better-ts-stack 2.0.1 → 2.1.0

package/templates/modules/auth/nestjs/config.json

@@ -1,20 +1,20 @@
-{
-  "id": "auth",
-  "name": "JWT Auth",
-  "description": "JWT authentication for NestJS with bcrypt password hashing",
-  "type": "feature",
-  "dependencies": {
-    "bcrypt": "^6.0.0",
-    "jsonwebtoken": "^9.0.3",
-    "zod": "^4.6.5"
-  },
-  "devDependencies": {
-    "@types/bcrypt": "^6.0.0",
-    "@types/jsonwebtoken": "^9.0.10"
-  },
-  "scripts": {},
-  "envVars": {
-    "JWT_SECRET": "please-change-me",
-    "JWT_EXPIRES_IN": "1h"
-  }
-}
+{
+  "id": "auth",
+  "name": "JWT Auth",
+  "description": "JWT authentication for NestJS with bcrypt password hashing",
+  "type": "feature",
+  "dependencies": {
+    "bcrypt": "^6.0.0",
+    "jsonwebtoken": "^9.0.3",
+    "zod": "^4.6.5"
+  },
+  "devDependencies": {
+    "@types/bcrypt": "^6.0.0",
+    "@types/jsonwebtoken": "^9.0.10"
+  },
+  "scripts": {},
+  "envVars": {
+    "JWT_SECRET": "please-change-me",
+    "JWT_EXPIRES_IN": "1h"
+  }
+}

package/templates/modules/auth/nestjs/src/auth/{auth.controller.ts → auth.controller.ts.hbs}

@@ -7,6 +7,9 @@ import {
   Req,
   UseGuards,
 } from "@nestjs/common";
+{{#if useRateLimit}}
+import { Throttle } from "@nestjs/throttler";
+{{/if}}
 
 import { type AuthenticatedRequest, AuthGuard } from "./auth.guard.js";
 import {
@@ -19,11 +22,20 @@ import { type AuthResponse, AuthService } from "./auth.service.js";
 import type { AuthTokenPayload } from "./jwt.js";
 import { ZodValidationPipe } from "./zod-validation.pipe.js";
 
+{{#if useRateLimit}}
+// Sign-up and login: 10 attempts per client IP in 15 minutes, against
+// password guessing
+const AUTH_LIMIT = { default: { ttl: 15 * 60 * 1000, limit: 10 } };
+
+{{/if}}
 @Controller("auth")
 export class AuthController {
   constructor(private readonly authService: AuthService) {}
 
   @Post("register")
+  {{#if useRateLimit}}
+  @Throttle(AUTH_LIMIT)
+  {{/if}}
   register(
     @Body(new ZodValidationPipe(registerSchema)) body: RegisterInput
   ): Promise<AuthResponse> {
@@ -32,6 +44,9 @@ export class AuthController {
 
   @Post("login")
   @HttpCode(200)
+  {{#if useRateLimit}}
+  @Throttle(AUTH_LIMIT)
+  {{/if}}
   login(
     @Body(new ZodValidationPipe(loginSchema)) body: LoginInput
   ): Promise<AuthResponse> {

package/templates/modules/auth/nextjs/lib/auth-schema.ts

@@ -1,7 +1,7 @@
 import { z } from "zod";
 
 export const signInSchema = z.object({
-  email: z.string().email("Enter a valid email address."),
+  email: z.email("Enter a valid email address."),
   password: z.string().min(8, "Password must be at least 8 characters."),
 });
 

