@imksh/create 1.0.0

package/templates/node-prisma-ts/src/routes/index.ts

@@ -0,0 +1,10 @@
+import express from "express";
+import authRoutes from "./auth.route.js";
+import uploadRoutes from "./upload.route.js";
+
+const router = express.Router();
+
+router.use("/auth", authRoutes);
+router.use("/upload", uploadRoutes);
+
+export default router;

package/templates/node-prisma-ts/src/routes/upload.route.ts

@@ -0,0 +1,11 @@
+import express from "express";
+import { upload } from "../middleware/multer.js";
+import { uploadFile } from "../controllers/upload.controller.js";
+import { protect } from "../middleware/auth.middleware.js";
+import { uploadLimiter } from "../middleware/rateLimiter.js";
+
+const router = express.Router();
+
+router.post("/", protect, uploadLimiter, upload.single("file"), uploadFile);
+
+export default router;

package/templates/node-prisma-ts/src/services/auth.service.ts

@@ -0,0 +1,163 @@
+import bcrypt from "bcrypt";
+import { prisma } from "../config/db.js";
+import { sendOtpEmail } from "../utils/emailOtp.js";
+import { uploadSingleToCloudinary, deleteFromCloudinary } from "../utils/cloudinaryUpload.js";
+import logger from "../utils/logger.js";
+
+export const authService = {
+  signup: async ({ name, email, phone, password }: any) => {
+    const existingUser = await prisma.user.findUnique({
+      where: { email },
+    });
+    if (existingUser) {
+      const err: any = new Error("User already exists");
+      err.status = 409;
+      throw err;
+    }
+
+    const salt = await bcrypt.genSalt(10);
+    const hashedPassword = await bcrypt.hash(password, salt);
+    const photoURL = `https://placehold.co/600x400?text=${name.charAt(0).toUpperCase()}`;
+
+    const newUser = await prisma.user.create({
+      data: {
+        name,
+        email: email.toLowerCase(),
+        phone,
+        password: hashedPassword,
+        avatarUrl: photoURL,
+        avatarPublicId: "",
+      },
+    });
+
+    return newUser;
+  },
+
+  login: async ({ email, password }: any) => {
+    const user = await prisma.user.findUnique({
+      where: { email },
+    });
+    if (!user) {
+      const err: any = new Error("User not found");
+      err.status = 404;
+      throw err;
+    }
+
+    const isValid = await bcrypt.compare(password, user.password);
+    if (!isValid) {
+      const err: any = new Error("Invalid Credentials");
+      err.status = 401;
+      throw err;
+    }
+
+    return user;
+  },
+
+  generateOtp: async (email: string) => {
+    const user = await prisma.user.findUnique({
+      where: { email },
+    });
+    if (!user) {
+      const err: any = new Error("User not found");
+      err.status = 404;
+      throw err;
+    }
+
+    const existingOtp = await prisma.otp.findUnique({
+      where: { email },
+    });
+    if (existingOtp) {
+      await prisma.otp.delete({
+        where: { email },
+      });
+    }
+
+    const otp = Math.floor(100000 + Math.random() * 900000).toString();
+    const hashedOtp = await bcrypt.hash(otp, 10);
+
+    await prisma.otp.create({
+      data: {
+        email,
+        otp: hashedOtp,
+      },
+    });
+
+    await sendOtpEmail(email, otp);
+    return true;
+  },
+
+  verifyOtp: async ({ email, otp }: any) => {
+    const user = await prisma.user.findUnique({
+      where: { email },
+    });
+    if (!user) {
+      const err: any = new Error("User not found");
+      err.status = 404;
+      throw err;
+    }
+
+    const existingOtp = await prisma.otp.findUnique({
+      where: { email },
+    });
+    if (!existingOtp) {
+      const err: any = new Error("OTP match failed");
+      err.status = 400;
+      throw err;
+    }
+
+    const isMatched = await bcrypt.compare(otp, existingOtp.otp);
+    if (!isMatched) {
+      const err: any = new Error("OTP match failed");
+      err.status = 400;
+      throw err;
+    }
+
+    return user;
+  },
+
+  resetPassword: async (user: any, newPassword: any) => {
+    const hashedPassword = await bcrypt.hash(newPassword, 10);
+    await prisma.user.update({
+      where: { id: user.id },
+      data: { password: hashedPassword },
+    });
+    return true;
+  },
+
+  updateProfile: async (userId: any, { name, phone, file }: any) => {
+    const user = await prisma.user.findUnique({
+      where: { id: userId },
+    });
+    if (!user) {
+      const err: any = new Error("User not found");
+      err.status = 404;
+      throw err;
+    }
+
+    const updateData: any = {};
+    if (name) updateData.name = name;
+    if (phone) updateData.phone = phone;
+
+    if (file) {
+      const uploadResult = await uploadSingleToCloudinary(file, {
+        folder: "codelab/avatars",
+      });
+
+      if (user.avatarPublicId) {
+        await deleteFromCloudinary(user.avatarPublicId).catch((err) =>
+          logger.error("Old avatar delete error", err)
+        );
+      }
+
+      updateData.avatarUrl = uploadResult.url;
+      updateData.avatarPublicId = uploadResult.publicId;
+    }
+
+    const updatedUser = await prisma.user.update({
+      where: { id: userId },
+      data: updateData,
+    });
+
+    return updatedUser;
+  },
+};

