@maysun/common 3.0.1 → 3.0.3

package/build/auth/src/config/main.config.d.ts

@@ -0,0 +1,4 @@
+export declare const RATE_LIMIT = 100;
+export declare const WINDOW_MS = 10;
+export declare const SMS_COOLDOWN: number;
+export declare const OTP_COOLDOWN: number;

package/build/auth/src/config/main.config.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OTP_COOLDOWN = exports.SMS_COOLDOWN = exports.WINDOW_MS = exports.RATE_LIMIT = void 0;
+exports.RATE_LIMIT = 100;
+exports.WINDOW_MS = 10;
+exports.SMS_COOLDOWN = 2 * 60 * 1000;
+exports.OTP_COOLDOWN = 10 * 60 * 1000;

package/build/auth/src/types/interfaces.d.ts

@@ -0,0 +1,16 @@
+export interface SignupInput {
+    phoneNumber: string;
+    domain: string;
+}
+export interface SignupInputWrapper {
+    input: SignupInput;
+}
+export interface User {
+    id: string;
+    phoneNumber: string;
+    domain: string;
+}
+export interface IContext {
+    domain: string;
+    currentUser: User | null;
+}

package/build/auth/src/types/interfaces.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/common/src/errors/bad-request-error.d.ts

@@ -0,0 +1,10 @@
+import { CustomError } from './custom-error';
+export declare class BadRequestError extends CustomError {
+    message: string;
+    status: "fail";
+    statusCode: number;
+    constructor(message: string);
+    serializeErrors(): {
+        message: string;
+    }[];
+}

package/build/common/src/errors/bad-request-error.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BadRequestError = void 0;
+const custom_error_1 = require("./custom-error");
+class BadRequestError extends custom_error_1.CustomError {
+    constructor(message) {
+        super(message);
+        this.message = message;
+        this.status = 'fail';
+        this.statusCode = 400;
+        Object.setPrototypeOf(this, BadRequestError.prototype);
+    }
+    serializeErrors() {
+        return [{ message: this.message }];
+    }
+}
+exports.BadRequestError = BadRequestError;

package/build/common/src/errors/custom-error.d.ts

@@ -0,0 +1,10 @@
+export declare abstract class CustomError extends Error {
+    abstract status: 'fail' | 'error';
+    abstract statusCode: number;
+    abstract serializeErrors(): {
+        field?: string;
+        message: string;
+        code?: number;
+    }[];
+    constructor(message: string);
+}

package/build/common/src/errors/custom-error.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CustomError = void 0;
+class CustomError extends Error {
+    constructor(message) {
+        super(message);
+        Object.setPrototypeOf(this, CustomError.prototype);
+    }
+}
+exports.CustomError = CustomError;

package/build/common/src/errors/database-connection-error.d.ts

@@ -0,0 +1,8 @@
+export declare class DatabaseConnectionError extends Error {
+    statusCode: number;
+    reason: string;
+    constructor();
+    serializeErrors(): {
+        message: string;
+    }[];
+}

package/build/common/src/errors/database-connection-error.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatabaseConnectionError = void 0;
+class DatabaseConnectionError extends Error {
+    constructor() {
+        super();
+        this.statusCode = 500;
+        this.reason = 'Error connecting to database';
+        Object.setPrototypeOf(this, DatabaseConnectionError.prototype);
+    }
+    serializeErrors() {
+        return [{ message: this.reason }];
+    }
+}
+exports.DatabaseConnectionError = DatabaseConnectionError;

package/build/common/src/errors/graphql/graphql-error-handler.d.ts

@@ -0,0 +1 @@
+export declare function formatGraphQLError(err: unknown): never;

package/build/common/src/errors/graphql/graphql-error-handler.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatGraphQLError = formatGraphQLError;
+// errors/graphqlErrorHandler.ts
+const zod_1 = require("zod");
+const validationError_1 = require("./validationError");
+function formatGraphQLError(err) {
+    if (err instanceof zod_1.ZodError)
+        return (0, validationError_1.handleValidationError)(err);
+    // اینجا بعداً می‌تونی بقیه خطاها رو هم هندل کنی
+    throw err;
+}

