@flusys/nestjs-auth 9.1.0 → 9.1.2

package/fesm/interceptors/index.js

@@ -126,7 +126,9 @@ const COMPANY_MESSAGES = {
     READONLY_DELETE_FORBIDDEN: 'company.readonly.delete.forbidden'
 };
 const BRANCH_MESSAGES = {
-    READONLY_DELETE_FORBIDDEN: 'branch.readonly.delete.forbidden'
+    READONLY_DELETE_FORBIDDEN: 'branch.readonly.delete.forbidden',
+    INVALID_PARENT: 'branch.invalid.parent',
+    CIRCULAR_PARENT: 'branch.circular.parent'
 };
 const USER_PERMISSION_MESSAGES = {
     COMPANY_LIST_SUCCESS: 'user.permission.company.list.success',
@@ -341,7 +343,9 @@ class SetToken {
         res.cookie(this.cookieName, tokenValue, {
             httpOnly: true,
             path: '/',
-            maxAge: this.maxAgeMs,
+            ...req.body?.rememberMe !== false && {
+                maxAge: this.maxAgeMs
+            },
             ...(0,utils_.buildCookieOptions)(req)
         });
     }

package/fesm/modules/index.js

@@ -1,533 +1,6 @@
-import { ExtractJwt, Strategy } from "passport-jwt";
-import * as __rspack_external__nestjs_passport_18907953 from "@nestjs/passport";
 export const __rspack_esm_id = 900;
 export const __rspack_esm_ids = [900];
-export const __webpack_modules__ = {
-5180(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _app_user_entity_js__rspack_import_0 = __webpack_require__(4758);
-/* import */ var _company_branch_entity_js__rspack_import_1 = __webpack_require__(1923);
-/* import */ var _company_entity_js__rspack_import_2 = __webpack_require__(8538);
-/* import */ var _pending_registration_entity_js__rspack_import_3 = __webpack_require__(9388);
-/* import */ var _social_auth_config_entity_js__rspack_import_4 = __webpack_require__(2020);
-/* import */ var _user_company_permission_entity_js__rspack_import_5 = __webpack_require__(2377);
-/* import */ var _user_token_entity_js__rspack_import_6 = __webpack_require__(9696);
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-const BaseEntities = [
-    _app_user_entity_js__rspack_import_0/* .AppUser */.$,
-    _user_token_entity_js__rspack_import_6/* .UserToken */.L,
-    _social_auth_config_entity_js__rspack_import_4/* .SocialAuthConfig */.G
-];
-const EmailEntities = [
-    _pending_registration_entity_js__rspack_import_3/* .PendingRegistration */.N
-];
-const CompanyEntities = [
-    _company_entity_js__rspack_import_2/* .Company */.C,
-    _company_branch_entity_js__rspack_import_1/* .CompanyBranch */.A,
-    _user_company_permission_entity_js__rspack_import_5/* .UserCompanyPermission */.I
-];
-function getAuthEntitiesByConfig(config) {
-    const { enableCompanyFeature = false, enableEmailVerification = true } = config;
-    const entities = [
-        ...BaseEntities
-    ];
-    if (enableEmailVerification) {
-        entities.push(...EmailEntities);
-    }
-    if (enableCompanyFeature) {
-        entities.push(...CompanyEntities);
-    }
-    return entities;
-}
-
-__webpack_require__.d(__webpack_exports__, {
-  $u: () => (/* reexport safe */ _app_user_entity_js__rspack_import_0.$),
-  At: () => (/* reexport safe */ _company_branch_entity_js__rspack_import_1.A),
-  CC: () => (/* reexport safe */ _company_entity_js__rspack_import_2.C),
-  GB: () => (/* reexport safe */ _social_auth_config_entity_js__rspack_import_4.G),
-  Iq: () => (/* reexport safe */ _user_company_permission_entity_js__rspack_import_5.I),
-  Li: () => (/* reexport safe */ _user_token_entity_js__rspack_import_6.L),
-  Ni: () => (/* reexport safe */ _pending_registration_entity_js__rspack_import_3.N),
-  eZ: () => (/* reexport safe */ _user_company_permission_entity_js__rspack_import_5.e),
-  getAuthEntitiesByConfig: () => (getAuthEntitiesByConfig),
-  ks: () => (/* reexport safe */ _user_token_entity_js__rspack_import_6.k)
-});
-
-
-},
-7579(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-
-// EXPORTS
-__webpack_require__.d(__webpack_exports__, {
-  r: () => (/* reexport */ AuthModule)
-});
-
-// EXTERNAL MODULE: external "@flusys/nestjs-shared/modules"
-var modules_ = __webpack_require__(1236);
-// EXTERNAL MODULE: external "@nestjs/common"
-var common_ = __webpack_require__(6157);
-// EXTERNAL MODULE: external "@nestjs/jwt"
-var jwt_ = __webpack_require__(2125);
-// EXTERNAL MODULE: external "@nestjs/passport"
-var passport_ = __webpack_require__(3794);
-// EXTERNAL MODULE: external "@flusys/nestjs-shared/guards"
