@merkaly/api 0.1.4 → 0.1.9-1

package/README.md

@@ -1,79 +1,79 @@
-<p align="center">
-  <a href="http://nestjs.com/" target="blank"><img src="https://nestjs.com/img/logo_text.svg" width="320" alt="Nest Logo" /></a>
-</p>
-
-[travis-image]: https://api.travis-ci.org/nestjs/nest.svg?branch=master
-
-[travis-url]: https://travis-ci.org/nestjs/nest
-
-[linux-image]: https://img.shields.io/travis/nestjs/nest/master.svg?label=linux
-
-[linux-url]: https://travis-ci.org/nestjs/nest
-
-  <p align="center">A progressive <a href="http://nodejs.org" target="blank">Node.js</a> framework for building efficient and scalable server-side applications, heavily inspired by <a href="https://angular.io" target="blank">Angular</a>.</p>
-    <p align="center">
-<a href="https://www.npmjs.com/~nestjscore"><img src="https://img.shields.io/npm/v/@nestjs/core.svg" alt="NPM Version" /></a>
-<a href="https://www.npmjs.com/~nestjscore"><img src="https://img.shields.io/npm/l/@nestjs/core.svg" alt="Package License" /></a>
-<a href="https://www.npmjs.com/~nestjscore"><img src="https://img.shields.io/npm/dm/@nestjs/core.svg" alt="NPM Downloads" /></a>
-<a href="https://travis-ci.org/nestjs/nest"><img src="https://api.travis-ci.org/nestjs/nest.svg?branch=master" alt="Travis" /></a>
-<a href="https://travis-ci.org/nestjs/nest"><img src="https://img.shields.io/travis/nestjs/nest/master.svg?label=linux" alt="Linux" /></a>
-<a href="https://coveralls.io/github/nestjs/nest?branch=master"><img src="https://coveralls.io/repos/github/nestjs/nest/badge.svg?branch=master#5" alt="Coverage" /></a>
-<a href="https://gitter.im/nestjs/nestjs?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=body_badge"><img src="https://badges.gitter.im/nestjs/nestjs.svg" alt="Gitter" /></a>
-<a href="https://opencollective.com/nest#backer"><img src="https://opencollective.com/nest/backers/badge.svg" alt="Backers on Open Collective" /></a>
-<a href="https://opencollective.com/nest#sponsor"><img src="https://opencollective.com/nest/sponsors/badge.svg" alt="Sponsors on Open Collective" /></a>
-  <a href="https://paypal.me/kamilmysliwiec"><img src="https://img.shields.io/badge/Donate-PayPal-dc3d53.svg"/></a>
-  <a href="https://twitter.com/nestframework"><img src="https://img.shields.io/twitter/follow/nestframework.svg?style=social&label=Follow"></a>
-</p>
-  <!--[![Backers on Open Collective](https://opencollective.com/nest/backers/badge.svg)](https://opencollective.com/nest#backer)
-  [![Sponsors on Open Collective](https://opencollective.com/nest/sponsors/badge.svg)](https://opencollective.com/nest#sponsor)-->
-
-## Description
-
-[Nest](https://github.com/nestjs/nest) framework TypeScript starter repository.
-
-## Installation
-
-```bash
-$ npm install
-```
-
-## Running the app
-
-```bash
-# development
-$ npm run start
-
-# watch mode
-$ npm run start:dev
-
-# production mode
-$ npm run start:prod
-```
-
-## Test
-
-```bash
-# unit tests
-$ npm run test
-
-# e2e tests
-$ npm run test:e2e
-
-# test coverage
-$ npm run test:cov
-```
-
-## Support
-
-Nest is an MIT-licensed open source project. It can grow thanks to the sponsors and support by the amazing backers. If
-you'd like to join them, please [read more here](https://docs.nestjs.com/support).
-
-## Stay in touch
-
-- Author - [Kamil Myśliwiec](https://kamilmysliwiec.com)
-- Website - [https://nestjs.com](https://nestjs.com/)
-- Twitter - [@nestframework](https://twitter.com/nestframework)
-
-## License
-
