@flusys/nestjs-auth 4.1.1 → 5.0.0

package/cjs/services/authentication.service.js

@@ -8,17 +8,16 @@ Object.defineProperty(exports, "AuthenticationService", {
         return AuthenticationService;
     }
 });
+const _nestjsshared = require("@flusys/nestjs-shared");
 const _classes = require("@flusys/nestjs-shared/classes");
 const _constants = require("@flusys/nestjs-shared/constants");
-const _nestjsshared = require("@flusys/nestjs-shared");
-const _config = require("../config");
-const _interfaces = require("@flusys/nestjs-shared/interfaces");
 const _enums = require("@flusys/nestjs-shared/enums");
+const _interfaces = require("@flusys/nestjs-shared/interfaces");
 const _utils = require("@flusys/nestjs-shared/utils");
 const _common = require("@nestjs/common");
 const _jwt = require("@nestjs/jwt");
 const _bcrypt = /*#__PURE__*/ _interop_require_wildcard(require("bcrypt"));
-const _userenricherinterface = require("../interfaces/user-enricher.interface");
+const _config = require("../config");
 const _authenticationdto = require("../dtos/authentication.dto");
 const _companybranchentity = require("../entities/company-branch.entity");
 const _companyentity = require("../entities/company.entity");
@@ -26,6 +25,7 @@ const _pendingregistrationentity = require("../entities/pending-registration.ent
 const _usercompanypermissionentity = require("../entities/user-company-permission.entity");
 const _userentity = require("../entities/user.entity");
 const _enums1 = require("../enums");
+const _userenricherinterface = require("../interfaces/user-enricher.interface");
 const _authconfigservice = require("./auth-config.service");
 const _authdatasourceprovider = require("./auth-datasource.provider");
 const _authemailservice = require("./auth-email.service");
@@ -111,7 +111,10 @@ let AuthenticationService = class AuthenticationService {
         if (!this.dataSourceProvider) {
             throw new _common.InternalServerErrorException({
                 message: 'User repository not available',
-                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE
+                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE,
+                messageVariables: {
+                    entity: 'User'
+                }
             });
         }
         return this.dataSourceProvider.getRepository(_userentity.User);
@@ -139,7 +142,7 @@ let AuthenticationService = class AuthenticationService {
         }
         const user = await this.validateUser(email, password);
         if (!user.isActive) {
-            throw new _common.UnauthorizedException({
+            throw new _common.ForbiddenException({
                 message: 'User account is deactivated',
                 messageKey: _config.AUTH_MESSAGES.LOGIN_ACCOUNT_DEACTIVATED
             });
@@ -252,7 +255,10 @@ let AuthenticationService = class AuthenticationService {
         if (!permissionRepository || !companyRepository) {
             throw new _common.BadRequestException({
                 message: 'Company feature repositories not available',
-                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE
+                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE,
+                messageVariables: {
+                    entity: 'Company feature'
+                }
             });
         }
         if (dto.companySlug) {
@@ -385,7 +391,10 @@ let AuthenticationService = class AuthenticationService {
         if (!companyRepository || !branchRepository || !permissionRepository) {
             if (throwOnUnavailable) throw new _common.BadRequestException({
                 message: 'Company feature repositories not available',
-                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE
+                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE,
+                messageVariables: {
+                    entity: 'Company feature'
+                }
             });
             return this.generateRegistrationResponse(user);
         }
@@ -520,7 +529,10 @@ let AuthenticationService = class AuthenticationService {
         if (!permissionRepository || !companyRepository || !branchRepository) {
             throw new _common.BadRequestException({
                 message: 'Repositories not available',
-                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE
+                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE,
+                messageVariables: {
+                    entity: 'Some'
+                }
             });
         }
         const hasCompanyAccess = await permissionRepository.findOne({
@@ -531,7 +543,7 @@ let AuthenticationService = class AuthenticationService {
             }
         });
         if (!hasCompanyAccess) {
-            throw new _common.UnauthorizedException({
+            throw new _common.ForbiddenException({
                 message: 'No access to this company',
                 messageKey: _config.AUTH_MESSAGES.COMPANY_NO_ACCESS
             });
@@ -543,7 +555,7 @@ let AuthenticationService = class AuthenticationService {
             }
         });
         if (!company) {
-            throw new _common.UnauthorizedException({
+            throw new _common.NotFoundException({
                 message: 'Company not found or inactive',
                 messageKey: _config.AUTH_MESSAGES.COMPANY_NOT_FOUND
             });
