@flusys/nestjs-auth 7.0.2 → 7.1.0

package/cjs/dtos/social-auth.dto.js

@@ -0,0 +1,318 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get CreateSocialAuthConfigDto () {
+        return CreateSocialAuthConfigDto;
+    },
+    get SocialAuthConfigResponseDto () {
+        return SocialAuthConfigResponseDto;
+    },
+    get SocialAuthorizeDto () {
+        return SocialAuthorizeDto;
+    },
+    get SocialAuthorizeResponseDto () {
+        return SocialAuthorizeResponseDto;
+    },
+    get SocialCallbackDto () {
+        return SocialCallbackDto;
+    },
+    get SocialProviderInfoDto () {
+        return SocialProviderInfoDto;
+    },
+    get SocialProvidersDto () {
+        return SocialProvidersDto;
+    },
+    get UpdateSocialAuthConfigDto () {
+        return UpdateSocialAuthConfigDto;
+    }
+});
+const _dtos = require("@flusys/nestjs-shared/dtos");
+const _swagger = require("@nestjs/swagger");
+const _classtransformer = require("class-transformer");
+const _classvalidator = require("class-validator");
+const _socialprovidertypeenum = require("../enums/social-provider-type.enum");
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let CreateSocialAuthConfigDto = class CreateSocialAuthConfigDto {
+    constructor(){
+        _define_property(this, "provider", void 0);
+        _define_property(this, "isEnabled", void 0);
+        _define_property(this, "clientId", void 0);
+        _define_property(this, "clientSecret", void 0);
+        _define_property(this, "scopes", void 0);
+        _define_property(this, "extraConfig", void 0);
+    }
+};
+_ts_decorate([
+    (0, _classtransformer.Expose)(),
+    (0, _swagger.ApiProperty)({
+        enum: _socialprovidertypeenum.SocialProviderTypeEnum,
+        example: _socialprovidertypeenum.SocialProviderTypeEnum.GOOGLE
+    }),
+    (0, _classvalidator.IsEnum)(_socialprovidertypeenum.SocialProviderTypeEnum),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", typeof _socialprovidertypeenum.SocialProviderTypeEnum === "undefined" ? Object : _socialprovidertypeenum.SocialProviderTypeEnum)
+], CreateSocialAuthConfigDto.prototype, "provider", void 0);
+_ts_decorate([
+    (0, _classtransformer.Expose)(),
+    (0, _swagger.ApiPropertyOptional)({
+        example: true,
+        description: 'Offer this provider on the login page'
+    }),
+    (0, _classvalidator.IsBoolean)(),
+    (0, _classvalidator.IsOptional)(),
+    _ts_metadata("design:type", Boolean)
+], CreateSocialAuthConfigDto.prototype, "isEnabled", void 0);
+_ts_decorate([
+    (0, _classtransformer.Expose)(),
+    (0, _swagger.ApiPropertyOptional)({
+        example: '1234567890-abc.apps.googleusercontent.com'
+    }),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.MaxLength)(512),
+    _ts_metadata("design:type", String)
+], CreateSocialAuthConfigDto.prototype, "clientId", void 0);
+_ts_decorate([
+    (0, _classtransformer.Expose)(),
+    (0, _swagger.ApiPropertyOptional)({
+        example: 'GOCSPX-secret-value'
+    }),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsOptional)(),
+    _ts_metadata("design:type", String)
+], CreateSocialAuthConfigDto.prototype, "clientSecret", void 0);
+_ts_decorate([
+    (0, _classtransformer.Expose)(),
+    (0, _swagger.ApiPropertyOptional)({
+        type: [
+            String
+        ],
+        example: [
+            'openid',
+            'email',
+            'profile'
+        ],
+        description: "Overrides the provider's default scopes when set"
+    }),
+    (0, _classvalidator.IsArray)(),
+    (0, _classvalidator.IsString)({
+        each: true
+    }),
+    (0, _classvalidator.ArrayMaxSize)(30),
+    (0, _classvalidator.IsOptional)(),
+    _ts_metadata("design:type", Array)