package/templates/modules/auth/tanstack/src/components/auth/sign-in-form.tsx

@@ -1,135 +1,133 @@
-"use client";
-
-import { Link, useNavigate } from "@tanstack/react-router";
-import { useState, useTransition } from "react";
-import { zodResolver } from "@hookform/resolvers/zod";
-import { LoaderCircle } from "lucide-react";
-import { useForm } from "react-hook-form";
-
-import { authClient } from "~/lib/auth-client";
-import {
-  getAuthErrorMessage,
-  signInSchema,
-  type SignInValues,
-} from "~/lib/auth-schema";
-import { Button } from "~/components/ui/button";
-import {
-  Card,
-  CardContent,
-  CardDescription,
-  CardFooter,
-  CardHeader,
-  CardTitle,
-} from "~/components/ui/card";
-import {
-  Field,
-  FieldDescription,
-  FieldError,
-  FieldGroup,
-  FieldLabel,
-} from "~/components/ui/field";
-import { Input } from "~/components/ui/input";
-
-export function SignInForm() {
-  const navigate = useNavigate();
-  const [isPending, startTransition] = useTransition();
-  const [authError, setAuthError] = useState<string | null>(null);
-  const form = useForm<SignInValues>({
-    resolver: zodResolver(signInSchema),
-    defaultValues: {
-      email: "",
-      password: "",
-    },
-  });
-
-  const onSubmit = form.handleSubmit((values) => {
-    setAuthError(null);
-
-    startTransition(async () => {
-      const result = await authClient.signIn.email({
-        email: values.email,
-        password: values.password,
-      });
-
-      if (result.error) {
-        setAuthError(getAuthErrorMessage(result.error));
-        return;
-      }
-
-      navigate({ to: "/dashboard" });
-    });
-  });
-
-  return (
-    <Card className="border-white/80 bg-white/90 shadow-2xl shadow-slate-200/70 backdrop-blur">
-      <CardHeader className="space-y-2">
-        <CardTitle>Login to your account</CardTitle>
-        <CardDescription>
-          Sign in with your email and password to continue to your dashboard.
-        </CardDescription>
-      </CardHeader>
-      <CardContent>
-        <form className="space-y-6" onSubmit={onSubmit} noValidate>
-          <FieldGroup>
-            <Field data-invalid={Boolean(form.formState.errors.email)}>
-              <FieldLabel htmlFor="email">Email</FieldLabel>
-              <Input
-                id="email"
-                type="email"
-                autoComplete="email"
-                aria-invalid={Boolean(form.formState.errors.email)}
-                placeholder="you@example.com"
-                {...form.register("email")}
-              />
-              <FieldDescription>
-                Use the email you registered with.
-              </FieldDescription>
-              <FieldError errors={[form.formState.errors.email]} />
-            </Field>
-
-            <Field data-invalid={Boolean(form.formState.errors.password)}>
-              <FieldLabel htmlFor="password">Password</FieldLabel>
-              <Input
-                id="password"
-                type="password"
-                autoComplete="current-password"
-                aria-invalid={Boolean(form.formState.errors.password)}
-                placeholder="Enter your password"
-                {...form.register("password")}
-              />
-              <FieldError errors={[form.formState.errors.password]} />
-            </Field>
-          </FieldGroup>
-
-          {authError ? (
-            <div className="rounded-2xl border border-rose-200 bg-rose-50 px-4 py-3 text-sm text-rose-700">
-              {authError}
-            </div>
-          ) : null}
-
-          <Button className="w-full" type="submit" disabled={isPending}>
-            {isPending ? (
-              <>
-                <LoaderCircle className="mr-2 size-4 animate-spin" />
-                Signing in
-              </>
-            ) : (
-              "Login"
-            )}
-          </Button>
-        </form>
-      </CardContent>
-      <CardFooter className="justify-center">
-        <p className="text-sm text-slate-600">
-          Need an account?{" "}
-          <Link
-            className="font-medium text-sky-700 hover:text-sky-800"
-            to="/sign-up"
-          >
-            Signup
-          </Link>
-        </p>
-      </CardFooter>
-    </Card>
-  );
+import { Link, useNavigate } from "@tanstack/react-router";
+import { useState, useTransition } from "react";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { LoaderCircle } from "lucide-react";
+import { useForm } from "react-hook-form";
+
+import { authClient } from "~/lib/auth-client";
+import {
+  getAuthErrorMessage,
+  signInSchema,
+  type SignInValues,
+} from "~/lib/auth-schema";
+import { Button } from "~/components/ui/button";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "~/components/ui/card";
+import {
+  Field,
+  FieldDescription,
+  FieldError,
+  FieldGroup,
+  FieldLabel,
+} from "~/components/ui/field";
+import { Input } from "~/components/ui/input";
+
+export function SignInForm() {
+  const navigate = useNavigate();
+  const [isPending, startTransition] = useTransition();
+  const [authError, setAuthError] = useState<string | null>(null);
+  const form = useForm<SignInValues>({
+    resolver: zodResolver(signInSchema),
+    defaultValues: {
+      email: "",
+      password: "",
+    },
+  });
+
+  const onSubmit = form.handleSubmit((values) => {
+    setAuthError(null);
+
+    startTransition(async () => {
+      const result = await authClient.signIn.email({
+        email: values.email,
+        password: values.password,
+      });
+
+      if (result.error) {
+        setAuthError(getAuthErrorMessage(result.error));
+        return;
+      }
+
+      navigate({ to: "/dashboard" });
+    });
+  });
+
+  return (
+    <Card className="border-white/80 bg-white/90 shadow-2xl shadow-slate-200/70 backdrop-blur">
+      <CardHeader className="space-y-2">
+        <CardTitle>Login to your account</CardTitle>
+        <CardDescription>
+          Sign in with your email and password to continue to your dashboard.
+        </CardDescription>
+      </CardHeader>
+      <CardContent>
+        <form className="space-y-6" onSubmit={onSubmit} noValidate>
+          <FieldGroup>
+            <Field data-invalid={Boolean(form.formState.errors.email)}>
+              <FieldLabel htmlFor="email">Email</FieldLabel>
+              <Input
+                id="email"
+                type="email"
+                autoComplete="email"
+                aria-invalid={Boolean(form.formState.errors.email)}
+                placeholder="you@example.com"
+                {...form.register("email")}
+              />
+              <FieldDescription>
+                Use the email you registered with.
+              </FieldDescription>
+              <FieldError errors={[form.formState.errors.email]} />
+            </Field>
+
+            <Field data-invalid={Boolean(form.formState.errors.password)}>
+              <FieldLabel htmlFor="password">Password</FieldLabel>
+              <Input
+                id="password"
+                type="password"
+                autoComplete="current-password"
+                aria-invalid={Boolean(form.formState.errors.password)}
+                placeholder="Enter your password"
+                {...form.register("password")}
+              />
+              <FieldError errors={[form.formState.errors.password]} />
+            </Field>
+          </FieldGroup>
+
+          {authError ? (
+            <div className="rounded-2xl border border-rose-200 bg-rose-50 px-4 py-3 text-sm text-rose-700">
+              {authError}
+            </div>
+          ) : null}
+
+          <Button className="w-full" type="submit" disabled={isPending}>
+            {isPending ? (
+              <>
+                <LoaderCircle className="mr-2 size-4 animate-spin" />
+                Signing in
+              </>
+            ) : (
+              "Login"
+            )}
+          </Button>
+        </form>
+      </CardContent>
+      <CardFooter className="justify-center">
+        <p className="text-sm text-slate-600">
+          Need an account?{" "}
+          <Link
+            className="font-medium text-sky-700 hover:text-sky-800"
+            to="/sign-up"
+          >
+            Signup
+          </Link>
+        </p>
+      </CardFooter>
+    </Card>
+  );
 }

