@imksh/create 1.0.0

package/templates/node/src/routes/upload.route.js

@@ -0,0 +1,12 @@
+import express from "express";
+import { upload } from "../middleware/multer.js";
+import { uploadFile } from "../controllers/upload.controller.js";
+import { protect } from "../middleware/auth.middleware.js";
+import { uploadLimiter } from "../middleware/rateLimiter.js";
+
+const router = express.Router();
+
+// Mount file upload route (protected by auth and rate-limited)
+router.post("/", protect, uploadLimiter, upload.single("file"), uploadFile);
+
+export default router;

package/templates/node/src/services/auth.service.js

@@ -0,0 +1,162 @@
+import User from "../models/user.model.js";
+import Otp from "../models/otp.model.js";
+import bcrypt from "bcrypt";
+import { generateToken } from "../utils/jwt.js";
+import { sendOtpEmail } from "../utils/emailOtp.js";
+import { uploadSingleToCloudinary, deleteFromCloudinary } from "../utils/cloudinaryUpload.js";
+import logger from "../utils/logger.js";
+
+export const authService = {
+  /**
+   * User Signup
+   */
+  signup: async ({ name, email, phone, password }) => {
+    const existingUser = await User.findOne({ email });
+    if (existingUser) {
+      const err = new Error("User already exists");
+      err.status = 409;
+      throw err;
+    }
+
+    const salt = await bcrypt.genSalt(10);
+    const hashedPassword = await bcrypt.hash(password, salt);
+
+    const photoURL = `https://placehold.co/600x400?text=${name.charAt(0).toUpperCase()}`;
+
+    const newUser = await User.create({
+      name,
+      email: email.toLowerCase(),
+      phone,
+      role: "user",
+      password: hashedPassword,
+      avatar: {
+        url: photoURL,
+        publicId: "",
+      },
+    });
+
+    return newUser;
+  },
+
+  /**
+   * User Login
+   */
+  login: async ({ email, password }) => {
+    const user = await User.findOne({ email });
+    if (!user) {
+      const err = new Error("User not found");
+      err.status = 404;
+      throw err;
+    }
+
+    const isValid = await bcrypt.compare(password, user.password);
+    if (!isValid) {
+      const err = new Error("Invalid Credentials");
+      err.status = 401;
+      throw err;
+    }
+
+    return user;
+  },
+
+  /**
+   * Generate and Send OTP
+   */
+  generateOtp: async (email) => {
+    const user = await User.findOne({ email });
+    if (!user) {
+      const err = new Error("User not found");
+      err.status = 404;
+      throw err;
+    }
+
+    const existingOtp = await Otp.findOne({ email });
+    if (existingOtp) {
+      await existingOtp.deleteOne();
+    }
+
+    const otp = Math.floor(100000 + Math.random() * 900000).toString();
+    const hashedOtp = await bcrypt.hash(otp, 10);
+
+    await Otp.create({
+      email,
+      otp: hashedOtp,
+    });
+
+    await sendOtpEmail(email, otp);
+    return true;
+  },
+
+  /**
+   * Verify OTP
+   */
+  verifyOtp: async ({ email, otp }) => {
+    const user = await User.findOne({ email });
+    if (!user) {
+      const err = new Error("User not found");
+      err.status = 404;
+      throw err;
+    }
+
+    const existingOtp = await Otp.findOne({ email });
+    if (!existingOtp) {
+      const err = new Error("OTP match failed");
+      err.status = 400;
+      throw err;
+    }
+
+    const isMatched = await bcrypt.compare(otp, existingOtp.otp);
+    if (!isMatched) {
+      const err = new Error("OTP match failed");
+      err.status = 400;
+      throw err;
+    }
+
+    return user;
+  },
+
+  /**
+   * Reset Password
+   */
+  resetPassword: async (user, newPassword) => {
+    const hashedPassword = await bcrypt.hash(newPassword, 10);
+    user.password = hashedPassword;
+    await user.save();
+    return true;
+  },
+
+  /**
+   * Update Profile
+   */
+  updateProfile: async (userId, { name, phone, file }) => {
+    const user = await User.findById(userId);
+    if (!user) {
+      const err = new Error("User not found");
+      err.status = 404;
+      throw err;
+    }
+
+    if (name) user.name = name;
+    if (phone) user.phone = phone;
+
+    if (file) {
+      const uploadResult = await uploadSingleToCloudinary(file, {
+        folder: "codelab/avatars",
+      });
+
+      if (user.avatar && user.avatar.publicId) {
+        await deleteFromCloudinary(user.avatar.publicId).catch((err) =>
+          logger.error("Old avatar delete error", err)
+        );
+      }
+
+      user.avatar = {
+        url: uploadResult.url,
+        publicId: uploadResult.publicId,
+      };
+    }
+
+    await user.save();
+    return user;
+  },
+};

