? ?? ??

nest g ??? ??

??? ??? ?????
? REST API
GraphQL(?? ??)
GraphQL(??? ??)
???????(?HTTP)
???

REST API? ???? dtos ??? ???? ? ??? ???? ?? ??? ?????

??? ??

???/???? ?? ??? ? ?? ??? ???? ???? ???? ???????.

1. ?? ???? ???? ????? ???? ???? ?? ??? ???? ??? ?? ??? ?????.
2. ???? ???? ??? ? ??? ??? ?????.
3. ??? ??? ?? ??????? ??? ?????. ???? ?? ?? ???? ?? ??? ??? ??? ????? ?? ??? ?????? ??? ????.
4. ? ??? ???? ???? ???? ?? ?????. ??? ????? ??? bcrypt ?? argon2? ?? ?? ?? ?????? ?????
5. ?? ? ??? ???? DB? ?????.
6. ????? ???? ?? ???? ????? ?????.
7. DDoS ??? ??? ?? ??? ?? ?? ??

1 ?? ???? ???? ?????.

nest js? ??? ??? ???? ?? ?? ??? ?? ???? ???? ???? ?? ??? ?? ??? ??? ?? js ??? ??? ??? ?? ??? zod? ???? ?? ?? ??????.
Nests zod?? Nest js ???? ?????? ??? ? ???? ???????. ????? ?? ?????? ?????
npm? Nestjs-zod

import { createZodDto } from 'nestjs-zod';
import { z } from 'zod';
const passwordStrengthRegex =
  /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/;
const registerUserSchema = z
  .object({
    email: z.string().email(),
    password: z
      .string()
      .min(8)
      .regex(
        passwordStrengthRegex,
        'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character',
      ),
    confirmPassword: z.string().min(8),
  })
  .refine((data) => data.password === data.confirmPassword, {
    message: 'Passwords do not match',
  });

export class RegisterUserDto extends createZodDto(registerUserSchema) {}

?? ?? ??? ??? ?? ???? ?????

import { Controller, Post, Body, Version, UsePipes } from '@nestjs/common';
import { AuthService } from './auth.service';
import { RegisterUserDto } from './dto/register.dto';
import { ZodValidationPipe } from 'nestjs-zod';

@Controller('auth')
export class AuthController {
  constructor(private readonly authService: AuthService) {}

  @Version('1')
  @Post()
  @UsePipes(ZodValidationPipe)
  async registerUser(@Body() registerUserDto: RegisterUserDto) {
    return await this.authService.registerUser(registerUserDto);
  }
}

?? ??? ??? ??

?? ? ?? ??? ?????

???? ????

3?? ??? ????

• ????: ????? ????? ???? ?? ????? ????? ?????? ?? ? ???? ???? ?? ????? ?????? ???? ? ???.
• confirmPassword: ?? ?? ??
• ???: ?, ???? ??????? ???? ?????? ?? ? ???? ??? ????? ??? ??? ???? ???.

??? ????? ???? ??????: z.string().email() ? ?? ??? ?????

??? ??? ???? ?? ?? ?? ???? ??? ? ????

import { createZodDto } from 'nestjs-zod';
import { z } from 'zod';
import * as xss from 'xss'; 

const passwordStrengthRegex =
  /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/;

const registerUserSchema = z
  .object({
    email: z.string().transform((input) => xss.filterXSS(input)), // Sanitizing input using xss
    password: z
      .string()
      .min(8)
      .regex(
        passwordStrengthRegex,
        'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character',
      ),
    confirmPassword: z.string().min(8),
  })
  .refine((data) => data.password === data.confirmPassword, {
    message: 'Passwords do not match',
  });

export class RegisterUserDto extends createZodDto(registerUserSchema) {}

??? ??? ?? ??? ???????