+], CreateSocialAuthConfigDto.prototype, "scopes", void 0);
+_ts_decorate([
+    (0, _classtransformer.Expose)(),
+    (0, _swagger.ApiPropertyOptional)({
+        type: 'object',
+        additionalProperties: true,
+        description: "Provider specific extras, such as Microsoft's tenantId",
+        example: {
+            tenantId: 'common'
+        }
+    }),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.IsOptional)(),
+    _ts_metadata("design:type", typeof Record === "undefined" ? Object : Record)
+], CreateSocialAuthConfigDto.prototype, "extraConfig", void 0);
+let UpdateSocialAuthConfigDto = class UpdateSocialAuthConfigDto extends (0, _swagger.PartialType)(CreateSocialAuthConfigDto) {
+    constructor(...args){
+        super(...args), _define_property(this, "id", void 0);
+    }
+};
+_ts_decorate([
+    (0, _classtransformer.Expose)(),
+    (0, _swagger.ApiProperty)({
+        example: '123e4567-e89b-12d3-a456-426614174000'
+    }),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], UpdateSocialAuthConfigDto.prototype, "id", void 0);
+let SocialAuthConfigResponseDto = class SocialAuthConfigResponseDto extends _dtos.IdentityResponseDto {
+    constructor(...args){
+        super(...args), _define_property(this, "provider", void 0), _define_property(this, "isEnabled", void 0), _define_property(this, "clientId", void 0), _define_property(this, "hasClientSecret", void 0), _define_property(this, "scopes", void 0), _define_property(this, "extraConfig", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        enum: _socialprovidertypeenum.SocialProviderTypeEnum,
+        example: _socialprovidertypeenum.SocialProviderTypeEnum.GOOGLE
+    }),
+    (0, _classtransformer.Expose)(),
+    _ts_metadata("design:type", typeof _socialprovidertypeenum.SocialProviderTypeEnum === "undefined" ? Object : _socialprovidertypeenum.SocialProviderTypeEnum)
+], SocialAuthConfigResponseDto.prototype, "provider", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: true
+    }),
+    (0, _classtransformer.Expose)(),
+    _ts_metadata("design:type", Boolean)
+], SocialAuthConfigResponseDto.prototype, "isEnabled", void 0);
+_ts_decorate([
+    (0, _swagger.ApiPropertyOptional)({
+        nullable: true
+    }),
+    (0, _classtransformer.Expose)(),
+    _ts_metadata("design:type", Object)
+], SocialAuthConfigResponseDto.prototype, "clientId", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        description: 'Whether a client secret is currently stored for this provider'
+    }),
+    (0, _classtransformer.Expose)(),
+    (0, _classtransformer.Transform)(({ obj })=>!!obj.clientSecret),
+    _ts_metadata("design:type", Boolean)
+], SocialAuthConfigResponseDto.prototype, "hasClientSecret", void 0);
+_ts_decorate([
+    (0, _swagger.ApiPropertyOptional)({
+        type: [
+            String
+        ],
+        nullable: true
+    }),
+    (0, _classtransformer.Expose)(),
+    _ts_metadata("design:type", Object)
+], SocialAuthConfigResponseDto.prototype, "scopes", void 0);
+_ts_decorate([
+    (0, _swagger.ApiPropertyOptional)({
+        type: 'object',
+        additionalProperties: true,
+        nullable: true
+    }),
+    (0, _classtransformer.Expose)(),
+    _ts_metadata("design:type", Object)
+], SocialAuthConfigResponseDto.prototype, "extraConfig", void 0);
+let SocialProviderInfoDto = class SocialProviderInfoDto {
+    constructor(){
+        _define_property(this, "provider", void 0);
+        _define_property(this, "redirectUri", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        enum: _socialprovidertypeenum.SocialProviderTypeEnum,
+        example: _socialprovidertypeenum.SocialProviderTypeEnum.GOOGLE
+    }),
+    (0, _classtransformer.Expose)(),
