@mustafahmed1997/learnify-backend 1.3.0 → 1.4.0

package/README.md

@@ -1,8 +1,17 @@
 # @mustafahmed1997/learnify-backend
 
 Shared backend utilities for Learnify microservices: Clerk-based auth/role
-middlewares, error handling utilities, and the Express `Request` type
-augmentation for `req.user` — all importable from the package root.
+middlewares, Zod-based request validation, error handling utilities, response
+shaping helpers, and the Express `Request` type augmentation for `req.user` —
+all importable from the package root.
+
+## What this package solves
+
+Every Learnify microservice needs the same handful of cross-cutting pieces:
+who is the caller (Clerk auth), are they allowed to do this (role checks),
+is their request well-formed (Zod validation), and what shape should errors
+and responses take. This package centralizes all of that so each service
+doesn't reimplement or subtly diverge on it.
 
 ## Installation
 
@@ -12,29 +21,62 @@ npm install @mustafahmed1997/learnify-backend
 
 ### Peer dependencies
 
-This package expects the consuming service to provide its own `express` and
-`@clerk/express` installs (so there is a single shared instance of each at
-runtime, and Clerk's request-scoped auth context works correctly):
+This package expects the consuming service to provide its own `express`,
+`@clerk/express`, and `zod` installs (so there is a single shared instance of
+each at runtime, and Clerk's request-scoped auth context works correctly):
 
 ```bash
-npm install express @clerk/express
+npm install express @clerk/express zod
 ```
 
-## Setup: `clerkMiddleware()` before `checkAuth`
+## Setup: `clerkMiddleware()` before `checkAuth` / `checkRole`
 
-`checkAuth` reads Clerk auth state via `getAuth(req)`, which requires
-`clerkMiddleware()` from `@clerk/express` to have already run on the request:
+Both `checkAuth` and `checkRole` read Clerk auth state via `getAuth(req)`,
+which requires `clerkMiddleware()` from `@clerk/express` to have already run
+on the request:
 
 ```ts
 import express from "express";
 import { clerkMiddleware } from "@clerk/express";
-import { checkAuth, checkRole, globalErrorHandler } from "@mustafahmed1997/learnify-backend";
+import {
+  checkAuth,
+  checkRole,
+  validationMiddleware,
+  globalErrorHandler,
+} from "@mustafahmed1997/learnify-backend";
 
 const app = express();
 
+app.use(express.json());
 app.use(clerkMiddleware());
 ```
 
+## Public exports
+
+| Export | Kind | Purpose |
+| --- | --- | --- |
+| `checkAuth` | middleware | Requires Clerk authentication, attaches `req.user` |
+| `checkRole` | middleware factory | Role-based authorization (`Any` / `All` / `Exact`) |
+| `validationMiddleware` | middleware factory | Validates `body` / `params` / `query` against Zod schemas |
+| `validRoles`, `Role` | const / type | The canonical list of roles and their type |
+| `AppError` | class | Base operational error carrying an HTTP status code |
+| `ValidationError` | class | `AppError` subclass carrying structured field errors |
+| `ValidationErrorItem` | type | Shape of one entry in `ValidationError.errors` |
+| `globalErrorHandler` | middleware | Express error handler; register last |
+| `handlePrismaError` | function | Maps a Prisma error to `{ status, message }` |
+| `getErrorMsg`, `getSuccessMsg` | function | Consistent error/success message builders |
+| `getJsonResponse`, `JsonResponseOptions` | function / type | Builds a sparse, consistent response body |
+| `checkUnique` | function | Checks an array has no duplicate values |
+| `checkValidRoles` | function | Checks every value in an array is a valid `Role` |
+| `requiredFieldMsg`, `minLengthMsg`, `maxLengthMsg`, `invalidSchemaFormatMsg`, `invalidEmailMsg`, `invalidPasswordMsg`, `invalidDateFormatMsg`, `futureDateRequiredMsg`, `invalidNumberMsg`, `positiveNumberMsg`, `invalidUrlMsg` | function | Reusable validation error message builders (pair well with custom Zod `.refine()`/`.check()` messages) |
+| `ClerkUser` | type | Shape of `req.user` |
+| `Location` | type | `"body" \| "params" \| "query"` |
+| `CheckRoleOptions`, `RoleCheckMode` | type | Options accepted by `checkRole` |
+
+Importing anything from the package root also loads the Express `Request`
+type augmentation (`req.user?: ClerkUser`), so no extra `express.d.ts` is
+needed in the consuming service.
+
 ## `checkAuth`
 
