@nest-boot/auth 7.1.0 → 7.2.0

package/dist/auth.interceptor.d.ts

@@ -0,0 +1,19 @@
+import { EntityManager } from "@mikro-orm/core";
+import { type CallHandler, type ExecutionContext, type NestInterceptor } from "@nestjs/common";
+import { Request, Response } from "express";
+import { Observable } from "rxjs";
+import { AuthTransactionContext } from "./auth.transaction-context";
+export declare class AuthInterceptor implements NestInterceptor {
+    protected readonly em: EntityManager;
+    constructor(em: EntityManager);
+    getRequest(context: ExecutionContext): Promise<Request>;
+    getResponse(context: ExecutionContext): Promise<Response>;
+    /**
+     * 扩展事务上下文
+     * 子类可以重写此方法来添加自定义的上下文信息
+     */
+    extendTransactionContext(transactionContext: AuthTransactionContext, executionContext: ExecutionContext): void | Promise<void>;
+    private setTransactionAuthContext;
+    private interceptAsync;
+    intercept<T>(executionContext: ExecutionContext, next: CallHandler<T>): Observable<T>;
+}

package/dist/auth.interceptor.js

@@ -0,0 +1,97 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthInterceptor = void 0;
+const core_1 = require("@mikro-orm/core");
+const common_1 = require("@nestjs/common");
+const rxjs_1 = require("rxjs");
+const auth_transaction_context_1 = require("./auth.transaction-context");
+let AuthInterceptor = class AuthInterceptor {
+    constructor(em) {
+        this.em = em;
+    }
+    async getRequest(context) {
+        if (context.getType() === "graphql") {
+            return context.getArgByIndex(2).req;
+        }
+        return await context.switchToHttp().getRequest();
+    }
+    async getResponse(context) {
+        if (context.getType() === "graphql") {
+            return context.getArgByIndex(2).req.res;
+        }
+        return await context.switchToHttp().getResponse();
+    }
+    /**
+     * 扩展事务上下文
+     * 子类可以重写此方法来添加自定义的上下文信息
+     */
+    extendTransactionContext(
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    transactionContext, 
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    executionContext) {
+        //
+    }
+    async setTransactionAuthContext(executionContext, knex) {
+        if (!knex) {
+            throw new Error("Knex is not found in transaction context");
+        }
+        const res = await this.getResponse(executionContext);
+        const user = res.locals.user;
+        const session = res.locals.session;
+        if (user && session) {
+            const transactionContext = new auth_transaction_context_1.AuthTransactionContext()
+                .set("user_id", user.id)
+                .set("user_name", user.name)
+                .set("user_email", user.email)
+                .set("session_id", session.id)
+                .set("session_token", session.token)
+                .set("session_expires_at", session.expiresAt.toISOString())
+                .set("session_ip_address", session.ipAddress ?? "")
+                .set("session_user_agent", session.userAgent ?? "");
+            await this.extendTransactionContext(transactionContext, executionContext);
+            await knex.raw([
+                /* SQL */ `SET LOCAL ROLE authenticated;`,
+                transactionContext.toSQL(),
+            ].join("\n"));
+        }
+        else {
+            await knex.raw(/* SQL */ `SET LOCAL ROLE anonymous;`);
+        }
+    }
+    async interceptAsync(executionContext) {
+        // 检查是否已在事务中
+        const knex = this.em.getTransactionContext();
+        if (knex) {
+            // 已在事务中,直接设置认证上下文
+            await this.setTransactionAuthContext(executionContext, knex);
+        }
+        else {
+            // 不在事务中,启动一个新事务
+            await this.em.transactional(async (em) => {
+                await this.setTransactionAuthContext(executionContext, em.getTransactionContext());
+            });
+        }
+    }
+    intercept(executionContext, next) {
+        if (["http", "graphql"].includes(executionContext.getType())) {
+            return (0, rxjs_1.from)(this.interceptAsync(executionContext)).pipe((0, rxjs_1.concatMap)(() => next.handle()));
+        }
+        return next.handle();
+    }
+};
+exports.AuthInterceptor = AuthInterceptor;
+exports.AuthInterceptor = AuthInterceptor = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.EntityManager])
+], AuthInterceptor);
+//# sourceMappingURL=auth.interceptor.js.map

