@lenne.tech/nest-server 11.14.0 → 11.15.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nest-server",
-  "version": "11.14.0",
+  "version": "11.15.0",
   "description": "Modern, fast, powerful Node.js web framework in TypeScript based on Nest with a GraphQL API and a connection to MongoDB (or other databases).",
   "keywords": [
     "node",
@@ -53,6 +53,7 @@
     "vitest:unit": "vitest run --config vitest.config.ts",
     "test:unit:watch": "vitest --config vitest.config.ts",
     "test:types": "tsc --noEmit --skipLibCheck -p tests/types/tsconfig.json",
+    "test:cleanup": "find tests -type f \\( -name '*.txt' -o -name '*.bin' \\) -not -name '.gitkeep' -delete && echo 'Test artifacts cleaned up'",
     "watch": "npm-watch"
   },
   "repository": {

package/src/core/common/interfaces/server-options.interface.ts

@@ -1099,28 +1099,32 @@ export interface IServerOptions {
    * Configuration of the GraphQL module
    * see https://docs.nestjs.com/graphql/quick-start
    * and https://www.apollographql.com/docs/apollo-server/api/apollo-server/
+   *
+   * Set to `false` to completely disable GraphQL (no GraphQLModule, no /graphql endpoint).
    */
-  graphQl?: {
-    /**
-     * Driver configuration for Apollo
-     */
-    driver?: ApolloDriverConfig;
+  graphQl?:
+    | false
+    | {
+        /**
+         * Driver configuration for Apollo
+         */
+        driver?: ApolloDriverConfig;
 
-    /**
-     * Subscription authentication
-     */
-    enableSubscriptionAuth?: boolean;
+        /**
+         * Subscription authentication
+         */
+        enableSubscriptionAuth?: boolean;
 
-    /**
-     * Maximum complexity of GraphQL requests
-     */
-    maxComplexity?: number;
+        /**
+         * Maximum complexity of GraphQL requests
+         */
+        maxComplexity?: number;
 
-    /**
-     * Module options (forRootAsync)
-     */
-    options?: GqlModuleAsyncOptions;
-  };
+        /**
+         * Module options (forRootAsync)
+         */
+        options?: GqlModuleAsyncOptions;
+      };
 
   /**
    * Whether to activate health check endpoints

package/src/core/modules/better-auth/core-better-auth-email-verification.service.ts

@@ -168,9 +168,13 @@ export class CoreBetterAuthEmailVerificationService {
       url = this.buildFrontendVerificationUrl(token);
     }
 
-    // Always log verification URL for development/testing (useful for capturing in tests)
+    // Log verification URL in non-production environments for debugging and test capture
     // Uses console.log directly to ensure reliable capture in test environments (Vitest)
     // NestJS Logger may buffer output which makes interception unreliable in tests
+    if (process.env.NODE_ENV !== 'production') {
+      // oxlint-disable-next-line no-console
+      console.log(`[EMAIL VERIFICATION] User: ${user.email}, URL: ${url}`);
+    }
 
     // Brevo template path: send via Brevo transactional API if configured
     if (this.config.brevoTemplateId && this.brevoService) {

package/src/core.module.ts

@@ -42,11 +42,15 @@ import { CoreSystemSetupModule } from './core/modules/system-setup/core-system-s
 @Global()
 @Module({})
 export class CoreModule implements NestModule {
+  private static graphQlEnabled = true;
+
   /**
    * Integrate middleware, e.g. GraphQL upload handing for express
    */
   configure(consumer: MiddlewareConsumer) {
-    consumer.apply(graphqlUploadExpress()).forRoutes('graphql');
+    if (CoreModule.graphQlEnabled) {
+      consumer.apply(graphqlUploadExpress()).forRoutes('graphql');
+    }
   }
 
   /**
@@ -138,24 +142,35 @@ export class CoreModule implements NestModule {
       };
     }
 