+    _ts_metadata("design:type", typeof _socialprovidertypeenum.SocialProviderTypeEnum === "undefined" ? Object : _socialprovidertypeenum.SocialProviderTypeEnum)
+], SocialProviderInfoDto.prototype, "provider", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'http://localhost:2001/auth/social/callback'
+    }),
+    (0, _classtransformer.Expose)(),
+    _ts_metadata("design:type", String)
+], SocialProviderInfoDto.prototype, "redirectUri", void 0);
+let SocialProvidersDto = class SocialProvidersDto {
+    constructor(){
+        _define_property(this, "redirectUri", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        example: 'http://localhost:2001/auth/social/callback',
+        description: 'Must match the URI registered with the provider and the one sent on callback'
+    }),
+    (0, _classvalidator.IsUrl)({
+        require_tld: false
+    }),
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.MaxLength)(2048),
+    _ts_metadata("design:type", String)
+], SocialProvidersDto.prototype, "redirectUri", void 0);
+let SocialAuthorizeDto = class SocialAuthorizeDto extends SocialProvidersDto {
+    constructor(...args){
+        super(...args), _define_property(this, "provider", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        enum: _socialprovidertypeenum.SocialProviderTypeEnum,
+        example: _socialprovidertypeenum.SocialProviderTypeEnum.GOOGLE
+    }),
+    (0, _classvalidator.IsEnum)(_socialprovidertypeenum.SocialProviderTypeEnum),
+    (0, _classvalidator.IsNotEmpty)(),
+    _ts_metadata("design:type", typeof _socialprovidertypeenum.SocialProviderTypeEnum === "undefined" ? Object : _socialprovidertypeenum.SocialProviderTypeEnum)
+], SocialAuthorizeDto.prototype, "provider", void 0);
+let SocialAuthorizeResponseDto = class SocialAuthorizeResponseDto {
+    constructor(){
+        _define_property(this, "provider", void 0);
+        _define_property(this, "authorizationUrl", void 0);
+        _define_property(this, "state", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        enum: _socialprovidertypeenum.SocialProviderTypeEnum
+    }),
+    (0, _classtransformer.Expose)(),
+    _ts_metadata("design:type", typeof _socialprovidertypeenum.SocialProviderTypeEnum === "undefined" ? Object : _socialprovidertypeenum.SocialProviderTypeEnum)
+], SocialAuthorizeResponseDto.prototype, "provider", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        description: "The provider's consent screen to redirect the browser to"
+    }),
+    (0, _classtransformer.Expose)(),
+    _ts_metadata("design:type", String)
+], SocialAuthorizeResponseDto.prototype, "authorizationUrl", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        description: 'Opaque CSRF token, echoed back by the provider'
+    }),
+    (0, _classtransformer.Expose)(),
+    _ts_metadata("design:type", String)
+], SocialAuthorizeResponseDto.prototype, "state", void 0);
+let SocialCallbackDto = class SocialCallbackDto extends SocialProvidersDto {
+    constructor(...args){
+        super(...args), _define_property(this, "code", void 0), _define_property(this, "state", void 0);
+    }
+};
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        description: 'Authorization code returned by the provider'
+    }),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.MaxLength)(4096),
+    _ts_metadata("design:type", String)
+], SocialCallbackDto.prototype, "code", void 0);
+_ts_decorate([
+    (0, _swagger.ApiProperty)({
+        description: 'The state issued by /auth/social/authorize'
+    }),
+    (0, _classvalidator.IsString)(),
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.MaxLength)(128),
+    _ts_metadata("design:type", String)
+], SocialCallbackDto.prototype, "state", void 0);

