@lenne.tech/nest-server 11.13.5 → 11.14.1

package/src/core/modules/tus/README.md

@@ -12,12 +12,12 @@ Integration of the [tus.io](https://tus.io) resumable upload protocol with @lenn
 TusModule.forRoot({
   config: {
     maxSize: 100 * 1024 * 1024, // 100 MB instead of 50 GB default
-    path: '/uploads',           // Custom path instead of /tus
+    path: '/uploads', // Custom path instead of /tus
   },
-})
+});
 
 // To disable:
-TusModule.forRoot({ config: false })
+TusModule.forRoot({ config: false });
 ```
 
 **Quick Links:** [Integration Checklist](./INTEGRATION-CHECKLIST.md) | [Endpoints](#endpoints) | [Configuration](#configuration) | [Client Usage](#client-usage)
@@ -47,14 +47,14 @@ TusModule.forRoot({ config: false })
 
 ### TUS Protocol Extensions (All Enabled by Default)
 
-| Extension | Description |
-|-----------|-------------|
-| **creation** | Create new uploads via POST |
-| **creation-with-upload** | Include data in creation request |
-| **termination** | Delete incomplete uploads |
-| **expiration** | Auto-cleanup of abandoned uploads |
-| **checksum** | Verify data integrity |
-| **concatenation** | Combine multiple uploads |
+| Extension                | Description                       |
+| ------------------------ | --------------------------------- |
+| **creation**             | Create new uploads via POST       |
+| **creation-with-upload** | Include data in creation request  |
+| **termination**          | Delete incomplete uploads         |
+| **expiration**           | Auto-cleanup of abandoned uploads |
+| **checksum**             | Verify data integrity             |
+| **concatenation**        | Combine multiple uploads          |
 
 ---
 
@@ -87,13 +87,13 @@ TUS is **enabled by default** with the following configuration:
 
 All endpoints are handled by the TUS protocol via `@tus/server`:
 
-| Method | Endpoint | Description |
-|--------|----------|-------------|
-| OPTIONS | `/tus` | Get server capabilities |
-| POST | `/tus` | Create new upload |
-| HEAD | `/tus/:id` | Get upload status/offset |
-| PATCH | `/tus/:id` | Continue upload |
-| DELETE | `/tus/:id` | Terminate upload |
+| Method  | Endpoint   | Description              |
+| ------- | ---------- | ------------------------ |
+| OPTIONS | `/tus`     | Get server capabilities  |
+| POST    | `/tus`     | Create new upload        |
+| HEAD    | `/tus/:id` | Get upload status/offset |
+| PATCH   | `/tus/:id` | Continue upload          |
+| DELETE  | `/tus/:id` | Terminate upload         |
 
 ### CORS Headers
 
@@ -115,10 +115,10 @@ The TUS server automatically handles CORS headers for browser-based clients:
 
 ```typescript
 // In server.module.ts
-TusModule.forRoot({ config: false })
+TusModule.forRoot({ config: false });
 
 // Or via environment config
-tus: false
+tus: false;
 ```
 
 ### Custom Configuration
@@ -148,29 +148,30 @@ TusModule.forRoot({
       expiresIn: '12h', // Cleanup after 12 hours
     },
   },
-})
+});
 ```
 
