@flusys/nestjs-auth 7.0.1 → 7.1.0

package/README.md

@@ -266,6 +266,73 @@ export const userEnricherProvider = {
 AuthModule.forRootAsync({ ..., providers: [userEnricherProvider] });
 ```
 
+## 5. Social Sign-In
+
+Google, Facebook, LinkedIn and Microsoft are built in. Nothing is enabled until an
+administrator saves credentials, and no flag gates the feature: the
+`social_auth_config` and `user_social_account` tables are always registered, and
+`SocialAuthController` / `SocialAuthConfigController` are always mounted.
+
+### Credentials
+
+`POST /auth/social-config/*` is the usual CRUD surface, guarded by the
+`social-config.create|read|update|delete` permissions. One row per provider is
+enforced, so a provider can be addressed by name from an admin screen.
+
+| Column         | Purpose                                                          |
+| -------------- | ---------------------------------------------------------------- |
+| `provider`     | `google` \| `facebook` \| `linkedin` \| `microsoft` (unique)     |
+| `isEnabled`    | Whether the login page offers it; credentials survive a disable  |
+| `clientId`     | OAuth client id from the provider's console                      |
+| `clientSecret` | OAuth client secret                                              |
+| `scopes`       | Overrides the provider's defaults when set                       |
+| `extraConfig`  | Provider extras — Microsoft's `tenantId`, for instance           |
+
+### Sign-in flow
+
+```
+POST /auth/social/providers  { redirectUri }               → [{ provider, redirectUri }]
+POST /auth/social/authorize  { provider, redirectUri }     → { authorizationUrl, state }
+   browser → provider consent screen → back to redirectUri?code=…&state=…
+POST /auth/social/callback   { code, state, redirectUri }  → the same union /auth/login returns
+```
+
+The `state` is a single-use, cache-backed token that also records which provider
+and redirect URI the sign-in started with — providers echo back nothing but
+`code` and `state`, so the callback carries no provider of its own. Redeeming a
+state deletes it, and a redirect URI that does not match the one the sign-in
+started with is rejected.
+
+The callback returns exactly what `POST /auth/login` returns, company selection
+included, because both routes finish through `AuthenticationService.issueLoginForUser`.
+
+### How a user is matched
+
+1. The provider's own account id, via `user_social_account` — survives an email change at the provider.
+2. Otherwise the email, so an existing password account is adopted rather than duplicated.
+3. Otherwise a new account with no password.
+
+Steps 2 and 3 require the provider to have **verified** the address. Matching on an
+unverified email would let anyone who registers someone else's address at the
+provider walk into their FLUSYS account, so an unverified profile is rejected.
+An account already linked at step 1 is unaffected.
+
+Step 3 — creating an account — is refused in two cases, each with its own message key:
+
+| Condition                                   | Result                                       |
+| ------------------------------------------- | -------------------------------------------- |
+| `bootstrapAppConfig.enableSignUp` is `false` | `auth.social.account.not.linked`             |
+| `enableCompanyFeature` is `true`             | `auth.social.company.required`               |
+
+`enableSignUp` is the single switch for social sign-up; there is no per-provider
+override. With the company feature on, a brand-new account could not be given a
+company and would land in a session the route guards reject, so it is refused
+outright: grant the user a company permission first and their social sign-in
+then works. Signing **in** is never affected by either — only account creation is.
+
+A cache instance is required: `AuthModule` imports `CacheModule`, so this is
+satisfied by default.
