@flusys/nestjs-auth 7.0.2 → 8.0.0-beta.1

package/fesm/helpers/token.helper.spec.js

@@ -1,82 +0,0 @@
-import { generateTokens, parseExpiryToMs } from './token.helper';
-describe('token.helper', ()=>{
-    describe('generateTokens', ()=>{
-        let mockJwtService;
-        let mockAuthConfig;
-        beforeEach(()=>{
-            mockJwtService = {
-                sign: jest.fn()
-            };
-            mockAuthConfig = {
-                getJwtSecret: jest.fn().mockReturnValue('jwt-secret'),
-                getJwtExpiration: jest.fn().mockReturnValue('1h'),
-                getRefreshTokenSecret: jest.fn().mockReturnValue('refresh-secret'),
-                getRefreshTokenExpiration: jest.fn().mockReturnValue('7d')
-            };
-        });
-        it('signs an access token and a refresh token with distinct secrets', ()=>{
-            mockJwtService.sign.mockReturnValueOnce('access-token-value').mockReturnValueOnce('refresh-token-value');
-            const result = generateTokens(mockJwtService, mockAuthConfig, {
-                id: 'user-1',
-                email: 'user@example.com',
-                type: 'access'
-            });
-            expect(result).toEqual({
-                accessToken: 'access-token-value',
-                refreshToken: 'refresh-token-value'
-            });
-            expect(mockJwtService.sign).toHaveBeenNthCalledWith(1, expect.objectContaining({
-                id: 'user-1',
-                email: 'user@example.com',
-                type: 'access'
-            }), expect.objectContaining({
-                secret: 'jwt-secret',
-                expiresIn: '1h',
-                algorithm: 'HS256'
-            }));
-            expect(mockJwtService.sign).toHaveBeenNthCalledWith(2, expect.objectContaining({
-                id: 'user-1',
-                email: 'user@example.com',
-                type: 'refresh'
-            }), expect.objectContaining({
-                secret: 'refresh-secret',
-                expiresIn: '7d',
-                algorithm: 'HS256'
-            }));
-        });
-        it('includes companyId and branchId in the signed payload when provided', ()=>{
-            mockJwtService.sign.mockReturnValue('token');
-            generateTokens(mockJwtService, mockAuthConfig, {
-                id: 'user-1',
-                email: 'user@example.com',
-                type: 'access',
-                companyId: 'company-1',
-                branchId: 'branch-1'
-            });
-            expect(mockJwtService.sign).toHaveBeenCalledWith(expect.objectContaining({
-                companyId: 'company-1',
-                branchId: 'branch-1'
-            }), expect.anything());
-        });
-    });
-    describe('parseExpiryToMs', ()=>{
-        it('parses seconds', ()=>{
-            expect(parseExpiryToMs('30s')).toBe(30 * 1000);
-        });
-        it('parses minutes', ()=>{
-            expect(parseExpiryToMs('15m')).toBe(15 * 60 * 1000);
-        });
-        it('parses hours', ()=>{
-            expect(parseExpiryToMs('2h')).toBe(2 * 60 * 60 * 1000);
-        });
-        it('parses days', ()=>{
-            expect(parseExpiryToMs('7d')).toBe(7 * 24 * 60 * 60 * 1000);
-        });
-        it('falls back to 7 days for an unparsable value', ()=>{
-            expect(parseExpiryToMs('not-a-duration')).toBe(7 * 24 * 60 * 60 * 1000);
-        });
-        it('falls back to 7 days for an unknown unit', ()=>{
-            expect(parseExpiryToMs('5y')).toBe(7 * 24 * 60 * 60 * 1000);
-        });
-    });
-});

package/fesm/interceptors/clear-token.interceptor.js

@@ -1,63 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { buildCookieOptions, isBrowserRequest } from '@flusys/nestjs-shared/utils';
-import { Injectable, Optional } from '@nestjs/common';
-import { map } from 'rxjs';
-import { DEFAULT_COOKIE_NAME } from '../config';
-import { AuthConfigService } from '../services/auth-config.service';
-export class ClearToken {
-    get cookieName() {
-        return this.authConfig?.getRefreshTokenCookieName() ?? DEFAULT_COOKIE_NAME;
-    }
-    intercept(context, next) {
-        const req = context.switchToHttp().getRequest();
-        const res = context.switchToHttp().getResponse();
-        return next.handle().pipe(map((value)=>{
-            if (isBrowserRequest(req)) {
-                res.clearCookie(this.cookieName, {
-                    httpOnly: true,
-                    path: '/',
-                    ...buildCookieOptions(req)
-                });
-            }
-            return value;
-        }));
-    }
-    constructor(authConfig){
-        _define_property(this, "authConfig", void 0);
-        this.authConfig = authConfig;
-    }
-}
-ClearToken = _ts_decorate([
-    Injectable(),
-    _ts_param(0, Optional()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof AuthConfigService === "undefined" ? Object : AuthConfigService
-    ])
-], ClearToken);

