feat: enhance authentication with JWT strategy and user decorators

- Implemented JwtStrategy for handling JWT authentication, extracting user payload from tokens.
- Created JwtAuthGuard to manage access control based on public metadata.
- Introduced user decorators to simplify access to authenticated user data in controllers.
- Updated EmailController to utilize user information for email operations.
- Added public health check endpoint to allow unauthenticated access.
- Included new JWT payload DTO for structured token data handling.
- Added unit tests for JwtStrategy to ensure correct payload validation.

Author: jzunigax2

package-lock.json

@@ -34,6 +34,8 @@
     "@nestjs/config": "^4.0.3",
     "@nestjs/core": "^11.1.15",
     "@nestjs/event-emitter": "^3.0.1",
+    "@nestjs/jwt": "^11.0.2",
+    "@nestjs/passport": "^11.0.5",
     "@nestjs/platform-express": "^11.1.15",
     "@nestjs/sequelize": "^11.0.1",
     "@nestjs/swagger": "^11.2.6",
@@ -43,6 +45,8 @@
     "helmet": "^8.1.0",
     "nanoid": "^5.1.5",
     "nestjs-pino": "^4.6.0",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.1",
     "pg": "^8.20.0",
     "pino-http": "^11.0.0",
     "pino-pretty": "^13.1.3",
@@ -64,6 +68,7 @@
     "@types/chance": "^1.1.7",
     "@types/express": "^5.0.6",
     "@types/node": "^22.15.0",
+    "@types/passport-jwt": "^4.0.1",
     "@vitest/coverage-v8": "^3.2.4",
     "chance": "^1.1.13",
     "eslint": "^9.18.0",

package.json

@@ -1,12 +1,24 @@
-import {
-  type CanActivate,
-  type ExecutionContext,
-  Injectable,
-} from '@nestjs/common';
+import { Injectable, type ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { AuthGuard } from '@nestjs/passport';
+import { IS_PUBLIC_KEY } from './decorators/public.decorator.js';
 
 @Injectable()
-export class AuthGuard implements CanActivate {
-  canActivate(_context: ExecutionContext): boolean {
-    return true;
+export class JwtAuthGuard extends AuthGuard('jwt') {
+  constructor(private readonly reflector: Reflector) {
+    super();
+  }
+
+  canActivate(context: ExecutionContext) {
+    const isPublic = this.reflector.getAllAndOverride<boolean>(IS_PUBLIC_KEY, [
+      context.getHandler(),
+      context.getClass(),
+    ]);
+
+    if (isPublic) {
+      return true;
+    }
+
+    return super.canActivate(context);
   }
 }