@scryan7371/sdr-security 0.1.9 → 0.1.10

package/dist/api/migrations/1700000000001-add-refresh-tokens.js

@@ -11,12 +11,12 @@ class AddRefreshTokens1700000000001 {
         "token_hash" varchar NOT NULL,
         "expires_at" timestamptz NOT NULL,
         "revoked_at" timestamptz,
-        "userId" uuid,
+        "user_id" uuid,
         "created_at" timestamptz NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-        CONSTRAINT "FK_refresh_token_user" FOREIGN KEY ("userId") REFERENCES ${userTableRef} ("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        CONSTRAINT "FK_refresh_token_user" FOREIGN KEY ("user_id") REFERENCES ${userTableRef} ("id") ON DELETE CASCADE ON UPDATE NO ACTION
       )
     `);
-        await queryRunner.query(`CREATE INDEX "IDX_refresh_token_user" ON "refresh_token" ("userId")`);
+        await queryRunner.query(`CREATE INDEX "IDX_refresh_token_user" ON "refresh_token" ("user_id")`);
     }
     async down(queryRunner) {
         await queryRunner.query(`DROP INDEX "IDX_refresh_token_user"`);

package/dist/nest/entities/refresh-token.entity.js

@@ -37,7 +37,7 @@ __decorate([
     __metadata("design:type", Object)
 ], RefreshTokenEntity.prototype, "revokedAt", void 0);
 __decorate([
-    (0, typeorm_1.Column)({ type: "uuid", name: "userId", nullable: true }),
+    (0, typeorm_1.Column)({ type: "uuid", name: "user_id", nullable: true }),
     __metadata("design:type", Object)
 ], RefreshTokenEntity.prototype, "userId", void 0);
 __decorate([

package/dist/nest/security-auth-routing.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/nest/security-auth-routing.test.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const constants_1 = require("@nestjs/common/constants");
+const vitest_1 = require("vitest");
+const security_auth_controller_1 = require("./security-auth.controller");
+const routeMeta = (methodName) => {
+    const handler = security_auth_controller_1.SecurityAuthController.prototype[methodName];
+    return {
+        path: Reflect.getMetadata(constants_1.PATH_METADATA, handler),
+        method: Reflect.getMetadata(constants_1.METHOD_METADATA, handler),
+    };
+};
+(0, vitest_1.describe)("SecurityAuthController route metadata", () => {
+    (0, vitest_1.it)("defines the expected controller base path", () => {
+        (0, vitest_1.expect)(Reflect.getMetadata(constants_1.PATH_METADATA, security_auth_controller_1.SecurityAuthController)).toBe("security/auth");
+    });
+    (0, vitest_1.it)("defines the expected auth routes", () => {
+        (0, vitest_1.expect)(routeMeta("register").path).toBe("register");
+        (0, vitest_1.expect)(routeMeta("login").path).toBe("login");
+        (0, vitest_1.expect)(routeMeta("refresh").path).toBe("refresh");
+        (0, vitest_1.expect)(routeMeta("logout").path).toBe("logout");
+        (0, vitest_1.expect)(routeMeta("changePassword").path).toBe("change-password");
+        (0, vitest_1.expect)(routeMeta("forgotPassword").path).toBe("forgot-password");
+        (0, vitest_1.expect)(routeMeta("resetPassword").path).toBe("reset-password");
+        (0, vitest_1.expect)(routeMeta("verifyEmail").path).toBe("verify-email");
+    });
+});

