@flusys/nestjs-auth 7.1.0 → 8.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/config/index.d.ts +3 -3
- package/config/message-keys.d.ts +4 -0
- package/controllers/authentication.controller.d.ts +5 -5
- package/controllers/branch.controller.d.ts +2 -2
- package/controllers/company-selection.controller.d.ts +4 -4
- package/controllers/company.controller.d.ts +2 -2
- package/controllers/email-verification.controller.d.ts +6 -6
- package/controllers/index.d.ts +9 -9
- package/controllers/social-auth-config.controller.d.ts +2 -2
- package/controllers/social-auth.controller.d.ts +3 -3
- package/controllers/user-permission.controller.d.ts +7 -4
- package/controllers/user.controller.d.ts +7 -7
- package/docs/auth-swagger.config.d.ts +2 -2
- package/docs/index.d.ts +1 -1
- package/dtos/index.d.ts +6 -6
- package/dtos/social-auth.dto.d.ts +1 -1
- package/dtos/user-permission.dto.d.ts +30 -0
- package/entities/company-branch.entity.d.ts +1 -1
- package/entities/company.entity.d.ts +1 -1
- package/entities/index.d.ts +14 -14
- package/entities/pending-registration.entity.d.ts +1 -1
- package/entities/user-company-permission.entity.d.ts +4 -4
- package/enums/index.d.ts +2 -2
- package/fesm/118.js +1404 -0
- package/fesm/120.js +2265 -0
- package/fesm/24.js +4422 -0
- package/fesm/370.js +1163 -0
- package/fesm/446.js +877 -0
- package/fesm/chunks/117.js +69 -0
- package/fesm/config/index.js +246 -3
- package/fesm/controllers/index.js +27 -9
- package/fesm/docs/index.js +479 -1
- package/fesm/dtos/index.js +135 -6
- package/fesm/entities/index.js +68 -22
- package/fesm/enums/index.js +53 -2
- package/fesm/helpers/index.js +115 -2
- package/fesm/index.js +1455 -13
- package/fesm/interceptors/index.js +510 -2
- package/fesm/interfaces/index.js +75 -8
- package/fesm/modules/index.js +546 -1
- package/fesm/runtime.js +134 -0
- package/fesm/services/index.js +67 -11
- package/helpers/auth-response.mapper.d.ts +3 -3
- package/helpers/index.d.ts +2 -2
- package/helpers/token.helper.d.ts +2 -2
- package/index.d.ts +13 -13
- package/interceptors/clear-token.interceptor.d.ts +2 -2
- package/interceptors/index.d.ts +2 -2
- package/interceptors/set-token.interceptor.d.ts +2 -2
- package/interfaces/auth-module-options.interface.d.ts +3 -3
- package/interfaces/authentication.interface.d.ts +3 -3
- package/interfaces/company-branch.interface.d.ts +2 -2
- package/interfaces/company.interface.d.ts +1 -1
- package/interfaces/index.d.ts +8 -8
- package/interfaces/social-auth.interface.d.ts +2 -2
- package/interfaces/user-enricher.interface.d.ts +3 -3
- package/modules/auth.module.d.ts +4 -4
- package/modules/index.d.ts +1 -1
- package/package.json +32 -39
- package/providers/facebook.social-provider.d.ts +2 -2
- package/providers/google.social-provider.d.ts +2 -2
- package/providers/index.d.ts +1 -1
- package/providers/linkedin.social-provider.d.ts +2 -2
- package/providers/microsoft.social-provider.d.ts +2 -2
- package/providers/social-provider.registry.d.ts +2 -2
- package/services/auth-config.service.d.ts +3 -3
- package/services/auth-datasource.provider.d.ts +3 -3
- package/services/auth-email.service.d.ts +3 -3
- package/services/authentication.service.d.ts +12 -12
- package/services/branch.service.d.ts +7 -7
- package/services/company.service.d.ts +6 -6
- package/services/index.d.ts +11 -11
- package/services/social-auth-config.service.d.ts +6 -6
- package/services/social-auth.service.d.ts +5 -5
- package/services/user-permission.service.d.ts +10 -4
- package/services/user.service.d.ts +7 -7
- package/strategies/jwt.strategy.d.ts +4 -4
- package/validators/password.validator.d.ts +1 -1
- package/cjs/config/auth.constants.js +0 -49
- package/cjs/config/event-actions.js +0 -47
- package/cjs/config/index.js +0 -20
- package/cjs/config/message-keys.js +0 -135
- package/cjs/controllers/authentication.controller.js +0 -427
- package/cjs/controllers/authentication.controller.spec.js +0 -219
- package/cjs/controllers/branch.controller.js +0 -102
- package/cjs/controllers/branch.controller.spec.js +0 -134
- package/cjs/controllers/company-selection.controller.js +0 -198
