@lenne.tech/nest-server 11.36.0 → 11.36.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (45) hide show
  1. package/.claude/rules/configurable-features.md +3 -1
  2. package/.claude/rules/testing.md +24 -1
  3. package/CLAUDE.md +1 -0
  4. package/FRAMEWORK-API.md +3 -2
  5. package/dist/core/common/helpers/logging.helper.js +1 -1
  6. package/dist/core/common/helpers/logging.helper.js.map +1 -1
  7. package/dist/core/common/interfaces/server-options.interface.d.ts +2 -0
  8. package/dist/core/modules/better-auth/better-auth.config.d.ts +5 -2
  9. package/dist/core/modules/better-auth/better-auth.config.js +34 -2
  10. package/dist/core/modules/better-auth/better-auth.config.js.map +1 -1
  11. package/dist/core/modules/better-auth/core-better-auth-email-verification.service.d.ts +15 -1
  12. package/dist/core/modules/better-auth/core-better-auth-email-verification.service.js +115 -9
  13. package/dist/core/modules/better-auth/core-better-auth-email-verification.service.js.map +1 -1
  14. package/dist/core/modules/better-auth/core-better-auth-rate-limiter.service.d.ts +1 -1
  15. package/dist/core/modules/better-auth/core-better-auth-rate-limiter.service.js +14 -1
  16. package/dist/core/modules/better-auth/core-better-auth-rate-limiter.service.js.map +1 -1
  17. package/dist/core/modules/better-auth/core-better-auth.module.js +19 -5
  18. package/dist/core/modules/better-auth/core-better-auth.module.js.map +1 -1
  19. package/dist/core/modules/better-auth/core-better-auth.service.js +3 -1
  20. package/dist/core/modules/better-auth/core-better-auth.service.js.map +1 -1
  21. package/dist/core/modules/tenant/core-tenant.service.d.ts +1 -0
  22. package/dist/core/modules/tenant/core-tenant.service.js +11 -2
  23. package/dist/core/modules/tenant/core-tenant.service.js.map +1 -1
  24. package/dist/templates/password-reset-de.ejs +65 -0
  25. package/dist/templates/password-reset-en.ejs +65 -0
  26. package/dist/templates/password-reset.ejs +1 -1
  27. package/dist/tsconfig.build.tsbuildinfo +1 -1
  28. package/docs/security-overrides.md +17 -11
  29. package/migration-guides/11.36.0-to-11.36.1.md +283 -0
  30. package/migration-guides/11.36.1-to-11.36.2.md +67 -0
  31. package/package.json +10 -11
  32. package/src/core/common/helpers/logging.helper.ts +9 -1
  33. package/src/core/common/interfaces/server-options.interface.ts +50 -8
  34. package/src/core/modules/better-auth/CUSTOMIZATION.md +33 -7
  35. package/src/core/modules/better-auth/INTEGRATION-CHECKLIST.md +38 -0
  36. package/src/core/modules/better-auth/README.md +100 -15
  37. package/src/core/modules/better-auth/better-auth.config.ts +138 -9
  38. package/src/core/modules/better-auth/core-better-auth-email-verification.service.ts +265 -20
  39. package/src/core/modules/better-auth/core-better-auth-rate-limiter.service.ts +30 -2
  40. package/src/core/modules/better-auth/core-better-auth.module.ts +45 -13
  41. package/src/core/modules/better-auth/core-better-auth.service.ts +10 -2
  42. package/src/core/modules/tenant/core-tenant.service.ts +41 -4
  43. package/src/templates/password-reset-de.ejs +65 -0
  44. package/src/templates/password-reset-en.ejs +65 -0
  45. package/src/templates/password-reset.ejs +1 -1
package/src/templates/password-reset-de.ejs ADDED
@@ -0,0 +1,65 @@
1
+ <% /* `appName` is optional so a caller that omits it cannot turn a password-reset mail into a 500. */ const brand = (typeof appName !== 'undefined' && appName) ? appName : ''; -%>
2
+ <!DOCTYPE html>
3
+ <html lang="de">
4
+ <head>
5
+ <meta charset="UTF-8">
6
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
7
+ <meta http-equiv="X-UA-Compatible" content="IE=edge">
8
+ <title>Passwort zurücksetzen</title>
9
+ <style>
10
+ /* Responsive: on phones let the card fill the width and tighten the side
11
+ padding. Clients that ignore <style>/@media still get a fluid card via