-Nest is [MIT licensed](LICENSE).
+<p align="center">
+  <a href="http://nestjs.com/" target="blank"><img src="https://nestjs.com/img/logo_text.svg" width="320" alt="Nest Logo" /></a>
+</p>
+
+[travis-image]: https://api.travis-ci.org/nestjs/nest.svg?branch=master
+
+[travis-url]: https://travis-ci.org/nestjs/nest
+
+[linux-image]: https://img.shields.io/travis/nestjs/nest/master.svg?label=linux
+
+[linux-url]: https://travis-ci.org/nestjs/nest
+
+  <p align="center">A progressive <a href="http://nodejs.org" target="blank">Node.js</a> framework for building efficient and scalable server-side applications, heavily inspired by <a href="https://angular.io" target="blank">Angular</a>.</p>
+    <p align="center">
+<a href="https://www.npmjs.com/~nestjscore"><img src="https://img.shields.io/npm/v/@nestjs/core.svg" alt="NPM Version" /></a>
+<a href="https://www.npmjs.com/~nestjscore"><img src="https://img.shields.io/npm/l/@nestjs/core.svg" alt="Package License" /></a>
+<a href="https://www.npmjs.com/~nestjscore"><img src="https://img.shields.io/npm/dm/@nestjs/core.svg" alt="NPM Downloads" /></a>
+<a href="https://travis-ci.org/nestjs/nest"><img src="https://api.travis-ci.org/nestjs/nest.svg?branch=master" alt="Travis" /></a>
+<a href="https://travis-ci.org/nestjs/nest"><img src="https://img.shields.io/travis/nestjs/nest/master.svg?label=linux" alt="Linux" /></a>
+<a href="https://coveralls.io/github/nestjs/nest?branch=master"><img src="https://coveralls.io/repos/github/nestjs/nest/badge.svg?branch=master#5" alt="Coverage" /></a>
+<a href="https://gitter.im/nestjs/nestjs?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=body_badge"><img src="https://badges.gitter.im/nestjs/nestjs.svg" alt="Gitter" /></a>
+<a href="https://opencollective.com/nest#backer"><img src="https://opencollective.com/nest/backers/badge.svg" alt="Backers on Open Collective" /></a>
+<a href="https://opencollective.com/nest#sponsor"><img src="https://opencollective.com/nest/sponsors/badge.svg" alt="Sponsors on Open Collective" /></a>
+  <a href="https://paypal.me/kamilmysliwiec"><img src="https://img.shields.io/badge/Donate-PayPal-dc3d53.svg"/></a>
+  <a href="https://twitter.com/nestframework"><img src="https://img.shields.io/twitter/follow/nestframework.svg?style=social&label=Follow"></a>
+</p>
+  <!--[![Backers on Open Collective](https://opencollective.com/nest/backers/badge.svg)](https://opencollective.com/nest#backer)
+  [![Sponsors on Open Collective](https://opencollective.com/nest/sponsors/badge.svg)](https://opencollective.com/nest#sponsor)-->
+
+## Description
+
+[Nest](https://github.com/nestjs/nest) framework TypeScript starter repository.
+
+## Installation
+
+```bash
+$ npm install
+```
+
+## Running the app
+
+```bash
+# development
+$ npm run start
+
+# watch mode
+$ npm run start:dev
+
+# production mode
+$ npm run start:prod
+```
+
+## Test
+
+```bash
+# unit tests
+$ npm run test
+
+# e2e tests
+$ npm run test:e2e
+
+# test coverage
+$ npm run test:cov
+```
+
+## Support
+
+Nest is an MIT-licensed open source project. It can grow thanks to the sponsors and support by the amazing backers. If
+you'd like to join them, please [read more here](https://docs.nestjs.com/support).
+
+## Stay in touch
+
+- Author - [Kamil Myśliwiec](https://kamilmysliwiec.com)
+- Website - [https://nestjs.com](https://nestjs.com/)
+- Twitter - [@nestframework](https://twitter.com/nestframework)
+
+## License
+
+Nest is [MIT licensed](LICENSE).