package/dist/auth.interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.interceptor.js","sourceRoot":"","sources":["../src/auth.interceptor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0CAAgD;AAEhD,2CAKwB;AAExB,+BAAmD;AAEnD,yEAAoE;AAI7D,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YAA+B,EAAiB;QAAjB,OAAE,GAAF,EAAE,CAAe;IAAG,CAAC;IAEpD,KAAK,CAAC,UAAU,CAAC,OAAyB;QACxC,IAAI,OAAO,CAAC,OAAO,EAAa,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACtC,CAAC;QAED,OAAO,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,IAAI,OAAO,CAAC,OAAO,EAAa,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAC1C,CAAC;QAED,OAAO,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,wBAAwB;IACtB,6DAA6D;IAC7D,kBAA0C;IAC1C,6DAA6D;IAC7D,gBAAkC;QAElC,EAAE;IACJ,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,gBAAkC,EAClC,IAAW;QAEX,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QAErD,MAAM,IAAI,GAAyB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACnD,MAAM,OAAO,GAA4B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAE5D,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YACpB,MAAM,kBAAkB,GAAG,IAAI,iDAAsB,EAAE;iBACpD,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;iBACvB,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC;iBAC3B,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC;iBAC7B,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC;iBAC7B,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC;iBACnC,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;iBAC1D,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;iBAClD,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAEtD,MAAM,IAAI,CAAC,wBAAwB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;YAE1E,MAAM,IAAI,CAAC,GAAG,CACZ;gBACE,SAAS,CAAC,+BAA+B;gBACzC,kBAAkB,CAAC,KAAK,EAAE;aAC3B,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,gBAAkC;QAElC,YAAY;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,qBAAqB,EAAQ,CAAC;QAEnD,IAAI,IAAI,EAAE,CAAC;YACT,kBAAkB;YAClB,MAAM,IAAI,CAAC,yBAAyB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,gBAAgB;YAChB,MAAM,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACvC,MAAM,IAAI,CAAC,yBAAyB,CAClC,gBAAgB,EAChB,EAAE,CAAC,qBAAqB,EAAQ,CACjC,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,SAAS,CACP,gBAAkC,EAClC,IAAoB;QAEpB,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC7D,OAAO,IAAA,WAAI,EAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CACrD,IAAA,gBAAS,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;CACF,CAAA;AArGY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;qCAEwB,oBAAa;GADrC,eAAe,CAqG3B"}

package/dist/auth.module.js

@@ -49,8 +49,11 @@ let AuthModule = class AuthModule extends auth_module_definition_1.ConfigurableM
         proxy.forRoutes(...(this.options.middleware?.includeRoutes ?? ["*"]));
     }
     onModuleInit() {
-        const app = this.adapterHost.httpAdapter.getInstance();
-        app.all(this.options.basePath ?? "/api/auth/{*any}", (0, node_1.toNodeHandler)(this.auth));
+        const httpAdapter = this.adapterHost.httpAdapter;
+        if (httpAdapter) {
+            const app = httpAdapter.getInstance();
+            app.all(this.options.basePath ?? "/api/auth/{*any}", (0, node_1.toNodeHandler)(this.auth));
+        }
     }
 };
 exports.AuthModule = AuthModule;

package/dist/auth.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,0CAA2C;AAC3C,2CAOwB;AACxB,uCAA+C;AAC/C,6CAA+C;AAC/C,2CAAiD;AAGjD,oEAA+D;AAC/D,qDAA8C;AAC9C,uDAAmD;AACnD,qEAGkC;AAClC,iDAA6C;AAG7C,MAAM,YAAY,GAAa;IAC7B,OAAO,EAAE,2BAAU;IACnB,MAAM,EAAE,CAAC,6CAAoB,EAAE,eAAQ,CAAC;IACxC,UAAU,EAAE,CAAC,OAA0B,EAAE,GAAa,EAAE,EAAE,CACxD,IAAA,wBAAU,EAAC;QACT,GAAG,OAAO;QACV,QAAQ,EAAE,IAAA,mCAAe,EAAC;YACxB,GAAG;YACH,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;KACH,CAAC;CACL,CAAC;AAMK,IAAM,UAAU,GAAhB,MAAM,UACX,SAAQ,gDAAuB;IAG/B,YACmB,WAA4B,EAE5B,IAAU,EAEV,OAA0B;QAE3C,KAAK,EAAE,CAAC;QANS,gBAAW,GAAX,WAAW,CAAiB;QAE5B,SAAI,GAAJ,IAAI,CAAM;QAEV,YAAO,GAAP,OAAO,CAAmB;IAG7C,CAAC;IAED,SAAS,CAAC,QAA4B;QACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,gCAAc,CAAC,CAAC;QAE7C,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;YAC3C,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC1D,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,YAAY;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,WAAW,EAAW,CAAC;QAEhE,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,kBAAkB,EAC3C,IAAA,oBAAa,EAAC,IAAI,CAAC,IAAI,CAAC,CACzB,CAAC;IACJ,CAAC;CACF,CAAA;AAhCY,gCAAU;qBAAV,UAAU;IAJtB,IAAA,eAAM,EAAC;QACN,SAAS,EAAE,CAAC,YAAY,EAAE,0BAAW,CAAC;QACtC,OAAO,EAAE,CAAC,0BAAW,CAAC;KACvB,CAAC;IAOG,WAAA,IAAA,eAAM,EAAC,2BAAU,CAAC,CAAA;IAElB,WAAA,IAAA,eAAM,EAAC,6CAAoB,CAAC,CAAA;qCAHC,sBAAe;GALpC,UAAU,CAgCtB"}
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,0CAA2C;AAC3C,2CAOwB;AACxB,uCAA+C;AAC/C,6CAA+C;AAC/C,2CAAiD;AAGjD,oEAA+D;AAC/D,qDAA8C;AAC9C,uDAAmD;AACnD,qEAGkC;AAClC,iDAA6C;AAG7C,MAAM,YAAY,GAAa;IAC7B,OAAO,EAAE,2BAAU;IACnB,MAAM,EAAE,CAAC,6CAAoB,EAAE,eAAQ,CAAC;IACxC,UAAU,EAAE,CAAC,OAA0B,EAAE,GAAa,EAAE,EAAE,CACxD,IAAA,wBAAU,EAAC;QACT,GAAG,OAAO;QACV,QAAQ,EAAE,IAAA,mCAAe,EAAC;YACxB,GAAG;YACH,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;KACH,CAAC;CACL,CAAC;AAMK,IAAM,UAAU,GAAhB,MAAM,UACX,SAAQ,gDAAuB;IAG/B,YACmB,WAA4B,EAE5B,IAAU,EAEV,OAA0B;QAE3C,KAAK,EAAE,CAAC;QANS,gBAAW,GAAX,WAAW,CAAiB;QAE5B,SAAI,GAAJ,IAAI,CAAM;QAEV,YAAO,GAAP,OAAO,CAAmB;IAG7C,CAAC;IAED,SAAS,CAAC,QAA4B;QACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,gCAAc,CAAC,CAAC;QAE7C,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;YAC3C,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC1D,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,YAAY;QACV,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;QAEjD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,WAAW,CAAC,WAAW,EAAW,CAAC;YAE/C,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,kBAAkB,EAC3C,IAAA,oBAAa,EAAC,IAAI,CAAC,IAAI,CAAC,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AApCY,gCAAU;qBAAV,UAAU;IAJtB,IAAA,eAAM,EAAC;QACN,SAAS,EAAE,CAAC,YAAY,EAAE,0BAAW,CAAC;QACtC,OAAO,EAAE,CAAC,0BAAW,CAAC;KACvB,CAAC;IAOG,WAAA,IAAA,eAAM,EAAC,2BAAU,CAAC,CAAA;IAElB,WAAA,IAAA,eAAM,EAAC,6CAAoB,CAAC,CAAA;qCAHC,sBAAe;GALpC,UAAU,CAoCtB"}

