@tc-libs/authentication 1.15.0 → 1.17.0

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@tc-libs/authentication",
-  "version": "1.15.0",
+  "version": "1.17.0",
   "dependencies": {
-    "@tc-libs/errors": "1.15.0",
-    "@tc-libs/helper": "1.15.0"
+    "@tc-libs/errors": "1.17.0",
+    "@tc-libs/helper": "1.17.0"
   },
   "type": "commonjs",
   "main": "./src/index.js",

package/src/authentication.module.options.d.ts

@@ -11,6 +11,16 @@ export interface AuthenticationModuleOptions {
         clientSecret: string;
         callbackURL: string;
         scope: string[];
+        getBirthday: boolean;
+        getPhoneNumber: boolean;
+    };
+    apple: {
+        clientID: string;
+        teamID: string;
+        keyID: string;
+        privateKeyString: string;
+        callbackURL: string;
+        scope: string[];
     };
     auth: {
         prefixAuthorization: string;

package/src/guards/apple/auth.apple-oauth.guard.d.ts

@@ -0,0 +1,5 @@
+declare const AppleOAuthGuard_base: import("@nestjs/passport").Type<import("@nestjs/passport").IAuthGuard>;
+export declare class AppleOAuthGuard extends AppleOAuthGuard_base {
+    constructor();
+}
+export {};

package/src/guards/apple/auth.apple-oauth.guard.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppleOAuthGuard = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+let AppleOAuthGuard = class AppleOAuthGuard extends (0, passport_1.AuthGuard)('apple') {
+    constructor() {
+        super({
+            accessType: 'offline',
+        });
+    }
+};
+exports.AppleOAuthGuard = AppleOAuthGuard;
+exports.AppleOAuthGuard = AppleOAuthGuard = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [])
+], AppleOAuthGuard);
+//# sourceMappingURL=auth.apple-oauth.guard.js.map

package/src/guards/apple/auth.apple-oauth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.apple-oauth.guard.js","sourceRoot":"","sources":["../../../../../../packages/authentication/src/guards/apple/auth.apple-oauth.guard.ts"],"names":[],"mappings":";;;;AAAA,2CAA4C;AAC5C,+CAA6C;AAGtC,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,IAAA,oBAAS,EAAC,OAAO,CAAC;IACrD;QACE,KAAK,CAAC;YACJ,UAAU,EAAE,SAAS;SACtB,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AANY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;;GACA,eAAe,CAM3B"}

package/src/guards/apple/auth.apple-oauth.strategy.d.ts

@@ -0,0 +1,21 @@
+import { JwtService } from '@nestjs/jwt';
+import { AuthenticationModuleOptions } from '../../authentication.module.options';
+declare const AppleStrategy_base: new (...args: [options: import("passport-apple").AuthenticateOptionsWithRequest] | [options: import("passport-apple").AuthenticateOptions]) => import("passport-apple") & {
+    validate(...args: any[]): unknown;
+};
+export declare class AppleStrategy extends AppleStrategy_base {
+    readonly _options: AuthenticationModuleOptions;
+    private readonly _jwt;
+    constructor(_options: AuthenticationModuleOptions, _jwt: JwtService);
+    validate(req: any, accessToken: string, refreshToken: string, idToken: string, profile: any): Promise<{
+        provider: string;
+        providerId: string;
+        email: any;
+        firstName: string | null;
+        lastName: string | null;
+        idToken: string;
+        accessToken: string;
+        refreshToken: string;
+    }>;
+}
+export {};

package/src/guards/apple/auth.apple-oauth.strategy.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppleStrategy = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
+const passport_1 = require("@nestjs/passport");
+const passport_apple_1 = require("passport-apple");
+const authentication_module_options_1 = require("../../authentication.module.options");
+let AppleStrategy = class AppleStrategy extends (0, passport_1.PassportStrategy)(passport_apple_1.Strategy, 'apple') {
+    constructor(_options, _jwt) {
+        super({
+            clientID: _options.apple.clientID,
+            teamID: _options.apple.teamID,
+            callbackURL: _options.apple.callbackURL,
+            keyID: _options.apple.keyID,
+            privateKeyString: _options.apple.privateKeyString,
+            scope: _options.apple.scope,
+            passReqToCallback: true,
+        });
+        this._options = _options;
+        this._jwt = _jwt;
+    }
+    async validate(req, accessToken, refreshToken, idToken, profile) {
+        const claims = this._jwt.decode(idToken) || {};
+        const appleId = claims.sub;
+        const email = claims.email ?? null;
+        let firstName = null;
+        let lastName = null;
+        try {
+            const userRaw = req.body?.user ? JSON.parse(req.body.user) : null;
+            firstName = userRaw?.name?.firstName ?? null;
+            lastName = userRaw?.name?.lastName ?? null;
+        }
+        catch (e) {
+            console.error(e);
+        }
+        return {
+            provider: 'apple',
+            providerId: appleId,
+            email,
+            firstName,
+            lastName,
+            idToken,
+            accessToken,
+            refreshToken,
+        };
+    }
+};
+exports.AppleStrategy = AppleStrategy;
+exports.AppleStrategy = AppleStrategy = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(authentication_module_options_1.AUTHENTICATION_CONFIG_OPTIONS)),
+    tslib_1.__metadata("design:paramtypes", [Object, jwt_1.JwtService])
+], AppleStrategy);
+//# sourceMappingURL=auth.apple-oauth.strategy.js.map