+
 ## License
 
 MIT © FLUSYS

package/cjs/config/auth.constants.js

@@ -25,6 +25,12 @@ _export(exports, {
     get SESSION_CACHE_PREFIX () {
         return SESSION_CACHE_PREFIX;
     },
+    get SOCIAL_STATE_PREFIX () {
+        return SOCIAL_STATE_PREFIX;
+    },
+    get SOCIAL_STATE_TTL_MS () {
+        return SOCIAL_STATE_TTL_MS;
+    },
     get TOKEN_REVOKED_PREFIX () {
         return TOKEN_REVOKED_PREFIX;
     },
@@ -39,3 +45,5 @@ const DEFAULT_COOKIE_NAME = 'fsn_refresh_token';
 const MAX_COOKIE_BYTES = 3500;
 const SESSION_CACHE_PREFIX = 'auth:session';
 const TOKEN_REVOKED_PREFIX = 'auth:revoked';
+const SOCIAL_STATE_PREFIX = 'auth:social:state';
+const SOCIAL_STATE_TTL_MS = 10 * 60 * 1000; // 10 minutes

package/cjs/config/event-actions.js

@@ -33,13 +33,15 @@ const AUTH_EVENT_ACTIONS = {
     PASSWORD_RESET: 'password-reset',
     EMAIL_VERIFIED: 'email-verified',
     PERMISSION_GRANTED: 'permission-granted',
-    PERMISSION_REVOKED: 'permission-revoked'
+    PERMISSION_REVOKED: 'permission-revoked',
+    SOCIAL_LOGGED_IN: 'social-logged-in'
 };
 const AUTH_EVENT_ENTITIES = {
     USER: 'appuser',
     COMPANY: 'company',
     COMPANY_BRANCH: 'company_branch',
     SESSION: 'session',
-    USER_PERMISSION: 'user_company_permission'
+    USER_PERMISSION: 'user_company_permission',
+    SOCIAL_AUTH_CONFIG: 'social_auth_config'
 };
 const AUTH_EVENT_MODULE = 'auth';

package/cjs/config/message-keys.js

@@ -22,6 +22,12 @@ _export(exports, {
     get EMAIL_VERIFICATION_MESSAGES () {
         return EMAIL_VERIFICATION_MESSAGES;
     },
+    get SOCIAL_AUTH_CONFIG_MESSAGES () {
+        return SOCIAL_AUTH_CONFIG_MESSAGES;
+    },
+    get SOCIAL_AUTH_MESSAGES () {
+        return SOCIAL_AUTH_MESSAGES;
+    },
     get USER_MESSAGES () {
         return USER_MESSAGES;
     },
@@ -43,7 +49,9 @@ const AUTH_MESSAGES = {
     SELECT_SUCCESS: 'auth.select.success',
     SWITCH_COMPANY_SUCCESS: 'auth.switch.company.success',
     REGISTER_EMAIL_EXISTS: 'auth.register.email.exists',
+    REGISTER_ACCOUNT_DELETED: 'auth.register.account.deleted',
     REGISTER_COMPANY_ALREADY_ASSIGNED: 'auth.register.company.already.assigned',
+    REGISTER_SIGNUP_DISABLED: 'auth.register.signup.disabled',
     PASSWORD_CHANGE_SUCCESS: 'auth.password.change.success',
     PASSWORD_CHANGE_INVALID_CURRENT: 'auth.password.change.invalid.current',
     PASSWORD_CHANGE_CURRENT_REQUIRED: 'auth.password.change.current.required',
@@ -80,6 +88,25 @@ const EMAIL_VERIFICATION_MESSAGES = {
     VERIFICATION_NOT_ENABLED: 'email.verification.not.enabled',
     RESEND_SUCCESS: 'email.verification.resend.success'
 };
+const SOCIAL_AUTH_MESSAGES = {
+    PROVIDERS_SUCCESS: 'auth.social.providers.success',
+    AUTHORIZE_SUCCESS: 'auth.social.authorize.success',
+    LOGIN_SUCCESS: 'auth.social.login.success',
+    PROVIDER_DISABLED: 'auth.social.provider.disabled',
+    PROVIDER_NOT_CONFIGURED: 'auth.social.provider.not.configured',
+    STATE_INVALID: 'auth.social.state.invalid',
+    REDIRECT_URI_MISMATCH: 'auth.social.redirect.uri.mismatch',
+    EXCHANGE_FAILED: 'auth.social.exchange.failed',
+    PROFILE_INCOMPLETE: 'auth.social.profile.incomplete',
+    ACCOUNT_NOT_LINKED: 'auth.social.account.not.linked',
+    COMPANY_REQUIRED: 'auth.social.company.required',
+    EMAIL_REQUIRED: 'auth.social.email.required',
+    EMAIL_NOT_VERIFIED: 'auth.social.email.not.verified',
+    ACCOUNT_DELETED: 'auth.social.account.deleted'
+};
+const SOCIAL_AUTH_CONFIG_MESSAGES = {
+    PROVIDER_ALREADY_CONFIGURED: 'social.config.provider.already.configured'
+};
 const USER_MESSAGES = {
     NOT_FOUND: 'user.not.found',
     PROFILE_UPDATE_SUCCESS: 'user.profile.update.success',

package/cjs/controllers/index.js

@@ -5,6 +5,8 @@ Object.defineProperty(exports, "__esModule", {
 _export_star(require("./authentication.controller"), exports);
 _export_star(require("./company-selection.controller"), exports);
 _export_star(require("./email-verification.controller"), exports);
+_export_star(require("./social-auth.controller"), exports);
+_export_star(require("./social-auth-config.controller"), exports);
 _export_star(require("./user.controller"), exports);
 _export_star(require("./company.controller"), exports);
 _export_star(require("./branch.controller"), exports);

package/cjs/controllers/social-auth-config.controller.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "SocialAuthConfigController", {