+    // Determine if GraphQL is enabled (false means explicitly disabled)
+    const isGraphQlEnabled = options.graphQl !== false;
+    CoreModule.graphQlEnabled = isGraphQlEnabled;
+
     // Check if autoRegister: false for IAM-only mode (project imports its own BetterAuth module)
     const rawBetterAuth = options?.betterAuth;
     const isAutoRegisterDisabledEarly = typeof rawBetterAuth === 'object' && rawBetterAuth?.autoRegister === false;
 
-    // Build GraphQL driver configuration based on auth mode
-    const graphQlDriverConfig = isIamOnlyMode
-      ? isAutoRegisterDisabledEarly
-        ? this.buildLazyIamGraphQlDriver(cors, options)
-        : this.buildIamOnlyGraphQlDriver(cors, options)
-      : this.buildLegacyGraphQlDriver(AuthService, AuthModule, cors, options);
+    // Build GraphQL driver configuration based on auth mode (only if GraphQL is enabled)
+    let graphQlDriverConfig = {};
+    if (isGraphQlEnabled) {
+      graphQlDriverConfig = isIamOnlyMode
+        ? isAutoRegisterDisabledEarly
+          ? this.buildLazyIamGraphQlDriver(cors, options)
+          : this.buildIamOnlyGraphQlDriver(cors, options)
+        : this.buildLegacyGraphQlDriver(AuthService, AuthModule, cors, options);
+    }
 
     const config: IServerOptions = merge(
       {
         env: 'develop',
-        graphQl: {
-          driver: graphQlDriverConfig,
-          enableSubscriptionAuth: true,
-        },
+        ...(isGraphQlEnabled
+          ? {
+              graphQl: {
+                driver: graphQlDriverConfig,
+                enableSubscriptionAuth: true,
+              },
+            }
+          : {}),
         mongoose: {
           options: {
             connectionFactory: (connection) => {
@@ -190,8 +205,8 @@ export class CoreModule implements NestModule {
       MailjetService,
     ];
 
-    // Add ComplexityPlugin only if not in Vitest (Vitest has dual GraphQL loading issue)
-    if (!process.env.VITEST) {
+    // Add ComplexityPlugin only if not in Vitest (Vitest has dual GraphQL loading issue) and GraphQL is enabled
+    if (!process.env.VITEST && isGraphQlEnabled) {
       providers.push(ComplexityPlugin);
     }
 
@@ -228,12 +243,15 @@ export class CoreModule implements NestModule {
     // and: https://mongoosejs.com/docs/guide.html#strictQuery
     mongoose.set('strictQuery', config.mongoose.strictQuery || false);
 
-    const imports: any[] = [
-      MongooseModule.forRoot(config.mongoose.uri, config.mongoose.options),
-      GraphQLModule.forRootAsync<ApolloDriverConfig>(
-        Object.assign({ driver: ApolloDriver }, config.graphQl.driver, config.graphQl.options),
-      ),
-    ];
+    const imports: any[] = [MongooseModule.forRoot(config.mongoose.uri, config.mongoose.options)];
+
+    if (isGraphQlEnabled && config.graphQl) {
+      imports.push(
+        GraphQLModule.forRootAsync<ApolloDriverConfig>(
+          Object.assign({ driver: ApolloDriver }, config.graphQl.driver, config.graphQl.options),
+        ),
+      );
+    }
 
     // Add ErrorCodeModule based on configuration
     // autoRegister defaults to true (backward compatible)
@@ -311,7 +329,7 @@ export class CoreModule implements NestModule {
 
     // Set exports
     const exports: any[] = [ConfigService, EmailService, TemplateService, MailjetService];
-    if (!process.env.VITEST) {
+    if (!process.env.VITEST && isGraphQlEnabled) {
       exports.push(ComplexityPlugin);
     }
 
