@flusys/nestjs-auth 6.0.1 → 6.1.0

package/cjs/services/authentication.service.js

@@ -25,6 +25,7 @@ const _companyentity = require("../entities/company.entity");
 const _pendingregistrationentity = require("../entities/pending-registration.entity");
 const _usercompanypermissionentity = require("../entities/user-company-permission.entity");
 const _enums1 = require("../enums");
+const _helpers = require("../helpers");
 const _userenricherinterface = require("../interfaces/user-enricher.interface");
 const _authconfigservice = require("./auth-config.service");
 const _authdatasourceprovider = require("./auth-datasource.provider");
@@ -119,17 +120,9 @@ let AuthenticationService = class AuthenticationService {
         }
         return this.dataSourceProvider.getRepository(_appuserentity.AppUser);
     }
-    async getPermissionRepository() {
+    async getCompanyScopedRepository(entity) {
         if (!this.isCompanyFeatureEnabled() || !this.dataSourceProvider) return null;
-        return this.dataSourceProvider.getRepository(_usercompanypermissionentity.UserCompanyPermission);
-    }
-    async getCompanyRepository() {
-        if (!this.isCompanyFeatureEnabled() || !this.dataSourceProvider) return null;
-        return this.dataSourceProvider.getRepository(_companyentity.Company);
-    }
-    async getBranchRepository() {
-        if (!this.isCompanyFeatureEnabled() || !this.dataSourceProvider) return null;
-        return this.dataSourceProvider.getRepository(_companybranchentity.CompanyBranch);
+        return this.dataSourceProvider.getRepository(entity);
     }
     async login(email, password) {
         if (this.isEmailVerificationEnabled() && await this.authEmailService.hasPendingRegistration(email)) {
@@ -161,8 +154,8 @@ let AuthenticationService = class AuthenticationService {
         return await this.handleCompanyBasedLogin(user);
     }
     async handleCompanyBasedLogin(user) {
-        const permissionRepository = await this.getPermissionRepository();
-        const branchRepository = await this.getBranchRepository();
+        const permissionRepository = await this.getCompanyScopedRepository(_usercompanypermissionentity.UserCompanyPermission);
+        const branchRepository = await this.getCompanyScopedRepository(_companybranchentity.CompanyBranch);
         if (!permissionRepository || !branchRepository) {
             return this.generateLoginResponse(user);
         }
@@ -172,7 +165,7 @@ let AuthenticationService = class AuthenticationService {
                 permissionType: _enums1.PermissionType.COMPANY
             }
         });
-        const companyRepository = await this.getCompanyRepository();
+        const companyRepository = await this.getCompanyScopedRepository(_companyentity.Company);
         if (!companyRepository) {
             return this.generateLoginResponse(user);
         }
@@ -250,8 +243,8 @@ let AuthenticationService = class AuthenticationService {
                 messageKey: _config.AUTH_MESSAGES.REGISTER_EMAIL_EXISTS
             });
         }
-        const permissionRepository = await this.getPermissionRepository();
-        const companyRepository = await this.getCompanyRepository();
+        const permissionRepository = await this.getCompanyScopedRepository(_usercompanypermissionentity.UserCompanyPermission);
+        const companyRepository = await this.getCompanyScopedRepository(_companyentity.Company);
         if (!permissionRepository || !companyRepository) {
             throw new _common.BadRequestException({
                 message: 'Company feature repositories not available',
@@ -385,9 +378,9 @@ let AuthenticationService = class AuthenticationService {
         }
     }
     async processCompanyRegistration(user, data, throwOnUnavailable = false) {
-        const companyRepository = await this.getCompanyRepository();
-        const branchRepository = await this.getBranchRepository();
-        const permissionRepository = await this.getPermissionRepository();
+        const companyRepository = await this.getCompanyScopedRepository(_companyentity.Company);
+        const branchRepository = await this.getCompanyScopedRepository(_companybranchentity.CompanyBranch);
+        const permissionRepository = await this.getCompanyScopedRepository(_usercompanypermissionentity.UserCompanyPermission);
         if (!companyRepository || !branchRepository || !permissionRepository) {
             if (throwOnUnavailable) throw new _common.BadRequestException({
                 message: 'Company feature repositories not available',
@@ -523,9 +516,9 @@ let AuthenticationService = class AuthenticationService {
                 messageKey: _config.USER_MESSAGES.NOT_FOUND
             });
         }
-        const permissionRepository = await this.getPermissionRepository();
-        const companyRepository = await this.getCompanyRepository();
-        const branchRepository = await this.getBranchRepository();
+        const permissionRepository = await this.getCompanyScopedRepository(_usercompanypermissionentity.UserCompanyPermission);
+        const companyRepository = await this.getCompanyScopedRepository(_companyentity.Company);
+        const branchRepository = await this.getCompanyScopedRepository(_companybranchentity.CompanyBranch);
