@flusys/nestjs-auth 9.1.0-rc.1 → 9.1.1

package/fesm/370.js

@@ -32,6 +32,7 @@ function _ts_metadata(metadataKey, metadataValue) {
 class LoginDto {
     email;
     password;
+    rememberMe;
 }
 _ts_decorate([
     (0,_nestjs_swagger__rspack_import_0.ApiProperty)({
@@ -52,6 +53,15 @@ _ts_decorate([
     (0,class_validator__rspack_import_1.MaxLength)(128),
     _ts_metadata("design:type", String)
 ], LoginDto.prototype, "password", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_0.ApiPropertyOptional)({
+        default: true,
+        description: 'false: the refresh cookie is a session cookie, dropped when the browser closes'
+    }),
+    (0,class_validator__rspack_import_1.IsOptional)(),
+    (0,class_validator__rspack_import_1.IsBoolean)(),
+    _ts_metadata("design:type", Boolean)
+], LoginDto.prototype, "rememberMe", void 0);
 class RegistrationDto {
     name;
     email;
@@ -206,6 +216,7 @@ class SelectDto {
     sessionId;
     companyId;
     branchId;
+    rememberMe;
 }
 _ts_decorate([
     (0,_nestjs_swagger__rspack_import_0.ApiProperty)({
@@ -234,6 +245,15 @@ _ts_decorate([
     (0,class_validator__rspack_import_1.IsNotEmpty)(),
     _ts_metadata("design:type", String)
 ], SelectDto.prototype, "branchId", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_0.ApiPropertyOptional)({
+        default: true,
+        description: 'false: the refresh cookie is a session cookie, dropped when the browser closes'
+    }),
+    (0,class_validator__rspack_import_1.IsOptional)(),
+    (0,class_validator__rspack_import_1.IsBoolean)(),
+    _ts_metadata("design:type", Boolean)
+], SelectDto.prototype, "rememberMe", void 0);
 class SwitchCompanyDto {
     companyId;
     branchId;
@@ -357,6 +377,9 @@ class BranchSelectionInfoDto {
     name;
     slug;
     logoId;
+    parentId;
+    serial;
+    displayParentId;
 }
 _ts_decorate([
     (0,_nestjs_swagger__rspack_import_0.ApiProperty)({
@@ -384,6 +407,33 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Object)
 ], BranchSelectionInfoDto.prototype, "logoId", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_0.ApiPropertyOptional)({
+        description: 'Parent branch ID (null for a root branch)',
+        example: null,
+        nullable: true,
+        type: String
+    }),
+    _ts_metadata("design:type", Object)
+], BranchSelectionInfoDto.prototype, "parentId", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_0.ApiPropertyOptional)({
+        description: 'Sort order among sibling branches',
+        example: 1,
+        nullable: true,
+        type: Number
+    }),
+    _ts_metadata("design:type", Object)
+], BranchSelectionInfoDto.prototype, "serial", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_0.ApiPropertyOptional)({
+        description: 'Tree parent within this list: the nearest ancestor that is also listed (granted), null when none is - ungranted branches in between are skipped',
+        example: '550e8400-e29b-41d4-a716-446655440003',
+        nullable: true,
+        type: String
+    }),
+    _ts_metadata("design:type", Object)
+], BranchSelectionInfoDto.prototype, "displayParentId", void 0);
 class CompanyWithBranchesDto {
     id;
     name;

package/fesm/config/index.js

@@ -189,7 +189,9 @@ const COMPANY_MESSAGES = {
     READONLY_DELETE_FORBIDDEN: 'company.readonly.delete.forbidden'
 };
 const BRANCH_MESSAGES = {
-    READONLY_DELETE_FORBIDDEN: 'branch.readonly.delete.forbidden'
+    READONLY_DELETE_FORBIDDEN: 'branch.readonly.delete.forbidden',
+    INVALID_PARENT: 'branch.invalid.parent',
+    CIRCULAR_PARENT: 'branch.circular.parent'
 };
 const USER_PERMISSION_MESSAGES = {
     COMPANY_LIST_SUCCESS: 'user.permission.company.list.success',

package/fesm/docs/index.js

@@ -92,7 +92,10 @@ const COMPANY_SCHEMA_EXCLUSIONS = [
             'id',
             'name',
             'slug',
-            'logoId'
+            'logoId',
+            'parentId',
+            'serial',
+            'displayParentId'
         ]
     },
     {
@@ -242,7 +245,10 @@ const COMPANY_SCHEMA_EXCLUSIONS = [
             'branchId',
             'branchName',
             'branchSlug',
-            'companyId'
+            'companyId',
+            'parentId',
+            'serial',
+            'displayParentId'
         ]
     },
     {

