feat(auth): implement login and signup use case and add e2e tests

Author: andrea-acampora

.env.test

@@ -1,4 +1,12 @@
+DATABASE_NAME=db-test-e2e
+DATABASE_HOST=127.0.0.1
+DATABASE_PORT=25432
+DATABASE_USER=postgres
+DATABASE_PASSWORD=postgres
+
 JWT_SECRET=nestjs-ddd-devops
 JWT_REFRESH_SECRET=nestjs-ddd-devops-refresh
 JWT_EXPIRES_IN=3600
 JWT_REFRESH_EXPIRES_IN=360000
+
+PORT=3000

.gitignore

@@ -74,7 +74,6 @@ web_modules/
 
 # dotenv environment variable files
 .env
-.env.test
 .env.development.local
 .env.test.local
 .env.production.local

README.md

@@ -53,7 +53,7 @@ In the following chapters you will find a description of the main choices, techn
     ```bash
      docker-compose up -d
      ```
-4. Provide a ```.env``` file with all required environment variables _(check out ```.env.dist``` example file)_
+4. Provide a ```.env``` and ```.env.test```  files with all required environment variables _(check out ```.env.dist``` example file)_
 5. Create and generate the database schema from your entities' metadata:
      ```bash
      npm run schema:update

docker-compose.yml

@@ -7,7 +7,7 @@ services:
     ports:
       - "15432:5432/tcp"
     environment:
-      - POSTGRES_DB=db-test
+      - POSTGRES_DB=db-dev
       - POSTGRES_USER=postgres
       - POSTGRES_PASSWORD=postgres
     volumes:
@@ -17,6 +17,21 @@ services:
     networks:
       - postgres
 
+  postgresql-test-e2e:
+    container_name: postgresql-test-e2e
+    image: postgres:latest
+    restart: unless-stopped
+    ports:
+      - "25432:5432/tcp"
+    environment:
+      - POSTGRES_DB=db-test-e2e
+      - POSTGRES_USER=postgres
+      - POSTGRES_PASSWORD=postgres
+    stdin_open: true
+    tty: true
+    networks:
+      - postgres
+
 volumes:
   postgresql_volume:
 

src/libs/api/api-role.enum.ts

@@ -0,0 +1,4 @@
+export enum ApiRole {
+  ADMIN = 0,
+  USER = 1,
+}

src/modules/auth/api/controller/auth.controller.ts

@@ -8,23 +8,26 @@ import {
 import { LoginBody } from '../presentation/body/login.body';
 import { SignupBody } from '../presentation/body/signup.body';
 import { PublicApi } from '../../../../libs/decorator/auth.decorator';
-import { CommandBus } from '@nestjs/cqrs';
 import { getOrThrowWith, Option } from 'effect/Option';
 import { JwtUser } from '../presentation/dto/jwt-user.dto';
 import { JwtAuthService } from '../../application/service/jwt-auth-service.interface';
-import { JWT_AUTHENTICATION, LOGIN_USE_CASE } from '../../auth.tokens';
+import {
+  JWT_AUTH_SERVICE,
+  LOGIN_USE_CASE,
+  SIGNUP_USE_CASE,
+} from '../../auth.tokens';
 import { UseCase } from '../../../../libs/ddd/use-case.interface';
 import { AuthUser } from '../presentation/dto/auth-user.dto';
-import { SignupCommand } from '../../application/command/signup.command';
 
 @Controller('auth')
 export class AuthController {
   constructor(
-    private readonly commandBus: CommandBus,
-    @Inject(JWT_AUTHENTICATION)
+    @Inject(JWT_AUTH_SERVICE)
     private readonly jwtAuth: JwtAuthService,
     @Inject(LOGIN_USE_CASE)
     private readonly loginUseCase: UseCase<LoginBody, Option<AuthUser>>,
+    @Inject(SIGNUP_USE_CASE)
+    private readonly signupUseCase: UseCase<SignupBody, Option<AuthUser>>,
   ) {}
 
