@nest-arch/tui 0.4.0 → 0.4.3

package/dist/templates/monorepo/feature/graphql/src/graphql/resolvers/todo.resolver.ts.hbs

@@ -1,28 +1,39 @@
+{{#if hasDatabase}}
 {{#if (and hasAuth hasDatabase)}}
-import { UseGuards } from "@nestjs/common";
+import { BadRequestException, NotFoundException, UseGuards } from "@nestjs/common";
+{{else}}
+import { BadRequestException, NotFoundException } from "@nestjs/common";
 {{/if}}
-import { Args, Mutation, Query, Resolver } from "@nestjs/graphql";
 {{#if (and hasAuth hasDatabase)}}
 import { UserEntity } from "../../auth/decorators/index.js";
 import { GqlAuthGuard } from "../../auth/guards/gql-auth.guard.js";
 {{/if}}
-import { DbService } from "@repo/db";
-import { CreateTodoInput } from "../dto/create-todo.input.js";
-import { UpdateTodoInput } from "../dto/update-todo.input.js";
+import { Args, Mutation, Query, Resolver } from "@nestjs/graphql";
 {{#if useTypeorm}}
-import { GraphRelationBuilder } from "typeorm-relations-graphql";
 import { GraphQLResolveInfo } from "graphql";
+import { GraphRelationBuilder } from "typeorm-relations-graphql";
+import { Todo as TodoEntity } from "@repo/db/src/entities/todo.entity.js";
 {{/if}}
 {{#if useDrizzle}}
+import { and, eq } from "drizzle-orm";
 import * as schema from "@repo/db/src/orm/drizzle/schema.js";
 {{/if}}
-{{#if (and hasAuth hasDatabase)}}
+import { DbService } from "@repo/db";
+import { CreateTodoInput } from "../dto/create-todo.input.js";
+import { UpdateTodoInput } from "../dto/update-todo.input.js";
+import { Todo } from "../models/todo.model.js";
+{{else}}
+import { Args, Mutation, Query, Resolver } from "@nestjs/graphql";
+import { CreateTodoInput } from "../dto/create-todo.input.js";
+import { UpdateTodoInput } from "../dto/update-todo.input.js";
 import { Todo } from "../models/todo.model.js";
 {{/if}}
 
 @Resolver(() => Todo)
 export class TodoResolver {
+{{#if hasDatabase}}
   constructor(private readonly db: DbService) {}
+{{/if}}
 
   @Query(() => String)
   hello(): string {
@@ -30,93 +41,182 @@ export class TodoResolver {
   }{{#if hasDatabase}}
 
   @Query(() => [Todo])
-  todos({{#if useTypeorm}}info: GraphQLResolveInfo{{/if}}) {
+  {{#if hasAuth}}
+  @UseGuards(GqlAuthGuard)
+  {{/if}}
+  todos({{#if useTypeorm}}info: GraphQLResolveInfo, {{/if}}{{#if hasAuth}}@UserEntity() user: { id: string }{{/if}}) {
     {{#if useTypeorm}}
-    const builder = new GraphRelationBuilder(this.db.getDataSource());
+    const builder = new GraphRelationBuilder(this.db.typeorm);
     const relations = builder.buildForQuery(Todo, info, "todos");
-    return this.db.getRepository(Todo).find({ relations });
+    {{#if hasAuth}}
+    return this.db.typeorm.getRepository(TodoEntity).find({ relations, where: { authorId: user.id } });
+    {{else}}
+    return this.db.typeorm.getRepository(TodoEntity).find({ relations });
+    {{/if}}
     {{else if isPrisma8}}
+    {{#if hasAuth}}
+    return ((this.db.prisma.orm.public as any).Todo).where({ authorId: user.id }).all();
+    {{else}}
     return ((this.db.prisma.orm.public as any).Todo).all();
+    {{/if}}
     {{else if usePrisma}}
+    {{#if hasAuth}}
+    return this.db.prisma.todo.findMany({ where: { authorId: user.id } });
+    {{else}}
     return this.db.prisma.todo.findMany();
+    {{/if}}
     {{else if useDrizzle}}
-    return this.db.select().from(schema.todos);
+    {{#if hasAuth}}
+    return this.db.drizzle.select().from(schema.todos).where(eq(schema.todos.authorId, user.id));
+    {{else}}
+    return this.db.drizzle.select().from(schema.todos);
+    {{/if}}
     {{else}}
     return [];
     {{/if}}
   }
 
