@aurora-interactive/sensei-productivity 1.0.0

package/rest-api/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "csds-393-group-17-rest-api",
+  "version": "1.0.0",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "build": "npx prisma generate && npx tsc"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/one-and-only/CSDS-393-Group-17-REST-API.git"
+  },
+  "keywords": [],
+  "author": "CSDS 393 Team 17",
+  "license": "ISC",
+  "type": "module",
+  "bugs": {
+    "url": "https://github.com/one-and-only/CSDS-393-Group-17-REST-API/issues"
+  },
+  "homepage": "https://github.com/one-and-only/CSDS-393-Group-17-REST-API#readme",
+  "dependencies": {
+    "@aurora-interactive/oas-fastify": "^5.0.0",
+    "@node-rs/argon2": "^2.0.2",
+    "@prisma/adapter-mariadb": "^7.3.0",
+    "@prisma/client": "^7.3.0",
+    "fastify": "^5.7.3",
+    "js-yaml": "^4.1.1"
+  },
+  "devDependencies": {
+    "@types/node": "^25.1.0",
+    "cypress": "^15.9.0",
+    "prisma": "^7.3.0",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
+  }
+}

package/rest-api/prisma.config.ts

@@ -0,0 +1,13 @@
+// This file was generated by Prisma, and assumes you have installed the following:
+// npm install --save-dev prisma dotenv
+import { defineConfig } from "prisma/config";
+
+export default defineConfig({
+  schema: "prisma/schema.prisma",
+  migrations: {
+    path: "prisma/migrations",
+  },
+  datasource: {
+    url: process.env["DATABASE_URL"] ?? "failed to get URL",
+  },
+});

package/rest-api/routes/CategoryFunctions.js

@@ -0,0 +1,187 @@
+async function isUserAuthed(prisma, accessToken) {
+    const userIdInfo = await prisma.users.findFirst({
+        select: {
+            user_id: true
+        },
+        where: {
+            access_token: accessToken
+        }
+    });
+
+    if (userIdInfo === null) {
+        return false;
+    }
+
+    return true;
+}
+
+async function userCanAccessPrivateCategoryEndpoints(prisma, accessToken) {
+    const userInfo = await prisma.users.findFirst({
+        select: {
+            role_id: true
+        },
+        where: {
+            access_token: accessToken
+        }
+    });
+
+    if (userInfo === null || userInfo.role_id < 128) {
+        return false;
+    }
+
+    return true;
+}
+
+export async function listCategoriesHandler(request, reply, fastify) {
+    if (!(await isUserAuthed(fastify.prisma, request.headers.authorization.substring(7)))) {
+        reply.status(401);
+        return;
+    }
+
+    const categories = await fastify.prisma.Category.findMany({
+        select: {
+            category_id: true,
+            category_name: true,
+            category_weight: true,
+            category_description: true
+        }
+    });
+
+    return categories.map(category => ({
+        categoryId: category.category_id,
+        categoryName: category.category_name,
+        categoryWeight: category.category_weight,
+        categoryDescription: category.category_description,
+    }));
+}
+
+export async function createCategoryHandler(request, reply, fastify) {
+    if (typeof request.headers.authorization === "undefined") {
+        reply.status(401);
+        return;
+    }
+
+    const accessToken = request.headers.authorization.substring(7);
+    if (!(await isUserAuthed(fastify.prisma, accessToken))) {
+        reply.status(401);
+        return;
+    }
+
+    if (!(await userCanAccessPrivateCategoryEndpoints(fastify.prisma, accessToken))) {
+        reply.status(403);
+        return;
+    }
+
+    const category = await fastify.prisma.Category.create({
+        data: {
+            category_name: request.body.categoryName,
+            category_weight: request.body.categoryWeight,
+            category_description: request.body.categoryDescription,
+        }
+    });
+
+    reply.status(201);
+    return {
+        categoryId: category.category_id,
+        categoryName: category.category_name,
+        categoryWeight: category.category_weight,
+        categoryDescription: category.category_description
+    };
+}
+
+export async function updateCategoryHandler(request, reply, fastify) {
+    if (Object.keys(request.body).length === 0) {
+        reply.status(400);
+        return;
+    }
+
+    if (typeof request.headers.authorization === "undefined") {
+        reply.status(401);
+        return;
+    }
+
+    const accessToken = request.headers.authorization.substring(7);
+    if (!(await isUserAuthed(fastify.prisma, accessToken))) {
+        reply.status(401);
+        return;
+    }
+
+    if (!(await userCanAccessPrivateCategoryEndpoints(fastify.prisma, accessToken))) {
+        reply.status(403);
+        return;
+    }
+
+    const categoryData = await fastify.prisma.Category.findFirst({
+        select: {
+            category_name: true,
+            category_weight: true,
+            category_description: true,
+        },
+        where: {
+            category_id: request.params.id
+        }
+    });
+    if (categoryData === null) {
+        reply.status(404);
+        return;
+    }
+
+    const targetCategoryName = request.body.categoryName ?? categoryData.category_name;
+    const targetCategoryWeight = request.body.categoryWeight ?? categoryData.category_weight;
+    const targetCategoryDescription = request.body.categoryDescription ?? categoryData.category_description;
+
+    await fastify.prisma.Category.update({
+        data: {
+            category_name: targetCategoryName,
+            category_weight: targetCategoryWeight,
+            category_description: targetCategoryDescription,
+        },
+        where: {
+            category_id: request.params.id
+        }
+    });
+
+    return {
+        categoryName: targetCategoryName,
+        categoryWeight: targetCategoryWeight,
+        categoryDescription: targetCategoryDescription,
+        categoryId: request.params.id,
+    };
+}
+
+export async function deleteCategoryHandler(request, reply, fastify) {
+    if (typeof request.headers.authorization === "undefined") {
+        reply.status(401);
+        return;
+    }
+
+    const accessToken = request.headers.authorization.substring(7);
+    if (!(await isUserAuthed(fastify.prisma, accessToken))) {
+        reply.status(401);
+        return;
+    }
+
+    if (!(await userCanAccessPrivateCategoryEndpoints(fastify.prisma, accessToken))) {
+        reply.status(403);
+        return;
+    }
+
+    const categoryIdInfo = await fastify.prisma.Category.findFirst({
+        select: {
+            category_name: true
+        },
+        where: {
+            category_id: request.params.id
+        }
+    });
+    if (categoryIdInfo === null) {
+        reply.status(404);
+        return;
+    }
+
+    await fastify.prisma.Category.delete({
+        where: {
+            category_id: request.params.id
+        }
+    });
+}

