@simple-auth-kit/cli 1.4.3 → 1.5.0

package/registry/combos/nestjs-prisma/variants/base/src/auth.module.ts

@@ -2,30 +2,37 @@ import { PrismaPg } from "@prisma/adapter-pg";
 import { DynamicModule, Module } from "@nestjs/common";
 import { APP_FILTER, APP_GUARD, APP_INTERCEPTOR } from "@nestjs/core";
 import { ThrottlerGuard, ThrottlerModule } from "@nestjs/throttler";
-import { AbilityGuard } from "./ability.guard.js";
-import { AdminController } from "./admin.controller.js";
-import { AuditLogGateway } from "./audit-log.gateway.js";
-import { AuditLogRepository } from "./audit-log.repository.js";
-import { AuthCoreErrorFilter } from "./auth-core-error.filter.js";
+import { AbilityGuard } from "./guards/ability.guard.js";
+import { AdminController } from "./controllers/admin.controller.js";
+import { AuditLogGateway } from "./gateways/audit-log.gateway.js";
+import { AuditLogRepository } from "./repositories/audit-log.repository.js";
+import { AuthCoreErrorFilter } from "./filters/auth-core-error.filter.js";
 import { AUTH_CONFIG, AuthConfig, defaultAuthConfig } from "./auth.config.js";
-import { AuthController } from "./auth.controller.js";
-import { AuthGuard } from "./auth.guard.js";
-import { AuthService } from "./auth.service.js";
-import { AuthzGuard } from "./authz.guard.js";
-import { PrismaClient } from "../generated/prisma/client.js";
-import { CountryRepository } from "./country.repository.js";
-import { CustomerRepository } from "./customer.repository.js";
+import { AuthController } from "./controllers/auth.controller.js";
+import { AuthGuard } from "./guards/auth.guard.js";
+import { AuthService } from "./services/auth.service.js";
+import { AuthzGuard } from "./guards/authz.guard.js";
+import { PrismaClient } from "./../generated/prisma/client.js";
+import { CountryRepository } from "./repositories/country.repository.js";
+import { CustomerRepository } from "./repositories/customer.repository.js";
 import { KeyProviderService } from "./key-provider.js";
-import { LanguageRepository } from "./language.repository.js";
-import { OAuthRepository } from "./oauth.repository.js";
-import { PasswordResetRepository } from "./password-reset.repository.js";
-import { InMemoryPermissionCacheStore, PERMISSION_CACHE_STORE, PermissionCache } from "./permission-cache.js";
-import { InMemoryRateLimitStore, RATE_LIMIT_STORE } from "./rate-limit.store.js";
-import { RbacRepository } from "./rbac.repository.js";
-import { ResponseInterceptor } from "./response.interceptor.js";
+import { LanguageRepository } from "./repositories/language.repository.js";
+import { OAuthRepository } from "./repositories/oauth.repository.js";
+import { PasswordResetRepository } from "./repositories/password-reset.repository.js";
+import {
+  InMemoryPermissionCacheStore,
+  PERMISSION_CACHE_STORE,
+  PermissionCache,
+} from "./permission-cache.js";
+import {
+  InMemoryRateLimitStore,
+  RATE_LIMIT_STORE,
+} from "./rate-limit.store.js";
+import { RbacRepository } from "./repositories/rbac.repository.js";
+import { ResponseInterceptor } from "./interceptors/response.interceptor.js";
 import { assertEveryRouteDeclaresATier } from "./route-tiers.js";
-import { SessionRepository } from "./session.repository.js";
-import { TwoFactorRepository } from "./two-factor.repository.js";
+import { SessionRepository } from "./repositories/session.repository.js";
+import { TwoFactorRepository } from "./repositories/two-factor.repository.js";
 
 // Both what the module registers and what the startup tier check walks — one list, so a
 // controller can't be added and left out of the check.
@@ -36,10 +43,15 @@ export class AuthModule {
   static forRoot(config: Partial<AuthConfig> = {}): DynamicModule {
     // Fail-closed before anything else exists — nothing above this line allocates a database
     // client or a port, so a failed boot leaves nothing behind.
-    assertEveryRouteDeclaresATier(AUTH_CONTROLLERS, { authentication: AuthGuard, ability: AbilityGuard });
+    assertEveryRouteDeclaresATier(AUTH_CONTROLLERS, {
+      authentication: AuthGuard,
+      ability: AbilityGuard,
+    });
 
     const resolved: AuthConfig = { ...defaultAuthConfig, ...config };
-    const adapter = new PrismaPg({ connectionString: process.env["DATABASE_URL"] });
+    const adapter = new PrismaPg({
+      connectionString: process.env["DATABASE_URL"],
+    });
 
     if (!config.permissionCacheStore || !config.rateLimitStore) {
       console.warn(
@@ -51,24 +63,36 @@ export class AuthModule {
     }
     return {
       module: AuthModule,
-      imports: resolved.throttle === false ? [] : [ThrottlerModule.forRoot(resolved.throttle)],
+      imports:
+        resolved.throttle === false
+          ? []
+          : [ThrottlerModule.forRoot(resolved.throttle)],
       controllers: AUTH_CONTROLLERS,
       providers: [
         { provide: AUTH_CONFIG, useValue: resolved },
         { provide: PrismaClient, useValue: new PrismaClient({ adapter }) },
         // Swap for a Redis-backed store by passing `permissionCacheStore` to forRoot.
-        { provide: PERMISSION_CACHE_STORE, useValue: config.permissionCacheStore ?? new InMemoryPermissionCacheStore() },
+        {
+          provide: PERMISSION_CACHE_STORE,
+          useValue:
+            config.permissionCacheStore ?? new InMemoryPermissionCacheStore(),
+        },
         PermissionCache,
         { provide: APP_FILTER, useClass: AuthCoreErrorFilter },
         { provide: APP_INTERCEPTOR, useClass: ResponseInterceptor },
         // Registered from here rather than the consumer's root module so throttling ships with
         // the combo. Runs before the route-level guards, exactly like every other APP_GUARD.
-        ...(resolved.throttle === false ? [] : [{ provide: APP_GUARD, useClass: ThrottlerGuard }]),
+        ...(resolved.throttle === false
+          ? []
+          : [{ provide: APP_GUARD, useClass: ThrottlerGuard }]),
         AuditLogRepository,
         AuditLogGateway,
         SessionRepository,
         KeyProviderService,
-        { provide: RATE_LIMIT_STORE, useValue: config.rateLimitStore ?? new InMemoryRateLimitStore() },
+        {
+          provide: RATE_LIMIT_STORE,
+          useValue: config.rateLimitStore ?? new InMemoryRateLimitStore(),
+        },
         RbacRepository,
         TwoFactorRepository,
         OAuthRepository,
@@ -81,7 +105,14 @@ export class AuthModule {
         AuthzGuard,
         AbilityGuard,
       ],
-      exports: [AuthService, AuthGuard, AuthzGuard, AbilityGuard, PermissionCache, PrismaClient],
+      exports: [
+        AuthService,
+        AuthGuard,
+        AuthzGuard,
+        AbilityGuard,
+        PermissionCache,
+        PrismaClient,
+      ],
     };
   }
 }