+    enumerable: true,
+    get: function() {
+        return SocialAuthConfigController;
+    }
+});
+const _classes = require("@flusys/nestjs-shared/classes");
+const _constants = require("@flusys/nestjs-shared/constants");
+const _common = require("@nestjs/common");
+const _swagger = require("@nestjs/swagger");
+const _socialauthdto = require("../dtos/social-auth.dto");
+const _socialauthconfigservice = require("../services/social-auth-config.service");
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+let SocialAuthConfigController = class SocialAuthConfigController extends (0, _classes.createApiController)(_socialauthdto.CreateSocialAuthConfigDto, _socialauthdto.UpdateSocialAuthConfigDto, _socialauthdto.SocialAuthConfigResponseDto, {
+    entityName: 'social.config',
+    security: {
+        insert: {
+            level: 'permission',
+            permissions: [
+                _constants.SOCIAL_AUTH_CONFIG_PERMISSIONS.CREATE
+            ]
+        },
+        bulkUpsert: {
+            level: 'permission',
+            permissions: [
+                _constants.SOCIAL_AUTH_CONFIG_PERMISSIONS.CREATE,
+                _constants.SOCIAL_AUTH_CONFIG_PERMISSIONS.UPDATE
+            ],
+            operator: 'AND'
+        },
+        getById: {
+            level: 'permission',
+            permissions: [
+                _constants.SOCIAL_AUTH_CONFIG_PERMISSIONS.READ
+            ]
+        },
+        getAll: {
+            level: 'permission',
+            permissions: [
+                _constants.SOCIAL_AUTH_CONFIG_PERMISSIONS.READ
+            ]
+        },
+        update: {
+            level: 'permission',
+            permissions: [
+                _constants.SOCIAL_AUTH_CONFIG_PERMISSIONS.UPDATE
+            ]
+        },
+        delete: {
+            level: 'permission',
+            permissions: [
+                _constants.SOCIAL_AUTH_CONFIG_PERMISSIONS.DELETE
+            ]
+        }
+    },
+    enabledEndpoints: [
+        'insert',
+        'bulkUpsert',
+        'getById',
+        'getAll',
+        'update',
+        'delete'
+    ]
+}) {
+    constructor(socialAuthConfigService){
+        super(socialAuthConfigService), _define_property(this, "socialAuthConfigService", void 0), this.socialAuthConfigService = socialAuthConfigService;
+    }
+};
+SocialAuthConfigController = _ts_decorate([
+    (0, _swagger.ApiTags)('Social Auth Config'),
+    (0, _common.Controller)('auth/social-config'),
+    _ts_param(0, (0, _common.Inject)(_socialauthconfigservice.SocialAuthConfigService)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _socialauthconfigservice.SocialAuthConfigService === "undefined" ? Object : _socialauthconfigservice.SocialAuthConfigService
+    ])
+], SocialAuthConfigController);

package/cjs/controllers/social-auth.controller.js

@@ -0,0 +1,175 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "SocialAuthController", {
+    enumerable: true,
+    get: function() {
+        return SocialAuthController;
+    }
+});
+const _common = require("@nestjs/common");
+const _swagger = require("@nestjs/swagger");
+const _throttler = require("@nestjs/throttler");
+const _config = require("../config");
+const _socialauthdto = require("../dtos/social-auth.dto");
+const _settokeninterceptor = require("../interceptors/set-token.interceptor");
+const _socialauthservice = require("../services/social-auth.service");
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+let SocialAuthController = class SocialAuthController {
+    async getProviders(dto) {
+        const data = await this.socialAuthService.listEnabledProviders(dto.redirectUri);
+        return {
+            success: true,
+            message: 'Social providers retrieved successfully',
+            messageKey: _config.SOCIAL_AUTH_MESSAGES.PROVIDERS_SUCCESS,
+            data
+        };
+    }
+    async authorize(dto) {
+        const data = await this.socialAuthService.createAuthorization(dto.provider, dto.redirectUri);
+        return {
+            success: true,
+            message: 'Authorization URL generated successfully',
+            messageKey: _config.SOCIAL_AUTH_MESSAGES.AUTHORIZE_SUCCESS,
+            data
+        };
+    }
+    async callback(dto) {
+        const result = await this.socialAuthService.completeLogin(dto.code, dto.state, dto.redirectUri);
+        if ('requiresSelection' in result) {
+            return {
+                success: true,
