@helpio/common 1.0.3 → 1.0.5

package/build/events/types/city-events.d.ts

@@ -0,0 +1,36 @@
+/**
+ * City (geo-config) Event Types
+ * Shape matches what services currently publish/consume.
+ */
+export declare type CityCenter = {
+    lat: number;
+    lng: number;
+};
+export interface CityCreatedEvent {
+    id: string;
+    name: string;
+    countryId: string;
+    countryCode?: string;
+    slug?: string;
+    center?: CityCenter;
+    radiusKm?: number;
+    timezone?: string;
+    isLive: boolean;
+    tags?: string[];
+}
+export interface CityUpdatedEvent {
+    id: string;
+    name: string;
+    countryId: string;
+    countryCode?: string;
+    slug?: string;
+    center?: CityCenter;
+    radiusKm?: number;
+    timezone?: string;
+    isLive: boolean;
+    tags?: string[];
+}
+export interface CityStatusChangedEvent {
+    id: string;
+    isLive: boolean;
+}

package/build/events/types/city-events.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * City (geo-config) Event Types
+ * Shape matches what services currently publish/consume.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/types/index.d.ts

@@ -1,11 +1,22 @@
 import { UserCreatedEvent, UserUpdatedEvent } from "./user-events";
 import { CountryCreatedEvent, CountryStatusChangedEvent, CountryUpdatedEvent } from "./country-events";
+import { CityCreatedEvent, CityStatusChangedEvent, CityUpdatedEvent } from "./city-events";
+import { KycDocumentDeletedEvent, KycDocumentRejectedEvent, KycDocumentUploadedEvent, KycDocumentVerifiedEvent } from "./kyc-document-events";
 export interface EventMap {
     "user.created": UserCreatedEvent;
     "user.updated": UserUpdatedEvent;
     "country.created": CountryCreatedEvent;
     "country.updated": CountryUpdatedEvent;
     "country.status.changed": CountryStatusChangedEvent;
+    "city.created": CityCreatedEvent;
+    "city.updated": CityUpdatedEvent;
+    "city.status.changed": CityStatusChangedEvent;
+    "kyc.document.uploaded": KycDocumentUploadedEvent;
+    "kyc.document.verified": KycDocumentVerifiedEvent;
+    "kyc.document.rejected": KycDocumentRejectedEvent;
+    "kyc.document.deleted": KycDocumentDeletedEvent;
 }
 export * from "./user-events";
 export * from "./country-events";
+export * from "./city-events";
+export * from "./kyc-document-events";

package/build/events/types/index.js

@@ -13,3 +13,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 // Export all event types
 __exportStar(require("./user-events"), exports);
 __exportStar(require("./country-events"), exports);
+__exportStar(require("./city-events"), exports);
+__exportStar(require("./kyc-document-events"), exports);

package/build/events/types/kyc-document-events.d.ts

@@ -0,0 +1,56 @@
+/**
+ * KYC Document Event Types
+ * Published by kyc-doc-management-service.
+ */
+export declare type KycDocumentStatus = "pending" | "verified" | "rejected" | "expired";
+export declare type KycDocumentType = "national_id" | "passport" | "drivers_license" | "police_clearance" | "certificate" | "proof_of_address" | "selfie" | "other";
+export interface KycDocumentUploadedEvent {
+    id: string;
+    userId: string;
+    userAccountNumber: number;
+    documentType: KycDocumentType | string;
+    documentNumber?: string;
+    fileUrl: string;
+    fileName: string;
+    fileSize: number;
+    mimeType: string;
+    issueDate?: Date;
+    expiryDate?: Date;
+    issuingCountry?: string;
+    issuingAuthority?: string;
+    status: KycDocumentStatus;
+    ipAddress?: string;
+    userAgent?: string;
+    createdAt: Date;
+}
+export interface KycDocumentVerifiedEvent {
+    id: string;
+    userId: string;
+    userAccountNumber: number;
+    documentType: KycDocumentType | string;
+    documentNumber?: string;
+    status: "verified";
+    verifiedAt: Date;
+    verifiedBy: string;
+    adminNotes?: string;
+}
+export interface KycDocumentRejectedEvent {
+    id: string;
+    userId: string;
+    userAccountNumber: number;
+    documentType: KycDocumentType | string;
+    documentNumber?: string;
+    status: "rejected";
+    rejectionReason: string;
+    rejectedAt: Date;
+    rejectedBy: string;
+    adminNotes?: string;
+}
+export interface KycDocumentDeletedEvent {
+    id: string;
+    userId: string;
+    userAccountNumber: number;
+    documentType: KycDocumentType | string;
+    fileUrl: string;
+    deletedAt: Date;
+}

package/build/events/types/kyc-document-events.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * KYC Document Event Types
+ * Published by kyc-doc-management-service.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/middlewares/current-user.js

