@flusys/nestjs-auth 7.1.0 → 8.0.0-beta.1

package/fesm/helpers/auth-response.mapper.spec.js

@@ -1,135 +0,0 @@
-import { toBranchInfo, toCompanyInfo, toUserInfo } from './auth-response.mapper';
-function buildUser(overrides = {}) {
-    return {
-        id: 'user-uuid-1',
-        email: 'user@example.com',
-        name: 'Test User',
-        phone: null,
-        profilePictureId: null,
-        isActive: true,
-        emailVerified: false,
-        phoneVerified: false,
-        lastLoginAt: null,
-        additionalFields: null,
-        createdAt: new Date(),
-        updatedAt: new Date(),
-        deletedAt: null,
-        createdById: null,
-        updatedById: null,
-        deletedById: null,
-        password: null,
-        ...overrides
-    };
-}
-function buildCompany(overrides = {}) {
-    return {
-        id: 'company-uuid-1',
-        name: 'Acme Corp',
-        slug: 'acme-corp',
-        logoId: null,
-        readOnly: false,
-        address: null,
-        phone: null,
-        email: null,
-        website: null,
-        serial: null,
-        isActive: true,
-        settings: null,
-        additionalFields: null,
-        branches: [],
-        ...overrides
-    };
-}
-function buildBranch(overrides = {}) {
-    return {
-        id: 'branch-uuid-1',
-        name: 'Main Branch',
-        slug: 'main-branch',
-        logoId: null,
-        readOnly: false,
-        address: null,
-        phone: null,
-        email: null,
-        serial: null,
-        isActive: true,
-        additionalFields: null,
-        parentId: null,
-        parent: null,
-        children: [],
-        companyId: 'company-uuid-1',
-        company: buildCompany(),
-        ...overrides
-    };
-}
-describe('auth-response.mapper', ()=>{
-    describe('toUserInfo', ()=>{
-        it('maps all user fields', ()=>{
-            const user = buildUser({
-                name: 'John Doe',
-                phone: '+123',
-                profilePictureId: 'pic-1'
-            });
-            const result = toUserInfo(user);
-            expect(result).toEqual({
-                id: 'user-uuid-1',
-                email: 'user@example.com',
-                name: 'John Doe',
-                phone: '+123',
-                profilePictureId: 'pic-1'
-            });
-        });
-        it('defaults name to undefined and nullable fields to null when absent', ()=>{
-            const user = buildUser({
-                name: null,
-                phone: null,
-                profilePictureId: null
-            });
-            const result = toUserInfo(user);
-            expect(result.name).toBeUndefined();
-            expect(result.phone).toBeNull();
-            expect(result.profilePictureId).toBeNull();
-        });
-    });
-    describe('toCompanyInfo', ()=>{
-        it('maps all company fields', ()=>{
-            const company = buildCompany({
-                logoId: 'logo-1'
-            });
-            const result = toCompanyInfo(company);
-            expect(result).toEqual({
-                id: 'company-uuid-1',
-                name: 'Acme Corp',
-                slug: 'acme-corp',
-                logoId: 'logo-1'
-            });
-        });
-        it('defaults logoId to null when absent', ()=>{
-            const company = buildCompany({
-                logoId: null
-            });
-            const result = toCompanyInfo(company);
-            expect(result.logoId).toBeNull();
-        });
-    });
-    describe('toBranchInfo', ()=>{
-        it('maps all branch fields', ()=>{
-            const branch = buildBranch({
-                logoId: 'logo-2'
-            });
-            const result = toBranchInfo(branch);
-            expect(result).toEqual({
-                id: 'branch-uuid-1',
-                name: 'Main Branch',
-                slug: 'main-branch',
-                logoId: 'logo-2'
-            });
-        });
-        it('defaults logoId to null when absent', ()=>{
-            const branch = buildBranch({
-                logoId: null
-            });
-            const result = toBranchInfo(branch);
-            expect(result.logoId).toBeNull();
-        });
-    });
-});