package/package.json

@@ -1,96 +1,89 @@
-{
-  "name": "@merkaly/api",
-  "version": "0.1.4",
-  "description": "NestJS Backend ApiRest Service",
-  "author": "Randy Tellez Galan <kronhyx@gmail.com>",
-  "license": "UNLICENSED",
-  "main": "src",
-  "files": [
-    "!src/app.*.*",
-    "!src/**/*.module.*",
-    "!src/**/*.controller.*",
-    "!src/**/*.repository.*",
-    "src/**/*.entity.ts",
-    "src/**/*.validator.ts"
-  ],
-  "scripts": {
-    "prebuild": "npm run clean",
-    "prepack": "npm run build",
-    "build": "tsc --b",
-    "clean": "tsc -b --clean",
-    "start": "nest start --preserveWatchOutput",
-    "dev": "npm run clean && npm start -- --watch",
-    "start:debug": "npm run dev -- --debug ",
-    "start:prod": "node dist/index.js",
-    "lint": "eslint \"{src,apps,libs,test}/**/*.ts\" . ",
-    "test": "jest",
-    "test:watch": "npm run test -- --watch",
-    "test:cov": "npm run test -- --coverage",
-    "test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand",
-    "semantic-release": "npm run build:package && semantic-release"
-  },
-  "dependencies": {
-    "@nestjs/swagger": "^5.0.9",
-    "@types/auth0": "^2.33.4",
-    "@types/node": "^16.0.0",
-    "auth0": "^2.35.0",
-    "class-transformer": "^0.4.0",
-    "class-validator": "^0.13.1",
-    "fireorm": "^0.22.0",
-    "reflect-metadata": "^0.1.13"
-  },
-  "devDependencies": {
-    "@commitlint/config-conventional": "^13.1.0",
-    "@elastic/elasticsearch": "^7.13.0",
-    "@nestjs/cli": "8.1.1",
-    "@nestjs/common": "8.0.6",
-    "@nestjs/config": "^1.0.0",
-    "@nestjs/core": "8.0.6",
-    "@nestjs/elasticsearch": "8.0.0",
-    "@nestjs/event-emitter": "^1.0.0",
-    "@nestjs/jwt": "8.0.0",
-    "@nestjs/passport": "8.0.1",
-    "@nestjs/platform-express": "8.0.6",
-    "@nestjs/schematics": "8.0.2",
-    "@nestjs/testing": "8.0.6",
-    "@semantic-release/exec": "^5.0.0",
-    "@semantic-release/git": "^9.0.0",
-    "@types/express": "^4.17.12",
-    "@types/faker": "^5.5.6",
-    "@types/jest": "^27.0.0",
-    "@types/multer": "^1.4.7",
-    "@types/passport-jwt": "^3.0.5",
-    "@types/supertest": "^2.0.11",
-    "@typescript-eslint/eslint-plugin": "4.29.2",
-    "@typescript-eslint/parser": "4.29.2",
-    "eslint": "7.32.0",
-    "eslint-plugin-import": "^2.23.4",
-    "faker": "^5.5.3",
-    "firebase": "^8.6.8",
-    "firebase-admin": "^9.9.0",
-    "husky": "^7.0.0",
-    "jest": "27.0.6",
-    "passport": "^0.4.1",
-    "passport-jwt": "^4.0.0",
-    "rimraf": "^3.0.2",
-    "rxjs": "^7.2.0",
-    "semantic-release": "^17.4.4",
-    "supertest": "^6.1.3",
-    "swagger-ui-express": "^4.1.5",
-    "ts-jest": "27.0.5",
-    "ts-loader": "^9.2.3",
-    "ts-node": "^10.0.0",
-    "tsconfig-paths": "^3.9.0",
-    "typescript": "^4.3.4"
-  },
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/sk-merkaly/api.git"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "engines": {
-    "node": "^14"
-  }
-}
+{
+  "name": "@merkaly/api",
+  "version": "0.1.9-1",
+  "description": "NestJS Backend ApiRest Service",
+  "author": "Randy Tellez Galan <kronhyx@gmail.com>",
+  "license": "UNLICENSED",
+  "main": "src",
+  "scripts": {
+    "prebuild": "yarn run clean",
+    "prepack": "yarn build",
+    "build": "nest build",
+    "clean": "tsc -b --clean",
+    "start": "nest start --preserveWatchOutput",
+    "dev": "yarn run clean && npm start -- --watch",
+    "start:debug": "yarn dev -- --debug ",
+    "start:prod": "node dist/index.js",
+    "lint": "eslint \"{src,apps,libs,test}/**/*.ts\" . ",
+    "test": "jest",
+    "test:watch": "yarn test -- --watch",
+    "test:cov": "yarn test -- --coverage",
+    "test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand",
+    "semantic-release": "yarn run build:package && semantic-release"
+  },
+  "dependencies": {
+    "@nestjs/axios": "^0.0.5",
+    "@nestjs/swagger": "^5.0.9",
+    "@types/auth0": "^2.33.4",
+    "@types/node": "^17.0.2",
+    "auth0": "^2.35.0",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.13.1",
+    "fireorm": "^0.23.0",
+    "reflect-metadata": "^0.1.13"
+  },
+  "devDependencies": {
+    "@commitlint/config-conventional": "^16.0.0",
+    "@elastic/elasticsearch": "^7.13.0",
+    "@nestjs/cli": "8.2.0",
+    "@nestjs/common": "8.2.6",
+    "@nestjs/config": "^1.0.0",
+    "@nestjs/core": "8.2.6",
+    "@nestjs/elasticsearch": "8.0.0",
+    "@nestjs/event-emitter": "^1.0.0",
+    "@nestjs/jwt": "8.0.0",
+    "@nestjs/passport": "8.1.0",
+    "@nestjs/platform-express": "8.2.6",
+    "@nestjs/schematics": "8.0.5",
+    "@nestjs/testing": "8.2.6",
+    "@semantic-release/exec": "^6.0.1",
+    "@semantic-release/git": "^10.0.0",
+    "@types/express": "^4.17.12",
+    "@types/faker": "^5.5.9",
+    "@types/jest": "^27.0.0",
+    "@types/multer": "^1.4.7",
+    "@types/passport-jwt": "^3.0.5",
+    "@types/supertest": "^2.0.11",
+    "@typescript-eslint/eslint-plugin": "4.33.0",
+    "@typescript-eslint/parser": "4.33.0",
+    "commitlint": "^16.1.0",
+    "eslint": "7.32.0",
+    "eslint-plugin-import": "^2.23.4",
+    "faker": "^5.5.3",
+    "firebase": "^9.0.0",
+    "firebase-admin": "^10.0.2",
+    "husky": "^7.0.0",
+    "jest": "27.4.7",
+    "passport": "^0.4.1",
+    "passport-jwt": "^4.0.0",
+    "rimraf": "^3.0.2",
+    "rxjs": "^7.2.0",
+    "semantic-release": "^18.0.0",
+    "supertest": "^6.1.3",
+    "swagger-ui-express": "^4.1.5",
+    "ts-jest": "27.1.3",
+    "ts-loader": "^9.2.3",
+    "ts-node": "^10.0.0",
+    "tsconfig-paths": "^3.9.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/sk-merkaly/api.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": "^14"
+  }
+}

