better-ts-stack 2.0.0 → 2.0.1

package/templates/modules/auth/nestjs/src/auth/jwt.ts

@@ -1,27 +1,27 @@
-import jwt, { type SignOptions } from "jsonwebtoken";
-
-export interface AuthTokenPayload {
-  sub: string;
-  email: string;
-  name?: string | null;
-}
-
-const { JWT_SECRET, JWT_EXPIRES_IN } = process.env;
-
-function ensureSecret(): string {
-  if (!JWT_SECRET) {
-    throw new Error("JWT_SECRET is not set");
-  }
-  return JWT_SECRET;
-}
-
-export function signToken(payload: AuthTokenPayload): string {
-  const secret = ensureSecret();
-  const expiresIn = JWT_EXPIRES_IN || "1h";
-  return jwt.sign(payload, secret, { expiresIn } as SignOptions);
-}
-
-export function verifyToken(token: string): AuthTokenPayload {
-  const secret = ensureSecret();
-  return jwt.verify(token, secret) as AuthTokenPayload;
-}
+import jwt, { type SignOptions } from "jsonwebtoken";
+
+export interface AuthTokenPayload {
+  sub: string;
+  email: string;
+  name?: string | null;
+}
+
+const { JWT_SECRET, JWT_EXPIRES_IN } = process.env;
+
+function ensureSecret(): string {
+  if (!JWT_SECRET) {
+    throw new Error("JWT_SECRET is not set");
+  }
+  return JWT_SECRET;
+}
+
+export function signToken(payload: AuthTokenPayload): string {
+  const secret = ensureSecret();
+  const expiresIn = JWT_EXPIRES_IN || "1h";
+  return jwt.sign(payload, secret, { expiresIn } as SignOptions);
+}
+
+export function verifyToken(token: string): AuthTokenPayload {
+  const secret = ensureSecret();
+  return jwt.verify(token, secret) as AuthTokenPayload;
+}