 ### Configuration Options
 
-| Option | Type | Default | Description |
-|--------|------|---------|-------------|
-| `enabled` | boolean | `true` | Enable/disable TUS |
-| `path` | string | `/tus` | Endpoint path |
-| `maxSize` | number | 50 GB | Maximum file size in bytes |
-| `allowedTypes` | string[] | undefined | Allowed MIME types (all if undefined) |
-| `allowedHeaders` | string[] | `[]` | Additional custom headers (TUS headers already included) |
-| `uploadDir` | string | `uploads/tus` | Temporary upload directory |
-| `creation` | boolean | `true` | Enable creation extension |
-| `creationWithUpload` | boolean | `true` | Enable creation-with-upload extension |
-| `termination` | boolean | `true` | Enable termination extension |
-| `expiration` | boolean \| object | `{ expiresIn: '24h' }` | Expiration configuration |
-| `checksum` | boolean | `true` | Enable checksum extension |
-| `concatenation` | boolean | `true` | Enable concatenation extension |
+| Option               | Type              | Default                | Description                                              |
+| -------------------- | ----------------- | ---------------------- | -------------------------------------------------------- |
+| `enabled`            | boolean           | `true`                 | Enable/disable TUS                                       |
+| `path`               | string            | `/tus`                 | Endpoint path                                            |
+| `maxSize`            | number            | 50 GB                  | Maximum file size in bytes                               |
+| `allowedTypes`       | string[]          | undefined              | Allowed MIME types (all if undefined)                    |
+| `allowedHeaders`     | string[]          | `[]`                   | Additional custom headers (TUS headers already included) |
+| `uploadDir`          | string            | `uploads/tus`          | Temporary upload directory                               |
+| `creation`           | boolean           | `true`                 | Enable creation extension                                |
+| `creationWithUpload` | boolean           | `true`                 | Enable creation-with-upload extension                    |
+| `termination`        | boolean           | `true`                 | Enable termination extension                             |
+| `expiration`         | boolean \| object | `{ expiresIn: '24h' }` | Expiration configuration                                 |
+| `checksum`           | boolean           | `true`                 | Enable checksum extension                                |
+| `concatenation`      | boolean           | `true`                 | Enable concatenation extension                           |
 