-var guards_ = __webpack_require__(3513);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/auth.constants.ts
-var auth_constants = __webpack_require__(5588);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/controllers/index.ts + 11 modules
-var src_controllers = __webpack_require__(1003);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/entities/index.ts
-var entities = __webpack_require__(5180);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/clear-token.interceptor.ts
-var clear_token_interceptor = __webpack_require__(5207);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/set-token.interceptor.ts + 1 modules
-var set_token_interceptor = __webpack_require__(8359);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/index.ts
-var services = __webpack_require__(8811);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
-var auth_config_service = __webpack_require__(6514);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
-var auth_datasource_provider = __webpack_require__(2732);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/strategies/jwt.strategy.ts + 1 modules
-var jwt_strategy = __webpack_require__(5389);
-;// CONCATENATED MODULE: ./projects/nestjs-auth/src/modules/auth.module.ts
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
-        r = Reflect.decorate(decorators, target, key, desc);
-    } else {
-        for(var i = decorators.length - 1; i >= 0; i--){
-            if (d = decorators[i]) {
-                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-            }
-        }
-    }
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-class AuthModule {
-    static forRoot(options) {
-        const optionsProvider = {
-            provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-            useValue: options
-        };
-        return this.buildModule(options, [
-            optionsProvider,
-            ...options.providers ?? []
-        ]);
-    }
-    static forRootAsync(options) {
-        const asyncProviders = this.createAsyncProviders(options);
-        return this.buildModule(options, [
-            ...asyncProviders,
-            ...options.providers ?? []
-        ], options.imports);
-    }
-    static buildModule(options, providers, externalImports = []) {
-        const { global = false, includeController = true, bootstrapAppConfig } = options;
-        const featureFlags = this.getFeatureFlags(bootstrapAppConfig);
-        return {
-            module: AuthModule,
-            global,
-            imports: [
-                ...externalImports,
-                ...this.buildImports()
-            ],
-            controllers: this.buildControllers(includeController, featureFlags),
-            providers: [
-                ...providers,
-                ...this.buildProviders(featureFlags)
-            ],
-            exports: this.buildExports(featureFlags)
-        };
-    }
-    static getFeatureFlags(bootstrapAppConfig) {
-        return {
-            enableCompanyFeature: bootstrapAppConfig?.enableCompanyFeature ?? false,
-            enableEmailVerification: bootstrapAppConfig?.enableEmailVerification ?? true
-        };
-    }
-    static buildImports() {
-        return [
-            passport_.PassportModule.register({
-                defaultStrategy: 'jwt'
-            }),
-            jwt_.JwtModule.register({}),
-            modules_.CacheModule,
-            modules_.UtilsModule
-        ];
-    }
-    static buildControllers(includeController, flags) {
-        if (!includeController) return [];
-        const controllers = [
-            src_controllers/* .AuthenticationController */.$3,
-            src_controllers/* .SocialAuthController */.eA,
-            src_controllers/* .SocialAuthConfigController */.O3,
-            src_controllers/* .UserController */.SZ
-        ];
-        if (flags.enableEmailVerification) {
-            controllers.push(src_controllers/* .EmailVerificationController */.Q1);
-        }
-        if (flags.enableCompanyFeature) {
-            controllers.push(src_controllers/* .CompanySelectionController */.Qg, src_controllers/* .CompanyController */.wD, src_controllers/* .BranchController */.zF, src_controllers/* .UserPermissionController */.rl);
-        }
-        return controllers;
-    }