@@ -556,7 +568,7 @@ let AuthenticationService = class AuthenticationService {
             }
         });
         if (!hasBranchAccess) {
-            throw new _common.UnauthorizedException({
+            throw new _common.ForbiddenException({
                 message: 'No access to this branch',
                 messageKey: _config.AUTH_MESSAGES.BRANCH_NO_ACCESS
             });
@@ -569,7 +581,7 @@ let AuthenticationService = class AuthenticationService {
             }
         });
         if (!branch) {
-            throw new _common.UnauthorizedException({
+            throw new _common.NotFoundException({
                 message: 'Branch not found or inactive',
                 messageKey: _config.AUTH_MESSAGES.BRANCH_NOT_FOUND
             });
@@ -599,6 +611,72 @@ let AuthenticationService = class AuthenticationService {
                     messageKey: _config.AUTH_MESSAGES.TOKEN_INVALID
                 });
             }
+            if (payload.companyId) {
+                const companyRepository = await this.getCompanyRepository();
+                const permissionRepository = await this.getPermissionRepository();
+                if (companyRepository) {
+                    const company = await companyRepository.findOne({
+                        where: {
+                            id: payload.companyId,
+                            isActive: true
+                        }
+                    });
+                    if (!company) {
+                        throw new _common.UnauthorizedException({
+                            message: 'Company not found or inactive',
+                            messageKey: _config.AUTH_MESSAGES.COMPANY_NOT_FOUND
+                        });
+                    }
+                }
+                if (permissionRepository) {
+                    const hasCompanyAccess = await permissionRepository.findOne({
+                        where: {
+                            userId: user.id,
+                            permissionType: _enums1.PermissionType.COMPANY,
+                            targetId: payload.companyId
+                        }
+                    });
+                    if (!hasCompanyAccess) {
+                        throw new _common.UnauthorizedException({
+                            message: 'No access to this company',
+                            messageKey: _config.AUTH_MESSAGES.COMPANY_NO_ACCESS
+                        });
+                    }
+                }
+                if (payload.branchId) {
+                    const branchRepository = await this.getBranchRepository();
+                    if (branchRepository) {
+                        const branch = await branchRepository.findOne({
+                            where: {
+                                id: payload.branchId,
+                                companyId: payload.companyId,
+                                isActive: true
+                            }
+                        });
+                        if (!branch) {
+                            throw new _common.UnauthorizedException({
+                                message: 'Branch not found or inactive',
+                                messageKey: _config.AUTH_MESSAGES.BRANCH_NOT_FOUND
+                            });
+                        }
+                    }
+                    if (permissionRepository) {
+                        const hasBranchAccess = await permissionRepository.findOne({
+                            where: {
+                                userId: user.id,
+                                permissionType: _enums1.PermissionType.BRANCH,
+                                targetId: payload.branchId
+                            }
+                        });
+                        if (!hasBranchAccess) {
+                            throw new _common.UnauthorizedException({
+                                message: 'No access to this branch',
+                                messageKey: _config.AUTH_MESSAGES.BRANCH_NO_ACCESS
+                            });
+                        }
+                    }
+                }
+            }
             return this.generateTokens({
                 id: user.id,
                 email: user.email,
@@ -687,7 +765,10 @@ let AuthenticationService = class AuthenticationService {
         if (!permissionRepository || !companyRepository) {
             throw new _common.BadRequestException({
                 message: 'Repositories not available',
-                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE
+                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE,
+                messageVariables: {
+                    entity: 'Some'
+                }
             });
         }
         const permissions = await permissionRepository.find({
@@ -711,7 +792,10 @@ let AuthenticationService = class AuthenticationService {
         if (!permissionRepository || !branchRepository) {
             throw new _common.BadRequestException({
                 message: 'Repositories not available',
-                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE
+                messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE,
+                messageVariables: {
+                    entity: 'Some'
+                }
             });
         }
         const companyPermission = await permissionRepository.findOne({