package/templates/node/src/utils/authToken.js

@@ -0,0 +1,26 @@
+import jwt from "jsonwebtoken";
+
+export const genToken = async (user, res) => {
+  try {
+    const payload = {
+      id: user._id,
+      role: user.role || "admin",
+    };
+    const token = await jwt.sign(payload, process.env.JWT_SECRET, {
+      expiresIn: "1d",
+    });
+    //expires in day=1d,in hour=1h,in seconds=1
+
+    console.log(token);
+    res.cookie("token", token, {
+      maxAge: 1000 * 60 * 60 * 24,
+      httpOnly: process.env.NODE_ENV !== "production" ? false : true,
+      secure: process.env.NODE_ENV !== "production" ? false : true,
+      sameSite: process.env.NODE_ENV !== "production" ? "lax" : "none",
+    });
+    return token;
+  } catch (error) {
+    console.log(error);
+    throw error;
+  }
+};

package/templates/node/src/utils/cloudinary.js

@@ -0,0 +1,27 @@
+import { v2 as cloudinary } from "cloudinary";
+import { CloudinaryStorage } from "multer-storage-cloudinary";
+import multer from "multer";
+
+cloudinary.config({
+  cloud_name: process.env.CLOUDINARY_CLOUD_NAME,
+  api_key: process.env.CLOUDINARY_API_KEY,
+  api_secret: process.env.CLOUDINARY_API_SECRET,
+});
+
+// Storage engine for profile images / file submissions
+const storage = new CloudinaryStorage({
+  cloudinary,
+  params: (req, file) => ({
+    folder: "lms-uploads",
+    allowed_formats: ["jpg", "jpeg", "png", "gif", "pdf", "webp"],
+    resource_type: file.mimetype.startsWith("image/") ? "image" : "raw",
+    public_id: `${Date.now()}-${file.originalname.replace(/\s+/g, "_")}`,
+  }),
+});
+
+export const upload = multer({
+  storage,
+  limits: { fileSize: 10 * 1024 * 1024 }, // 10 MB cap
+});
+
+export { cloudinary };

package/templates/node/src/utils/cloudinaryUpload.js

@@ -0,0 +1,87 @@
+import cloudinary from "../config/cloudinary.js";
+import logger from "./logger.js";
+
+const uploadToCloudinary = async (
+  file,
+  {
+    folder = "uploads",
+    width,
+    height,
+    crop,
+    quality = "auto",
+    format = "auto",
+    ...options
+  } = {},
+) => {
+  if (!file?.buffer) {
+    throw new Error("Invalid file.");
+  }
+
+  const dataURI = `data:${file.mimetype};base64,${file.buffer.toString(
+    "base64",
+  )}`;
+
+  const result = await cloudinary.uploader.upload(dataURI, {
+    folder,
+    width,
+    height,
+    crop,
+    quality,
+    format,
+    ...options,
+  });
+
+  return {
+    url: result.secure_url,
+    publicId: result.public_id,
+    assetId: result.asset_id,
+    width: result.width,
+    height: result.height,
+    format: result.format,
+    bytes: result.bytes,
+  };
+};
+
+/**
+ * Upload Single Image
+ */
+export const uploadSingleToCloudinary = async (
+  file,
+  options = {},
+) => {
+  try {
+    return await uploadToCloudinary(file, options);
+  } catch (error) {
+    logger.error("Cloudinary Upload Error", error);
+    throw new Error("Failed to upload image.");
+  }
+};
+
+/**
+ * Upload Multiple Images
+ */
+export const uploadMultipleToCloudinary = async (
+  files = [],
+  options = {},
+) => {
+  try {
+    return await Promise.all(
+      files.map((file) => uploadToCloudinary(file, options)),
+    );
+  } catch (error) {
+    logger.error("Cloudinary Upload Error", error);
+    throw new Error("Failed to upload images.");
+  }
+};
+
+/**
+ * Delete Image
+ */
+export const deleteFromCloudinary = async (publicId) => {
+  try {
+    return await cloudinary.uploader.destroy(publicId);
+  } catch (error) {
+    logger.error("Cloudinary Delete Error", error);
+    throw new Error("Failed to delete image.");
+  }
+};