-    static buildProviders(flags) {
-        const providers = [
-            auth_config_service/* .AuthConfigService */.W,
-            auth_datasource_provider/* .AuthDataSourceProvider */.v,
-            jwt_strategy/* .JwtStrategy */.P,
-            guards_.JwtAuthGuard,
-            services/* .AuthenticationService */.kX,
-            services/* .SocialAuthService */.Jn,
-            services/* .SocialAuthConfigService */.t_,
-            set_token_interceptor/* .SetToken */.A,
-            clear_token_interceptor/* .ClearToken */.t,
-            services/* .UserService */.DL,
-            (0,modules_.createModuleEventsProvider)('auth', auth_constants/* .AUTH_MODULE_OPTIONS */.xe)
-        ];
-        if (flags.enableEmailVerification) {
-            providers.push(services/* .AuthEmailService */.Gw);
-        }
-        if (flags.enableCompanyFeature) {
-            providers.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE);
-        }
-        return providers;
-    }
-    static buildExports(flags) {
-        const exports = [
-            passport_.PassportModule,
-            auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-            auth_config_service/* .AuthConfigService */.W,
-            auth_datasource_provider/* .AuthDataSourceProvider */.v,
-            jwt_strategy/* .JwtStrategy */.P,
-            guards_.JwtAuthGuard,
-            services/* .AuthenticationService */.kX,
-            services/* .SocialAuthService */.Jn,
-            services/* .SocialAuthConfigService */.t_,
-            services/* .UserService */.DL
-        ];
-        if (flags.enableEmailVerification) {
-            exports.push(services/* .AuthEmailService */.Gw);
-        }
-        if (flags.enableCompanyFeature) {
-            exports.push(services/* .CompanySelectionSessionService */.vB, services/* .CompanyService */.Bl, services/* .BranchService */.O_, services/* .UserPermissionService */.OE);
-        }
-        return exports;
-    }
-    static createAsyncProviders(options) {
-        const staticOptions = {
-            global: options.global,
-            includeController: options.includeController,
-            bootstrapAppConfig: options.bootstrapAppConfig
-        };
-        if (options.useFactory) {
-            return [
-                {
-                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-                    useFactory: async (...args)=>({
-                            ...staticOptions,
-                            config: await options.useFactory(...args)
-                        }),
-                    inject: options.inject || []
-                }
-            ];
-        }
-        if (options.useClass) {
-            return [
-                {
-                    provide: options.useClass,
-                    useClass: options.useClass
-                },
-                {
-                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-                    useFactory: async (factory)=>({
-                            ...staticOptions,
-                            config: await factory.createAuthOptions()
-                        }),
-                    inject: [
-                        options.useClass
-                    ]
-                }
-            ];
-        }
-        if (options.useExisting) {
-            return [
-                {
-                    provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-                    useFactory: async (factory)=>({
-                            ...staticOptions,
-                            config: await factory.createAuthOptions()
-                        }),
-                    inject: [
-                        options.useExisting
-                    ]
-                }
-            ];
-        }
-        return [
-            {
-                provide: auth_constants/* .AUTH_MODULE_OPTIONS */.xe,
-                useValue: staticOptions
-            }
-        ];
-    }
-    static getEntities(config) {
-        return (0,entities.getAuthEntitiesByConfig)({
-            enableCompanyFeature: config.enableCompanyFeature ?? false,
-            enableEmailVerification: config.enableEmailVerification ?? true
-        });
-    }
-}
-AuthModule = _ts_decorate([
-    (0,common_.Module)({})
-], AuthModule);
-