package/templates/modules/auth/nestjs/src/auth/users.service.ts.hbs

@@ -1,144 +1,144 @@
-{{#if (eq database 'drizzle')}}
-import { Inject, Injectable } from "@nestjs/common";
-import { eq } from "drizzle-orm";
-
-import { type Database, DRIZZLE } from "../database/database.module.js";
-import { users } from "../database/schema.js";
-{{/if}}
-{{#if (eq database 'prisma')}}
-import { Injectable } from "@nestjs/common";
-
-import { PrismaService } from "../prisma/prisma.service.js";
-{{/if}}
-{{#if (eq database 'mongoose')}}
-import { Injectable } from "@nestjs/common";
-import { InjectModel } from "@nestjs/mongoose";
-import type { Model } from "mongoose";
-
-import { User } from "../users/user.schema.js";
-{{/if}}
-{{#if (eq database 'none')}}
-import { Injectable } from "@nestjs/common";
-import { randomUUID } from "node:crypto";
-{{/if}}
-
-export interface AuthUser {
-  id: string;
-  email: string;
-  name?: string | null;
-  password: string;
-}
-
-export interface CreateUserInput {
-  email: string;
-  name?: string | null;
-  password: string;
-}
-
-@Injectable()
-export class UsersService {
-  {{#if (eq database 'drizzle')}}
-  constructor(@Inject(DRIZZLE) private readonly db: Database) {}
-
-  async findByEmail(email: string): Promise<AuthUser | null> {
-    const [user] = await this.db
-      .select()
-      .from(users)
-      .where(eq(users.email, email))
-      .limit(1);
-    return user ?? null;
-  }
-
-  async create(data: CreateUserInput): Promise<AuthUser> {
-    const [user] = await this.db.insert(users).values(data).returning();
-    return user;
-  }
-  {{/if}}
-  {{#if (eq database 'prisma')}}
-  constructor(private readonly prisma: PrismaService) {}
-
-  findByEmail(email: string): Promise<AuthUser | null> {
-    return this.prisma.user.findUnique({ where: { email } });
-  }
-
-  create(data: CreateUserInput): Promise<AuthUser> {
-    return this.prisma.user.create({ data });
-  }
-  {{/if}}
-  {{#if (eq database 'mongoose')}}
-  constructor(
-    @InjectModel(User.name) private readonly userModel: Model<User>
-  ) {}
-
-  async findByEmail(email: string): Promise<AuthUser | null> {
-    const user = await this.userModel.findOne({ email }).exec();
-    if (!user) return null;
-    return {
-      id: user._id.toString(),
-      email: user.email,
-      name: user.name,
-      password: user.password,
-    };
-  }
-
-  async create(data: CreateUserInput): Promise<AuthUser> {
-    const user = await this.userModel.create(data);
-    return {
-      id: user._id.toString(),
-      email: user.email,
-      name: user.name,
-      password: user.password,
-    };
-  }
-  {{/if}}
-  {{#if (eq database 'none')}}
-  // In-memory store for trying the API out: users are lost on restart, so add
-  // a database before going to production
-  private readonly users: AuthUser[] = [];
-
-  findByEmail(email: string): Promise<AuthUser | null> {
-    const user = this.users.find((candidate) => candidate.email === email);
-    return Promise.resolve(user ?? null);
-  }
-
-  create(data: CreateUserInput): Promise<AuthUser> {
-    // Enforce unique emails like a database constraint would, so a sign-up that
-    // raced past the findByEmail check is rejected instead of duplicated
-    if (this.users.some((candidate) => candidate.email === data.email)) {
-      return Promise.reject(
-        Object.assign(new Error("User already exists"), {
-          code: "DUPLICATE_EMAIL",
-        })
-      );
-    }
-
-    const user: AuthUser = { id: randomUUID(), ...data };
-    this.users.push(user);
-    return Promise.resolve(user);
-  }
-  {{/if}}
-}
-
-// Unique-constraint error codes: Prisma, PostgreSQL (Drizzle wraps it in `cause`),
-// MongoDB, and the in-memory store
-const DUPLICATE_KEY_CODES = new Set<unknown>([
-  "P2002",
-  "23505",
-  11000,
-  "DUPLICATE_EMAIL",
-]);
-
-// True when an insert failed because the email is already taken (e.g. concurrent sign-ups)
-export function isDuplicateEmailError(error: unknown): boolean {
-  let current = error;
-  for (
-    let depth = 0;
-    depth < 5 && current && typeof current === "object";
-    depth++
-  ) {
-    if (DUPLICATE_KEY_CODES.has((current as { code?: unknown }).code))
-      return true;
-    current = (current as { cause?: unknown }).cause;
-  }
-  return false;
-}
+{{#if (eq database 'drizzle')}}
+import { Inject, Injectable } from "@nestjs/common";
+import { eq } from "drizzle-orm";
+
+import { type Database, DRIZZLE } from "../database/database.module.js";
+import { users } from "../database/schema.js";
+{{/if}}
+{{#if (eq database 'prisma')}}
+import { Injectable } from "@nestjs/common";
+
+import { PrismaService } from "../prisma/prisma.service.js";
+{{/if}}
+{{#if (eq database 'mongoose')}}
+import { Injectable } from "@nestjs/common";
+import { InjectModel } from "@nestjs/mongoose";
+import type { Model } from "mongoose";
+
+import { User } from "../users/user.schema.js";
+{{/if}}
+{{#if (eq database 'none')}}
+import { Injectable } from "@nestjs/common";
+import { randomUUID } from "node:crypto";
+{{/if}}
+
+export interface AuthUser {
+  id: string;
+  email: string;
+  name?: string | null;
+  password: string;
+}
+
+export interface CreateUserInput {
+  email: string;
+  name?: string | null;
+  password: string;
+}
+
+@Injectable()
+export class UsersService {
+  {{#if (eq database 'drizzle')}}
+  constructor(@Inject(DRIZZLE) private readonly db: Database) {}
+
+  async findByEmail(email: string): Promise<AuthUser | null> {
+    const [user] = await this.db
+      .select()
+      .from(users)
+      .where(eq(users.email, email))
+      .limit(1);
+    return user ?? null;
+  }
+
+  async create(data: CreateUserInput): Promise<AuthUser> {
+    const [user] = await this.db.insert(users).values(data).returning();
+    return user;
+  }
+  {{/if}}
+  {{#if (eq database 'prisma')}}
+  constructor(private readonly prisma: PrismaService) {}
+
+  findByEmail(email: string): Promise<AuthUser | null> {
+    return this.prisma.user.findUnique({ where: { email } });
+  }
+
+  create(data: CreateUserInput): Promise<AuthUser> {
+    return this.prisma.user.create({ data });
+  }
+  {{/if}}
+  {{#if (eq database 'mongoose')}}
+  constructor(
+    @InjectModel(User.name) private readonly userModel: Model<User>
+  ) {}
+
+  async findByEmail(email: string): Promise<AuthUser | null> {
+    const user = await this.userModel.findOne({ email }).exec();
+    if (!user) return null;
+    return {
+      id: user._id.toString(),
+      email: user.email,
+      name: user.name,
+      password: user.password,
+    };
+  }
+
+  async create(data: CreateUserInput): Promise<AuthUser> {
+    const user = await this.userModel.create(data);
+    return {
+      id: user._id.toString(),
+      email: user.email,
+      name: user.name,
+      password: user.password,
+    };
+  }
+  {{/if}}
+  {{#if (eq database 'none')}}
+  // In-memory store for trying the API out: users are lost on restart, so add
+  // a database before going to production
+  private readonly users: AuthUser[] = [];
+
+  findByEmail(email: string): Promise<AuthUser | null> {
+    const user = this.users.find((candidate) => candidate.email === email);
+    return Promise.resolve(user ?? null);
+  }
+
+  create(data: CreateUserInput): Promise<AuthUser> {
+    // Enforce unique emails like a database constraint would, so a sign-up that
+    // raced past the findByEmail check is rejected instead of duplicated
+    if (this.users.some((candidate) => candidate.email === data.email)) {
+      return Promise.reject(
+        Object.assign(new Error("User already exists"), {
+          code: "DUPLICATE_EMAIL",
+        })
+      );
+    }
+
+    const user: AuthUser = { id: randomUUID(), ...data };
+    this.users.push(user);
+    return Promise.resolve(user);
+  }
+  {{/if}}
+}
+
+// Unique-constraint error codes: Prisma, PostgreSQL (Drizzle wraps it in `cause`),
+// MongoDB, and the in-memory store
+const DUPLICATE_KEY_CODES = new Set<unknown>([
+  "P2002",
+  "23505",
+  11000,
+  "DUPLICATE_EMAIL",
+]);
+
+// True when an insert failed because the email is already taken (e.g. concurrent sign-ups)
+export function isDuplicateEmailError(error: unknown): boolean {
+  let current = error;
+  for (
+    let depth = 0;
+    depth < 5 && current && typeof current === "object";
+    depth++
+  ) {
+    if (DUPLICATE_KEY_CODES.has((current as { code?: unknown }).code))
+      return true;
+    current = (current as { cause?: unknown }).cause;
+  }
+  return false;
+}

