@nest-arch/tui 0.4.0 → 0.4.4

package/dist/templates/base/src/libs/middlewares/auth.trpc.middleware.ts.hbs

@@ -1,3 +1,43 @@
+{{#if (eq auth "passport")}}
+import { Injectable } from "@nestjs/common";
+import { JwtService } from "@nestjs/jwt";
+import { TRPCError } from "@trpc/server";
+import { MiddlewareOptions, MiddlewareResponse, TRPCMiddleware } from "nestjs-trpc";
+import type { ContextOptions } from "nestjs-trpc";
+
+import { env } from "../../config/env.js";
+import { AuthService } from "../../auth/auth.service.js";
+
+@Injectable()
+export class AuthTRPCMiddleware implements TRPCMiddleware {
+  constructor(private readonly auth: AuthService, private readonly jwt: JwtService) {}
+
+  async use(opts: MiddlewareOptions<ContextOptions>): Promise<MiddlewareResponse> {
+    const header = opts.ctx.req.headers.authorization;
+    const token = header?.startsWith("Bearer ") ? header.slice("Bearer ".length) : undefined;
+    if (!token) throw new TRPCError({ code: "UNAUTHORIZED", message: "Missing bearer token." });
+    try {
+      const payload = await this.jwt.verifyAsync<Record<string, unknown>>(token, {
+        algorithms: ["HS256"], audience: env.JWT_AUDIENCE, issuer: env.JWT_ISSUER,
+      });
+      {{#if (and usePrisma (not hasMongodb))}}
+      const user = await this.auth.validate(payload);
+      {{else}}
+      const user = await this.auth.validateUser(payload.userId as string);
+      {{/if}}
+      if (!user) throw new TRPCError({ code: "UNAUTHORIZED", message: "Invalid bearer token." });
+      return opts.next({
+        ctx: {
+          ...opts.ctx,
+          session: { user },
+        },
+      });
+    } catch {
+      throw new TRPCError({ code: "UNAUTHORIZED", message: "Invalid bearer token." });
+    }
+  }
+}
+{{else}}
 import { Injectable } from "@nestjs/common";
 import { AuthService } from "@thallesp/nestjs-better-auth";
 import { TRPCError } from "@trpc/server";
@@ -8,9 +48,15 @@ import {
 } from "nestjs-trpc";
 import type { ContextOptions } from "nestjs-trpc";
 
+{{#if (eq auth "better-auth:stateless")}}
+import { auth } from "../../auth/auth.js";
+
+type AppAuth = typeof auth;
+{{else}}
 import { createAuth } from "../../auth/auth.js";
 
 type AppAuth = ReturnType<typeof createAuth>;
+{{/if}}
 
 @Injectable()
 export class AuthTRPCMiddleware implements TRPCMiddleware {
@@ -40,3 +86,4 @@ export class AuthTRPCMiddleware implements TRPCMiddleware {
     });
   }
 }
+{{/if}}

package/dist/templates/base/src/libs/middlewares/rate-limit.trpc.middleware.ts.hbs

@@ -0,0 +1,43 @@
+{{#if hasRateLimiting}}
+import { Inject, Injectable } from "@nestjs/common";
+import { ThrottlerStorage, type ThrottlerStorage as ThrottlerStorageService } from "@nestjs/throttler";
+import { TRPCError } from "@trpc/server";
+import {
+  MiddlewareOptions,
+  MiddlewareResponse,
+  TRPCMiddleware,
+} from "nestjs-trpc";
+import type { ContextOptions } from "nestjs-trpc";
+
+@Injectable()
+export class RateLimitTRPCMiddleware implements TRPCMiddleware {
+  constructor(
+    @Inject(ThrottlerStorage)
+    private readonly storage: ThrottlerStorageService
+  ) {}
+
+  async use(
+    opts: MiddlewareOptions<ContextOptions>
+  ): Promise<MiddlewareResponse> {
+    const request = opts.ctx.req as {
+      ip?: string;
+      socket?: { remoteAddress?: string };
+    };
+    const clientIp = request.ip ?? request.socket?.remoteAddress ?? "unknown";
+    const result = await this.storage.increment(
+      `trpc:${clientIp}`,
+      60_000,
+      60,
+      60_000,
+      "trpc"
+    );
+    if (result.isBlocked) {
+      throw new TRPCError({
+        code: "TOO_MANY_REQUESTS",
+        message: "Too many requests",
+      });
+    }
+    return opts.next();
+  }
+}
+{{/if}}

