@flusys/nestjs-auth 7.0.2 → 8.0.0-beta.1

package/README.md

@@ -120,7 +120,7 @@ AuthModule.forRootAsync({
     databaseMode: 'single',
     enableCompanyFeature: true,
     enableEmailVerification: true,
-  },why you cannot fix it,, need to need gap bellow LAB REPORT text
+  },
   useFactory: (cfg: ConfigService) => ({
     defaultDatabaseConfig: {
       type: 'mysql',
@@ -266,6 +266,73 @@ export const userEnricherProvider = {
 AuthModule.forRootAsync({ ..., providers: [userEnricherProvider] });
 ```
 
+## 5. Social Sign-In
+
+Google, Facebook, LinkedIn and Microsoft are built in. Nothing is enabled until an
+administrator saves credentials, and no flag gates the feature: the
+`social_auth_config` and `user_social_account` tables are always registered, and
+`SocialAuthController` / `SocialAuthConfigController` are always mounted.
+
+### Credentials
+
+`POST /auth/social-config/*` is the usual CRUD surface, guarded by the
+`social-config.create|read|update|delete` permissions. One row per provider is
+enforced, so a provider can be addressed by name from an admin screen.
+
+| Column         | Purpose                                                          |
+| -------------- | ---------------------------------------------------------------- |
+| `provider`     | `google` \| `facebook` \| `linkedin` \| `microsoft` (unique)     |
+| `isEnabled`    | Whether the login page offers it; credentials survive a disable  |
+| `clientId`     | OAuth client id from the provider's console                      |
+| `clientSecret` | OAuth client secret                                              |
+| `scopes`       | Overrides the provider's defaults when set                       |
+| `extraConfig`  | Provider extras — Microsoft's `tenantId`, for instance           |
+
+### Sign-in flow
+
+```
+POST /auth/social/providers  { redirectUri }               → [{ provider, redirectUri }]
+POST /auth/social/authorize  { provider, redirectUri }     → { authorizationUrl, state }
+   browser → provider consent screen → back to redirectUri?code=…&state=…
+POST /auth/social/callback   { code, state, redirectUri }  → the same union /auth/login returns
+```
+
+The `state` is a single-use, cache-backed token that also records which provider
+and redirect URI the sign-in started with — providers echo back nothing but
+`code` and `state`, so the callback carries no provider of its own. Redeeming a
+state deletes it, and a redirect URI that does not match the one the sign-in
+started with is rejected.
+
+The callback returns exactly what `POST /auth/login` returns, company selection
+included, because both routes finish through `AuthenticationService.issueLoginForUser`.
+
+### How a user is matched
+
+1. The provider's own account id, via `user_social_account` — survives an email change at the provider.
+2. Otherwise the email, so an existing password account is adopted rather than duplicated.
+3. Otherwise a new account with no password.
+
+Steps 2 and 3 require the provider to have **verified** the address. Matching on an
+unverified email would let anyone who registers someone else's address at the
+provider walk into their FLUSYS account, so an unverified profile is rejected.
+An account already linked at step 1 is unaffected.
+
+Step 3 — creating an account — is refused in two cases, each with its own message key:
+
+| Condition                                   | Result                                       |
+| ------------------------------------------- | -------------------------------------------- |
+| `bootstrapAppConfig.enableSignUp` is `false` | `auth.social.account.not.linked`             |
+| `enableCompanyFeature` is `true`             | `auth.social.company.required`               |
+
+`enableSignUp` is the single switch for social sign-up; there is no per-provider
+override. With the company feature on, a brand-new account could not be given a
+company and would land in a session the route guards reject, so it is refused
+outright: grant the user a company permission first and their social sign-in
+then works. Signing **in** is never affected by either — only account creation is.
+
+A cache instance is required: `AuthModule` imports `CacheModule`, so this is
+satisfied by default.
