@boopkit/cap-users 0.1.0

package/scaffold/src/middleware/auth.ts

@@ -0,0 +1,28 @@
+/** @boopkit/cap-users Auth middleware — session resolution + trust checking. */
+
+import type { Express } from 'express';
+import { createAuthMiddleware } from '@boopkit/cap-users';
+
+// Import user services — adjust path if your service wiring is elsewhere
+import UserService from '../services/users.service';
+
+const { authService, identityService, userService } = UserService;
+
+const { ensureVisitor, addAuthContext, requireAuth } = createAuthMiddleware(
+  { authService, identityService, userService },
+  {
+    cookieName: 'auth_id',
+    loginPath: '/login',
+  },
+);
+
+/**
+ * Wire auth middleware into the Express app.
+ * Call at preRoutes order 15 (after requestId, before routes).
+ */
+export function setupAuth(app: Express): void {
+  app.use(ensureVisitor);
+  app.use(addAuthContext);
+}
+
+export { ensureVisitor, addAuthContext, requireAuth };

package/scaffold/src/routes/auth.ts

@@ -0,0 +1,20 @@
+/** @boopkit/cap-users — Auth routes: signup, login, logout, forget-device. */
+
+import { Router } from 'express';
+import { createAuthController, type AuthControllerDeps } from '../controllers/auth';
+
+export default function authRoutes(deps: AuthControllerDeps): Router {
+  const auth = createAuthController(deps);
+  const router = Router();
+
+  router.get('/signup', auth.showSignup);
+  router.post('/signup', auth.handleSignup);
+
+  router.get('/login', auth.showLogin);
+  router.post('/login', auth.handleLogin);
+
+  router.get('/logout', auth.handleLogout);
+  router.get('/logout/forget', auth.handleForgetDevice);
+
+  return router;
+}

package/scaffold/src/services/accounts.service.ts

@@ -0,0 +1,53 @@
+/** @boopkit/cap-users — Account service wiring. */
+
+import db from '../db';
+import {
+  createAccountService,
+  createAccountPropertyService,
+  createAccountManagementService,
+  createTeamInvitationService,
+} from '@boopkit/cap-users';
+import type { BaseAccountInfo } from '@boopkit/cap-users';
+import UserService from './users.service';
+
+/**
+ * Create typed account service instances wired to Prisma models.
+ *
+ * To extend with project-specific account fields, define your own interface:
+ *
+ *   interface MyAccountInfo extends BaseAccountInfo {
+ *     plan: 'free' | 'pro' | 'enterprise';
+ *   }
+ *
+ * Then replace `BaseAccountInfo` below with `MyAccountInfo`.
+ */
+const accountService = createAccountService<BaseAccountInfo>(db.account, db.accountUser);
+const accountPropertyService = createAccountPropertyService(db.accountProperty);
+
+const accountManagementService = createAccountManagementService({
+  accountService,
+  userService: UserService.userService,
+  accountPropertyService,
+  identityService: UserService.identityService,
+});
+
+const teamInvitationService = createTeamInvitationService(
+  {
+    accountPropertyService,
+    accountService,
+    identityService: UserService.identityService,
+  },
+  {
+    invitationTtl: parseInt(process.env.INVITATION_TTL ?? String(7 * 24 * 60 * 60 * 1000), 10),
+  },
+);
+
+const AccountService = {
+  name: 'accounts' as const,
+  accountService,
+  accountPropertyService,
+  accountManagementService,
+  teamInvitationService,
+};
+
+export default AccountService;