-;// CONCATENATED MODULE: ./projects/nestjs-auth/src/modules/index.ts
-
-
-
-},
-8811(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _authentication_service_js__rspack_import_0 = __webpack_require__(4722);
-/* import */ var _auth_email_service_js__rspack_import_1 = __webpack_require__(3221);
-/* import */ var _company_selection_session_service_js__rspack_import_2 = __webpack_require__(5811);
-/* import */ var _social_auth_service_js__rspack_import_3 = __webpack_require__(2786);
-/* import */ var _social_auth_config_service_js__rspack_import_4 = __webpack_require__(8275);
-/* import */ var _user_service_js__rspack_import_5 = __webpack_require__(7229);
-/* import */ var _company_service_js__rspack_import_6 = __webpack_require__(9201);
-/* import */ var _branch_service_js__rspack_import_7 = __webpack_require__(5402);
-/* import */ var _user_permission_service_js__rspack_import_8 = __webpack_require__(5291);
-/* import */ var _auth_config_service_js__rspack_import_9 = __webpack_require__(6514);
-/* import */ var _auth_datasource_provider_js__rspack_import_10 = __webpack_require__(2732);
-
-
-
-
-
-
-
-
-
-
-
-
-__webpack_require__.d(__webpack_exports__, {
-  Bl: () => (/* reexport safe */ _company_service_js__rspack_import_6.B),
-  DL: () => (/* reexport safe */ _user_service_js__rspack_import_5.D),
-  Gw: () => (/* reexport safe */ _auth_email_service_js__rspack_import_1.G),
-  Jn: () => (/* reexport safe */ _social_auth_service_js__rspack_import_3.J),
-  OE: () => (/* reexport safe */ _user_permission_service_js__rspack_import_8.O),
-  O_: () => (/* reexport safe */ _branch_service_js__rspack_import_7.O),
-  WE: () => (/* reexport safe */ _auth_config_service_js__rspack_import_9.W),
-  kX: () => (/* reexport safe */ _authentication_service_js__rspack_import_0.k),
-  t_: () => (/* reexport safe */ _social_auth_config_service_js__rspack_import_4.t),
-  vB: () => (/* reexport safe */ _company_selection_session_service_js__rspack_import_2.v),
-  vS: () => (/* reexport safe */ _auth_datasource_provider_js__rspack_import_10.v)
-});
-
-
-},
-5389(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-
-// EXPORTS
-__webpack_require__.d(__webpack_exports__, {
-  P: () => (/* binding */ JwtStrategy)
-});
-
-// EXTERNAL MODULE: external "@flusys/nestjs-shared/constants"
-var constants_ = __webpack_require__(9140);
-// EXTERNAL MODULE: external "@nestjs/common"
-var common_ = __webpack_require__(6157);
-// EXTERNAL MODULE: external "@nestjs/core"
-var core_ = __webpack_require__(3075);
-// EXTERNAL MODULE: external "@nestjs/passport"
-var passport_ = __webpack_require__(3794);
-;// CONCATENATED MODULE: external "passport-jwt"
-
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/message-keys.ts
-var message_keys = __webpack_require__(5363);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/entities/app-user.entity.ts
-var app_user_entity = __webpack_require__(4758);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
-var auth_config_service = __webpack_require__(6514);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
-var auth_datasource_provider = __webpack_require__(2732);
-// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/authentication.service.ts + 1 modules
-var authentication_service = __webpack_require__(4722);
-;// CONCATENATED MODULE: ./projects/nestjs-auth/src/strategies/jwt.strategy.ts
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
-        r = Reflect.decorate(decorators, target, key, desc);
-    } else {
-        for(var i = decorators.length - 1; i >= 0; i--){
-            if (d = decorators[i]) {
-                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-            }
-        }
-    }
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(metadataKey, metadataValue) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
-        return Reflect.metadata(metadataKey, metadataValue);
-    }
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-
-
-
-
-
-
-
-
-
-
-function hasCompanyContext(payload) {
-    return 'companyId' in payload && payload.companyId != null;
-}
-class JwtStrategy extends (0,passport_.PassportStrategy)(Strategy, 'jwt') {
-    authConfig;
-    moduleRef;
-    constructor(authConfig, moduleRef){
-        super({
-            jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
-            ignoreExpiration: false,