+  {{#if hasAuth}}
   @UseGuards(GqlAuthGuard)
+  {{/if}}
   @Mutation(() => Todo)
-  createTodo(
+  async createTodo(
+    {{#if hasAuth}}
     @UserEntity() user: { id: string },
+    {{/if}}
     @Args("input") input: CreateTodoInput{{#if useTypeorm}}, info: GraphQLResolveInfo{{/if}}
   ) {
-    {{#if useTypeorm}}
-    const entity = this.db.getRepository(Todo).create(input);
-    const saved = await this.db.getRepository(Todo).save(entity);
-    const builder = new GraphRelationBuilder(this.db.getDataSource());
-    const relations = builder.buildForQuery(Todo, info, "createTodo");
-    return this.db.getRepository(Todo).findOneOrFail({
-      where: { id: saved.id },
-      relations,
-    });
-    {{else if isPrisma8}}
+    if (!input.title.trim()) throw new BadRequestException("Title must not be empty");
+    {{#if isPrisma8}}
+    {{#if hasAuth}}
     return ((this.db.prisma.orm.public as any).Todo).create({ ...input, authorId: user.id });
+    {{else}}
+    return ((this.db.prisma.orm.public as any).Todo).create(input);
+    {{/if}}
     {{else if usePrisma}}
-    return this.db.prisma.todo.create({
-      data: { ...input, authorId: user.id },
+    {{#if hasAuth}}
+    const todo = await this.db.prisma.todo.create({ data: { ...input, authorId: user.id } });
+    {{else}}
+    const todo = await this.db.prisma.todo.create({ data: input });
+    {{/if}}
+    return todo;
+    {{else if useTypeorm}}
+    {{#if hasAuth}}
+    const entity = this.db.typeorm.getRepository(TodoEntity).create({ ...input, authorId: user.id });
+    {{else}}
+    const entity = this.db.typeorm.getRepository(TodoEntity).create(input);
+    {{/if}}
+    const saved = await this.db.typeorm.getRepository(TodoEntity).save(entity);
+    const builder = new GraphRelationBuilder(this.db.typeorm);
+    const relations = builder.buildForQuery(Todo, info, "createTodo");
+    return this.db.typeorm.getRepository(TodoEntity).findOneOrFail({
+      relations,
+      where: { id: saved.id },
     });
     {{else if useDrizzle}}
-    const [todo] = await this.db.insert(schema.todos).values(input).returning();
+    {{#if hasAuth}}
+    const [todo] = await this.db.drizzle.insert(schema.todos).values({ ...input, authorId: user.id }).returning();
+    {{else}}
+    const [todo] = await this.db.drizzle.insert(schema.todos).values(input).returning();
+    {{/if}}
+    if (!todo) throw new NotFoundException("Todo not found");
     return todo;
     {{else}}
     return { id: "1", ...input };
     {{/if}}
   }
 