package/fesm/helpers/index.js

@@ -1,7 +1,109 @@
+import * as __rspack_external__flusys_nestjs_shared_utils_9125c1f1 from "@flusys/nestjs-shared/utils";
+import * as __rspack_external_class_validator_7b99ef4d from "class-validator";
+import * as __rspack_external_typeorm from "typeorm";
 export const __rspack_esm_id = 468;
 export const __rspack_esm_ids = [468];
 export const __webpack_modules__ = {
-2295(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+5588(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+// Injection Tokens
+const AUTH_MODULE_OPTIONS = 'AUTH_MODULE_OPTIONS';
+const USER_ENRICHER = 'USER_ENRICHER';
+// Security
+const BCRYPT_SALT_ROUNDS = 12;
+// Cookie
+const DEFAULT_COOKIE_NAME = 'fsn_refresh_token';
+const MAX_COOKIE_BYTES = 3500;
+// Cache Key Prefixes
+const SESSION_CACHE_PREFIX = 'auth:session';
+const TOKEN_REVOKED_PREFIX = 'auth:revoked';
+const SOCIAL_STATE_PREFIX = 'auth:social:state';
+// Social Login
+const SOCIAL_STATE_TTL_MS = 10 * 60 * 1000; // 10 minutes
+
+__webpack_require__.d(__webpack_exports__, {
+}, {
+  EV: TOKEN_REVOKED_PREFIX,
+  PR: SOCIAL_STATE_PREFIX,
+  Vl: SESSION_CACHE_PREFIX,
+  jt: USER_ENRICHER,
+  rv: DEFAULT_COOKIE_NAME,
+  xe: AUTH_MODULE_OPTIONS
+});
+
+
+},
+7526(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _flusys_nestjs_shared_utils__rspack_import_0 = __webpack_require__(9216);
+/* import */ var class_validator__rspack_import_1 = __webpack_require__(5421);
+/* import */ var typeorm__rspack_import_2 = __webpack_require__(7158);
+
+
+
+/** Every branch of the companies the given branches belong to - a parent never leaves its company. */ async function loadCompanyBranchNodes(repo, branchIds, withDeleted = false) {
+    if (!branchIds.length) return [];
+    const seeds = await repo.find({
+        where: {
+            id: (0,typeorm__rspack_import_2.In)([
+                ...branchIds
+            ])
+        },
+        select: [
+            'id',
+            'companyId'
+        ],
+        withDeleted
+    });
+    const companyIds = [
+        ...new Set(seeds.map((b)=>b.companyId))
+    ];
+    if (!companyIds.length) return [];
+    return repo.find({
+        where: {
+            companyId: (0,typeorm__rspack_import_2.In)(companyIds)
+        },
+        select: [
+            'id',
+            'parentId'
+        ],
+        withDeleted
+    });
+}
+/**
+ * For each listed branch, its nearest ancestor that is listed too, or null when none is - the tree parent
+ * inside a list of granted branches. The branches in between are skipped and never sent to the client.
+ */ async function loadDisplayParentIds(repo, branchIds) {
+    const ids = (0,_flusys_nestjs_shared_utils__rspack_import_0.normalizeBranchIds)(branchIds).filter((id)=>(0,class_validator__rspack_import_1.isUUID)(id));
+    const listed = new Set(ids);
+    const nodes = await loadCompanyBranchNodes(repo, ids);
+    return new Map(ids.map((id)=>[
+            id,
+            (0,_flusys_nestjs_shared_utils__rspack_import_0.collectBranchAncestorIds)(nodes, id).find((a)=>listed.has(a)) ?? null
+        ]));
+}
+
+__webpack_require__.d(__webpack_exports__, {
+  v: () => (loadCompanyBranchNodes),
+  x: () => (loadDisplayParentIds)
+});
+
+
+},
+334(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  Vg: () => (/* reexport */ generateAccessToken),
+  e: () => (/* reexport */ generateTokens),
+  vR: () => (/* reexport */ branch_ancestry_helper/* .loadCompanyBranchNodes */.v),
+  xu: () => (/* reexport */ branch_ancestry_helper/* .loadDisplayParentIds */.x),
+  om: () => (/* reexport */ parseExpiryToMs),
+  XP: () => (/* reexport */ revokeUserSessions),
+  QH: () => (/* reexport */ toBranchInfo),
+  $C: () => (/* reexport */ toCompanyInfo),
+  FV: () => (/* reexport */ toUserInfo)
+});
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/helpers/auth-response.mapper.ts
 function toUserInfo(user) {
     return {
         id: user.id,
@@ -28,32 +130,12 @@ function toBranchInfo(branch) {
     };
 }
 