package/fesm/helpers/token.helper.js

@@ -1,40 +0,0 @@
-export function generateTokens(jwtService, authConfig, payload) {
-    const accessToken = jwtService.sign({
-        ...payload,
-        type: 'access'
-    }, {
-        secret: authConfig.getJwtSecret(),
-        expiresIn: authConfig.getJwtExpiration(),
-        algorithm: 'HS256'
-    });
-    const refreshToken = jwtService.sign({
-        ...payload,
-        type: 'refresh'
-    }, {
-        secret: authConfig.getRefreshTokenSecret(),
-        expiresIn: authConfig.getRefreshTokenExpiration(),
-        algorithm: 'HS256'
-    });
-    return {
-        accessToken,
-        refreshToken
-    };
-}
-export function parseExpiryToMs(expiry) {
-    const match = expiry.match(/^(\d+)([smhd])$/);
-    if (!match) return 7 * 24 * 60 * 60 * 1000;
-    const value = parseInt(match[1], 10);
-    const unit = match[2];
-    switch(unit){
-        case 's':
-            return value * 1000;
-        case 'm':
-            return value * 60 * 1000;
-        case 'h':
-            return value * 60 * 60 * 1000;
-        case 'd':
-            return value * 24 * 60 * 60 * 1000;
-        default:
-            return 7 * 24 * 60 * 60 * 1000;
-    }
-}

package/fesm/helpers/token.helper.spec.js

@@ -1,82 +0,0 @@
-import { generateTokens, parseExpiryToMs } from './token.helper';
-describe('token.helper', ()=>{
-    describe('generateTokens', ()=>{
-        let mockJwtService;
-        let mockAuthConfig;
-        beforeEach(()=>{
-            mockJwtService = {
-                sign: jest.fn()
-            };
-            mockAuthConfig = {
-                getJwtSecret: jest.fn().mockReturnValue('jwt-secret'),
-                getJwtExpiration: jest.fn().mockReturnValue('1h'),
-                getRefreshTokenSecret: jest.fn().mockReturnValue('refresh-secret'),
-                getRefreshTokenExpiration: jest.fn().mockReturnValue('7d')
-            };
-        });
-        it('signs an access token and a refresh token with distinct secrets', ()=>{
-            mockJwtService.sign.mockReturnValueOnce('access-token-value').mockReturnValueOnce('refresh-token-value');
-            const result = generateTokens(mockJwtService, mockAuthConfig, {
-                id: 'user-1',
-                email: 'user@example.com',
-                type: 'access'
-            });
-            expect(result).toEqual({
-                accessToken: 'access-token-value',
-                refreshToken: 'refresh-token-value'
-            });
-            expect(mockJwtService.sign).toHaveBeenNthCalledWith(1, expect.objectContaining({
-                id: 'user-1',
-                email: 'user@example.com',
-                type: 'access'
-            }), expect.objectContaining({
-                secret: 'jwt-secret',
-                expiresIn: '1h',
-                algorithm: 'HS256'
-            }));
-            expect(mockJwtService.sign).toHaveBeenNthCalledWith(2, expect.objectContaining({
-                id: 'user-1',
-                email: 'user@example.com',
-                type: 'refresh'
-            }), expect.objectContaining({
-                secret: 'refresh-secret',
-                expiresIn: '7d',
-                algorithm: 'HS256'
-            }));
-        });
-        it('includes companyId and branchId in the signed payload when provided', ()=>{
-            mockJwtService.sign.mockReturnValue('token');
-            generateTokens(mockJwtService, mockAuthConfig, {
-                id: 'user-1',
-                email: 'user@example.com',
-                type: 'access',
-                companyId: 'company-1',
-                branchId: 'branch-1'
-            });
-            expect(mockJwtService.sign).toHaveBeenCalledWith(expect.objectContaining({
-                companyId: 'company-1',
-                branchId: 'branch-1'
-            }), expect.anything());
-        });
-    });
-    describe('parseExpiryToMs', ()=>{
-        it('parses seconds', ()=>{
-            expect(parseExpiryToMs('30s')).toBe(30 * 1000);
-        });
-        it('parses minutes', ()=>{
-            expect(parseExpiryToMs('15m')).toBe(15 * 60 * 1000);
-        });
-        it('parses hours', ()=>{
-            expect(parseExpiryToMs('2h')).toBe(2 * 60 * 60 * 1000);
-        });
-        it('parses days', ()=>{
-            expect(parseExpiryToMs('7d')).toBe(7 * 24 * 60 * 60 * 1000);
-        });
-        it('falls back to 7 days for an unparsable value', ()=>{
-            expect(parseExpiryToMs('not-a-duration')).toBe(7 * 24 * 60 * 60 * 1000);
-        });
-        it('falls back to 7 days for an unknown unit', ()=>{
-            expect(parseExpiryToMs('5y')).toBe(7 * 24 * 60 * 60 * 1000);
-        });
-    });
-});