package/templates/modules/auth/nestjs/src/auth/zod-validation.pipe.ts

@@ -1,16 +1,16 @@
-import { BadRequestException, type PipeTransform } from "@nestjs/common";
-import type { ZodType } from "zod";
-
-// Validates a request body against a Zod schema and returns the parsed value
-export class ZodValidationPipe<T> implements PipeTransform<unknown, T> {
-  constructor(private readonly schema: ZodType<T>) {}
-
-  transform(value: unknown): T {
-    // The body is undefined when the request has none
-    const result = this.schema.safeParse(value ?? {});
-    if (!result.success) {
-      throw new BadRequestException(result.error.issues[0].message);
-    }
-    return result.data;
-  }
-}
+import { BadRequestException, type PipeTransform } from "@nestjs/common";
+import type { ZodType } from "zod";
+
+// Validates a request body against a Zod schema and returns the parsed value
+export class ZodValidationPipe<T> implements PipeTransform<unknown, T> {
+  constructor(private readonly schema: ZodType<T>) {}
+
+  transform(value: unknown): T {
+    // The body is undefined when the request has none
+    const result = this.schema.safeParse(value ?? {});
+    if (!result.success) {
+      throw new BadRequestException(result.error.issues[0].message);
+    }
+    return result.data;
+  }
+}