 Verifies the request is authenticated via Clerk and attaches a typed
@@ -48,13 +90,20 @@ app.get("/me", checkAuth, (req, res) => {
 });
 ```
 
-If the request is not authenticated, `checkAuth` responds `401` with
-`{ error: "Unauthenticated. Login first please." }` and does not call `next()`.
+If the request is not authenticated, `checkAuth` responds `401` with:
+
+```json
+{ "error": "Unauthenticated. Login first please." }
+```
+
+and does not call `next()`. If reading the Clerk auth context throws, the
+error is passed to `next(error)` for `globalErrorHandler` to handle.
 
 ## `checkRole`
 
-Authorizes a request based on the role in the Clerk session claims
-(`sessionClaims.userMetadata.role`). Takes an array of allowed roles.
+Authorizes a request based on the caller's roles in the Clerk session claims
+(`sessionClaims.userMetadata.roles`, an array). Takes an array of allowed
+roles and an optional `{ mode }`.
 
 ```ts
 import { checkRole } from "@mustafahmed1997/learnify-backend";
@@ -66,8 +115,46 @@ app.delete(
 );
 ```
 
-If the caller's role is not in the allowed list, it responds `403` with
-`{ message: "Unauthorized !!" }` and does not call `next()`.
+### Modes
+
+`mode` defaults to `"Any"` when omitted.
+
+- **`Any`** — the caller needs at least one of `allowedRoles`. Extra roles on
+  either side are ignored.
+
+  ```ts
+  // Passes if the caller has ADMIN or INSTRUCTOR (or both)
+  checkRole(["ADMIN", "INSTRUCTOR"], { mode: "Any" });
+  ```
+
+- **`All`** — the caller must have every role in `allowedRoles`, but may have
+  additional roles beyond that.
+
+  ```ts
+  // Passes only if the caller has both ADMIN and INSTRUCTOR (extra roles OK)
+  checkRole(["ADMIN", "INSTRUCTOR"], { mode: "All" });
+  ```
+
+- **`Exact`** — the caller's role set must match `allowedRoles` exactly, with
+  no missing or extra roles.
+
+  ```ts
+  // Passes only if the caller's roles are exactly {ADMIN, INSTRUCTOR}
+  checkRole(["ADMIN", "INSTRUCTOR"], { mode: "Exact" });
+  ```
+
+### Responses
+
+- Empty or duplicate `allowedRoles`, or duplicate/invalid roles coming back
+  from Clerk's session claims, are treated as misconfiguration/upstream data
+  problems: the middleware calls `next(error)` with a plain `Error`, which
+  `globalErrorHandler` turns into a `500`.
+- No `sessionClaims`, no `userMetadata.roles`, or an empty roles array
+  responds `403` with `{ "message": "User roles not found" }` and does not
+  call `next()`.
+- A caller whose roles don't satisfy the selected mode responds `403` with
+  `{ "message": "Forbidden" }` and does not call `next()`.
+- An authorized caller calls `next()` with no arguments.
 
 ### Combined route example
 
@@ -80,20 +167,75 @@ app.patch(
 );
 ```
 