package/src/account/account.module.d.ts

@@ -0,0 +1,4 @@
+import { ModuleMetadata } from '@nestjs/common';
+export declare const metadata: ModuleMetadata;
+export default class AccountModule {
+}

package/src/account/account.module.ts

@@ -0,0 +1,15 @@
+import { Module, ModuleMetadata } from '@nestjs/common'
+import OrganizationModule from './organizations/organization.module'
+import RoleModule from './roles/role.module'
+import UserModule from './users/user.module'
+
+export const metadata: ModuleMetadata = {
+  imports: [UserModule, OrganizationModule, RoleModule],
+  controllers: [],
+  providers: [],
+  exports: []
+}
+
+@Module(metadata)
+export default class AccountModule {
+}

package/src/account/auth/auth.controller.d.ts

@@ -0,0 +1,10 @@
+import { TokenResponse, User as Auth0User } from 'auth0';
+import UserRepository from '../users/user.repository';
+import AuthRepository from './auth.repository';
+import { LoginValidator } from './auth.validator';
+export default class AuthController {
+    protected readonly authRepository: AuthRepository;
+    protected readonly userRepository: UserRepository;
+    login({ username, password }: LoginValidator): Promise<Partial<TokenResponse>>;
+    user(user: string): Promise<Auth0User>;
+}