- package/cjs/controllers/company-selection.controller.spec.js +0 -84
- package/cjs/controllers/company.controller.js +0 -102
- package/cjs/controllers/company.controller.spec.js +0 -131
- package/cjs/controllers/email-verification.controller.js +0 -224
- package/cjs/controllers/email-verification.controller.spec.js +0 -142
- package/cjs/controllers/index.js +0 -26
- package/cjs/controllers/social-auth-config.controller.js +0 -107
- package/cjs/controllers/social-auth.controller.js +0 -175
- package/cjs/controllers/social-auth.controller.spec.js +0 -79
- package/cjs/controllers/user-permission.controller.js +0 -223
- package/cjs/controllers/user-permission.controller.spec.js +0 -138
- package/cjs/controllers/user.controller.js +0 -438
- package/cjs/controllers/user.controller.spec.js +0 -204
- package/cjs/docs/auth-swagger.config.js +0 -461
- package/cjs/docs/auth-swagger.config.spec.js +0 -130
- package/cjs/docs/index.js +0 -18
- package/cjs/dtos/authentication.dto.js +0 -755
- package/cjs/dtos/company-branch.dto.js +0 -294
- package/cjs/dtos/company.dto.js +0 -298
- package/cjs/dtos/index.js +0 -23
- package/cjs/dtos/social-auth.dto.js +0 -318
- package/cjs/dtos/user-permission.dto.js +0 -358
- package/cjs/dtos/user.dto.js +0 -413
- package/cjs/entities/app-user.entity.js +0 -25
- package/cjs/entities/company-branch.entity.js +0 -163
- package/cjs/entities/company.entity.js +0 -146
- package/cjs/entities/index.js +0 -67
- package/cjs/entities/index.spec.js +0 -84
- package/cjs/entities/pending-registration.entity.js +0 -135
- package/cjs/entities/social-auth-config.entity.js +0 -102
- package/cjs/entities/user-company-permission.entity.js +0 -153
- package/cjs/entities/user-token.entity.js +0 -120
- package/cjs/enums/index.js +0 -19
- package/cjs/enums/social-provider-type.enum.js +0 -17
- package/cjs/enums/user-org-permission-type.enum.js +0 -15
- package/cjs/helpers/auth-response.mapper.js +0 -46
- package/cjs/helpers/auth-response.mapper.spec.js +0 -139
- package/cjs/helpers/index.js +0 -19
- package/cjs/helpers/token.helper.js +0 -58
- package/cjs/helpers/token.helper.spec.js +0 -86
- package/cjs/index.js +0 -30
- package/cjs/interceptors/clear-token.interceptor.js +0 -73
- package/cjs/interceptors/clear-token.interceptor.spec.js +0 -107
- package/cjs/interceptors/index.js +0 -19
- package/cjs/interceptors/set-token.interceptor.js +0 -107
- package/cjs/interceptors/set-token.interceptor.spec.js +0 -165
- package/cjs/interfaces/auth-email-provider.interface.js +0 -45
- package/cjs/interfaces/auth-module-options.interface.js +0 -4
- package/cjs/interfaces/authentication.interface.js +0 -4
- package/cjs/interfaces/company-branch.interface.js +0 -4
- package/cjs/interfaces/company.interface.js +0 -4
- package/cjs/interfaces/index.js +0 -25
- package/cjs/interfaces/social-auth.interface.js +0 -4
- package/cjs/interfaces/user-enricher.interface.js +0 -4
- package/cjs/interfaces/user.interface.js +0 -4
- package/cjs/modules/auth.module.js +0 -208
- package/cjs/modules/auth.module.spec.js +0 -258
- package/cjs/modules/index.js +0 -18
- package/cjs/providers/facebook.social-provider.js +0 -73
- package/cjs/providers/google.social-provider.js +0 -68
- package/cjs/providers/index.js +0 -18
- package/cjs/providers/linkedin.social-provider.js +0 -66
- package/cjs/providers/microsoft.social-provider.js +0 -78
- package/cjs/providers/oauth-http.util.js +0 -107
- package/cjs/providers/social-provider.registry.js +0 -24
- package/cjs/providers/social-provider.registry.spec.js +0 -135
- package/cjs/services/auth-config.service.js +0 -113
- package/cjs/services/auth-config.service.spec.js +0 -100
- package/cjs/services/auth-datasource.provider.js +0 -138
- package/cjs/services/auth-datasource.provider.spec.js +0 -191
- package/cjs/services/auth-email.service.js +0 -539
- package/cjs/services/auth-email.service.spec.js +0 -456
- package/cjs/services/authentication.service.js +0 -1203
- package/cjs/services/authentication.service.spec.js +0 -1020
- package/cjs/services/branch.service.js +0 -153
- package/cjs/services/branch.service.spec.js +0 -169
- package/cjs/services/company-selection-session.service.js +0 -121