package/templates/node/src/utils/emailOtp.js

@@ -0,0 +1,190 @@
+import sendEmail from "../config/email.js";
+
+const APP_NAME = process.env.APP_NAME || "My App";
+const APP_URL = process.env.APP_URL || "";
+const APP_PRIMARY_COLOR =
+  process.env.APP_PRIMARY_COLOR || "#2563eb";
+
+export const emailOtp = (otp, expiry = 10) => ({
+  subject: `${APP_NAME} - Verification Code`,
+  html: `
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>${APP_NAME}</title>
+</head>
+
+<body style="margin:0;padding:40px;background:#f3f4f6;font-family:Arial,Helvetica,sans-serif;">
+
+  <table width="100%" cellpadding="0" cellspacing="0">
+    <tr>
+      <td align="center">
+
+        <table
+          width="600"
+          cellpadding="0"
+          cellspacing="0"
+          style="
+            background:#ffffff;
+            border-radius:16px;
+            overflow:hidden;
+            box-shadow:0 10px 30px rgba(0,0,0,.08);
+          "
+        >
+
+          <!-- Header -->
+          <tr>
+            <td
+              align="center"
+              style="
+                background:${APP_PRIMARY_COLOR};
+                padding:30px;
+              "
+            >
+              <h1
+                style="
+                  margin:0;
+                  color:#ffffff;
+                  font-size:26px;
+                  font-weight:700;
+                "
+              >
+                ${APP_NAME}
+              </h1>
+
+              <p
+                style="
+                  margin:8px 0 0;
+                  color:#ffffff;
+                  opacity:.9;
+                  font-size:14px;
+                "
+              >
+                Verification Code
+              </p>
+            </td>
+          </tr>
+
+          <!-- Body -->
+          <tr>
+            <td style="padding:40px;">
+
+              <h2
+                style="
+                  margin-top:0;
+                  color:#111827;
+                "
+              >
+                Hello 👋
+              </h2>
+
+              <p
+                style="
+                  font-size:15px;
+                  color:#4b5563;
+                  line-height:1.7;
+                "
+              >
+                Use the verification code below to continue with your request.
+                This code is valid for
+                <strong>${expiry} minutes</strong>.
+              </p>
+
+              <div
+                style="
+                  text-align:center;
+                  margin:40px 0;
+                "
+              >
+                <span
+                  style="
+                    display:inline-block;
+                    padding:18px 40px;
+                    border-radius:12px;
+                    background:#eff6ff;
+                    color:${APP_PRIMARY_COLOR};
+                    font-size:34px;
+                    font-weight:bold;
+                    letter-spacing:8px;
+                  "
+                >
+                  ${otp}
+                </span>
+              </div>
+
+              <p
+                style="
+                  font-size:14px;
+                  color:#6b7280;
+                  line-height:1.7;
+                "
+              >
+                If you didn't request this code, you can safely ignore this
+                email. No further action is required.
+              </p>
+
+            </td>
+          </tr>
+
+          <!-- Footer -->
+          <tr>
+            <td
+              align="center"
+              style="
+                background:#f9fafb;
+                padding:24px;
+                border-top:1px solid #e5e7eb;
+              "
+            >
+
+              ${
+                APP_URL
+                  ? `
+                <a
+                  href="${APP_URL}"
+                  style="
+                    color:${APP_PRIMARY_COLOR};
+                    text-decoration:none;
+                    font-size:14px;
+                    font-weight:600;
+                  "
+                >
+                  ${APP_URL}
+                </a>
+
+                <br><br>
+              `
+                  : ""
+              }
+
+              <span
+                style="
+                  color:#9ca3af;
+                  font-size:13px;
+                "
+              >
+                © ${new Date().getFullYear()} ${APP_NAME}. All rights reserved.
+              </span>
+
+            </td>
+          </tr>
+
+        </table>
+
+      </td>
+    </tr>
+  </table>
+
+</body>
+
+</html>
+`,
+});
+
+export const sendOtpEmail = async (to, otp, expiry = 10) => {
+  const template = emailOtp(otp, expiry);
+  await sendEmail(to, template.subject, template.html);
+};