-## `validRoles` and `Role`
+## `validationMiddleware`
+
+Validates `req.body`, `req.params`, and/or `req.query` against Zod schemas.
+Any subset of the three locations may be supplied — omitted locations are
+skipped.
 
 ```ts
-import { validRoles } from "@mustafahmed1997/learnify-backend";
-import type { Role } from "@mustafahmed1997/learnify-backend";
+import { z } from "zod";
+import { validationMiddleware } from "@mustafahmed1997/learnify-backend";
 
-console.log(validRoles); // ["STUDENT", "INSTRUCTOR", "ADMIN"]
+const createCourseSchema = z.object({
+  title: z.string().min(3),
+  price: z.number().positive(),
+});
 
-function isValidRole(value: string): value is Role {
-  return (validRoles as readonly string[]).includes(value);
-}
+const courseIdParamsSchema = z.object({
+  id: z.string().uuid(),
+});
+
+const paginationQuerySchema = z.object({
+  page: z.coerce.number().int().positive().default(1),
+});
+
+app.post(
+  "/courses",
+  validationMiddleware({ body: createCourseSchema }),
+  createCourseController,
+);
+
+app.get(
+  "/courses/:id",
+  validationMiddleware({ params: courseIdParamsSchema }),
+  getCourseController,
+);
+
+app.get(
+  "/courses",
+  validationMiddleware({ query: paginationQuerySchema }),
+  listCoursesController,
+);
+
+// All three at once:
+app.patch(
+  "/courses/:id",
+  validationMiddleware({
+    params: courseIdParamsSchema,
+    body: createCourseSchema.partial(),
+    query: paginationQuerySchema,
+  }),
+  updateCourseController,
+);
 ```
 
-## `AppError`
+- On success, `validationMiddleware` calls `next()` with no arguments **and**
+  writes each schema's parsed/transformed output back onto `req.body`,
+  `req.params`, and/or `req.query`. This means transforms like
+  `z.coerce.number()` or `.default(...)` are reflected in what the
+  controller sees — e.g. `req.query.page` above is a `number`, not the raw
+  query string.
+- On failure, it calls `next(validationError)` with a `ValidationError`
+  (never touches `res` directly) collecting **every** failing field across
+  **all** provided locations in one pass — it does not stop at the first
+  invalid location.
+- Register `globalErrorHandler` after your routes to turn that
+  `ValidationError` into the `400` response documented below.
+
+## Error classes
+
+### `AppError`
 
 A typed operational error carrying an HTTP status code.
 
@@ -105,6 +247,33 @@ if (!course) {
 }
 ```
 
+### `ValidationError`
+
+An `AppError` subclass (status code always `400`) that also carries the list
+of field-level failures. This is what `validationMiddleware` throws, but you
+can also construct and throw it directly for manual validation:
+
+```ts
+import { ValidationError } from "@mustafahmed1997/learnify-backend";
+import type { ValidationErrorItem } from "@mustafahmed1997/learnify-backend";
+
+const errors: ValidationErrorItem[] = [
+  { location: "body", field: "role", message: "Invalid role" },
+];
+
+throw new ValidationError("Validation failed", errors);
+```
+
+`ValidationErrorItem` shape:
+
+```ts
+type ValidationErrorItem = {
+  location: "body" | "params" | "query";
+  field: string;
+  message: string;
+};
+```
+
 ## `globalErrorHandler`
 
 Express error-handling middleware. Register it **last**, after all routes:
@@ -115,9 +284,140 @@ import { globalErrorHandler } from "@mustafahmed1997/learnify-backend";
 app.use(globalErrorHandler);
 ```
 