+
 ## License
 
 MIT © FLUSYS

package/config/auth.constants.d.ts

@@ -5,3 +5,5 @@ export declare const DEFAULT_COOKIE_NAME = "fsn_refresh_token";
 export declare const MAX_COOKIE_BYTES = 3500;
 export declare const SESSION_CACHE_PREFIX = "auth:session";
 export declare const TOKEN_REVOKED_PREFIX = "auth:revoked";
+export declare const SOCIAL_STATE_PREFIX = "auth:social:state";
+export declare const SOCIAL_STATE_TTL_MS: number;

package/config/event-actions.d.ts

@@ -10,6 +10,7 @@ export declare const AUTH_EVENT_ACTIONS: {
     readonly EMAIL_VERIFIED: "email-verified";
     readonly PERMISSION_GRANTED: "permission-granted";
     readonly PERMISSION_REVOKED: "permission-revoked";
+    readonly SOCIAL_LOGGED_IN: "social-logged-in";
 };
 export declare const AUTH_EVENT_ENTITIES: {
     readonly USER: "appuser";
@@ -17,5 +18,6 @@ export declare const AUTH_EVENT_ENTITIES: {
     readonly COMPANY_BRANCH: "company_branch";
     readonly SESSION: "session";
     readonly USER_PERMISSION: "user_company_permission";
+    readonly SOCIAL_AUTH_CONFIG: "social_auth_config";
 };
 export declare const AUTH_EVENT_MODULE = "auth";

package/config/index.d.ts

@@ -1,3 +1,3 @@
-export * from './auth.constants';
-export * from './event-actions';
-export * from './message-keys';
+export * from './auth.constants.js';
+export * from './event-actions.js';
+export * from './message-keys.js';

package/config/message-keys.d.ts

@@ -12,7 +12,9 @@ export declare const AUTH_MESSAGES: {
     readonly SELECT_SUCCESS: "auth.select.success";
     readonly SWITCH_COMPANY_SUCCESS: "auth.switch.company.success";
     readonly REGISTER_EMAIL_EXISTS: "auth.register.email.exists";
+    readonly REGISTER_ACCOUNT_DELETED: "auth.register.account.deleted";
     readonly REGISTER_COMPANY_ALREADY_ASSIGNED: "auth.register.company.already.assigned";
+    readonly REGISTER_SIGNUP_DISABLED: "auth.register.signup.disabled";
     readonly PASSWORD_CHANGE_SUCCESS: "auth.password.change.success";
     readonly PASSWORD_CHANGE_INVALID_CURRENT: "auth.password.change.invalid.current";
     readonly PASSWORD_CHANGE_CURRENT_REQUIRED: "auth.password.change.current.required";
@@ -49,6 +51,25 @@ export declare const EMAIL_VERIFICATION_MESSAGES: {
     readonly VERIFICATION_NOT_ENABLED: "email.verification.not.enabled";
     readonly RESEND_SUCCESS: "email.verification.resend.success";
 };
+export declare const SOCIAL_AUTH_MESSAGES: {
+    readonly PROVIDERS_SUCCESS: "auth.social.providers.success";
+    readonly AUTHORIZE_SUCCESS: "auth.social.authorize.success";
+    readonly LOGIN_SUCCESS: "auth.social.login.success";
+    readonly PROVIDER_DISABLED: "auth.social.provider.disabled";
+    readonly PROVIDER_NOT_CONFIGURED: "auth.social.provider.not.configured";
+    readonly STATE_INVALID: "auth.social.state.invalid";
+    readonly REDIRECT_URI_MISMATCH: "auth.social.redirect.uri.mismatch";
+    readonly EXCHANGE_FAILED: "auth.social.exchange.failed";
+    readonly PROFILE_INCOMPLETE: "auth.social.profile.incomplete";
+    readonly ACCOUNT_NOT_LINKED: "auth.social.account.not.linked";
+    readonly COMPANY_REQUIRED: "auth.social.company.required";
+    readonly EMAIL_REQUIRED: "auth.social.email.required";
+    readonly EMAIL_NOT_VERIFIED: "auth.social.email.not.verified";
+    readonly ACCOUNT_DELETED: "auth.social.account.deleted";
+};
+export declare const SOCIAL_AUTH_CONFIG_MESSAGES: {
+    readonly PROVIDER_ALREADY_CONFIGURED: "social.config.provider.already.configured";
+};
 export declare const USER_MESSAGES: {
     readonly NOT_FOUND: "user.not.found";
     readonly PROFILE_UPDATE_SUCCESS: "user.profile.update.success";
@@ -74,4 +95,6 @@ export declare const USER_PERMISSION_MESSAGES: {
     readonly BATCH_SUCCESS: "user.permission.batch.success";
     readonly ALREADY_ASSIGNED: "user.permission.already.assigned";
     readonly PERMISSION_NOT_FOUND: "user.permission.not.found";
