@flusys/nestjs-auth 7.0.2 → 8.0.0-beta.1

package/cjs/interceptors/set-token.interceptor.js

@@ -1,107 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "SetToken", {
-    enumerable: true,
-    get: function() {
-        return SetToken;
-    }
-});
-const _utils = require("@flusys/nestjs-shared/utils");
-const _config = require("../config");
-const _common = require("@nestjs/common");
-const _buffer = require("buffer");
-const _rxjs = require("rxjs");
-const _authconfigservice = require("../services/auth-config.service");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-let SetToken = class SetToken {
-    get cookieName() {
-        return this.authConfig?.getRefreshTokenCookieName() ?? _config.DEFAULT_COOKIE_NAME;
-    }
-    get maxAgeMs() {
-        return (0, _utils.parseDurationToMs)(this.authConfig?.getRefreshTokenExpiration() ?? '7d');
-    }
-    intercept(context, next) {
-        const req = context.switchToHttp().getRequest();
-        const res = context.switchToHttp().getResponse();
-        return next.handle().pipe((0, _rxjs.map)((value)=>{
-            if (typeof value !== 'object' || value === null) {
-                return value;
-            }
-            const response = value;
-            const data = typeof response['data'] === 'object' && response['data'] !== null ? response['data'] : null;
-            const tokenInData = data && typeof data['refreshToken'] === 'string';
-            if (!tokenInData) {
-                return value;
-            }
-            if (!(0, _utils.isBrowserRequest)(req)) {
-                return value;
-            }
-            this.setRefreshTokenCookie(req, res, data['refreshToken']);
-            const { refreshToken: _, ...dataWithoutToken } = data;
-            return {
-                ...response,
-                data: dataWithoutToken
-            };
-        }), (0, _rxjs.catchError)((err)=>(0, _rxjs.throwError)(()=>err)));
-    }
-    setRefreshTokenCookie(req, res, tokenValue) {
-        const rawCookieString = `${this.cookieName}=${tokenValue}; HttpOnly`;
-        const estimatedBytes = _buffer.Buffer.byteLength(rawCookieString, 'utf8');
-        if (estimatedBytes > _config.MAX_COOKIE_BYTES) {
-            throw new _common.PayloadTooLargeException({
-                message: `Refresh token too large (≈${estimatedBytes} bytes)`,
-                messageKey: _config.AUTH_MESSAGES.TOKEN_TOO_LARGE,
-                messageVariables: {
-                    size: estimatedBytes
-                }
-            });
-        }
-        res.cookie(this.cookieName, tokenValue, {
-            httpOnly: true,
-            path: '/',
-            maxAge: this.maxAgeMs,
-            ...(0, _utils.buildCookieOptions)(req)
-        });
-    }
-    constructor(authConfig){
-        _define_property(this, "authConfig", void 0);
-        this.authConfig = authConfig;
-    }
-};
-SetToken = _ts_decorate([
-    (0, _common.Injectable)(),
-    _ts_param(0, (0, _common.Optional)()),
-    _ts_param(0, (0, _common.Inject)(_authconfigservice.AuthConfigService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _authconfigservice.AuthConfigService === "undefined" ? Object : _authconfigservice.AuthConfigService
-    ])
-], SetToken);

