@flusys/nestjs-auth 7.0.2 → 8.0.0-beta.1

package/fesm/modules/auth.module.js

@@ -1,192 +0,0 @@
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-import { CacheModule, UtilsModule, createModuleEventsProvider } from '@flusys/nestjs-shared/modules';
-import { Module } from '@nestjs/common';
-import { JwtModule } from '@nestjs/jwt';
-import { PassportModule } from '@nestjs/passport';
-import { JwtAuthGuard } from '@flusys/nestjs-shared/guards';
-import { AUTH_MODULE_OPTIONS } from '../config/auth.constants';
-import { AuthenticationController, BranchController, CompanyController, CompanySelectionController, EmailVerificationController, UserController, UserPermissionController } from '../controllers';
-import { getAuthEntitiesByConfig } from '../entities';
-import { ClearToken } from '../interceptors/clear-token.interceptor';
-import { SetToken } from '../interceptors/set-token.interceptor';
-import { AuthEmailService, AuthenticationService, BranchService, CompanySelectionSessionService, CompanyService, UserPermissionService, UserService } from '../services';
-import { AuthConfigService } from '../services/auth-config.service';
-import { AuthDataSourceProvider } from '../services/auth-datasource.provider';
-import { JwtStrategy } from '../strategies/jwt.strategy';
-export class AuthModule {
-    static forRoot(options) {
-        const optionsProvider = {
-            provide: AUTH_MODULE_OPTIONS,
-            useValue: options
-        };
-        return this.buildModule(options, [
-            optionsProvider,
-            ...options.providers ?? []
-        ]);
-    }
-    static forRootAsync(options) {
-        const asyncProviders = this.createAsyncProviders(options);
-        return this.buildModule(options, [
-            ...asyncProviders,
-            ...options.providers ?? []
-        ], options.imports);
-    }
-    static buildModule(options, providers, externalImports = []) {
-        const { global = false, includeController = true, bootstrapAppConfig } = options;
-        const featureFlags = this.getFeatureFlags(bootstrapAppConfig);
-        return {
-            module: AuthModule,
-            global,
-            imports: [
-                ...externalImports,
-                ...this.buildImports()
-            ],
-            controllers: this.buildControllers(includeController, featureFlags),
-            providers: [
-                ...providers,
-                ...this.buildProviders(featureFlags)
-            ],
-            exports: this.buildExports(featureFlags)
-        };
-    }
-    static getFeatureFlags(bootstrapAppConfig) {
-        return {
-            enableCompanyFeature: bootstrapAppConfig?.enableCompanyFeature ?? false,
-            enableEmailVerification: bootstrapAppConfig?.enableEmailVerification ?? true
-        };
-    }
-    static buildImports() {
-        return [
-            PassportModule.register({
-                defaultStrategy: 'jwt'
-            }),
-            JwtModule.register({}),
-            CacheModule,
-            UtilsModule
-        ];
-    }
-    static buildControllers(includeController, flags) {
-        if (!includeController) return [];
-        const controllers = [
-            AuthenticationController,
-            UserController
-        ];
-        if (flags.enableEmailVerification) {
-            controllers.push(EmailVerificationController);
-        }
-        if (flags.enableCompanyFeature) {
-            controllers.push(CompanySelectionController, CompanyController, BranchController, UserPermissionController);
-        }
-        return controllers;
-    }
-    static buildProviders(flags) {
-        const providers = [
-            AuthConfigService,
-            AuthDataSourceProvider,
-            JwtStrategy,
-            JwtAuthGuard,
-            AuthenticationService,
-            SetToken,
-            ClearToken,
-            UserService,
-            createModuleEventsProvider('auth', AUTH_MODULE_OPTIONS)
-        ];
-        if (flags.enableEmailVerification) {
-            providers.push(AuthEmailService);
-        }
-        if (flags.enableCompanyFeature) {
-            providers.push(CompanySelectionSessionService, CompanyService, BranchService, UserPermissionService);
-        }
-        return providers;
-    }
-    static buildExports(flags) {
-        const exports = [
-            PassportModule,
-            AUTH_MODULE_OPTIONS,
-            AuthConfigService,
-            AuthDataSourceProvider,
-            JwtStrategy,
-            JwtAuthGuard,
-            AuthenticationService,
-            UserService
-        ];
-        if (flags.enableEmailVerification) {
-            exports.push(AuthEmailService);
-        }
-        if (flags.enableCompanyFeature) {
-            exports.push(CompanySelectionSessionService, CompanyService, BranchService, UserPermissionService);
-        }
-        return exports;
-    }
-    static createAsyncProviders(options) {
-        const staticOptions = {