package/templates/node/src/utils/genOtpToken.js

@@ -0,0 +1,20 @@
+import jwt from "jsonwebtoken";
+
+const genOtpToken = (user, res) => {
+  const token = jwt.sign({ id: user._id || user.id }, process.env.JWT_SECRET, {
+    expiresIn: "10m",
+  });
+
+  if (res) {
+    res.cookie("token", token, {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "strict",
+      maxAge: 10 * 60 * 1000, // 10 minutes
+    });
+  }
+
+  return token;
+};
+
+export default genOtpToken;

package/templates/node/src/utils/generateVapidKeys.js

@@ -0,0 +1,12 @@
+import webpush from "web-push";
+import logger from "./logger.js";
+
+const generateVapidKeys = () => {
+  const vapidKeys = webpush.generateVAPIDKeys();
+  logger.info("Generated VAPID Keys:");
+  logger.info(`Public Key: ${vapidKeys.publicKey}`);
+  logger.info(`Private Key: ${vapidKeys.privateKey}`);
+  return vapidKeys;
+};
+
+export default generateVapidKeys;

package/templates/node/src/utils/jwt.js

@@ -0,0 +1,25 @@
+import jwt from "jsonwebtoken";
+
+export const generateToken = (user, res) => {
+  const payload = { id: user._id || user.id };
+  const token = jwt.sign(payload, process.env.JWT_SECRET, { expiresIn: "30d" });
+  
+  if (res) {
+    res.cookie("token", token, {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "strict",
+      maxAge: 30 * 24 * 60 * 60 * 1000, // 30 days
+    });
+  }
+  return token;
+};
+
+export const verifyToken = (token) => {
+  try {
+    const JWT_SECRET = process.env.JWT_SECRET;
+    return jwt.verify(token, JWT_SECRET);
+  } catch (error) {
+    return null;
+  }
+};

package/templates/node/src/utils/logger.js

@@ -0,0 +1,25 @@
+const colors = {
+  reset: "\x1b[0m",
+  info: "\x1b[36m", // Cyan
+  success: "\x1b[32m", // Green
+  warn: "\x1b[33m", // Yellow
+  error: "\x1b[31m", // Red
+  timestamp: "\x1b[90m", // Gray
+};
+
+const formatMessage = (level, message) => {
+  const timestamp = new Date().toISOString();
+  return `${colors.timestamp}[${timestamp}]${colors.reset} ${colors[level] || colors.reset}[${level.toUpperCase()}]${colors.reset} ${message}`;
+};
+
+export const logger = {
+  info: (msg) => console.log(formatMessage("info", msg)),
+  success: (msg) => console.log(formatMessage("success", msg)),
+  warn: (msg) => console.warn(formatMessage("warn", msg)),
+  error: (msg, err) => {
+    console.error(formatMessage("error", msg));
+    if (err) console.error(err);
+  },
+};
+
+export default logger;

package/templates/node-prisma/.env.example

@@ -0,0 +1,63 @@
+# ==========================
+# Application
+# ==========================
+NODE_ENV=development
+PORT=5000
+
+APP_NAME=My App
+APP_URL=http://localhost:5173
+APP_EMAIL=noreply@example.com
+APP_PRIMARY_COLOR=#2563eb
+
+# ==========================
+# Database
+# ==========================
+
+DATABASE_URL="postgresql://johndoe:randompassword@localhost:5432/mydb?schema=public"
+
+# ==========================
+# JWT
+# ==========================
+JWT_SECRET=
+JWT_EXPIRES_IN=7d
+
+# ==========================
+# Cloudinary
+# ==========================
+CLOUDINARY_CLOUD_NAME=
+CLOUDINARY_API_KEY=
+CLOUDINARY_API_SECRET=
+
+# ==========================
+# Email (SMTP)
+# ==========================
+SMTP_HOST=smtp.gmail.com
+SMTP_PORT=587
+SMTP_SECURE=false
+SMTP_USER=
+SMTP_PASS=
+SMTP_FROM="My App <noreply@example.com>"
+
+# ==========================
+# CORS
+# ==========================
+CLIENT_URL=http://localhost:5173
+
+# ==========================
+# Cookie
+# ==========================
+COOKIE_NAME=token
+COOKIE_EXPIRES_IN=7d
+
+# ==========================
+# Rate Limiting
+# ==========================
+RATE_LIMIT_WINDOW=15
+RATE_LIMIT_MAX=100
+
+# ==========================
+# Rate Limiting
+# ==========================
+VAPID_PRIVATE_KEY=
+VAPID_PUBLIC_KEY=
+VAPID_SUBJECT=mailto:noreply@example.com