package/cjs/services/user-permission.service.js

@@ -63,7 +63,7 @@ let UserPermissionService = class UserPermissionService {
             }
         });
     }
-    /** Assign permission to user */ async assignPermission(userId, targetId, type, metadata) {
+    /** Assign permission to user */ async assignPermission(userId, targetId, type) {
         const repository = await this.getRepository();
         const typeName = type === _usercompanypermissionentity.PermissionType.COMPANY ? 'company' : 'branch';
         const existing = await repository.findOne({
@@ -77,7 +77,7 @@ let UserPermissionService = class UserPermissionService {
             throw new _common.ConflictException({
                 message: `User already assigned to this ${typeName}`,
                 messageKey: _config.USER_PERMISSION_MESSAGES.ALREADY_ASSIGNED,
-                messageParams: {
+                messageVariables: {
                     type: typeName
                 }
             });
@@ -86,8 +86,7 @@ let UserPermissionService = class UserPermissionService {
             await repository.save(repository.create({
                 userId,
                 permissionType: type,
-                targetId,
-                metadata
+                targetId
             }));
         } catch (error) {
             const err = error;
@@ -95,7 +94,7 @@ let UserPermissionService = class UserPermissionService {
                 throw new _common.ConflictException({
                     message: `User already assigned to this ${typeName}. Please refresh and try again.`,
                     messageKey: _config.USER_PERMISSION_MESSAGES.ALREADY_ASSIGNED,
-                    messageParams: {
+                    messageVariables: {
                         type: typeName
                     }
                 });
@@ -117,7 +116,7 @@ let UserPermissionService = class UserPermissionService {
             throw new _common.NotFoundException({
                 message: `${typeName.charAt(0).toUpperCase() + typeName.slice(1)} permission not found`,
                 messageKey: _config.USER_PERMISSION_MESSAGES.PERMISSION_NOT_FOUND,
-                messageParams: {
+                messageVariables: {
                     type: typeName.charAt(0).toUpperCase() + typeName.slice(1)
                 }
             });
@@ -157,8 +156,7 @@ _ts_decorate([
     _ts_metadata("design:paramtypes", [
         String,
         String,
-        typeof _usercompanypermissionentity.PermissionType === "undefined" ? Object : _usercompanypermissionentity.PermissionType,
-        typeof Record === "undefined" ? Object : Record
+        typeof _usercompanypermissionentity.PermissionType === "undefined" ? Object : _usercompanypermissionentity.PermissionType
     ]),
     _ts_metadata("design:returntype", Promise)
 ], UserPermissionService.prototype, "assignPermission", null);

package/cjs/services/user.service.js

@@ -8,21 +8,21 @@ Object.defineProperty(exports, "UserService", {
         return UserService;
     }
 });
-const _classes = require("@flusys/nestjs-shared/classes");
 const _nestjsshared = require("@flusys/nestjs-shared");
+const _classes = require("@flusys/nestjs-shared/classes");
+const _constants = require("@flusys/nestjs-shared/constants");
 const _interfaces = require("@flusys/nestjs-shared/interfaces");
 const _modules = require("@flusys/nestjs-shared/modules");
 const _common = require("@nestjs/common");
-const _constants = require("@flusys/nestjs-shared/constants");
-const _config = require("../config");
 const _bcrypt = /*#__PURE__*/ _interop_require_wildcard(require("bcrypt"));
-const _authconfigservice = require("./auth-config.service");
-const _authdatasourceprovider = require("./auth-datasource.provider");
+const _config = require("../config");
 const _userdto = require("../dtos/user.dto");
-const _enums = require("../enums");
-const _userenricherinterface = require("../interfaces/user-enricher.interface");
 const _usercompanypermissionentity = require("../entities/user-company-permission.entity");
 const _userentity = require("../entities/user.entity");
+const _enums = require("../enums");
+const _userenricherinterface = require("../interfaces/user-enricher.interface");
+const _authconfigservice = require("./auth-config.service");
+const _authdatasourceprovider = require("./auth-datasource.provider");
 function _define_property(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
@@ -113,7 +113,7 @@ let UserService = class UserService extends _classes.RequestScopedApiService {
     async getUserForProfile(userId, user) {
         if (userId !== user.id) {
             throw new _common.ForbiddenException({
-                message: 'Cannot access another user\'s profile',
+                message: "Cannot access another user's profile",
                 messageKey: _config.AUTH_MESSAGES.PROFILE_ACCESS_DENIED
             });
         }
@@ -167,7 +167,10 @@ let UserService = class UserService extends _classes.RequestScopedApiService {
             if (!permission) {
                 throw new _common.NotFoundException({
                     message: 'User company permission not found',
-                    messageKey: _config.USER_PERMISSION_MESSAGES.PERMISSION_NOT_FOUND
+                    messageKey: _config.USER_PERMISSION_MESSAGES.PERMISSION_NOT_FOUND,
+                    messageVariables: {
+                        type: 'User company'
+                    }
                 });
             }
             permission.isActive = isActive;