package/src/account/auth/auth.controller.ts

@@ -0,0 +1,38 @@
+import { Body, Controller, Get, HttpException, Inject, Post } from '@nestjs/common'
+import { ApiTags } from '@nestjs/swagger'
+import { PasswordGrantOptions, TokenResponse, User as Auth0User } from 'auth0'
+import UserRepository from '../users/user.repository'
+import { Public, User } from './auth.decorator'
+import AuthRepository from './auth.repository'
+import { LoginValidator } from './auth.validator'
+
+@Controller()
+@ApiTags(AuthController.name)
+export default class AuthController {
+  @Inject() protected readonly authRepository: AuthRepository
+  @Inject() protected readonly userRepository: UserRepository
+
+  @Public()
+  @Post('/login')
+  async login (@Body() { username, password }: LoginValidator): Promise<Partial<TokenResponse>> {
+    const options: PasswordGrantOptions = {
+      username,
+      password,
+      scope: 'openid'
+    }
+
+    return this.authRepository.client.passwordGrant(options)
+      .then(({ access_token, refresh_token, expires_in }) => ({ access_token, refresh_token, expires_in }))
+      .catch(({ message, statusCode, originalError }) => {
+        const description = originalError.response.res.statusMessage
+
+        throw new HttpException({ ...JSON.parse(message), message: description }, statusCode)
+      })
+  }
+
+  @Get('/user')
+  async user (@User() user: string): Promise<Auth0User> {
+    return this.userRepository.read(user)
+  }
+
+}

package/src/account/auth/auth.decorator.d.ts

@@ -0,0 +1,4 @@
+import { CustomDecorator } from '@nestjs/common';
+export declare const IS_PUBLIC_KEY = "isPublic";
+export declare const Public: () => CustomDecorator;
+export declare const User: (...dataOrPipes: unknown[]) => ParameterDecorator;

package/src/account/auth/auth.decorator.ts

@@ -0,0 +1,10 @@
+import { createParamDecorator, CustomDecorator, ExecutionContext, SetMetadata } from '@nestjs/common'
+
+export const IS_PUBLIC_KEY = 'isPublic'
+export const Public: () => CustomDecorator = () => SetMetadata(IS_PUBLIC_KEY, true)
+
+export const User = createParamDecorator((data: unknown, ctx: ExecutionContext): string => {
+  const request = ctx.switchToHttp().getRequest()
+
+  return request.user
+})

package/src/account/auth/auth.guard.d.ts

@@ -0,0 +1,15 @@
+import { ExecutionContext } from '@nestjs/common';
+import AuthRepository from './auth.repository';
+declare module 'express' {
+    interface Request {
+        user?: string;
+    }
+}
+declare const AuthGuard_base: import("@nestjs/passport").Type<import("@nestjs/passport").IAuthGuard>;
+export default class AuthGuard extends AuthGuard_base {
+    protected readonly authRepository: AuthRepository;
+    private reflector;
+    canActivate(context: ExecutionContext): Promise<any>;
+    handleRequest(err: Record<string, unknown>, user: string): any;
+}
+export {};

package/src/account/auth/auth.guard.ts

@@ -0,0 +1,41 @@
+import { ExecutionContext, Inject, Injectable, UnauthorizedException } from '@nestjs/common'
+import { Reflector } from '@nestjs/core'
+import { AuthGuard as JwtGuard } from '@nestjs/passport'
+import { IS_PUBLIC_KEY } from './auth.decorator'
+import AuthRepository from './auth.repository'
+
+declare module 'express' {
+  interface Request {
+    user?: string
+  }
+}
+
+@Injectable()
+export default class AuthGuard extends JwtGuard('jwt') {
+
+  @Inject() protected readonly authRepository: AuthRepository
+  @Inject() private reflector: Reflector
+
+  async canActivate (context: ExecutionContext): Promise<any> {
+    const isPublic = this.reflector.getAllAndOverride<boolean>(IS_PUBLIC_KEY, [
+      context.getHandler(),
+      context.getClass()
+    ])
+
+    if (isPublic) {
+      return true
+    }
+
+    return super.canActivate(context)
+  }
+
+  handleRequest (err: Record<string, unknown>, user: string): any {
+
+    if (err || !user) {
+      throw err || new UnauthorizedException()
+    }
+
+    return user
+  }
+
+}

package/src/account/auth/auth.module.d.ts

@@ -0,0 +1,4 @@
+import { ModuleMetadata } from '@nestjs/common';
+export declare const metadata: ModuleMetadata;
+export default class AuthModule {
+}

