@nest-arch/tui 0.2.8 → 0.4.3

package/dist/templates/base/src/libs/middlewares/auth.trpc.middleware.ts.hbs

@@ -1,3 +1,43 @@
+{{#if (eq auth "passport")}}
+import { Injectable } from "@nestjs/common";
+import { JwtService } from "@nestjs/jwt";
+import { TRPCError } from "@trpc/server";
+import { MiddlewareOptions, MiddlewareResponse, TRPCMiddleware } from "nestjs-trpc";
+import type { ContextOptions } from "nestjs-trpc";
+
+import { env } from "../../config/env.js";
+import { AuthService } from "../../auth/auth.service.js";
+
+@Injectable()
+export class AuthTRPCMiddleware implements TRPCMiddleware {
+  constructor(private readonly auth: AuthService, private readonly jwt: JwtService) {}
+
+  async use(opts: MiddlewareOptions<ContextOptions>): Promise<MiddlewareResponse> {
+    const header = opts.ctx.req.headers.authorization;
+    const token = header?.startsWith("Bearer ") ? header.slice("Bearer ".length) : undefined;
+    if (!token) throw new TRPCError({ code: "UNAUTHORIZED", message: "Missing bearer token." });
+    try {
+      const payload = await this.jwt.verifyAsync<Record<string, unknown>>(token, {
+        algorithms: ["HS256"], audience: env.JWT_AUDIENCE, issuer: env.JWT_ISSUER,
+      });
+      {{#if (and usePrisma (not hasMongodb))}}
+      const user = await this.auth.validate(payload);
+      {{else}}
+      const user = await this.auth.validateUser(payload.userId as string);
+      {{/if}}
+      if (!user) throw new TRPCError({ code: "UNAUTHORIZED", message: "Invalid bearer token." });
+      return opts.next({
+        ctx: {
+          ...opts.ctx,
+          session: { user },
+        },
+      });
+    } catch {
+      throw new TRPCError({ code: "UNAUTHORIZED", message: "Invalid bearer token." });
+    }
+  }
+}
+{{else}}
 import { Injectable } from "@nestjs/common";
 import { AuthService } from "@thallesp/nestjs-better-auth";
 import { TRPCError } from "@trpc/server";
@@ -8,9 +48,15 @@ import {
 } from "nestjs-trpc";
 import type { ContextOptions } from "nestjs-trpc";
 
+{{#if (eq auth "better-auth:stateless")}}
+import { auth } from "../../auth/auth.js";
+
+type AppAuth = typeof auth;
+{{else}}
 import { createAuth } from "../../auth/auth.js";
 
 type AppAuth = ReturnType<typeof createAuth>;
+{{/if}}
 
 @Injectable()
 export class AuthTRPCMiddleware implements TRPCMiddleware {
@@ -40,3 +86,4 @@ export class AuthTRPCMiddleware implements TRPCMiddleware {
     });
   }
 }
+{{/if}}

package/dist/templates/base/src/libs/middlewares/rate-limit.trpc.middleware.ts.hbs

@@ -0,0 +1,43 @@
+{{#if hasRateLimiting}}
+import { Inject, Injectable } from "@nestjs/common";
+import { ThrottlerStorage, type ThrottlerStorage as ThrottlerStorageService } from "@nestjs/throttler";
+import { TRPCError } from "@trpc/server";
+import {
+  MiddlewareOptions,
+  MiddlewareResponse,
+  TRPCMiddleware,
+} from "nestjs-trpc";
+import type { ContextOptions } from "nestjs-trpc";
+
+@Injectable()
+export class RateLimitTRPCMiddleware implements TRPCMiddleware {
+  constructor(
+    @Inject(ThrottlerStorage)
+    private readonly storage: ThrottlerStorageService
+  ) {}
+
+  async use(
+    opts: MiddlewareOptions<ContextOptions>
+  ): Promise<MiddlewareResponse> {
+    const request = opts.ctx.req as {
+      ip?: string;
+      socket?: { remoteAddress?: string };
+    };
+    const clientIp = request.ip ?? request.socket?.remoteAddress ?? "unknown";
+    const result = await this.storage.increment(
+      `trpc:${clientIp}`,
+      60_000,
+      60,
+      60_000,
+      "trpc"
+    );
+    if (result.isBlocked) {
+      throw new TRPCError({
+        code: "TOO_MANY_REQUESTS",
+        message: "Too many requests",
+      });
+    }
+    return opts.next();
+  }
+}
+{{/if}}

package/dist/templates/base/src/libs/trpc/error.handler.ts.hbs

@@ -3,7 +3,7 @@ import { OnErrorOptions, TRPCErrorHandler } from "nestjs-trpc";
 
 @Injectable()
 export class AppErrorHandler implements TRPCErrorHandler {
-  private logger = new Logger("TRPC Router");
+  private readonly logger = new Logger("TRPC Router");
   onError(opts: OnErrorOptions): void {
     this.logger.error(`[${opts.type}] ${opts.path}: ${opts.error.message}`);
   }

package/dist/templates/base/src/libs/trpc/inner.context.ts.hbs

@@ -1,7 +1,10 @@
 import { ContextOptions } from "nestjs-trpc";
-
-import { auth } from "../../auth/auth.js";
+{{#if (eq auth "better-auth")}}
+import type { UserSession } from "../../auth/auth.js";
+{{else if (eq auth "passport")}}
+import type { AuthService } from "../../auth/auth.service.js";
+{{/if}}
 
 export type InnerContext = {
-  session: Awaited<ReturnType<typeof auth.api.getSession>>;
+  session?: {{#if (eq auth "better-auth")}}UserSession{{else if (eq auth "passport")}}{ user: NonNullable<Awaited<ReturnType<AuthService[{{#if (and usePrisma (not hasMongodb))}}"validate"{{else}}"validateUser"{{/if}}]>>> }{{else}}unknown{{/if}};
 } & ContextOptions;