package/cjs/entities/index.js

@@ -23,6 +23,7 @@ const _appuserentity = _export_star(require("./app-user.entity"), exports);
 const _companybranchentity = _export_star(require("./company-branch.entity"), exports);
 const _companyentity = _export_star(require("./company.entity"), exports);
 const _pendingregistrationentity = _export_star(require("./pending-registration.entity"), exports);
+const _socialauthconfigentity = _export_star(require("./social-auth-config.entity"), exports);
 const _usercompanypermissionentity = require("./user-company-permission.entity");
 const _usertokenentity = _export_star(require("./user-token.entity"), exports);
 function _export_star(from, to) {
@@ -40,7 +41,8 @@ function _export_star(from, to) {
 }
 const BaseEntities = [
     _appuserentity.AppUser,
-    _usertokenentity.UserToken
+    _usertokenentity.UserToken,
+    _socialauthconfigentity.SocialAuthConfig
 ];
 const EmailEntities = [
     _pendingregistrationentity.PendingRegistration

package/cjs/entities/index.spec.js

@@ -6,6 +6,7 @@ const _index = require("./index");
 const _appuserentity = require("./app-user.entity");
 const _usertokenentity = require("./user-token.entity");
 const _pendingregistrationentity = require("./pending-registration.entity");
+const _socialauthconfigentity = require("./social-auth-config.entity");
 const _companyentity = require("./company.entity");
 const _companybranchentity = require("./company-branch.entity");
 const _usercompanypermissionentity = require("./user-company-permission.entity");
@@ -20,6 +21,15 @@ describe('getAuthEntitiesByConfig', ()=>{
             _usertokenentity.UserToken
         ]));
     });
+    it('should always include the social sign-in config entity, which no flag gates', ()=>{
+        const entities = (0, _index.getAuthEntitiesByConfig)({
+            enableCompanyFeature: false,
+            enableEmailVerification: false
+        });
+        expect(entities).toEqual(expect.arrayContaining([
+            _socialauthconfigentity.SocialAuthConfig
+        ]));
+    });
     it('should include PendingRegistration when email verification is enabled', ()=>{
         const entities = (0, _index.getAuthEntitiesByConfig)({
             enableEmailVerification: true
@@ -60,10 +70,11 @@ describe('getAuthEntitiesByConfig', ()=>{
             enableCompanyFeature: true,
             enableEmailVerification: true
         });
-        expect(entities).toHaveLength(6);
+        expect(entities).toHaveLength(7);
         expect(entities).toEqual(expect.arrayContaining([
             _appuserentity.AppUser,
             _usertokenentity.UserToken,
+            _socialauthconfigentity.SocialAuthConfig,
             _pendingregistrationentity.PendingRegistration,
             _companyentity.Company,
             _companybranchentity.CompanyBranch,

package/cjs/entities/social-auth-config.entity.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "SocialAuthConfig", {
+    enumerable: true,
+    get: function() {
+        return SocialAuthConfig;
+    }
+});
+const _nestjsshared = require("@flusys/nestjs-shared");
+const _entities = require("@flusys/nestjs-shared/entities");
+const _typeorm = require("typeorm");
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let SocialAuthConfig = class SocialAuthConfig extends _entities.Identity {
+    constructor(...args){
+        super(...args), _define_property(this, "provider", void 0), _define_property(this, "isEnabled", void 0), _define_property(this, "clientId", void 0), _define_property(this, "clientSecret", void 0), _define_property(this, "scopes", void 0), _define_property(this, "extraConfig", void 0);
+    }
+};
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'varchar',
+        length: 32,
+        nullable: false
+    }),
+    _ts_metadata("design:type", String)
+], SocialAuthConfig.prototype, "provider", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'boolean',
+        default: false,
+        name: 'is_enabled'
+    }),
+    _ts_metadata("design:type", Boolean)
+], SocialAuthConfig.prototype, "isEnabled", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'varchar',
+        length: 512,
+        nullable: true,
+        name: 'client_id'
+    }),
+    _ts_metadata("design:type", Object)
+], SocialAuthConfig.prototype, "clientId", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'text',
+        nullable: true,
+        name: 'client_secret'
+    }),
+    _ts_metadata("design:type", Object)
+], SocialAuthConfig.prototype, "clientSecret", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: 'simple-array',
+        nullable: true
+    }),
+    _ts_metadata("design:type", Object)
+], SocialAuthConfig.prototype, "scopes", void 0);
+_ts_decorate([
+    (0, _typeorm.Column)({
+        type: (0, _nestjsshared.getJsonColumnType)(),
+        nullable: true,
+        name: 'extra_config'
+    }),
+    _ts_metadata("design:type", Object)
+], SocialAuthConfig.prototype, "extraConfig", void 0);
+SocialAuthConfig = _ts_decorate([
+    (0, _typeorm.Entity)({
+        name: 'social_auth_config'
+    }),
+    (0, _typeorm.Index)('IDX_social_auth_config_provider', [
+        'provider'
+    ], {
+        unique: true,
+        where: '"deleted_at" IS NULL'
+    }),
+    (0, _typeorm.Index)([
+        'isEnabled'
+    ])
+], SocialAuthConfig);