   @PublicApi()
@@ -41,12 +44,10 @@ export class AuthController {
   @PublicApi()
   @Post('/signup')
   async signup(@Body() body: SignupBody) {
-    return await this.commandBus.execute(
-      new SignupCommand(
-        body.email,
-        body.password,
-        body.firstName,
-        body.lastName,
+    return this.jwtAuth.generateJwtUser(
+      getOrThrowWith(
+        await this.signupUseCase.execute(body),
+        () => new UnauthorizedException('Signup Error!'),
       ),
     );
   }

src/modules/auth/api/guard/auth.guard.ts

@@ -1,11 +1,70 @@
-import { CanActivate, ExecutionContext, Injectable } from '@nestjs/common';
+import {
+  CanActivate,
+  ExecutionContext,
+  Inject,
+  Injectable,
+} from '@nestjs/common';
+import { FastifyRequest } from 'fastify';
+import { JwtService } from '../../infrastructure/jwt/jwt.service';
+import { Reflector } from '@nestjs/core';
+import { AUTH_ROLES_KEY, JWT_AUTH_SERVICE } from '../../auth.tokens';
+import { isNone, none, Option, some } from 'effect/Option';
+import { QueryBus } from '@nestjs/cqrs';
+import { CheckAuthUserByIdQuery } from '../../application/query/check-auth-user-by-id.query';
+import { IS_PUBLIC_API } from '../../../../libs/decorator/auth.decorator';
+import { ApiRole } from '../../../../libs/api/api-role.enum';
 
 @Injectable()
 export class AuthGuard implements CanActivate {
-  constructor() {}
+  private authenticationHeaders: string[] = ['Authorization', 'authorization'];
+
+  constructor(
+    private readonly reflector: Reflector,
+    @Inject(JWT_AUTH_SERVICE)
+    private readonly jwtService: JwtService,
+    private readonly queryBus: QueryBus,
+  ) {}
 
   async canActivate(context: ExecutionContext): Promise<boolean> {
-    console.log(context);
-    return true;
+    const apiRoles = this.reflector.getAllAndOverride<ApiRole[]>(
+      AUTH_ROLES_KEY,
+      [context.getHandler(), context.getClass()],
+    );
+    const isPublic = this.reflector.getAllAndOverride<boolean>(IS_PUBLIC_API, [
+      context.getHandler(),
+      context.getClass(),
+    ]);
+    if (isPublic && !apiRoles) return true;
+    const request = context.switchToHttp().getRequest<FastifyRequest>();
+    const token = this.extractToken(request);
+    if (isNone(token)) return false;
+    try {
+      const authUser = await this.jwtService.verifyToken(token.value);
+      if (isNone(authUser)) return false;
+      request['user'] = authUser.value;
+      const isActiveUser = await this.isActiveUser(authUser.value.id);
+      return isActiveUser && apiRoles.includes(authUser.value.role);
+    } catch {
+      return false;
+    }
+  }
+
+  private extractToken(request: FastifyRequest): Option<string> {
+    for (const header of this.authenticationHeaders) {
+      const tokenHeader = request.headers[header] as string;
+      if (tokenHeader) {
+        const splitted = tokenHeader.split(' ');
+        if (splitted[0] !== 'Bearer') {
+          return none();
+        } else {
+          return some(splitted[1]);
+        }
+      }
+    }
+    return none();
+  }
+
+  private async isActiveUser(userId: string): Promise<boolean> {
+    return await this.queryBus.execute(new CheckAuthUserByIdQuery(userId));
   }
 }

src/modules/auth/application/command/create-user.command.ts

@@ -1,6 +1,6 @@
 import { ICommand } from '@nestjs/cqrs';
 
-export class SignupCommand implements ICommand {
+export class CreateUserCommand implements ICommand {
   constructor(
     readonly email: string,
     readonly password: string,

src/modules/auth/application/query/check-auth-user-by-id.query.ts

@@ -0,0 +1,3 @@
+export class CheckAuthUserByIdQuery {
+  constructor(readonly id: string) {}
+}

src/modules/auth/application/query/get-auth-user-by-email.query.ts

@@ -1,3 +1,3 @@
-export class CheckAuthUserByEmailQuery {
+export class GetAuthUserByEmailQuery {
   constructor(readonly email: string) {}
 }