12
+ the inline width:100% + max-width:600px below. */
13
+ @media only screen and (max-width: 600px) {
14
+ .ns-px { padding-left: 24px !important; padding-right: 24px !important; }
15
+ .ns-logo { width: 160px !important; height: auto !important; }
16
+ }
17
+ </style>
18
+ </head>
19
+ <body style="margin:0; padding:0; background-color:#f8fafc; -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%;">
20
+ <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" bgcolor="#f8fafc" style="background-color:#f8fafc;">
21
+ <tr>
22
+ <td align="center" style="padding:32px 16px;">
23
+ <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" bgcolor="#ffffff" style="width:100%; max-width:600px; background-color:#ffffff; border:1px solid #e2e8f0; border-radius:8px; overflow:hidden;">
24
+ <!-- Header: the logo when the deployment supplies one, the app name otherwise -->
25
+ <tr>
26
+ <td align="center" bgcolor="#ffffff" style="background-color:#ffffff; padding:32px 32px 24px 32px; font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif;">
27
+ <% if (typeof logoSrc !== 'undefined' && logoSrc) { %>
28
+ <img src="<%= logoSrc %>" alt="<%= brand %>" class="ns-logo" width="200" style="display:block; width:200px; height:auto; border:0; text-decoration:none;">
29
+ <% } else { %>
30
+ <span style="font-size:20px; line-height:26px; font-weight:700; color:#262626;"><%= brand %></span>
31
+ <% } %>
32
+ </td>
33
+ </tr>
34
+ <tr>
35
+ <td class="ns-px" style="padding:36px 40px 8px 40px; font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif;">
36
+ <h1 style="margin:0 0 16px 0; font-size:22px; line-height:28px; font-weight:700; color:#262626;">Hallo <%= name %>,</h1>
37
+ <p style="margin:0 0 16px 0; font-size:16px; line-height:24px; color:#262626;">du hast ein neues Passwort angefordert. Über die Schaltfläche unten kannst du eines festlegen.</p>
38
+ </td>
39
+ </tr>
40
+ <tr>
41
+ <td class="ns-px" style="padding:8px 40px 36px 40px; font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif;">
42
+ <table role="presentation" cellpadding="0" cellspacing="0" border="0">
43
+ <tr>
44
+ <td align="center" bgcolor="#2563eb" style="border-radius:6px; mso-padding-alt:13px 28px;">
45
+ <a href="<%= link %>" target="_blank" style="display:inline-block; padding:13px 28px; font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif; font-size:16px; line-height:20px; font-weight:600; color:#ffffff; text-decoration:none; border-radius:6px;">Passwort zurücksetzen</a>
46
+ </td>
47
+ </tr>
48
+ </table>
49
+ <p style="margin:24px 0 0 0; font-size:13px; line-height:20px; color:#737373;">
50
+ Falls die Schaltfläche nicht funktioniert, kopiere diesen Link in deinen Browser:<br>
51
+ <a href="<%= link %>" style="color:#1d4ed8; word-break:break-all; overflow-wrap:break-word;"><%= link %></a>
52
+ </p>
53
+ </td>
54
+ </tr>
55
+ <tr>
56
+ <td class="ns-px" style="padding:24px 40px 32px 40px; border-top:1px solid #e2e8f0; font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif;">
57
+ <p style="margin:0; font-size:12px; line-height:18px; color:#a3a3a3;">Dies ist eine automatisch versendete Nachricht <% if (brand) { %>zu deinem <%= brand %>-Konto<% } else { %>zu deinem Konto<% } %>. Wenn du kein neues Passwort angefordert hast, kannst du diese E-Mail ignorieren — dein Passwort bleibt unverändert.</p>
58
+ </td>
59
+ </tr>
60
+ </table>
61
+ </td>
62
+ </tr>
63
+ </table>
64
+ </body>
65
+ </html>
package/src/templates/password-reset-en.ejs ADDED
@@ -0,0 +1,65 @@
1
+ <% /* `appName` is optional so a caller that omits it cannot turn a password-reset mail into a 500. */ const brand = (typeof appName !== 'undefined' && appName) ? appName : ''; -%>
2
+ <!DOCTYPE html>
3
+ <html lang="en">
4
+ <head>
5
+ <meta charset="UTF-8">
6
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
7
+ <meta http-equiv="X-UA-Compatible" content="IE=edge">