         if (!permissionRepository || !companyRepository || !branchRepository) {
             throw new _common.BadRequestException({
                 message: 'Repositories not available',
@@ -615,8 +608,8 @@ let AuthenticationService = class AuthenticationService {
                 });
             }
             if (payload.companyId) {
-                const companyRepository = await this.getCompanyRepository();
-                const permissionRepository = await this.getPermissionRepository();
+                const companyRepository = await this.getCompanyScopedRepository(_companyentity.Company);
+                const permissionRepository = await this.getCompanyScopedRepository(_usercompanypermissionentity.UserCompanyPermission);
                 if (companyRepository) {
                     const company = await companyRepository.findOne({
                         where: {
@@ -647,7 +640,7 @@ let AuthenticationService = class AuthenticationService {
                     }
                 }
                 if (payload.branchId) {
-                    const branchRepository = await this.getBranchRepository();
+                    const branchRepository = await this.getCompanyScopedRepository(_companybranchentity.CompanyBranch);
                     if (branchRepository) {
                         const branch = await branchRepository.findOne({
                             where: {
@@ -680,7 +673,7 @@ let AuthenticationService = class AuthenticationService {
                     }
                 }
             }
-            return this.generateTokens({
+            return (0, _helpers.generateTokens)(this.jwtService, this.authConfig, {
                 id: user.id,
                 email: user.email,
                 type: 'access',
@@ -729,7 +722,7 @@ let AuthenticationService = class AuthenticationService {
         const revokedAt = Math.floor(Date.now() / 1000);
         const cacheKey = `${_config.TOKEN_REVOKED_PREFIX}:${userId}`;
         const refreshTokenExpiry = this.authConfig.getRefreshTokenExpiration();
-        const ttlMs = this.parseExpiryToMs(refreshTokenExpiry);
+        const ttlMs = (0, _helpers.parseExpiryToMs)(refreshTokenExpiry);
         await this.cacheManager.set(cacheKey, revokedAt, ttlMs);
     }
     async isTokenRevoked(userId, tokenIssuedAt) {
@@ -743,28 +736,10 @@ let AuthenticationService = class AuthenticationService {
         }
         return tokenIssuedAt < revokedAt;
     }
-    parseExpiryToMs(expiry) {
-        const match = expiry.match(/^(\d+)([smhd])$/);
-        if (!match) return 7 * 24 * 60 * 60 * 1000;
-        const value = parseInt(match[1], 10);
-        const unit = match[2];
-        switch(unit){
-            case 's':
-                return value * 1000;
-            case 'm':
-                return value * 60 * 1000;
-            case 'h':
-                return value * 60 * 60 * 1000;
-            case 'd':
-                return value * 24 * 60 * 60 * 1000;
-            default:
-                return 7 * 24 * 60 * 60 * 1000;
-        }
-    }
     async getUserCompanies(userId) {
         this.ensureCompanyFeatureEnabled();
-        const permissionRepository = await this.getPermissionRepository();
-        const companyRepository = await this.getCompanyRepository();
+        const permissionRepository = await this.getCompanyScopedRepository(_usercompanypermissionentity.UserCompanyPermission);
+        const companyRepository = await this.getCompanyScopedRepository(_companyentity.Company);
         if (!permissionRepository || !companyRepository) {
             throw new _common.BadRequestException({
                 message: 'Repositories not available',
@@ -790,8 +765,8 @@ let AuthenticationService = class AuthenticationService {
     }
     async getUserBranches(userId, companyId) {
         this.ensureCompanyFeatureEnabled();
-        const permissionRepository = await this.getPermissionRepository();
-        const branchRepository = await this.getBranchRepository();
+        const permissionRepository = await this.getCompanyScopedRepository(_usercompanypermissionentity.UserCompanyPermission);
+        const branchRepository = await this.getCompanyScopedRepository(_companybranchentity.CompanyBranch);
         if (!permissionRepository || !branchRepository) {
             throw new _common.BadRequestException({
                 message: 'Repositories not available',
@@ -831,7 +806,7 @@ let AuthenticationService = class AuthenticationService {
         }).orderBy('b.serial', 'ASC').addOrderBy('b.name', 'ASC').getMany();
     }
     async getCompanyById(companyId) {
-        const companyRepository = await this.getCompanyRepository();
+        const companyRepository = await this.getCompanyScopedRepository(_companyentity.Company);
         if (!companyRepository) {
             return null;
         }
@@ -842,7 +817,7 @@ let AuthenticationService = class AuthenticationService {
         });
     }
     async getBranchById(branchId) {
-        const branchRepository = await this.getBranchRepository();
+        const branchRepository = await this.getCompanyScopedRepository(_companybranchentity.CompanyBranch);
         if (!branchRepository) {