???: z
.string()
.???()

3,4,5??

import { createZodDto } from 'nestjs-zod';
import { z } from 'zod';
const passwordStrengthRegex =
  /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/;
const registerUserSchema = z
  .object({
    email: z.string().email(),
    password: z
      .string()
      .min(8)
      .regex(
        passwordStrengthRegex,
        'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character',
      ),
    confirmPassword: z.string().min(8),
  })
  .refine((data) => data.password === data.confirmPassword, {
    message: 'Passwords do not match',
  });

export class RegisterUserDto extends createZodDto(registerUserSchema) {}

???? ?? ??? ?? ?? ?? ???? ????
? ????? ????? ???? ?? ?? ??? ?? ??? ID? ???? ?? ????? ?????. ?? ? ???? ?? ??? ???? ?? ??? ???? ??????? ???? ??? ??? ??? ?? ??? ?? ?????.

?? ??

nestjs?? ?? ??? ???? ?? ?? ????. ?? Nestjs/throttler? ???? ????? ???? ?????.
???? ????? npm i --save @nestjs/throttler
? ?????.

import { Controller, Post, Body, Version, UsePipes } from '@nestjs/common';
import { AuthService } from './auth.service';
import { RegisterUserDto } from './dto/register.dto';
import { ZodValidationPipe } from 'nestjs-zod';

@Controller('auth')
export class AuthController {
  constructor(private readonly authService: AuthService) {}

  @Version('1')
  @Post()
  @UsePipes(ZodValidationPipe)
  async registerUser(@Body() registerUserDto: RegisterUserDto) {
    return await this.authService.registerUser(registerUserDto);
  }
}

?? ?? Nestjs ??? ??? ?? ??? ?????

import { createZodDto } from 'nestjs-zod';
import { z } from 'zod';
import * as xss from 'xss'; 

const passwordStrengthRegex =
  /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/;

const registerUserSchema = z
  .object({
    email: z.string().transform((input) => xss.filterXSS(input)), // Sanitizing input using xss
    password: z
      .string()
      .min(8)
      .regex(
        passwordStrengthRegex,
        'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character',
      ),
    confirmPassword: z.string().min(8),
  })
  .refine((data) => data.password === data.confirmPassword, {
    message: 'Passwords do not match',
  });

export class RegisterUserDto extends createZodDto(registerUserSchema) {}

?? ????

import {
  BadRequestException,
  Injectable,
  InternalServerErrorException,
} from '@nestjs/common';
import { RegisterUserDto } from './dto/register.dto';
import { PrismaService } from 'src/prismaModule/prisma.service';
import * as argon2 from 'argon2';

@Injectable()
export class AuthService {
  constructor(private readonly prismaService: PrismaService) {}
  async registerUser(registerUserDto: RegisterUserDto) {
    // data is validate and sanitized by the registerUserDto
    const { email, password } = registerUserDto;

    try {
      // check if user already exists
      const user = await this.prismaService.user.findFirst({
        where: {
          email,
        },
      });

      if (user) {
        throw new BadRequestException('user already eists ');
      }
      //if use not exists lets hash user password
      const hashedPassword = await argon2.hash(registerUserDto.password);

      // time to create user
      const userData = await this.prismaService.user.create({
        data: {
          email,
          password: hashedPassword,
        },
      });

      if (!userData) {
        throw new InternalServerErrorException(
          'some thing went wrong while registring user',
        );
      }

      // if user is created successfully then  send email to user for email varification
      return {
        success: true,
        message: 'user created successfully',
      };
    } catch (error) {
      throw error;
    }
  }
}

??? ????? ??? ??? ????? ??? ?????
?? ?? ??? ??? ? ???? ?? ??? ???? ??????

?? ??? ???

????? ?? ???? ??? ?? ???? ???? ?? ?? ??????. ??? ??? ?? ??? ? ??? ?? ?? ???? ?? ??? ????? ???? ??????

? ??? Passport? ???? NestJS?? JWT ??? ???? ?(1?)? ?? ?????. ??? ??? PHP ??? ????? ?? ?? ??? ?????!