public-private-api

 # compiled output
 /dist
 /node_modules
+/libs
 
 # Logs
 logs

 {
   "singleQuote": true,
-  "trailingComma": "all"
-}
\ No newline at end of file
+  "trailingComma": "all",
+  "printWidth": 120
+}

@@ -6,7 +6,7 @@
       "request": "launch",
       "name": "Base-Debugger",
       "runtimeExecutable": "npm",
-      "runtimeArgs": ["run", "start:debug", "--", "--inspect-brk"],
+      "runtimeArgs": ["run", "start:dev:debug", "--", "--inspect-brk"],
       "autoAttachChildProcesses": true,
       "restart": true,
       "sourceMaps": true,

+# Environment variables declared in this file are automatically made available to Prisma.
+# See the documentation for more detail: https://pris.ly/d/prisma-schema#accessing-environment-variables-from-the-schema
+
+# Prisma supports the native connection string format for PostgreSQL, MySQL, SQLite, SQL Server, MongoDB and CockroachDB.
+# See the documentation for all the connection string options: https://pris.ly/d/connection-strings
+
+DATABASE_URL="mysql://root:toor@localhost:3306/base-db"
+
+#TESTING DATABASE . CHANGE TO YOUR OWN DATA
+DB_HOST=base-database
+DB_ROOT_PASSWORD=toor
+DB_NAME=base-db 
+DB_USER=admin
+DB_USER_PASSWORD=basePassw
+DB_PORT=3306
+DB_DRIVER=mysql
+PRIVATE_API_URL=http://localhost:3000
+API_KEY=80dc792592de35b9ac634a8a1f299cf7352e7230d1764b0a42e61b2f3422991d
+TOKEN_EXPIRATION="30d"
+TOKEN_SECRET=85712985fdd06085b3032b6d9dba16436f742e4dc650cd66e50bb20373c22f5c
+CLIENT_SECRET=3d0f23390356bbd818b037863376bad3c7b80da765bb20d9db80d1275f2afd88
+PRIVATE_SECRET=6aa003735b66842cd5ad4ac9fa3e069d12e0665a7518e313306f2b7d24ad2f92
+RATE_LIMIT_INTERVAL=60000
+RATE_LIMIT_REQUEST=10
+ALLOWED_ORIGINS=http://localhost:3000,http://localhost:3001
\ No newline at end of file

@@ -13,4 +13,5 @@ DB_NAME=base-db
 DB_USER=admin
 DB_USER_PASSWORD=basePassw
 DB_PORT=3306
-DB_DRIVER=mysql
\ No newline at end of file
+DB_DRIVER=mysql
+PRIVATE_API_URL=http://localhost:3000
\ No newline at end of file

+
+DATABASE_URL="mysql://root:toor@localhost:3306/base-db"
+
+#TESTING DATABASE . CHANGE TO YOUR OWN DATA
+DB_HOST=base-database
+DB_ROOT_PASSWORD=toor
+DB_NAME=base-db 
+DB_USER=admin
+DB_USER_PASSWORD=basePassw
+DB_PORT=3306
+DB_DRIVER=mysql
+PRIVATE_API_URL=http://localhost:3000
\ No newline at end of file

@@ -3,6 +3,27 @@
   "collection": "@nestjs/schematics",
   "sourceRoot": "src",
   "compilerOptions": {
-    "deleteOutDir": true
+    "deleteOutDir": true,
+    "webpack": true
+  },
+  "projects": {
+    "public": {
+      "type": "library",
+      "root": "libs/public",
+      "entryFile": "index",
+      "sourceRoot": "libs/public/src",
+      "compilerOptions": {
+        "tsConfigPath": "libs/public/tsconfig.lib.json"
+      }
+    },
+    "private": {
+      "type": "library",
+      "root": "libs/private",
+      "entryFile": "index",
+      "sourceRoot": "libs/private/src",
+      "compilerOptions": {
+        "tsConfigPath": "libs/private/tsconfig.lib.json"
+      }
+    }
   }
-}
+}
\ No newline at end of file