package/dist/templates/base/src/libs/trpc/inner.context.ts.hbs

@@ -1,7 +1,10 @@
 import { ContextOptions } from "nestjs-trpc";
-
-import { auth } from "../../auth/auth.js";
+{{#if (eq auth "better-auth")}}
+import type { UserSession } from "../../auth/auth.js";
+{{else if (eq auth "passport")}}
+import type { AuthService } from "../../auth/auth.service.js";
+{{/if}}
 
 export type InnerContext = {
-  session: Awaited<ReturnType<typeof auth.api.getSession>>;
+  session?: {{#if (eq auth "better-auth")}}UserSession{{else if (eq auth "passport")}}{ user: NonNullable<Awaited<ReturnType<AuthService[{{#if (and usePrisma (not hasMongodb))}}"validate"{{else}}"validateUser"{{/if}}]>>> }{{else}}unknown{{/if}};
 } & ContextOptions;

package/dist/templates/base/src/main.ts.hbs

@@ -24,14 +24,23 @@ import { apiReference } from "@scalar/nestjs-api-reference";
 import { SwaggerModule } from "@nestjs/swagger";
 {{/if}}
 {{#if (and swagger (or (eq auth "better-auth") (eq auth "better-auth:stateless") hasBetterAuthWithoutRest))}}
-import { auth } from "./auth/auth.js";
+import { AuthService } from "@thallesp/nestjs-better-auth";
 {{/if}}
 
 async function bootstrap() {
+  const trustedProxyIps = env.TRUSTED_PROXY_IPS
+    .split(",")
+    .map((ip) => ip.trim())
+    .filter(Boolean);
   {{#if isPrisma8}}
   await connectDatabase();
   {{/if}}
-  const app = await NestFactory.create{{#if (eq httpProvider "fastify")}}<NestFastifyApplication>(AppModule, new FastifyAdapter(){{else}}(AppModule{{/if}}{{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless") hasBetterAuthWithoutRest)}}, { bodyParser: false }{{/if}});
+  const app = await NestFactory.create{{#if (eq httpProvider "fastify")}}<NestFastifyApplication>(AppModule, new FastifyAdapter({ trustProxy: trustedProxyIps }){{else}}(AppModule{{/if}}{{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless") hasBetterAuthWithoutRest)}}, { bodyParser: false }{{/if}});
+  {{#unless (eq httpProvider "fastify")}}
+  if (trustedProxyIps.length > 0) {
+    app.getHttpAdapter().getInstance().set("trust proxy", trustedProxyIps);
+  }
+  {{/unless}}
   app.enableCors({
     origin: env.CORS_ORIGIN,
   });
@@ -56,7 +65,7 @@ async function bootstrap() {
         integrations: {
           {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless") hasBetterAuthWithoutRest)}}
           betterAuth: {
-            auth,
+            auth: app.get(AuthService).instance,
             pathPrefix: "/api/auth",
           },
           {{/if}}
@@ -84,7 +93,7 @@ async function bootstrap() {
     integrations: {
       {{#if (or (eq auth "better-auth") (eq auth "better-auth:stateless") hasBetterAuthWithoutRest)}}
       betterAuth: {
-        auth,
+        auth: app.get(AuthService).instance,
         pathPrefix: "/api/auth",
       },
       {{/if}}

package/dist/templates/base/src/modules/users/entities/user.entity.ts.hbs

@@ -0,0 +1,22 @@
+import { Column, Entity, PrimaryGeneratedColumn } from "typeorm";
+
+@Entity("users")
+export class UserEntity {
+  @PrimaryGeneratedColumn("uuid")
+  id: string;
+
+  @Column({ type: "varchar", unique: true })
+  email: string;
+
+  @Column({ type: "varchar", nullable: true })
+  firstname: string | null;
+
+  @Column({ type: "varchar", nullable: true })
+  lastname: string | null;
+
+  @Column({ type: "varchar" })
+  password: string;
+
+  @Column({ type: "varchar", default: "USER" })
+  role: string;
+}