-            global: options.global,
-            includeController: options.includeController,
-            bootstrapAppConfig: options.bootstrapAppConfig
-        };
-        if (options.useFactory) {
-            return [
-                {
-                    provide: AUTH_MODULE_OPTIONS,
-                    useFactory: async (...args)=>({
-                            ...staticOptions,
-                            config: await options.useFactory(...args)
-                        }),
-                    inject: options.inject || []
-                }
-            ];
-        }
-        if (options.useClass) {
-            return [
-                {
-                    provide: options.useClass,
-                    useClass: options.useClass
-                },
-                {
-                    provide: AUTH_MODULE_OPTIONS,
-                    useFactory: async (factory)=>({
-                            ...staticOptions,
-                            config: await factory.createAuthOptions()
-                        }),
-                    inject: [
-                        options.useClass
-                    ]
-                }
-            ];
-        }
-        if (options.useExisting) {
-            return [
-                {
-                    provide: AUTH_MODULE_OPTIONS,
-                    useFactory: async (factory)=>({
-                            ...staticOptions,
-                            config: await factory.createAuthOptions()
-                        }),
-                    inject: [
-                        options.useExisting
-                    ]
-                }
-            ];
-        }
-        return [
-            {
-                provide: AUTH_MODULE_OPTIONS,
-                useValue: staticOptions
-            }
-        ];
-    }
-    static getEntities(config) {
-        return getAuthEntitiesByConfig({
-            enableCompanyFeature: config.enableCompanyFeature ?? false,
-            enableEmailVerification: config.enableEmailVerification ?? true
-        });
-    }
-}
-AuthModule = _ts_decorate([
-    Module({})
-], AuthModule);

package/fesm/modules/auth.module.spec.js

@@ -1,239 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-import { AuthModule } from './auth.module';
-import { AUTH_MODULE_OPTIONS } from '../config/auth.constants';
-import { AuthenticationController, BranchController, CompanyController, CompanySelectionController, EmailVerificationController, UserController, UserPermissionController } from '../controllers';
-import { AuthEmailService, BranchService, CompanySelectionSessionService, CompanyService, UserPermissionService } from '../services';
-function providerTokens(providers) {
-    return providers.map((p)=>typeof p === 'function' ? p : p.provide);
-}
-describe('AuthModule', ()=>{
-    describe('forRoot', ()=>{
-        it('should build a non-global module by default with the minimal feature set', ()=>{
-            const dynamicModule = AuthModule.forRoot({
-                bootstrapAppConfig: {
-                    enableEmailVerification: false
-                }
-            });
-            expect(dynamicModule.module).toBe(AuthModule);
-            expect(dynamicModule.global).toBe(false);
-            expect(dynamicModule.controllers).toEqual([
-                AuthenticationController,
-                UserController
-            ]);
-            expect(providerTokens(dynamicModule.providers)).not.toContain(AuthEmailService);
-            expect(providerTokens(dynamicModule.providers)).not.toContain(CompanyService);
-        });
-        it('should respect global: true', ()=>{
-            const dynamicModule = AuthModule.forRoot({
-                global: true
-            });
-            expect(dynamicModule.global).toBe(true);
-        });
-        it('should register no controllers when includeController is false', ()=>{
-            const dynamicModule = AuthModule.forRoot({
-                includeController: false
-            });
-            expect(dynamicModule.controllers).toEqual([]);
-        });
-        it('should enable email verification by default (bootstrapAppConfig omitted)', ()=>{
-            const dynamicModule = AuthModule.forRoot({});
-            expect(dynamicModule.controllers).toContain(EmailVerificationController);
-            expect(providerTokens(dynamicModule.providers)).toContain(AuthEmailService);
-            expect(dynamicModule.exports).toContain(AuthEmailService);
-        });
-        it('should omit email verification controller/provider/export when explicitly disabled', ()=>{
-            const dynamicModule = AuthModule.forRoot({
-                bootstrapAppConfig: {
-                    enableEmailVerification: false
-                }
-            });
-            expect(dynamicModule.controllers).not.toContain(EmailVerificationController);
-            expect(providerTokens(dynamicModule.providers)).not.toContain(AuthEmailService);
-            expect(dynamicModule.exports).not.toContain(AuthEmailService);