+  {{#if hasAuth}}
   @UseGuards(GqlAuthGuard)
+  {{/if}}
   @Mutation(() => Todo)
-  updateTodo(@Args("input") input: UpdateTodoInput{{#if useTypeorm}}, info: GraphQLResolveInfo{{/if}}) {
+  async updateTodo(
+    {{#if hasAuth}}
+    @UserEntity() user: { id: string },
+    {{/if}}
+    @Args("input") input: UpdateTodoInput{{#if useTypeorm}}, info: GraphQLResolveInfo{{/if}}
+  ) {
     const { id, ...data } = input;
-    {{#if useTypeorm}}
-    await this.db.getRepository(Todo).update(id, data);
-    const builder = new GraphRelationBuilder(this.db.getDataSource());
+    if (data.title !== undefined && !data.title.trim()) throw new BadRequestException("Title must not be empty");
+    {{#if isPrisma8}}
+    {{#if hasAuth}}
+    return ((this.db.prisma.orm.public as any).Todo).where({ authorId: user.id, id }).update(data);
+    {{else}}
+    return ((this.db.prisma.orm.public as any).Todo).where({ id }).update(data);
+    {{/if}}
+    {{else if usePrisma}}
+    {{#if hasAuth}}
+    const result = await this.db.prisma.todo.update({ data, where: { authorId: user.id, id } });
+    {{else}}
+    const result = await this.db.prisma.todo.update({ data, where: { id } });
+    {{/if}}
+    return result;
+    {{else if useTypeorm}}
+    {{#if hasAuth}}
+    const updateResult = await this.db.typeorm.getRepository(TodoEntity).update({ authorId: user.id, id }, data);
+    {{else}}
+    const updateResult = await this.db.typeorm.getRepository(TodoEntity).update(id, data);
+    {{/if}}
+    if ((updateResult.affected ?? 0) === 0) throw new NotFoundException("Todo not found");
+    const builder = new GraphRelationBuilder(this.db.typeorm);
     const relations = builder.buildForQuery(Todo, info, "updateTodo");
-    return this.db.getRepository(Todo).findOneOrFail({
-      where: { id },
+    return this.db.typeorm.getRepository(TodoEntity).findOneOrFail({
       relations,
+      where: { id },
     });
-    {{else if isPrisma8}}
-    return ((this.db.prisma.orm.public as any).Todo).where({ id }).update(data);
-    {{else if usePrisma}}
-    return this.db.prisma.todo.update({ where: { id }, data });
     {{else if useDrizzle}}
-    const [todo] = await this.db
-      .update(schema.todos)
-      .set(data)
-      .where(eq(schema.todos.id, id))
-      .returning();
+    {{#if hasAuth}}
+    const [todo] = await this.db.drizzle.update(schema.todos).set(data).where(and(eq(schema.todos.authorId, user.id), eq(schema.todos.id, Number(id)))).returning();
+    {{else}}
+    const [todo] = await this.db.drizzle.update(schema.todos).set(data).where(eq(schema.todos.id, Number(id))).returning();
+    {{/if}}
+    if (!todo) throw new NotFoundException("Todo not found");
     return todo;
     {{else}}
     return { id, ...data };
     {{/if}}
   }
 