- package/cjs/services/company-selection-session.service.spec.js +0 -90
- package/cjs/services/company.service.js +0 -140
- package/cjs/services/company.service.spec.js +0 -127
- package/cjs/services/index.js +0 -28
- package/cjs/services/social-auth-config.service.js +0 -103
- package/cjs/services/social-auth-config.service.spec.js +0 -71
- package/cjs/services/social-auth.service.js +0 -310
- package/cjs/services/social-auth.service.spec.js +0 -310
- package/cjs/services/user-permission.service.js +0 -236
- package/cjs/services/user-permission.service.spec.js +0 -254
- package/cjs/services/user.service.js +0 -671
- package/cjs/services/user.service.spec.js +0 -718
- package/cjs/strategies/jwt.strategy.js +0 -140
- package/cjs/strategies/jwt.strategy.spec.js +0 -166
- package/cjs/validators/password.validator.js +0 -45
- package/cjs/validators/password.validator.spec.js +0 -161
- package/fesm/config/auth.constants.js +0 -14
- package/fesm/config/event-actions.js +0 -26
- package/fesm/config/message-keys.js +0 -99
- package/fesm/controllers/authentication.controller.js +0 -417
- package/fesm/controllers/authentication.controller.spec.js +0 -215
- package/fesm/controllers/branch.controller.js +0 -92
- package/fesm/controllers/branch.controller.spec.js +0 -130
- package/fesm/controllers/company-selection.controller.js +0 -188
- package/fesm/controllers/company-selection.controller.spec.js +0 -80
- package/fesm/controllers/company.controller.js +0 -92
- package/fesm/controllers/company.controller.spec.js +0 -127
- package/fesm/controllers/email-verification.controller.js +0 -214
- package/fesm/controllers/email-verification.controller.spec.js +0 -138
- package/fesm/controllers/social-auth-config.controller.js +0 -97
- package/fesm/controllers/social-auth.controller.js +0 -165
- package/fesm/controllers/social-auth.controller.spec.js +0 -75
- package/fesm/controllers/user-permission.controller.js +0 -213
- package/fesm/controllers/user-permission.controller.spec.js +0 -134
- package/fesm/controllers/user.controller.js +0 -428
- package/fesm/controllers/user.controller.spec.js +0 -200
- package/fesm/docs/auth-swagger.config.js +0 -454
- package/fesm/docs/auth-swagger.config.spec.js +0 -126
- package/fesm/dtos/authentication.dto.js +0 -683
- package/fesm/dtos/company-branch.dto.js +0 -279
- package/fesm/dtos/company.dto.js +0 -283
- package/fesm/dtos/social-auth.dto.js +0 -282
- package/fesm/dtos/user-permission.dto.js +0 -339
- package/fesm/dtos/user.dto.js +0 -391
- package/fesm/entities/app-user.entity.js +0 -15
- package/fesm/entities/company-branch.entity.js +0 -153
- package/fesm/entities/company.entity.js +0 -136
- package/fesm/entities/index.spec.js +0 -80
- package/fesm/entities/pending-registration.entity.js +0 -125
- package/fesm/entities/social-auth-config.entity.js +0 -92
- package/fesm/entities/user-company-permission.entity.js +0 -136
- package/fesm/entities/user-token.entity.js +0 -104
- package/fesm/enums/social-provider-type.enum.js +0 -7
- package/fesm/enums/user-org-permission-type.enum.js +0 -5
- package/fesm/helpers/auth-response.mapper.js +0 -25
- package/fesm/helpers/auth-response.mapper.spec.js +0 -135
- package/fesm/helpers/token.helper.js +0 -40
- package/fesm/helpers/token.helper.spec.js +0 -82
- package/fesm/interceptors/clear-token.interceptor.js +0 -63
- package/fesm/interceptors/clear-token.interceptor.spec.js +0 -103
- package/fesm/interceptors/set-token.interceptor.js +0 -98
- package/fesm/interceptors/set-token.interceptor.spec.js +0 -161
- package/fesm/interfaces/auth-email-provider.interface.js +0 -38
- package/fesm/interfaces/auth-module-options.interface.js +0 -3
- package/fesm/interfaces/authentication.interface.js +0 -1
- package/fesm/interfaces/company-branch.interface.js +0 -1
- package/fesm/interfaces/company.interface.js +0 -1
- package/fesm/interfaces/social-auth.interface.js +0 -1
- package/fesm/interfaces/user-enricher.interface.js +0 -4
- package/fesm/interfaces/user.interface.js +0 -1
- package/fesm/modules/auth.module.js +0 -198
- package/fesm/modules/auth.module.spec.js +0 -254
- package/fesm/providers/facebook.social-provider.js +0 -63
