nest-authme 1.2.2 → 1.2.4

package/dist/generator/templates/jwt/auth.service.ts.hbs

@@ -1,5 +1,5 @@
 import { Injectable, UnauthorizedException{{#if features.resetPassword}}, BadRequestException{{/if}}{{#if features.emailVerification}}, NotFoundException{{/if}}{{#if features.accountLockout}}, ForbiddenException{{/if}} } from '@nestjs/common';
-{{#if (or features.emailVerification features.resetPassword)}}
+{{#if (or features.emailVerification features.resetPassword features.refreshTokens)}}
 import * as crypto from 'crypto';
 {{/if}}
 import { JwtService } from '@nestjs/jwt';
@@ -57,7 +57,7 @@ export class AuthService {
    * Validate user credentials
    */
   async validateUser(email: string, password: string): Promise<any> {
-    const user = await this.usersService.findByEmail(email);
+    const user = await this.usersService.findByEmail(email.toLowerCase());
     if (!user) {
       return null;
     }
@@ -152,7 +152,7 @@ export class AuthService {
     const hashedPassword = await bcrypt.hash(registerDto.password, bcryptRounds);
 
     const user = await this.usersService.create({
-      email: registerDto.email,
+      email: registerDto.email.toLowerCase(),
 {{#if features.useUsername}}
       username: registerDto.username,
 {{/if}}
@@ -244,6 +244,10 @@ export class AuthService {
    * Verify email with token
    */
   async verifyEmail(token: string): Promise<{ message: string }> {
+    if (!token) {
+      throw new NotFoundException('Invalid verification token');
+    }
+
     const user = await this.usersService.findByVerificationToken(token);
     if (!user) {
       throw new NotFoundException('Invalid verification token');
@@ -261,7 +265,7 @@ export class AuthService {
 {{else}}
   async resendVerification(email: string): Promise<{ verificationToken: string; message: string }> {
 {{/if}}
-    const user = await this.usersService.findByEmail(email);
+    const user = await this.usersService.findByEmail(email.toLowerCase());
     if (!user) {
       throw new NotFoundException('User not found');
     }
@@ -294,7 +298,7 @@ export class AuthService {
    */
 {{#if features.emailService}}
   async forgotPassword(forgotPasswordDto: ForgotPasswordDto): Promise<{ message: string }> {
-    const user = await this.usersService.findByEmail(forgotPasswordDto.email);
+    const user = await this.usersService.findByEmail(forgotPasswordDto.email.toLowerCase());
     if (!user) {
       // Return success even if user not found to prevent email enumeration
       return { message: 'If the email exists, a password reset link has been sent' };
@@ -311,7 +315,7 @@ export class AuthService {
   }
 {{else}}
   async forgotPassword(forgotPasswordDto: ForgotPasswordDto): Promise<{ resetToken: string; message: string }> {
-    const user = await this.usersService.findByEmail(forgotPasswordDto.email);
+    const user = await this.usersService.findByEmail(forgotPasswordDto.email.toLowerCase());
     if (!user) {
       // Return success even if user not found to prevent email enumeration
       return { resetToken: '', message: 'If the email exists, a reset token has been generated' };
@@ -356,7 +360,7 @@ export class AuthService {
    */
   private async createRefreshToken(userId: string): Promise<any> {
     const token = this.jwtService.sign(
-      { sub: userId },
+      { sub: userId, jti: crypto.randomBytes(16).toString('hex') },
       { expiresIn: '{{jwt.refreshExpiration}}' }
     );
 

package/dist/generator/templates/mail/mail.service.ts.hbs

@@ -1,19 +1,25 @@
-import { Injectable } from '@nestjs/common';
+import { Injectable, Logger } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import * as nodemailer from 'nodemailer';
 