package/build/common/src/errors/graphql/validationError.d.ts

@@ -0,0 +1,2 @@
+import { ZodError } from 'zod';
+export declare function handleValidationError(err: ZodError): never;

package/build/common/src/errors/graphql/validationError.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleValidationError = handleValidationError;
+// errors/validationError.ts
+const graphql_1 = require("graphql");
+function handleValidationError(err) {
+    const validationErrors = err.issues.map((issue) => ({
+        field: issue.path.join('.'),
+        message: issue.message,
+    }));
+    throw new graphql_1.GraphQLError('Validation failed', {
+        extensions: {
+            code: 'BAD_USER_INPUT',
+            validationErrors,
+        },
+    });
+}

package/build/common/src/errors/invalid-credentials-error.d.ts

@@ -0,0 +1,9 @@
+import { CustomError } from './custom-error';
+export declare class InvalidCredentialsError extends CustomError {
+    status: "fail";
+    statusCode: number;
+    constructor();
+    serializeErrors(): {
+        message: string;
+    }[];
+}

package/build/common/src/errors/invalid-credentials-error.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvalidCredentialsError = void 0;
+const custom_error_1 = require("./custom-error");
+class InvalidCredentialsError extends custom_error_1.CustomError {
+    constructor() {
+        super('Route not found');
+        this.status = 'fail';
+        this.statusCode = 401;
+        Object.setPrototypeOf(this, InvalidCredentialsError.prototype);
+    }
+    serializeErrors() {
+        return [{ message: 'Invalid credentials' }];
+    }
+}
+exports.InvalidCredentialsError = InvalidCredentialsError;

package/build/common/src/errors/not-found-error.d.ts

@@ -0,0 +1,9 @@
+import { CustomError } from './custom-error';
+export declare class NotFoundError extends CustomError {
+    status: "fail";
+    statusCode: number;
+    constructor();
+    serializeErrors(): {
+        message: string;
+    }[];
+}

package/build/common/src/errors/not-found-error.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotFoundError = void 0;
+const custom_error_1 = require("./custom-error");
+class NotFoundError extends custom_error_1.CustomError {
+    constructor() {
+        super('Route not found');
+        this.status = 'fail';
+        this.statusCode = 404;
+        Object.setPrototypeOf(this, NotFoundError.prototype);
+    }
+    serializeErrors() {
+        return [{ message: 'Not found!' }];
+    }
+}
+exports.NotFoundError = NotFoundError;

package/build/common/src/errors/request-validation-error.d.ts

@@ -0,0 +1,12 @@
+import { ZodError } from 'zod';
+import { CustomError } from './custom-error';
+export declare class RequestValidationError extends CustomError {
+    error: ZodError;
+    status: "fail";
+    statusCode: number;
+    constructor(error: ZodError);
+    serializeErrors(): {
+        message: string;
+        field: string;
+    }[];
+}

package/build/common/src/errors/request-validation-error.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequestValidationError = void 0;
+const custom_error_1 = require("./custom-error");
+class RequestValidationError extends custom_error_1.CustomError {
+    constructor(error) {
+        super('Invalid Request parameters');
+        this.error = error;
+        this.status = 'fail';
+        this.statusCode = 404;
+        Object.setPrototypeOf(this, RequestValidationError.prototype);
+    }
+    serializeErrors() {
+        return this.error.issues.map((err) => {
+            var _a;
+            return {
+                message: err.message,
+                field: (_a = err.path[0]) === null || _a === void 0 ? void 0 : _a.toString(),
+            };
+        });
+        // return [{ message: 'Not found!' }];
+    }
+}
+exports.RequestValidationError = RequestValidationError;

