@nest-boot/auth 7.8.0 → 7.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -24,6 +24,7 @@ const auth_constants_1 = require("./auth.constants");
24
24
  const auth_middleware_1 = require("./auth.middleware");
25
25
  const auth_module_definition_1 = require("./auth.module-definition");
26
26
  const auth_service_1 = require("./auth.service");
27
+ const estimate_entropy_1 = require("./utils/estimate-entropy");
27
28
  let AuthModule = class AuthModule extends auth_module_definition_1.ConfigurableModuleClass {
28
29
  constructor(auth, options, middlewareManager, authMiddleware) {
29
30
  super();
@@ -64,15 +65,36 @@ exports.AuthModule = AuthModule = __decorate([
64
65
  {
65
66
  provide: auth_constants_1.AUTH_TOKEN,
66
67
  inject: [auth_module_definition_1.MODULE_OPTIONS_TOKEN, core_1.MikroORM],
67
- useFactory: (options, orm) => (0, better_auth_1.betterAuth)({
68
- baseURL: process.env.AUTH_URL ?? process.env.APP_URL,
69
- secret: process.env.AUTH_SECRET ?? process.env.APP_SECRET,
70
- ...options,
71
- database: (0, mikro_orm_adapter_1.mikroOrmAdapter)({
72
- orm,
73
- entities: options.entities,
74
- }),
75
- }),
68
+ useFactory: (options, orm) => {
69
+ const secret = options.secret ?? process.env.AUTH_SECRET ?? process.env.APP_SECRET;
70
+ if (!secret) {
71
+ throw new Error("Auth secret is required.\n" +
72
+ "Set AUTH_SECRET or APP_SECRET environment variable, or pass a secret option.\n" +
73
+ "Generate a secure secret with:\n" +
74
+ " node -e \"console.log(require('crypto').randomBytes(32).toString('base64url'))\"");
75
+ }
76
+ if (secret.length < 32) {
77
+ throw new Error("Auth secret must be at least 32 characters long.\n" +
78
+ "Set AUTH_SECRET or APP_SECRET environment variable, or pass a secret option.\n" +
79
+ "Generate a secure secret with:\n" +
80
+ " node -e \"console.log(require('crypto').randomBytes(32).toString('base64url'))\"");
81
+ }
82
+ if ((0, estimate_entropy_1.estimateEntropy)(secret) < 120) {
83
+ throw new Error("Auth secret appears low-entropy.\n" +
84
+ "Use a randomly generated secret for production.\n" +
85
+ "Generate a secure secret with:\n" +
86
+ " node -e \"console.log(require('crypto').randomBytes(32).toString('base64url'))\"");
87
+ }
88
+ return (0, better_auth_1.betterAuth)({
89
+ baseURL: process.env.AUTH_URL ?? process.env.APP_URL,
90
+ secret,
91
+ ...options,
92
+ database: (0, mikro_orm_adapter_1.mikroOrmAdapter)({
93
+ orm,
94
+ entities: options.entities,
95
+ }),
96
+ });
97
+ },
76
98
  },
77
99
  ],
78
100
  exports: [auth_service_1.AuthService],
@@ -1 +1 @@
1
- {"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,0CAA2C;AAC3C,sDAA4E;AAC5E,gEAGoC;AACpC,2CAAwD;AACxD,6CAA+C;AAC/C,2CAAiD;AAEjD,oEAA+D;AAC/D,qDAA8C;AAC9C,uDAAmD;AACnD,qEAGkC;AAClC,iDAA6C;AA0BtC,IAAM,UAAU,GAAhB,MAAM,UAAW,SAAQ,gDAAuB;IACrD,YAEmB,IAAU,EAEV,OAA0B,EAC1B,iBAAoC,EACpC,cAA8B;QAE/C,KAAK,EAAE,CAAC;QANS,SAAI,GAAJ,IAAI,CAAM;QAEV,YAAO,GAAP,OAAO,CAAmB;QAC1B,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,mBAAc,GAAd,cAAc,CAAgB;QAI/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,kBAAkB,CAAC;QAE7D,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,CAAC,iBAAiB;aACnB,KAAK,CAAC,IAAA,oBAAa,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC/B,0BAA0B,EAAE;aAC5B,SAAS,CAAC,QAAQ,CAAC,CAAC;QAEvB,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB;iBACjC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;iBAC1B,YAAY,CAAC,0CAAwB,CAAC,CAAC;YAE1C,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;gBAC3C,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC1D,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;gBAC3C,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC5D,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AApCY,gCAAU;qBAAV,UAAU;IAvBtB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,sCAAoB,EAAE,6BAAgB,CAAC;QACjD,SAAS,EAAE;YACT,0BAAW;YACX,gCAAc;YACd;gBACE,OAAO,EAAE,2BAAU;gBACnB,MAAM,EAAE,CAAC,6CAAoB,EAAE,eAAQ,CAAC;gBACxC,UAAU,EAAE,CAAC,OAA0B,EAAE,GAAa,EAAE,EAAE,CACxD,IAAA,wBAAU,EAAC;oBACT,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO;oBACpD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;oBACzD,GAAG,OAAO;oBACV,QAAQ,EAAE,IAAA,mCAAe,EAAC;wBACxB,GAAG;wBACH,QAAQ,EAAE,OAAO,CAAC,QAAQ;qBAC3B,CAAC;iBACH,CAAC;aACL;SACF;QACD,OAAO,EAAE,CAAC,0BAAW,CAAC;KACvB,CAAC;IAGG,WAAA,IAAA,eAAM,EAAC,2BAAU,CAAC,CAAA;IAElB,WAAA,IAAA,eAAM,EAAC,6CAAoB,CAAC,CAAA;qDAEO,8BAAiB;QACpB,gCAAc;GAPtC,UAAU,CAoCtB"}
1
+ {"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,0CAA2C;AAC3C,sDAA4E;AAC5E,gEAGoC;AACpC,2CAAwD;AACxD,6CAA+C;AAC/C,2CAAiD;AAEjD,oEAA+D;AAC/D,qDAA8C;AAC9C,uDAAmD;AACnD,qEAGkC;AAClC,iDAA6C;AAE7C,+DAA2D;AAwDpD,IAAM,UAAU,GAAhB,MAAM,UAAW,SAAQ,gDAAuB;IACrD,YAEmB,IAAU,EAEV,OAA0B,EAC1B,iBAAoC,EACpC,cAA8B;QAE/C,KAAK,EAAE,CAAC;QANS,SAAI,GAAJ,IAAI,CAAM;QAEV,YAAO,GAAP,OAAO,CAAmB;QAC1B,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,mBAAc,GAAd,cAAc,CAAgB;QAI/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,kBAAkB,CAAC;QAE7D,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,CAAC,iBAAiB;aACnB,KAAK,CAAC,IAAA,oBAAa,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC/B,0BAA0B,EAAE;aAC5B,SAAS,CAAC,QAAQ,CAAC,CAAC;QAEvB,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB;iBACjC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;iBAC1B,YAAY,CAAC,0CAAwB,CAAC,CAAC;YAE1C,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;gBAC3C,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC1D,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;gBAC3C,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC5D,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AApCY,gCAAU;qBAAV,UAAU;IAtDtB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,sCAAoB,EAAE,6BAAgB,CAAC;QACjD,SAAS,EAAE;YACT,0BAAW;YACX,gCAAc;YACd;gBACE,OAAO,EAAE,2BAAU;gBACnB,MAAM,EAAE,CAAC,6CAAoB,EAAE,eAAQ,CAAC;gBACxC,UAAU,EAAE,CAAC,OAA0B,EAAE,GAAa,EAAE,EAAE;oBACxD,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;oBAEtE,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,MAAM,IAAI,KAAK,CACb,4BAA4B;4BAC1B,gFAAgF;4BAChF,kCAAkC;4BAClC,oFAAoF,CACvF,CAAC;oBACJ,CAAC;oBAED,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;wBACvB,MAAM,IAAI,KAAK,CACb,oDAAoD;4BAClD,gFAAgF;4BAChF,kCAAkC;4BAClC,oFAAoF,CACvF,CAAC;oBACJ,CAAC;oBAED,IAAI,IAAA,kCAAe,EAAC,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;wBAClC,MAAM,IAAI,KAAK,CACb,oCAAoC;4BAClC,mDAAmD;4BACnD,kCAAkC;4BAClC,oFAAoF,CACvF,CAAC;oBACJ,CAAC;oBAED,OAAO,IAAA,wBAAU,EAAC;wBAChB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO;wBACpD,MAAM;wBACN,GAAG,OAAO;wBACV,QAAQ,EAAE,IAAA,mCAAe,EAAC;4BACxB,GAAG;4BACH,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B,CAAC;qBACH,CAAC,CAAC;gBACL,CAAC;aACF;SACF;QACD,OAAO,EAAE,CAAC,0BAAW,CAAC;KACvB,CAAC;IAGG,WAAA,IAAA,eAAM,EAAC,2BAAU,CAAC,CAAA;IAElB,WAAA,IAAA,eAAM,EAAC,6CAAoB,CAAC,CAAA;qDAEO,8BAAiB;QACpB,gCAAc;GAPtC,UAAU,CAoCtB"}