package/cjs/interceptors/set-token.interceptor.spec.js

@@ -1,165 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-const _common = require("@nestjs/common");
-const _rxjs = require("rxjs");
-const _settokeninterceptor = require("./set-token.interceptor");
-const _config = require("../config");
-function buildContext(req, res) {
-    return {
-        switchToHttp: ()=>({
-                getRequest: ()=>req,
-                getResponse: ()=>res
-            })
-    };
-}
-function buildCallHandler(value) {
-    return {
-        handle: ()=>(0, _rxjs.of)(value)
-    };
-}
-const browserReq = {
-    headers: {
-        'user-agent': 'Mozilla/5.0 Chrome/1.0'
-    }
-};
-const apiReq = {
-    headers: {
-        'user-agent': 'PostmanRuntime/7.0'
-    }
-};
-describe('SetToken', ()=>{
-    let mockAuthConfig;
-    beforeEach(()=>{
-        mockAuthConfig = {
-            getRefreshTokenCookieName: jest.fn().mockReturnValue('custom_refresh_token'),
-            getRefreshTokenExpiration: jest.fn().mockReturnValue('7d')
-        };
-    });
-    it('sets a refresh token cookie and strips refreshToken from data for browser requests', (done)=>{
-        const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            success: true,
-            data: {
-                accessToken: 'access-1',
-                refreshToken: 'refresh-1',
-                user: {
-                    id: 'u1'
-                }
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe((result)=>{
-            expect(cookie).toHaveBeenCalledWith('custom_refresh_token', 'refresh-1', expect.objectContaining({
-                httpOnly: true,
-                path: '/'
-            }));
-            expect(result).toEqual({
-                success: true,
-                data: {
-                    accessToken: 'access-1',
-                    user: {
-                        id: 'u1'
-                    }
-                }
-            });
-            expect(result.data.refreshToken).toBeUndefined();
-            done();
-        });
-    });
-    it('does not set a cookie or modify data for non-browser (API) requests', (done)=>{
-        const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            success: true,
-            data: {
-                accessToken: 'access-1',
-                refreshToken: 'refresh-1'
-            }
-        };
-        interceptor.intercept(buildContext(apiReq, res), buildCallHandler(payload)).subscribe((result)=>{
-            expect(cookie).not.toHaveBeenCalled();
-            expect(result).toBe(payload);
-            done();
-        });
-    });
-    it('passes through non-object values unchanged', (done)=>{
-        const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
-        const res = {
-            cookie: jest.fn()
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler('plain-string')).subscribe((result)=>{
-            expect(result).toBe('plain-string');
-            done();
-        });
-    });
-    it('passes through null values unchanged', (done)=>{
-        const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
-        const res = {
-            cookie: jest.fn()
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(null)).subscribe((result)=>{
-            expect(result).toBeNull();
-            done();
-        });
-    });
-    it('passes through values without a refreshToken in data unchanged', (done)=>{
-        const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            success: true,
-            data: {
-                accessToken: 'access-1'
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe((result)=>{
-            expect(cookie).not.toHaveBeenCalled();
-            expect(result).toBe(payload);
-            done();
-        });
-    });
-    it('falls back to the default cookie name when authConfig is unavailable', (done)=>{
-        const interceptor = new _settokeninterceptor.SetToken(undefined);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            data: {
-                refreshToken: 'refresh-1'
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe(()=>{
-            expect(cookie).toHaveBeenCalledWith(_config.DEFAULT_COOKIE_NAME, 'refresh-1', expect.anything());
-            done();
-        });
-    });
-    it('throws PayloadTooLargeException when the refresh token exceeds the max cookie size', (done)=>{
-        const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
-        const res = {
-            cookie: jest.fn()
-        };
-        const oversizedToken = 'a'.repeat(4000);
-        const payload = {
-            data: {
-                refreshToken: oversizedToken
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe({
-            error: (err)=>{
-                expect(err).toBeInstanceOf(_common.PayloadTooLargeException);
-                done();
-            }
-        });
-    });
-});

package/cjs/interfaces/auth-email-provider.interface.js

@@ -1,45 +0,0 @@
-/**
- * Auth Email  Provider Interface
- *
- * This interface defines the contract for email sending in the auth module.
- * It allows auth to work independently of the email module.
- *
- * To use email features in auth:
- * 1. Provide AUTH_EMAIL_PROVIDER in your app module
- * 2. Implement IAuthEmailProvider using EmailSendService from nestjs-email
- *
- * @example
- * ```typescript
- * // In app.module.ts or a provider file
- * {
- *   provide: AUTH_EMAIL_PROVIDER,
- *   useFactory: (emailSendService: EmailSendService) => ({
- *     sendPasswordResetEmail: async (email, token, resetUrl) => {
- *       await emailSendService.sendTemplateEmail({
- *         templateSlug: 'password-reset',
- *         to: email,
- *         variables: { resetUrl, token },
- *       });
- *     },
- *     sendVerificationEmail: async (email, token, verifyUrl) => {
- *       await emailSendService.sendTemplateEmail({
- *         templateSlug: 'email-verification',
- *         to: email,
- *         variables: { verifyUrl, token },
- *       });
- *     },
- *   }),
- *   inject: [EmailSendService],
- * }
- * ```
- */ "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "AUTH_EMAIL_PROVIDER", {
-    enumerable: true,
-    get: function() {
-        return AUTH_EMAIL_PROVIDER;
-    }
-});
-const AUTH_EMAIL_PROVIDER = 'AUTH_EMAIL_PROVIDER';

