@simple-auth-kit/cli 1.4.3 → 1.5.1

package/registry/combos/nestjs-prisma/variants/workspaces/src/auth.module.ts

@@ -1,31 +1,38 @@
 import { PrismaPg } from "@prisma/adapter-pg";
 import { DynamicModule, Module } from "@nestjs/common";
 import { APP_FILTER, APP_INTERCEPTOR } from "@nestjs/core";
-import { AbilityGuard } from "./ability.guard.js";
-import { AdminController } from "./admin.controller.js";
-import { AuditLogRepository } from "./audit-log.repository.js";
-import { AuthCoreErrorFilter } from "./auth-core-error.filter.js";
+import { AbilityGuard } from "./guards/ability.guard.js";
+import { AdminController } from "./controllers/admin.controller.js";
+import { AuditLogRepository } from "./repositories/audit-log.repository.js";
+import { AuthCoreErrorFilter } from "./filters/auth-core-error.filter.js";
 import { AUTH_CONFIG, AuthConfig, defaultAuthConfig } from "./auth.config.js";
-import { AuthController } from "./auth.controller.js";
-import { AuthGuard } from "./auth.guard.js";
-import { AuthService } from "./auth.service.js";
-import { AuthzGuard, WorkspaceGuard } from "./authz.guard.js";
+import { AuthController } from "./controllers/auth.controller.js";
+import { AuthGuard } from "./guards/auth.guard.js";
+import { AuthService } from "./services/auth.service.js";
+import { AuthzGuard, WorkspaceGuard } from "./guards/authz.guard.js";
 import { PrismaClient } from "../generated/prisma/client.js";
-import { CountryRepository } from "./country.repository.js";
-import { CustomerRepository } from "./customer.repository.js";
+import { CountryRepository } from "./repositories/country.repository.js";
+import { CustomerRepository } from "./repositories/customer.repository.js";
 import { KeyProviderService } from "./key-provider.js";
-import { LanguageRepository } from "./language.repository.js";
-import { OAuthRepository } from "./oauth.repository.js";
-import { PasswordResetRepository } from "./password-reset.repository.js";
-import { InMemoryPermissionCacheStore, PERMISSION_CACHE_STORE, PermissionCache } from "./permission-cache.js";
-import { InMemoryRateLimitStore, RATE_LIMIT_STORE } from "./rate-limit.store.js";
-import { RbacRepository } from "./rbac.repository.js";
-import { ResponseInterceptor } from "./response.interceptor.js";
+import { LanguageRepository } from "./repositories/language.repository.js";
+import { OAuthRepository } from "./repositories/oauth.repository.js";
+import { PasswordResetRepository } from "./repositories/password-reset.repository.js";
+import {
+  InMemoryPermissionCacheStore,
+  PERMISSION_CACHE_STORE,
+  PermissionCache,
+} from "./permission-cache.js";
+import {
+  InMemoryRateLimitStore,
+  RATE_LIMIT_STORE,
+} from "./rate-limit.store.js";
+import { RbacRepository } from "./repositories/rbac.repository.js";
+import { ResponseInterceptor } from "./interceptors/response.interceptor.js";
 import { assertEveryRouteDeclaresATier } from "./route-tiers.js";
-import { SessionRepository } from "./session.repository.js";
-import { TwoFactorRepository } from "./two-factor.repository.js";
-import { WorkspaceController } from "./workspace.controller.js";
-import { WorkspaceRepository } from "./workspace.repository.js";
+import { SessionRepository } from "./repositories/session.repository.js";
+import { TwoFactorRepository } from "./repositories/two-factor.repository.js";
+import { WorkspaceController } from "./controllers/workspace.controller.js";
+import { WorkspaceRepository } from "./repositories/workspace.repository.js";
 
 // Both what the module registers and what the startup tier check walks — one list, so a
 // controller can't be added and left out of the check.
@@ -36,9 +43,14 @@ export class AuthModule {
   static forRoot(config: Partial<AuthConfig> = {}): DynamicModule {
     // Fail-closed before anything else exists — nothing above this line allocates a database
     // client or a port, so a failed boot leaves nothing behind.
-    assertEveryRouteDeclaresATier(AUTH_CONTROLLERS, { authentication: AuthGuard, ability: AbilityGuard });
+    assertEveryRouteDeclaresATier(AUTH_CONTROLLERS, {
+      authentication: AuthGuard,
+      ability: AbilityGuard,
+    });
 
-    const adapter = new PrismaPg({ connectionString: process.env["DATABASE_URL"] });
+    const adapter = new PrismaPg({
+      connectionString: process.env["DATABASE_URL"],
+    });
 
     if (!config.permissionCacheStore || !config.rateLimitStore) {
       console.warn(
@@ -55,14 +67,21 @@ export class AuthModule {
         { provide: AUTH_CONFIG, useValue: { ...defaultAuthConfig, ...config } },
         { provide: PrismaClient, useValue: new PrismaClient({ adapter }) },
         // Swap for a Redis-backed store by passing `permissionCacheStore` to forRoot.
-        { provide: PERMISSION_CACHE_STORE, useValue: config.permissionCacheStore ?? new InMemoryPermissionCacheStore() },
+        {
+          provide: PERMISSION_CACHE_STORE,
+          useValue:
+            config.permissionCacheStore ?? new InMemoryPermissionCacheStore(),
+        },
         PermissionCache,
         { provide: APP_FILTER, useClass: AuthCoreErrorFilter },
         { provide: APP_INTERCEPTOR, useClass: ResponseInterceptor },
         AuditLogRepository,
         SessionRepository,
         KeyProviderService,
-        { provide: RATE_LIMIT_STORE, useValue: config.rateLimitStore ?? new InMemoryRateLimitStore() },
+        {
+          provide: RATE_LIMIT_STORE,
+          useValue: config.rateLimitStore ?? new InMemoryRateLimitStore(),
+        },
         RbacRepository,
         WorkspaceRepository,
         TwoFactorRepository,
@@ -77,7 +96,16 @@ export class AuthModule {
         WorkspaceGuard,
         AbilityGuard,
       ],
-      exports: [AuthService, AuthGuard, AuthzGuard, WorkspaceGuard, AbilityGuard, PermissionCache, WorkspaceRepository, PrismaClient],
+      exports: [
+        AuthService,
+        AuthGuard,
+        AuthzGuard,
+        WorkspaceGuard,
+        AbilityGuard,
+        PermissionCache,
+        WorkspaceRepository,
+        PrismaClient,
+      ],
     };
   }
 }