+                message: 'Company selection required',
+                messageKey: _config.AUTH_MESSAGES.LOGIN_REQUIRES_SELECTION,
+                data: result
+            };
+        }
+        return {
+            success: true,
+            message: 'Login successful',
+            messageKey: _config.SOCIAL_AUTH_MESSAGES.LOGIN_SUCCESS,
+            data: result
+        };
+    }
+    constructor(socialAuthService){
+        _define_property(this, "socialAuthService", void 0);
+        this.socialAuthService = socialAuthService;
+    }
+};
+_ts_decorate([
+    (0, _common.Post)('providers'),
+    (0, _common.HttpCode)(_common.HttpStatus.OK),
+    (0, _throttler.Throttle)({
+        default: {
+            limit: 30,
+            ttl: 60000
+        }
+    }),
+    (0, _swagger.ApiOperation)({
+        summary: 'List enabled social sign-in providers'
+    }),
+    (0, _swagger.ApiBody)({
+        type: _socialauthdto.SocialProvidersDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: [
+            _socialauthdto.SocialProviderInfoDto
+        ]
+    }),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _socialauthdto.SocialProvidersDto === "undefined" ? Object : _socialauthdto.SocialProvidersDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], SocialAuthController.prototype, "getProviders", null);
+_ts_decorate([
+    (0, _common.Post)('authorize'),
+    (0, _common.HttpCode)(_common.HttpStatus.OK),
+    (0, _throttler.Throttle)({
+        default: {
+            limit: 10,
+            ttl: 60000
+        }
+    }),
+    (0, _swagger.ApiOperation)({
+        summary: "Start a sign-in and get the provider's consent URL"
+    }),
+    (0, _swagger.ApiBody)({
+        type: _socialauthdto.SocialAuthorizeDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        type: _socialauthdto.SocialAuthorizeResponseDto
+    }),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _socialauthdto.SocialAuthorizeDto === "undefined" ? Object : _socialauthdto.SocialAuthorizeDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], SocialAuthController.prototype, "authorize", null);
+_ts_decorate([
+    (0, _common.Post)('callback'),
+    (0, _common.HttpCode)(_common.HttpStatus.OK),
+    (0, _throttler.Throttle)({
+        default: {
+            limit: 10,
+            ttl: 60000
+        }
+    }),
+    (0, _common.UseInterceptors)(_settokeninterceptor.SetToken),
+    (0, _swagger.ApiOperation)({
+        summary: 'Complete a social sign-in'
+    }),
+    (0, _swagger.ApiBody)({
+        type: _socialauthdto.SocialCallbackDto
+    }),
+    (0, _swagger.ApiResponse)({
+        status: 200,
+        description: 'Sign-in successful, or company selection is still required'
+    }),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _socialauthdto.SocialCallbackDto === "undefined" ? Object : _socialauthdto.SocialCallbackDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], SocialAuthController.prototype, "callback", null);
+SocialAuthController = _ts_decorate([
+    (0, _swagger.ApiTags)('Social Authentication'),
+    (0, _common.Controller)('auth/social'),
+    _ts_param(0, (0, _common.Inject)(_socialauthservice.SocialAuthService)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _socialauthservice.SocialAuthService === "undefined" ? Object : _socialauthservice.SocialAuthService
+    ])
+], SocialAuthController);

package/cjs/controllers/social-auth.controller.spec.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+const _config = require("../config");
+const _socialprovidertypeenum = require("../enums/social-provider-type.enum");
+const _socialauthcontroller = require("./social-auth.controller");
+const REDIRECT_URI = 'http://localhost:2001/auth/social/callback';
+describe('SocialAuthController', ()=>{
+    let controller;
+    let mockSocialAuthService;
+    beforeEach(()=>{
+        mockSocialAuthService = {
+            listEnabledProviders: jest.fn(),
+            createAuthorization: jest.fn(),
+            completeLogin: jest.fn()
+        };
+        controller = new _socialauthcontroller.SocialAuthController(mockSocialAuthService);
+    });
+    it('wraps the enabled provider list', async ()=>{
+        const providers = [
+            {
+                provider: _socialprovidertypeenum.SocialProviderTypeEnum.GOOGLE,
+                redirectUri: REDIRECT_URI
+            }
+        ];
+        mockSocialAuthService.listEnabledProviders.mockResolvedValue(providers);