package/cjs/interfaces/auth-module-options.interface.js

@@ -1,4 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});

package/cjs/interfaces/authentication.interface.js

@@ -1,4 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});

package/cjs/interfaces/company-branch.interface.js

@@ -1,4 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});

package/cjs/interfaces/company.interface.js

@@ -1,4 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});

package/cjs/interfaces/index.js

@@ -1,24 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-_export_star(require("./authentication.interface"), exports);
-_export_star(require("./auth-email-provider.interface"), exports);
-_export_star(require("./company-branch.interface"), exports);
-_export_star(require("./company.interface"), exports);
-_export_star(require("./user.interface"), exports);
-_export_star(require("./user-enricher.interface"), exports);
-_export_star(require("./auth-module-options.interface"), exports);
-function _export_star(from, to) {
-    Object.keys(from).forEach(function(k) {
-        if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
-            Object.defineProperty(to, k, {
-                enumerable: true,
-                get: function() {
-                    return from[k];
-                }
-            });
-        }
-    });
-    return from;
-}

package/cjs/interfaces/user-enricher.interface.js

@@ -1,4 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});

package/cjs/interfaces/user.interface.js

@@ -1,4 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});

package/cjs/modules/auth.module.js

@@ -1,202 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "AuthModule", {
-    enumerable: true,
-    get: function() {
-        return AuthModule;
-    }
-});
-const _modules = require("@flusys/nestjs-shared/modules");
-const _common = require("@nestjs/common");
-const _jwt = require("@nestjs/jwt");
-const _passport = require("@nestjs/passport");
-const _guards = require("@flusys/nestjs-shared/guards");
-const _authconstants = require("../config/auth.constants");
-const _controllers = require("../controllers");
-const _entities = require("../entities");
-const _cleartokeninterceptor = require("../interceptors/clear-token.interceptor");
-const _settokeninterceptor = require("../interceptors/set-token.interceptor");
-const _services = require("../services");
-const _authconfigservice = require("../services/auth-config.service");
-const _authdatasourceprovider = require("../services/auth-datasource.provider");
-const _jwtstrategy = require("../strategies/jwt.strategy");
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-let AuthModule = class AuthModule {
-    static forRoot(options) {
-        const optionsProvider = {
-            provide: _authconstants.AUTH_MODULE_OPTIONS,
-            useValue: options
-        };
-        return this.buildModule(options, [
-            optionsProvider,
-            ...options.providers ?? []
-        ]);
-    }
-    static forRootAsync(options) {
-        const asyncProviders = this.createAsyncProviders(options);
-        return this.buildModule(options, [
-            ...asyncProviders,
-            ...options.providers ?? []
-        ], options.imports);
-    }
-    static buildModule(options, providers, externalImports = []) {
-        const { global = false, includeController = true, bootstrapAppConfig } = options;
-        const featureFlags = this.getFeatureFlags(bootstrapAppConfig);
-        return {
-            module: AuthModule,
-            global,
-            imports: [
-                ...externalImports,
-                ...this.buildImports()
-            ],
-            controllers: this.buildControllers(includeController, featureFlags),
-            providers: [
-                ...providers,
-                ...this.buildProviders(featureFlags)
-            ],
-            exports: this.buildExports(featureFlags)
-        };
-    }
-    static getFeatureFlags(bootstrapAppConfig) {
-        return {
-            enableCompanyFeature: bootstrapAppConfig?.enableCompanyFeature ?? false,
-            enableEmailVerification: bootstrapAppConfig?.enableEmailVerification ?? true
-        };
-    }
-    static buildImports() {
-        return [
-            _passport.PassportModule.register({
-                defaultStrategy: 'jwt'
-            }),
-            _jwt.JwtModule.register({}),
-            _modules.CacheModule,
-            _modules.UtilsModule
-        ];
-    }
-    static buildControllers(includeController, flags) {