package/dist/auth.transaction-context.d.ts

@@ -0,0 +1,11 @@
+type LowercaseLetter = "a" | "b" | "c" | "d" | "e" | "f" | "g" | "h" | "i" | "j" | "k" | "l" | "m" | "n" | "o" | "p" | "q" | "r" | "s" | "t" | "u" | "v" | "w" | "x" | "y" | "z";
+type ValidChar = LowercaseLetter | "_";
+type IsValidSnakeCase<S extends string> = S extends `${infer First}${infer Rest}` ? First extends ValidChar ? IsValidSnakeCase<Rest> : false : true;
+type SnakeCase<S extends string> = S extends "" ? never : S extends `_${string}` | `${string}_` ? never : S extends `${string}__${string}` ? never : IsValidSnakeCase<S> extends true ? S : never;
+export declare class AuthTransactionContext {
+    private readonly ctx;
+    set<S extends string>(key: SnakeCase<S>, value: string): this;
+    entries(): [string, string][];
+    toSQL(): string;
+}
+export {};

package/dist/auth.transaction-context.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthTransactionContext = void 0;
+class AuthTransactionContext {
+    constructor() {
+        this.ctx = new Map();
+    }
+    set(key, value) {
+        if (!/^[a-z]+(_[a-z]+)*$/.test(key)) {
+            throw new Error(`Key must only contain lowercase letters and underscores, cannot start/end with underscore, and cannot have consecutive underscores: ${key}`);
+        }
+        this.ctx.set(key, value);
+        return this;
+    }
+    entries() {
+        return Array.from(this.ctx.entries());
+    }
+    toSQL() {
+        return /* SQL */ `SELECT ${Array.from(this.ctx.entries())
+            .map(([key, value]) => {
+            const escapedValue = value.replace(/'/g, "''");
+            return /* SQL */ `set_config('auth.${key}', '${escapedValue}', true)`;
+        })
+            .join(",")};`;
+    }
+}
+exports.AuthTransactionContext = AuthTransactionContext;
+//# sourceMappingURL=auth.transaction-context.js.map

package/dist/auth.transaction-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.transaction-context.js","sourceRoot":"","sources":["../src/auth.transaction-context.ts"],"names":[],"mappings":";;;AA+CA,MAAa,sBAAsB;IAAnC;QACmB,QAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IAwBnD,CAAC;IAtBC,GAAG,CAAmB,GAAiB,EAAE,KAAa;QACpD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,uIAAuI,GAAG,EAAE,CAC7I,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,KAAK;QACH,OAAO,SAAS,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;aACtD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACpB,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/C,OAAO,SAAS,CAAC,oBAAoB,GAAG,OAAO,YAAY,UAAU,CAAC;QACxE,CAAC,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;CACF;AAzBD,wDAyBC"}