- package/fesm/providers/google.social-provider.js +0 -58
- package/fesm/providers/index.js +0 -1
- package/fesm/providers/linkedin.social-provider.js +0 -56
- package/fesm/providers/microsoft.social-provider.js +0 -68
- package/fesm/providers/oauth-http.util.js +0 -77
- package/fesm/providers/social-provider.registry.js +0 -14
- package/fesm/providers/social-provider.registry.spec.js +0 -131
- package/fesm/services/auth-config.service.js +0 -103
- package/fesm/services/auth-config.service.spec.js +0 -96
- package/fesm/services/auth-datasource.provider.js +0 -87
- package/fesm/services/auth-datasource.provider.spec.js +0 -187
- package/fesm/services/auth-email.service.js +0 -488
- package/fesm/services/auth-email.service.spec.js +0 -411
- package/fesm/services/authentication.service.js +0 -1152
- package/fesm/services/authentication.service.spec.js +0 -975
- package/fesm/services/branch.service.js +0 -143
- package/fesm/services/branch.service.spec.js +0 -165
- package/fesm/services/company-selection-session.service.js +0 -111
- package/fesm/services/company-selection-session.service.spec.js +0 -86
- package/fesm/services/company.service.js +0 -130
- package/fesm/services/company.service.spec.js +0 -123
- package/fesm/services/social-auth-config.service.js +0 -93
- package/fesm/services/social-auth-config.service.spec.js +0 -67
- package/fesm/services/social-auth.service.js +0 -300
- package/fesm/services/social-auth.service.spec.js +0 -265
- package/fesm/services/user-permission.service.js +0 -226
- package/fesm/services/user-permission.service.spec.js +0 -250
- package/fesm/services/user.service.js +0 -620
- package/fesm/services/user.service.spec.js +0 -673
- package/fesm/strategies/jwt.strategy.js +0 -130
- package/fesm/strategies/jwt.strategy.spec.js +0 -162
- package/fesm/validators/password.validator.js +0 -48
- package/fesm/validators/password.validator.spec.js +0 -157
|
@@ -1,107 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", {
|
|
3
|
-
value: true
|
|
4
|
-
});
|
|
5
|
-
const _rxjs = require("rxjs");
|
|
6
|
-
const _cleartokeninterceptor = require("./clear-token.interceptor");
|
|
7
|
-
const _config = require("../config");
|
|
8
|
-
function buildContext(req, res) {
|
|
9
|
-
return {
|
|
10
|
-
switchToHttp: ()=>({
|
|
11
|
-
getRequest: ()=>req,
|
|
12
|
-
getResponse: ()=>res
|
|
13
|
-
})
|
|
14
|
-
};
|
|
15
|
-
}
|
|
16
|
-
function buildCallHandler(value) {
|
|
17
|
-
return {
|
|
18
|
-
handle: ()=>(0, _rxjs.of)(value)
|
|
19
|
-
};
|
|
20
|
-
}
|
|
21
|
-
describe('ClearToken', ()=>{
|
|
22
|
-
let mockAuthConfig;
|
|
23
|
-
beforeEach(()=>{
|
|
24
|
-
mockAuthConfig = {
|
|
25
|
-
getRefreshTokenCookieName: jest.fn().mockReturnValue('custom_refresh_token')
|
|
26
|
-
};
|
|
27
|
-
});
|
|
28
|
-
it('clears the cookie for a browser request', (done)=>{
|
|
29
|
-
const interceptor = new _cleartokeninterceptor.ClearToken(mockAuthConfig);
|
|
30
|
-
const clearCookie = jest.fn();
|
|
31
|
-
const req = {
|
|
32
|
-
headers: {
|
|
33
|
-
'user-agent': 'Mozilla/5.0 Chrome/1.0'
|
|
34
|
-
}
|
|
35
|
-
};
|
|
36
|
-
const res = {
|
|
37
|
-
clearCookie
|
|
38
|
-
};
|
|
39
|
-
interceptor.intercept(buildContext(req, res), buildCallHandler({
|
|
40
|
-
success: true
|
|
41
|
-
})).subscribe((result)=>{
|
|
42
|
-
expect(clearCookie).toHaveBeenCalledWith('custom_refresh_token', expect.objectContaining({
|
|
43
|
-
httpOnly: true,
|
|
44
|
-
path: '/'
|
|
45
|
-
}));
|
|
46
|
-
expect(result).toEqual({
|
|
47
|
-
success: true
|
|
48
|
-
});
|
|
49
|
-
done();
|
|
50
|
-
});
|
|
51
|
-
});
|
|
52
|
-
it('does not clear the cookie for a non-browser (API) request', (done)=>{
|
|
53
|
-
const interceptor = new _cleartokeninterceptor.ClearToken(mockAuthConfig);
|
|
54
|
-
const clearCookie = jest.fn();
|
|
55
|
-
const req = {
|
|
56
|
-
headers: {
|
|
57
|
-
'user-agent': 'PostmanRuntime/7.0'
|
|
58
|
-
}
|
|
59
|
-
};
|
|
60
|
-
const res = {
|
|
61
|
-
clearCookie
|
|
62
|
-
};
|
|
63
|
-
interceptor.intercept(buildContext(req, res), buildCallHandler({
|
|
64
|
-
success: true
|
|
65
|
-
})).subscribe(()=>{
|
|
66
|
-
expect(clearCookie).not.toHaveBeenCalled();