package/templates/node-prisma-ts/src/types/express.d.ts

@@ -0,0 +1,10 @@
+import { Express } from "express";
+
+declare global {
+  namespace Express {
+    interface Request {
+      user?: any;
+      file?: any;
+    }
+  }
+}

package/templates/node-prisma-ts/src/utils/cloudinaryUpload.ts

@@ -0,0 +1,44 @@
+import cloudinary from "../config/cloudinary.js";
+import logger from "./logger.js";
+
+const uploadToCloudinary = async (file: any, options: any = {}) => {
+  if (!file?.buffer) {
+    throw new Error("Invalid file.");
+  }
+  const dataURI = `data:${file.mimetype};base64,${file.buffer.toString("base64")}`;
+  const result = await cloudinary.uploader.upload(dataURI, {
+    folder: options.folder || "uploads",
+    ...options,
+  });
+  return {
+    url: result.secure_url,
+    publicId: result.public_id,
+  };
+};
+
+export const uploadSingleToCloudinary = async (file: any, options: any = {}) => {
+  try {
+    return await uploadToCloudinary(file, options);
+  } catch (error) {
+    logger.error("Cloudinary Upload Error", error);
+    throw new Error("Failed to upload image.");
+  }
+};
+
+export const uploadMultipleToCloudinary = async (files: any[] = [], options: any = {}) => {
+  try {
+    return await Promise.all(files.map((file) => uploadToCloudinary(file, options)));
+  } catch (error) {
+    logger.error("Cloudinary Upload Error", error);
+    throw new Error("Failed to upload images.");
+  }
+};
+
+export const deleteFromCloudinary = async (publicId: string) => {
+  try {
+    return await cloudinary.uploader.destroy(publicId);
+  } catch (error) {
+    logger.error("Cloudinary Delete Error", error);
+    throw new Error("Failed to delete image.");
+  }
+};

package/templates/node-prisma-ts/src/utils/emailOtp.ts

@@ -0,0 +1,30 @@
+import sendEmail from "../config/email.js";
+
+const APP_NAME = process.env.APP_NAME || "My App";
+const APP_URL = process.env.APP_URL || "";
+const APP_PRIMARY_COLOR = process.env.APP_PRIMARY_COLOR || "#2563eb";
+
+export const emailOtp = (otp: string, expiry = 10) => ({
+  subject: `${APP_NAME} - Verification Code`,
+  html: `
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <title>${APP_NAME}</title>
+</head>
+<body style="margin:0;padding:40px;background:#f3f4f6;font-family:Arial,sans-serif;">
+  <div style="background:#fff;border-radius:12px;padding:30px;max-width:500px;margin:auto;">
+    <h2>Verification Code</h2>
+    <p>Your code is valid for ${expiry} minutes:</p>
+    <div style="font-size:32px;font-weight:bold;color:${APP_PRIMARY_COLOR};text-align:center;margin:20px 0;">${otp}</div>
+  </div>
+</body>
+</html>
+`,
+});
+
+export const sendOtpEmail = async (to: string, otp: string, expiry = 10) => {
+  const template = emailOtp(otp, expiry);
+  await sendEmail(to, template.subject, template.html);
+};

