@erwininteractive/mvc 0.4.2 → 0.5.1

package/README.md

@@ -279,6 +279,24 @@ app.get("/protected", authenticate, (req, res) => {
 });
 ```
 
+### Auto-Inject User to Views
+
+When a user is authenticated, their information is automatically available in all EJS templates via `res.locals.user`:
+
+```typescript
+// In any EJS template
+<% if (user) { %>
+  <p>Welcome, <%= user.email %></p>
+<% } else { %>
+  <a href="/auth/login">Login</a>
+<% } %>
+```
+
+The middleware automatically:
+- Extracts JWT from `req.cookies.token` or `Authorization` header
+- Verifies the token using `JWT_SECRET`
+- Sets `req.user` and `res.locals.user` for use in views
+
 ---
 
 ### WebAuthn (Passkeys)

package/dist/framework/App.js

@@ -12,6 +12,7 @@ const redis_1 = require("redis");
 const connect_redis_1 = __importDefault(require("connect-redis"));
 const helmet_1 = __importDefault(require("helmet"));
 const cors_1 = __importDefault(require("cors"));
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
 const dotenv_1 = __importDefault(require("dotenv"));
 const path_1 = __importDefault(require("path"));
 // Load environment variables
@@ -74,6 +75,21 @@ async function createMvcApp(options = {}) {
     // View engine
     app.set("view engine", "ejs");
     app.set("views", path_1.default.resolve(viewsPath));
+    // Auto-inject authenticated user into views via res.locals
+    app.use((req, res, next) => {
+        try {
+            const token = req.cookies?.token || req.headers.authorization?.split(" ")[1];
+            if (token) {
+                const decoded = jsonwebtoken_1.default.verify(token, process.env.JWT_SECRET);
+                req.user = decoded;
+                res.locals.user = decoded;
+            }
+        }
+        catch {
+            // Token invalid or expired
+        }
+        next();
+    });
     // Add respond helper to response
     app.use((req, res, next) => {
         res.respond = function (viewName, data) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erwininteractive/mvc",
-  "version": "0.4.2",
+  "version": "0.5.1",
   "description": "A lightweight, full-featured MVC framework for Node.js with Express, Prisma, and EJS",
   "main": "dist/framework/index.js",
   "types": "dist/framework/index.d.ts",

package/templates/appScaffold/README.md

@@ -76,6 +76,8 @@ Create `.ejs` files in `src/views/`. EJS lets you use JavaScript in your HTML:
 <%- include('partials/header') %>
 ```
 
+**Note:** When using authentication, the `user` object is automatically available in all views when a user is logged in. No need to pass it manually!
+
 ### Adding Routes
 
 Edit `src/server.ts` to add routes:

package/templates/appScaffold/package.json

@@ -12,9 +12,11 @@
     "db:push": "prisma db push"
   },
   "dependencies": {
-    "@erwininteractive/mvc": "^1.0.0"
+    "@erwininteractive/mvc": "^0.4.0",
+    "cookie-parser": "^1.4.6"
   },
   "devDependencies": {
+    "@types/cookie-parser": "^1.4.7",
     "@types/express": "^5.0.0",
     "@types/node": "^22.7.5",
     "tsx": "^4.19.1",

package/templates/appScaffold/src/server.ts

@@ -1,4 +1,5 @@
 import { createMvcApp, startServer } from "@erwininteractive/mvc";
+import cookieParser from "cookie-parser";
 
 async function main() {
   const { app } = await createMvcApp({
@@ -6,8 +7,11 @@ async function main() {
     publicPath: "public",
   });
 
+  // Parse cookies (needed for JWT authentication)
+  app.use(cookieParser());
+
   // Root route - displays welcome page
-  app.get("/", (req, res) => {
+  app.get("/", (req: any, res: any) => {
     res.render("index", { title: "Welcome" });
   });