package/rest-api/routes/SchoolFunctions.js

@@ -0,0 +1,51 @@
+export async function listSchoolsHandler(request, reply, fastify) {
+    const schools = await fastify.prisma.school.findMany({
+        select: {
+            school_id: true,
+            school_name: true,
+            school_name_shorthand: true,
+            _count: {
+                select: {
+                    users: true
+                },
+            },
+        }
+    });
+
+    return schools.map(school => ({
+        schoolId: school.school_id,
+        schoolName: school.school_name,
+        schoolNameShorthand: school.school_name_shorthand,
+        userCount: school._count.users
+    }));
+}
+
+export async function getSchoolByIdHandler(request, reply, fastify) {
+    const school = await fastify.prisma.school.findFirst({
+        select: {
+            school_id: true,
+            school_name: true,
+            school_name_shorthand: true,
+            _count: {
+                select: {
+                    users: true
+                },
+            },
+        },
+        where: {
+            school_id: request.params.id
+        }
+    });
+
+    if (school === null) {
+        reply.status(404);
+        return;
+    }
+
+    return {
+        schoolId: school.school_id,
+        schoolName: school.school_name,
+        schoolNameShorthand: school.school_name_shorthand,
+        userCount: school._count.users
+    };
+}

package/rest-api/routes/UserFunctions.js

@@ -0,0 +1,245 @@
+import { hash as passwordHash, verify as verifyPassword } from "@node-rs/argon2";
+import { randomBytes } from "node:crypto";
+
+async function getUserProfile(prisma, userId = null, accessToken = null) {
+    return await prisma.users.findFirst({
+        include: {
+            school: true
+        },
+        // TODO: optimize this section to minimize data transfer
+        // Ex: we don't need to select *all* of the school info
+        // and *all* of the user info
+        // but Prisma ORM doesn't currently allow both `select` and `include` at the same time
+
+        // select: {
+        //     user_id: true,
+        //     username: true,
+        //     first_name: true,
+        //     last_name: true,
+        //     email: true,
+        //     school_id: true,
+        //     school_name: true
+        // },
+        where: {
+            access_token: accessToken !== null ? accessToken : undefined,
+            user_id: userId !== null ? userId : undefined,
+            is_soft_deleted: false
+        }
+    });
+}
+
+export async function loginHandler(request, reply, fastify) {
+    const { username, password } = request.body;
+
+    const user = await fastify.prisma.users.findFirst({
+        select: {
+            password: true,
+            access_token: true
+        },
+        where: {
+            username: username
+        }
+    });
+
+    if (user == null) {
+        reply.status(400).send();
+        return;
+    }
+
+    if (!(await verifyPassword(user.password, password))) {
+        reply.status(400).send();
+        return;
+    }
+
+    return {
+        accessToken: user.access_token
+    };
+}
+
+export async function signupHandler(request, reply, fastify) {
+    const { firstName, lastName, school: schoolString, username, email, password } = request.body;
+
+    const schoolIdFromString = await fastify.prisma.school.findFirst({
+        select: {
+            school_id: true
+        },
+        where: {
+            school_name: schoolString
+        }
+    });
+
+    if (schoolIdFromString === null) {
+        reply.status(400).send();
+        return;
+    }
+
+    const user = await fastify.prisma.users.create({
+        data: {
+            username,
+            email,
+            password: await passwordHash(password),
+            first_name: firstName,
+            last_name: lastName,
+            school_id: schoolIdFromString.school_id,
+            access_token: randomBytes(64).toString("hex")
+        }
+    });
+
+    return {
+        accessToken: user.access_token
+    };
+}
+
+export async function getCurrentUserHandler(request, reply, fastify) {
+    if (typeof request.headers.authorization !== "string") {
+        reply.status(401);
+        return;
+    }
+
+    const accessToken = request.headers.authorization.substring(7); // raw Authorization header to just the token part
+    const user = await getUserProfile(fastify.prisma, null, accessToken);
+
+    if (user === null) {
+        reply.status(401);
+        return;
+    }
+
+    return {
+        userId: user.user_id,
+        firstName: user.first_name,
+        lastName: user.last_name,
