@nauth-toolkit/nestjs 0.1.13 → 0.1.17

package/dist/services/csrf.service.js

@@ -16,28 +16,89 @@ exports.CsrfService = void 0;
 const common_1 = require("@nestjs/common");
 const crypto_1 = require("crypto");
 const core_1 = require("@nauth-toolkit/core");
+/**
+ * CSRF Service
+ *
+ * Generates and manages CSRF tokens for cookie-based token delivery.
+ * CSRF protection prevents Cross-Site Request Forgery attacks when tokens
+ * are stored in httpOnly cookies.
+ *
+ * @example
+ * ```typescript
+ * const csrfService = new CsrfService(config);
+ * const token = csrfService.generateToken();
+ * const cookieOptions = csrfService.getCookieOptions();
+ * ```
+ */
 let CsrfService = class CsrfService {
     config;
     constructor(config) {
         this.config = config;
     }
+    /**
+     * Generate a cryptographically secure CSRF token
+     *
+     * @returns CSRF token as hexadecimal string
+     *
+     * @example
+     * ```typescript
+     * const token = csrfService.generateToken();
+     * // Returns: 'a1b2c3d4e5f6...' (length depends on config.security.csrf.tokenLength)
+     * ```
+     */
     generateToken() {
         const tokenLength = this.config.security?.csrf?.tokenLength || 32;
         return (0, crypto_1.randomBytes)(tokenLength).toString('hex');
     }
+    /**
+     * Get CSRF cookie options from configuration
+     *
+     * @returns Cookie options object with defaults
+     *
+     * @example
+     * ```typescript
+     * const options = csrfService.getCookieOptions();
+     * res.cookie(csrfService.getCookieName(), token, options);
+     * ```
+     */
     getCookieOptions() {
         const config = this.config.security?.csrf?.cookieOptions;
         return {
-            httpOnly: false,
+            httpOnly: false, // Fixed: CSRF token must be readable by JavaScript to send in header
             secure: config?.secure ?? true,
             sameSite: config?.sameSite ?? 'strict',
             domain: config?.domain,
             path: config?.path ?? '/',
         };
     }
+    /**
+     * Get CSRF cookie name from configuration
+     *
+     * If explicitly configured via security.csrf.cookieName, uses that value.
+     * Otherwise, uses the prefix: `${prefix}csrf_token` (default: 'nauth_csrf_token')
+     *
+     * @returns Cookie name (default: 'nauth_csrf_token' with default prefix)
+     *
+     * @example
+     * ```typescript
+     * const cookieName = csrfService.getCookieName();
+     * // Returns: 'nauth_csrf_token' (or configured value)
+     * ```
+     */
     getCookieName() {
         return (0, core_1.getCsrfTokenCookieName)(this.config);
     }
+    /**
+     * Get CSRF header name from configuration
+     *
+     * @returns Header name (default: 'x-csrf-token')
+     *
+     * @example
+     * ```typescript
+     * const headerName = csrfService.getHeaderName();
+     * // Returns: 'x-csrf-token' (or configured value)
+     * ```
+     */
     getHeaderName() {
         return this.config.security?.csrf?.headerName || 'x-csrf-token';
     }

package/dist/services/csrf.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"csrf.service.js","sourceRoot":"","sources":["../../src/services/csrf.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,mCAAqC;AACrC,8CAA0E;AAiBnE,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGH;IAFnB,YAEmB,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IACnC,CAAC;IAaJ,aAAa;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;QAClE,OAAO,IAAA,oBAAW,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAaD,gBAAgB;QAOd,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,CAAC;QACzD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI;YAC9B,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,QAAQ;YACtC,MAAM,EAAE,MAAM,EAAE,MAAM;YACtB,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,GAAG;SAC1B,CAAC;IACJ,CAAC;IAgBD,aAAa;QACX,OAAO,IAAA,6BAAsB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAaD,aAAa;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,IAAI,cAAc,CAAC;IAClE,CAAC;CACF,CAAA;AAlFY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,cAAc,CAAC,CAAA;;GAFd,WAAW,CAkFvB"}
+{"version":3,"file":"csrf.service.js","sourceRoot":"","sources":["../../src/services/csrf.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,mCAAqC;AACrC,8CAA0E;AAE1E;;;;;;;;;;;;;GAaG;AAEI,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGH;IAFnB,YAEmB,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IACnC,CAAC;IAEJ;;;;;;;;;;OAUG;IACH,aAAa;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;QAClE,OAAO,IAAA,oBAAW,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;;;;OAUG;IACH,gBAAgB;QAOd,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,CAAC;QACzD,OAAO;YACL,QAAQ,EAAE,KAAK,EAAE,qEAAqE;YACtF,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI;YAC9B,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,QAAQ;YACtC,MAAM,EAAE,MAAM,EAAE,MAAM;YACtB,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,GAAG;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,aAAa;QACX,OAAO,IAAA,6BAAsB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;OAUG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,IAAI,cAAc,CAAC;IAClE,CAAC;CACF,CAAA;AAlFY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,cAAc,CAAC,CAAA;;GAFd,WAAW,CAkFvB"}

package/dist/services/migrations-bootstrap.service.d.ts

@@ -1,4 +1,10 @@
 import type { Provider } from '@nestjs/common';
 export declare const NAUTH_MIGRATIONS_BOOTSTRAP = "NAUTH_MIGRATIONS_BOOTSTRAP";
+/**
+ * NestJS provider that auto-runs nauth-toolkit migrations on module init.
+ *
+ * @remarks
+ * This ensures NestJS apps get the same "zero bootstrap burden" migration behavior as `NAuth.create()`.
+ */
 export declare const nauthMigrationsBootstrapProvider: Provider;
 //# sourceMappingURL=migrations-bootstrap.service.d.ts.map