package/scaffold/src/services/users.service.ts

@@ -0,0 +1,46 @@
+/** @boopkit/cap-users — User service wiring. */
+
+import db from '../db';
+import {
+  createUserService,
+  createIdentityService,
+  createUserPropertyService,
+  createAuthService,
+} from '@boopkit/cap-users';
+import type { BaseUserInfo } from '@boopkit/cap-users';
+
+/**
+ * Create typed service instances wired to Prisma models.
+ *
+ * To extend with project-specific user fields, define your own interface:
+ *
+ *   interface MyUserInfo extends BaseUserInfo {
+ *     department: string;
+ *     role: 'admin' | 'member';
+ *   }
+ *
+ * Then replace `BaseUserInfo` below with `MyUserInfo`.
+ */
+const userService = createUserService<BaseUserInfo>(db.user);
+const identityService = createIdentityService(db.userIdentity);
+const userPropertyService = createUserPropertyService(db.userProperty);
+
+const authService = createAuthService(
+  { userService, identityService, userPropertyService },
+  {
+    defaultSessionDuration: parseInt(process.env.SESSION_DURATION ?? '604800', 10),
+    hashRounds: 10,
+    // onSignup: async (result) => { /* log event, enqueue welcome job, etc. */ },
+    // onLogin: async (result) => { /* log event, update last-login, etc. */ },
+  },
+);
+
+const UserService = {
+  name: 'users' as const,
+  userService,
+  identityService,
+  userPropertyService,
+  authService,
+};
+
+export default UserService;

package/scaffold/styles/auth.css

@@ -0,0 +1,120 @@
+/* @boopkit/cap-users — Semantic styles for auth forms and navigation. */
+
+.auth-nav {
+  @apply flex w-full items-center justify-end gap-4 px-4 py-2 text-sm;
+}
+
+.auth-user {
+  @apply flex items-center gap-2;
+}
+
+.auth-avatar {
+  @apply flex h-7 w-7 items-center justify-center rounded-full text-xs font-semibold text-white;
+  background-color: var(--color-brand-600);
+}
+
+.auth-greeting {
+  @apply font-medium text-gray-800;
+}
+
+.auth-greeting--recognized {
+  @apply font-normal text-gray-600;
+}
+
+.auth-actions {
+  @apply flex items-center gap-3;
+}
+
+.auth-actions--logged-in a {
+  @apply text-gray-500 hover:text-gray-700 transition-colors;
+}
+
+.auth-link-muted {
+  @apply text-gray-400 hover:text-gray-500;
+}
+
+.auth-btn {
+  @apply rounded-md border border-gray-300 px-3 py-1.5 font-medium text-gray-700
+         transition-colors hover:bg-gray-50;
+}
+
+.auth-btn--primary {
+  border-color: var(--color-brand-600);
+  background-color: var(--color-brand-600);
+  @apply text-white hover:opacity-90;
+}
+
+.auth-btn--primary:hover {
+  background-color: var(--color-brand-700);
+  border-color: var(--color-brand-700);
+}
+
+/* Auth page layout */
+.auth-page {
+  @apply flex flex-1 items-center justify-center px-4 py-12;
+}
+
+.auth-card {
+  @apply w-full max-w-sm rounded-xl bg-white p-8 shadow-md;
+}
+
+.auth-header {
+  @apply mb-6 text-center;
+}
+
+.auth-title {
+  @apply text-2xl font-semibold text-gray-900;
+}
+
+.auth-subtitle {
+  @apply mt-1 text-sm text-gray-500;
+}
+
+/* Messages */
+.auth-messages {
+  @apply mb-4;
+}
+
+.auth-error {
+  @apply rounded-md bg-red-50 px-3 py-2 text-sm text-red-700;
+}
+
+/* Form */
+.auth-form {
+  @apply flex flex-col gap-3;
+}
+
+.auth-input {
+  @apply w-full rounded-lg border border-gray-300 px-3 py-2 text-sm
+         placeholder-gray-400 focus:outline-none focus:ring-1;
+  &:focus {
+    border-color: var(--color-brand-500);
+    --tw-ring-color: var(--color-brand-500);
+  }
+}
+
+.auth-submit {
+  @apply mt-2 w-full rounded-lg px-4 py-2 text-sm font-medium text-white
+         focus:outline-none focus:ring-2 focus:ring-offset-2;
+  background-color: var(--color-brand-600);
+  &:hover {
+    background-color: var(--color-brand-700);
+  }
+  &:focus {
+    --tw-ring-color: var(--color-brand-500);
+  }
+}
+
+.auth-alt {
+  @apply mt-4 text-center text-sm text-gray-500;
+}
+
+.auth-alt a {
+  color: var(--color-brand-600);
+  @apply hover:underline;
+}
+
+/* Validation errors (signup) */
+.auth-field-error {
+  @apply text-xs text-red-600;
+}

