
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@waitaction/nestjs-ng-universal
Advanced tools
Nest - modern, fast, powerful node.js web framework (@ng-universal)
A progressive Node.js framework for building efficient and scalable server-side applications.
<p align="center">
Angular Universal module for Nest.
Using the Angular CLI:
$ ng add @waitaction/nestjs-ng-universal
Or manually:
$ npm i @waitaction/nestjs-ng-universal
See full example here.
If you have installed the module manually, you need to import AngularUniversalModule in your Nest application.
import { Module } from '@nestjs/common';
import { join } from 'path';
import { AngularUniversalModule } from '@waitaction/nestjs-ng-universal';
@Module({
imports: [
AngularUniversalModule.forRoot({
bootstrap: AppServerModule,
viewsPath: join(process.cwd(), 'dist/{APP_NAME}/browser')
}),
],
})
export class ApplicationModule {}
useEjsEngine设置为true则输出不渲染的html
The forRoot() method takes an options object with a few useful properties.
| Property | Type | Description |
|---|---|---|
viewsPath | string | The directory where the module should look for client bundle (Angular app) |
bootstrap | Function | Angular server module reference ( AppServerModule ). |
templatePath | string? | Path to index file (default: {viewsPaths}/index.html ) |
rootStaticPath | string? | Static files root directory (default: *.* ) |
renderPath | string? | Path to render Angular app (default: * ) |
extraProviders | StaticProvider[]? | The platform level providers for the current render request |
cache | boolean? | object? | Cache options, description below (default: true ) |
useEjsEngine | boolean? | HTML that is not rendered on the server (default: false ) |
| Property | Type | Description |
|---|---|---|
expiresIn | number? | Cache expiration in milliseconds (default: 60000 ) |
storage | CacheStorage? | Interface for implementing custom cache storage (default: in memory) |
keyGenerator | CacheKeyGenerator? | Interface for implementing custom cache key generation logic (default: by url) |
AngularUniversalModule.forRoot({
bootstrap: AppServerModule,
viewsPath: join(process.cwd(), 'dist/{APP_NAME}/browser'),
cache: {
storage: new InMemoryCacheStorage(),
expiresIn: DEFAULT_CACHE_EXPIRATION_TIME,
keyGenerator: new CustomCacheKeyGenerator(),
}
})
export class CustomCacheKeyGenerator implements CacheKeyGenerator {
generateCacheKey(request: Request): string {
const md = new MobileDetect(request.headers['user-agent']);
const isMobile = md.mobile() ? 'mobile' : 'desktop';
return (request.hostname + request.originalUrl + isMobile).toLowerCase();
}
}
This tool uses @nguniversal/express-engine and will properly provide access to the Express Request and Response objects in you Angular components.
This is useful for things like setting the response code to 404 when your Angular router can't find a page (i.e. path: '**' in routing):
import { Response } from 'express';
import { Component, Inject, Optional, PLATFORM_ID } from '@angular/core';
import { isPlatformServer } from '@angular/common';
import { RESPONSE } from '@nguniversal/express-engine/tokens';
@Component({
selector: 'my-not-found',
templateUrl: './not-found.component.html',
styleUrls: ['./not-found.component.scss'],
})
export class NotFoundComponent {
constructor(
@Inject(PLATFORM_ID)
private readonly platformId: any,
@Optional()
@Inject(RESPONSE)
res: Response,
) {
// `res` is the express response, only available on the server
if (isPlatformServer(this.platformId)) {
res.status(404);
}
}
}
The server and client share the CookieService .
import { makeStateKey, TransferState } from '@angular/platform-browser';
import { Injectable } from '@angular/core';
import { HttpInterceptor, HttpRequest, HttpHandler, HttpResponse } from '@angular/common/http';
import { tap } from 'rxjs/operators';
import { CookieService } from '@gorniv/ngx-universal';
import { TokenService } from '../token.service';
@Injectable()
export class ServerStateInterceptor implements HttpInterceptor {
constructor(
private transferState: TransferState,
private tokenService: TokenService,
private cookieService: CookieService) { }
intercept(req: HttpRequest<any>, next: HttpHandler) {
let self = this;
return next.handle(req).pipe(
tap(event => {
if (event instanceof HttpResponse) {
this.transferState.set(makeStateKey(self.tokenService.computedUrlKey(req.url)), event.body);
this.cookieService.put(self.tokenService.computedUrlKey(req.url), "server");
}
})
);
}
}
Nest is an MIT-licensed open source project. It can grow thanks to the sponsors and support by the amazing backers. If you'd like to join them, please read more here.
Nest is MIT licensed.
FAQs
Nest - modern, fast, powerful node.js web framework (@ng-universal)
We found that @waitaction/nestjs-ng-universal demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.