package/dist/services/migrations-bootstrap.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrations-bootstrap.service.d.ts","sourceRoot":"","sources":["../../src/services/migrations-bootstrap.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAI/C,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AAqBvE,eAAO,MAAM,gCAAgC,EAAE,QAkC9C,CAAC"}
+{"version":3,"file":"migrations-bootstrap.service.d.ts","sourceRoot":"","sources":["../../src/services/migrations-bootstrap.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAI/C,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AAevE;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,EAAE,QAkC9C,CAAC"}

package/dist/services/migrations-bootstrap.service.js

@@ -44,6 +44,12 @@ function getAdapterPackageName(dataSource) {
         return '@nauth-toolkit/database-typeorm-mysql';
     return null;
 }
+/**
+ * NestJS provider that auto-runs nauth-toolkit migrations on module init.
+ *
+ * @remarks
+ * This ensures NestJS apps get the same "zero bootstrap burden" migration behavior as `NAuth.create()`.
+ */
 exports.nauthMigrationsBootstrapProvider = {
     provide: exports.NAUTH_MIGRATIONS_BOOTSTRAP,
     useFactory: async (config, logger, dataSource) => {

package/dist/services/migrations-bootstrap.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrations-bootstrap.service.js","sourceRoot":"","sources":["../../src/services/migrations-bootstrap.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,qCAAqC;AAExB,QAAA,0BAA0B,GAAG,4BAA4B,CAAC;AAMvE,SAAS,qBAAqB,CAC5B,UAAsB;IAEtB,MAAM,IAAI,GAAI,UAAU,CAAC,OAA0C,EAAE,IAAI,CAAC;IAC1E,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,0CAA0C,CAAC;IAC3E,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,uCAAuC,CAAC;IAC3F,OAAO,IAAI,CAAC;AACd,CAAC;AAQY,QAAA,gCAAgC,GAAa;IACxD,OAAO,EAAE,kCAA0B;IACnC,UAAU,EAAE,KAAK,EAAE,MAAmB,EAAE,MAAmB,EAAE,UAAsB,EAAE,EAAE;QACrF,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;YAC/B,MAAM,EAAE,IAAI,EAAE,CAAC,iEAAiE,CAAC,CAAC;YAClF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,EAAE,KAAK,EAAE,CACb,6EAA6E,MAAM,CAChF,UAAU,CAAC,OAA0C,EAAE,IAAI,CAC7D,EAAE,CACJ,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,QAA+B,CAAC;QACpC,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,yBAAa,kBAAkB,uCAAC,CAAqC,CAAC;QACpF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,oDAAoD,kBAAkB,KAAK,OAAO,EAAE,CAAC,CAAC;QACxG,CAAC;QAED,IAAI,OAAO,QAAQ,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,qCAAqC,kBAAkB,uCAAuC,CAAC,CAAC;QAClH,CAAC;QAED,MAAM,QAAQ,CAAC,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,CAAC,cAAc,EAAE,cAAc,EAAE,oBAAU,CAAC;CACrD,CAAC"}
+{"version":3,"file":"migrations-bootstrap.service.js","sourceRoot":"","sources":["../../src/services/migrations-bootstrap.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,qCAAqC;AAExB,QAAA,0BAA0B,GAAG,4BAA4B,CAAC;AAMvE,SAAS,qBAAqB,CAC5B,UAAsB;IAEtB,MAAM,IAAI,GAAI,UAAU,CAAC,OAA0C,EAAE,IAAI,CAAC;IAC1E,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,0CAA0C,CAAC;IAC3E,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,uCAAuC,CAAC;IAC3F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACU,QAAA,gCAAgC,GAAa;IACxD,OAAO,EAAE,kCAA0B;IACnC,UAAU,EAAE,KAAK,EAAE,MAAmB,EAAE,MAAmB,EAAE,UAAsB,EAAE,EAAE;QACrF,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;YAC/B,MAAM,EAAE,IAAI,EAAE,CAAC,iEAAiE,CAAC,CAAC;YAClF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,EAAE,KAAK,EAAE,CACb,6EAA6E,MAAM,CAChF,UAAU,CAAC,OAA0C,EAAE,IAAI,CAC7D,EAAE,CACJ,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,QAA+B,CAAC;QACpC,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,yBAAa,kBAAkB,uCAAC,CAAqC,CAAC;QACpF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,oDAAoD,kBAAkB,KAAK,OAAO,EAAE,CAAC,CAAC;QACxG,CAAC;QAED,IAAI,OAAO,QAAQ,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,qCAAqC,kBAAkB,uCAAuC,CAAC,CAAC;QAClH,CAAC;QAED,MAAM,QAAQ,CAAC,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,CAAC,cAAc,EAAE,cAAc,EAAE,oBAAU,CAAC;CACrD,CAAC"}

package/package.json

@@ -1,9 +1,16 @@
 {
   "name": "@nauth-toolkit/nestjs",
-  "version": "0.1.13",
+  "version": "0.1.17",
   "description": "NestJS adapter for nauth-toolkit - Platform-specific integrations",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
   "scripts": {
     "build": "tsc -b",
     "test": "jest",
@@ -32,7 +39,7 @@
     "typeorm": "^0.3.0"
   },
   "dependencies": {
-    "@nauth-toolkit/core": "0.1.13"
+    "@nauth-toolkit/core": "0.1.17"
   },
   "devDependencies": {
     "@nestjs/common": "^11.1.8",
@@ -59,5 +66,10 @@
   ],
   "engines": {
     "node": ">=22.0.0"
+  },
+  "sideEffects": false,
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/noorix/nauth-toolkit"
   }
 }