@ciscode/authentication-kit 1.0.43 → 1.1.1

package/src/models/user.model.js

@@ -1,51 +0,0 @@
-const mongoose = require('mongoose');
-const mongoosePaginate = require('mongoose-paginate-v2');
-
-const UserSchema = new mongoose.Schema({
-  email: {
-    type: String,
-    unique: true,
-    required: true
-  },
-  // Hashed password; may be empty for social/OAuth accounts.
-  password: {
-    type: String,
-    required: function () {
-      // Require a password ONLY if no social provider
-      return !this.microsoftId && !this.googleId && !this.facebookId;
-    }
-  },
-  name: { type: String },
-
-  // IMPORTANT: still required for staff
-  tenantId: { type: String, required: true },
-
-  // Social providers (all optional)
-  microsoftId: { type: String, index: true },
-  googleId: { type: String, index: true },
-  facebookId: { type: String, index: true },
-
-  // Roles: array of Role ObjectIds
-  roles: [{ type: mongoose.Schema.Types.ObjectId, ref: 'Role' }],
-
-  // Password reset
-  resetPasswordToken: { type: String },
-  resetPasswordExpires: { type: Date },
-
-  status: {
-    type: String,
-    enum: ['pending', 'active', 'suspended', 'deactivated'],
-    default: 'pending'
-  },
-
-  // Refresh token storage
-  refreshToken: { type: String },
-
-  // ─── Lockout fields ────────────────────────────────────────
-  failedLoginAttempts: { type: Number, default: 0 },
-  lockUntil: { type: Date }
-}, { timestamps: true });
-
-UserSchema.plugin(mongoosePaginate);
-
-module.exports = mongoose.model('User', UserSchema);

package/src/routes/admin.routes.js

@@ -1,8 +0,0 @@
-const express = require('express');
-const router = express.Router();
-const { suspendUser } = require('../controllers/roles.controller');
-
-// Example: PUT /api/admin/users/:id/suspend
-router.put('/:id/suspend', suspendUser);
-
-module.exports = router;

package/src/routes/auth.routes.js

@@ -1,77 +0,0 @@
-const express = require('express');
-const router = express.Router();
-
-const auth = require('../controllers/auth.controller');
-const passwordReset = require('../controllers/passwordReset.controller');
-
-/* ────────────────────────────────────────────────────────────────────────────
- * Client registration & login (client credentials)
- * ────────────────────────────────────────────────────────────────────────── */
-router.post('/clients/register', auth.registerClient);
-router.post('/clients/login',    auth.clientLogin);
-
-/* ────────────────────────────────────────────────────────────────────────────
- * User login (local credentials)
- * ────────────────────────────────────────────────────────────────────────── */
-router.post('/login', auth.localLogin);
-
-/* ────────────────────────────────────────────────────────────────────────────
- * Microsoft OAuth (Users)
- * ────────────────────────────────────────────────────────────────────────── */
-router.get('/microsoft',          auth.microsoftLogin);
-router.get('/microsoft/callback', auth.microsoftCallback);
-
-/* ────────────────────────────────────────────────────────────────────────────
- * Microsoft OAuth (Clients)
- * ────────────────────────────────────────────────────────────────────────── */
-router.get('/client/microsoft',          auth.microsoftClientLogin);
-router.get('/client/microsoft/callback', auth.microsoftClientCallback);
-
-/* ────────────────────────────────────────────────────────────────────────────
- * Microsoft ID token → local JWTs (MSAL mobile token exchange)
- * ────────────────────────────────────────────────────────────────────────── */
-router.post('/microsoft/exchange', auth.microsoftExchange);
-
-/* ────────────────────────────────────────────────────────────────────────────
- * Google OAuth (Users)
- * ────────────────────────────────────────────────────────────────────────── */
-router.get('/google',          auth.googleUserLogin);
-router.get('/google/callback', auth.googleUserCallback);
-
-/* ────────────────────────────────────────────────────────────────────────────
- * Google OAuth (Clients)
- * ────────────────────────────────────────────────────────────────────────── */
-router.get('/client/google',          auth.googleClientLogin);
-router.get('/client/google/callback', auth.googleClientCallback);
-
-/* ────────────────────────────────────────────────────────────────────────────
- * Google token exchange (mobile-friendly)
- * Body: { code: "<serverAuthCode>", type: "user"|"client" } 
- *    or { idToken: "<google id_token>", type: "user"|"client" }
- * ────────────────────────────────────────────────────────────────────────── */
-router.post('/google/exchange', auth.googleExchange);
-
-/* ────────────────────────────────────────────────────────────────────────────
- * Facebook OAuth (Users)
- * ────────────────────────────────────────────────────────────────────────── */
-router.get('/facebook',          auth.facebookUserLogin);
-router.get('/facebook/callback', auth.facebookUserCallback);
-
-/* ────────────────────────────────────────────────────────────────────────────
- * Facebook OAuth (Clients)
- * ────────────────────────────────────────────────────────────────────────── */
-router.get('/client/facebook',          auth.facebookClientLogin);
-router.get('/client/facebook/callback', auth.facebookClientCallback);
-
-/* ────────────────────────────────────────────────────────────────────────────
- * Password reset (Users & Clients) — body must include { type: "user"|"client" }
- * ────────────────────────────────────────────────────────────────────────── */
-router.post('/request-password-reset', passwordReset.requestPasswordReset);
-router.post('/reset-password',         passwordReset.resetPassword);
-
-/* ────────────────────────────────────────────────────────────────────────────
- * Refresh token → new access token (works for User or Client)
- * ────────────────────────────────────────────────────────────────────────── */
-router.post('/refresh-token', auth.refreshToken);
-
-module.exports = router;