 **Note on `allowedHeaders`:**
 
 `@tus/server` already includes all TUS protocol headers by default:
+
 - Authorization, Content-Type, Location, Tus-Extension, Tus-Max-Size
 - Tus-Resumable, Tus-Version, Upload-Concat, Upload-Defer-Length
 - Upload-Length, Upload-Metadata, Upload-Offset, X-HTTP-Method-Override
@@ -281,7 +282,7 @@ Then register with custom controller:
 // server.module.ts
 TusModule.forRoot({
   controller: TusController,
-})
+});
 ```
 
 ### Custom Upload Handler
@@ -346,13 +347,13 @@ query {
 
 The following metadata is stored with each GridFS file:
 
-| Field | Source |
-|-------|--------|
-| `filename` | From TUS `Upload-Metadata` header |
-| `contentType` | From TUS `filetype` metadata |
-| `tusUploadId` | Original TUS upload ID |
-| `originalMetadata` | All TUS metadata |
-| `uploadedAt` | Completion timestamp |
+| Field              | Source                            |
+| ------------------ | --------------------------------- |
+| `filename`         | From TUS `Upload-Metadata` header |
+| `contentType`      | From TUS `filetype` metadata      |
+| `tusUploadId`      | Original TUS upload ID            |
+| `originalMetadata` | All TUS metadata                  |
+| `uploadedAt`       | Completion timestamp              |
 
 ---
 
@@ -363,6 +364,7 @@ The following metadata is stored with each GridFS file:
 **Cause:** TUS server not initialized
 
 **Solutions:**
+
 1. Check if TUS is disabled in config (`tus: false`)
 2. Verify MongoDB connection is established
 3. Check server logs for initialization errors
@@ -372,6 +374,7 @@ The following metadata is stored with each GridFS file:
 **Cause:** Upload expired or server restarted
 
 **Solutions:**
+
 1. Check expiration configuration (default: 24h)
 2. Increase `expiration.expiresIn` if needed
 3. Client should handle `onError` and create new upload
@@ -381,6 +384,7 @@ The following metadata is stored with each GridFS file:
 **Cause:** Missing or incorrect CORS configuration
 
 **Solutions:**
+
 1. Verify client sends correct headers
 2. Check that `Tus-Resumable` header is included
 3. Ensure server CORS allows TUS headers
@@ -390,6 +394,7 @@ The following metadata is stored with each GridFS file:
 **Cause:** Upload incomplete or migration failed
 
 **Solutions:**
+
 1. Verify upload completed (check `onSuccess` callback)
 2. Check server logs for migration errors
 3. Verify MongoDB GridFS bucket exists (`fs.files`, `fs.chunks`)
@@ -399,6 +404,7 @@ The following metadata is stored with each GridFS file:
 **Cause:** File exceeds `maxSize` limit
 
 **Solutions:**
+
 1. Increase `maxSize` in configuration
 2. Check for proxy/nginx upload limits
 3. Verify client `chunkSize` is reasonable
@@ -436,4 +442,4 @@ The following metadata is stored with each GridFS file:
 - [tus.io Protocol](https://tus.io/protocols/resumable-upload)
 - [tus-js-client](https://github.com/tus/tus-js-client)
 - [@tus/server](https://github.com/tus/tus-node-server)
-- [FileModule Documentation](../file/README.md)
+- [FileModule Documentation](../file/README.md)

package/src/core/modules/user/core-user.service.ts

@@ -121,8 +121,7 @@ export abstract class CoreUserService<
   /**
    * Get verified state of user by token
    */
-  // eslint-disable-next-line unused-imports/no-unused-vars
-  async getVerifiedState(token: string, serviceOptions?: ServiceOptions): Promise<boolean> {
+  async getVerifiedState(token: string, _serviceOptions?: ServiceOptions): Promise<boolean> {
     const user = await this.mainDbModel.findOne({ verificationToken: token }).exec();
 
     if (!user) {

package/src/server/modules/auth/auth.module.ts

@@ -22,15 +22,7 @@ export class AuthModule {
     return {
       controllers: [AuthController],
       exports: [AuthController, AuthResolver, CoreAuthModule, AuthService],
-      imports: [
-        CoreAuthModule.forRoot(UserModule, UserService, {
-          ...options,
-          ...{
-            // imports: [], // Integrate additional Services here to resolve dependencies
-            // providers: [] // Integrate additional Providers here to resolve dependencies
-          },
-        }),
-      ],
+      imports: [CoreAuthModule.forRoot(UserModule, UserService, { ...options })],
       module: AuthModule,
       providers: [AuthController, AuthResolver, AuthService, EmailService],
     };

package/src/server/modules/better-auth/better-auth.resolver.ts

@@ -107,7 +107,9 @@ export class BetterAuthResolver extends CoreBetterAuthResolver {
     nullable: true,
   })
   @Roles(RoleEnum.S_USER)
-  override async betterAuthListPasskeys(@Context() ctx: { req: Request }): Promise<CoreBetterAuthPasskeyModel[] | null> {
+  override async betterAuthListPasskeys(
+    @Context() ctx: { req: Request },
+  ): Promise<CoreBetterAuthPasskeyModel[] | null> {
     return super.betterAuthListPasskeys(ctx);
   }
 

package/src/server/modules/error-code/README.md

@@ -5,6 +5,7 @@ This directory contains the reference implementation for extending the ErrorCode
 ## Purpose
 
 Demonstrates **Scenario C: Custom Service + Controller via forRoot()** where a project:
+
 1. Defines its own error codes with a unique prefix (`SRV_*`)
 2. Creates a custom service extending `CoreErrorCodeService`
 3. Creates a **standalone** controller (not extending CoreErrorCodeController - see below)
@@ -14,12 +15,12 @@ Demonstrates **Scenario C: Custom Service + Controller via forRoot()** where a p
 
 ## Files
 
-| File | Description |
-|------|-------------|
-| `error-codes.ts` | Server-specific error definitions (`SRV_*` prefix) |
-| `error-code.service.ts` | Custom service registering `ServerErrors` |
-| `error-code.controller.ts` | Custom controller with `/codes` endpoint |
-| `index.ts` | Module exports |
+| File                       | Description                                        |
+| -------------------------- | -------------------------------------------------- |
+| `error-codes.ts`           | Server-specific error definitions (`SRV_*` prefix) |
+| `error-code.service.ts`    | Custom service registering `ServerErrors`          |
+| `error-code.controller.ts` | Custom controller with `/codes` endpoint           |
+| `index.ts`                 | Module exports                                     |
 
 ## Architecture
 
@@ -73,7 +74,7 @@ import { ErrorCode } from './modules/error-code/error-codes';
 import { Errors } from '@lenne.tech/nest-server';
 
 // Access error codes
-console.log(ErrorCode.DEMO_ERROR);  // '#SRV_0001: Demo error for testing'
+console.log(ErrorCode.DEMO_ERROR); // '#SRV_0001: Demo error for testing'
 
 // Use factory functions
 throw new BadRequestException(Errors.userNotFound({ email: 'test@example.com' }));
@@ -82,11 +83,13 @@ throw new BadRequestException(Errors.userNotFound({ email: 'test@example.com' })
 ## When to Use This Pattern
 
 Use Scenario C when you need:
+
 - Custom REST endpoints (like `/codes`)
 - Different route paths
 - Complex controller logic
 
 For simpler cases, see:
+
 - **Scenario A**: `additionalErrorRegistry` in config (simplest)
 - **Scenario B**: Custom service via inheritance
 
@@ -106,21 +109,21 @@ static routes (`/codes`), even if you re-declare the methods.
 // DOES NOT WORK - parent route registered first!
 @Controller('api/i18n/errors')
 export class ErrorCodeController extends CoreErrorCodeController {
-  @Get('codes')                    // Registered AFTER parent's :locale
-  getAllCodes(): string[] { }
+  @Get('codes') // Registered AFTER parent's :locale
+  getAllCodes(): string[] {}
 
-  @Get(':locale')                  // Parent already registered this
-  override getTranslations() { }
+  @Get(':locale') // Parent already registered this
+  override getTranslations() {}
 }
 
 // WORKS - standalone ensures correct order
 @Controller('api/i18n/errors')
 export class ErrorCodeController {
-  @Get('codes')                    // Registered first
-  getAllCodes(): string[] { }
+  @Get('codes') // Registered first
+  getAllCodes(): string[] {}
 
-  @Get(':locale')                  // Registered second
-  getTranslations() { }
+  @Get(':locale') // Registered second
+  getTranslations() {}
 }
 ```
 