+  {{#if hasAuth}}
   @UseGuards(GqlAuthGuard)
+  {{/if}}
   @Mutation(() => Boolean)
-  async deleteTodo(@Args("id") id: string): Promise<boolean> {
-    {{#if useTypeorm}}
-    const result = await this.db.getRepository(Todo).delete(id);
-    return (result.affected ?? 0) > 0;
-    {{else if isPrisma8}}
+  async deleteTodo(
+    {{#if hasAuth}}
+    @UserEntity() user: { id: string },
+    {{/if}}
+    @Args("id") id: string
+  ): Promise<boolean> {
+    {{#if isPrisma8}}
+    {{#if hasAuth}}
+    await ((this.db.prisma.orm.public as any).Todo).where({ authorId: user.id, id }).delete();
+    {{else}}
     await ((this.db.prisma.orm.public as any).Todo).where({ id }).delete();
+    {{/if}}
     return true;
     {{else if usePrisma}}
-    await this.db.prisma.todo.delete({ where: { id } });
+    {{#if hasAuth}}
+    const result = await this.db.prisma.todo.deleteMany({ where: { authorId: user.id, id } });
+    {{else}}
+    const result = await this.db.prisma.todo.deleteMany({ where: { id } });
+    {{/if}}
+    if (result.count === 0) throw new NotFoundException("Todo not found");
+    return true;
+    {{else if useTypeorm}}
+    {{#if hasAuth}}
+    const result = await this.db.typeorm.getRepository(TodoEntity).delete({ authorId: user.id, id });
+    {{else}}
+    const result = await this.db.typeorm.getRepository(TodoEntity).delete(id);
+    {{/if}}
+    if ((result.affected ?? 0) === 0) throw new NotFoundException("Todo not found");
     return true;
     {{else if useDrizzle}}
-    await this.db.delete(schema.todos).where(eq(schema.todos.id, id));
+    {{#if hasAuth}}
+    const deleted = await this.db.drizzle.delete(schema.todos).where(and(eq(schema.todos.authorId, user.id), eq(schema.todos.id, Number(id)))).returning();
+    {{else}}
+    const deleted = await this.db.drizzle.delete(schema.todos).where(eq(schema.todos.id, Number(id))).returning();
+    {{/if}}
+    if (deleted.length === 0) throw new NotFoundException("Todo not found");
     return true;
     {{else}}
     return true;

package/dist/templates/monorepo/packages/env/src/api-gateway.ts.hbs

@@ -33,6 +33,7 @@ export const env = createEnv({
       .string()
       .transform(Number)
       .default(3000),
+    TRUSTED_PROXY_IPS: z.string().default("{{#each trustedProxyIps}}{{#unless @first}},{{/unless}}{{this}}{{/each}}"),
     {{#if hasPostgres}}
     POSTGRES_URL: z.url(),
     {{/if}}
@@ -60,6 +61,12 @@ export const env = createEnv({
     {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
     BETTER_AUTH_SECRET: z.string().min(32),
     BETTER_AUTH_URL: z.url(),
+    {{#if (eq auth "better-auth:stateless")}}
+    OIDC_PROVIDER_ID: z.string().min(1),
+    OIDC_CLIENT_ID: z.string().min(1),
+    OIDC_CLIENT_SECRET: z.string().min(1),
+    OIDC_DISCOVERY_URL: z.url(),
+    {{/if}}
     {{/if}}
   },
 });

package/dist/templates/monorepo/packages/shared/package.json.hbs

@@ -4,6 +4,7 @@
   "private": true,
   "type": "module",
   "exports": {
+    "./auth": "./src/auth.ts",
     "./*": "./src/*"
   },
   "dependencies": {

package/dist/templates/monorepo/packages/shared/src/auth.ts.hbs

@@ -0,0 +1,6 @@
+/** Public authentication profile data safe to share with client packages. */
+export interface AuthUserProfile {
+  id: string;
+  email: string;
+  name?: string;
+}

package/dist/templates/monorepo/root/pnpm-workspace.yaml.hbs

@@ -8,6 +8,10 @@ allowBuilds:
   protobufjs: true
   '@nestjs/core': true
   esbuild: true
+{{#if usePrisma}}
+  prisma: true
+  '@prisma/engines': true
+{{/if}}
 {{#if swagger}}
   '@scarf/scarf': true
 {{/if}}
@@ -26,7 +30,11 @@ allowBuilds:
   workerd: true
 {{/if}}
 catalog:
-  "@types/node": ^22.13.14
+  "@nestjs/common": ^12.0.1
+  "@nestjs/core": ^12.0.1
+  "@types/node": ^24.0.0
   dotenv: ^17.2.2
-  typescript: ^6
+  reflect-metadata: ^0.2.2
+  rxjs: ^7.8.1
+  typescript: {{#if useTypescript7}}^7.0.0{{else}}^6.0.2{{/if}}
   zod: ^4.4.3