@@ -335,6 +353,8 @@ export class CoreModule implements NestModule {
    * This is the recommended mode for new projects.
    */
   private static buildIamOnlyGraphQlDriver(cors: object, options: Partial<IServerOptions>) {
+    // This method is only called when graphQl !== false, extract config with type narrowing
+    const graphQlOpts = typeof options?.graphQl === 'object' ? options.graphQl : undefined;
     return {
       imports: [CoreBetterAuthModule],
       inject: [CoreBetterAuthService, CoreBetterAuthUserMapper],
@@ -350,7 +370,7 @@ export class CoreModule implements NestModule {
                 context: ({ extra }) => extra,
                 onConnect: async (context: Context<any>) => {
                   const { connectionParams, extra } = context;
-                  const enableAuth = options?.graphQl?.enableSubscriptionAuth ?? true;
+                  const enableAuth = graphQlOpts?.enableSubscriptionAuth ?? true;
 
                   if (enableAuth) {
                     // Get headers from raw headers or connection params
@@ -385,7 +405,7 @@ export class CoreModule implements NestModule {
               },
               'subscriptions-transport-ws': {
                 onConnect: async (connectionParams) => {
-                  const enableAuth = options?.graphQl?.enableSubscriptionAuth ?? true;
+                  const enableAuth = graphQlOpts?.enableSubscriptionAuth ?? true;
 
                   if (enableAuth) {
                     const authToken: string = connectionParams?.Authorization?.split(' ')[1];
@@ -415,7 +435,7 @@ export class CoreModule implements NestModule {
               },
             },
           },
-          options?.graphQl?.driver,
+          graphQlOpts?.driver,
         ),
     };
   }
@@ -430,6 +450,8 @@ export class CoreModule implements NestModule {
    * which happens after all modules are initialized.
    */
   private static buildLazyIamGraphQlDriver(cors: object, options: Partial<IServerOptions>) {
+    // This method is only called when graphQl !== false, extract config with type narrowing
+    const graphQlOpts = typeof options?.graphQl === 'object' ? options.graphQl : undefined;
     return {
       useFactory: async () =>
         Object.assign(
@@ -443,7 +465,7 @@ export class CoreModule implements NestModule {
                 context: ({ extra }) => extra,
                 onConnect: async (context: Context<any>) => {
                   const { connectionParams, extra } = context;
-                  const enableAuth = options?.graphQl?.enableSubscriptionAuth ?? true;
+                  const enableAuth = graphQlOpts?.enableSubscriptionAuth ?? true;
 
                   if (enableAuth) {
                     const betterAuthService = CoreBetterAuthModule.getServiceInstance();
@@ -482,7 +504,7 @@ export class CoreModule implements NestModule {
               },
               'subscriptions-transport-ws': {
                 onConnect: async (connectionParams) => {
-                  const enableAuth = options?.graphQl?.enableSubscriptionAuth ?? true;
+                  const enableAuth = graphQlOpts?.enableSubscriptionAuth ?? true;
 
                   if (enableAuth) {
                     const betterAuthService = CoreBetterAuthModule.getServiceInstance();
@@ -517,7 +539,7 @@ export class CoreModule implements NestModule {
               },
             },
           },
-          options?.graphQl?.driver,
+          graphQlOpts?.driver,
         ),
     };
   }
@@ -536,8 +558,9 @@ export class CoreModule implements NestModule {
     cors: object,
     options: Partial<IServerOptions>,
   ) {
-    // Store config reference for use in callbacks
-    const enableSubscriptionAuth = options?.graphQl?.enableSubscriptionAuth ?? true;
+    // This method is only called when graphQl !== false, extract config with type narrowing
+    const graphQlOpts = typeof options?.graphQl === 'object' ? options.graphQl : undefined;
+    const enableSubscriptionAuth = graphQlOpts?.enableSubscriptionAuth ?? true;
 
     return {
       imports: [AuthModule],
@@ -599,7 +622,7 @@ export class CoreModule implements NestModule {
               },
             },
           },
-          options?.graphQl?.driver,
+          graphQlOpts?.driver,
         ),
     };
   }