otp code, packages update

package.json

@@ -24,49 +24,47 @@
   "dependencies": {
     "@apollo/server": "^5.5.1",
     "@as-integrations/express5": "^1.1.2",
-    "@aws-sdk/client-s3": "^3.1145.0",
+    "@aws-sdk/client-s3": "^3.1152.0",
-    "@better-auth/prisma-adapter": "^1.7.2",
+    "@better-auth/prisma-adapter": "^1.7.11",
     "@nestjs/apollo": "^14.0.0",
-    "@nestjs/common": "^12.0.1",
+    "@nestjs/common": "^12.2.0",
-    "@nestjs/config": "^12.0.0",
+    "@nestjs/config": "^12.0.1",
-    "@nestjs/core": "^12.0.1",
+    "@nestjs/core": "^12.2.0",
     "@nestjs/event-emitter": "^12.0.1",
     "@nestjs/graphql": "^14.0.0",
-    "@nestjs/platform-express": "^12.0.1",
+    "@nestjs/platform-express": "^12.2.0",
     "@nestjs/schedule": "^12.0.2",
-    "@nestjs/typeorm": "^12.0.1",
     "@prisma/adapter-pg": "^7.10.0",
     "@prisma/client": "^7.10.0",
-    "@thallesp/nestjs-better-auth": "^2.7.0",
+    "@thallesp/nestjs-better-auth": "^2.8.0",
-    "better-auth": "^1.7.2",
+    "better-auth": "^1.7.11",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.15.1",
-    "file-type": "^22.1.1",
+    "file-type": "^22.2.0",
     "firebase-admin": "^14.5.0",
     "graphql": "^16.14.2",
-    "nodemailer": "^10.0.0",
+    "nodemailer": "^10.1.7",
     "pg": "^8.23.0",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.8.1",
-    "typeorm": "^1.1.1",
+    "valibot": "^1.5.0"
-    "valibot": "^1.4.2"
   },
   "devDependencies": {
     "@nestjs/cli": "^12.0.0",
-    "@nestjs/mau": "^0.2.6",
+    "@nestjs/mau": "^0.2.8",
     "@nestjs/schematics": "^12.0.0",
-    "@nestjs/testing": "^12.0.1",
+    "@nestjs/testing": "^12.2.0",
     "@types/express": "^5.0.0",
     "@types/multer": "^2.3.0",
     "@types/node": "^24.0.0",
     "@types/pg": "^8.23.1",
-    "@types/supertest": "^7.0.0",
+    "@types/supertest": "^7.2.1",
     "@vitest/coverage-v8": "^4.1.2",
-    "oxlint": "^1.58.0",
+    "oxlint": "^1.88.0",
-    "prettier": "^3.4.2",
+    "prettier": "^3.9.10",
     "prisma": "^7.10.0",
     "source-map-support": "^0.5.21",
-    "supertest": "^7.0.0",
+    "supertest": "^7.3.1",
     "typescript": "^6.0.2",
     "vite-tsconfig-paths": "^5.1.4",
     "vitest": "^4.1.2"

src/app.module.ts

@@ -26,21 +26,13 @@ import { join } from 'node:path';
       isGlobal: true,
       cache: true,
     }),
-    // Внутрипроцессная шина доменных событий. Notification-модуль слушает
-    // события через неё, не завязываясь на модули, которые их порождают.
     EventEmitterModule.forRoot(),
-    // Периодические задачи (@Cron), например сборка файлов-сирот в FileModule
     ScheduleModule.forRoot(),
     GraphQLModule.forRoot<ApolloDriverConfig>({
       driver: ApolloDriver,
       autoSchemaFile: join(process.cwd(), 'src/schema.gql'),
       sortSchema: true,
     }),
-    // TypeOrmModule.forRootAsync({
-    //   imports: [ConfigModule],
-    //   inject: [ConfigService],
-    //   useFactory: pgConfig,
-    // }),
     AuthModule.forRoot({
       auth: auth,
       bodyParser: {

src/configs/db.config.ts

@@ -1,7 +1,6 @@
 import { ConfigService } from '@nestjs/config';
-import { TypeOrmModuleOptions } from '@nestjs/typeorm';
 
-export function pgConfig(config: ConfigService): TypeOrmModuleOptions {
+export function pgConfig(config: ConfigService): unknown {
   return {
     type: 'postgres',
     url: config.getOrThrow<string>('DATABASE_URL'),

src/lib/auth.ts

@@ -2,12 +2,33 @@ import { betterAuth } from 'better-auth';
 import { prismaAdapter } from '@better-auth/prisma-adapter';
 import prisma from './prisma.js';
 import EmailSender from './email-sender.js';
+import { emailOTP } from 'better-auth/plugins';
 
 export const auth = betterAuth({
   appName: process.env.APP_NAME ?? 'app',
   basePath: '/api/auth',
   plugins: [
     // authTransformResponse()
+    emailOTP({
+      async sendVerificationOTP({ email, otp, type }) {
+        if (type === 'sign-in') {
+          // Send the OTP for sign in
+          console.log({ email, otp, type });
+
+          void EmailSender.getTransporter().sendMail({
+            to: email,
+            subject: `Your OTP code is: ${otp}`,
+            text: `Your OTP code is: ${otp}`,
+          });
+        } else if (type === 'email-verification') {
+          // Send the OTP for email verification
+          console.log({ email, otp, type });
+        } else {
+          // Send the OTP for password reset
+          console.log({ email, otp, type });
+        }
+      },
+    }),
   ],
   database: prismaAdapter(prisma, {
     provider: 'postgresql',
@@ -24,7 +45,7 @@ export const auth = betterAuth({
   emailAndPassword: {
     enabled: true,
     autoSignIn: false,
-    requireEmailVerification: false,
+    requireEmailVerification: true,
     onExistingUserSignUp: async ({ user }, request) => {
       console.log('onExistingUserSignUp', { user });
 

src/main.ts

@@ -16,12 +16,7 @@ async function bootstrap() {
     logger: new CustomLogger(),
   });
 
-  // app.useGlobalPipes(new StandardSchemaValidationPipe());
-
   app.setGlobalPrefix('api');
-
-  // Глобальный body-parser отключён (better-auth сам парсит своё тело),
-  // поэтому для GraphQL включаем JSON-парсинг точечно на его пути.
   app.use('/graphql', json());
   app.useGlobalPipes(new ValidationPipe({ whitelist: true, transform: true }));
   app.useGlobalInterceptors(new TransformResponseInterceptor());