package/scaffold/views/login.hbs

@@ -0,0 +1,28 @@
+{{!-- @boopkit/cap-users — Login form. Local password auth only (OAuth deferred). --}}
+<div class="auth-page">
+  <section class="auth-card">
+    <div class="auth-header">
+      <h1 class="auth-title">Log In</h1>
+      <p class="auth-subtitle">Welcome back</p>
+    </div>
+
+    {{#if errorMessage}}
+    <div class="auth-messages">
+      <div class="auth-error">{{errorMessage}}</div>
+    </div>
+    {{/if}}
+
+    <form class="auth-form" method="POST" action="{{action}}">
+      <input class="auth-input" type="email" name="email" placeholder="Email" autofocus value="{{email}}" required />
+      <input class="auth-input" type="password" name="password" placeholder="Password" required />
+      {{#if next}}
+      <input type="hidden" name="next" value="{{next}}" />
+      {{/if}}
+      <button class="auth-submit" type="submit">Log In</button>
+    </form>
+
+    <div class="auth-alt">
+      Don't have an account? <a href="/signup{{#if next}}?next={{next}}{{/if}}">Sign up</a>
+    </div>
+  </section>
+</div>

package/scaffold/views/partials/auth-nav.hbs

@@ -0,0 +1,32 @@
+{{!-- @boopkit/cap-users — Auth-aware navigation partial.
+     Uses res.locals.auth from addAuthContext middleware.
+     Trust tiers: null (unknown), 'recognized', 'authenticated', 'verified'. --}}
+<nav class="auth-nav">
+  {{#if (eq auth.trustTier "authenticated")}}
+  <div class="auth-user">
+    <span class="auth-avatar">{{auth.userInitial}}</span>
+    <span class="auth-greeting">{{#if auth.userName}}{{auth.userName}}{{else}}{{auth.userEmail}}{{/if}}</span>
+  </div>
+  <span class="auth-actions auth-actions--logged-in">
+    <a href="/logout">Log Out</a>
+  </span>
+  {{else if (eq auth.trustTier "verified")}}
+  <div class="auth-user">
+    <span class="auth-avatar">{{auth.userInitial}}</span>
+    <span class="auth-greeting">{{#if auth.userName}}{{auth.userName}}{{else}}{{auth.userEmail}}{{/if}}</span>
+  </div>
+  <span class="auth-actions auth-actions--logged-in">
+    <a href="/logout">Log Out</a>
+  </span>
+  {{else if (eq auth.trustTier "recognized")}}
+  <span class="auth-greeting auth-greeting--recognized">Welcome back{{#if auth.userName}}, {{auth.userName}}{{/if}}</span>
+  <span class="auth-actions">
+    <a href="/login" class="auth-btn">Log In</a>
+  </span>
+  {{else}}
+  <span class="auth-actions">
+    <a href="/signup" class="auth-btn auth-btn--primary">Sign Up</a>
+    <a href="/login" class="auth-btn">Log In</a>
+  </span>
+  {{/if}}
+</nav>

package/scaffold/views/signup.hbs

@@ -0,0 +1,29 @@
+{{!-- @boopkit/cap-users — Signup form. Local password auth only (OAuth deferred). --}}
+<div class="auth-page">
+  <section class="auth-card">
+    <div class="auth-header">
+      <h1 class="auth-title">Sign Up</h1>
+      <p class="auth-subtitle">Create your account</p>
+    </div>
+
+    {{#if errorMessage}}
+    <div class="auth-messages">
+      <div class="auth-error">{{errorMessage}}</div>
+    </div>
+    {{/if}}
+
+    <form class="auth-form" method="POST" action="{{action}}">
+      <input class="auth-input" type="email" name="email" placeholder="Email" autofocus value="{{email}}" required />
+      <input class="auth-input" type="password" name="password" placeholder="Password" required />
+      <input class="auth-input" type="password" name="passwordConfirmation" placeholder="Confirm password" required />
+      {{#if next}}
+      <input type="hidden" name="next" value="{{next}}" />
+      {{/if}}
+      <button class="auth-submit" type="submit">Sign Up</button>
+    </form>
+
+    <div class="auth-alt">
+      Already have an account? <a href="/login{{#if next}}?next={{next}}{{/if}}">Log in</a>
+    </div>
+  </section>
+</div>