chore(deps): upgrade NestJS and related dependencies to version 11.x

fix(auth): ensure JWT_SECRET is set in JwtStrategy constructor

.gitea/workflows/test.yml

@@ -12,6 +12,7 @@ jobs:
     runs-on: backend-node24
     env:
       DATABASE_URL: mysql://ci:ci@127.0.0.1:3306/recipe_app
+      JWT_SECRET: ci-test-secret
 
     steps:
       - name: Verify Node toolchain on runner
@@ -74,6 +75,7 @@ jobs:
     runs-on: backend-node24
     env:
       DATABASE_URL: mysql://ci:ci@127.0.0.1:3306/recipe_app
+      JWT_SECRET: ci-test-secret
 
     steps:
       - name: Verify Node toolchain on runner
@@ -116,6 +118,7 @@ jobs:
     runs-on: backend-node24
     env:
       DATABASE_URL: mysql://ci:ci@127.0.0.1:3306/recipe_app
+      JWT_SECRET: ci-test-secret
 
     steps:
       - name: Verify Node toolchain on runner

backend/package.json

@@ -13,18 +13,18 @@
     "test:watch": "jest --watch"
   },
   "dependencies": {
-    "@nestjs/common": "^10.3.0",
+    "@nestjs/common": "^11.1.19",
-    "@nestjs/core": "^10.3.0",
+    "@nestjs/core": "^11.1.19",
-    "@nestjs/jwt": "^10.2.0",
+    "@nestjs/jwt": "^11.0.2",
-    "@nestjs/passport": "^10.0.3",
+    "@nestjs/passport": "^11.0.5",
-    "@nestjs/platform-express": "^10.3.0",
+    "@nestjs/platform-express": "^11.1.19",
     "@nestjs/throttler": "^6.4.0",
     "@prisma/client": "6.12.0",
     "bcryptjs": "^2.4.3",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.15.1",
     "helmet": "^8.0.0",
-    "multer": "^1.4.5-lts.2",
+    "multer": "^2.1.1",
     "passport": "^0.7.0",
     "passport-jwt": "^4.0.1",
     "prisma": "6.12.0",
@@ -34,11 +34,11 @@
     "uuid": "^11.1.0"
   },
   "devDependencies": {
-    "@nestjs/cli": "^10.3.0",
+    "@nestjs/cli": "^11.0.21",
-    "@nestjs/schematics": "^10.1.1",
+    "@nestjs/schematics": "^11.1.0",
-    "@nestjs/testing": "^10.3.0",
+    "@nestjs/testing": "^11.1.19",
     "@types/bcryptjs": "^2.4.6",
-    "@types/express": "^4.17.21",
+    "@types/express": "^5.0.5",
     "@types/jest": "^29.5.14",
     "@types/multer": "^1.4.12",
     "@types/node": "^22.15.29",

backend/src/auth/jwt.strategy.ts

@@ -7,10 +7,15 @@ export class JwtStrategy extends PassportStrategy(Strategy) {
   private readonly logger = new Logger(JwtStrategy.name);
 
   constructor() {
+    const jwtSecret = process.env.JWT_SECRET;
+    if (!jwtSecret) {
+      throw new Error('JWT_SECRET is not set');
+    }
+
     super({
       jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
       ignoreExpiration: false,
-      secretOrKey: process.env.JWT_SECRET,
+      secretOrKey: jwtSecret,
     });
   }