@flusys/nestjs-auth 7.1.0 → 8.0.0-beta.1

package/services/user-permission.service.d.ts

@@ -1,11 +1,15 @@
-import { IPermissionSyncAdapter } from '@flusys/nestjs-shared/interfaces';
-import { PermissionType, UserCompanyPermission } from '../entities/user-company-permission.entity';
-import { AuthDataSourceProvider } from './auth-datasource.provider';
+import { type ILoggedUserInfo } from '@flusys/nestjs-shared';
+import { type IPermissionSyncAdapter } from '@flusys/nestjs-shared/interfaces';
+import { PermissionType, UserCompanyPermission } from '../entities/user-company-permission.entity.js';
+import { AuthConfigService } from './auth-config.service.js';
+import { AuthDataSourceProvider } from './auth-datasource.provider.js';
 export declare class UserPermissionService {
     private readonly dataSourceProvider;
+    private readonly authConfig;
     private readonly permissionSyncAdapter?;
     private _repository;
-    constructor(dataSourceProvider: AuthDataSourceProvider, permissionSyncAdapter?: IPermissionSyncAdapter | undefined);
+    constructor(dataSourceProvider: AuthDataSourceProvider, authConfig: AuthConfigService, permissionSyncAdapter?: IPermissionSyncAdapter | undefined);
+    validateTenantScope(type: PermissionType, targetId: string, user: ILoggedUserInfo): Promise<void>;
     private getRepository;
     findUserPermissions(userId: string, type: PermissionType): Promise<UserCompanyPermission[]>;
     assignPermission(userId: string, targetId: string, type: PermissionType): Promise<void>;

package/services/user.service.d.ts

@@ -1,14 +1,14 @@
 import { HybridCache, ApiService } from '@flusys/nestjs-shared/classes';
 import { FilterAndPaginationDto } from '@flusys/nestjs-shared/dtos';
-import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
+import { type ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
 import { UtilsService } from '@flusys/nestjs-shared/modules';
 import { SelectQueryBuilder } from 'typeorm';
-import { CreateUserDto, UpdateUserDto } from '../dtos/user.dto';
-import { AppUser } from '../entities/app-user.entity';
-import { IEnrichedUser, IProfileExtras, IProfileSection, IProfileSectionData, IUserEnricher } from '../interfaces/user-enricher.interface';
-import { IUser } from '../interfaces/user.interface';
-import { AuthConfigService } from './auth-config.service';
-import { AuthDataSourceProvider } from './auth-datasource.provider';
+import { CreateUserDto, UpdateUserDto } from '../dtos/user.dto.js';
+import { AppUser } from '../entities/app-user.entity.js';
+import { type IEnrichedUser, type IProfileExtras, type IProfileSection, type IProfileSectionData, type IUserEnricher } from '../interfaces/user-enricher.interface.js';
+import { type IUser } from '../interfaces/user.interface.js';
+import { AuthConfigService } from './auth-config.service.js';
+import { AuthDataSourceProvider } from './auth-datasource.provider.js';
 export declare class UserService extends ApiService<CreateUserDto, UpdateUserDto, IUser, AppUser> {
     protected cacheManager: HybridCache;
     protected utilsService: UtilsService;

package/strategies/jwt.strategy.d.ts

@@ -1,8 +1,8 @@
-import { ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
+import { type ILoggedUserInfo } from '@flusys/nestjs-shared/interfaces';
 import { ModuleRef } from '@nestjs/core';
-import { Request } from 'express';
-import { TokenPayload, TokenPayloadWithCompany } from '../interfaces/authentication.interface';
-import { AuthConfigService } from '../services/auth-config.service';
+import { type Request } from 'express';
+import { type TokenPayload, type TokenPayloadWithCompany } from '../interfaces/authentication.interface.js';
+import { AuthConfigService } from '../services/auth-config.service.js';
 declare const JwtStrategy_base: new (...args: any) => any;
 export declare class JwtStrategy extends JwtStrategy_base {
     private readonly authConfig;

package/validators/password.validator.d.ts

@@ -1,4 +1,4 @@
-import { ValidationOptions } from 'class-validator';
+import { type ValidationOptions } from 'class-validator';
 export interface PasswordComplexityOptions {
     minLength?: number;
     maxLength?: number;