package/dist/nest/security-workflows-routing.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/nest/security-workflows-routing.test.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const constants_1 = require("@nestjs/common/constants");
+const vitest_1 = require("vitest");
+const security_workflows_controller_1 = require("./security-workflows.controller");
+const routePath = (methodName) => Reflect.getMetadata(constants_1.PATH_METADATA, security_workflows_controller_1.SecurityWorkflowsController.prototype[methodName]);
+(0, vitest_1.describe)("SecurityWorkflowsController route metadata", () => {
+    (0, vitest_1.it)("defines the expected controller base path", () => {
+        (0, vitest_1.expect)(Reflect.getMetadata(constants_1.PATH_METADATA, security_workflows_controller_1.SecurityWorkflowsController)).toBe("security/workflows");
+    });
+    (0, vitest_1.it)("defines the expected workflow routes", () => {
+        (0, vitest_1.expect)(routePath("markEmailVerified")).toBe("users/:id/email-verified");
+        (0, vitest_1.expect)(routePath("setAdminApproval")).toBe("users/:id/admin-approval");
+        (0, vitest_1.expect)(routePath("setUserActive")).toBe("users/:id/active");
+        (0, vitest_1.expect)(routePath("listRoles")).toBe("roles");
+        (0, vitest_1.expect)(routePath("createRole")).toBe("roles");
+        (0, vitest_1.expect)(routePath("removeRole")).toBe("roles/:role");
+        (0, vitest_1.expect)(routePath("getUserRoles")).toBe("users/:userId/roles");
+        (0, vitest_1.expect)(routePath("setUserRoles")).toBe("users/:userId/roles");
+        (0, vitest_1.expect)(routePath("assignUserRole")).toBe("users/:userId/roles");
+        (0, vitest_1.expect)(routePath("removeUserRole")).toBe("users/:userId/roles/:role");
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scryan7371/sdr-security",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "Reusable auth/security capability for API and app clients.",
   "main": "dist/index.js",
   "exports": {
@@ -43,10 +43,10 @@
     "prepush": "npm run ci:prepush"
   },
   "dependencies": {
-    "@babel/runtime": "7.28.6",
+    "@babel/runtime": "7.29.2",
     "bcryptjs": "3.0.3",
     "jsonwebtoken": "9.0.3",
-    "uuid": "11.1.0"
+    "uuid": "13.0.0"
   },
   "peerDependencies": {
     "@nestjs/common": "^11.0.0",
@@ -69,20 +69,25 @@
     }
   },
   "devDependencies": {
-    "@nestjs/common": "11.1.14",
+    "@nestjs/common": "11.1.17",
+    "@nestjs/core": "^11.1.17",
+    "@nestjs/platform-express": "^11.1.17",
     "@nestjs/swagger": "11.2.6",
+    "@nestjs/testing": "^11.1.17",
     "@nestjs/typeorm": "11.0.0",
     "@types/jsonwebtoken": "9.0.10",
-    "@types/node": "^25.2.3",
-    "@types/pg": "8.16.0",
-    "@vitest/coverage-v8": "^4.0.18",
-    "eslint": "9.18.0",
-    "pg": "8.18.0",
+    "@types/node": "^25.5.0",
+    "@types/pg": "8.18.0",
+    "@types/supertest": "^7.2.0",
+    "@vitest/coverage-v8": "^4.1.0",
+    "eslint": "9.39.4",
+    "pg": "8.20.0",
     "prettier": "3.8.1",
+    "supertest": "^7.2.2",
     "typeorm": "0.3.28",
     "typescript": "5.9.3",
-    "typescript-eslint": "8.56.0",
-    "vitest": "4.0.18"
+    "typescript-eslint": "8.57.1",
+    "vitest": "4.1.0"
   },
   "typesVersions": {
     "*": {

package/src/api/migrations/1700000000001-add-refresh-tokens.ts

@@ -12,13 +12,13 @@ export class AddRefreshTokens1700000000001 {
         "token_hash" varchar NOT NULL,
         "expires_at" timestamptz NOT NULL,
         "revoked_at" timestamptz,
-        "userId" uuid,
+        "user_id" uuid,
         "created_at" timestamptz NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-        CONSTRAINT "FK_refresh_token_user" FOREIGN KEY ("userId") REFERENCES ${userTableRef} ("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        CONSTRAINT "FK_refresh_token_user" FOREIGN KEY ("user_id") REFERENCES ${userTableRef} ("id") ON DELETE CASCADE ON UPDATE NO ACTION
       )
     `);
     await queryRunner.query(
-      `CREATE INDEX "IDX_refresh_token_user" ON "refresh_token" ("userId")`,
+      `CREATE INDEX "IDX_refresh_token_user" ON "refresh_token" ("user_id")`,
     );
   }
 