|
|
67
|
-
done();
|
|
68
|
-
});
|
|
69
|
-
});
|
|
70
|
-
it('falls back to the default cookie name when authConfig is unavailable', (done)=>{
|
|
71
|
-
const interceptor = new _cleartokeninterceptor.ClearToken(undefined);
|
|
72
|
-
const clearCookie = jest.fn();
|
|
73
|
-
const req = {
|
|
74
|
-
headers: {
|
|
75
|
-
'user-agent': 'Mozilla/5.0 Chrome/1.0'
|
|
76
|
-
}
|
|
77
|
-
};
|
|
78
|
-
const res = {
|
|
79
|
-
clearCookie
|
|
80
|
-
};
|
|
81
|
-
interceptor.intercept(buildContext(req, res), buildCallHandler({
|
|
82
|
-
success: true
|
|
83
|
-
})).subscribe(()=>{
|
|
84
|
-
expect(clearCookie).toHaveBeenCalledWith(_config.DEFAULT_COOKIE_NAME, expect.anything());
|
|
85
|
-
done();
|
|
86
|
-
});
|
|
87
|
-
});
|
|
88
|
-
it('passes through the emitted value unchanged', (done)=>{
|
|
89
|
-
const interceptor = new _cleartokeninterceptor.ClearToken(mockAuthConfig);
|
|
90
|
-
const req = {
|
|
91
|
-
headers: {
|
|
92
|
-
'user-agent': 'PostmanRuntime/7.0'
|
|
93
|
-
}
|
|
94
|
-
};
|
|
95
|
-
const res = {
|
|
96
|
-
clearCookie: jest.fn()
|
|
97
|
-
};
|
|
98
|
-
const payload = {
|
|
99
|
-
success: true,
|
|
100
|
-
message: 'Logged out successfully'
|
|
101
|
-
};
|
|
102
|
-
interceptor.intercept(buildContext(req, res), buildCallHandler(payload)).subscribe((result)=>{
|
|
103
|
-
expect(result).toBe(payload);
|
|
104
|
-
done();
|
|
105
|
-
});
|
|
106
|
-
});
|
|
107
|
-
});
|
|
@@ -1,19 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", {
|
|
3
|
-
value: true
|
|
4
|
-
});
|
|
5
|
-
_export_star(require("./clear-token.interceptor"), exports);
|
|
6
|
-
_export_star(require("./set-token.interceptor"), exports);
|
|
7
|
-
function _export_star(from, to) {
|
|
8
|
-
Object.keys(from).forEach(function(k) {
|
|
9
|
-
if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
|
|
10
|
-
Object.defineProperty(to, k, {
|
|
11
|
-
enumerable: true,
|
|
12
|
-
get: function() {
|
|
13
|
-
return from[k];
|
|
14
|
-
}
|
|
15
|
-
});
|
|
16
|
-
}
|
|
17
|
-
});
|
|
18
|
-
return from;
|
|
19
|
-
}
|
|
@@ -1,107 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", {
|
|
3
|
-
value: true
|
|
4
|
-
});
|
|
5
|
-
Object.defineProperty(exports, "SetToken", {
|
|
6
|
-
enumerable: true,
|
|
7
|
-
get: function() {
|
|
8
|
-
return SetToken;
|
|
9
|
-
}
|
|
10
|
-
});
|
|
11
|
-
const _utils = require("@flusys/nestjs-shared/utils");
|
|
12
|
-
const _config = require("../config");
|
|
13
|
-
const _common = require("@nestjs/common");
|
|
14
|
-
const _buffer = require("buffer");
|
|
15
|
-
const _rxjs = require("rxjs");
|
|
16
|
-
const _authconfigservice = require("../services/auth-config.service");
|
|
17
|
-
function _define_property(obj, key, value) {
|
|
18
|
-
if (key in obj) {
|
|
19
|
-
Object.defineProperty(obj, key, {
|
|
20
|
-
value: value,
|
|
21
|
-
enumerable: true,
|
|
22
|
-
configurable: true,
|
|
23
|
-
writable: true
|
|
24
|
-
});
|
|
25
|
-
} else {
|
|
26
|
-
obj[key] = value;
|
|
27
|
-
}
|
|
28
|
-
return obj;
|
|
29
|
-
}
|
|
30
|
-
function _ts_decorate(decorators, target, key, desc) {
|
|
31
|
-
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
32
|
-
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
33
|
-
else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
34
|
-
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
35
|
-
}
|
|
36
|
-
function _ts_metadata(k, v) {
|
|
37
|
-
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
38
|
-
}
|
|
39
|
-
function _ts_param(paramIndex, decorator) {
|
|
40
|
-
return function(target, key) {
|
|
41
|
-
decorator(target, key, paramIndex);
|
|
42
|
-
};
|
|
43
|
-
}
|
|
44
|
-
let SetToken = class SetToken {
|
|
45
|
-
get cookieName() {
|
|
46
|
-
return this.authConfig?.getRefreshTokenCookieName() ?? _config.DEFAULT_COOKIE_NAME;
|
|
47
|
-
}
|
|
48
|
-
get maxAgeMs() {
|
|
49
|
-
return (0, _utils.parseDurationToMs)(this.authConfig?.getRefreshTokenExpiration() ?? '7d');
|
|
50
|
-
}
|
|
51
|
-
intercept(context, next) {
|
|
52
|
-
const req = context.switchToHttp().getRequest();
|
|
53
|
-
const res = context.switchToHttp().getResponse();
|
|
54
|
-