package/templates/modules/auth/nextjs/app/dashboard/page.tsx

@@ -1,96 +1,96 @@
-import Link from "next/link";
-import { headers } from "next/headers";
-import { redirect } from "next/navigation";
-import { ArrowRight, ShieldCheck } from "lucide-react";
-
-import { SignOutButton } from "@/components/auth/sign-out-button";
-import { buttonVariants } from "@/components/ui/button";
-import {
-  Card,
-  CardContent,
-  CardDescription,
-  CardHeader,
-  CardTitle,
-} from "@/components/ui/card";
-import { auth } from "@/lib/auth";
-import { cn } from "@/lib/utils";
-
-export default async function DashboardPage() {
-  const session = await auth.api.getSession({
-    headers: await headers(),
-  });
-
-  if (!session) {
-    redirect("/sign-in");
-  }
-
-  return (
-    <main className="min-h-screen bg-[linear-gradient(180deg,_#f8fafc_0%,_#eef2ff_100%)] px-6 py-16 sm:px-10">
-      <div className="mx-auto max-w-5xl space-y-8">
-        <header className="flex flex-col gap-6 rounded-[2rem] border border-white/70 bg-white/85 p-8 shadow-xl shadow-slate-200/60 backdrop-blur md:flex-row md:items-end md:justify-between">
-          <div className="space-y-3">
-            <span className="inline-flex items-center gap-2 rounded-full bg-emerald-50 px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-emerald-700">
-              <ShieldCheck className="size-4" />
-              Authenticated session
-            </span>
-            <div className="space-y-1">
-              <h1 className="text-3xl font-semibold tracking-tight text-slate-950">
-                Welcome {session.user.name}
-              </h1>
-              <p className="text-sm text-slate-600">{session.user.email}</p>
-            </div>
-          </div>
-          <SignOutButton />
-        </header>
-
-        <section className="grid gap-5 md:grid-cols-2">
-          <Card>
-            <CardHeader>
-              <CardTitle>Protected route example</CardTitle>
-              <CardDescription>
-                This page verifies the session on the server before rendering any
-                content.
-              </CardDescription>
-            </CardHeader>
-            <CardContent className="space-y-4 text-sm text-slate-600">
-              <p>
-                The generated proxy only performs an optimistic cookie check. The
-                authoritative guard happens here with{" "}
-                <code className="font-mono text-slate-900">
-                  auth.api.getSession({"{"} headers: await headers() {"}"})
-                </code>
-                .
-              </p>
-              <p>
-                That keeps route protection aligned with Better Auth&apos;s
-                Next.js guidance while staying easy to extend.
-              </p>
-            </CardContent>
-          </Card>
-
-          <Card>
-            <CardHeader>
-              <CardTitle>Suggested next steps</CardTitle>
-              <CardDescription>
-                Keep the generated auth flow, then customize the app around your
-                product.
-              </CardDescription>
-            </CardHeader>
-            <CardContent className="space-y-3 text-sm text-slate-600">
-              <p>Replace the demo dashboard with your first authenticated page.</p>
-              <p>Extend the schema with profile or onboarding fields.</p>
-              <p>Add provider-based auth or email verification later if needed.</p>
-              <Link
-                href="/"
-                className={cn(buttonVariants({ variant: "outline" }), "w-fit gap-2")}
-              >
-                Back to home
-                <ArrowRight className="size-4" />
-              </Link>
-            </CardContent>
-          </Card>
-        </section>
-      </div>
-    </main>
-  );
-}
+import Link from "next/link";
+import { headers } from "next/headers";
+import { redirect } from "next/navigation";
+import { ArrowRight, ShieldCheck } from "lucide-react";
+
+import { SignOutButton } from "@/components/auth/sign-out-button";
+import { buttonVariants } from "@/components/ui/button";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@/components/ui/card";
+import { auth } from "@/lib/auth";
+import { cn } from "@/lib/utils";
+
+export default async function DashboardPage() {
+  const session = await auth.api.getSession({
+    headers: await headers(),
+  });
+
+  if (!session) {
+    redirect("/sign-in");
+  }
+
+  return (
+    <main className="min-h-screen bg-[linear-gradient(180deg,_#f8fafc_0%,_#eef2ff_100%)] px-6 py-16 sm:px-10">
+      <div className="mx-auto max-w-5xl space-y-8">
+        <header className="flex flex-col gap-6 rounded-[2rem] border border-white/70 bg-white/85 p-8 shadow-xl shadow-slate-200/60 backdrop-blur md:flex-row md:items-end md:justify-between">
+          <div className="space-y-3">
+            <span className="inline-flex items-center gap-2 rounded-full bg-emerald-50 px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-emerald-700">
+              <ShieldCheck className="size-4" />
+              Authenticated session
+            </span>
+            <div className="space-y-1">
+              <h1 className="text-3xl font-semibold tracking-tight text-slate-950">
+                Welcome {session.user.name}
+              </h1>
+              <p className="text-sm text-slate-600">{session.user.email}</p>
+            </div>
+          </div>
+          <SignOutButton />
+        </header>
+
+        <section className="grid gap-5 md:grid-cols-2">
+          <Card>
+            <CardHeader>
+              <CardTitle>Protected route example</CardTitle>
+              <CardDescription>
+                This page verifies the session on the server before rendering any
+                content.
+              </CardDescription>
+            </CardHeader>
+            <CardContent className="space-y-4 text-sm text-slate-600">
+              <p>
+                The generated proxy only performs an optimistic cookie check. The
+                authoritative guard happens here with{" "}
+                <code className="font-mono text-slate-900">
+                  auth.api.getSession({"{"} headers: await headers() {"}"})
+                </code>
+                .
+              </p>
+              <p>
+                That keeps route protection aligned with Better Auth&apos;s
+                Next.js guidance while staying easy to extend.
+              </p>
+            </CardContent>
+          </Card>
+
+          <Card>
+            <CardHeader>
+              <CardTitle>Suggested next steps</CardTitle>
+              <CardDescription>
+                Keep the generated auth flow, then customize the app around your
+                product.
+              </CardDescription>
+            </CardHeader>
+            <CardContent className="space-y-3 text-sm text-slate-600">
+              <p>Replace the demo dashboard with your first authenticated page.</p>
+              <p>Extend the schema with profile or onboarding fields.</p>
+              <p>Add provider-based auth or email verification later if needed.</p>
+              <Link
+                href="/"
+                className={cn(buttonVariants({ variant: "outline" }), "w-fit gap-2")}
+              >
+                Back to home
+                <ArrowRight className="size-4" />
+              </Link>
+            </CardContent>
+          </Card>
+        </section>
+      </div>
+    </main>
+  );
+}