@@ -128,4 +131,4 @@ export class ErrorCodeController {
 
 ### Why is `autoRegister: false` required?
 
-NestJS `@Global()` modules use "first wins" for provider registration. Without `autoRegister: false`, CoreModule registers its ErrorCodeModule first, and your custom service is ignored.
+NestJS `@Global()` modules use "first wins" for provider registration. Without `autoRegister: false`, CoreModule registers its ErrorCodeModule first, and your custom service is ignored.

package/src/server/modules/error-code/error-code.controller.ts

@@ -2,7 +2,10 @@ import { Controller, Get, NotFoundException, Param } from '@nestjs/common';
 
 import { Roles } from '../../../core/common/decorators/roles.decorator';
 import { RoleEnum } from '../../../core/common/enums/role.enum';
-import { IErrorTranslationResponse, SupportedLocale } from '../../../core/modules/error-code/interfaces/error-code.interfaces';
+import {
+  IErrorTranslationResponse,
+  SupportedLocale,
+} from '../../../core/modules/error-code/interfaces/error-code.interfaces';
 import { ErrorCodeService } from './error-code.service';
 
 /**

package/src/server/modules/file/file.resolver.ts

@@ -71,7 +71,7 @@ export class FileResolver {
           createReadStream()
             .pipe(createWriteStream(`./uploads/${filename}`))
             .on('finish', () => resolve(true))
-            .on('error', error => reject(error)),
+            .on('error', (error) => reject(error)),
         ),
       );
     }

package/src/server/modules/file/file.service.ts

@@ -17,8 +17,6 @@ export class FileService extends CoreFileService {
    * Duplicate file by name
    */
   async duplicate(fileName: string, newName: string): Promise<any> {
-    return new Promise(async (resolve) => {
-      resolve(this.files.openDownloadStreamByName(fileName).pipe(this.files.openUploadStream(newName)));
-    });
+    return this.files.openDownloadStreamByName(fileName).pipe(this.files.openUploadStream(newName));
   }
 }

package/src/server/modules/user/user.resolver.ts

@@ -166,7 +166,7 @@ export class UserResolver {
     filter(this: UserResolver, payload, variables, context) {
       return context?.user?.hasRole?.(RoleEnum.ADMIN);
     },
-    resolve: user => user,
+    resolve: (user) => user,
   })
   async userCreated() {
     return this.pubSub.asyncIterableIterator('userCreated');

package/src/test/README.md

@@ -23,18 +23,18 @@ const result = await testHelper.rest('/endpoint', options);
 