package/cjs/config/auth.constants.js

@@ -1,49 +0,0 @@
-// Injection Tokens
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-function _export(target, all) {
-    for(var name in all)Object.defineProperty(target, name, {
-        enumerable: true,
-        get: Object.getOwnPropertyDescriptor(all, name).get
-    });
-}
-_export(exports, {
-    get AUTH_MODULE_OPTIONS () {
-        return AUTH_MODULE_OPTIONS;
-    },
-    get BCRYPT_SALT_ROUNDS () {
-        return BCRYPT_SALT_ROUNDS;
-    },
-    get DEFAULT_COOKIE_NAME () {
-        return DEFAULT_COOKIE_NAME;
-    },
-    get MAX_COOKIE_BYTES () {
-        return MAX_COOKIE_BYTES;
-    },
-    get SESSION_CACHE_PREFIX () {
-        return SESSION_CACHE_PREFIX;
-    },
-    get SOCIAL_STATE_PREFIX () {
-        return SOCIAL_STATE_PREFIX;
-    },
-    get SOCIAL_STATE_TTL_MS () {
-        return SOCIAL_STATE_TTL_MS;
-    },
-    get TOKEN_REVOKED_PREFIX () {
-        return TOKEN_REVOKED_PREFIX;
-    },
-    get USER_ENRICHER () {
-        return USER_ENRICHER;
-    }
-});
-const AUTH_MODULE_OPTIONS = 'AUTH_MODULE_OPTIONS';
-const USER_ENRICHER = 'USER_ENRICHER';
-const BCRYPT_SALT_ROUNDS = 12;
-const DEFAULT_COOKIE_NAME = 'fsn_refresh_token';
-const MAX_COOKIE_BYTES = 3500;
-const SESSION_CACHE_PREFIX = 'auth:session';
-const TOKEN_REVOKED_PREFIX = 'auth:revoked';
-const SOCIAL_STATE_PREFIX = 'auth:social:state';
-const SOCIAL_STATE_TTL_MS = 10 * 60 * 1000; // 10 minutes

package/cjs/config/event-actions.js

@@ -1,47 +0,0 @@
-/**
- * Domain event actions published by the auth module, alongside the CRUD
- * lifecycle actions every ApiService emits.
- */ "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-function _export(target, all) {
-    for(var name in all)Object.defineProperty(target, name, {
-        enumerable: true,
-        get: Object.getOwnPropertyDescriptor(all, name).get
-    });
-}
-_export(exports, {
-    get AUTH_EVENT_ACTIONS () {
-        return AUTH_EVENT_ACTIONS;
-    },
-    get AUTH_EVENT_ENTITIES () {
-        return AUTH_EVENT_ENTITIES;
-    },
-    get AUTH_EVENT_MODULE () {
-        return AUTH_EVENT_MODULE;
-    }
-});
-const AUTH_EVENT_ACTIONS = {
-    LOGGED_IN: 'logged-in',
-    LOGGED_OUT: 'logged-out',
-    TOKEN_REFRESHED: 'token-refreshed',
-    COMPANY_SWITCHED: 'company-switched',
-    REGISTERED: 'registered',
-    PASSWORD_CHANGED: 'password-changed',
-    PASSWORD_RESET_REQUESTED: 'password-reset-requested',
-    PASSWORD_RESET: 'password-reset',
-    EMAIL_VERIFIED: 'email-verified',
-    PERMISSION_GRANTED: 'permission-granted',
-    PERMISSION_REVOKED: 'permission-revoked',
-    SOCIAL_LOGGED_IN: 'social-logged-in'
-};
-const AUTH_EVENT_ENTITIES = {
-    USER: 'appuser',
-    COMPANY: 'company',
-    COMPANY_BRANCH: 'company_branch',
-    SESSION: 'session',
-    USER_PERMISSION: 'user_company_permission',
-    SOCIAL_AUTH_CONFIG: 'social_auth_config'
-};
-const AUTH_EVENT_MODULE = 'auth';

package/cjs/config/index.js

@@ -1,20 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-_export_star(require("./auth.constants"), exports);
-_export_star(require("./event-actions"), exports);
-_export_star(require("./message-keys"), exports);
-function _export_star(from, to) {
-    Object.keys(from).forEach(function(k) {
-        if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
-            Object.defineProperty(to, k, {
-                enumerable: true,
-                get: function() {
-                    return from[k];
-                }
-            });
-        }
-    });
-    return from;
-}