-- An `AppError` produces `{ error: err.message }` with `err.statusCode`.
-- Any other thrown value produces `{ error: "Internal server error" }` with
-  status `500`.
+Behavior, checked in this order:
+
+1. **`ValidationError`** (including whatever `validationMiddleware` throws)
+   → `400` with the field-level errors:
+
+   ```json
+   {
+     "error": "Validation failed",
+     "errors": [
+       { "location": "body", "field": "role", "message": "Invalid role" },
+       { "location": "params", "field": "userId", "message": "Invalid user ID" }
+     ]
+   }
+   ```
+
+2. Any other **`AppError`** → its own `statusCode` with `{ "error": err.message }`.
+3. Anything else (an unexpected `Error`, a rejected promise with a non-Error
+   value, etc.) → `500` with a fixed, generic body that never leaks the
+   underlying error's message or stack:
+
+   ```json
+   { "error": "Internal server error" }
+   ```
+
+   The original error is still logged via `console.error` for observability
+   — it just isn't sent to the client.
+
+## `handlePrismaError`
+
+Maps a Prisma error (by `error.code` / `error.name`) to a plain
+`{ status, message }` pair, for services that want to translate Prisma
+failures into an `AppError` themselves:
+
+```ts
+import { handlePrismaError, AppError } from "@mustafahmed1997/learnify-backend";
+
+try {
+  await prisma.course.create({ data });
+} catch (err) {
+  const { status, message } = handlePrismaError(err);
+  throw new AppError(message, status);
+}
+```
+
+Handles `P2002` (unique constraint), `P2003` (invalid foreign key), `P2025`
+(record not found), `P2014` (invalid relation), `P2000` (value too long),
+`PrismaClientValidationError`, and falls back to a generic `500` message for
+anything else — including `null`/`undefined`/non-object inputs.
+
+## `validRoles` and `Role`
+
+```ts
+import { validRoles } from "@mustafahmed1997/learnify-backend";
+import type { Role } from "@mustafahmed1997/learnify-backend";
+
+console.log(validRoles); // ["STUDENT", "INSTRUCTOR", "ADMIN"]
+
+function isValidRole(value: string): value is Role {
+  return (validRoles as readonly string[]).includes(value);
+}
+```
+
+## Role-checking utilities
+
+Low-level building blocks used internally by `checkRole`, exported for
+services that need custom role-array validation outside of the middleware:
+
+```ts
+import { checkUnique, checkValidRoles } from "@mustafahmed1997/learnify-backend";
+
+checkUnique(["ADMIN", "ADMIN"]); // false
+checkUnique(["ADMIN", "STUDENT"]); // true
+
+checkValidRoles(["ADMIN", "STUDENT"]); // true
+checkValidRoles(["ADMIN", "SUPERADMIN"]); // false — not in validRoles
+```
+
+## Response utilities
+
+### `getJsonResponse`
+
+Builds a response body containing only the fields you actually pass —
+`undefined` fields are omitted rather than serialized:
+
+```ts
+import { getJsonResponse } from "@mustafahmed1997/learnify-backend";
+
+res.status(200).json(
+  getJsonResponse({
+    message: "Course created",
+    data: course,
+  }),
+);
+// { "message": "Course created", "data": { ... } }
+```
+
+### `getErrorMsg` / `getSuccessMsg`
+
+Small helpers for consistent, grammatically-correct singular/plural messages:
+
+```ts
+import { getErrorMsg, getSuccessMsg } from "@mustafahmed1997/learnify-backend";
+
+getErrorMsg("Course", "was", "not found"); // "Course was not found"
+getErrorMsg("Courses", "were", "not found"); // "Courses were not found"
+
+getSuccessMsg("Course", "has", "created"); // "Course has been created successfully"
+getSuccessMsg("Courses", "have", "created"); // "Courses have been created successfully"
+```
+
+## Validation error message utilities
+
+Reusable message builders for custom Zod validators (e.g. inside
+`.refine()`), so wording stays consistent across services:
+
+```ts
+import { z } from "zod";
+import {
+  requiredFieldMsg,
+  minLengthMsg,
+  invalidEmailMsg,
+} from "@mustafahmed1997/learnify-backend";
+
+const schema = z.object({
+  email: z.string().email(invalidEmailMsg()),
+  password: z.string().min(8, minLengthMsg(8)),
+});
+```
+
+Available: `requiredFieldMsg(field)`, `minLengthMsg(min)`,
+`maxLengthMsg(max)`, `invalidSchemaFormatMsg(field, format)`,
+`invalidEmailMsg()`, `invalidPasswordMsg()`, `invalidDateFormatMsg()`,
+`futureDateRequiredMsg()`, `invalidNumberMsg(field)`,
+`positiveNumberMsg(field)`, `invalidUrlMsg()`.
 