 ### TestRestOptions
 
-| Option | Type | Default | Description |
-|--------|------|---------|-------------|
-| `method` | `'GET' \| 'POST' \| 'PUT' \| 'PATCH' \| 'DELETE'` | `'GET'` | HTTP method |
-| `token` | `string` | `null` | Bearer token via Authorization header |
-| `cookies` | `string \| Record<string, string>` | - | Cookie-based authentication (see below) |
-| `headers` | `Record<string, string>` | - | Custom request headers |
-| `payload` | `any` | `null` | Request body |
-| `statusCode` | `number` | `200` | Expected HTTP status code |
-| `returnResponse` | `boolean` | `false` | Return full response including headers |
-| `attachments` | `Record<string, string>` | - | File uploads (key: field name, value: file path) |
-| `log` | `boolean` | `false` | Log request config to console |
-| `logError` | `boolean` | `false` | Log error details when status >= 400 |
+| Option           | Type                                              | Default | Description                                      |
+| ---------------- | ------------------------------------------------- | ------- | ------------------------------------------------ |
+| `method`         | `'GET' \| 'POST' \| 'PUT' \| 'PATCH' \| 'DELETE'` | `'GET'` | HTTP method                                      |
+| `token`          | `string`                                          | `null`  | Bearer token via Authorization header            |
+| `cookies`        | `string \| Record<string, string>`                | -       | Cookie-based authentication (see below)          |
+| `headers`        | `Record<string, string>`                          | -       | Custom request headers                           |
+| `payload`        | `any`                                             | `null`  | Request body                                     |
+| `statusCode`     | `number`                                          | `200`   | Expected HTTP status code                        |
+| `returnResponse` | `boolean`                                         | `false` | Return full response including headers           |
+| `attachments`    | `Record<string, string>`                          | -       | File uploads (key: field name, value: file path) |
+| `log`            | `boolean`                                         | `false` | Log request config to console                    |
+| `logError`       | `boolean`                                         | `false` | Log error details when status >= 400             |
 
 ## Cookie Authentication
 
@@ -52,6 +52,7 @@ const result = await testHelper.rest('/endpoint', {
 ```
 
 This is equivalent to:
+
 ```typescript
 cookies: { 'iam.session_token': sessionToken, 'token': sessionToken }
 ```
@@ -76,10 +77,10 @@ const result = await testHelper.rest('/endpoint', {
 
 ### `token` vs `cookies`
 
-| Option | Transport | Use Case |
-|--------|-----------|----------|
-| `token` | `Authorization: Bearer <token>` header | JWT authentication |
-| `cookies` | `Cookie` header | Session-based authentication (BetterAuth) |
+| Option    | Transport                              | Use Case                                  |
+| --------- | -------------------------------------- | ----------------------------------------- |
+| `token`   | `Authorization: Bearer <token>` header | JWT authentication                        |
+| `cookies` | `Cookie` header                        | Session-based authentication (BetterAuth) |
 
 Both can be used simultaneously without conflict - `token` sets the Authorization header while `cookies` sets the Cookie header.
 
@@ -153,7 +154,7 @@ const session = await db.collection('session').findOne({ userId: user._id });
 
 // Use session token with auto-detection
 await testHelper.rest('/protected-endpoint', {
-  cookies: session.token,  // Auto -> iam.session_token=...; token=...
+  cookies: session.token, // Auto -> iam.session_token=...; token=...
 });
 ```
 
@@ -176,15 +177,18 @@ await testHelper.rest('/protected-endpoint', {
 ## GraphQL Testing (`testHelper.graphQl()`)
 
 ```typescript
-const result = await testHelper.graphQl({
-  name: 'findUsers',
-  type: TestGraphQLType.QUERY,
-  arguments: { filter: { email: { eq: 'test@test.com' } } },
-  fields: ['id', 'email', 'name'],
-}, {
-  token: jwtToken,
-  statusCode: 200,
-});
+const result = await testHelper.graphQl(
+  {
+    name: 'findUsers',
+    type: TestGraphQLType.QUERY,
+    arguments: { filter: { email: { eq: 'test@test.com' } } },
+    fields: ['id', 'email', 'name'],
+  },
+  {
+    token: jwtToken,
+    statusCode: 200,
+  },
+);
 ```
 