package/dist/templates/single-project/architecture/nest-api/.env.hbs

@@ -25,4 +25,10 @@ JWT_REFRESH_SECRET=change-me-to-a-different-random-secret-at-least-32-characters
 {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
 BETTER_AUTH_SECRET=change-me-to-a-random-secret-at-least-32-characters-long
 BETTER_AUTH_URL=http://localhost:3000
+{{#if (eq auth "better-auth:stateless")}}
+OIDC_PROVIDER_ID=company-oidc
+OIDC_CLIENT_ID=replace-with-provider-client-id
+OIDC_CLIENT_SECRET=replace-with-provider-client-secret
+OIDC_DISCOVERY_URL=https://identity.example.com/.well-known/openid-configuration
+{{/if}}
 {{/if}}

package/dist/templates/single-project/architecture/nest-api/package.json.hbs

@@ -20,7 +20,7 @@
     "test:debug": "vitest --inspect-brk --no-file-parallelism",
     "test:e2e": "vitest run --config ./vitest.config.e2e.ts"{{#if hasUltracite}},
     "check": "ultracite check",
-    "fix": "ultracite fix"{{/if}}{{#if hasHusky}},
+    "fix": "ultracite fix --ignore-pattern migrations/**"{{/if}}{{#if hasHusky}},
     "prepare": "husky"{{/if}}
   },
   "dependencies": {

package/dist/templates/single-project/architecture/nest-api/src/main.ts.hbs

@@ -24,14 +24,23 @@ import { apiReference } from "@scalar/nestjs-api-reference";
 import { SwaggerModule } from "@nestjs/swagger";
 {{/if}}
 {{#if (and swagger (or (eq auth "better-auth") (eq auth "better-auth:stateless")))}}
-import { auth } from "./auth/auth.js";
+import { AuthService } from "@thallesp/nestjs-better-auth";
 {{/if}}
 
 async function bootstrap() {
+  const trustedProxyIps = env.TRUSTED_PROXY_IPS
+    .split(",")
+    .map((ip) => ip.trim())
+    .filter(Boolean);
   {{#if isPrisma8}}
   await connectDatabase();
   {{/if}}
-  const app = await NestFactory.create{{#if (eq httpProvider "fastify")}}<NestFastifyApplication>(AppModule, new FastifyAdapter()){{else}}(AppModule){{/if}};
+  const app = await NestFactory.create{{#if (eq httpProvider "fastify")}}<NestFastifyApplication>(AppModule, new FastifyAdapter({ trustProxy: trustedProxyIps })){{else}}(AppModule){{/if}};
+  {{#unless (eq httpProvider "fastify")}}
+  if (trustedProxyIps.length > 0) {
+    app.getHttpAdapter().getInstance().set("trust proxy", trustedProxyIps);
+  }
+  {{/unless}}
   app.enableCors({
     origin: env.CORS_ORIGIN,
   });
@@ -58,7 +67,7 @@ async function bootstrap() {
           integrations: {
             {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
             betterAuth: {
-              auth,
+              auth: app.get(AuthService).instance,
               pathPrefix: "/api/auth",
             },
             {{/if}}
@@ -85,7 +94,7 @@ async function bootstrap() {
       integrations: {
         {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
         betterAuth: {
-          auth,
+          auth: app.get(AuthService).instance,
           pathPrefix: "/api/auth",
         },
         {{/if}}

package/dist/templates/single-project/architecture/nest-gateway/src/main.ts.hbs

@@ -16,7 +16,7 @@ import { apiReference } from "@scalar/nestjs-api-reference";
 import { SwaggerModule } from "@nestjs/swagger";
 {{/if}}
 {{#if (and swagger (or (eq auth "better-auth") (eq auth "better-auth:stateless")))}}
-import { auth } from "./auth/auth.js";
+import { AuthService } from "@thallesp/nestjs-better-auth";
 {{/if}}
 
 async function bootstrap() {
@@ -39,7 +39,7 @@ async function bootstrap() {
           integrations: {
             {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
             betterAuth: {
-              auth,
+              auth: app.get(AuthService).instance,
               pathPrefix: "/api/auth",
             },
             {{/if}}
@@ -66,7 +66,7 @@ async function bootstrap() {
       integrations: {
         {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
         betterAuth: {
-          auth,
+          auth: app.get(AuthService).instance,
           pathPrefix: "/api/auth",
         },
         {{/if}}

package/dist/templates/single-project/architecture/nest-microservice/proto/app.proto.hbs