-        });
-        it('should add company controllers/providers/exports when enableCompanyFeature is true', ()=>{
-            const dynamicModule = AuthModule.forRoot({
-                bootstrapAppConfig: {
-                    enableCompanyFeature: true
-                }
-            });
-            expect(dynamicModule.controllers).toEqual(expect.arrayContaining([
-                CompanySelectionController,
-                CompanyController,
-                BranchController,
-                UserPermissionController
-            ]));
-            expect(providerTokens(dynamicModule.providers)).toEqual(expect.arrayContaining([
-                CompanySelectionSessionService,
-                CompanyService,
-                BranchService,
-                UserPermissionService
-            ]));
-            expect(dynamicModule.exports).toEqual(expect.arrayContaining([
-                CompanyService,
-                BranchService,
-                UserPermissionService
-            ]));
-        });
-        it('should register an AUTH_MODULE_OPTIONS provider carrying the given options', ()=>{
-            const options = {
-                bootstrapAppConfig: {
-                    enableCompanyFeature: true
-                }
-            };
-            const dynamicModule = AuthModule.forRoot(options);
-            const optionsProvider = dynamicModule.providers.find((p)=>p.provide === AUTH_MODULE_OPTIONS);
-            expect(optionsProvider.useValue).toBe(options);
-        });
-        it('should append any caller-supplied extra providers', ()=>{
-            const extraProvider = {
-                provide: 'EXTRA',
-                useValue: 'x'
-            };
-            const dynamicModule = AuthModule.forRoot({
-                providers: [
-                    extraProvider
-                ]
-            });
-            expect(dynamicModule.providers).toEqual(expect.arrayContaining([
-                extraProvider
-            ]));
-        });
-    });
-    describe('forRootAsync', ()=>{
-        it('should default AUTH_MODULE_OPTIONS to the static options when no useFactory/useClass/useExisting is given', async ()=>{
-            const dynamicModule = AuthModule.forRootAsync({
-                bootstrapAppConfig: {},
-                global: true
-            });
-            const optionsProvider = dynamicModule.providers.find((p)=>p.provide === AUTH_MODULE_OPTIONS);
-            expect(optionsProvider.useValue).toEqual({
-                global: true,
-                includeController: undefined,
-                bootstrapAppConfig: {}
-            });
-        });
-        it('should resolve config via useFactory and merge it with the static options', async ()=>{
-            const useFactory = jest.fn().mockResolvedValue({
-                jwtSecret: 'from-factory'
-            });
-            const dynamicModule = AuthModule.forRootAsync({
-                bootstrapAppConfig: {},
-                useFactory,
-                inject: [
-                    'SOME_TOKEN'
-                ]
-            });
-            const optionsProvider = dynamicModule.providers.find((p)=>p.provide === AUTH_MODULE_OPTIONS);
-            expect(optionsProvider.inject).toEqual([
-                'SOME_TOKEN'
-            ]);
-            const resolved = await optionsProvider.useFactory('injected-value');
-            expect(useFactory).toHaveBeenCalledWith('injected-value');
-            expect(resolved).toEqual({
-                global: undefined,
-                includeController: undefined,
-                bootstrapAppConfig: {},
-                config: {
-                    jwtSecret: 'from-factory'
-                }
-            });
-        });
-        it('should resolve config via a useClass factory', async ()=>{
-            let MyOptionsFactory = class MyOptionsFactory {
-                constructor(){
-                    _define_property(this, "createAuthOptions", jest.fn().mockResolvedValue({
-                        jwtSecret: 'from-class'
-                    }));
-                }
-            };
-            const dynamicModule = AuthModule.forRootAsync({
-                bootstrapAppConfig: {},
-                useClass: MyOptionsFactory
-            });
-            const classProvider = dynamicModule.providers.find((p)=>p.provide === MyOptionsFactory);
-            expect(classProvider.useClass).toBe(MyOptionsFactory);
-            const optionsProvider = dynamicModule.providers.find((p)=>p.provide === AUTH_MODULE_OPTIONS);
-            expect(optionsProvider.inject).toEqual([
-                MyOptionsFactory
-            ]);
-            const factoryInstance = new MyOptionsFactory();
-            const resolved = await optionsProvider.useFactory(factoryInstance);
-            expect(factoryInstance.createAuthOptions).toHaveBeenCalled();
-            expect(resolved.config).toEqual({
-                jwtSecret: 'from-class'