+        const result = await controller.getProviders({
+            redirectUri: REDIRECT_URI
+        });
+        expect(result.data).toBe(providers);
+        expect(result.messageKey).toBe(_config.SOCIAL_AUTH_MESSAGES.PROVIDERS_SUCCESS);
+        expect(mockSocialAuthService.listEnabledProviders).toHaveBeenCalledWith(REDIRECT_URI);
+    });
+    it('wraps the authorization URL', async ()=>{
+        mockSocialAuthService.createAuthorization.mockResolvedValue({
+            provider: _socialprovidertypeenum.SocialProviderTypeEnum.GOOGLE,
+            authorizationUrl: 'https://provider.test/consent',
+            state: 'state-token'
+        });
+        const result = await controller.authorize({
+            provider: _socialprovidertypeenum.SocialProviderTypeEnum.GOOGLE,
+            redirectUri: REDIRECT_URI
+        });
+        expect(result.data?.authorizationUrl).toBe('https://provider.test/consent');
+        expect(result.messageKey).toBe(_config.SOCIAL_AUTH_MESSAGES.AUTHORIZE_SUCCESS);
+    });
+    it('wraps a completed sign-in', async ()=>{
+        mockSocialAuthService.completeLogin.mockResolvedValue({
+            accessToken: 'a',
+            refreshToken: 'r'
+        });
+        const result = await controller.callback({
+            code: 'code',
+            state: 'state-token',
+            redirectUri: REDIRECT_URI
+        });
+        expect(result.messageKey).toBe(_config.SOCIAL_AUTH_MESSAGES.LOGIN_SUCCESS);
+        expect(result.data).toEqual(expect.objectContaining({
+            accessToken: 'a'
+        }));
+        expect(mockSocialAuthService.completeLogin).toHaveBeenCalledWith('code', 'state-token', REDIRECT_URI);
+    });
+    it('wraps a sign-in that still needs a company, like the password login does', async ()=>{
+        mockSocialAuthService.completeLogin.mockResolvedValue({
+            requiresSelection: true,
+            sessionId: 'sess-1'
+        });
+        const result = await controller.callback({
+            code: 'code',
+            state: 'state-token',
+            redirectUri: REDIRECT_URI
+        });
+        expect(result.messageKey).toBe(_config.AUTH_MESSAGES.LOGIN_REQUIRES_SELECTION);
+        expect(result.data).toEqual(expect.objectContaining({
+            requiresSelection: true
+        }));
+    });
+});

package/cjs/docs/auth-swagger.config.js

@@ -329,6 +329,7 @@ function buildDescription(enableCompanyFeature, enableEmailVerification, isMulti
     const features = [
         '- User registration',
         '- Login with email/password',
+        '- Social sign-in (Google, Facebook, LinkedIn, Microsoft)',
         '- JWT token-based authentication',
         ...enableEmailVerification ? [
             '- Email verification',
@@ -382,6 +383,13 @@ POST /auth/verify-email → { accessToken, refreshToken, user }
 - \`POST /auth/resend-verification\` - Resend verification email
 - \`POST /auth/verify-email\` - Verify email using token
 ` : '';
+    const socialSection = `
+### Social Sign-In Endpoints
+- \`POST /auth/social/providers\` - List the providers an administrator enabled
+- \`POST /auth/social/authorize\` - Start a sign-in and get the provider's consent URL
+- \`POST /auth/social/callback\` - Exchange the provider's code for a session
+- \`POST /auth/social-config/*\` - Manage provider credentials
+`;
     const administrationSection = enableCompanyFeature ? `
 ### Administration Endpoints
 - \`POST /administration/users/*\` - User management
@@ -422,7 +430,7 @@ Handles user authentication${enableCompanyFeature ? ', company/branch management
 
 ### Features
 ${features}
-${loginFlowSection}${emailVerificationSection}${administrationSection}${registrationSection}`;
+${loginFlowSection}${emailVerificationSection}${socialSection}${administrationSection}${registrationSection}`;
 }
 function authSwaggerConfig(bootstrapConfig) {
     const enableCompanyFeature = bootstrapConfig?.enableCompanyFeature ?? true;

package/cjs/dtos/index.js

@@ -5,6 +5,7 @@ Object.defineProperty(exports, "__esModule", {
 _export_star(require("./authentication.dto"), exports);
 _export_star(require("./company-branch.dto"), exports);
 _export_star(require("./company.dto"), exports);
+_export_star(require("./social-auth.dto"), exports);
 _export_star(require("./user.dto"), exports);
 _export_star(require("./user-permission.dto"), exports);
 function _export_star(from, to) {