package/cjs/config/message-keys.js

@@ -1,135 +0,0 @@
-// ==================== AUTH MODULE MESSAGE KEYS ====================
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-function _export(target, all) {
-    for(var name in all)Object.defineProperty(target, name, {
-        enumerable: true,
-        get: Object.getOwnPropertyDescriptor(all, name).get
-    });
-}
-_export(exports, {
-    get AUTH_MESSAGES () {
-        return AUTH_MESSAGES;
-    },
-    get BRANCH_MESSAGES () {
-        return BRANCH_MESSAGES;
-    },
-    get COMPANY_MESSAGES () {
-        return COMPANY_MESSAGES;
-    },
-    get EMAIL_VERIFICATION_MESSAGES () {
-        return EMAIL_VERIFICATION_MESSAGES;
-    },
-    get SOCIAL_AUTH_CONFIG_MESSAGES () {
-        return SOCIAL_AUTH_CONFIG_MESSAGES;
-    },
-    get SOCIAL_AUTH_MESSAGES () {
-        return SOCIAL_AUTH_MESSAGES;
-    },
-    get USER_MESSAGES () {
-        return USER_MESSAGES;
-    },
-    get USER_PERMISSION_MESSAGES () {
-        return USER_PERMISSION_MESSAGES;
-    }
-});
-const AUTH_MESSAGES = {
-    LOGIN_SUCCESS: 'auth.login.success',
-    LOGIN_REQUIRES_SELECTION: 'auth.login.requires.selection',
-    LOGIN_INVALID_CREDENTIALS: 'auth.login.invalid.credentials',
-    LOGIN_EMAIL_NOT_VERIFIED: 'auth.login.email.not.verified',
-    LOGIN_ACCOUNT_DEACTIVATED: 'auth.login.account.deactivated',
-    LOGOUT_SUCCESS: 'auth.logout.success',
-    REGISTER_SUCCESS: 'auth.register.success',
-    REGISTER_FAILED: 'auth.register.failed',
-    REFRESH_SUCCESS: 'auth.refresh.success',
-    ME_SUCCESS: 'auth.me.success',
-    SELECT_SUCCESS: 'auth.select.success',
-    SWITCH_COMPANY_SUCCESS: 'auth.switch.company.success',
-    REGISTER_EMAIL_EXISTS: 'auth.register.email.exists',
-    REGISTER_ACCOUNT_DELETED: 'auth.register.account.deleted',
-    REGISTER_COMPANY_ALREADY_ASSIGNED: 'auth.register.company.already.assigned',
-    REGISTER_SIGNUP_DISABLED: 'auth.register.signup.disabled',
-    PASSWORD_CHANGE_SUCCESS: 'auth.password.change.success',
-    PASSWORD_CHANGE_INVALID_CURRENT: 'auth.password.change.invalid.current',
-    PASSWORD_CHANGE_CURRENT_REQUIRED: 'auth.password.change.current.required',
-    PASSWORD_RESET_EMAIL_SENT: 'auth.password.reset.email.sent',
-    PASSWORD_RESET_SUCCESS: 'auth.password.reset.success',
-    TOKEN_REQUIRED: 'auth.token.required',
-    TOKEN_INVALID: 'auth.token.invalid',
-    TOKEN_EXPIRED: 'auth.token.expired',
-    TOKEN_REVOKED: 'auth.token.revoked',
-    TOKEN_TOO_LARGE: 'auth.token.too.large',
-    COMPANY_LIST_SUCCESS: 'auth.company.list.success',
-    COMPANY_NO_ACCESS: 'auth.company.no.access',
-    COMPANY_NOT_FOUND: 'auth.company.not.found',
-    COMPANY_REQUIRED: 'auth.company.required',
-    COMPANY_FEATURE_NOT_ENABLED: 'auth.company.feature.not.enabled',
-    BRANCH_LIST_SUCCESS: 'auth.branch.list.success',
-    BRANCH_NO_ACCESS: 'auth.branch.no.access',
-    BRANCH_NOT_FOUND: 'auth.branch.not.found',
-    EMAIL_NOT_CONFIGURED: 'auth.email.not.configured',
-    EMAIL_SEND_FAILED: 'auth.email.send.failed',