return next.handle().pipe((0, _rxjs.map)((value)=>{
|
|
55
|
-
if (typeof value !== 'object' || value === null) {
|
|
56
|
-
return value;
|
|
57
|
-
}
|
|
58
|
-
const response = value;
|
|
59
|
-
const data = typeof response['data'] === 'object' && response['data'] !== null ? response['data'] : null;
|
|
60
|
-
const tokenInData = data && typeof data['refreshToken'] === 'string';
|
|
61
|
-
if (!tokenInData) {
|
|
62
|
-
return value;
|
|
63
|
-
}
|
|
64
|
-
if (!(0, _utils.isBrowserRequest)(req)) {
|
|
65
|
-
return value;
|
|
66
|
-
}
|
|
67
|
-
this.setRefreshTokenCookie(req, res, data['refreshToken']);
|
|
68
|
-
const { refreshToken: _, ...dataWithoutToken } = data;
|
|
69
|
-
return {
|
|
70
|
-
...response,
|
|
71
|
-
data: dataWithoutToken
|
|
72
|
-
};
|
|
73
|
-
}), (0, _rxjs.catchError)((err)=>(0, _rxjs.throwError)(()=>err)));
|
|
74
|
-
}
|
|
75
|
-
setRefreshTokenCookie(req, res, tokenValue) {
|
|
76
|
-
const rawCookieString = `${this.cookieName}=${tokenValue}; HttpOnly`;
|
|
77
|
-
const estimatedBytes = _buffer.Buffer.byteLength(rawCookieString, 'utf8');
|
|
78
|
-
if (estimatedBytes > _config.MAX_COOKIE_BYTES) {
|
|
79
|
-
throw new _common.PayloadTooLargeException({
|
|
80
|
-
message: `Refresh token too large (≈${estimatedBytes} bytes)`,
|
|
81
|
-
messageKey: _config.AUTH_MESSAGES.TOKEN_TOO_LARGE,
|
|
82
|
-
messageVariables: {
|
|
83
|
-
size: estimatedBytes
|
|
84
|
-
}
|
|
85
|
-
});
|
|
86
|
-
}
|
|
87
|
-
res.cookie(this.cookieName, tokenValue, {
|
|
88
|
-
httpOnly: true,
|
|
89
|
-
path: '/',
|
|
90
|
-
maxAge: this.maxAgeMs,
|
|
91
|
-
...(0, _utils.buildCookieOptions)(req)
|
|
92
|
-
});
|
|
93
|
-
}
|
|
94
|
-
constructor(authConfig){
|
|
95
|
-
_define_property(this, "authConfig", void 0);
|
|
96
|
-
this.authConfig = authConfig;
|
|
97
|
-
}
|
|
98
|
-
};
|
|
99
|
-
SetToken = _ts_decorate([
|
|
100
|
-
(0, _common.Injectable)(),
|
|
101
|
-
_ts_param(0, (0, _common.Optional)()),
|
|
102
|
-
_ts_param(0, (0, _common.Inject)(_authconfigservice.AuthConfigService)),
|
|
103
|
-
_ts_metadata("design:type", Function),
|
|
104
|
-
_ts_metadata("design:paramtypes", [
|
|
105
|
-
typeof _authconfigservice.AuthConfigService === "undefined" ? Object : _authconfigservice.AuthConfigService
|
|
106
|
-
])
|
|
107
|
-
], SetToken);
|
|
@@ -1,165 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", {
|
|
3
|
-
value: true
|
|
4
|
-
});
|
|
5
|
-
const _common = require("@nestjs/common");
|
|
6
|
-
const _rxjs = require("rxjs");
|
|
7
|
-
const _settokeninterceptor = require("./set-token.interceptor");
|
|
8
|
-
const _config = require("../config");
|
|
9
|
-
function buildContext(req, res) {
|
|
10
|
-
return {
|
|
11
|
-
switchToHttp: ()=>({
|
|
12
|
-
getRequest: ()=>req,
|
|
13
|
-
getResponse: ()=>res
|
|
14
|
-
})
|
|
15
|
-
};
|
|
16
|
-
}
|
|
17
|
-
function buildCallHandler(value) {
|
|
18
|
-
return {
|
|
19
|
-
handle: ()=>(0, _rxjs.of)(value)
|
|
20
|
-
};
|
|
21
|
-
}
|
|
22
|
-
const browserReq = {
|
|
23
|
-
headers: {
|
|
24
|
-
'user-agent': 'Mozilla/5.0 Chrome/1.0'
|
|
25
|
-
}
|
|
26
|
-
};
|
|
27
|
-
const apiReq = {
|
|
28
|
-
headers: {
|
|
29
|
-
'user-agent': 'PostmanRuntime/7.0'
|
|
30
|
-
}
|
|
31
|
-
};
|
|
32
|
-
describe('SetToken', ()=>{
|
|
33
|
-
let mockAuthConfig;
|
|
34
|
-
beforeEach(()=>{
|
|
35
|
-
mockAuthConfig = {
|
|
36
|
-
getRefreshTokenCookieName: jest.fn().mockReturnValue('custom_refresh_token'),
|
|
37
|
-
getRefreshTokenExpiration: jest.fn().mockReturnValue('7d')
|
|
38
|
-
};
|
|
39
|
-
});
|
|
40
|
-
it('sets a refresh token cookie and strips refreshToken from data for browser requests', (done)=>{
|
|
41
|
-
const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
|
|
42
|
-
const cookie = jest.fn();
|
|
43
|
-
const res = {
|
|
44
|
-
cookie
|
|
45
|
-
};
|
|
46
|
-
const payload = {
|
|
47
|
-
success: true,
|
|
48
|
-
data: {
|
|
49
|
-
accessToken: 'access-1',
|
|
50
|
-
refreshToken: 'refresh-1',
|
|
51
|
-
user: {
|
|
52
|
-
id: 'u1'
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
};
|
|
56
|
-
interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe((result)=>{
|
|
57
|
-