package/build/common/src/index.d.ts

@@ -0,0 +1,8 @@
+export * from "./errors/bad-request-error";
+export * from "./errors/custom-error";
+export * from "./errors/database-connection-error";
+export * from "./errors/invalid-credentials-error";
+export * from "./errors/not-found-error";
+export * from "./errors/request-validation-error";
+export * from "./errors/graphql/graphql-error-handler";
+export * from "./errors/graphql/validationError";

package/build/common/src/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./errors/bad-request-error"), exports);
+__exportStar(require("./errors/custom-error"), exports);
+__exportStar(require("./errors/database-connection-error"), exports);
+__exportStar(require("./errors/invalid-credentials-error"), exports);
+__exportStar(require("./errors/not-found-error"), exports);
+__exportStar(require("./errors/request-validation-error"), exports);
+__exportStar(require("./errors/graphql/graphql-error-handler"), exports);
+__exportStar(require("./errors/graphql/validationError"), exports);

package/build/common/src/middleware/current-user.d.ts

@@ -0,0 +1,10 @@
+import { User } from "../../../auth/src/types/interfaces";
+import { Request, Response, NextFunction } from "express";
+declare global {
+    namespace Express {
+        interface Request {
+            currentUser?: User;
+        }
+    }
+}
+export declare const currentUser: (req: Request, res: Response, next: NextFunction) => void;

package/build/common/src/middleware/current-user.js

@@ -0,0 +1,22 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.currentUser = void 0;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const currentUser = (req, res, next) => {
+    var _a;
+    if (!((_a = req.session) === null || _a === void 0 ? void 0 : _a.jwt)) {
+        return next();
+    }
+    try {
+        const payload = jsonwebtoken_1.default.verify(req.session.jwt, process.env.JWT_KEY);
+        req.currentUser = payload;
+    }
+    catch (err) {
+        console.log(err);
+    }
+    next();
+};
+exports.currentUser = currentUser;

package/build/common/src/middleware/error-handler.d.ts

@@ -0,0 +1,2 @@
+import { NextFunction, Request, Response } from 'express';
+export declare const errorHandler: (err: Error, req: Request, res: Response, next: NextFunction) => Response<any, Record<string, any>> | undefined;

package/build/common/src/middleware/error-handler.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.errorHandler = void 0;
+const custom_error_1 = require("../errors/custom-error");
+const errorHandler = (err, req, res, next) => {
+    if (err instanceof custom_error_1.CustomError) {
+        return res.status(err.statusCode).send({
+            status: err.status,
+            data: {
+                errors: err.serializeErrors(),
+            },
+        });
+    }
+};
+exports.errorHandler = errorHandler;

package/build/common/src/middleware/rateLimit.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/build/common/src/middleware/rateLimit.js

@@ -0,0 +1,12 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const main_config_1 = require("../../../auth/src/config/main.config");
+const express_rate_limit_1 = __importDefault(require("express-rate-limit"));
+exports.default = (0, express_rate_limit_1.default)({
+    max: main_config_1.RATE_LIMIT,
+    windowMs: main_config_1.WINDOW_MS * 60 * 1000,
+    message: `Too many request per ip, in ${main_config_1.WINDOW_MS} minutes!`,
+});

package/build/common/src/middleware/validate-request.d.ts

@@ -0,0 +1,3 @@
+import { NextFunction, Request, Response } from 'express';
+import 'express-async-errors';
+export declare const validateRequest: (req: Request, res: Response, next: NextFunction) => void;

package/build/common/src/middleware/validate-request.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateRequest = void 0;
+const request_validation_error_1 = require("../errors/request-validation-error");
+require("express-async-errors");
+const validation_1 = require("./validation");
+const validateRequest = (req, res, next) => {
+    const result = validation_1.signinSchema.safeParse(req.body);
+    if (!result.success)
+        throw new request_validation_error_1.RequestValidationError(result.error);
+    next();
+};
+exports.validateRequest = validateRequest;