package/cjs/strategies/jwt.strategy.js

@@ -10,10 +10,10 @@ Object.defineProperty(exports, "JwtStrategy", {
 });
 const _constants = require("@flusys/nestjs-shared/constants");
 const _common = require("@nestjs/common");
-const _config = require("../config");
 const _core = require("@nestjs/core");
 const _passport = require("@nestjs/passport");
 const _passportjwt = require("passport-jwt");
+const _config = require("../config");
 const _userentity = require("../entities/user.entity");
 const _authconfigservice = require("../services/auth-config.service");
 const _authdatasourceprovider = require("../services/auth-datasource.provider");
@@ -72,12 +72,19 @@ let JwtStrategy = class JwtStrategy extends (0, _passport.PassportStrategy)(_pas
         } catch  {
             throw new _common.UnauthorizedException({
                 message: 'Unable to access user data',
-                messageKey: _constants.SYSTEM_MESSAGES.SERVICE_NOT_AVAILABLE
+                messageKey: _constants.SYSTEM_MESSAGES.SERVICE_NOT_AVAILABLE,
+                messageVariables: {
+                    provider: 'DataSourceProvider',
+                    available: ''
+                }
             });
         }
         throw new _common.UnauthorizedException({
             message: 'User repository not available',
-            messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE
+            messageKey: _constants.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE,
+            messageVariables: {
+                entity: 'User'
+            }
         });
     }
     async checkTokenRevocation(payload) {