expect(cookie).toHaveBeenCalledWith('custom_refresh_token', 'refresh-1', expect.objectContaining({
|
|
58
|
-
httpOnly: true,
|
|
59
|
-
path: '/'
|
|
60
|
-
}));
|
|
61
|
-
expect(result).toEqual({
|
|
62
|
-
success: true,
|
|
63
|
-
data: {
|
|
64
|
-
accessToken: 'access-1',
|
|
65
|
-
user: {
|
|
66
|
-
id: 'u1'
|
|
67
|
-
}
|
|
68
|
-
}
|
|
69
|
-
});
|
|
70
|
-
expect(result.data.refreshToken).toBeUndefined();
|
|
71
|
-
done();
|
|
72
|
-
});
|
|
73
|
-
});
|
|
74
|
-
it('does not set a cookie or modify data for non-browser (API) requests', (done)=>{
|
|
75
|
-
const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
|
|
76
|
-
const cookie = jest.fn();
|
|
77
|
-
const res = {
|
|
78
|
-
cookie
|
|
79
|
-
};
|
|
80
|
-
const payload = {
|
|
81
|
-
success: true,
|
|
82
|
-
data: {
|
|
83
|
-
accessToken: 'access-1',
|
|
84
|
-
refreshToken: 'refresh-1'
|
|
85
|
-
}
|
|
86
|
-
};
|
|
87
|
-
interceptor.intercept(buildContext(apiReq, res), buildCallHandler(payload)).subscribe((result)=>{
|
|
88
|
-
expect(cookie).not.toHaveBeenCalled();
|
|
89
|
-
expect(result).toBe(payload);
|
|
90
|
-
done();
|
|
91
|
-
});
|
|
92
|
-
});
|
|
93
|
-
it('passes through non-object values unchanged', (done)=>{
|
|
94
|
-
const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
|
|
95
|
-
const res = {
|
|
96
|
-
cookie: jest.fn()
|
|
97
|
-
};
|
|
98
|
-
interceptor.intercept(buildContext(browserReq, res), buildCallHandler('plain-string')).subscribe((result)=>{
|
|
99
|
-
expect(result).toBe('plain-string');
|
|
100
|
-
done();
|
|
101
|
-
});
|
|
102
|
-
});
|
|
103
|
-
it('passes through null values unchanged', (done)=>{
|
|
104
|
-
const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
|
|
105
|
-
const res = {
|
|
106
|
-
cookie: jest.fn()
|
|
107
|
-
};
|
|
108
|
-
interceptor.intercept(buildContext(browserReq, res), buildCallHandler(null)).subscribe((result)=>{
|
|
109
|
-
expect(result).toBeNull();
|
|
110
|
-
done();
|
|
111
|
-
});
|
|
112
|
-
});
|
|
113
|
-
it('passes through values without a refreshToken in data unchanged', (done)=>{
|
|
114
|
-
const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
|
|
115
|
-
const cookie = jest.fn();
|
|
116
|
-
const res = {
|
|
117
|
-
cookie
|
|
118
|
-
};
|
|
119
|
-
const payload = {
|
|
120
|
-
success: true,
|
|
121
|
-
data: {
|
|
122
|
-
accessToken: 'access-1'
|
|
123
|
-
}
|
|
124
|
-
};
|
|
125
|
-
interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe((result)=>{
|
|
126
|
-
expect(cookie).not.toHaveBeenCalled();
|
|
127
|
-
expect(result).toBe(payload);
|
|
128
|
-
done();
|
|
129
|
-
});
|
|
130
|
-
});
|
|
131
|
-
it('falls back to the default cookie name when authConfig is unavailable', (done)=>{
|
|
132
|
-
const interceptor = new _settokeninterceptor.SetToken(undefined);
|
|
133
|
-
const cookie = jest.fn();
|
|
134
|
-
const res = {
|
|
135
|
-
cookie
|
|
136
|
-
};
|
|
137
|
-
const payload = {
|
|
138
|
-
data: {
|
|
139
|
-
refreshToken: 'refresh-1'
|
|
140
|
-
}
|
|
141
|
-
};
|
|
142
|
-
interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe(()=>{
|
|
143
|
-
expect(cookie).toHaveBeenCalledWith(_config.DEFAULT_COOKIE_NAME, 'refresh-1', expect.anything());
|
|
144
|
-
done();
|
|
145
|
-
});
|
|
146
|
-
});
|
|
147
|
-
it('throws PayloadTooLargeException when the refresh token exceeds the max cookie size', (done)=>{
|
|
148
|
-
const interceptor = new _settokeninterceptor.SetToken(mockAuthConfig);
|
|
149
|
-
const res = {
|
|
150
|
-
cookie: jest.fn()
|
|
151
|
-
};
|
|
152
|
-
const oversizedToken = 'a'.repeat(4000);
|
|
153
|
-
const payload = {
|
|
154
|
-
data: {
|
|
155
|
-
refreshToken: oversizedToken
|
|
156
|
-
}
|
|
157
|
-
};
|
|
158
|
-
interceptor.intercept(buildContext(browserReq, res), buildCallHandler(payload)).subscribe({
|
|
159
|
-
error: (err)=>{
|
|
160
|
-
expect(err).toBeInstanceOf(_common.PayloadTooLargeException);
|
|
161
|
-
done();
|
|
162
|
-
}
|
|
163
|
-
});
|
|
164
|
-
});
|
|
165
|
-
});
|
|
@@ -1,45 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Auth Email Provider Interface
|
|
3
|
-
*
|
|
4
|
-
* This interface defines the contract for email sending in the auth module.