package/src/routes/passwordReset.routes.js

@@ -1,8 +0,0 @@
-const express = require('express');
-const router = express.Router();
-const passwordResetController = require('../controllers/passwordReset.controller');
-
-router.post('/forgot-password', passwordResetController.requestPasswordReset);
-router.post('/reset-password', passwordResetController.resetPassword);
-
-module.exports = router;

package/src/routes/permission.routes.js

@@ -1,17 +0,0 @@
-const express = require('express');
-const router = express.Router();
-const permissionController = require('../controllers/permission.controller');
-
-// Create a new permission
-router.post('/add-permission', permissionController.createPermission);
-
-// Retrieve a list of permissions (with pagination)
-router.get('/get-permission', permissionController.getPermissions);
-
-// Update an existing permission by its ID
-router.put('/update-permission/:id', permissionController.updatePermission);
-
-// Delete a permission by its ID
-router.delete('/delete-permission:id', permissionController.deletePermission);
-
-module.exports = router;

package/src/routes/roles.routes.js

@@ -1,11 +0,0 @@
-const express = require('express');
-const router = express.Router();
-const rolesController = require('../controllers/roles.controller');
-
-// These endpoints should be protected and accessible only by a superadmin
-router.post('/', rolesController.createRole);
-router.get('/:tenantId', rolesController.getRoles);
-router.put('/:id', rolesController.updateRole);
-router.delete('/:id', rolesController.deleteRole);
-
-module.exports = router;

package/src/routes/user.routes.js

@@ -1,22 +0,0 @@
-// src/routes/user.routes.js
-
-const express = require('express');
-const router = express.Router();
-const userController = require('../controllers/user.controller');
-
-// Fetch all users (optionally filtered via query params)
-router.get('/', userController.getAllUsers);
-
-// Create a new user (with immediate password or MSFT ID)
-router.post('/', userController.createUser);
-
-// Update an existing user
-router.put('/:id', userController.updateUser);
-
-// Delete a user by ID
-router.delete('/:id', userController.deleteUser);
-
-// Send an invitation email (no password yet)
-router.post('/invite', userController.createUserInvitation);
-
-module.exports = router;

package/src/utils/helper.js

@@ -1,26 +0,0 @@
-// src/utils/helper.js
-
-/**
- * Converts an expiry string into milliseconds.
- * 
- * Supported formats:
- *   - "15m" → 15 minutes
- *   - "2h"  → 2 hours
- *   - "1d"  → 1 day
- *   - "30s" → 30 seconds
- */
-function getMillisecondsFromExpiry(expiry) {
-    const unit  = expiry.slice(-1).toLowerCase();
-    const value = parseInt(expiry.slice(0, -1), 10);
-  
-    switch (unit) {
-      case 's': return value * 1000;
-      case 'm': return value * 60 * 1000;
-      case 'h': return value * 60 * 60 * 1000;
-      case 'd': return value * 24 * 60 * 60 * 1000;
-      default:  return 0;
-    }
-  }
-  
-  module.exports = { getMillisecondsFromExpiry };
-