+        schoolId: user.school_id,
+        email: user.email,
+        username: user.username,
+        schoolName: user.school.school_name
+    };
+}
+
+export async function getUserByIdHandler(request, reply, fastify) {
+    const userId = request.params.id;
+    if (typeof userId !== "number") {
+        reply.status(404);
+        return;
+    }
+
+    const user = await getUserProfile(fastify.prisma, userId, null);
+    if (user === null) {
+        reply.status(404);
+        return;
+    }
+
+    return {
+        userId: user.user_id,
+        firstName: user.first_name,
+        lastName: user.last_name,
+        schoolId: user.school_id,
+        email: user.email,
+        username: user.username,
+        schoolName: user.school.school_name
+    };
+}
+
+export async function updateUserHandler(request, reply, fastify) {
+    if (typeof request.params.id !== "number") {
+        reply.status(404);
+        return;
+    }
+
+    if (typeof request.headers.authorization !== "string") {
+        reply.status(401);
+        return;
+    }
+
+    // check for empty body
+    // empty body means there's nothing to update
+    if (Object.keys(request.body).length === 0) {
+        reply.status(400);
+        return;
+    }
+
+    const userInfo = await fastify.prisma.users.findFirst({
+        include: {
+            school: true
+        },
+        where: {
+            access_token: request.headers.authorization.substring(7)
+        }
+    });
+
+    if (userInfo === null) {
+        reply.status(401);
+        return;
+    }
+
+    if (userInfo.user_id != request.params.id) {
+        reply.status(404);
+        return;
+    }
+
+    const targetUsername = request.body.username ?? userInfo.username;
+    const targetFirstName = request.body.firstName ?? userInfo.first_name;
+    const targetLastName = request.body.lastName ?? userInfo.last_name;
+
+    await fastify.prisma.users.update({
+        data: {
+            username: targetUsername,
+            first_name: targetFirstName,
+            last_name: targetLastName
+        },
+        where: {
+            user_id: userInfo.user_id
+        }
+    });
+
+    return {
+        userId: userInfo.user_id,
+        username: targetUsername,
+        firstName: targetFirstName,
+        lastName: targetLastName,
+        email: userInfo.email,
+        schoolId: userInfo.school_id,
+        schoolName: userInfo.school.school_name
+    };
+}
+
+export async function deleteUserHandler(request, reply, fastify) {
+    if (typeof request.params.id !== "number") {
+        reply.status(404);
+        return;
+    }
+
+    if (typeof request.headers.authorization !== "string") {
+        reply.status(401);
+        return;
+    }
+
+    const userInfo = await fastify.prisma.users.findFirst({
+        select: {
+            user_id: true,
+        },
+        where: {
+            access_token: request.headers.authorization.substring(7)
+        }
+    });
+
+    if (userInfo === null) {
+        reply.status(401);
+        return;
+    }
+
+    if (userInfo.user_id != request.params.id) {
+        reply.status(404);
+        return;
+    }
+
+    await fastify.prisma.users.update({
+        data: {
+            is_soft_deleted: true
+        },
+        where: {
+            user_id: userInfo.user_id
+        }
+    });
+
+    return;
+}

package/rest-api/tsconfig.json

@@ -0,0 +1,34 @@
+{
+  "compilerOptions": {
+    "module": "nodenext",
+    "target": "ES2023",
+    "types": [
+      "node"
+    ],
+    "moduleResolution": "NodeNext",
+    // For nodejs:
+    "lib": [
+      "esnext"
+    ],
+    "sourceMap": true,
+    "declaration": true,
+    "declarationMap": true,
+    // Stricter Typechecking Options
+    "noUncheckedIndexedAccess": true,
+    "exactOptionalPropertyTypes": true,
+    // Recommended Options
+    "strict": true,
+    "jsx": "react-jsx",
+    "verbatimModuleSyntax": true,
+    "isolatedModules": true,
+    "noUncheckedSideEffectImports": true,
+    "moduleDetection": "force",
+    "skipLibCheck": true,
+  },
+  "exclude": [
+    "node_modules",
+    "cypress",
+    "./cypress.config.ts",
+    "./prisma.config.ts"
+  ]
+}

package/src/core.ts

@@ -0,0 +1,13 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { ClientSDK } from "./lib/sdks.js";
+
+/**
+ * A minimal client to use when calling standalone SDK functions. Typically, an
+ * instance of this class would be instantiated once at the start of an
+ * application and passed around through some dependency injection mechanism  to
+ * parts of an application that need to make SDK calls.
+ */
+export class SenseiProductivityCore extends ClientSDK {}