package/fesm/interceptors/clear-token.interceptor.spec.js

@@ -1,103 +0,0 @@
-import { of } from 'rxjs';
-import { ClearToken } from './clear-token.interceptor';
-import { DEFAULT_COOKIE_NAME } from '../config';
-function buildContext(req, res) {
-    return {
-        switchToHttp: ()=>({
-                getRequest: ()=>req,
-                getResponse: ()=>res
-            })
-    };
-}
-function buildCallHandler(value) {
-    return {
-        handle: ()=>of(value)
-    };
-}
-describe('ClearToken', ()=>{
-    let mockAuthConfig;
-    beforeEach(()=>{
-        mockAuthConfig = {
-            getRefreshTokenCookieName: jest.fn().mockReturnValue('custom_refresh_token')
-        };
-    });
-    it('clears the cookie for a browser request', (done)=>{
-        const interceptor = new ClearToken(mockAuthConfig);
-        const clearCookie = jest.fn();
-        const req = {
-            headers: {
-                'user-agent': 'Mozilla/5.0 Chrome/1.0'
-            }
-        };
-        const res = {
-            clearCookie
-        };
-        interceptor.intercept(buildContext(req, res), buildCallHandler({
-            success: true
-        })).subscribe((result)=>{
-            expect(clearCookie).toHaveBeenCalledWith('custom_refresh_token', expect.objectContaining({
-                httpOnly: true,
-                path: '/'
-            }));
-            expect(result).toEqual({
-                success: true
-            });
-            done();
-        });
-    });
-    it('does not clear the cookie for a non-browser (API) request', (done)=>{
-        const interceptor = new ClearToken(mockAuthConfig);
-        const clearCookie = jest.fn();
-        const req = {
-            headers: {
-                'user-agent': 'PostmanRuntime/7.0'
-            }
-        };
-        const res = {
-            clearCookie
-        };
-        interceptor.intercept(buildContext(req, res), buildCallHandler({
-            success: true
-        })).subscribe(()=>{
-            expect(clearCookie).not.toHaveBeenCalled();
-            done();
-        });
-    });
-    it('falls back to the default cookie name when authConfig is unavailable', (done)=>{
-        const interceptor = new ClearToken(undefined);
-        const clearCookie = jest.fn();
-        const req = {
-            headers: {
-                'user-agent': 'Mozilla/5.0 Chrome/1.0'
-            }
-        };
-        const res = {
-            clearCookie
-        };
-        interceptor.intercept(buildContext(req, res), buildCallHandler({
-            success: true
-        })).subscribe(()=>{
-            expect(clearCookie).toHaveBeenCalledWith(DEFAULT_COOKIE_NAME, expect.anything());
-            done();
-        });
-    });
-    it('passes through the emitted value unchanged', (done)=>{
-        const interceptor = new ClearToken(mockAuthConfig);
-        const req = {
-            headers: {
-                'user-agent': 'PostmanRuntime/7.0'
-            }
-        };
-        const res = {
-            clearCookie: jest.fn()
-        };
-        const payload = {
-            success: true,
-            message: 'Logged out successfully'
-        };
-        interceptor.intercept(buildContext(req, res), buildCallHandler(payload)).subscribe((result)=>{
-            expect(result).toBe(payload);
-            done();
-        });
-    });
-});