package/config/message-keys.d.ts

@@ -1,30 +1,28 @@
 export declare const AUTH_MESSAGES: {
     readonly LOGIN_SUCCESS: "auth.login.success";
-    readonly LOGIN_FAILED: "auth.login.failed";
+    readonly LOGIN_REQUIRES_SELECTION: "auth.login.requires.selection";
     readonly LOGIN_INVALID_CREDENTIALS: "auth.login.invalid.credentials";
     readonly LOGIN_EMAIL_NOT_VERIFIED: "auth.login.email.not.verified";
-    readonly LOGIN_REQUIRES_SELECTION: "auth.login.requires.selection";
     readonly LOGIN_ACCOUNT_DEACTIVATED: "auth.login.account.deactivated";
     readonly LOGOUT_SUCCESS: "auth.logout.success";
     readonly REGISTER_SUCCESS: "auth.register.success";
     readonly REGISTER_FAILED: "auth.register.failed";
+    readonly REFRESH_SUCCESS: "auth.refresh.success";
+    readonly ME_SUCCESS: "auth.me.success";
+    readonly SELECT_SUCCESS: "auth.select.success";
+    readonly SWITCH_COMPANY_SUCCESS: "auth.switch.company.success";
     readonly REGISTER_EMAIL_EXISTS: "auth.register.email.exists";
     readonly REGISTER_COMPANY_ALREADY_ASSIGNED: "auth.register.company.already.assigned";
     readonly PASSWORD_CHANGE_SUCCESS: "auth.password.change.success";
-    readonly PASSWORD_CHANGE_FAILED: "auth.password.change.failed";
     readonly PASSWORD_CHANGE_INVALID_CURRENT: "auth.password.change.invalid.current";
     readonly PASSWORD_CHANGE_CURRENT_REQUIRED: "auth.password.change.current.required";
     readonly PASSWORD_RESET_EMAIL_SENT: "auth.password.reset.email.sent";
     readonly PASSWORD_RESET_SUCCESS: "auth.password.reset.success";
-    readonly PASSWORD_RESET_FAILED: "auth.password.reset.failed";
-    readonly TOKEN_REFRESH_SUCCESS: "auth.token.refresh.success";
     readonly TOKEN_REQUIRED: "auth.token.required";
     readonly TOKEN_INVALID: "auth.token.invalid";
     readonly TOKEN_EXPIRED: "auth.token.expired";
     readonly TOKEN_REVOKED: "auth.token.revoked";
     readonly TOKEN_TOO_LARGE: "auth.token.too.large";
-    readonly COMPANY_SELECT_SUCCESS: "auth.company.select.success";
-    readonly COMPANY_SWITCH_SUCCESS: "auth.company.switch.success";
     readonly COMPANY_LIST_SUCCESS: "auth.company.list.success";
     readonly COMPANY_NO_ACCESS: "auth.company.no.access";
     readonly COMPANY_NOT_FOUND: "auth.company.not.found";
@@ -33,7 +31,6 @@ export declare const AUTH_MESSAGES: {
     readonly BRANCH_LIST_SUCCESS: "auth.branch.list.success";
     readonly BRANCH_NO_ACCESS: "auth.branch.no.access";
     readonly BRANCH_NOT_FOUND: "auth.branch.not.found";
-    readonly ME_SUCCESS: "auth.me.success";
     readonly EMAIL_NOT_CONFIGURED: "auth.email.not.configured";
     readonly EMAIL_SEND_FAILED: "auth.email.send.failed";
     readonly SESSION_INVALID: "auth.session.invalid";
@@ -47,24 +44,13 @@ export declare const AUTH_MESSAGES: {
 export declare const EMAIL_VERIFICATION_MESSAGES: {
     readonly VERIFICATION_SENT: "email.verification.sent";
     readonly VERIFICATION_SUCCESS: "email.verification.success";
-    readonly VERIFICATION_FAILED: "email.verification.failed";
     readonly VERIFICATION_TOKEN_INVALID: "email.verification.token.invalid";
     readonly VERIFICATION_TOKEN_EXPIRED: "email.verification.token.expired";
     readonly VERIFICATION_NOT_ENABLED: "email.verification.not.enabled";
     readonly RESEND_SUCCESS: "email.verification.resend.success";
-    readonly RESEND_THROTTLED: "email.verification.resend.throttled";
 };
 export declare const USER_MESSAGES: {
-    readonly CREATE_SUCCESS: "user.create.success";
-    readonly CREATE_MANY_SUCCESS: "user.create.many.success";
-    readonly GET_SUCCESS: "user.get.success";
-    readonly GET_ALL_SUCCESS: "user.get.all.success";
-    readonly UPDATE_SUCCESS: "user.update.success";
-    readonly UPDATE_MANY_SUCCESS: "user.update.many.success";
-    readonly DELETE_SUCCESS: "user.delete.success";
-    readonly RESTORE_SUCCESS: "user.restore.success";
     readonly NOT_FOUND: "user.not.found";
-    readonly PROFILE_SUCCESS: "user.profile.success";
     readonly PROFILE_UPDATE_SUCCESS: "user.profile.update.success";
     readonly PROFILE_EXTRAS_SUCCESS: "user.profile.extras.success";
     readonly PROFILE_SECTIONS_SUCCESS: "user.profile.sections.success";
@@ -75,144 +61,10 @@ export declare const USER_MESSAGES: {