package/cjs/enums/index.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
+_export_star(require("./social-provider-type.enum"), exports);
 _export_star(require("./user-org-permission-type.enum"), exports);
 function _export_star(from, to) {
     Object.keys(from).forEach(function(k) {

package/cjs/enums/social-provider-type.enum.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "SocialProviderTypeEnum", {
+    enumerable: true,
+    get: function() {
+        return SocialProviderTypeEnum;
+    }
+});
+var SocialProviderTypeEnum = /*#__PURE__*/ function(SocialProviderTypeEnum) {
+    SocialProviderTypeEnum["GOOGLE"] = "google";
+    SocialProviderTypeEnum["FACEBOOK"] = "facebook";
+    SocialProviderTypeEnum["LINKEDIN"] = "linkedin";
+    SocialProviderTypeEnum["MICROSOFT"] = "microsoft";
+    return SocialProviderTypeEnum;
+}({});

package/cjs/index.js

@@ -12,6 +12,7 @@ _export_star(require("./helpers"), exports);
 _export_star(require("./interceptors"), exports);
 _export_star(require("./interfaces"), exports);
 _export_star(require("./modules"), exports);
+_export_star(require("./providers"), exports);
 _export_star(require("./services"), exports);
 _export_star(require("./strategies/jwt.strategy"), exports);
 function _export_star(from, to) {

package/cjs/interfaces/index.js

@@ -6,6 +6,7 @@ _export_star(require("./authentication.interface"), exports);
 _export_star(require("./auth-email-provider.interface"), exports);
 _export_star(require("./company-branch.interface"), exports);
 _export_star(require("./company.interface"), exports);
+_export_star(require("./social-auth.interface"), exports);
 _export_star(require("./user.interface"), exports);
 _export_star(require("./user-enricher.interface"), exports);
 _export_star(require("./auth-module-options.interface"), exports);

package/cjs/interfaces/social-auth.interface.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});

package/cjs/modules/auth.module.js

@@ -84,6 +84,8 @@ let AuthModule = class AuthModule {
         if (!includeController) return [];
         const controllers = [
             _controllers.AuthenticationController,
+            _controllers.SocialAuthController,
+            _controllers.SocialAuthConfigController,
             _controllers.UserController
         ];
         if (flags.enableEmailVerification) {
@@ -101,6 +103,8 @@ let AuthModule = class AuthModule {
             _jwtstrategy.JwtStrategy,
             _guards.JwtAuthGuard,
             _services.AuthenticationService,
+            _services.SocialAuthService,
+            _services.SocialAuthConfigService,
             _settokeninterceptor.SetToken,
             _cleartokeninterceptor.ClearToken,
             _services.UserService,
@@ -123,6 +127,8 @@ let AuthModule = class AuthModule {
             _jwtstrategy.JwtStrategy,
             _guards.JwtAuthGuard,
             _services.AuthenticationService,
+            _services.SocialAuthService,
+            _services.SocialAuthConfigService,
             _services.UserService
         ];
         if (flags.enableEmailVerification) {