package/fesm/interceptors/set-token.interceptor.js

@@ -1,98 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { buildCookieOptions, isBrowserRequest, parseDurationToMs } from '@flusys/nestjs-shared/utils';
-import { AUTH_MESSAGES } from '../config';
-import { Inject, Injectable, Optional, PayloadTooLargeException } from '@nestjs/common';
-import { Buffer } from 'buffer';
-import { catchError, map, throwError } from 'rxjs';
-import { DEFAULT_COOKIE_NAME, MAX_COOKIE_BYTES } from '../config';
-import { AuthConfigService } from '../services/auth-config.service';
-export class SetToken {
-    get cookieName() {
-        return this.authConfig?.getRefreshTokenCookieName() ?? DEFAULT_COOKIE_NAME;
-    }
-    get maxAgeMs() {
-        return parseDurationToMs(this.authConfig?.getRefreshTokenExpiration() ?? '7d');
-    }
-    intercept(context, next) {
-        const req = context.switchToHttp().getRequest();
-        const res = context.switchToHttp().getResponse();
-        return next.handle().pipe(map((value)=>{
-            if (typeof value !== 'object' || value === null) {
-                return value;
-            }
-            const response = value;
-            const data = typeof response['data'] === 'object' && response['data'] !== null ? response['data'] : null;
-            const tokenInData = data && typeof data['refreshToken'] === 'string';
-            if (!tokenInData) {
-                return value;
-            }
-            if (!isBrowserRequest(req)) {
-                return value;
-            }
-            this.setRefreshTokenCookie(req, res, data['refreshToken']);
-            const { refreshToken: _, ...dataWithoutToken } = data;
-            return {
-                ...response,
-                data: dataWithoutToken
-            };
-        }), catchError((err)=>throwError(()=>err)));
-    }
-    setRefreshTokenCookie(req, res, tokenValue) {
-        const rawCookieString = `${this.cookieName}=${tokenValue}; HttpOnly`;
-        const estimatedBytes = Buffer.byteLength(rawCookieString, 'utf8');
-        if (estimatedBytes > MAX_COOKIE_BYTES) {
-            throw new PayloadTooLargeException({
-                message: `Refresh token too large (≈${estimatedBytes} bytes)`,
-                messageKey: AUTH_MESSAGES.TOKEN_TOO_LARGE,
-                messageVariables: {
-                    size: estimatedBytes
-                }
-            });
-        }
-        res.cookie(this.cookieName, tokenValue, {
-            httpOnly: true,
-            path: '/',
-            maxAge: this.maxAgeMs,
-            ...buildCookieOptions(req)
-        });
-    }
-    constructor(authConfig){
-        _define_property(this, "authConfig", void 0);
-        this.authConfig = authConfig;
-    }
-}
-SetToken = _ts_decorate([
-    Injectable(),
-    _ts_param(0, Optional()),
-    _ts_param(0, Inject(AuthConfigService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof AuthConfigService === "undefined" ? Object : AuthConfigService
-    ])
-], SetToken);