     readonly PHONE_VERIFY_SUCCESS: "user.phone.verify.success";
     readonly STATUS_UPDATE_SUCCESS: "user.status.update.success";
 };
-export declare const COMPANY_MESSAGES: {
-    readonly CREATE_SUCCESS: "company.create.success";
-    readonly CREATE_MANY_SUCCESS: "company.create.many.success";
-    readonly GET_SUCCESS: "company.get.success";
-    readonly GET_ALL_SUCCESS: "company.get.all.success";
-    readonly UPDATE_SUCCESS: "company.update.success";
-    readonly UPDATE_MANY_SUCCESS: "company.update.many.success";
-    readonly DELETE_SUCCESS: "company.delete.success";
-    readonly RESTORE_SUCCESS: "company.restore.success";
-    readonly NOT_FOUND: "company.not.found";
-};
-export declare const BRANCH_MESSAGES: {
-    readonly CREATE_SUCCESS: "branch.create.success";
-    readonly CREATE_MANY_SUCCESS: "branch.create.many.success";
-    readonly GET_SUCCESS: "branch.get.success";
-    readonly GET_ALL_SUCCESS: "branch.get.all.success";
-    readonly UPDATE_SUCCESS: "branch.update.success";
-    readonly UPDATE_MANY_SUCCESS: "branch.update.many.success";
-    readonly DELETE_SUCCESS: "branch.delete.success";
-    readonly RESTORE_SUCCESS: "branch.restore.success";
-    readonly NOT_FOUND: "branch.not.found";
-};
 export declare const USER_PERMISSION_MESSAGES: {
-    readonly COMPANY_ASSIGN_SUCCESS: "user.permission.company.assign.success";
     readonly COMPANY_LIST_SUCCESS: "user.permission.company.list.success";
-    readonly BRANCH_ASSIGN_SUCCESS: "user.permission.branch.assign.success";
     readonly BRANCH_LIST_SUCCESS: "user.permission.branch.list.success";
     readonly BATCH_SUCCESS: "user.permission.batch.success";
     readonly ALREADY_ASSIGNED: "user.permission.already.assigned";
     readonly PERMISSION_NOT_FOUND: "user.permission.not.found";
 };
-export declare const AUTH_MODULE_MESSAGES: {
-    readonly AUTH: {
-        readonly LOGIN_SUCCESS: "auth.login.success";
-        readonly LOGIN_FAILED: "auth.login.failed";
-        readonly LOGIN_INVALID_CREDENTIALS: "auth.login.invalid.credentials";
-        readonly LOGIN_EMAIL_NOT_VERIFIED: "auth.login.email.not.verified";
-        readonly LOGIN_REQUIRES_SELECTION: "auth.login.requires.selection";
-        readonly LOGIN_ACCOUNT_DEACTIVATED: "auth.login.account.deactivated";
-        readonly LOGOUT_SUCCESS: "auth.logout.success";
-        readonly REGISTER_SUCCESS: "auth.register.success";
-        readonly REGISTER_FAILED: "auth.register.failed";
-        readonly REGISTER_EMAIL_EXISTS: "auth.register.email.exists";
-        readonly REGISTER_COMPANY_ALREADY_ASSIGNED: "auth.register.company.already.assigned";
-        readonly PASSWORD_CHANGE_SUCCESS: "auth.password.change.success";
-        readonly PASSWORD_CHANGE_FAILED: "auth.password.change.failed";
-        readonly PASSWORD_CHANGE_INVALID_CURRENT: "auth.password.change.invalid.current";
-        readonly PASSWORD_CHANGE_CURRENT_REQUIRED: "auth.password.change.current.required";
-        readonly PASSWORD_RESET_EMAIL_SENT: "auth.password.reset.email.sent";
-        readonly PASSWORD_RESET_SUCCESS: "auth.password.reset.success";
-        readonly PASSWORD_RESET_FAILED: "auth.password.reset.failed";
-        readonly TOKEN_REFRESH_SUCCESS: "auth.token.refresh.success";
-        readonly TOKEN_REQUIRED: "auth.token.required";
-        readonly TOKEN_INVALID: "auth.token.invalid";
-        readonly TOKEN_EXPIRED: "auth.token.expired";
-        readonly TOKEN_REVOKED: "auth.token.revoked";
-        readonly TOKEN_TOO_LARGE: "auth.token.too.large";
-        readonly COMPANY_SELECT_SUCCESS: "auth.company.select.success";
-        readonly COMPANY_SWITCH_SUCCESS: "auth.company.switch.success";
-        readonly COMPANY_LIST_SUCCESS: "auth.company.list.success";
-        readonly COMPANY_NO_ACCESS: "auth.company.no.access";
-        readonly COMPANY_NOT_FOUND: "auth.company.not.found";
-        readonly COMPANY_REQUIRED: "auth.company.required";
-        readonly COMPANY_FEATURE_NOT_ENABLED: "auth.company.feature.not.enabled";
-        readonly BRANCH_LIST_SUCCESS: "auth.branch.list.success";
-        readonly BRANCH_NO_ACCESS: "auth.branch.no.access";
-        readonly BRANCH_NOT_FOUND: "auth.branch.not.found";
-        readonly ME_SUCCESS: "auth.me.success";
-        readonly EMAIL_NOT_CONFIGURED: "auth.email.not.configured";