@@ -10,12 +10,15 @@
       "license": "UNLICENSED",
       "dependencies": {
         "@nestjs/common": "^10.2.10",
+        "@nestjs/config": "^3.1.1",
         "@nestjs/core": "^10.0.0",
         "@nestjs/jwt": "^10.2.0",
         "@nestjs/mapped-types": "^2.0.4",
         "@nestjs/passport": "^10.0.2",
         "@nestjs/platform-express": "^10.0.0",
+        "@nestjs/throttler": "^5.0.1",
         "@prisma/client": "^5.6.0",
+        "axios": "^1.6.2",
         "bcrypt": "^5.1.1",
         "cors": "^2.8.5",
         "crypto-js": "^4.2.0",
@@ -1709,6 +1712,21 @@
         }
       }
     },
+    "node_modules/@nestjs/config": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/@nestjs/config/-/config-3.1.1.tgz",
+      "integrity": "sha512-qu5QlNiJdqQtOsnB6lx4JCXPQ96jkKUsOGd+JXfXwqJqZcOSAq6heNFg0opW4pq4J/VZoNwoo87TNnx9wthnqQ==",
+      "dependencies": {
+        "dotenv": "16.3.1",
+        "dotenv-expand": "10.0.0",
+        "lodash": "4.17.21",
+        "uuid": "9.0.0"
+      },
+      "peerDependencies": {
+        "@nestjs/common": "^8.0.0 || ^9.0.0 || ^10.0.0",
+        "reflect-metadata": "^0.1.13"
+      }
+    },
     "node_modules/@nestjs/core": {
       "version": "10.2.10",
       "resolved": "https://registry.npmjs.org/@nestjs/core/-/core-10.2.10.tgz",
@@ -1849,6 +1867,19 @@
         }
       }
     },
+    "node_modules/@nestjs/throttler": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/@nestjs/throttler/-/throttler-5.0.1.tgz",
+      "integrity": "sha512-6gHmKmus7LDgzK/wRh7W9cT3gtZw1rY4mLVymvx6pYyRA46A9fMvjmZNQKJbo02jGg2R7gNo+3pyfvNnjDqg4A==",
+      "dependencies": {
+        "md5": "^2.2.1"
+      },
+      "peerDependencies": {
+        "@nestjs/common": "^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0",
+        "@nestjs/core": "^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0",
+        "reflect-metadata": "^0.1.13"
+      }
+    },
     "node_modules/@nodelib/fs.scandir": {
       "version": "2.1.5",
       "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz",
@@ -2936,8 +2967,17 @@
     "node_modules/asynckit": {
       "version": "0.4.0",
       "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
-      "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==",
-      "dev": true
+      "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q=="
+    },
+    "node_modules/axios": {
+      "version": "1.6.2",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.2.tgz",
+      "integrity": "sha512-7i24Ri4pmDRfJTR7LDBhsOTtcm+9kjX5WiY1X3wIisx6G9So3pfMkEiU7emUBe46oceVImccTEM3k6C5dbVW8A==",
+      "dependencies": {
+        "follow-redirects": "^1.15.0",
+        "form-data": "^4.0.0",
+        "proxy-from-env": "^1.1.0"
+      }
     },
     "node_modules/babel-jest": {
       "version": "29.7.0",
@@ -3407,6 +3447,14 @@
       "integrity": "sha512-mT8iDcrh03qDGRRmoA2hmBJnxpllMR+0/0qlzjqZES6NdiWDcZkCNAk4rPFZ9Q85r27unkiNNg8ZOiwZXBHwcA==",
       "dev": true
     },
+    "node_modules/charenc": {
+      "version": "0.0.2",
+      "resolved": "https://registry.npmjs.org/charenc/-/charenc-0.0.2.tgz",
+      "integrity": "sha512-yrLQ/yVUFXkzg7EDQsPieE/53+0RlaWTs+wBrvW36cyilJ2SaDWfl4Yj7MtLTXleV9uEKefbAGUPv2/iWSooRA==",
+      "engines": {
+        "node": "*"
+      }
+    },
     "node_modules/chokidar": {
       "version": "3.5.3",
       "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.5.3.tgz",
@@ -3604,7 +3652,6 @@
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
       "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==",
-      "dev": true,
       "dependencies": {
         "delayed-stream": "~1.0.0"
       },
@@ -3803,6 +3850,14 @@
         "node": ">= 8"
       }
     },
+    "node_modules/crypt": {
+      "version": "0.0.2",
+      "resolved": "https://registry.npmjs.org/crypt/-/crypt-0.0.2.tgz",
+      "integrity": "sha512-mCxBlsHFYh9C+HVpiEacem8FEBnMXgU9gy4zmNC+SXAZNB/1idgp/aulFJ4FgCi7GPEVbfyng092GqL2k2rmow==",
+      "engines": {
+        "node": "*"
+      }
+    },
     "node_modules/crypto-js": {
       "version": "4.2.0",
       "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
@@ -4044,7 +4099,6 @@
