@will2hew/nestjs-auth v1.1.3

Installation

$ npm i --save @will2hew/nestjs-auth

Usage

Import the User and Session entities, and register the AuthModule

import { AuthModule, User, Session } from "@will2hew/nestjs-auth";

@Module({
  imports: [
    TypeOrmModule.forRoot({
      // connection options
      entities: [User, Session],
    }),
    AuthModule.register({
      prefix: "/auth",
      cookie: {
        name: "sid",
        secret: "super-secret",
        secure: false, // set to true in production
      },
      sessionMaximumAge: 60 * 60 * 24, // 24 hours
    }),
  ],
})
export class AppModule {}

Create a new user

const user = new User();

user.email = "john@nestjs.com";
user.password = "password";

user.firstName = "John";
user.lastName = "Smith";

await this.userRepository.save(user);

Sign in as the user

POST /auth/sign-in
Content-Type: application/json

{
    "email": "john@nestjs.com",
    "password": "password"
}

Protecting endpoints

nestjs-auth provides a guard to protect backend routes.

import { AuthGuard } from "@will2hew/nestjs-auth";

@Controller()
@UseGuards(AuthGuard)
export class AppController {
  @Get()
  getData() {
    return "Hello, World!";
  }
}

You can also require the user has the correct role

import { AuthGuard, Roles } from "@will2hew/nestjs-auth";

@Controller()
@UseGuards(AuthGuard)
export class AppController {
  @Roles("admin")
  @Get("admin")
  getAdminData() {
    return "Top secret!";
  }
}

Accessing the signed in user

You will typically want to access the signed in user to only respond with data relevant to them. nestjs-auth provides a decorator for this situation.

import { AuthGuard, CurrentUser, User } from "@will2hew/nestjs-auth";

@Controller()
@UseGuards(AuthGuard)
export class AppController {
  @Get("me")
  getMe(@CurrentUser() user: User) {
    return user;
  }
}

Extending the User

The default nestjs-auth user offers a set of commonly used user profile fields, but if you'd like to go beyond these you can extend the BaseUser class.

@Entity()
export class OrganizationUser {
  @PrimaryGeneratedColumn("uuid")
  id: string;

  @Column()
  organizationId: string;
}

And provide it during registration

@Module({
  imports: [
    TypeOrmModule.forRoot({
      // connection options
      entities: [OrganizationUser, Session],
    }),
    AuthModule.register({
      userEntity: OrganizationUser,
      // rest of your configuration
    }),
  ],
})
export class AppModule {}

User API

Fields

Methods

verifyEmail()

Sets emailVerifiedAt to the current date and time.

Example:

await user.verifyEmail();