Nest IAM

Installation

Install cookieParser

#for npm
$ npm i cookie-parser
$ npm i -D @types/cookie-parser

# for yarn
$ yarn add cookie-parser
$ yarn add --dev @types/cookie-parser

Then set the cookieParser middleware to your main NestExpressApplication or NestFastifyApplication.

import cookieParser from "cookie-parser";

const app = await NestFactory.create<NestExpressApplication>(AppModule);
app.use(cookieParser());

After requesting the token

  @Post("login")
  findAll(@Res({ passthrough: true }) res) {
    // request the token

    const oneDay = 1000 * 60 * 60 * 24;
    res.cookie("jwtToken", "your-jwt-token", {
      httpOnly: true, // Prevents client-side access (XSS protection)
      secure: false, // Set `true` in production with HTTPS
      maxAge: oneDay, // 1 day expiration
    });

    res.cookie("refreshToken", "your-refresh-token", {
      httpOnly: true,
      secure: false,
      maxAge: oneDay * 7, // 7 days expiration
    });

    // Other remaining logic
    // return data;
  }

Next, use the global exception filter to catch the error

const app = await NestFactory.create<NestExpressApplication>(AppModule);
app.use(new NestIAMExceptionFilter());

For Mongodb

• Need Replication

For PostgreSQL

run

DB_URL="postgresql://nestiam:nestiam@localhost:5432/nestiam" yarn --cwd ./node_modules/nest-iam db-push

Important Note For Remove Permission From Role: The related child permission of the removal permission may also be linked to other remaining permissions in the role, ensure that you properly verify dependencies before removal.

To handle this correctly, use the provided methods in your project to locate and remove each permission individually.

User Roles and UUID Management

Overview

A user can have multiple roles within a unique UUID, which may represent an organization, company, or group. If a user belongs to multiple organizations, companies, or groups, roles should be created and associated with these entities using UUIDs.

Key Concepts

• UUID (Universally Unique Identifier): Each organization, company, or group is identified by a unique UUID.
• User Roles: A user can have multiple roles within a single UUID.
• Multiple Organizations: If a user is part of multiple organizations, companies, or groups, roles should be created with the associated UUIDs.