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
       "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==",
-      "dev": true,
       "engines": {
         "node": ">=0.4.0"
       }
@@ -4140,6 +4194,25 @@
         "node": ">=6.0.0"
       }
     },
+    "node_modules/dotenv": {
+      "version": "16.3.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.3.1.tgz",
+      "integrity": "sha512-IPzF4w4/Rd94bA9imS68tZBaYyBWSCE47V1RGuMrB94iyTOIEwRmVL2x/4An+6mETpLrKJ5hQkB8W4kFAadeIQ==",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/motdotla/dotenv?sponsor=1"
+      }
+    },
+    "node_modules/dotenv-expand": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/dotenv-expand/-/dotenv-expand-10.0.0.tgz",
+      "integrity": "sha512-GopVGCpVS1UKH75VKHGuQFqS1Gusej0z4FyQkPdwjil2gNIv+LNsqBlboOzpJFZKVT95GkCyWJbBSdFEFUWI2A==",
+      "engines": {
+        "node": ">=12"
+      }
+    },
     "node_modules/eastasianwidth": {
       "version": "0.2.0",
       "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
@@ -4876,6 +4949,25 @@
       "integrity": "sha512-36yxDn5H7OFZQla0/jFJmbIKTdZAQHngCedGxiMmpNfEZM0sdEeT+WczLQrjK6D7o2aiyLYDnkw0R3JK0Qv1RQ==",
       "dev": true
     },
+    "node_modules/follow-redirects": {
+      "version": "1.15.3",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.3.tgz",
+      "integrity": "sha512-1VzOtuEM8pC9SFU1E+8KfTjZyMztRsgEfwQl44z8A25uy13jSzTj6dyK2Df52iV0vgHCfBwLhDWevLn95w5v6Q==",
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/RubenVerborgh"
+        }
+      ],
+      "engines": {
+        "node": ">=4.0"
+      },
+      "peerDependenciesMeta": {
+        "debug": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/foreground-child": {
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.1.1.tgz",
@@ -4924,7 +5016,6 @@
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.0.tgz",
       "integrity": "sha512-ETEklSGi5t0QMZuiXoA/Q6vcnxcLQP5vdugSpuAyi6SVGi2clPPp+xgEhuMaHC+zGgn31Kd235W35f7Hykkaww==",
-      "dev": true,
       "dependencies": {
         "asynckit": "^0.4.0",
         "combined-stream": "^1.0.8",
@@ -5514,6 +5605,11 @@
         "node": ">=8"
       }
     },
+    "node_modules/is-buffer": {
+      "version": "1.1.6",
+      "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz",
+      "integrity": "sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w=="
+    },
     "node_modules/is-core-module": {
       "version": "2.13.1",
       "resolved": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.13.1.tgz",
@@ -6598,8 +6694,7 @@
     "node_modules/lodash": {
       "version": "4.17.21",
       "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
-      "dev": true
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "node_modules/lodash.includes": {
       "version": "4.3.0",
@@ -6727,6 +6822,16 @@
         "tmpl": "1.0.5"
       }
     },
+    "node_modules/md5": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/md5/-/md5-2.3.0.tgz",
+      "integrity": "sha512-T1GITYmFaKuO91vxyoQMFETst+O71VUPEU3ze5GNzDm0OWdP8v1ziTaAEPUr/3kLsY3Sftgz242A1SetQiDL7g==",
+      "dependencies": {
+        "charenc": "0.0.2",
+        "crypt": "0.0.2",
+        "is-buffer": "~1.1.6"
+      }
+    },
     "node_modules/media-typer": {
       "version": "0.3.0",
       "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
@@ -7579,6 +7684,11 @@
         "node": ">= 0.10"
       }
     },
+    "node_modules/proxy-from-env": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
+      "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg=="
+    },
     "node_modules/pump": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz",
@@ -9103,6 +9213,14 @@
         "node": ">= 0.4.0"
       }
     },
+    "node_modules/uuid": {
+      "version": "9.0.0",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-9.0.0.tgz",
+      "integrity": "sha512-MXcSTerfPa4uqyzStbRoTgt5XIe3x5+42+q1sDuy3R5MDk66URdLMOZe5aPX/SQd+kuYAh0FdP/pO28IkQyTeg==",
+      "bin": {
+        "uuid": "dist/bin/uuid"
+      }
+    },
     "node_modules/v8-compile-cache-lib": {
       "version": "3.0.1",
       "resolved": "https://registry.npmjs.org/v8-compile-cache-lib/-/v8-compile-cache-lib-3.0.1.tgz",