-    SESSION_INVALID: 'auth.session.invalid',
-    SESSION_NOT_AVAILABLE: 'auth.session.not.available',
-    PROFILE_ACCESS_DENIED: 'auth.profile.access.denied',
-    PROFILE_SECTIONS_NOT_SUPPORTED: 'auth.profile.sections.not.supported',
-    LOGOUT_SERVICE_UNAVAILABLE: 'auth.logout.service.unavailable',
-    PASSWORD_RESET_TOKEN_EXPIRED: 'auth.password.reset.token.expired',
-    PASSWORD_RESET_TOKEN_USED: 'auth.password.reset.token.used'
-};
-const EMAIL_VERIFICATION_MESSAGES = {
-    VERIFICATION_SENT: 'email.verification.sent',
-    VERIFICATION_SUCCESS: 'email.verification.success',
-    VERIFICATION_TOKEN_INVALID: 'email.verification.token.invalid',
-    VERIFICATION_TOKEN_EXPIRED: 'email.verification.token.expired',
-    VERIFICATION_NOT_ENABLED: 'email.verification.not.enabled',
-    RESEND_SUCCESS: 'email.verification.resend.success'
-};
-const SOCIAL_AUTH_MESSAGES = {
-    PROVIDERS_SUCCESS: 'auth.social.providers.success',
-    AUTHORIZE_SUCCESS: 'auth.social.authorize.success',
-    LOGIN_SUCCESS: 'auth.social.login.success',
-    PROVIDER_DISABLED: 'auth.social.provider.disabled',
-    PROVIDER_NOT_CONFIGURED: 'auth.social.provider.not.configured',
-    STATE_INVALID: 'auth.social.state.invalid',
-    REDIRECT_URI_MISMATCH: 'auth.social.redirect.uri.mismatch',
-    EXCHANGE_FAILED: 'auth.social.exchange.failed',
-    PROFILE_INCOMPLETE: 'auth.social.profile.incomplete',
-    ACCOUNT_NOT_LINKED: 'auth.social.account.not.linked',
-    COMPANY_REQUIRED: 'auth.social.company.required',
-    EMAIL_REQUIRED: 'auth.social.email.required',
-    EMAIL_NOT_VERIFIED: 'auth.social.email.not.verified',
-    ACCOUNT_DELETED: 'auth.social.account.deleted'
-};
-const SOCIAL_AUTH_CONFIG_MESSAGES = {
-    PROVIDER_ALREADY_CONFIGURED: 'social.config.provider.already.configured'
-};
-const USER_MESSAGES = {
-    NOT_FOUND: 'user.not.found',
-    PROFILE_UPDATE_SUCCESS: 'user.profile.update.success',
-    PROFILE_EXTRAS_SUCCESS: 'user.profile.extras.success',
-    PROFILE_SECTIONS_SUCCESS: 'user.profile.sections.success',
-    PROFILE_SECTION_DATA_SUCCESS: 'user.profile.section.data.success',
-    PROFILE_SECTION_UPDATE_SUCCESS: 'user.profile.section.update.success',
-    PROFILE_COMPLETION_SUCCESS: 'user.profile.completion.success',
-    EMAIL_VERIFY_SUCCESS: 'user.email.verify.success',
-    PHONE_VERIFY_SUCCESS: 'user.phone.verify.success',
-    STATUS_UPDATE_SUCCESS: 'user.status.update.success',
-    LOOKUP_SUCCESS: 'user.lookup.success'
-};
-const COMPANY_MESSAGES = {
-    READONLY_DELETE_FORBIDDEN: 'company.readonly.delete.forbidden'
-};
-const BRANCH_MESSAGES = {
-    READONLY_DELETE_FORBIDDEN: 'branch.readonly.delete.forbidden'
-};
-const USER_PERMISSION_MESSAGES = {
-    COMPANY_LIST_SUCCESS: 'user.permission.company.list.success',
-    BRANCH_LIST_SUCCESS: 'user.permission.branch.list.success',
-    BATCH_SUCCESS: 'user.permission.batch.success',
-    ALREADY_ASSIGNED: 'user.permission.already.assigned',
-    PERMISSION_NOT_FOUND: 'user.permission.not.found'
-};