package/fesm/interceptors/clear-token.interceptor.js

@@ -1,63 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { buildCookieOptions, isBrowserRequest } from '@flusys/nestjs-shared/utils';
-import { Injectable, Optional } from '@nestjs/common';
-import { map } from 'rxjs';
-import { DEFAULT_COOKIE_NAME } from '../config';
-import { AuthConfigService } from '../services/auth-config.service';
-export class ClearToken {
-    get cookieName() {
-        return this.authConfig?.getRefreshTokenCookieName() ?? DEFAULT_COOKIE_NAME;
-    }
-    intercept(context, next) {
-        const req = context.switchToHttp().getRequest();
-        const res = context.switchToHttp().getResponse();
-        return next.handle().pipe(map((value)=>{
-            if (isBrowserRequest(req)) {
-                res.clearCookie(this.cookieName, {
-                    httpOnly: true,
-                    path: '/',
-                    ...buildCookieOptions(req)
-                });
-            }
-            return value;
-        }));
-    }
-    constructor(authConfig){
-        _define_property(this, "authConfig", void 0);
-        this.authConfig = authConfig;
-    }
-}
-ClearToken = _ts_decorate([
-    Injectable(),
-    _ts_param(0, Optional()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof AuthConfigService === "undefined" ? Object : AuthConfigService
-    ])
-], ClearToken);

package/fesm/interceptors/clear-token.interceptor.spec.js

@@ -1,103 +0,0 @@
-import { of } from 'rxjs';
-import { ClearToken } from './clear-token.interceptor';
-import { DEFAULT_COOKIE_NAME } from '../config';
-function buildContext(req, res) {
-    return {
-        switchToHttp: ()=>({
-                getRequest: ()=>req,
-                getResponse: ()=>res
-            })
-    };
-}
-function buildCallHandler(value) {
-    return {
-        handle: ()=>of(value)
-    };
-}
-describe('ClearToken', ()=>{
-    let mockAuthConfig;
-    beforeEach(()=>{
-        mockAuthConfig = {
-            getRefreshTokenCookieName: jest.fn().mockReturnValue('custom_refresh_token')
-        };
-    });
-    it('clears the cookie for a browser request', (done)=>{
-        const interceptor = new ClearToken(mockAuthConfig);
-        const clearCookie = jest.fn();
-        const req = {
-            headers: {
-                'user-agent': 'Mozilla/5.0 Chrome/1.0'
-            }
-        };
-        const res = {
-            clearCookie
-        };
-        interceptor.intercept(buildContext(req, res), buildCallHandler({
-            success: true
-        })).subscribe((result)=>{
-            expect(clearCookie).toHaveBeenCalledWith('custom_refresh_token', expect.objectContaining({
-                httpOnly: true,
-                path: '/'
-            }));
-            expect(result).toEqual({
-                success: true
-            });
-            done();
-        });
-    });
-    it('does not clear the cookie for a non-browser (API) request', (done)=>{
-        const interceptor = new ClearToken(mockAuthConfig);
-        const clearCookie = jest.fn();
-        const req = {
-            headers: {
-                'user-agent': 'PostmanRuntime/7.0'
-            }
-        };
-        const res = {
-            clearCookie
-        };
-        interceptor.intercept(buildContext(req, res), buildCallHandler({
-            success: true
-        })).subscribe(()=>{
-            expect(clearCookie).not.toHaveBeenCalled();
-            done();
-        });
-    });
-    it('falls back to the default cookie name when authConfig is unavailable', (done)=>{
-        const interceptor = new ClearToken(undefined);
-        const clearCookie = jest.fn();
-        const req = {
-            headers: {
-                'user-agent': 'Mozilla/5.0 Chrome/1.0'
-            }
-        };
-        const res = {
-            clearCookie
-        };
-        interceptor.intercept(buildContext(req, res), buildCallHandler({
-            success: true
-        })).subscribe(()=>{
-            expect(clearCookie).toHaveBeenCalledWith(DEFAULT_COOKIE_NAME, expect.anything());
-            done();
-        });
-    });
-    it('passes through the emitted value unchanged', (done)=>{
-        const interceptor = new ClearToken(mockAuthConfig);
-        const req = {
-            headers: {
-                'user-agent': 'PostmanRuntime/7.0'
-            }
-        };
-        const res = {
-            clearCookie: jest.fn()
-        };
-        const payload = {
-            success: true,
-            message: 'Logged out successfully'
-        };
-        interceptor.intercept(buildContext(req, res), buildCallHandler(payload)).subscribe((result)=>{
-            expect(result).toBe(payload);
-            done();
-        });
-    });
-});