@@ -6,12 +6,17 @@
   "private": true,
   "license": "UNLICENSED",
   "scripts": {
-    "build": "nest build",
-    "format": "prettier --write \"src/**/*.ts\"",
-    "start": "nest start",
-    "start:dev": "nest start --watch",
-    "start:debug": "nest start --debug --watch",
-    "start:prod": "node dist/main",
+    "build:prod": "STAGE=prod nest build",
+    "build:dev": "STAGE=dev nest build",
+    "build:local": "STAGE=local nest build",
+    "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\" \"libs/**/*.ts\"",
+    "start": "STAGE=prod nest start",
+    "start:dev": "STAGE=dev nest start --watch",
+    "start:dev:debug": "STAGE=dev nest start --debug --watch",
+    "start:local": "STAGE=local nest start --watch",
+    "start:local:debug": "STAGE=local nest start --debug --watch",
+    "start:prod": "STAGE=prod nest start --watch",
+    "start:prod:debug": "STAGE=prod nest start --debug --watch",
     "lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",
     "test": "jest",
     "test:watch": "jest --watch",
@@ -21,12 +26,15 @@
   },
   "dependencies": {
     "@nestjs/common": "^10.2.10",
+    "@nestjs/config": "^3.1.1",
     "@nestjs/core": "^10.0.0",
     "@nestjs/jwt": "^10.2.0",
     "@nestjs/mapped-types": "^2.0.4",
     "@nestjs/passport": "^10.0.2",
     "@nestjs/platform-express": "^10.0.0",
+    "@nestjs/throttler": "^5.0.1",
     "@prisma/client": "^5.6.0",
+    "axios": "^1.6.2",
     "bcrypt": "^5.1.1",
     "cors": "^2.8.5",
     "crypto-js": "^4.2.0",
@@ -69,7 +77,7 @@
       "json",
       "ts"
     ],
-    "rootDir": "src",
+    "rootDir": ".",
     "testRegex": ".*\\.spec\\.ts$",
     "transform": {
       "^.+\\.(t|j)s$": "ts-jest"
@@ -77,7 +85,15 @@
     "collectCoverageFrom": [
       "**/*.(t|j)s"
     ],
-    "coverageDirectory": "../coverage",
-    "testEnvironment": "node"
+    "coverageDirectory": "./coverage",
+    "testEnvironment": "node",
+    "roots": [
+      "<rootDir>/src/",
+      "<rootDir>/libs/"
+    ],
+    "moduleNameMapper": {
+      "^@app/public(|/.*)$": "<rootDir>/libs/public/src/$1",
+      "^@app/private(|/.*)$": "<rootDir>/libs/private/src/$1"
+    }
   }
 }