@@ -5,14 +5,35 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.currentUser = void 0;
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const getJwtSecret = () => {
+    return process.env.JWT_SECRET || process.env.JWT_KEY;
+};
+const extractAccessToken = (req) => {
+    var _a, _b;
+    const authHeader = req.headers.authorization;
+    const bearer = typeof authHeader === "string" && authHeader.startsWith("Bearer ")
+        ? authHeader.substring(7)
+        : undefined;
+    const cookieToken = (_a = req.cookies) === null || _a === void 0 ? void 0 : _a.accessToken;
+    const legacySessionToken = (_b = req.session) === null || _b === void 0 ? void 0 : _b.jwt;
+    const token = bearer || cookieToken || legacySessionToken;
+    return typeof token === "string" && token.trim() ? token.trim() : undefined;
+};
+const attachPayload = (req, payload) => {
+    req.currentUser = payload;
+    req.userId = payload.userId || payload.id;
+    req.sessionId = payload.sessionId;
+};
 const currentUser = (req, res, next) => {
-    var _a;
-    if (!((_a = req.session) === null || _a === void 0 ? void 0 : _a.jwt)) {
+    const token = extractAccessToken(req);
+    if (!token)
+        return next();
+    const secret = getJwtSecret();
+    if (!secret)
         return next();
-    }
     try {
-        const payload = jsonwebtoken_1.default.verify(req.session.jwt, process.env.JWT_KEY);
-        req.currentUser = payload;
+        const payload = jsonwebtoken_1.default.verify(token, secret);
+        attachPayload(req, payload);
     }
     catch (err) { }
     next();

package/build/middlewares/require-auth.js

@@ -6,42 +6,47 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.optionalAuth = exports.requireAuth = void 0;
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
 const not_authorized_error_1 = require("../errors/not-authorized-error");
-const JWT_SECRET = process.env.JWT_SECRET || "your-secret-key-change-in-production";
+const getJwtSecret = () => {
+    const secret = process.env.JWT_SECRET || process.env.JWT_KEY;
+    if (!secret) {
+        throw new Error("JWT_SECRET must be defined");
+    }
+    return secret;
+};
+const extractAccessToken = (req) => {
+    var _a, _b;
+    const authHeader = req.headers.authorization;
+    const bearer = typeof authHeader === "string" && authHeader.startsWith("Bearer ")
+        ? authHeader.substring(7)
+        : undefined;
+    const cookieToken = (_a = req.cookies) === null || _a === void 0 ? void 0 : _a.accessToken;
+    const legacySessionToken = (_b = req.session) === null || _b === void 0 ? void 0 : _b.jwt;
+    const token = bearer || cookieToken || legacySessionToken;
+    return typeof token === "string" && token.trim() ? token.trim() : undefined;
+};
+const attachPayload = (req, payload) => {
+    req.currentUser = payload;
+    req.userId = payload.userId || payload.id;
+    req.sessionId = payload.sessionId;
+};
 /**
  * Middleware: Require authentication
  * Verifies JWT access token and attaches user payload to request
  * Works across all microservices
  */
 const requireAuth = (req, res, next) => {
-    var _a;
     try {
-        // Extract token from Authorization header or cookies
-        const authHeader = req.headers.authorization;
-        const token = (authHeader === null || authHeader === void 0 ? void 0 : authHeader.startsWith("Bearer "))
-            ? authHeader.substring(7)
-            : (_a = req.cookies) === null || _a === void 0 ? void 0 : _a.accessToken;
+        const token = extractAccessToken(req);
         // Check if token exists
         if (!token) {
-            console.log("[requireAuth] No token provided");
             throw new not_authorized_error_1.NotAuthorizedError();
         }
         // Verify token
-        const payload = jsonwebtoken_1.default.verify(token, JWT_SECRET);
-        console.log("[requireAuth] Token verified successfully:", {
-            userId: payload.userId,
-            id: payload.id,
-            email: payload.email,
-            hasAccountNumber: !!payload.accountNumber
-        });
-        // Attach user payload to request
-        req.currentUser = payload;
-        // Support both legacy 'id' and new 'userId' formats
-        req.userId = payload.userId || payload.id;
-        req.sessionId = payload.sessionId;
+        const payload = jsonwebtoken_1.default.verify(token, getJwtSecret());
+        attachPayload(req, payload);
         next();
     }
     catch (err) {
-        console.error("[requireAuth] Error:", err.message, err.name);
         if (err.name === "TokenExpiredError") {
             return res.status(401).json({
                 error: "TOKEN_EXPIRED",
@@ -67,20 +72,13 @@ exports.requireAuth = requireAuth;
  * Loads user if token is present, but doesn't require it
  */
 const optionalAuth = (req, res, next) => {
-    var _a;
     try {
-        const authHeader = req.headers.authorization;
-        const token = (authHeader === null || authHeader === void 0 ? void 0 : authHeader.startsWith("Bearer "))
-            ? authHeader.substring(7)
-            : (_a = req.cookies) === null || _a === void 0 ? void 0 : _a.accessToken;
+        const token = extractAccessToken(req);
         if (!token) {
             return next();
         }
-        const payload = jsonwebtoken_1.default.verify(token, JWT_SECRET);
-        req.currentUser = payload;
-        // Support both legacy 'id' and new 'userId' formats
-        req.userId = payload.userId || payload.id;
-        req.sessionId = payload.sessionId;
+        const payload = jsonwebtoken_1.default.verify(token, getJwtSecret());
+        attachPayload(req, payload);
         next();
     }
     catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helpio/common",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "common library for Helpio ",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",