package/src/guards/apple/auth.apple-oauth.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.apple-oauth.strategy.js","sourceRoot":"","sources":["../../../../../../packages/authentication/src/guards/apple/auth.apple-oauth.strategy.ts"],"names":[],"mappings":";;;;AAAA,2CAAoD;AACpD,qCAAyC;AACzC,+CAAoD;AACpD,mDAA0C;AAC1C,uFAG6C;AAGtC,IAAM,aAAa,GAAnB,MAAM,aAAc,SAAQ,IAAA,2BAAgB,EAAC,yBAAQ,EAAE,OAAO,CAAC;IACpE,YAEW,QAAqC,EAC7B,IAAgB;QAEjC,KAAK,CAAC;YACJ,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ;YACjC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAC7B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW;YACvC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK;YAC3B,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,gBAAgB;YACjD,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK;YAC3B,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QAXM,aAAQ,GAAR,QAAQ,CAA6B;QAC7B,SAAI,GAAJ,IAAI,CAAY;IAWnC,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,GAAQ,EACR,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,OAAY;QAEZ,MAAM,MAAM,GAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAa,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC;QAEnC,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,SAAS,GAAG,OAAO,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC;YAC7C,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC;QAC7C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,OAAO;YACnB,KAAK;YACL,SAAS;YACT,QAAQ;YACR,OAAO;YACP,WAAW;YACX,YAAY;SACb,CAAC;IACJ,CAAC;CACF,CAAA;AAjDY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;IAGR,mBAAA,IAAA,eAAM,EAAC,6DAA6B,CAAC,CAAA;qDAEf,gBAAU;GAJxB,aAAa,CAiDzB"}

package/src/guards/google-oauth/auth.google-oauth.strategy.d.ts

@@ -1,20 +1,19 @@
 import { Profile, Strategy } from 'passport-google-oauth20';
 import { AuthenticationModuleOptions } from '../../authentication.module.options';
+export interface IBirthday {
+    day?: number;
+    month?: number;
+    year?: number;
+    date?: Date;
+}
 declare const GoogleStrategy_base: new (...args: [options: import("passport-google-oauth20").StrategyOptionsWithRequest] | [options: import("passport-google-oauth20").StrategyOptions] | [options: import("passport-google-oauth20").StrategyOptions] | [options: import("passport-google-oauth20").StrategyOptionsWithRequest]) => Strategy & {
     validate(...args: any[]): unknown;
 };
 export declare class GoogleStrategy extends GoogleStrategy_base {
     readonly _options: AuthenticationModuleOptions;
     constructor(_options: AuthenticationModuleOptions);
-    validate(accessToken: string, refreshToken: string, profile: Profile): Promise<{
-        provider: string;
-        providerId: string;
-        email: string | null;
-        firstName: string | null;
-        lastName: string | null;
-        avatar: string | null;
-        accessToken: string;
-        refreshToken: string;
-    }>;
+    fetchPhoneNumber(accessToken: string): Promise<string | null>;
+    fetchBirthday(accessToken: string): Promise<IBirthday | null>;
+    validate(accessToken: string, refreshToken: string, profile: Profile): Promise<any>;
 }
 export {};