package/src/account/auth/auth.module.ts

@@ -0,0 +1,26 @@
+import { Global, Module, ModuleMetadata } from '@nestjs/common'
+import { ElasticsearchModule } from '@nestjs/elasticsearch'
+import { JwtModule } from '@nestjs/jwt'
+import { PassportModule } from '@nestjs/passport'
+import AppConfig from '../../app.config'
+import UserRepository from '../users/user.repository'
+import AuthController from './auth.controller'
+import AuthGuard from './auth.guard'
+import AuthRepository from './auth.repository'
+import AuthStrategy from './auth.strategy'
+
+export const metadata: ModuleMetadata = {
+  imports: [
+    PassportModule.register({ session: true }),
+    JwtModule.register({ signOptions: { expiresIn: '60m' } }),
+    ElasticsearchModule.register(AppConfig.elasticsearch)
+  ],
+  controllers: [AuthController],
+  providers: [AuthRepository, AuthStrategy, AuthRepository, AuthGuard, UserRepository],
+  exports: [AuthRepository, ElasticsearchModule]
+}
+
+@Global()
+@Module(metadata)
+export default class AuthModule {
+}

package/src/account/auth/auth.repository.d.ts

@@ -0,0 +1,6 @@
+import { AuthenticationClient, ManagementClient } from 'auth0';
+export default class AuthRepository {
+    private jwtService;
+    get client(): AuthenticationClient;
+    $management(): Promise<ManagementClient>;
+}

package/src/account/auth/auth.repository.ts

@@ -0,0 +1,39 @@
+import { Inject, Injectable } from '@nestjs/common'
+import { JwtService } from '@nestjs/jwt'
+import { AuthenticationClient, ClientCredentialsGrantOptions, ManagementClient } from 'auth0'
+import axios from 'axios'
+import AppConfig from '../../app.config'
+
+@Injectable()
+export default class AuthRepository {
+  @Inject() private jwtService: JwtService
+
+  get client (): AuthenticationClient {
+    return new AuthenticationClient({
+      domain: AppConfig.auth0.domain,
+      clientId: AppConfig.auth0.client,
+      clientSecret: AppConfig.auth0.secret
+    })
+  }
+
+  $management (): Promise<ManagementClient> {
+    const options: ClientCredentialsGrantOptions = {
+      audience: AppConfig.auth0.audience
+    }
+
+    return this.client.clientCredentialsGrant(options)
+      .then(({ access_token }) => {
+        axios.defaults.baseURL = AppConfig.auth0.audience.replace(/^\/|\/$/g, '')
+        axios.defaults.headers['authorization'] = `Bearer ${access_token}`
+
+        const options = {
+          domain: AppConfig.auth0.domain,
+          clientId: AppConfig.auth0.client,
+          clientSecret: AppConfig.auth0.secret,
+          token: access_token
+        }
+
+        return new ManagementClient(options)
+      })
+  }
+}

package/src/account/auth/auth.strategy.d.ts

@@ -0,0 +1,17 @@
+import { Strategy, StrategyOptions } from 'passport-jwt';
+export declare const strategy: StrategyOptions;
+interface DecodedUser {
+    iss: string;
+    sub: string;
+    aud: string[];
+    iat: number;
+    exp: number;
+    azp: string;
+    scope: string;
+}
+declare const AuthStrategy_base: new (...args: any[]) => Strategy;
+export default class AuthStrategy extends AuthStrategy_base {
+    constructor();
+    validate({ sub }: DecodedUser): string;
+}
+export {};

package/src/account/auth/auth.strategy.ts

@@ -0,0 +1,31 @@
+import { Injectable } from '@nestjs/common'
+import { PassportStrategy } from '@nestjs/passport'
+import { readFileSync } from 'fs'
+import { ExtractJwt, Strategy, StrategyOptions } from 'passport-jwt'
+
+export const strategy: StrategyOptions = {
+  jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+  ignoreExpiration: false,
+  secretOrKey: process.env.AUTH_CERTIFICATE || readFileSync('authCertificate.pem')
+}
+
+interface DecodedUser {
+  iss: string,
+  sub: string,
+  aud: string[],
+  iat: number,
+  exp: number,
+  azp: string,
+  scope: string
+}
+
+@Injectable()
+export default class AuthStrategy extends PassportStrategy(Strategy) {
+  constructor () {
+    super(strategy)
+  }
+
+  validate ({ sub }: DecodedUser): string {
+    return sub
+  }
+}

package/src/account/auth/auth.validator.d.ts

@@ -0,0 +1,4 @@
+export declare class LoginValidator {
+    username: string;
+    password: string;
+}