-        readonly EMAIL_SEND_FAILED: "auth.email.send.failed";
-        readonly SESSION_INVALID: "auth.session.invalid";
-        readonly SESSION_NOT_AVAILABLE: "auth.session.not.available";
-        readonly PROFILE_ACCESS_DENIED: "auth.profile.access.denied";
-        readonly PROFILE_SECTIONS_NOT_SUPPORTED: "auth.profile.sections.not.supported";
-        readonly LOGOUT_SERVICE_UNAVAILABLE: "auth.logout.service.unavailable";
-        readonly PASSWORD_RESET_TOKEN_EXPIRED: "auth.password.reset.token.expired";
-        readonly PASSWORD_RESET_TOKEN_USED: "auth.password.reset.token.used";
-    };
-    readonly EMAIL_VERIFICATION: {
-        readonly VERIFICATION_SENT: "email.verification.sent";
-        readonly VERIFICATION_SUCCESS: "email.verification.success";
-        readonly VERIFICATION_FAILED: "email.verification.failed";
-        readonly VERIFICATION_TOKEN_INVALID: "email.verification.token.invalid";
-        readonly VERIFICATION_TOKEN_EXPIRED: "email.verification.token.expired";
-        readonly VERIFICATION_NOT_ENABLED: "email.verification.not.enabled";
-        readonly RESEND_SUCCESS: "email.verification.resend.success";
-        readonly RESEND_THROTTLED: "email.verification.resend.throttled";
-    };
-    readonly USER: {
-        readonly CREATE_SUCCESS: "user.create.success";
-        readonly CREATE_MANY_SUCCESS: "user.create.many.success";
-        readonly GET_SUCCESS: "user.get.success";
-        readonly GET_ALL_SUCCESS: "user.get.all.success";
-        readonly UPDATE_SUCCESS: "user.update.success";
-        readonly UPDATE_MANY_SUCCESS: "user.update.many.success";
-        readonly DELETE_SUCCESS: "user.delete.success";
-        readonly RESTORE_SUCCESS: "user.restore.success";
-        readonly NOT_FOUND: "user.not.found";
-        readonly PROFILE_SUCCESS: "user.profile.success";
-        readonly PROFILE_UPDATE_SUCCESS: "user.profile.update.success";
-        readonly PROFILE_EXTRAS_SUCCESS: "user.profile.extras.success";
-        readonly PROFILE_SECTIONS_SUCCESS: "user.profile.sections.success";
-        readonly PROFILE_SECTION_DATA_SUCCESS: "user.profile.section.data.success";
-        readonly PROFILE_SECTION_UPDATE_SUCCESS: "user.profile.section.update.success";
-        readonly PROFILE_COMPLETION_SUCCESS: "user.profile.completion.success";
-        readonly EMAIL_VERIFY_SUCCESS: "user.email.verify.success";
-        readonly PHONE_VERIFY_SUCCESS: "user.phone.verify.success";
-        readonly STATUS_UPDATE_SUCCESS: "user.status.update.success";
-    };
-    readonly COMPANY: {
-        readonly CREATE_SUCCESS: "company.create.success";
-        readonly CREATE_MANY_SUCCESS: "company.create.many.success";
-        readonly GET_SUCCESS: "company.get.success";
-        readonly GET_ALL_SUCCESS: "company.get.all.success";
-        readonly UPDATE_SUCCESS: "company.update.success";
-        readonly UPDATE_MANY_SUCCESS: "company.update.many.success";
-        readonly DELETE_SUCCESS: "company.delete.success";
-        readonly RESTORE_SUCCESS: "company.restore.success";
-        readonly NOT_FOUND: "company.not.found";
-    };
-    readonly BRANCH: {
-        readonly CREATE_SUCCESS: "branch.create.success";
-        readonly CREATE_MANY_SUCCESS: "branch.create.many.success";
-        readonly GET_SUCCESS: "branch.get.success";
-        readonly GET_ALL_SUCCESS: "branch.get.all.success";
-        readonly UPDATE_SUCCESS: "branch.update.success";
-        readonly UPDATE_MANY_SUCCESS: "branch.update.many.success";
-        readonly DELETE_SUCCESS: "branch.delete.success";
-        readonly RESTORE_SUCCESS: "branch.restore.success";
-        readonly NOT_FOUND: "branch.not.found";
-    };
-    readonly USER_PERMISSION: {
-        readonly COMPANY_ASSIGN_SUCCESS: "user.permission.company.assign.success";
-        readonly COMPANY_LIST_SUCCESS: "user.permission.company.list.success";
-        readonly BRANCH_ASSIGN_SUCCESS: "user.permission.branch.assign.success";
-        readonly BRANCH_LIST_SUCCESS: "user.permission.branch.list.success";
-        readonly BATCH_SUCCESS: "user.permission.batch.success";
-        readonly ALREADY_ASSIGNED: "user.permission.already.assigned";
-        readonly PERMISSION_NOT_FOUND: "user.permission.not.found";
-    };
-};