+import { AES, enc } from 'crypto-js';
+
+export const privateDecryptBody = (data: any) => {
+  return JSON.parse(AES.decrypt(data, String(process.env.PRIVATE_SECRET)).toString(enc.Utf8));
+};
+
+export const clientDecryptBody = (data: any) => {
+  return JSON.parse(AES.decrypt(data, String(process.env.CLIENT_SECRET)).toString(enc.Utf8));
+};

-const CryptoJS = require('crypto-js');
+import { AES } from 'crypto-js';
 
-export const encryptBody = (data: any) => {
-  return {
-    data: CryptoJS.AES.encrypt(JSON.stringify(data), 'ditohash').toString()
-  };
+export const privateEncryptBody = (data: any) => {
+  const encrypted = AES.encrypt(JSON.stringify(data), String(process.env.PRIVATE_SECRET)).toString();
+  return { data: encrypted };
+};
+
+export const clientEncryptBody = (data: any) => {
+  const encrypted = AES.encrypt(JSON.stringify(data), String(process.env.CLIENT_SECRET)).toString();
+  return { data: encrypted };
 };

@@ -3,6 +3,7 @@ import { AppModule } from './modules/app/app.module';
 
 async function bootstrap() {
   const app = await NestFactory.create(AppModule);
+  app.enableCors({ origin: String(process.env.ALLOWED_ORIGINS).split(',') });
   await app.listen(3000);
 }
 bootstrap();

@@ -5,10 +5,26 @@ import { UsersModule } from '../users/users.module';
 import { PrismaService } from 'src/config/prisma.service';
 import { AuthModule } from '../auth/auth.module';
 import { DescryptMiddleware } from './middlewares/decrypt.middleware';
-// import cors from 'cors';
+import { PublicModule } from '@app/public';
+import { ConfigModule } from '@nestjs/config';
+import { ThrottlerModule } from '@nestjs/throttler';
 
 @Module({
-  imports: [UsersModule, AuthModule],
+  imports: [
+    PublicModule,
+    UsersModule,
+    AuthModule,
+    ConfigModule.forRoot({
+      isGlobal: true,
+      envFilePath: [`${process.cwd()}/environment/.env.${process.env.STAGE}`],
+    }),
+    ThrottlerModule.forRoot([
+      {
+        ttl: Number(process.env.RATE_LIMIT_INTERVAL),
+        limit: Number(process.env.RATE_LIMIT_REQUEST),
+      },
+    ]),
+  ],
   controllers: [AppController],
   providers: [AppService, PrismaService],
 })

 import { Injectable, NestMiddleware } from '@nestjs/common';
+import { JwtService } from '@nestjs/jwt';
 import { Request, Response, NextFunction } from 'express';
-const CryptoJS = require('crypto-js');
+import { clientDecryptBody, privateDecryptBody } from 'src/helpers/decryptor.helper';
 
 @Injectable()
 export class DescryptMiddleware implements NestMiddleware {
   use(req: Request, res: Response, next: NextFunction) {
-    // req.body = (CryptoJS.AES.decrypt(req.body.data, 'ditohash').toString(CryptoJS.enc.Utf8));
-    console.log(
-      CryptoJS.AES.decrypt(req.body.data, 'ditohash').toString(
-        CryptoJS.enc.Utf8,
-      ),
-    );
-    next();
+    const { authorization } = req.headers;
+
+    if (!authorization) {
+      next();
+    }
+
+    const token = authorization?.split(' ')[1] || '';
+    if (token) {
+      const decodeToken = new JwtService({}).decode(token);
+      if (decodeToken.type === 'public' && !req.baseUrl.includes('/auth/login')) {
+        if (Object.keys(req.body).length !== 0) req.body = clientDecryptBody(req.body.data);
+      } else {
+        if (Object.keys(req.body).length !== 0) req.body = privateDecryptBody(req.body.data);
+      }
+      next();
+    }
   }
 }

 import { Controller, Request, Post, UseGuards } from '@nestjs/common';
 import { AuthService } from './auth.service';
 import { AuthGuard } from '@nestjs/passport';
+import { clientEncryptBody, privateEncryptBody } from 'src/helpers/encryptor.helper';
+import { ApiKeyGuard } from './guards/api-key.guard';
 
 @Controller('auth')
 export class AuthController {
   constructor(private readonly authService: AuthService) { }
 