8
+ <title>Reset your password</title>
9
+ <style>
10
+ /* Responsive: on phones let the card fill the width and tighten the side
11
+ padding. Clients that ignore <style>/@media still get a fluid card via
12
+ the inline width:100% + max-width:600px below. */
13
+ @media only screen and (max-width: 600px) {
14
+ .ns-px { padding-left: 24px !important; padding-right: 24px !important; }
15
+ .ns-logo { width: 160px !important; height: auto !important; }
16
+ }
17
+ </style>
18
+ </head>
19
+ <body style="margin:0; padding:0; background-color:#f8fafc; -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%;">
20
+ <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" bgcolor="#f8fafc" style="background-color:#f8fafc;">
21
+ <tr>
22
+ <td align="center" style="padding:32px 16px;">
23
+ <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" bgcolor="#ffffff" style="width:100%; max-width:600px; background-color:#ffffff; border:1px solid #e2e8f0; border-radius:8px; overflow:hidden;">
24
+ <!-- Header: the logo when the deployment supplies one, the app name otherwise -->
25
+ <tr>
26
+ <td align="center" bgcolor="#ffffff" style="background-color:#ffffff; padding:32px 32px 24px 32px; font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif;">
27
+ <% if (typeof logoSrc !== 'undefined' && logoSrc) { %>
28
+ <img src="<%= logoSrc %>" alt="<%= brand %>" class="ns-logo" width="200" style="display:block; width:200px; height:auto; border:0; text-decoration:none;">
29
+ <% } else { %>
30
+ <span style="font-size:20px; line-height:26px; font-weight:700; color:#262626;"><%= brand %></span>
31
+ <% } %>
32
+ </td>
33
+ </tr>
34
+ <tr>
35
+ <td class="ns-px" style="padding:36px 40px 8px 40px; font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif;">
36
+ <h1 style="margin:0 0 16px 0; font-size:22px; line-height:28px; font-weight:700; color:#262626;">Hello <%= name %>,</h1>
37
+ <p style="margin:0 0 16px 0; font-size:16px; line-height:24px; color:#262626;">you asked to set a new password. Use the button below to choose one.</p>
38
+ </td>
39
+ </tr>
40
+ <tr>
41
+ <td class="ns-px" style="padding:8px 40px 36px 40px; font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif;">
42
+ <table role="presentation" cellpadding="0" cellspacing="0" border="0">
43
+ <tr>
44
+ <td align="center" bgcolor="#2563eb" style="border-radius:6px; mso-padding-alt:13px 28px;">
45
+ <a href="<%= link %>" target="_blank" style="display:inline-block; padding:13px 28px; font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif; font-size:16px; line-height:20px; font-weight:600; color:#ffffff; text-decoration:none; border-radius:6px;">Reset password</a>
46
+ </td>
47
+ </tr>
48
+ </table>
49
+ <p style="margin:24px 0 0 0; font-size:13px; line-height:20px; color:#737373;">
50
+ If the button doesn't work, copy and paste this link into your browser:<br>
51
+ <a href="<%= link %>" style="color:#1d4ed8; word-break:break-all; overflow-wrap:break-word;"><%= link %></a>
52
+ </p>
53
+ </td>
54
+ </tr>
55
+ <tr>
56
+ <td class="ns-px" style="padding:24px 40px 32px 40px; border-top:1px solid #e2e8f0; font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif;">
57
+ <p style="margin:0; font-size:12px; line-height:18px; color:#a3a3a3;">This is an automated message regarding <% if (brand) { %>your <%= brand %> account<% } else { %>your account<% } %>. If you did not ask for a password reset, you can safely ignore this email — your password stays unchanged.</p>
58
+ </td>
59
+ </tr>
60
+ </table>
61
+ </td>
62
+ </tr>
63
+ </table>
64
+ </body>
65
+ </html>
package/src/templates/password-reset.ejs CHANGED
@@ -1,3 +1,3 @@
1
1
  <h1>Hello <%= name %>,</h1>
2
2
  <p>you requested a link for setting a new password. Here it is.</p><br />
3
- <a href="<%= link %>">Passwort zurücksetzten</a>
3
+ <a href="<%= link %>">Reset password</a>