 ## `ClerkUser` and `req.user` typing
 
@@ -154,14 +454,81 @@ type ClerkUser = {
 };
 ```
 
+> Note: `checkAuth` attaches `req.user` from `sessionClaims.userMetadata`
+> as-is (singular `role`). `checkRole` performs its own authorization check
+> directly against `sessionClaims.userMetadata.roles` (plural, an array) —
+> it does not read `req.user`. If your Clerk session claims only populate
+> `roles`, use `checkRole` for authorization decisions rather than
+> `req.user.userMetadata.role`.
+
 ## TypeScript usage
 
 The package ships its own `.d.ts` declarations — no `@types` package needed.
 It targets ESM (`"type": "module"`) and expects a `moduleResolution` setting
 that supports package `exports` (e.g. `node16`, `nodenext`, or `bundler`).
 
+## Using this package in the Learnify microservices
+
+A typical service wires the pieces together in this order:
+
+```ts
+import express from "express";
+import { clerkMiddleware } from "@clerk/express";
+import {
+  checkAuth,
+  checkRole,
+  validationMiddleware,
+  globalErrorHandler,
+} from "@mustafahmed1997/learnify-backend";
+
+const app = express();
+
+app.use(express.json());
+app.use(clerkMiddleware()); // must run before checkAuth/checkRole
+
+app.post(
+  "/courses",
+  checkAuth,
+  checkRole(["INSTRUCTOR", "ADMIN"]),
+  validationMiddleware({ body: createCourseSchema }),
+  createCourseController,
+);
+
+// ...all other routes...
+
+app.use(globalErrorHandler); // must be registered last
+```
+
+Controllers can then `throw new AppError(...)` / `throw new ValidationError(...)`
+(or pass them to `next(...)`) and rely on `globalErrorHandler` to produce a
+consistent response shape across every microservice.
+
+## Running tests
+
+```bash
+npm test        # runs the full suite once (vitest run)
+npm run test:watch
+```
+
+## Type checking
+
+```bash
+npm run typecheck
+```
+
+## Building
+
+```bash
+npm run build
+```
+
+Compiles `src/` to `dist/` (via `tsconfig.build.json`), producing the ESM
+output and `.d.ts` declarations referenced by `main`/`types` in
+`package.json`.
+
 ## What this package does not do
 
-- Does not depend on Prisma or any database.
+- Does not depend on Prisma or any database (`handlePrismaError` only maps
+  error shapes — it never imports `@prisma/client`).
 - Does not call the Auth Service (or any other service) over HTTP.
 - Does not manage Clerk session creation — that's handled by `clerkMiddleware()`.

package/dist/errors/AppError.js

@@ -2,7 +2,7 @@ export class AppError extends Error {
     constructor(message, statusCode) {
         super(message);
         this.statusCode = statusCode;
-        Object.setPrototypeOf(this, AppError.prototype);
+        Object.setPrototypeOf(this, new.target.prototype);
     }
 }
 //# sourceMappingURL=AppError.js.map

package/dist/errors/AppError.js.map

@@ -1 +1 @@
-{"version":3,"file":"AppError.js","sourceRoot":"","sources":["../../src/errors/AppError.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGjC,YAAY,OAAe,EAAE,UAAkB;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF"}
+{"version":3,"file":"AppError.js","sourceRoot":"","sources":["../../src/errors/AppError.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGjC,YAAY,OAAe,EAAE,UAAkB;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/errors/globalErrorHandler.js

@@ -1,6 +1,13 @@
 import { AppError } from "./AppError.js";
+import { ValidationError } from "./validationError.js";
 export function globalErrorHandler(err, req, res, next) {
     console.error(err);
+    if (err instanceof ValidationError) {
+        return res.status(err.statusCode).json({
+            error: err.message,
+            errors: err.errors,
+        });
+    }
     if (err instanceof AppError) {