             return null;
         }
@@ -864,7 +839,7 @@ let AuthenticationService = class AuthenticationService {
             messageKey: _config.USER_MESSAGES.NOT_FOUND
         });
         const response = {
-            user: this.toUserInfo(user)
+            user: (0, _helpers.toUserInfo)(user)
         };
         if (this.isCompanyFeatureEnabled()) {
             if (!companyId) {
@@ -878,14 +853,14 @@ let AuthenticationService = class AuthenticationService {
                 message: 'Company not found.',
                 messageKey: _config.AUTH_MESSAGES.COMPANY_NOT_FOUND
             });
-            response.company = this.toCompanyInfo(company);
+            response.company = (0, _helpers.toCompanyInfo)(company);
             if (branchId) {
                 const branch = await this.getBranchById(branchId);
                 if (!branch) throw new _common.UnauthorizedException({
                     message: 'Branch not found.',
                     messageKey: _config.AUTH_MESSAGES.BRANCH_NOT_FOUND
                 });
-                response.branch = this.toBranchInfo(branch);
+                response.branch = (0, _helpers.toBranchInfo)(branch);
             }
         }
         return response;
@@ -915,55 +890,8 @@ let AuthenticationService = class AuthenticationService {
         await userRepository.save(user);
         return user;
     }
-    toUserInfo(user) {
-        return {
-            id: user.id,
-            email: user.email,
-            name: user.name ?? undefined,
-            phone: user.phone ?? null,
-            profilePictureId: user.profilePictureId ?? null
-        };
-    }
-    toCompanyInfo(company) {
-        return {
-            id: company.id,
-            name: company.name,
-            slug: company.slug,
-            logoId: company.logoId ?? null
-        };
-    }
-    toBranchInfo(branch) {
-        return {
-            id: branch.id,
-            name: branch.name,
-            slug: branch.slug,
-            logoId: branch.logoId ?? null
-        };
-    }
-    generateTokens(payload) {
-        const accessToken = this.jwtService.sign({
-            ...payload,
-            type: 'access'
-        }, {
-            secret: this.authConfig.getJwtSecret(),
-            expiresIn: this.authConfig.getJwtExpiration(),
-            algorithm: 'HS256'
-        });
-        const refreshToken = this.jwtService.sign({
-            ...payload,
-            type: 'refresh'
-        }, {
-            secret: this.authConfig.getRefreshTokenSecret(),
-            expiresIn: this.authConfig.getRefreshTokenExpiration(),
-            algorithm: 'HS256'
-        });
-        return {
-            accessToken,
-            refreshToken
-        };
-    }
     generateLoginResponse(user) {
-        const { accessToken, refreshToken } = this.generateTokens({
+        const { accessToken, refreshToken } = (0, _helpers.generateTokens)(this.jwtService, this.authConfig, {
             id: user.id,
             email: user.email,
             type: 'access'
@@ -972,11 +900,11 @@ let AuthenticationService = class AuthenticationService {
         return {
             accessToken,
             refreshToken,
-            user: this.toUserInfo(user)
+            user: (0, _helpers.toUserInfo)(user)
         };
     }
     generateLoginResponseWithCompany(user, company, branch) {
-        const { accessToken, refreshToken } = this.generateTokens({
+        const { accessToken, refreshToken } = (0, _helpers.generateTokens)(this.jwtService, this.authConfig, {
             id: user.id,
             email: user.email,
             type: 'access',
@@ -987,9 +915,9 @@ let AuthenticationService = class AuthenticationService {
         return {
             accessToken,
             refreshToken,
-            user: this.toUserInfo(user),
-            company: this.toCompanyInfo(company),
-            branch: branch ? this.toBranchInfo(branch) : undefined
+            user: (0, _helpers.toUserInfo)(user),
+            company: (0, _helpers.toCompanyInfo)(company),
+            branch: branch ? (0, _helpers.toBranchInfo)(branch) : undefined
         };
     }
     sendLoginNotification(userId, companyId) {
@@ -1014,10 +942,10 @@ let AuthenticationService = class AuthenticationService {
         }
         const sessionId = await this.sessionService.createSession(user.id);
         const companiesWithBranches = companies.map((company)=>({
-                ...this.toCompanyInfo(company),
+                ...(0, _helpers.toCompanyInfo)(company),
                 isActive: company.isActive,
                 branches: branches.filter((b)=>b.companyId === company.id).map((b)=>({
-                        ...this.toBranchInfo(b),
+                        ...(0, _helpers.toBranchInfo)(b),
                         isActive: b.isActive
                     }))
             }));
@@ -1025,7 +953,7 @@ let AuthenticationService = class AuthenticationService {
             requiresSelection: true,
             sessionId,
             expiresAt: new Date(Date.now() + 5 * 60 * 1000),
-            user: this.toUserInfo(user),
+            user: (0, _helpers.toUserInfo)(user),
             companies: companiesWithBranches
         };
     }