+    readonly COMPANY_NO_ACCESS: "user.permission.company.no.access";
+    readonly BRANCH_NO_ACCESS: "user.permission.branch.no.access";
 };

package/controllers/authentication.controller.d.ts

@@ -1,9 +1,9 @@
 import { MessageResponseDto, SingleResponseDto } from '@flusys/nestjs-shared/dtos';
-import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
-import { Request } from 'express';
-import { ChangePasswordDto, CompanySelectionResponseDto, LoginDto, LoginResponseDto, LoginResponseRequiresEmailVerificationDto, MeResponseDto, RefreshTokenDto, RegistrationDto, RegistrationResponseDto } from '../dtos/authentication.dto';
-import { AuthConfigService } from '../services/auth-config.service';
-import { AuthenticationService } from '../services/authentication.service';
+import { type ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
+import { type Request } from 'express';
+import { ChangePasswordDto, CompanySelectionResponseDto, LoginDto, LoginResponseDto, LoginResponseRequiresEmailVerificationDto, MeResponseDto, RefreshTokenDto, RegistrationDto, RegistrationResponseDto } from '../dtos/authentication.dto.js';
+import { AuthConfigService } from '../services/auth-config.service.js';
+import { AuthenticationService } from '../services/authentication.service.js';
 export declare class AuthenticationController {
     private readonly authService;
     private readonly authConfig?;

package/controllers/branch.controller.d.ts

@@ -1,5 +1,5 @@
-import { CompanyBranchResponseDto, CreateCompanyBranchDto, UpdateCompanyBranchDto } from '../dtos/company-branch.dto';
-import { BranchService } from '../services/branch.service';
+import { CompanyBranchResponseDto, CreateCompanyBranchDto, UpdateCompanyBranchDto } from '../dtos/company-branch.dto.js';
+import { BranchService } from '../services/branch.service.js';
 declare const BranchController_base: abstract new (service: BranchService) => {
     readonly enabledEndpoints: import("@flusys/nestjs-shared").ApiEndpoint[] | "all";
     service: BranchService;

package/controllers/company-selection.controller.d.ts

@@ -1,6 +1,6 @@
 import { SingleResponseDto } from '@flusys/nestjs-shared/dtos';
-import { LoginResponseDto, SelectDto, SwitchCompanyDto } from '../dtos/authentication.dto';
-import { AuthenticationService } from '../services/authentication.service';
+import { LoginResponseDto, SelectDto, SwitchCompanyDto } from '../dtos/authentication.dto.js';
+import { AuthenticationService } from '../services/authentication.service.js';
 export declare class CompanySelectionController {
     private readonly authService;
     constructor(authService: AuthenticationService);
@@ -10,12 +10,12 @@ export declare class CompanySelectionController {
         success: boolean;
         message: string;
         messageKey: "auth.company.list.success";
-        data: import("..").Company[];
+        data: import("../index.js").Company[];
     }>;
     getUserBranches(userId: string, companyId: string): Promise<{
         success: boolean;
         message: string;
         messageKey: "auth.branch.list.success";
-        data: import("..").CompanyBranch[];
+        data: import("../index.js").CompanyBranch[];
     }>;
 }

package/controllers/company.controller.d.ts

@@ -1,5 +1,5 @@
-import { CompanyResponseDto, CreateCompanyDto, UpdateCompanyDto } from '../dtos/company.dto';
-import { CompanyService } from '../services/company.service';
+import { CompanyResponseDto, CreateCompanyDto, UpdateCompanyDto } from '../dtos/company.dto.js';
+import { CompanyService } from '../services/company.service.js';
 declare const CompanyController_base: abstract new (service: CompanyService) => {
     readonly enabledEndpoints: import("@flusys/nestjs-shared").ApiEndpoint[] | "all";
     service: CompanyService;

package/controllers/email-verification.controller.d.ts

@@ -1,10 +1,10 @@
 import { MessageResponseDto } from '@flusys/nestjs-shared/dtos';
-import { Request } from 'express';