package/fesm/interceptors/set-token.interceptor.js

@@ -1,98 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { buildCookieOptions, isBrowserRequest, parseDurationToMs } from '@flusys/nestjs-shared/utils';
-import { AUTH_MESSAGES } from '../config';
-import { Inject, Injectable, Optional, PayloadTooLargeException } from '@nestjs/common';
-import { Buffer } from 'buffer';
-import { catchError, map, throwError } from 'rxjs';
-import { DEFAULT_COOKIE_NAME, MAX_COOKIE_BYTES } from '../config';
-import { AuthConfigService } from '../services/auth-config.service';
-export class SetToken {
-    get cookieName() {
-        return this.authConfig?.getRefreshTokenCookieName() ?? DEFAULT_COOKIE_NAME;
-    }
-    get maxAgeMs() {
-        return parseDurationToMs(this.authConfig?.getRefreshTokenExpiration() ?? '7d');
-    }
-    intercept(context, next) {
-        const req = context.switchToHttp().getRequest();
-        const res = context.switchToHttp().getResponse();
-        return next.handle().pipe(map((value)=>{
-            if (typeof value !== 'object' || value === null) {
-                return value;
-            }
-            const response = value;
-            const data = typeof response['data'] === 'object' && response['data'] !== null ? response['data'] : null;
-            const tokenInData = data && typeof data['refreshToken'] === 'string';
-            if (!tokenInData) {
-                return value;
-            }
-            if (!isBrowserRequest(req)) {
-                return value;
-            }
-            this.setRefreshTokenCookie(req, res, data['refreshToken']);
-            const { refreshToken: _, ...dataWithoutToken } = data;
-            return {
-                ...response,
-                data: dataWithoutToken
-            };
-        }), catchError((err)=>throwError(()=>err)));
-    }
-    setRefreshTokenCookie(req, res, tokenValue) {
-        const rawCookieString = `${this.cookieName}=${tokenValue}; HttpOnly`;
-        const estimatedBytes = Buffer.byteLength(rawCookieString, 'utf8');
-        if (estimatedBytes > MAX_COOKIE_BYTES) {
-            throw new PayloadTooLargeException({
-                message: `Refresh token too large (≈${estimatedBytes} bytes)`,
-                messageKey: AUTH_MESSAGES.TOKEN_TOO_LARGE,
-                messageVariables: {
-                    size: estimatedBytes
-                }
-            });
-        }
-        res.cookie(this.cookieName, tokenValue, {
-            httpOnly: true,
-            path: '/',
-            maxAge: this.maxAgeMs,
-            ...buildCookieOptions(req)
-        });
-    }
-    constructor(authConfig){
-        _define_property(this, "authConfig", void 0);
-        this.authConfig = authConfig;
-    }
-}
-SetToken = _ts_decorate([
-    Injectable(),
-    _ts_param(0, Optional()),
-    _ts_param(0, Inject(AuthConfigService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof AuthConfigService === "undefined" ? Object : AuthConfigService
-    ])
-], SetToken);