-            });
-        });
-        it('should resolve config via a useExisting factory', async ()=>{
-            let MyOptionsFactory = class MyOptionsFactory {
-                constructor(){
-                    _define_property(this, "createAuthOptions", jest.fn().mockResolvedValue({
-                        jwtSecret: 'from-existing'
-                    }));
-                }
-            };
-            const dynamicModule = AuthModule.forRootAsync({
-                bootstrapAppConfig: {},
-                useExisting: MyOptionsFactory
-            });
-            const optionsProvider = dynamicModule.providers.find((p)=>p.provide === AUTH_MODULE_OPTIONS);
-            expect(optionsProvider.inject).toEqual([
-                MyOptionsFactory
-            ]);
-            const factoryInstance = new MyOptionsFactory();
-            const resolved = await optionsProvider.useFactory(factoryInstance);
-            expect(resolved.config).toEqual({
-                jwtSecret: 'from-existing'
-            });
-        });
-        it('should forward the async `imports` array into the built module', ()=>{
-            let FakeImportedModule = class FakeImportedModule {
-            };
-            const dynamicModule = AuthModule.forRootAsync({
-                bootstrapAppConfig: {},
-                imports: [
-                    FakeImportedModule
-                ]
-            });
-            expect(dynamicModule.imports).toEqual(expect.arrayContaining([
-                FakeImportedModule
-            ]));
-        });
-        it('should append any caller-supplied extra providers alongside the async options provider', ()=>{
-            const extraProvider = {
-                provide: 'EXTRA',
-                useValue: 'x'
-            };
-            const dynamicModule = AuthModule.forRootAsync({
-                bootstrapAppConfig: {},
-                providers: [
-                    extraProvider
-                ]
-            });
-            expect(dynamicModule.providers).toEqual(expect.arrayContaining([
-                extraProvider
-            ]));
-        });
-    });
-    describe('getEntities', ()=>{
-        it('should delegate to getAuthEntitiesByConfig with the bootstrap flags', ()=>{
-            const entitiesWithDefaults = AuthModule.getEntities({});
-            const entitiesWithCompany = AuthModule.getEntities({
-                enableCompanyFeature: true
-            });
-            expect(entitiesWithDefaults.length).toBeLessThan(entitiesWithCompany.length);
-        });
-    });
-});

package/fesm/services/auth-config.service.js

@@ -1,100 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { envConfig } from '@flusys/nestjs-core/config';
-import { SYSTEM_MESSAGES } from '@flusys/nestjs-shared/constants';
-import { Inject, Injectable, InternalServerErrorException, Optional } from '@nestjs/common';
-import { AUTH_MODULE_OPTIONS } from '../config/auth.constants';
-import { AuthModuleOptions } from '../interfaces/auth-module-options.interface';
-export class AuthConfigService {
-    // Database Mode (required by IModuleConfigService)
-    getDatabaseMode() {
-        return this.options.bootstrapAppConfig?.databaseMode ?? 'single';
-    }
-    isMultiTenant() {
-        return this.getDatabaseMode() === 'multi-tenant';
-    }
-    // Feature Flags
-    isCompanyFeatureEnabled() {
-        return this.options.bootstrapAppConfig?.enableCompanyFeature ?? false;
-    }
-    isEmailVerificationEnabled() {
-        return this.options.bootstrapAppConfig?.enableEmailVerification ?? true;
-    }
-    isPermissionModeFound() {
-        return this.options.bootstrapAppConfig?.permissionMode !== undefined;
-    }
-    // JWT Configuration
-    getJwtSecret() {
-        if (!this.config.jwtSecret) {
-            throw new InternalServerErrorException({
-                message: '[AuthModule] JWT_SECRET is required - set via environment or module config',
-                messageKey: SYSTEM_MESSAGES.CONFIG_REQUIRED
-            });
-        }
-        return this.config.jwtSecret;
-    }
-    getJwtExpiration() {
-        return this.config.jwtExpiration ?? '1h';
-    }
-    getRefreshTokenSecret() {
-        if (this.config.refreshTokenSecret) {
-            return this.config.refreshTokenSecret;
-        }
-        if (envConfig.isProduction()) {
-            throw new InternalServerErrorException({
-                message: '[AuthModule] REFRESH_TOKEN_SECRET is required in production - using the same secret for access and refresh tokens is a security risk',
-                messageKey: SYSTEM_MESSAGES.CONFIG_REQUIRED
-            });
-        }
-        return this.getJwtSecret();
-    }
-    getRefreshTokenExpiration() {
-        return this.config.refreshTokenExpiration ?? '7d';
-    }
-    getRefreshTokenCookieName() {
-        return this.config.refreshTokenCookieName ?? 'fsn_refresh_token';
-    }
-    constructor(injectedOptions){
-        _define_property(this, "options", void 0);