-import { ForgotPasswordDto, RegistrationResponseDto, ResendVerificationDto, ResetPasswordDto, VerifyEmailDto } from '../dtos/authentication.dto';
-import { AuthConfigService } from '../services/auth-config.service';
-import { AuthDataSourceProvider } from '../services/auth-datasource.provider';
-import { AuthEmailService } from '../services/auth-email.service';
-import { AuthenticationService } from '../services/authentication.service';
+import { type Request } from 'express';
+import { ForgotPasswordDto, RegistrationResponseDto, ResendVerificationDto, ResetPasswordDto, VerifyEmailDto } from '../dtos/authentication.dto.js';
+import { AuthConfigService } from '../services/auth-config.service.js';
+import { AuthDataSourceProvider } from '../services/auth-datasource.provider.js';
+import { AuthEmailService } from '../services/auth-email.service.js';
+import { AuthenticationService } from '../services/authentication.service.js';
 export declare class EmailVerificationController {
     private readonly authService;
     private readonly authEmailService;

package/controllers/index.d.ts

@@ -1,7 +1,9 @@
-export * from './authentication.controller';
-export * from './company-selection.controller';
-export * from './email-verification.controller';
-export * from './user.controller';
-export * from './company.controller';
-export * from './branch.controller';
-export * from './user-permission.controller';
+export * from './authentication.controller.js';
+export * from './company-selection.controller.js';
+export * from './email-verification.controller.js';
+export * from './social-auth.controller.js';
+export * from './social-auth-config.controller.js';
+export * from './user.controller.js';
+export * from './company.controller.js';
+export * from './branch.controller.js';
+export * from './user-permission.controller.js';

package/controllers/social-auth-config.controller.d.ts

@@ -0,0 +1,22 @@
+import { CreateSocialAuthConfigDto, SocialAuthConfigResponseDto, UpdateSocialAuthConfigDto } from '../dtos/social-auth.dto.js';
+import { SocialAuthConfigService } from '../services/social-auth-config.service.js';
+declare const SocialAuthConfigController_base: abstract new (service: SocialAuthConfigService) => {
+    readonly enabledEndpoints: import("@flusys/nestjs-shared").ApiEndpoint[] | "all";
+    service: SocialAuthConfigService;
+    isEnabled(endpoint: import("@flusys/nestjs-shared").ApiEndpoint): boolean;
+    insert(addDto: CreateSocialAuthConfigDto, user: import("@flusys/nestjs-shared").ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").SingleResponseDto<SocialAuthConfigResponseDto>>;
+    insertMany(addDto: CreateSocialAuthConfigDto[], user: import("@flusys/nestjs-shared").ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").BulkResponseDto<SocialAuthConfigResponseDto>>;
+    getById(id: string, body: import("@flusys/nestjs-shared").GetByIdBodyDto, user: import("@flusys/nestjs-shared").ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").SingleResponseDto<SocialAuthConfigResponseDto>>;
+    getByIds(body: import("@flusys/nestjs-shared").GetByIdsDto, user: import("@flusys/nestjs-shared").ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").ListResponseDto<SocialAuthConfigResponseDto>>;
+    update(updateDto: UpdateSocialAuthConfigDto, user: import("@flusys/nestjs-shared").ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").SingleResponseDto<SocialAuthConfigResponseDto>>;
+    updateMany(updateDtos: UpdateSocialAuthConfigDto[], user: import("@flusys/nestjs-shared").ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").BulkResponseDto<SocialAuthConfigResponseDto>>;
+    bulkUpsert(dtos: (CreateSocialAuthConfigDto | UpdateSocialAuthConfigDto)[], user: import("@flusys/nestjs-shared").ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").BulkResponseDto<SocialAuthConfigResponseDto>>;