 @Injectable()
 export class MailService {
+  private readonly logger = new Logger(MailService.name);
   private transporter: nodemailer.Transporter;
+  private isConfigured: boolean;
 
   constructor(private configService: ConfigService) {
+    const smtpUser = this.configService.get('SMTP_USER', '');
+    const smtpPass = this.configService.get('SMTP_PASS', '');
+    this.isConfigured = !!(smtpUser && smtpPass);
+
     this.transporter = nodemailer.createTransport({
       host: this.configService.get('SMTP_HOST', 'smtp.ethereal.email'),
       port: parseInt(this.configService.get('SMTP_PORT', '587'), 10),
       secure: false,
       auth: {
-        user: this.configService.get('SMTP_USER'),
-        pass: this.configService.get('SMTP_PASS'),
+        user: smtpUser,
+        pass: smtpPass,
       },
     });
   }
@@ -33,17 +39,29 @@ export class MailService {
   async sendVerificationEmail(to: string, token: string): Promise<void> {
     const verifyUrl = `${this.appUrl}/auth/verify-email?token=${token}`;
 
-    await this.transporter.sendMail({
-      from: this.mailFrom,
-      to,
-      subject: 'Verify your email address',
-      html: `
-        <h2>Email Verification</h2>
-        <p>Click the link below to verify your email address:</p>
-        <p><a href="${verifyUrl}">${verifyUrl}</a></p>
-        <p>If you did not create an account, please ignore this email.</p>
-      `,
-    });
+    if (!this.isConfigured) {
+      this.logger.warn(
+        `SMTP not configured. Verification email for ${to} not sent. Token: ${token}`,
+      );
+      this.logger.warn(`Verify URL: ${verifyUrl}`);
+      return;
+    }
+
+    try {
+      await this.transporter.sendMail({
+        from: this.mailFrom,
+        to,
+        subject: 'Verify your email address',
+        html: `
+          <h2>Email Verification</h2>
+          <p>Click the link below to verify your email address:</p>
+          <p><a href="${verifyUrl}">${verifyUrl}</a></p>
+          <p>If you did not create an account, please ignore this email.</p>
+        `,
+      });
+    } catch (error) {
+      this.logger.error(`Failed to send verification email to ${to}: ${error.message}`);
+    }
   }
 {{/if}}
 
@@ -54,18 +72,30 @@ export class MailService {
   async sendResetPasswordEmail(to: string, token: string): Promise<void> {
     const resetUrl = `${this.appUrl}/auth/reset-password?token=${token}`;
 
-    await this.transporter.sendMail({
-      from: this.mailFrom,
-      to,
-      subject: 'Reset your password',
-      html: `
-        <h2>Password Reset</h2>
-        <p>Click the link below to reset your password:</p>
-        <p><a href="${resetUrl}">${resetUrl}</a></p>
-        <p>This link expires in 1 hour.</p>
-        <p>If you did not request a password reset, please ignore this email.</p>
-      `,
-    });
+    if (!this.isConfigured) {
+      this.logger.warn(
+        `SMTP not configured. Reset email for ${to} not sent. Token: ${token}`,
+      );
+      this.logger.warn(`Reset URL: ${resetUrl}`);
+      return;
+    }
+
+    try {
+      await this.transporter.sendMail({
+        from: this.mailFrom,
+        to,
+        subject: 'Reset your password',
+        html: `
+          <h2>Password Reset</h2>
+          <p>Click the link below to reset your password:</p>
+          <p><a href="${resetUrl}">${resetUrl}</a></p>
+          <p>This link expires in 1 hour.</p>
+          <p>If you did not request a password reset, please ignore this email.</p>
+        `,
+      });
+    } catch (error) {
+      this.logger.error(`Failed to send reset email to ${to}: ${error.message}`);
+    }
   }
 {{/if}}
 }

package/dist/generator/templates/tests/auth.service.spec.ts.hbs

@@ -333,7 +333,11 @@ describe('AuthService', () => {
 
       const result = await authService.resendVerification('test@example.com');
 
+{{#if features.emailService}}
+      expect(result.message).toBeDefined();
+{{else}}
       expect(result.verificationToken).toBeDefined();
+{{/if}}
       expect(mockUsersService.setVerificationToken).toHaveBeenCalled();
     });
   });
@@ -347,7 +351,11 @@ describe('AuthService', () => {
 
       const result = await authService.forgotPassword({ email: 'test@example.com' });
 
+{{#if features.emailService}}
+      expect(result.message).toBeDefined();
+{{else}}
       expect(result.resetToken).toBeDefined();
+{{/if}}
       expect(mockUsersService.setResetToken).toHaveBeenCalled();
     });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nest-authme",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "description": "Add production-ready authentication to any NestJS project in 60 seconds",
   "keywords": [
     "nestjs",