-  // @Post()
-  // create(@Body() createAuthDto: CreateAuthDto) {
-  //   return this.authService.create(createAuthDto);
-  // }
-
   @UseGuards(AuthGuard('local'))
   @Post('login')
-  async login(@Request() req) {
-    return this.authService.login(req.user);
+  async privateLogin(@Request() req) {
+    return privateEncryptBody(await this.authService.privateLogin(req.user));
   }
 
-  // @Get(':id')
-  // findOne(@Param('id') id: string) {
-  //   return this.authService.findOne(+id);
-  // }
-
-  // @Patch(':id')
-  // update(@Param('id') id: string, @Body() updateAuthDto: UpdateAuthDto) {
-  //   return this.authService.update(+id, updateAuthDto);
-  // }
-
-  // @Delete(':id')
-  // remove(@Param('id') id: string) {
-  //   return this.authService.remove(+id);
-  // }
+  @UseGuards(ApiKeyGuard)
+  @Post('public/login')
+  async publicLogin(@Request() req) {
+    return clientEncryptBody(await this.authService.publicLogin());
+  }
 }

@@ -4,7 +4,7 @@ import { JwtModule } from '@nestjs/jwt';
 import { jwtConstants } from './misc/constants';
 import { PassportModule } from '@nestjs/passport';
 import { LocalStrategy } from './strategies/local.strategy';
-import { JwtStrategy } from './strategies/jwt.strategy';
+import { JwtStrategy } from './strategies/private-jwt.strategy';
 import { UsersModule } from '../users/users.module';
 import { UsersService } from '../users/users.service';
 import { PrismaService } from 'src/config/prisma.service';
@@ -16,16 +16,10 @@ import { AuthController } from './auth.controller';
     PassportModule,
     JwtModule.register({
       secret: jwtConstants.secret,
-      signOptions: { expiresIn: '3500s' },
+      signOptions: { expiresIn: '10d' },
     }),
   ],
   controllers: [AuthController],
-  providers: [
-    AuthService,
-    UsersService,
-    PrismaService,
-    LocalStrategy,
-    JwtStrategy,
-  ],
+  providers: [AuthService, UsersService, PrismaService, LocalStrategy, JwtStrategy],
 })
 export class AuthModule { }

-import { Injectable, UnauthorizedException } from '@nestjs/common';
+import { Injectable } from '@nestjs/common';
 import { JwtService } from '@nestjs/jwt';
 import { UsersService } from '../users/users.service';
-import * as bcrypt from 'bcrypt'
+import * as bcrypt from 'bcrypt';
 
 @Injectable()
 export class AuthService {
@@ -19,10 +19,17 @@ export class AuthService {
     return null;
   }
 
-  async login(user: any) {
-    const payload = { username: user.email, sub: user.id };
+  async publicLogin() {
+    const payload = { type: 'public' };
     return {
-      access_token: this.jwtService.sign(payload),
+      access_token: this.jwtService.sign(payload, { secret: process.env.TOKEN_SECRET }),
+    };
+  }
+
+  async privateLogin(user: any) {
+    const payload = { username: user.email, sub: user.id, type: 'private' };
+    return {
+      access_token: this.jwtService.sign(payload, { secret: process.env.TOKEN_SECRET }),
     };
   }
 }

+import { Injectable, CanActivate, ExecutionContext, UnauthorizedException } from '@nestjs/common';
+
+@Injectable()
+export class ApiKeyGuard implements CanActivate {
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    const request = context.switchToHttp().getRequest();
+    const apiKey = request.headers['x-api-key'];
+
+    if (!apiKey) {
+      throw new UnauthorizedException('No API key provided');
+    }
+
+    if (apiKey !== process.env.API_KEY) {
+      throw new UnauthorizedException('Invalid API key');
+    }
+    return true;
+  }
+}