package/src/nest/entities/refresh-token.entity.ts

@@ -14,7 +14,7 @@ export class RefreshTokenEntity {
   @Column({ type: "timestamptz", name: "revoked_at", nullable: true })
   revokedAt!: Date | null;
 
-  @Column({ type: "uuid", name: "userId", nullable: true })
+  @Column({ type: "uuid", name: "user_id", nullable: true })
   userId!: string | null;
 
   @CreateDateColumn({ name: "created_at" })

package/src/nest/security-auth-routing.test.ts

@@ -0,0 +1,30 @@
+import { METHOD_METADATA, PATH_METADATA } from "@nestjs/common/constants";
+import { describe, expect, it } from "vitest";
+import { SecurityAuthController } from "./security-auth.controller";
+
+const routeMeta = (methodName: keyof SecurityAuthController) => {
+  const handler = SecurityAuthController.prototype[methodName] as object;
+  return {
+    path: Reflect.getMetadata(PATH_METADATA, handler),
+    method: Reflect.getMetadata(METHOD_METADATA, handler),
+  };
+};
+
+describe("SecurityAuthController route metadata", () => {
+  it("defines the expected controller base path", () => {
+    expect(Reflect.getMetadata(PATH_METADATA, SecurityAuthController)).toBe(
+      "security/auth",
+    );
+  });
+
+  it("defines the expected auth routes", () => {
+    expect(routeMeta("register").path).toBe("register");
+    expect(routeMeta("login").path).toBe("login");
+    expect(routeMeta("refresh").path).toBe("refresh");
+    expect(routeMeta("logout").path).toBe("logout");
+    expect(routeMeta("changePassword").path).toBe("change-password");
+    expect(routeMeta("forgotPassword").path).toBe("forgot-password");
+    expect(routeMeta("resetPassword").path).toBe("reset-password");
+    expect(routeMeta("verifyEmail").path).toBe("verify-email");
+  });
+});

package/src/nest/security-workflows-routing.test.ts

@@ -0,0 +1,30 @@
+import { PATH_METADATA } from "@nestjs/common/constants";
+import { describe, expect, it } from "vitest";
+import { SecurityWorkflowsController } from "./security-workflows.controller";
+
+const routePath = (methodName: keyof SecurityWorkflowsController) =>
+  Reflect.getMetadata(
+    PATH_METADATA,
+    SecurityWorkflowsController.prototype[methodName] as object,
+  );
+
+describe("SecurityWorkflowsController route metadata", () => {
+  it("defines the expected controller base path", () => {
+    expect(
+      Reflect.getMetadata(PATH_METADATA, SecurityWorkflowsController),
+    ).toBe("security/workflows");
+  });
+
+  it("defines the expected workflow routes", () => {
+    expect(routePath("markEmailVerified")).toBe("users/:id/email-verified");
+    expect(routePath("setAdminApproval")).toBe("users/:id/admin-approval");
+    expect(routePath("setUserActive")).toBe("users/:id/active");
+    expect(routePath("listRoles")).toBe("roles");
+    expect(routePath("createRole")).toBe("roles");
+    expect(routePath("removeRole")).toBe("roles/:role");
+    expect(routePath("getUserRoles")).toBe("users/:userId/roles");
+    expect(routePath("setUserRoles")).toBe("users/:userId/roles");
+    expect(routePath("assignUserRole")).toBe("users/:userId/roles");
+    expect(routePath("removeUserRole")).toBe("users/:userId/roles/:role");
+  });
+});