package/src/guards/google-oauth/auth.google-oauth.strategy.js

@@ -16,6 +16,30 @@ let GoogleStrategy = class GoogleStrategy extends (0, passport_1.PassportStrateg
         });
         this._options = _options;
     }
+    async fetchPhoneNumber(accessToken) {
+        const res = await fetch('https://people.googleapis.com/v1/people/me?personFields=phoneNumbers', {
+            headers: { Authorization: `Bearer ${accessToken}` },
+        });
+        const data = await res.json();
+        const phone = data.phoneNumbers?.[0]?.value ?? null;
+        return phone;
+    }
+    async fetchBirthday(accessToken) {
+        const r = await fetch('https://people.googleapis.com/v1/people/me?personFields=birthdays', { headers: { Authorization: `Bearer ${accessToken}` } });
+        if (!r.ok)
+            return null;
+        const data = await r.json();
+        const list = data.birthdays ?? [];
+        // preferisci quello "primary", altrimenti il primo con date valorizzata
+        const entry = list.find((b) => b.metadata?.primary) ??
+            list.find((b) => b.date?.month && b.date?.day) ??
+            null;
+        if (!entry?.date)
+            return null;
+        const { year, month, day } = entry.date;
+        const date = new Date(year, month - 1, day, 12, 0, 0, 0);
+        return { year, month, day, date };
+    }
     async validate(accessToken, refreshToken, profile) {
         const { id, emails, name, photos } = profile;
         const data = {
@@ -28,6 +52,14 @@ let GoogleStrategy = class GoogleStrategy extends (0, passport_1.PassportStrateg
             accessToken,
             refreshToken,
         };
+        if (this._options.google.getBirthday) {
+            const bday = await this.fetchBirthday(accessToken);
+            data.birthday = bday;
+        }
+        if (this._options.google.getPhoneNumber) {
+            const phone = await this.fetchPhoneNumber(accessToken);
+            data.phone = phone;
+        }
         return data;
     }
 };

package/src/guards/google-oauth/auth.google-oauth.strategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.google-oauth.strategy.js","sourceRoot":"","sources":["../../../../../../packages/authentication/src/guards/google-oauth/auth.google-oauth.strategy.ts"],"names":[],"mappings":";;;;AAAA,2CAAoD;AACpD,+CAAoD;AACpD,qEAA4D;AAC5D,uFAG6C;AAGtC,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,IAAA,2BAAgB,EAAC,kCAAQ,EAAE,QAAQ,CAAC;IACtE,YAEW,QAAqC;QAE9C,KAAK,CAAC;YACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;YAClC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;YAC1C,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW;YACxC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK;SAC7B,CAAC,CAAC;QAPM,aAAQ,GAAR,QAAQ,CAA6B;IAQhD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,YAAoB,EAAE,OAAgB;QACxE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC7C,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,EAAE;YACd,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI;YACjC,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;YAClC,QAAQ,EAAE,IAAI,EAAE,UAAU,IAAI,IAAI;YAClC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI;YAClC,WAAW;YACX,YAAY;SACb,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA3BY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGR,mBAAA,IAAA,eAAM,EAAC,6DAA6B,CAAC,CAAA;;GAF7B,cAAc,CA2B1B"}
+{"version":3,"file":"auth.google-oauth.strategy.js","sourceRoot":"","sources":["../../../../../../packages/authentication/src/guards/google-oauth/auth.google-oauth.strategy.ts"],"names":[],"mappings":";;;;AAAA,2CAAoD;AACpD,+CAAoD;AACpD,qEAA4D;AAC5D,uFAG6C;AAUtC,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,IAAA,2BAAgB,EAAC,kCAAQ,EAAE,QAAQ,CAAC;IACtE,YAEW,QAAqC;QAE9C,KAAK,CAAC;YACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;YAClC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;YAC1C,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW;YACxC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK;SAC7B,CAAC,CAAC;QAPM,aAAQ,GAAR,QAAQ,CAA6B;IAQhD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QACxC,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,sEAAsE,EACtE;YACE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;SACpD,CACF,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,MAAM,CAAC,GAAG,MAAM,KAAK,CACnB,mEAAmE,EACnE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,EAAE,CACxD,CAAC;QACF,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAU,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACzC,wEAAwE;QACxE,MAAM,KAAK,GACT,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC;YAC9C,IAAI,CAAC;QACP,IAAI,CAAC,KAAK,EAAE,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,YAAoB,EAAE,OAAgB;QACxE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAE7C,MAAM,IAAI,GAAQ;YAChB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,EAAE;YACd,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI;YACjC,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;YAClC,QAAQ,EAAE,IAAI,EAAE,UAAU,IAAI,IAAI;YAClC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI;YAClC,WAAW;YACX,YAAY;SACb,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACvD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAnEY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGR,mBAAA,IAAA,eAAM,EAAC,6DAA6B,CAAC,CAAA;;GAF7B,cAAc,CAmE1B"}