@@ -4,6 +4,7 @@ package app;
 
 service AppService {
   rpc Ping (PingRequest) returns (PingResponse);
+  rpc Log (LogRequest) returns (LogResponse);
 }
 
 message PingRequest {}
@@ -11,3 +12,15 @@ message PingRequest {}
 message PingResponse {
   string message = 1;
 }
+
+message LogRequest {
+  string id = 1;
+  string source = 2;
+  string payload = 3;
+}
+
+message LogResponse {
+  string id = 1;
+  string source = 2;
+  string payload = 3;
+}

package/dist/templates/single-project/architecture/nest-microservice/src/app.controller.ts.hbs

@@ -1,5 +1,5 @@
 import { Controller, Get } from "@nestjs/common";
-import { EventPattern, {{#if (includes microservices "grpc")}}GrpcMethod{{else}}MessagePattern{{/if}} } from "@nestjs/microservices";
+import { {{#if (includes microservices "grpc")}}GrpcMethod{{else}}MessagePattern{{/if}} } from "@nestjs/microservices";
 
 import { AppService } from "./app.service.js";
 
@@ -17,6 +17,10 @@ export class AppController {
   handleGrpcPing(): { message: string } {
     return { message: this.appService.handlePing() };
   }
+  @GrpcMethod("AppService", "Log")
+  handleGrpcLog(data: { id: string; source: string; payload: string }): { id: string; source: string; payload: string } {
+    return data;
+  }
   {{else}}
   @MessagePattern("ping")
   handlePing(): string {
@@ -24,8 +28,10 @@ export class AppController {
   }
   {{/if}}
 
-  @EventPattern("log")
-  handleLog(data: Record<string, unknown>): void {
-    this.appService.handleLog(data);
+  {{#unless (includes microservices "grpc")}}
+  @MessagePattern("log")
+  handleLog(data: Record<string, unknown>): { received: Record<string, unknown> } {
+    return this.appService.handleLog(data);
   }
+  {{/unless}}
 }

package/dist/templates/single-project/architecture/nest-microservice/src/app.service.ts.hbs

@@ -17,7 +17,7 @@ export class AppService {
     return "pong";
   }
 
-  handleLog(data: Record<string, unknown>): void {
-    console.log("Microservice received:", data);
+  handleLog(data: Record<string, unknown>): { received: Record<string, unknown> } {
+    return { received: data };
   }
 }

package/dist/templates/single-project/architecture/nest-microservice/src/main.ts.hbs

@@ -17,7 +17,7 @@ import { apiReference } from "@scalar/nestjs-api-reference";
 import { SwaggerModule } from "@nestjs/swagger";
 {{/if}}
 {{#if (and swagger (or (eq auth "better-auth") (eq auth "better-auth:stateless")))}}
-import { auth } from "./auth/auth.js";
+import { AuthService } from "@thallesp/nestjs-better-auth";
 {{/if}}
 
 async function bootstrap() {
@@ -56,7 +56,7 @@ async function bootstrap() {
           integrations: {
             {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
             betterAuth: {
-              auth,
+              auth: app.get(AuthService).instance,
               pathPrefix: "/api/auth",
             },
             {{/if}}
@@ -83,7 +83,7 @@ async function bootstrap() {
       integrations: {
         {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
         betterAuth: {
-          auth,
+          auth: app.get(AuthService).instance,
           pathPrefix: "/api/auth",
         },
         {{/if}}

package/dist/templates/single-project/architecture/nest-microservice/test/microservice.e2e-spec.ts.hbs