package/templates/node-prisma-ts/src/utils/genOtpToken.ts

@@ -0,0 +1,22 @@
+import jwt from "jsonwebtoken";
+import { Response } from "express";
+
+const genOtpToken = (user: any, res?: Response) => {
+  const JWT_SECRET = process.env.JWT_SECRET || "fallbacksecret";
+  const token = jwt.sign({ id: user._id || user.id }, JWT_SECRET, {
+    expiresIn: "10m",
+  });
+
+  if (res) {
+    res.cookie("token", token, {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "strict",
+      maxAge: 10 * 60 * 1000, // 10 minutes
+    });
+  }
+
+  return token;
+};
+
+export default genOtpToken;

package/templates/node-prisma-ts/src/utils/generateVapidKeys.ts

@@ -0,0 +1,12 @@
+import webpush from "web-push";
+import logger from "./logger.js";
+
+const generateVapidKeys = () => {
+  const vapidKeys = webpush.generateVAPIDKeys();
+  logger.info("Generated VAPID Keys:");
+  logger.info(`Public Key: ${vapidKeys.publicKey}`);
+  logger.info(`Private Key: ${vapidKeys.privateKey}`);
+  return vapidKeys;
+};
+
+export default generateVapidKeys;

package/templates/node-prisma-ts/src/utils/jwt.ts

@@ -0,0 +1,27 @@
+import jwt from "jsonwebtoken";
+import { Response } from "express";
+
+export const generateToken = (user: any, res?: Response) => {
+  const payload = { id: user._id || user.id };
+  const JWT_SECRET = process.env.JWT_SECRET || "fallbacksecret";
+  const token = jwt.sign(payload, JWT_SECRET, { expiresIn: "30d" });
+  
+  if (res) {
+    res.cookie("token", token, {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "strict",
+      maxAge: 30 * 24 * 60 * 60 * 1000, // 30 days
+    });
+  }
+  return token;
+};
+
+export const verifyToken = (token: string) => {
+  try {
+    const JWT_SECRET = process.env.JWT_SECRET || "fallbacksecret";
+    return jwt.verify(token, JWT_SECRET);
+  } catch (error) {
+    return null;
+  }
+};

package/templates/node-prisma-ts/src/utils/logger.ts

@@ -0,0 +1,27 @@
+const colors = {
+  reset: "\x1b[0m",
+  info: "\x1b[36m", // Cyan
+  success: "\x1b[32m", // Green
+  warn: "\x1b[33m", // Yellow
+  error: "\x1b[31m", // Red
+  timestamp: "\x1b[90m", // Gray
+};
+
+type LogLevel = "info" | "success" | "warn" | "error";
+
+const formatMessage = (level: LogLevel, message: string) => {
+  const timestamp = new Date().toISOString();
+  return `${colors.timestamp}[${timestamp}]${colors.reset} ${colors[level] || colors.reset}[${level.toUpperCase()}]${colors.reset} ${message}`;
+};
+
+export const logger = {
+  info: (msg: string) => console.log(formatMessage("info", msg)),
+  success: (msg: string) => console.log(formatMessage("success", msg)),
+  warn: (msg: string) => console.warn(formatMessage("warn", msg)),
+  error: (msg: string, err?: any) => {
+    console.error(formatMessage("error", msg));
+    if (err) console.error(err);
+  },
+};
+
+export default logger;

package/templates/node-prisma-ts/tsconfig.json

@@ -0,0 +1,14 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "strict": true,
+    "skipLibCheck": true,
+    "outDir": "./dist",
+    "rootDir": "./src"
+  },
+  "include": ["src/**/*"]
+}

package/templates/node-ts/.env.example

@@ -0,0 +1,62 @@
+# ==========================
+# Application
+# ==========================
+NODE_ENV=development
+PORT=5001
+
+APP_NAME=My App
+APP_URL=http://localhost:5173
+APP_EMAIL=noreply@example.com
+APP_PRIMARY_COLOR=#2563eb
+
+# ==========================
+# Database
+# ==========================
+MONGO_URI=
+
+# ==========================
+# JWT
+# ==========================
+JWT_SECRET=
+JWT_EXPIRES_IN=7d
+
+# ==========================
+# Cloudinary
+# ==========================
+CLOUDINARY_CLOUD_NAME=
+CLOUDINARY_API_KEY=
+CLOUDINARY_API_SECRET=
+
+# ==========================
+# Email (SMTP)
+# ==========================
+SMTP_HOST=smtp.gmail.com
+SMTP_PORT=587
+SMTP_SECURE=false
+SMTP_USER=
+SMTP_PASS=
+SMTP_FROM="My App <noreply@example.com>"
+
+# ==========================
+# CORS
+# ==========================
+CLIENT_URL=http://localhost:5173
+
+# ==========================
+# Cookie
+# ==========================
+COOKIE_NAME=token
+COOKIE_EXPIRES_IN=7d
+
+# ==========================
+# Rate Limiting
+# ==========================
+RATE_LIMIT_WINDOW=15
+RATE_LIMIT_MAX=100
+
+# ==========================
+# Rate Limiting
+# ==========================
+VAPID_PRIVATE_KEY=
+VAPID_PUBLIC_KEY=
+VAPID_SUBJECT=mailto:noreply@example.com