         return res.status(err.statusCode).json({
             error: err.message,
@@ -10,4 +17,24 @@ export function globalErrorHandler(err, req, res, next) {
         error: "Internal server error",
     });
 }
+/*
+* Error json due to validation error :
+
+{
+  "error": "Validation failed",
+  "errors": [
+    {
+      "location": "body",
+      "field": "role",
+      "message": "Invalid role"
+    },
+    {
+      "location": "params",
+      "field": "userId",
+      "message": "Invalid user ID"
+    }
+  ]
+}
+
+*/
 //# sourceMappingURL=globalErrorHandler.js.map

package/dist/errors/globalErrorHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"globalErrorHandler.js","sourceRoot":"","sources":["../../src/errors/globalErrorHandler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,UAAU,kBAAkB,CAChC,GAAY,EACZ,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEnB,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YACrC,KAAK,EAAE,GAAG,CAAC,OAAO;SACnB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC1B,KAAK,EAAE,uBAAuB;KAC/B,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"globalErrorHandler.js","sourceRoot":"","sources":["../../src/errors/globalErrorHandler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,UAAU,kBAAkB,CAChC,GAAY,EACZ,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEnB,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;QACnC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YACrC,KAAK,EAAE,GAAG,CAAC,OAAO;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YACrC,KAAK,EAAE,GAAG,CAAC,OAAO;SACnB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC1B,KAAK,EAAE,uBAAuB;KAC/B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;EAmBE"}

package/dist/errors/validationError.d.ts

@@ -0,0 +1,11 @@
+import { Location } from "../types/locationType.js";
+import { AppError } from "./AppError.js";
+export type ValidationErrorItem = {
+    location: Location;
+    field: string;
+    message: string;
+};
+export declare class ValidationError extends AppError {
+    errors: ValidationErrorItem[];
+    constructor(message: string, errors: ValidationErrorItem[]);
+}

package/dist/errors/validationError.js

@@ -0,0 +1,8 @@
+import { AppError } from "./AppError.js";
+export class ValidationError extends AppError {
+    constructor(message, errors) {
+        super(message, 400);
+        this.errors = errors;
+    }
+}
+//# sourceMappingURL=validationError.js.map

package/dist/errors/validationError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validationError.js","sourceRoot":"","sources":["../../src/errors/validationError.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAQzC,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IAC3C,YACE,OAAe,EACR,MAA6B;QAEpC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAFb,WAAM,GAAN,MAAM,CAAuB;IAGtC,CAAC;CACF"}

package/dist/index.d.ts

@@ -1,15 +1,21 @@
 import "./types/express.js";
 export { checkAuth } from "./middlewares/checkAuth.js";
 export { checkRole } from "./middlewares/checkRole.js";
+export type { CheckRoleOptions, RoleCheckMode, } from "./middlewares/checkRole.js";
 export { validationMiddleware } from "./middlewares/validationMiddleware.js";
 export { validRoles } from "./constants/validRoles.js";
 export type { Role } from "./constants/validRoles.js";
 export { AppError } from "./errors/AppError.js";
+export { ValidationError } from "./errors/validationError.js";
+export type { ValidationErrorItem } from "./errors/validationError.js";
 export { globalErrorHandler } from "./errors/globalErrorHandler.js";
 export { handlePrismaError } from "./errors/handlePrismaError.js";
 export { getErrorMsg } from "./utils/getErrorMsg.js";
 export { getSuccessMsg } from "./utils/getSuccessMsg.js";