@@ -35,6 +35,7 @@ it("sends ping through the selected message transport", async () => {
   await app.init();
   {{#if (includes microservices "kafka")}}
   client.subscribeToResponseOf("ping");
+  client.subscribeToResponseOf("log");
   {{/if}}
   {{#unless (includes microservices "grpc")}}
   {{#if (includes microservices "kafka")}}
@@ -51,12 +52,17 @@ it("sends ping through the selected message transport", async () => {
   {{#if (includes microservices "grpc")}}
   const service = client.getService<{
     ping: (request: Record<string, never>) => Observable<{ message: string }>;
+    log: (request: { id: string; source: string; payload: string }) => Observable<{ id: string; source: string; payload: string }>;
   }>("AppService");
   await expect(firstValueFrom(service.ping({}))).resolves.toEqual({ message: "pong" });
+  const event = { id: "event-1", source: "scenario", payload: "healthy" };
+  await expect(firstValueFrom(service.log(event))).resolves.toEqual(event);
   {{else}}
   await expect(firstValueFrom(client.send<string, Record<string, never>>("ping", {}))).resolves.toBe("pong");
+  const event = { id: "event-1", source: "scenario", payload: { healthy: true } };
+  await expect(firstValueFrom(client.send("log", event))).resolves.toEqual({ received: event });
   {{/if}}
-}, 20_000);
+}, 60_000);
 
 afterAll(async () => {
   await app?.close();

package/dist/templates/single-project/shared/config/env.ts.hbs

@@ -33,6 +33,7 @@ export const env = createEnv({
       .string()
       .transform(Number)
       .default(3000),
+    TRUSTED_PROXY_IPS: z.string().default("{{#each trustedProxyIps}}{{#unless @first}},{{/unless}}{{this}}{{/each}}"),
     {{#if (includes microservices "redis")}}
     REDIS_URL: z.url().default("redis://127.0.0.1:6379"),
     {{/if}}
@@ -71,17 +72,27 @@ export const env = createEnv({
       .default(true),
     {{/if}}
     {{#if (eq auth "passport")}}
+    {{#if hasDatabase}}
     JWT_ACCESS_SECRET: z.string().min(32),
     JWT_ISSUER: z.string().default("{{projectName}}"),
     JWT_AUDIENCE: z.string().default("{{projectName}}-api"),
     JWT_KEY_ID: z.string().default("primary"),
-    {{#if hasDatabase}}
     JWT_REFRESH_SECRET: z.string().min(32),
+    {{else}}
+    OIDC_JWKS_URI: z.url(),
+    OIDC_ISSUER: z.url(),
+    OIDC_AUDIENCE: z.string().min(1),
     {{/if}}
     {{/if}}
     {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless"))}}
     BETTER_AUTH_SECRET: z.string().min(32),
     BETTER_AUTH_URL: z.url(),
+    {{#if (eq auth "better-auth:stateless")}}
+    OIDC_PROVIDER_ID: z.string().min(1),
+    OIDC_CLIENT_ID: z.string().min(1),
+    OIDC_CLIENT_SECRET: z.string().min(1),
+    OIDC_DISCOVERY_URL: z.url(),
+    {{/if}}
     {{/if}}
   },
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nest-arch/tui",
-  "version": "0.4.0",
+  "version": "0.4.3",
   "private": false,
   "description": "Interactive terminal UI for generating NestJS projects",
   "keywords": [
@@ -51,7 +51,7 @@
     "pkgroll": "^2.5.2",
     "tsx": "^4.19.2",
     "vitest": "^4.1.7",
-    "@nest-arch/core": "0.4.0",
+    "@nest-arch/core": "0.4.3",
     "@nest-arch/env": "0.0.0",
     "@nest-arch/shared": "0.0.0"
   },