package/templates/node-ts/README.md

@@ -0,0 +1,69 @@
+# Node.js TypeScript Backend Boilerplate
+
+A production-ready, strongly-typed Node.js & Express boilerplate project with best-practice architectures, modular routing, and TypeScript compilation.
+
+## Features
+
+- ⚙️ **Modular Architecture:** Express application setup decoupled into `app.ts` (middleware + router wiring) and `index.ts` (server initialization & db connection).
+- 📝 **Colorized Logging:** Zero-dependency custom logger with timestamped success, warning, info, and error layouts.
+- 🛡️ **Security Out-of-the-Box:** Pre-configured with Helmet headers, CORS policies, and global rate limiters (`apiLimiter`, `authLimiter`, `uploadLimiter`).
+- 🔑 **Authentication & JWT:** Custom middlewares for route protection, sign-ups, and log-ins with HTTP-only cookie-based tokens.
+- 📧 **SMTP Mailer & OTP:** Standard mailer transport using Gmail NodeMailer wrapper, integrated with an OTP generator and email template.
+- 🖼️ **File Uploads:** Cloudinary integration utilizing Multer memory buffers for secure, single or multi-file uploads.
+- 🔌 **Socket.io Setup:** Pre-installed Socket.io hooks mapping connected user sessions to active sockets.
+- ✉️ **Web Push:** Push notifications integration powered by VAPID key generators and web-push subscriptions.
+- 📦 **TSX Engine:** Fast runtime TS loader supporting ESM resolutions natively with instant reloads.
+
+## Getting Started
+
+### 1. Configure Environment Variables
+
+Create a `.env` file in the root directory (based on `.env.example`):
+
+```env
+PORT=5002
+JWT_SECRET=your_super_secret_jwt_key
+MONGO_URI=your_mongodb_connection_uri
+
+# Cloudinary
+CLOUDINARY_CLOUD_NAME=your_cloud_name
+CLOUDINARY_API_KEY=your_api_key
+CLOUDINARY_API_SECRET=your_api_secret
+
+# SMTP Settings
+GMAIL_USER=your_email@gmail.com
+GMAIL_PASSCODE=your_app_password
+
+# Web Push
+VAPID_SUBJECT=mailto:your_email@example.com
+VAPID_PUBLIC_KEY=your_vapid_public_key
+VAPID_PRIVATE_KEY=your_vapid_private_key
+```
+
+### 2. Install & Start Development
+
+```bash
+# Install dependencies
+npm install
+
+# Start development server with reload (via tsx)
+npm run dev
+
+# Build the project to JS
+npm run build
+
+# Start production compiled server
+npm start
+```
+
+## API Endpoints
+
+### Auth Routes (`/api/auth`)
+- `POST /signup` - Registers a new user session
+- `POST /login` - Log in user and write token cookie
+- `POST /logout` - Clear token session cookies
+- `GET /me` - Returns logged-in user profile (requires auth)
+- `PUT /me` - Edit profile info and upload avatars (requires auth)
+
+### Upload Routes (`/api/upload`)
+- `POST /` - Securely uploads image/file to Cloudinary (requires auth)

package/templates/node-ts/_gitignore

@@ -0,0 +1,24 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+node_modules
+dist
+dist-ssr
+*.local
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?