package/templates/modules/auth/nextjs/app/sign-in/page.tsx

@@ -1,35 +1,35 @@
-import { headers } from "next/headers";
-import { redirect } from "next/navigation";
-
-import { SignInForm } from "@/components/auth/sign-in-form";
-import { auth } from "@/lib/auth";
-
-export default async function SignInPage() {
-  const session = await auth.api.getSession({
-    headers: await headers(),
-  });
-
-  if (session) {
-    redirect("/dashboard");
-  }
-
-  return (
-    <main className="min-h-screen bg-[radial-gradient(circle_at_top,_rgba(14,165,233,0.16),_transparent_30%),linear-gradient(180deg,_#f8fafc_0%,_#eef2ff_100%)] px-6 py-16 sm:px-10">
-      <div className="mx-auto flex min-h-[calc(100vh-8rem)] max-w-5xl items-center gap-12 lg:grid lg:grid-cols-[0.9fr_1.1fr]">
-        <section className="hidden space-y-5 lg:block">
-          <span className="inline-flex rounded-full border border-sky-200 bg-white/80 px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-sky-700">
-            Better Auth
-          </span>
-          <h1 className="text-4xl font-semibold tracking-tight text-slate-950">
-            Welcome back.
-          </h1>
-          <p className="max-w-md text-base leading-7 text-slate-600">
-            This generated starter includes protected routes, session-aware page
-            guards, and reusable auth form primitives you can extend from here.
-          </p>
-        </section>
-        <SignInForm />
-      </div>
-    </main>
-  );
-}
+import { headers } from "next/headers";
+import { redirect } from "next/navigation";
+
+import { SignInForm } from "@/components/auth/sign-in-form";
+import { auth } from "@/lib/auth";
+
+export default async function SignInPage() {
+  const session = await auth.api.getSession({
+    headers: await headers(),
+  });
+
+  if (session) {
+    redirect("/dashboard");
+  }
+
+  return (
+    <main className="min-h-screen bg-[radial-gradient(circle_at_top,_rgba(14,165,233,0.16),_transparent_30%),linear-gradient(180deg,_#f8fafc_0%,_#eef2ff_100%)] px-6 py-16 sm:px-10">
+      <div className="mx-auto flex min-h-[calc(100vh-8rem)] max-w-5xl items-center gap-12 lg:grid lg:grid-cols-[0.9fr_1.1fr]">
+        <section className="hidden space-y-5 lg:block">
+          <span className="inline-flex rounded-full border border-sky-200 bg-white/80 px-3 py-1 text-xs font-medium uppercase tracking-[0.24em] text-sky-700">
+            Better Auth
+          </span>
+          <h1 className="text-4xl font-semibold tracking-tight text-slate-950">
+            Welcome back.
+          </h1>
+          <p className="max-w-md text-base leading-7 text-slate-600">
+            This generated starter includes protected routes, session-aware page
+            guards, and reusable auth form primitives you can extend from here.
+          </p>
+        </section>
+        <SignInForm />
+      </div>
+    </main>
+  );
+}