+    getByFilter(filter: Record<string, any>, user: import("@flusys/nestjs-shared").ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").SingleResponseDto<SocialAuthConfigResponseDto>>;
+    getAll(filterAndPaginationDto: import("@flusys/nestjs-shared").FilterAndPaginationDto, user: import("@flusys/nestjs-shared").ILoggedUserInfo | null, search?: string): Promise<import("@flusys/nestjs-shared").ListResponseDto<SocialAuthConfigResponseDto>>;
+    delete(deleteDto: import("@flusys/nestjs-shared").DeleteDto, user: import("@flusys/nestjs-shared").ILoggedUserInfo | null): Promise<import("@flusys/nestjs-shared").MessageResponseDto>;
+};
+export declare class SocialAuthConfigController extends SocialAuthConfigController_base {
+    socialAuthConfigService: SocialAuthConfigService;
+    constructor(socialAuthConfigService: SocialAuthConfigService);
+}
+export {};

package/controllers/social-auth.controller.d.ts

@@ -0,0 +1,11 @@
+import { SingleResponseDto } from '@flusys/nestjs-shared/dtos';
+import { CompanySelectionResponseDto, LoginResponseDto } from '../dtos/authentication.dto.js';
+import { SocialAuthorizeDto, SocialAuthorizeResponseDto, SocialCallbackDto, SocialProviderInfoDto, SocialProvidersDto } from '../dtos/social-auth.dto.js';
+import { SocialAuthService } from '../services/social-auth.service.js';
+export declare class SocialAuthController {
+    private readonly socialAuthService;
+    constructor(socialAuthService: SocialAuthService);
+    getProviders(dto: SocialProvidersDto): Promise<SingleResponseDto<SocialProviderInfoDto[]>>;
+    authorize(dto: SocialAuthorizeDto): Promise<SingleResponseDto<SocialAuthorizeResponseDto>>;
+    callback(dto: SocialCallbackDto): Promise<SingleResponseDto<LoginResponseDto | CompanySelectionResponseDto>>;
+}

package/controllers/user-permission.controller.d.ts

@@ -1,16 +1,17 @@
-import { AssignUserBranchDto, AssignUserCompanyDto, UserBranchesResponseDto, UserCompaniesResponseDto } from '../dtos/user-permission.dto';
-import { UserPermissionService } from '../services/user-permission.service';
+import { type ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
+import { AssignUserBranchDto, AssignUserCompanyDto, UserBranchesResponseDto, UserCompaniesResponseDto } from '../dtos/user-permission.dto.js';
+import { UserPermissionService } from '../services/user-permission.service.js';
 export declare class UserPermissionController {
     private readonly permissionService;
     constructor(permissionService: UserPermissionService);
-    assignUserCompany(dto: AssignUserCompanyDto): Promise<{
+    assignUserCompany(dto: AssignUserCompanyDto, user: ILoggedUserInfo): Promise<{
         success: boolean;
         message: string;
         messageKey: string;
         messageVariables: Record<string, number>;
     }>;
     getUserCompanies(userId: string): Promise<UserCompaniesResponseDto>;
-    assignUserBranch(dto: AssignUserBranchDto): Promise<{
+    assignUserBranch(dto: AssignUserBranchDto, user: ILoggedUserInfo): Promise<{
         success: boolean;
         message: string;
         messageKey: string;

package/controllers/user.controller.d.ts

@@ -1,8 +1,8 @@
 import { FilterAndPaginationDto, ListResponseDto } from '@flusys/nestjs-shared/dtos';
-import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
-import { CreateUserDto, UpdateUserDto, UserLookupResponseDto, UserResponseDto } from '../dtos/user.dto';
-import { IUser } from '../interfaces/user.interface';
-import { UserService } from '../services/user.service';
+import { type ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
+import { CreateUserDto, UpdateUserDto, UserLookupResponseDto, UserResponseDto } from '../dtos/user.dto.js';
+import { type IUser } from '../interfaces/user.interface.js';
+import { UserService } from '../services/user.service.js';
 declare const UserController_base: abstract new (service: UserService) => {
     readonly enabledEndpoints: import("@flusys/nestjs-shared").ApiEndpoint[] | "all";