-        _define_property(this, "config", void 0);
-        this.options = injectedOptions ?? {
-            global: false,
-            includeController: true
-        };
-        this.config = this.options.config ?? {};
-    }
-}
-AuthConfigService = _ts_decorate([
-    Injectable(),
-    _ts_param(0, Optional()),
-    _ts_param(0, Inject(AUTH_MODULE_OPTIONS)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof AuthModuleOptions === "undefined" ? Object : AuthModuleOptions
-    ])
-], AuthConfigService);

package/fesm/services/auth-config.service.spec.js

@@ -1,93 +0,0 @@
-import { InternalServerErrorException } from '@nestjs/common';
-import { envConfig } from '@flusys/nestjs-core/config';
-import { AuthConfigService } from './auth-config.service';
-jest.mock('@flusys/nestjs-core/config', ()=>({
-        envConfig: {
-            isProduction: jest.fn().mockReturnValue(false)
-        }
-    }));
-describe('AuthConfigService', ()=>{
-    afterEach(()=>{
-        jest.clearAllMocks();
-    });
-    describe('with no injected options', ()=>{
-        it('defaults database mode to single and company feature to disabled', ()=>{
-            const service = new AuthConfigService();
-            expect(service.getDatabaseMode()).toBe('single');
-            expect(service.isMultiTenant()).toBe(false);
-            expect(service.isCompanyFeatureEnabled()).toBe(false);
-            expect(service.isEmailVerificationEnabled()).toBe(true);
-            expect(service.isPermissionModeFound()).toBe(false);
-        });
-        it('throws when reading the JWT secret without configuration', ()=>{
-            const service = new AuthConfigService();
-            expect(()=>service.getJwtSecret()).toThrow(InternalServerErrorException);
-        });
-        it('falls back to the JWT secret for refresh token secret outside production', ()=>{
-            const service = new AuthConfigService({
-                global: false,
-                includeController: true,
-                config: {
-                    jwtSecret: 'shared-secret'
-                }
-            });
-            expect(service.getRefreshTokenSecret()).toBe('shared-secret');
-        });
-        it('returns default JWT expiration and refresh token expiration', ()=>{
-            const service = new AuthConfigService();
-            expect(service.getJwtExpiration()).toBe('1h');
-            expect(service.getRefreshTokenExpiration()).toBe('7d');
-            expect(service.getRefreshTokenCookieName()).toBe('fsn_refresh_token');
-        });
-    });
-    describe('with injected options', ()=>{
-        function buildOptions(overrides = {}) {
-            return {
-                global: false,
-                includeController: true,
-                bootstrapAppConfig: {
-                    databaseMode: 'multi-tenant',
-                    enableCompanyFeature: true,
-                    enableEmailVerification: false,
-                    permissionMode: 'RBAC'
-                },
-                config: {
-                    jwtSecret: 'jwt-secret',
-                    jwtExpiration: '30m',
-                    refreshTokenSecret: 'refresh-secret',
-                    refreshTokenExpiration: '14d',
-                    refreshTokenCookieName: 'custom_cookie'
-                },
-                ...overrides
-            };
-        }
-        it('reflects multi-tenant database mode', ()=>{
-            const service = new AuthConfigService(buildOptions());
-            expect(service.getDatabaseMode()).toBe('multi-tenant');
-            expect(service.isMultiTenant()).toBe(true);
-        });
-        it('reflects enabled company feature and email verification flags', ()=>{
-            const service = new AuthConfigService(buildOptions());
-            expect(service.isCompanyFeatureEnabled()).toBe(true);
-            expect(service.isEmailVerificationEnabled()).toBe(false);
-            expect(service.isPermissionModeFound()).toBe(true);
-        });
-        it('returns configured JWT and refresh token values', ()=>{
-            const service = new AuthConfigService(buildOptions());
-            expect(service.getJwtSecret()).toBe('jwt-secret');
-            expect(service.getJwtExpiration()).toBe('30m');
-            expect(service.getRefreshTokenSecret()).toBe('refresh-secret');
-            expect(service.getRefreshTokenExpiration()).toBe('14d');
-            expect(service.getRefreshTokenCookieName()).toBe('custom_cookie');
-        });
-        it('throws in production when refresh token secret is missing (security: prevents shared-secret fallback)', ()=>{
-            envConfig.isProduction.mockReturnValue(true);
-            const service = new AuthConfigService(buildOptions({
-                config: {
-                    jwtSecret: 'jwt-secret'
-                }
-            }));
-            expect(()=>service.getRefreshTokenSecret()).toThrow(InternalServerErrorException);
-        });
-    });
-});