package/cjs/modules/auth.module.spec.js

@@ -34,11 +34,26 @@ describe('AuthModule', ()=>{
             expect(dynamicModule.global).toBe(false);
             expect(dynamicModule.controllers).toEqual([
                 _controllers.AuthenticationController,
+                _controllers.SocialAuthController,
+                _controllers.SocialAuthConfigController,
                 _controllers.UserController
             ]);
             expect(providerTokens(dynamicModule.providers)).not.toContain(_services.AuthEmailService);
             expect(providerTokens(dynamicModule.providers)).not.toContain(_services.CompanyService);
         });
+        it('should always register social sign-in, whatever the feature flags say', ()=>{
+            const dynamicModule = _authmodule.AuthModule.forRoot({
+                bootstrapAppConfig: {
+                    enableCompanyFeature: false
+                }
+            });
+            expect(dynamicModule.controllers).toContain(_controllers.SocialAuthController);
+            expect(dynamicModule.controllers).toContain(_controllers.SocialAuthConfigController);
+            expect(providerTokens(dynamicModule.providers)).toContain(_services.SocialAuthService);
+            expect(providerTokens(dynamicModule.providers)).toContain(_services.SocialAuthConfigService);
+            expect(dynamicModule.exports).toContain(_services.SocialAuthService);
+            expect(dynamicModule.exports).toContain(_services.SocialAuthConfigService);
+        });
         it('should respect global: true', ()=>{
             const dynamicModule = _authmodule.AuthModule.forRoot({
                 global: true

package/cjs/providers/facebook.social-provider.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "facebookSocialProvider", {
+    enumerable: true,
+    get: function() {
+        return facebookSocialProvider;
+    }
+});
+const _socialprovidertypeenum = require("../enums/social-provider-type.enum");
+const _oauthhttputil = require("./oauth-http.util");
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+const GRAPH_VERSION = 'v21.0';
+const AUTHORIZE_URL = `https://www.facebook.com/${GRAPH_VERSION}/dialog/oauth`;
+const TOKEN_URL = `https://graph.facebook.com/${GRAPH_VERSION}/oauth/access_token`;
+const PROFILE_URL = `https://graph.facebook.com/${GRAPH_VERSION}/me?fields=id,name,email,picture.type(large)`;
+function readAvatarUrl(profile) {
+    const picture = profile['picture'];
+    if (typeof picture !== 'object' || picture === null) return null;
+    const data = picture['data'];
+    if (typeof data !== 'object' || data === null) return null;
+    return (0, _oauthhttputil.readString)(data, 'url');
+}
+let FacebookSocialProvider = class FacebookSocialProvider {
+    buildAuthorizationUrl(credentials, state) {
+        const query = (0, _oauthhttputil.buildQuery)({
+            client_id: credentials.clientId,
+            redirect_uri: credentials.redirectUri,
+            response_type: 'code',
+            scope: (0, _oauthhttputil.resolveScopes)(credentials, this.defaultScopes, ','),
+            state
+        });
+        return `${AUTHORIZE_URL}?${query}`;
+    }
+    async fetchProfile(credentials, code) {
+        const token = await (0, _oauthhttputil.postForm)(this.provider, TOKEN_URL, {
+            code,
+            client_id: credentials.clientId,
+            client_secret: credentials.clientSecret,
+            redirect_uri: credentials.redirectUri
+        });
+        const profile = await (0, _oauthhttputil.getJson)(this.provider, PROFILE_URL, (0, _oauthhttputil.readAccessToken)(this.provider, token));
+        const email = (0, _oauthhttputil.readString)(profile, 'email');
+        return {
+            providerUserId: (0, _oauthhttputil.readString)(profile, 'id') ?? '',
+            email,
+            emailVerified: !!email,
+            name: (0, _oauthhttputil.readString)(profile, 'name'),
+            avatarUrl: readAvatarUrl(profile)
+        };
+    }
+    constructor(){
+        _define_property(this, "provider", _socialprovidertypeenum.SocialProviderTypeEnum.FACEBOOK);
+        _define_property(this, "defaultScopes", [
+            'email',
+            'public_profile'
+        ]);
+    }
+};
+const facebookSocialProvider = new FacebookSocialProvider();