package/dist/templates/base/src/main.ts.hbs

@@ -2,10 +2,18 @@ import { NestFactory } from "@nestjs/core";
 {{#if (eq httpProvider "fastify")}}
 import { FastifyAdapter, NestFastifyApplication } from "@nestjs/platform-fastify";
 {{/if}}
+{{#if (includes addons "nestjs-zod")}}
+import { Logger } from "@nestjs/common";
+import { ZodValidationPipe } from "nestjs-zod";
+{{else}}
 import { Logger, StandardSchemaValidationPipe } from "@nestjs/common";
+{{/if}}
 
 import { AppModule } from "./app.module.js";
 import { env } from "./config/env.js";
+{{#if isPrisma8}}
+import { connectDatabase } from "./prisma/db.js";
+{{/if}}
 {{#if swagger}}
 import { createDocs } from "./docs/create-docs.js";
 {{/if}}
@@ -16,18 +24,34 @@ import { apiReference } from "@scalar/nestjs-api-reference";
 import { SwaggerModule } from "@nestjs/swagger";
 {{/if}}
 {{#if (and swagger (or (eq auth "better-auth") (eq auth "better-auth:stateless") hasBetterAuthWithoutRest))}}
-import { auth } from "./auth/auth.js";
+import { AuthService } from "@thallesp/nestjs-better-auth";
 {{/if}}
 
 async function bootstrap() {
-  const app = await NestFactory.create{{#if (eq httpProvider "fastify")}}<NestFastifyApplication>(AppModule, new FastifyAdapter(){{else}}(AppModule{{/if}}{{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless") hasBetterAuthWithoutRest)}}, { bodyParser: false }{{/if}});
+  const trustedProxyIps = env.TRUSTED_PROXY_IPS
+    .split(",")
+    .map((ip) => ip.trim())
+    .filter(Boolean);
+  {{#if isPrisma8}}
+  await connectDatabase();
+  {{/if}}
+  const app = await NestFactory.create{{#if (eq httpProvider "fastify")}}<NestFastifyApplication>(AppModule, new FastifyAdapter({ trustProxy: trustedProxyIps }){{else}}(AppModule{{/if}}{{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless") hasBetterAuthWithoutRest)}}, { bodyParser: false }{{/if}});
+  {{#unless (eq httpProvider "fastify")}}
+  if (trustedProxyIps.length > 0) {
+    app.getHttpAdapter().getInstance().set("trust proxy", trustedProxyIps);
+  }
+  {{/unless}}
   app.enableCors({
     origin: env.CORS_ORIGIN,
   });
   {{#if hasRest}}
   app.setGlobalPrefix("api");
   {{/if}}
+{{#if (includes addons "nestjs-zod")}}
+  app.useGlobalPipes(new ZodValidationPipe());
+{{else}}
   app.useGlobalPipes(new StandardSchemaValidationPipe());
+{{/if}}
   app.enableShutdownHooks();
   {{#if swagger}}
   const docsPath = "/docs";
@@ -41,7 +65,7 @@ async function bootstrap() {
         integrations: {
           {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless") hasBetterAuthWithoutRest)}}
           betterAuth: {
-            auth,
+            auth: app.get(AuthService).instance,
             pathPrefix: "/api/auth",
           },
           {{/if}}
@@ -69,7 +93,7 @@ async function bootstrap() {
     integrations: {
       {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless") hasBetterAuthWithoutRest)}}
       betterAuth: {
-        auth,
+        auth: app.get(AuthService).instance,
         pathPrefix: "/api/auth",
       },
       {{/if}}
@@ -86,15 +110,15 @@ async function bootstrap() {
   });
   SwaggerModule.setup(docsPath, app, document);
   {{/if}}
-  Logger.log(`Swagger documentation available at http://localhost:${env.PORT ?? 3000}${docsPath}`, "SwaggerDocs");
+  Logger.log(`Swagger documentation available at http://localhost:${env.PORT}${docsPath}`, "SwaggerDocs");
   {{/if}}
-  await app.listen(env.PORT ?? 3000);
+  await app.listen(env.PORT);
   {{#if hasRest}}
-  Logger.log(`Started backend server on http://localhost:${env.PORT ?? 3000}/api`, "Main");
+  Logger.log(`Started backend server on http://localhost:${env.PORT}/api`, "Main");
   {{else if hasTrpc}}
-  Logger.log(`Started trpc server on http://localhost:${env.PORT ?? 3000}/trpc`, "Main");
+  Logger.log(`Started trpc server on http://localhost:${env.PORT}/trpc`, "Main");
   {{else}}
-  Logger.log(`Started server on http://localhost:${env.PORT ?? 3000}`, "Main");
+  Logger.log(`Started server on http://localhost:${env.PORT}`, "Main");
   {{/if}}
 }
-await bootstrap();
+await bootstrap();

package/dist/templates/base/src/modules/users/entities/user.entity.ts.hbs

@@ -0,0 +1,22 @@
+import { Column, Entity, PrimaryGeneratedColumn } from "typeorm";
+
+@Entity("users")
+export class UserEntity {
+  @PrimaryGeneratedColumn("uuid")
+  id: string;
+
+  @Column({ type: "varchar", unique: true })
+  email: string;
+
+  @Column({ type: "varchar", nullable: true })
+  firstname: string | null;
+
+  @Column({ type: "varchar", nullable: true })
+  lastname: string | null;
+
+  @Column({ type: "varchar" })
+  password: string;
+
+  @Column({ type: "varchar", default: "USER" })
+  role: string;
+}