|
|
5
|
-
* It allows auth to work independently of the email module.
|
|
6
|
-
*
|
|
7
|
-
* To use email features in auth:
|
|
8
|
-
* 1. Provide AUTH_EMAIL_PROVIDER in your app module
|
|
9
|
-
* 2. Implement IAuthEmailProvider using EmailSendService from nestjs-email
|
|
10
|
-
*
|
|
11
|
-
* @example
|
|
12
|
-
* ```typescript
|
|
13
|
-
* // In app.module.ts or a provider file
|
|
14
|
-
* {
|
|
15
|
-
* provide: AUTH_EMAIL_PROVIDER,
|
|
16
|
-
* useFactory: (emailSendService: EmailSendService) => ({
|
|
17
|
-
* sendPasswordResetEmail: async (email, token, resetUrl) => {
|
|
18
|
-
* await emailSendService.sendTemplateEmail({
|
|
19
|
-
* templateSlug: 'password-reset',
|
|
20
|
-
* to: email,
|
|
21
|
-
* variables: { resetUrl, token },
|
|
22
|
-
* });
|
|
23
|
-
* },
|
|
24
|
-
* sendVerificationEmail: async (email, token, verifyUrl) => {
|
|
25
|
-
* await emailSendService.sendTemplateEmail({
|
|
26
|
-
* templateSlug: 'email-verification',
|
|
27
|
-
* to: email,
|
|
28
|
-
* variables: { verifyUrl, token },
|
|
29
|
-
* });
|
|
30
|
-
* },
|
|
31
|
-
* }),
|
|
32
|
-
* inject: [EmailSendService],
|
|
33
|
-
* }
|
|
34
|
-
* ```
|
|
35
|
-
*/ "use strict";
|
|
36
|
-
Object.defineProperty(exports, "__esModule", {
|
|
37
|
-
value: true
|
|
38
|
-
});
|
|
39
|
-
Object.defineProperty(exports, "AUTH_EMAIL_PROVIDER", {
|
|
40
|
-
enumerable: true,
|
|
41
|
-
get: function() {
|
|
42
|
-
return AUTH_EMAIL_PROVIDER;
|
|
43
|
-
}
|
|
44
|
-
});
|
|
45
|
-
const AUTH_EMAIL_PROVIDER = 'AUTH_EMAIL_PROVIDER';
|
package/cjs/interfaces/index.js
DELETED
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", {
|
|
3
|
-
value: true
|
|
4
|
-
});
|
|
5
|
-
_export_star(require("./authentication.interface"), exports);
|
|
6
|
-
_export_star(require("./auth-email-provider.interface"), exports);
|
|
7
|
-
_export_star(require("./company-branch.interface"), exports);
|
|
8
|
-
_export_star(require("./company.interface"), exports);
|
|
9
|
-
_export_star(require("./social-auth.interface"), exports);
|
|
10
|
-
_export_star(require("./user.interface"), exports);
|
|
11
|
-
_export_star(require("./user-enricher.interface"), exports);
|
|
12
|
-
_export_star(require("./auth-module-options.interface"), exports);
|
|
13
|
-
function _export_star(from, to) {
|
|
14
|
-
Object.keys(from).forEach(function(k) {
|
|
15
|
-
if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
|
|
16
|
-
Object.defineProperty(to, k, {
|
|
17
|
-
enumerable: true,
|
|
18
|
-
get: function() {
|
|
19
|
-
return from[k];
|
|
20
|
-
}
|
|
21
|
-
});
|
|
22
|
-
}
|
|
23
|
-
});
|
|
24
|
-
return from;
|
|
25
|
-
}
|