
+};
+export const EMAIL_VERIFICATION_MESSAGES = {
+    VERIFICATION_SENT: 'email.verification.sent',
+    VERIFICATION_SUCCESS: 'email.verification.success',
+    VERIFICATION_FAILED: 'email.verification.failed',
+    VERIFICATION_TOKEN_INVALID: 'email.verification.token.invalid',
+    VERIFICATION_TOKEN_EXPIRED: 'email.verification.token.expired',
+    VERIFICATION_NOT_ENABLED: 'email.verification.not.enabled',
+    RESEND_SUCCESS: 'email.verification.resend.success',
+    RESEND_THROTTLED: 'email.verification.resend.throttled'
+};
+export const USER_MESSAGES = {
+    CREATE_SUCCESS: 'user.create.success',
+    CREATE_MANY_SUCCESS: 'user.create.many.success',
+    GET_SUCCESS: 'user.get.success',
+    GET_ALL_SUCCESS: 'user.get.all.success',
+    UPDATE_SUCCESS: 'user.update.success',
+    UPDATE_MANY_SUCCESS: 'user.update.many.success',
+    DELETE_SUCCESS: 'user.delete.success',
+    RESTORE_SUCCESS: 'user.restore.success',
+    NOT_FOUND: 'user.not.found',
+    PROFILE_SUCCESS: 'user.profile.success',
+    PROFILE_UPDATE_SUCCESS: 'user.profile.update.success',
+    PROFILE_EXTRAS_SUCCESS: 'user.profile.extras.success',
+    PROFILE_SECTIONS_SUCCESS: 'user.profile.sections.success',
+    PROFILE_SECTION_DATA_SUCCESS: 'user.profile.section.data.success',
+    PROFILE_SECTION_UPDATE_SUCCESS: 'user.profile.section.update.success',
+    PROFILE_COMPLETION_SUCCESS: 'user.profile.completion.success',
+    EMAIL_VERIFY_SUCCESS: 'user.email.verify.success',
+    PHONE_VERIFY_SUCCESS: 'user.phone.verify.success',
+    STATUS_UPDATE_SUCCESS: 'user.status.update.success'
+};
+export const COMPANY_MESSAGES = {
+    CREATE_SUCCESS: 'company.create.success',
+    CREATE_MANY_SUCCESS: 'company.create.many.success',
+    GET_SUCCESS: 'company.get.success',
+    GET_ALL_SUCCESS: 'company.get.all.success',
+    UPDATE_SUCCESS: 'company.update.success',
+    UPDATE_MANY_SUCCESS: 'company.update.many.success',
+    DELETE_SUCCESS: 'company.delete.success',
+    RESTORE_SUCCESS: 'company.restore.success',
+    NOT_FOUND: 'company.not.found'
+};
+export const BRANCH_MESSAGES = {
+    CREATE_SUCCESS: 'branch.create.success',
+    CREATE_MANY_SUCCESS: 'branch.create.many.success',
+    GET_SUCCESS: 'branch.get.success',
+    GET_ALL_SUCCESS: 'branch.get.all.success',
+    UPDATE_SUCCESS: 'branch.update.success',
+    UPDATE_MANY_SUCCESS: 'branch.update.many.success',
+    DELETE_SUCCESS: 'branch.delete.success',
+    RESTORE_SUCCESS: 'branch.restore.success',
+    NOT_FOUND: 'branch.not.found'
+};
+export const USER_PERMISSION_MESSAGES = {
+    COMPANY_ASSIGN_SUCCESS: 'user.permission.company.assign.success',
+    COMPANY_LIST_SUCCESS: 'user.permission.company.list.success',
+    BRANCH_ASSIGN_SUCCESS: 'user.permission.branch.assign.success',
+    BRANCH_LIST_SUCCESS: 'user.permission.branch.list.success',
+    BATCH_SUCCESS: 'user.permission.batch.success',
+    ALREADY_ASSIGNED: 'user.permission.already.assigned',
+    PERMISSION_NOT_FOUND: 'user.permission.not.found'
+};
+// Aggregated export for backward compatibility
+export const AUTH_MODULE_MESSAGES = {
+    AUTH: AUTH_MESSAGES,
+    EMAIL_VERIFICATION: EMAIL_VERIFICATION_MESSAGES,
+    USER: USER_MESSAGES,
+    COMPANY: COMPANY_MESSAGES,
+    BRANCH: BRANCH_MESSAGES,
+    USER_PERMISSION: USER_PERMISSION_MESSAGES
+};

package/fesm/controllers/authentication.controller.js

@@ -25,6 +25,7 @@ function _ts_param(paramIndex, decorator) {
         decorator(target, key, paramIndex);
     };
 }
+import { AUTH_MESSAGES } from '../config';
 import { CurrentUser } from '@flusys/nestjs-shared/decorators';
 import { MessageResponseDto } from '@flusys/nestjs-shared/dtos';
 import { JwtAuthGuard } from '@flusys/nestjs-shared/guards';
@@ -68,7 +69,10 @@ export class AuthenticationController {
         // Always check cookie first, then body - handles Browser, SSR, and Mobile/API
         const refreshToken = req.cookies?.[cookieName] || refreshTokenDto.refreshToken;
         if (!refreshToken) {
-            throw new UnauthorizedException('Refresh token is required');
+            throw new UnauthorizedException({
+                message: 'Refresh token is required',
+                messageKey: AUTH_MESSAGES.TOKEN_REQUIRED
+            });
         }
         return this.authService.refreshToken(refreshToken);
     }
@@ -79,14 +83,16 @@ export class AuthenticationController {
         await this.authService.logout(userId);
         return {
             success: true,
-            message: 'Logged out successfully'
+            message: 'Logged out successfully',
+            messageKey: AUTH_MESSAGES.LOGOUT_SUCCESS
         };
     }
     async changePassword(userId, dto) {
         await this.authService.changePassword(userId, dto.currentPassword, dto.newPassword);
         return {
             success: true,
-            message: 'Password changed successfully'
+            message: 'Password changed successfully',
+            messageKey: AUTH_MESSAGES.PASSWORD_CHANGE_SUCCESS
         };
     }
     constructor(authService, authConfig){