     service: UserService;
@@ -28,7 +28,7 @@ export declare class UserController extends UserController_base {
         messageKey: "user.profile.extras.success";
         data: {
             user: IUser;
-            extras?: import("..").IProfileExtras;
+            extras?: import("../index.js").IProfileExtras;
         };
     }>;
     verifyEmail(id: string): Promise<{
@@ -56,13 +56,13 @@ export declare class UserController extends UserController_base {
         success: boolean;
         message: string;
         messageKey: "user.profile.sections.success";
-        data: import("..").IProfileSection[];
+        data: import("../index.js").IProfileSection[];
     }>;
     getProfileSectionData(id: string, sectionId: string, user: ILoggedUserInfo): Promise<{
         success: boolean;
         message: string;
         messageKey: "user.profile.section.data.success";
-        data: import("..").IProfileSectionData | null;
+        data: import("../index.js").IProfileSectionData | null;
     }>;
     updateProfileSection(id: string, sectionId: string, data: Record<string, any>, user: ILoggedUserInfo): Promise<{
         success: boolean;

package/docs/auth-swagger.config.d.ts

@@ -1,3 +1,3 @@
-import { IBootstrapAppConfig } from '@flusys/nestjs-core';
-import { IModuleSwaggerOptions } from '@flusys/nestjs-core/docs';
+import { type IBootstrapAppConfig } from '@flusys/nestjs-core';
+import { type IModuleSwaggerOptions } from '@flusys/nestjs-core/docs';
 export declare function authSwaggerConfig(bootstrapConfig?: IBootstrapAppConfig): IModuleSwaggerOptions;

package/docs/index.d.ts

@@ -1 +1 @@
-export * from './auth-swagger.config';
+export * from './auth-swagger.config.js';

package/dtos/index.d.ts

@@ -1,5 +1,6 @@
-export * from './authentication.dto';
-export * from './company-branch.dto';
-export * from './company.dto';
-export * from './user.dto';
-export * from './user-permission.dto';
+export * from './authentication.dto.js';
+export * from './company-branch.dto.js';
+export * from './company.dto.js';
+export * from './social-auth.dto.js';
+export * from './user.dto.js';
+export * from './user-permission.dto.js';

package/dtos/social-auth.dto.d.ts

@@ -0,0 +1,42 @@
+import { IdentityResponseDto } from '@flusys/nestjs-shared/dtos';
+import { SocialProviderTypeEnum } from '../enums/social-provider-type.enum.js';
+export declare class CreateSocialAuthConfigDto {
+    provider: SocialProviderTypeEnum;
+    isEnabled?: boolean;
+    clientId?: string;
+    clientSecret?: string;
+    scopes?: string[];
+    extraConfig?: Record<string, unknown>;
+}
+declare const UpdateSocialAuthConfigDto_base: import("@nestjs/common").Type<Partial<CreateSocialAuthConfigDto>>;
+export declare class UpdateSocialAuthConfigDto extends UpdateSocialAuthConfigDto_base {
+    id: string;
+}
+export declare class SocialAuthConfigResponseDto extends IdentityResponseDto {
+    provider: SocialProviderTypeEnum;
+    isEnabled: boolean;
+    clientId: string | null;
+    hasClientSecret: boolean;
+    scopes: string[] | null;
+    extraConfig: Record<string, unknown> | null;
+}
+export declare class SocialProviderInfoDto {
+    provider: SocialProviderTypeEnum;
+    redirectUri: string;
+}
+export declare class SocialProvidersDto {
+    redirectUri: string;
+}
+export declare class SocialAuthorizeDto extends SocialProvidersDto {
+    provider: SocialProviderTypeEnum;
+}
+export declare class SocialAuthorizeResponseDto {
+    provider: SocialProviderTypeEnum;
+    authorizationUrl: string;
+    state: string;
+}
+export declare class SocialCallbackDto extends SocialProvidersDto {
+    code: string;
+    state: string;
+}
+export {};

package/entities/company-branch.entity.d.ts

@@ -1,5 +1,5 @@
 import { Identity } from '@flusys/nestjs-shared';
-import { Company } from './company.entity';
+import { Company } from './company.entity.js';
