All files / src/modules/auth auth.module.ts

95.45% Statements 21/22
57.14% Branches 4/7
100% Functions 2/2
95% Lines 19/20

Press n or j to go to the next uncovered block, b, p or k for the previous block.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 6312x 12x 12x 12x 12x 12x 12x     12x 12x 12x 12x 12x 12x 12x 12x                       12x     12x                                                 12x   12x        
import { Module, MiddlewareConsumer, NestModule } from '@nestjs/common';
import { JwtModule }     from '@nestjs/jwt';
import { PassportModule } from '@nestjs/passport';
import { ConfigModule } from '@nestjs/config';
import { CommonModule } from '@app/common/common.module';
import { ScheduleModule } from '@nestjs/schedule';
import { AuditModule } from '@app/modules/audit/audit.module';
import { Algorithm } from 'jsonwebtoken';
 
import { PrismaModule }  from '@app/modules/prisma/prisma.module';
import { JwksModule } from '@app/modules/jwks/jwks.module';
import { JwksService } from '@app/modules/jwks/jwks.service';
import { AuthService }   from '@app/modules/auth/auth.service';
import { AuthController } from '@app/modules/auth/auth.controller';
import { JwtStrategy }   from '@app/modules/auth/jwt.strategy';
import { AuthResolver } from '@app/modules/auth/auth.resolver';
import { OriginValidationMiddleware } from './origin-validation.middleware';
 
@Module({
  imports: [
    CommonModule,
    PrismaModule,
    JwksModule,
    PassportModule,
    ConfigModule,
    JwtModule.registerAsync({
      imports: [JwksModule],
      useFactory: async (jwks: JwksService) => {
        Iif (!jwks.isInitialized || !jwks.signingKey) {
          throw new Error('JWKS service not initialized or no signing key available');
        }
        return {
          privateKey: jwks.signingKey.privateKeyPem,
          publicKey: jwks.signingKey.publicKeyPem,
          signOptions: {
            algorithm: jwks.signingKey.alg as Algorithm,
            expiresIn: '15m',
            issuer: process.env.JWT_ISSUER,
            audience: process.env.JWT_AUDIENCE,
          },
          verifyOptions: {
            algorithms: [jwks.signingKey.alg as Algorithm],
            issuer: process.env.JWT_ISSUER,
            audience: process.env.JWT_AUDIENCE,
          },
        };
      },
      inject: [JwksService],
    }),
    ...(process.env.NODE_ENV === 'test' || process.env.TEST_MODE === '1' ? [] : [ScheduleModule.forRoot()]),
    AuditModule,
  ],
  controllers: [AuthController],
  providers  : [AuthService, JwtStrategy, AuthResolver, OriginValidationMiddleware],
  exports    : [AuthService, JwtModule],
})
export class AuthModule implements NestModule {
  configure(consumer: MiddlewareConsumer) {
    consumer
      .apply(OriginValidationMiddleware)
      .forRoutes('auth'); // applies to /auth/* routes
  }
}