-__webpack_require__.d(__webpack_exports__, {
-  $C: () => (toCompanyInfo),
-  FV: () => (toUserInfo),
-  QH: () => (toBranchInfo)
-});
-
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/helpers/branch-ancestry.helper.ts
+var branch_ancestry_helper = __webpack_require__(7526);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/auth.constants.ts
+var auth_constants = __webpack_require__(5588);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/helpers/token.helper.ts
 
-},
-892(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _auth_response_mapper_js__rspack_import_0 = __webpack_require__(2295);
-/* import */ var _token_helper_js__rspack_import_1 = __webpack_require__(1379);
-
-
-
-__webpack_require__.d(__webpack_exports__, {
-  $C: () => (/* reexport safe */ _auth_response_mapper_js__rspack_import_0.$C),
-  FV: () => (/* reexport safe */ _auth_response_mapper_js__rspack_import_0.FV),
-  QH: () => (/* reexport safe */ _auth_response_mapper_js__rspack_import_0.QH),
-  Vg: () => (/* reexport safe */ _token_helper_js__rspack_import_1.Vg),
-  e: () => (/* reexport safe */ _token_helper_js__rspack_import_1.e),
-  om: () => (/* reexport safe */ _token_helper_js__rspack_import_1.om)
-});
-
-
-},
-1379(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 function generateAccessToken(jwtService, authConfig, payload) {
     return jwtService.sign({
         ...payload,
@@ -97,12 +179,33 @@ function parseExpiryToMs(expiry) {
             return 7 * 24 * 60 * 60 * 1000;
     }
 }
+/** Rejects every token the user holds that was issued before now: checked on refresh and, by JwtStrategy, on every request. */ async function revokeUserSessions(cache, authConfig, userId) {
+    const revokedAt = Math.floor(Date.now() / 1000);
+    await cache.set(`${auth_constants/* .TOKEN_REVOKED_PREFIX */.EV}:${userId}`, revokedAt, parseExpiryToMs(authConfig.getRefreshTokenExpiration()));
+}
 
-__webpack_require__.d(__webpack_exports__, {
-  Vg: () => (generateAccessToken),
-  e: () => (generateTokens),
-  om: () => (parseExpiryToMs)
-});
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/helpers/index.ts
+
+
+
+
+
+},
+9216(module) {
+
+module.exports = __rspack_external__flusys_nestjs_shared_utils_9125c1f1;
+
+
+},
+5421(module) {
+
+module.exports = __rspack_external_class_validator_7b99ef4d;
+
+
+},
+7158(module) {
+
+module.exports = __rspack_external_typeorm;
 
 
 },
@@ -112,10 +215,13 @@ import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
 import * as __rspack_chunk_1 from './index.js';
 __webpack_require__.C(__rspack_chunk_1);
-var __webpack_exports__ = __webpack_exec__(892);var __webpack_exports__generateAccessToken = __webpack_exports__.Vg;
+var __webpack_exports__ = __webpack_exec__(334);var __webpack_exports__generateAccessToken = __webpack_exports__.Vg;
 var __webpack_exports__generateTokens = __webpack_exports__.e;
+var __webpack_exports__loadCompanyBranchNodes = __webpack_exports__.vR;
+var __webpack_exports__loadDisplayParentIds = __webpack_exports__.xu;
 var __webpack_exports__parseExpiryToMs = __webpack_exports__.om;
+var __webpack_exports__revokeUserSessions = __webpack_exports__.XP;
 var __webpack_exports__toBranchInfo = __webpack_exports__.QH;
 var __webpack_exports__toCompanyInfo = __webpack_exports__.$C;
 var __webpack_exports__toUserInfo = __webpack_exports__.FV;
-export { __webpack_exports__generateAccessToken as generateAccessToken, __webpack_exports__generateTokens as generateTokens, __webpack_exports__parseExpiryToMs as parseExpiryToMs, __webpack_exports__toBranchInfo as toBranchInfo, __webpack_exports__toCompanyInfo as toCompanyInfo, __webpack_exports__toUserInfo as toUserInfo };
+export { __webpack_exports__generateAccessToken as generateAccessToken, __webpack_exports__generateTokens as generateTokens, __webpack_exports__loadCompanyBranchNodes as loadCompanyBranchNodes, __webpack_exports__loadDisplayParentIds as loadDisplayParentIds, __webpack_exports__parseExpiryToMs as parseExpiryToMs, __webpack_exports__revokeUserSessions as revokeUserSessions, __webpack_exports__toBranchInfo as toBranchInfo, __webpack_exports__toCompanyInfo as toCompanyInfo, __webpack_exports__toUserInfo as toUserInfo };