 export declare class CompanyBranch extends Identity {
     readOnly: boolean;
     name: string;

package/entities/company.entity.d.ts

@@ -1,5 +1,5 @@
 import { Identity } from '@flusys/nestjs-shared';
-import { CompanyBranch } from './company-branch.entity';
+import { CompanyBranch } from './company-branch.entity.js';
 export declare class Company extends Identity {
     readOnly: boolean;
     name: string;

package/entities/index.d.ts

@@ -1,16 +1,18 @@
-export * from './app-user.entity';
-export * from './company-branch.entity';
-export * from './company.entity';
-export * from './pending-registration.entity';
-export { PermissionType, UserCompanyPermission } from './user-company-permission.entity';
-export * from './user-token.entity';
-import { AppUser } from './app-user.entity';
-import { CompanyBranch } from './company-branch.entity';
-import { Company } from './company.entity';
-import { PendingRegistration } from './pending-registration.entity';
-import { UserCompanyPermission } from './user-company-permission.entity';
-import { UserToken } from './user-token.entity';
-declare const BaseEntities: (typeof AppUser | typeof UserToken)[];
+export * from './app-user.entity.js';
+export * from './company-branch.entity.js';
+export * from './company.entity.js';
+export * from './pending-registration.entity.js';
+export * from './social-auth-config.entity.js';
+export { PermissionType, UserCompanyPermission } from './user-company-permission.entity.js';
+export * from './user-token.entity.js';
+import { AppUser } from './app-user.entity.js';
+import { CompanyBranch } from './company-branch.entity.js';
+import { Company } from './company.entity.js';
+import { PendingRegistration } from './pending-registration.entity.js';
+import { SocialAuthConfig } from './social-auth-config.entity.js';
+import { UserCompanyPermission } from './user-company-permission.entity.js';
+import { UserToken } from './user-token.entity.js';
+declare const BaseEntities: (typeof AppUser | typeof SocialAuthConfig | typeof UserToken)[];
 declare const EmailEntities: (typeof PendingRegistration)[];
 declare const CompanyEntities: (typeof Company | typeof CompanyBranch | typeof UserCompanyPermission)[];
 export interface IAuthEntitiesConfig {

package/entities/pending-registration.entity.d.ts

@@ -1,4 +1,4 @@
-import { CompanyRegistrationData } from '../interfaces/authentication.interface';
+import { type CompanyRegistrationData } from '../interfaces/authentication.interface.js';
 export declare class PendingRegistration {
     id: string;
     email: string;

package/entities/social-auth-config.entity.d.ts

@@ -0,0 +1,9 @@
+import { Identity } from '@flusys/nestjs-shared/entities';
+export declare class SocialAuthConfig extends Identity {
+    provider: string;
+    isEnabled: boolean;
+    clientId: string | null;
+    clientSecret: string | null;
+    scopes: string[] | null;
+    extraConfig: Record<string, unknown> | null;
+}

package/entities/user-company-permission.entity.d.ts

@@ -1,7 +1,7 @@
-import { PermissionType } from '../enums';
-import { AppUser } from './app-user.entity';
-import { CompanyBranch } from './company-branch.entity';
-import { Company } from './company.entity';
+import { PermissionType } from '../enums/index.js';
+import { AppUser } from './app-user.entity.js';
+import { CompanyBranch } from './company-branch.entity.js';
+import { Company } from './company.entity.js';
 export { PermissionType };
 export declare class UserCompanyPermission {
     id: string;

package/enums/index.d.ts

@@ -1 +1,2 @@
-export * from './user-org-permission-type.enum';
+export * from './social-provider-type.enum.js';
+export * from './user-org-permission-type.enum.js';

package/enums/social-provider-type.enum.d.ts

@@ -0,0 +1,6 @@
+export declare enum SocialProviderTypeEnum {
+    GOOGLE = "google",
+    FACEBOOK = "facebook",
+    LINKEDIN = "linkedin",
+    MICROSOFT = "microsoft"
+}