package/build/common/src/middleware/validation.d.ts

@@ -0,0 +1,12 @@
+import { z } from 'zod';
+export declare const signupSchema: z.ZodObject<{
+    domain: z.ZodString;
+    phoneNumber: z.ZodString;
+}, z.core.$strip>;
+export declare const signinSchema: z.ZodObject<{
+    domain: z.ZodString;
+    phoneNumber: z.ZodString;
+    otp: z.ZodString;
+}, z.core.$strip>;
+export type SignupInput = z.infer<typeof signupSchema>;
+export type SigninInput = z.infer<typeof signinSchema>;

package/build/common/src/middleware/validation.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signinSchema = exports.signupSchema = void 0;
+const zod_1 = require("zod");
+const phoneNumberSchema = zod_1.z
+    .string()
+    .length(11, 'Phone number must be 11 digits long')
+    .regex(/^09\d{9}$/, 'The phone number must start with 09');
+const domainSchema = zod_1.z
+    .string()
+    .trim()
+    .max(50, 'Domain too long')
+    .regex(/^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/i, 'Domain is not valid (e.g., octolab.ir)');
+exports.signupSchema = zod_1.z.object({
+    domain: domainSchema,
+    phoneNumber: phoneNumberSchema,
+});
+exports.signinSchema = zod_1.z.object({
+    domain: domainSchema,
+    phoneNumber: phoneNumberSchema,
+    otp: zod_1.z.string().trim().min(4, 'OTP must be at least 4 chars').max(100, 'OTP too long'),
+});

package/build/common/src/middleware/xssSanitize.d.ts

@@ -0,0 +1,2 @@
+import { Request, Response, NextFunction } from 'express';
+export declare function xssSanitizeMiddleware(req: Request, res: Response, next: NextFunction): void;

package/build/common/src/middleware/xssSanitize.js

@@ -0,0 +1,32 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.xssSanitizeMiddleware = xssSanitizeMiddleware;
+const xss_1 = __importDefault(require("xss"));
+function sanitizeObject(obj) {
+    if (typeof obj !== 'object' || obj === null)
+        return obj;
+    if (Array.isArray(obj)) {
+        return obj.map((item) => sanitizeObject(item));
+    }
+    for (const key in obj) {
+        if (typeof obj[key] === 'string') {
+            obj[key] = (0, xss_1.default)(obj[key]);
+        }
+        else if (typeof obj[key] === 'object') {
+            obj[key] = sanitizeObject(obj[key]);
+        }
+    }
+    return obj;
+}
+function xssSanitizeMiddleware(req, res, next) {
+    if (req.body)
+        req.body = sanitizeObject(req.body);
+    if (req.params)
+        req.params = sanitizeObject(req.params);
+    if (req.query)
+        req.query = sanitizeObject(req.query);
+    next();
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maysun/common",
-  "version": "3.0.1",
+  "version": "3.0.3",
   "main": "./build/index.js",
   "types": "./build/index.t.ts",
   "files": [
@@ -16,7 +16,19 @@
   "license": "ISC",
   "description": "",
   "devDependencies": {
+    "@types/cookie-session": "^2.0.49",
+    "@types/express": "^4.17.23",
+    "@types/jsonwebtoken": "^9.0.10",
     "del-cli": "^6.0.0",
     "typescript": "^5.9.2"
+  },
+  "dependencies": {
+    "cookie-session": "^2.1.1",
+    "express": "^4.21.2",
+    "express-rate-limit": "^8.0.1",
+    "graphql": "^16.11.0",
+    "jsonwebtoken": "^9.0.2",
+    "xss": "^1.0.15",
+    "zod": "^4.1.5"
   }
 }

package/build/index.d.ts

@@ -1,6 +0,0 @@
-interface Color {
-    red: number;
-    blue: number;
-    green: number;
-}
-declare const color: Color;

package/build/index.js

@@ -1,7 +0,0 @@
-"use strict";
-const color = {
-    red: 10,
-    blue: 10,
-    green: 10,
-};
-console.log(color);