-        if (!includeController) return [];
-        const controllers = [
-            _controllers.AuthenticationController,
-            _controllers.UserController
-        ];
-        if (flags.enableEmailVerification) {
-            controllers.push(_controllers.EmailVerificationController);
-        }
-        if (flags.enableCompanyFeature) {
-            controllers.push(_controllers.CompanySelectionController, _controllers.CompanyController, _controllers.BranchController, _controllers.UserPermissionController);
-        }
-        return controllers;
-    }
-    static buildProviders(flags) {
-        const providers = [
-            _authconfigservice.AuthConfigService,
-            _authdatasourceprovider.AuthDataSourceProvider,
-            _jwtstrategy.JwtStrategy,
-            _guards.JwtAuthGuard,
-            _services.AuthenticationService,
-            _settokeninterceptor.SetToken,
-            _cleartokeninterceptor.ClearToken,
-            _services.UserService,
-            (0, _modules.createModuleEventsProvider)('auth', _authconstants.AUTH_MODULE_OPTIONS)
-        ];
-        if (flags.enableEmailVerification) {
-            providers.push(_services.AuthEmailService);
-        }
-        if (flags.enableCompanyFeature) {
-            providers.push(_services.CompanySelectionSessionService, _services.CompanyService, _services.BranchService, _services.UserPermissionService);
-        }
-        return providers;
-    }
-    static buildExports(flags) {
-        const exports1 = [
-            _passport.PassportModule,
-            _authconstants.AUTH_MODULE_OPTIONS,
-            _authconfigservice.AuthConfigService,
-            _authdatasourceprovider.AuthDataSourceProvider,
-            _jwtstrategy.JwtStrategy,
-            _guards.JwtAuthGuard,
-            _services.AuthenticationService,
-            _services.UserService
-        ];
-        if (flags.enableEmailVerification) {
-            exports1.push(_services.AuthEmailService);
-        }
-        if (flags.enableCompanyFeature) {
-            exports1.push(_services.CompanySelectionSessionService, _services.CompanyService, _services.BranchService, _services.UserPermissionService);
-        }
-        return exports1;
-    }
-    static createAsyncProviders(options) {
-        const staticOptions = {
-            global: options.global,
-            includeController: options.includeController,
-            bootstrapAppConfig: options.bootstrapAppConfig
-        };
-        if (options.useFactory) {
-            return [
-                {
-                    provide: _authconstants.AUTH_MODULE_OPTIONS,
-                    useFactory: async (...args)=>({
-                            ...staticOptions,
-                            config: await options.useFactory(...args)
-                        }),
-                    inject: options.inject || []
-                }
-            ];
-        }
-        if (options.useClass) {
-            return [
-                {
-                    provide: options.useClass,
-                    useClass: options.useClass
-                },
-                {
-                    provide: _authconstants.AUTH_MODULE_OPTIONS,
-                    useFactory: async (factory)=>({
-                            ...staticOptions,
-                            config: await factory.createAuthOptions()
-                        }),
-                    inject: [
-                        options.useClass
-                    ]
-                }
-            ];
-        }
-        if (options.useExisting) {
-            return [
-                {
-                    provide: _authconstants.AUTH_MODULE_OPTIONS,
-                    useFactory: async (factory)=>({
-                            ...staticOptions,
-                            config: await factory.createAuthOptions()
-                        }),
-                    inject: [
-                        options.useExisting
-                    ]
-                }
-            ];
-        }
-        return [
-            {
-                provide: _authconstants.AUTH_MODULE_OPTIONS,
-                useValue: staticOptions
-            }
-        ];
-    }
-    static getEntities(config) {
-        return (0, _entities.getAuthEntitiesByConfig)({
-            enableCompanyFeature: config.enableCompanyFeature ?? false,
-            enableEmailVerification: config.enableEmailVerification ?? true
-        });
-    }
-};
-AuthModule = _ts_decorate([
-    (0, _common.Module)({})
-], AuthModule);