package/fesm/controllers/branch.controller.js

@@ -31,6 +31,7 @@ import { ApiTags } from '@nestjs/swagger';
 import { CompanyBranchResponseDto, CreateCompanyBranchDto, UpdateCompanyBranchDto } from '../dtos/company-branch.dto';
 import { BranchService } from '../services/branch.service';
 export class BranchController extends createApiController(CreateCompanyBranchDto, UpdateCompanyBranchDto, CompanyBranchResponseDto, {
+    entityName: 'branch',
     security: {
         insert: {
             level: 'permission',

package/fesm/controllers/company-selection.controller.js

@@ -25,6 +25,7 @@ function _ts_param(paramIndex, decorator) {
         decorator(target, key, paramIndex);
     };
 }
+import { AUTH_MESSAGES } from '../config';
 import { CurrentUser } from '@flusys/nestjs-shared/decorators';
 import { Body, Controller, HttpCode, HttpStatus, Inject, Post, UseGuards, UseInterceptors } from '@nestjs/common';
 import { ApiBearerAuth, ApiBody, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
@@ -44,6 +45,7 @@ export class CompanySelectionController {
         return {
             success: true,
             message: 'User companies retrieved successfully',
+            messageKey: AUTH_MESSAGES.COMPANY_LIST_SUCCESS,
             data: companies
         };
     }
@@ -52,6 +54,7 @@ export class CompanySelectionController {
         return {
             success: true,
             message: 'Company branches retrieved successfully',
+            messageKey: AUTH_MESSAGES.BRANCH_LIST_SUCCESS,
             data: branches
         };
     }

package/fesm/controllers/company.controller.js

@@ -31,6 +31,7 @@ import { ApiTags } from '@nestjs/swagger';
 import { CompanyResponseDto, CreateCompanyDto, UpdateCompanyDto } from '../dtos/company.dto';
 import { CompanyService } from '../services/company.service';
 export class CompanyController extends createApiController(CreateCompanyDto, UpdateCompanyDto, CompanyResponseDto, {
+    entityName: 'company',
     security: {
         insert: {
             level: 'permission',

package/fesm/controllers/email-verification.controller.js

@@ -25,6 +25,7 @@ function _ts_param(paramIndex, decorator) {
         decorator(target, key, paramIndex);
     };
 }
+import { EMAIL_VERIFICATION_MESSAGES } from '../config';
 import { MessageResponseDto } from '@flusys/nestjs-shared/dtos';
 import { BadRequestException, Body, Controller, HttpCode, HttpStatus, Inject, Post, Req, UseInterceptors } from '@nestjs/common';
 import { ApiBody, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
@@ -39,7 +40,10 @@ import { AuthenticationService } from '../services/authentication.service';
 export class EmailVerificationController {
     ensureEmailVerificationEnabled() {
         if (!this.dataSourceProvider.isEmailVerificationEnabled()) {
-            throw new BadRequestException('Email verification is not enabled for this tenant');
+            throw new BadRequestException({
+                message: 'Email verification is not enabled for this tenant',
+                messageKey: EMAIL_VERIFICATION_MESSAGES.VERIFICATION_NOT_ENABLED
+            });
         }
     }
     buildAuthUrl(req, path) {
@@ -66,7 +70,8 @@ export class EmailVerificationController {
         }
         return {
             success: true,
-            message: result.message
+            message: result.message,
+            messageKey: result.messageKey
         };
     }
     constructor(authService, authEmailService, authConfig, dataSourceProvider){

package/fesm/controllers/user-permission.controller.js

@@ -26,6 +26,7 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 import { JwtAuthGuard, RequirePermission, USER_PERMISSIONS } from '@flusys/nestjs-shared';
+import { USER_PERMISSION_MESSAGES } from '../config';
 import { Body, Controller, Inject, Post, UseGuards } from '@nestjs/common';
 import { ApiBearerAuth, ApiBody, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
 import { AssignUserBranchDto, AssignUserCompanyDto, UserBranchesResponseDto, UserCompaniesResponseDto } from '../dtos/user-permission.dto';
@@ -40,6 +41,7 @@ export class UserPermissionController {
         return {
             success: true,
             message: 'User companies retrieved successfully',
+            messageKey: USER_PERMISSION_MESSAGES.COMPANY_LIST_SUCCESS,
             data: permissions.map((p)=>({
                     id: p.id,
                     userId: p.userId,
@@ -57,6 +59,7 @@ export class UserPermissionController {
         return {
             success: true,
             message: 'User branches retrieved successfully',
+            messageKey: USER_PERMISSION_MESSAGES.BRANCH_LIST_SUCCESS,
             data: permissions.map((p)=>({
                     id: p.id,
                     userId: p.userId,
@@ -80,7 +83,12 @@ export class UserPermissionController {
         }
         return {
             success: true,
-            message: `Processed ${added} additions and ${removed} removals`
+            message: `Processed ${added} additions and ${removed} removals`,
+            messageKey: USER_PERMISSION_MESSAGES.BATCH_SUCCESS,
+            messageVariables: {
+                added,
+                removed
+            }
         };
     }
     constructor(permissionService){