-See `TestGraphQLConfig` and `TestGraphQLOptions` interfaces in `test.helper.ts` for full configuration options.
+See `TestGraphQLConfig` and `TestGraphQLOptions` interfaces in `test.helper.ts` for full configuration options.

package/src/test/test.helper.ts

@@ -264,14 +264,18 @@ export class TestHelper {
 
     // Convert string to TestGraphQLConfig
     if (
-      (typeof graphql === 'string' || graphql instanceof String)
-      && /^(?![a-zA-Z]+$).*$/.test((graphql as string).trim())
+      (typeof graphql === 'string' ||
+        (typeof graphql === 'object' && graphql !== null && graphql.constructor === String)) &&
+      /^(?![a-zA-Z]+$).*$/.test((graphql as string).trim())
     ) {
       // Use input as query
       query = (graphql as string).trim();
     } else {
       // Use input as name
-      if (typeof graphql === 'string' || graphql instanceof String) {
+      if (
+        typeof graphql === 'string' ||
+        (typeof graphql === 'object' && graphql !== null && graphql.constructor === String)
+      ) {
         graphql = { name: (graphql as string).trim() } as any;
       }
 
@@ -336,7 +340,7 @@ export class TestHelper {
           });
         }
       } else {
-        query = query.replace(/(?<=[:\[,]\s*)"([A-Z0-9_]+)"(?=\s*[,\]\}])/g, (match, group1) => {
+        query = query.replace(/(?<=[:[,]\s*)"([A-Z0-9_]+)"(?=\s*[,\]}])/g, (match, group1) => {
           // If group1 only contains digits, the original string is returned
           if (/^\d+$/.test(group1)) {
             return match;
@@ -471,7 +475,7 @@ export class TestHelper {
     }
     if (Array.isArray(args)) {
       objects.set(args, args);
-      return args.map(item => this.prepareArguments(item, objects));
+      return args.map((item) => this.prepareArguments(item, objects));
     }
     if (typeof args === 'object') {
       objects.set(args, args);
@@ -542,7 +546,7 @@ export class TestHelper {
   ): Promise<any> {
     // Token
     if (token) {
-      requestConfig.headers = { authorization: `Bearer ${token}`, ...(requestConfig.headers || {}) };
+      requestConfig.headers = { authorization: `Bearer ${token}`, ...requestConfig.headers };
     }
 
     // Init response
@@ -580,12 +584,16 @@ export class TestHelper {
         if (!requestConfig.cookies.includes('=') && !requestConfig.cookies.includes(';')) {
           // Plain session token -> auto-build BetterAuth cookies
           const cookieRecord = TestHelper.buildBetterAuthCookies(requestConfig.cookies);
-          cookieString = Object.entries(cookieRecord).map(([k, v]) => `${k}=${v}`).join('; ');
+          cookieString = Object.entries(cookieRecord)
+            .map(([k, v]) => `${k}=${v}`)
+            .join('; ');
         } else {
           cookieString = requestConfig.cookies;
         }
       } else {
-        cookieString = Object.entries(requestConfig.cookies).map(([k, v]) => `${k}=${v}`).join('; ');
+        cookieString = Object.entries(requestConfig.cookies)
+          .map(([k, v]) => `${k}=${v}`)
+          .join('; ');
       }
       request.set('Cookie', cookieString);
     }
@@ -712,7 +720,7 @@ export class TestHelper {
   async getSubscription(graphql: TestGraphQLConfig, query: string, options?: TestGraphQLOptions) {
     // Check url
     if (!this.subscriptionUrl) {
-      throw new Error('Missing subscriptionUrl in TestHelper: new TestHelper(app, \'ws://localhost:3030/graphql\')');
+      throw new Error("Missing subscriptionUrl in TestHelper: new TestHelper(app, 'ws://localhost:3030/graphql')");
     }
 
     // Prepare subscription
@@ -761,7 +769,7 @@ export class TestHelper {
   static buildBetterAuthCookies(sessionToken: string, basePath: string = 'iam'): Record<string, string> {
     return {
       [`${basePath}.session_token`]: sessionToken,
-      'token': sessionToken,
+      token: sessionToken,
     };
   }