package/fesm/interceptors/set-token.interceptor.spec.js

@@ -1,161 +0,0 @@
-import { PayloadTooLargeException } from '@nestjs/common';
-import { of } from 'rxjs';
-import { SetToken } from './set-token.interceptor';
-import { DEFAULT_COOKIE_NAME } from '../config';
-function buildContext(req, res) {
-    return {
-        switchToHttp: ()=>({
-                getRequest: ()=>req,
-                getResponse: ()=>res
-            })
-    };
-}
-function buildCallHandler(value) {
-    return {
-        handle: ()=>of(value)
-    };
-}
-const browserReq = {
-    headers: {
-        'user-agent': 'Mozilla/5.0 Chrome/1.0'
-    }
-};
-const apiReq = {
-    headers: {
-        'user-agent': 'PostmanRuntime/7.0'
-    }
-};
-describe('SetToken', ()=>{
-    let mockAuthConfig;
-    beforeEach(()=>{
-        mockAuthConfig = {
-            getRefreshTokenCookieName: jest.fn().mockReturnValue('custom_refresh_token'),
-            getRefreshTokenExpiration: jest.fn().mockReturnValue('7d')
-        };
-    });
-    it('sets a refresh token cookie and strips refreshToken from data for browser requests', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            success: true,
-            data: {
-                accessToken: 'access-1',
-                refreshToken: 'refresh-1',
-                user: {
-                    id: 'u1'
-                }
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe((result)=>{
-            expect(cookie).toHaveBeenCalledWith('custom_refresh_token', 'refresh-1', expect.objectContaining({
-                httpOnly: true,
-                path: '/'
-            }));
-            expect(result).toEqual({
-                success: true,
-                data: {
-                    accessToken: 'access-1',
-                    user: {
-                        id: 'u1'
-                    }
-                }
-            });
-            expect(result.data.refreshToken).toBeUndefined();
-            done();
-        });
-    });
-    it('does not set a cookie or modify data for non-browser (API) requests', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            success: true,
-            data: {
-                accessToken: 'access-1',
-                refreshToken: 'refresh-1'
-            }
-        };
-        interceptor.intercept(buildContext(apiReq, res), buildCallHandler(payload)).subscribe((result)=>{
-            expect(cookie).not.toHaveBeenCalled();
-            expect(result).toBe(payload);
-            done();
-        });
-    });
-    it('passes through non-object values unchanged', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const res = {
-            cookie: jest.fn()
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler('plain-string')).subscribe((result)=>{
-            expect(result).toBe('plain-string');
-            done();
-        });
-    });
-    it('passes through null values unchanged', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const res = {
-            cookie: jest.fn()
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(null)).subscribe((result)=>{
-            expect(result).toBeNull();
-            done();
-        });
-    });
-    it('passes through values without a refreshToken in data unchanged', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            success: true,
-            data: {
-                accessToken: 'access-1'
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe((result)=>{
-            expect(cookie).not.toHaveBeenCalled();
-            expect(result).toBe(payload);
-            done();
-        });
-    });
-    it('falls back to the default cookie name when authConfig is unavailable', (done)=>{
-        const interceptor = new SetToken(undefined);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            data: {
-                refreshToken: 'refresh-1'
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe(()=>{
-            expect(cookie).toHaveBeenCalledWith(DEFAULT_COOKIE_NAME, 'refresh-1', expect.anything());
-            done();
-        });
-    });
-    it('throws PayloadTooLargeException when the refresh token exceeds the max cookie size', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const res = {
-            cookie: jest.fn()
-        };
-        const oversizedToken = 'a'.repeat(4000);
-        const payload = {
-            data: {
-                refreshToken: oversizedToken
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe({
-            error: (err)=>{
-                expect(err).toBeInstanceOf(PayloadTooLargeException);
-                done();
-            }
-        });
-    });
-});

package/fesm/interfaces/auth-email-provider.interface.js

@@ -1,38 +0,0 @@
-/**
- * Auth Email  Provider Interface
- *
- * This interface defines the contract for email sending in the auth module.
- * It allows auth to work independently of the email module.
- *
- * To use email features in auth:
- * 1. Provide AUTH_EMAIL_PROVIDER in your app module
- * 2. Implement IAuthEmailProvider using EmailSendService from nestjs-email
- *
- * @example
- * ```typescript
- * // In app.module.ts or a provider file
- * {
- *   provide: AUTH_EMAIL_PROVIDER,
- *   useFactory: (emailSendService: EmailSendService) => ({
- *     sendPasswordResetEmail: async (email, token, resetUrl) => {
- *       await emailSendService.sendTemplateEmail({
- *         templateSlug: 'password-reset',
- *         to: email,
- *         variables: { resetUrl, token },
- *       });
- *     },
- *     sendVerificationEmail: async (email, token, verifyUrl) => {
- *       await emailSendService.sendTemplateEmail({
- *         templateSlug: 'email-verification',
- *         to: email,
- *         variables: { verifyUrl, token },
- *       });
- *     },
- *   }),
- *   inject: [EmailSendService],
- * }
- * ```
- */ /**
- * Injection token for auth email provider
- * Use this to provide the email implementation
- */ export const AUTH_EMAIL_PROVIDER = 'AUTH_EMAIL_PROVIDER';

package/fesm/interfaces/auth-module-options.interface.js

@@ -1,3 +0,0 @@
-/**
- * Async options for AuthModule registration
- */ export { };

package/fesm/interfaces/authentication.interface.js

@@ -1 +0,0 @@
-/** Company/branch selection or creation data supplied during registration */ export { };

package/fesm/interfaces/company-branch.interface.js

@@ -1 +0,0 @@
-export { };

package/fesm/interfaces/company.interface.js

@@ -1 +0,0 @@
-export { };

package/fesm/interfaces/user-enricher.interface.js

@@ -1,4 +0,0 @@
-/**
- * User Enricher Provider Interface - allows apps to extend user list/profile
- * without modifying nestjs-auth. Provide via: { provide: USER_ENRICHER, useClass: MyEnricher }
- */ export { };

package/fesm/interfaces/user.interface.js

@@ -1 +0,0 @@
-export { };