package/controllers/authentication.controller.d.ts

@@ -1,4 +1,4 @@
-import { MessageResponseDto } from '@flusys/nestjs-shared/dtos';
+import { MessageResponseDto, SingleResponseDto } from '@flusys/nestjs-shared/dtos';
 import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
 import { Request } from 'express';
 import { ChangePasswordDto, CompanySelectionResponseDto, LoginDto, LoginResponseDto, LoginResponseRequiresEmailVerificationDto, MeResponseDto, RefreshTokenDto, RegistrationDto, RegistrationResponseDto } from '../dtos/authentication.dto';
@@ -8,13 +8,12 @@ export declare class AuthenticationController {
     private readonly authService;
     private readonly authConfig?;
     constructor(authService: AuthenticationService, authConfig?: AuthConfigService);
-    private buildAuthUrl;
-    login(loginDto: LoginDto): Promise<LoginResponseDto | CompanySelectionResponseDto | LoginResponseRequiresEmailVerificationDto>;
-    register(req: Request, registrationDto: RegistrationDto): Promise<RegistrationResponseDto>;
-    refreshToken(req: Request, refreshTokenDto: RefreshTokenDto): Promise<{
+    login(loginDto: LoginDto): Promise<SingleResponseDto<LoginResponseDto | CompanySelectionResponseDto | LoginResponseRequiresEmailVerificationDto>>;
+    register(req: Request, registrationDto: RegistrationDto): Promise<SingleResponseDto<RegistrationResponseDto>>;
+    refreshToken(req: Request, refreshTokenDto: RefreshTokenDto): Promise<SingleResponseDto<{
         accessToken: string;
-    }>;
-    getCurrentUser(user: ILoggedUserInfo): Promise<MeResponseDto>;
+    }>>;
+    getCurrentUser(user: ILoggedUserInfo): Promise<SingleResponseDto<MeResponseDto>>;
     logout(userId: string): Promise<MessageResponseDto>;
     changePassword(userId: string, dto: ChangePasswordDto): Promise<MessageResponseDto>;
 }

package/controllers/company-selection.controller.d.ts

@@ -1,10 +1,11 @@
+import { SingleResponseDto } from '@flusys/nestjs-shared/dtos';
 import { LoginResponseDto, SelectDto, SwitchCompanyDto } from '../dtos/authentication.dto';
 import { AuthenticationService } from '../services/authentication.service';
 export declare class CompanySelectionController {
     private readonly authService;
     constructor(authService: AuthenticationService);
-    select(dto: SelectDto): Promise<LoginResponseDto>;
-    switchCompany(userId: string, dto: SwitchCompanyDto): Promise<LoginResponseDto>;
+    select(dto: SelectDto): Promise<SingleResponseDto<LoginResponseDto>>;
+    switchCompany(userId: string, dto: SwitchCompanyDto): Promise<SingleResponseDto<LoginResponseDto>>;
     getUserCompanies(userId: string): Promise<{
         success: boolean;
         message: string;

package/controllers/email-verification.controller.d.ts

@@ -12,9 +12,13 @@ export declare class EmailVerificationController {
     private readonly dataSourceProvider;
     constructor(authService: AuthenticationService, authEmailService: AuthEmailService, authConfig: AuthConfigService, dataSourceProvider: AuthDataSourceProvider);
     private ensureEmailVerificationEnabled;
-    private buildAuthUrl;
     forgotPassword(req: Request, dto: ForgotPasswordDto): Promise<MessageResponseDto>;
     resetPassword(dto: ResetPasswordDto): Promise<MessageResponseDto>;
     resendVerification(req: Request, dto: ResendVerificationDto): Promise<MessageResponseDto>;
-    verifyEmail(dto: VerifyEmailDto): Promise<MessageResponseDto | RegistrationResponseDto>;
+    verifyEmail(dto: VerifyEmailDto): Promise<MessageResponseDto | {
+        success: boolean;
+        message: string;
+        messageKey: string;
+        data: RegistrationResponseDto;
+    }>;
 }

package/dtos/authentication.dto.d.ts

@@ -91,8 +91,6 @@ export declare class CompanySelectionResponseDto {
 export declare class LoginResponseRequiresEmailVerificationDto {
     requiresEmailVerification: true;
     email: string;
-    message: string;
-    messageKey: string;
 }
 export declare class ForgotPasswordDto {
     email: string;

package/entities/user-company-permission.entity.d.ts

@@ -9,7 +9,6 @@ export declare class UserCompanyPermission {
     user?: User;
     permissionType: string;
     targetId: string;
-    metadata?: Record<string, any>;
     isActive: boolean;
     company?: Company;
     branch?: CompanyBranch;

package/entities/user-token.entity.d.ts

@@ -10,6 +10,5 @@ export declare class UserToken {
     token: string;
     expiresAt: Date;
     usedAt: Date | null;
-    metadata: string | null;
     createdAt: Date;
 }