-            secretOrKeyProvider: (_req, _token, done)=>{
-                done(null, this.authConfig.getJwtSecret());
-            },
-            passReqToCallback: true
-        }), this.authConfig = authConfig, this.moduleRef = moduleRef;
-    }
-    async validate(_req, payload) {
-        const userRepo = await this.resolveUserRepository();
-        await this.checkTokenRevocation(payload);
-        const user = await userRepo.findOne({
-            where: {
-                id: payload.id,
-                isActive: true
-            }
-        });
-        if (!user) {
-            throw new common_.UnauthorizedException({
-                message: 'User not found or inactive',
-                messageKey: message_keys/* .USER_MESSAGES.NOT_FOUND */.ny.NOT_FOUND
-            });
-        }
-        return this.buildUserInfo(payload);
-    }
-    async resolveUserRepository() {
-        try {
-            const provider = await this.moduleRef.resolve(auth_datasource_provider/* .AuthDataSourceProvider */.v, undefined, {
-                strict: false
-            });
-            if (provider) {
-                return provider.getRepository(app_user_entity/* .AppUser */.$);
-            }
-        } catch  {
-            throw new common_.UnauthorizedException({
-                message: 'Unable to access user data',
-                messageKey: constants_.SYSTEM_MESSAGES.SERVICE_NOT_AVAILABLE,
-                messageVariables: {
-                    provider: 'DataSourceProvider',
-                    available: ''
-                }
-            });
-        }
-        throw new common_.UnauthorizedException({
-            message: 'User repository not available',
-            messageKey: constants_.SYSTEM_MESSAGES.REPOSITORY_NOT_AVAILABLE,
-            messageVariables: {
-                entity: 'User'
-            }
-        });
-    }
-    async checkTokenRevocation(payload) {
-        if (!payload.iat) return;
-        try {
-            const authService = await this.moduleRef.resolve(authentication_service/* .AuthenticationService */.k, undefined, {
-                strict: false
-            });
-            if (authService && await authService.isTokenRevoked(payload.id, payload.iat)) {
-                throw new common_.UnauthorizedException({
-                    message: 'Token has been revoked',
-                    messageKey: message_keys/* .AUTH_MESSAGES.TOKEN_REVOKED */.mK.TOKEN_REVOKED
-                });
-            }
-        } catch (err) {
-            if (err instanceof common_.UnauthorizedException) throw err;
-        }
-    }
-    buildUserInfo(payload) {
-        const base = {
-            id: payload.id,
-            email: payload.email
-        };
-        if (!hasCompanyContext(payload)) {
-            return base;
-        }
-        return {
-            ...base,
-            companyId: payload.companyId,
-            ...payload.branchId && {
-                branchId: payload.branchId
-            }
-        };
-    }
-}
-JwtStrategy = _ts_decorate([
-    (0,common_.Injectable)(),
-    _ts_param(0, (0,common_.Inject)(auth_config_service/* .AuthConfigService */.W)),
-    _ts_param(1, (0,common_.Inject)(core_.ModuleRef)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof auth_config_service/* .AuthConfigService */.W === "undefined" ? Object : auth_config_service/* .AuthConfigService */.W,
-        typeof core_.ModuleRef === "undefined" ? Object : core_.ModuleRef
-    ])
-], JwtStrategy);
-
-
-},
-3794(module) {
-
-module.exports = __rspack_external__nestjs_passport_18907953;
-
-
-},
-
-};
+export const __webpack_modules__ = {};
 import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
 import * as __rspack_chunk_1 from '../370.js';
@@ -540,7 +13,9 @@ import * as __rspack_chunk_4 from '../118.js';
 __webpack_require__.C(__rspack_chunk_4);
 import * as __rspack_chunk_5 from '../120.js';
 __webpack_require__.C(__rspack_chunk_5);
-import * as __rspack_chunk_6 from './index.js';
+import * as __rspack_chunk_6 from '../360.js';
 __webpack_require__.C(__rspack_chunk_6);
+import * as __rspack_chunk_7 from './index.js';
+__webpack_require__.C(__rspack_chunk_7);
 var __webpack_exports__ = __webpack_exec__(7579);var __webpack_exports__AuthModule = __webpack_exports__.r;
 export { __webpack_exports__AuthModule as AuthModule };