package/templates/modules/auth/tanstack/src/components/auth/sign-out-button.tsx

@@ -1,49 +1,47 @@
-"use client";
-
-import { useNavigate } from "@tanstack/react-router";
-import { useState, useTransition } from "react";
-import { LoaderCircle, LogOut } from "lucide-react";
-
-import { authClient } from "~/lib/auth-client";
-import { Button } from "~/components/ui/button";
-
-export function SignOutButton() {
-  const navigate = useNavigate();
-  const [isPending, startTransition] = useTransition();
-  const [error, setError] = useState<string | null>(null);
-
-  return (
-    <div className="space-y-2">
-      <Button
-        variant="outline"
-        onClick={() => {
-          setError(null);
-          startTransition(async () => {
-            const result = await authClient.signOut();
-
-            if (result.error) {
-              setError("Unable to sign out right now. Please try again.");
-              return;
-            }
-
-            navigate({ to: "/sign-in" });
-          });
-        }}
-        disabled={isPending}
-      >
-        {isPending ? (
-          <>
-            <LoaderCircle className="mr-2 size-4 animate-spin" />
-            Signing out
-          </>
-        ) : (
-          <>
-            <LogOut className="mr-2 size-4" />
-            Sign out
-          </>
-        )}
-      </Button>
-      {error ? <p className="text-sm text-rose-600">{error}</p> : null}
-    </div>
-  );
+import { useNavigate } from "@tanstack/react-router";
+import { useState, useTransition } from "react";
+import { LoaderCircle, LogOut } from "lucide-react";
+
+import { authClient } from "~/lib/auth-client";
+import { Button } from "~/components/ui/button";
+
+export function SignOutButton() {
+  const navigate = useNavigate();
+  const [isPending, startTransition] = useTransition();
+  const [error, setError] = useState<string | null>(null);
+
+  return (
+    <div className="space-y-2">
+      <Button
+        variant="outline"
+        onClick={() => {
+          setError(null);
+          startTransition(async () => {
+            const result = await authClient.signOut();
+
+            if (result.error) {
+              setError("Unable to sign out right now. Please try again.");
+              return;
+            }
+
+            navigate({ to: "/sign-in" });
+          });
+        }}
+        disabled={isPending}
+      >
+        {isPending ? (
+          <>
+            <LoaderCircle className="mr-2 size-4 animate-spin" />
+            Signing out
+          </>
+        ) : (
+          <>
+            <LogOut className="mr-2 size-4" />
+            Sign out
+          </>
+        )}
+      </Button>
+      {error ? <p className="text-sm text-rose-600">{error}</p> : null}
+    </div>
+  );
 }