+import { CanActivate, ExecutionContext, Injectable, UnauthorizedException } from '@nestjs/common';
+import { JwtService } from '@nestjs/jwt';
+import { Request } from 'express';
+
+@Injectable()
+export class MixAuthGuard implements CanActivate {
+  constructor(
+    // private jwtService: JwtService,
+    private action,
+  ) { }
+
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    const jwtService = new JwtService({});
+    const request = context.switchToHttp().getRequest();
+    const token = this.extractTokenFromHeader(request);
+    if (!token) {
+      throw new UnauthorizedException();
+    }
+    try {
+      await jwtService.verify(token, { secret: process.env.TOKEN_SECRET });
+      const payload = await jwtService.decode(token);
+      if (payload.type !== this.action) {
+        throw new UnauthorizedException();
+      }
+    } catch (error: Error | any) {
+      throw new UnauthorizedException(error.message);
+    }
+    return true;
+  }
+
+  private extractTokenFromHeader(request: Request): string | undefined {
+    const [type, token] = request.headers.authorization?.split(' ') ?? [];
+    return type === 'Bearer' ? token : undefined;
+  }
+}
\ No newline at end of file

-export const jwtConstants = { secret: 'ditobanxSecret' };
+export const jwtConstants = { secret: String(process.env.TOKEN_SECRET) };
+export const jwtExp = String(process.env.TOKEN_EXPIRATION);

@@ -14,6 +14,6 @@ export class JwtStrategy extends PassportStrategy(Strategy) {
   }
 
   async validate(payload: any) {
-    return { userId: payload.sub, username: payload.username };
+    return { userId: payload.sub, username: payload.username, type: 'private' };
   }
 }

+import { ExtractJwt, Strategy } from 'passport-jwt';
+import { PassportStrategy } from '@nestjs/passport';
+import { Injectable } from '@nestjs/common';
+
+@Injectable()
+export class PulbicJwtStrategy extends PassportStrategy(Strategy, 'public') {
+  constructor() {
+    super({
+      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+      ignoreExpiration: false,
+      secretorkley: 'dito-hash-public',
+    });
+  }
+
+  async validate() {
+    return { type: 'public' };
+  }
+}

-import {
-  Controller,
-  Get,
-  Post,
-  Body,
-  Patch,
-  Param,
-  Delete,
-  UseGuards,
-} from '@nestjs/common';
+import { Controller, Get, Post, Body, Param, UseGuards } from '@nestjs/common';
 import { UsersService } from './users.service';
-import { CreateUserDto } from './dto/create-user.dto';
-import { UpdateUserDto } from './dto/update-user.dto';
 import { JwtAuthGuard } from '../auth/guards/jwt-auth.guard';
-import { encryptBody } from 'src/helpers/encryptor.helper';
+import { privateEncryptBody } from 'src/helpers/encryptor.helper';
+import { ApiKeyGuard } from '../auth/guards/api-key.guard';
+import { MixAuthGuard } from '../auth/guards/auth.guard';
 
 @Controller('users')
 export class UsersController {
   constructor(private readonly usersService: UsersService) { }
 
   @Post()
-  create(@Body() createUserDto: CreateUserDto) {
-    return this.usersService.create();
+  create(@Body() createUserDto) {
+    console.log(createUserDto);
+    // return this.usersService.create({ data: createUserDto });
   }
 
-  @UseGuards(JwtAuthGuard)
+  @UseGuards(ApiKeyGuard, new MixAuthGuard('private'))
   @Get(':id')
   async findOne(@Param('id') id: string) {
-    return encryptBody(this.usersService.findOne(id));
+    return privateEncryptBody(await this.usersService.findOne(id));
   }
 
-  @UseGuards(JwtAuthGuard)
+  @UseGuards(ApiKeyGuard, JwtAuthGuard)
   @Get()
-  findAll() {
-    return this.usersService.findAll();
+  async findAll() {
+    return privateEncryptBody(await this.usersService.findAll());
   }
 }

@@ -16,6 +16,12 @@
     "noImplicitAny": false,
     "strictBindCallApply": true,
     "forceConsistentCasingInFileNames": true,
-    "noFallthroughCasesInSwitch": true
+    "noFallthroughCasesInSwitch": true,
+    "paths": {
+      "@app/public": ["libs/public-api/src"],
+      "@app/public/*": ["libs/public-api/src/*"],
+      "@app/private": ["libs/private/src"],
+      "@app/private/*": ["libs/private/src/*"]
+    }
   }
 }