package/fesm/interceptors/set-token.interceptor.spec.js

@@ -1,161 +0,0 @@
-import { PayloadTooLargeException } from '@nestjs/common';
-import { of } from 'rxjs';
-import { SetToken } from './set-token.interceptor';
-import { DEFAULT_COOKIE_NAME } from '../config';
-function buildContext(req, res) {
-    return {
-        switchToHttp: ()=>({
-                getRequest: ()=>req,
-                getResponse: ()=>res
-            })
-    };
-}
-function buildCallHandler(value) {
-    return {
-        handle: ()=>of(value)
-    };
-}
-const browserReq = {
-    headers: {
-        'user-agent': 'Mozilla/5.0 Chrome/1.0'
-    }
-};
-const apiReq = {
-    headers: {
-        'user-agent': 'PostmanRuntime/7.0'
-    }
-};
-describe('SetToken', ()=>{
-    let mockAuthConfig;
-    beforeEach(()=>{
-        mockAuthConfig = {
-            getRefreshTokenCookieName: jest.fn().mockReturnValue('custom_refresh_token'),
-            getRefreshTokenExpiration: jest.fn().mockReturnValue('7d')
-        };
-    });
-    it('sets a refresh token cookie and strips refreshToken from data for browser requests', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            success: true,
-            data: {
-                accessToken: 'access-1',
-                refreshToken: 'refresh-1',
-                user: {
-                    id: 'u1'
-                }
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe((result)=>{
-            expect(cookie).toHaveBeenCalledWith('custom_refresh_token', 'refresh-1', expect.objectContaining({
-                httpOnly: true,
-                path: '/'
-            }));
-            expect(result).toEqual({
-                success: true,
-                data: {
-                    accessToken: 'access-1',
-                    user: {
-                        id: 'u1'
-                    }
-                }
-            });
-            expect(result.data.refreshToken).toBeUndefined();
-            done();
-        });
-    });
-    it('does not set a cookie or modify data for non-browser (API) requests', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            success: true,
-            data: {
-                accessToken: 'access-1',
-                refreshToken: 'refresh-1'
-            }
-        };
-        interceptor.intercept(buildContext(apiReq, res), buildCallHandler(payload)).subscribe((result)=>{
-            expect(cookie).not.toHaveBeenCalled();
-            expect(result).toBe(payload);
-            done();
-        });
-    });
-    it('passes through non-object values unchanged', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const res = {
-            cookie: jest.fn()
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler('plain-string')).subscribe((result)=>{
-            expect(result).toBe('plain-string');
-            done();
-        });
-    });
-    it('passes through null values unchanged', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const res = {
-            cookie: jest.fn()
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(null)).subscribe((result)=>{
-            expect(result).toBeNull();
-            done();
-        });
-    });
-    it('passes through values without a refreshToken in data unchanged', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            success: true,
-            data: {
-                accessToken: 'access-1'
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe((result)=>{
-            expect(cookie).not.toHaveBeenCalled();
-            expect(result).toBe(payload);
-            done();
-        });
-    });
-    it('falls back to the default cookie name when authConfig is unavailable', (done)=>{
-        const interceptor = new SetToken(undefined);
-        const cookie = jest.fn();
-        const res = {
-            cookie
-        };
-        const payload = {
-            data: {
-                refreshToken: 'refresh-1'
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe(()=>{
-            expect(cookie).toHaveBeenCalledWith(DEFAULT_COOKIE_NAME, 'refresh-1', expect.anything());
-            done();
-        });
-    });
-    it('throws PayloadTooLargeException when the refresh token exceeds the max cookie size', (done)=>{
-        const interceptor = new SetToken(mockAuthConfig);
-        const res = {
-            cookie: jest.fn()
-        };
-        const oversizedToken = 'a'.repeat(4000);
-        const payload = {
-            data: {
-                refreshToken: oversizedToken
-            }
-        };
-        interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe({
-            error: (err)=>{
-                expect(err).toBeInstanceOf(PayloadTooLargeException);
-                done();
-            }
-        });
-    });
-});