package/templates/node-ts/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "/Users/karan/workspace/Projects/boilerplate/test-app-node-ts",
+  "version": "1.0.0",
+  "main": "src/index.ts",
+  "type": "module",
+  "scripts": {
+    "start": "tsx src/index.ts",
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "generate:vapid": "node ./src/utils/generateVapidKeys.js"
+  },
+  "dependencies": {
+    "bcrypt": "^5.1.1",
+    "cloudinary": "^2.0.0",
+    "compression": "^1.7.4",
+    "cookie-parser": "^1.4.6",
+    "cors": "^2.8.5",
+    "dotenv": "^16.3.1",
+    "express": "^4.18.2",
+    "express-rate-limit": "^7.1.4",
+    "helmet": "^7.1.0",
+    "jsonwebtoken": "^9.0.2",
+    "mongoose": "^8.0.0",
+    "morgan": "^1.10.0",
+    "multer": "^1.4.5-lts.1",
+    "nodemailer": "^6.9.7",
+    "socket.io": "^4.7.2",
+    "web-push": "^3.6.6"
+  },
+  "devDependencies": {
+    "@types/bcrypt": "^5.0.2",
+    "@types/compression": "^1.7.5",
+    "@types/cookie-parser": "^1.4.6",
+    "@types/cors": "^2.8.17",
+    "@types/express": "^4.17.21",
+    "@types/jsonwebtoken": "^9.0.5",
+    "@types/morgan": "^1.9.9",
+    "@types/multer": "^1.4.11",
+    "@types/node": "^20.9.0",
+    "@types/nodemailer": "^6.4.14",
+    "@types/web-push": "^3.6.3",
+    "nodemon": "^3.0.1",
+    "ts-node": "^10.9.1",
+    "tsx": "^4.23.1",
+    "typescript": "^5.2.2"
+  }
+}

package/templates/node-ts/src/app.ts

@@ -0,0 +1,36 @@
+import express, { Request, Response, NextFunction } from "express";
+import helmet from "helmet";
+import cors from "cors";
+import compression from "compression";
+import cookieParser from "cookie-parser";
+import morgan from "morgan";
+import apiRoutes from "./routes/index.js";
+import { notFound, errorHandler } from "./middleware/errorHandler.js";
+import { apiLimiter } from "./middleware/rateLimiter.js";
+
+const app = express();
+
+app.use(helmet());
+app.use(
+  cors({
+    origin: process.env.CLIENT_URL || "http://localhost:5173",
+    credentials: true,
+  })
+);
+app.use(compression());
+app.use(express.json());
+app.use(express.urlencoded({ extended: true }));
+app.use(cookieParser());
+app.use(morgan("dev"));
+
+app.use(apiLimiter);
+app.use("/api", apiRoutes);
+
+app.get("/api/health", (req: Request, res: Response) => {
+  res.status(200).json({ success: true, message: "API is running" });
+});
+
+app.use(notFound);
+app.use(errorHandler);
+
+export default app;

package/templates/node-ts/src/config/cloudinary.ts

@@ -0,0 +1,9 @@
+import { v2 as cloudinary } from "cloudinary";
+
+cloudinary.config({
+  cloud_name: process.env.CLOUDINARY_CLOUD_NAME,
+  api_key: process.env.CLOUDINARY_API_KEY,
+  api_secret: process.env.CLOUDINARY_API_SECRET,
+});
+
+export default cloudinary;

package/templates/node-ts/src/config/db.ts

@@ -0,0 +1,15 @@
+import mongoose from "mongoose";
+import logger from "../utils/logger.js";
+
+const connectDB = async () => {
+  try {
+    const MONGO_URI = process.env.MONGO_URI || "mongodb://localhost:27017/test";
+    const conn = await mongoose.connect(MONGO_URI);
+    logger.success(`MongoDB connected: ${conn.connection.host}`);
+  } catch (error: any) {
+    logger.error(`MongoDB connection error: ${error.message}`, error);
+    process.exit(1);
+  }
+};
+
+export default connectDB;

package/templates/node-ts/src/config/dotenv.ts

@@ -0,0 +1,2 @@
+import dotenv from "dotenv";
+dotenv.config();

package/templates/node-ts/src/config/email.ts

@@ -0,0 +1,28 @@
+import nodemailer from "nodemailer";
+import logger from "../utils/logger.js";
+
+const sendEmail = async (to: string, subject: string, message: string) => {
+  try {
+    const transporter = nodemailer.createTransport({
+      service: "gmail",
+      auth: {
+        user: process.env.GMAIL_USER,
+        pass: process.env.GMAIL_PASSCODE,
+      },
+    });
+
+    const mailOptions = {
+      from: process.env.GMAIL_USER,
+      to,
+      subject,
+      html: message,
+    };
+
+    const res = await transporter.sendMail(mailOptions);
+    logger.success(`Email sent to ${to}: ${res.messageId}`);
+  } catch (error) {
+    logger.error("Failed to send email", error);
+  }
+};
+
+export default sendEmail;