 export { getJsonResponse } from "./utils/getJsonResponse.js";
 export type { JsonResponseOptions } from "./utils/getJsonResponse.js";
+export { checkUnique } from "./utils/checkUnique.js";
+export { checkValidRoles } from "./utils/checkValidRoles.js";
 export { requiredFieldMsg, minLengthMsg, maxLengthMsg, invalidSchemaFormatMsg, invalidEmailMsg, invalidPasswordMsg, invalidDateFormatMsg, futureDateRequiredMsg, invalidNumberMsg, positiveNumberMsg, invalidUrlMsg, } from "./utils/validationErrorMessages.js";
 export type { ClerkUser } from "./types/ClerkUser.js";
+export type { Location } from "./types/locationType.js";

package/dist/index.js

@@ -4,10 +4,13 @@ export { checkRole } from "./middlewares/checkRole.js";
 export { validationMiddleware } from "./middlewares/validationMiddleware.js";
 export { validRoles } from "./constants/validRoles.js";
 export { AppError } from "./errors/AppError.js";
+export { ValidationError } from "./errors/validationError.js";
 export { globalErrorHandler } from "./errors/globalErrorHandler.js";
 export { handlePrismaError } from "./errors/handlePrismaError.js";
 export { getErrorMsg } from "./utils/getErrorMsg.js";
 export { getSuccessMsg } from "./utils/getSuccessMsg.js";
 export { getJsonResponse } from "./utils/getJsonResponse.js";
+export { checkUnique } from "./utils/checkUnique.js";
+export { checkValidRoles } from "./utils/checkValidRoles.js";
 export { requiredFieldMsg, minLengthMsg, maxLengthMsg, invalidSchemaFormatMsg, invalidEmailMsg, invalidPasswordMsg, invalidDateFormatMsg, futureDateRequiredMsg, invalidNumberMsg, positiveNumberMsg, invalidUrlMsg, } from "./utils/validationErrorMessages.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,oBAAoB,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAE7E,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGvD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAG7D,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,GACd,MAAM,oCAAoC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,oBAAoB,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAKvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAE7E,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGvD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,GACd,MAAM,oCAAoC,CAAC"}

package/dist/middlewares/checkAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkAuth.js","sourceRoot":"","sources":["../../src/middlewares/checkAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAIzC,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAEhE,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,sCAAsC;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC;QACvB,MAAM,YAAY,GAAG,aAAa,EAAE,YAAyC,CAAC;QAC9E,MAAM,KAAK,GAAG,aAAa,EAAE,KAA2B,CAAC;QACzD,MAAM,SAAS,GAAG,aAAa,EAAE,SAA+B,CAAC;QACjE,MAAM,QAAQ,GAAG,aAAa,EAAE,QAA8B,CAAC;QAC/D,MAAM,QAAQ,GAAG,aAAa,EAAE,QAA8B,CAAC;QAE/D,MAAM,IAAI,GAAc;YACtB,OAAO;YACP,KAAK;YACL,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,YAAY;SACb,CAAC;QAEF,yBAAyB;QACzB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAEhB,IAAI,EAAE,CAAC;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"checkAuth.js","sourceRoot":"","sources":["../../src/middlewares/checkAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAIzC,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAEhE,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,sCAAsC;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC;QACvB,MAAM,YAAY,GAChB,aAAa,EAAE,YAAyC,CAAC;QAC3D,MAAM,KAAK,GAAG,aAAa,EAAE,KAA2B,CAAC;QACzD,MAAM,SAAS,GAAG,aAAa,EAAE,SAA+B,CAAC;QACjE,MAAM,QAAQ,GAAG,aAAa,EAAE,QAA8B,CAAC;QAC/D,MAAM,QAAQ,GAAG,aAAa,EAAE,QAA8B,CAAC;QAE/D,MAAM,IAAI,GAAc;YACtB,OAAO;YACP,KAAK;YACL,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,YAAY;SACb,CAAC;QAEF,yBAAyB;QACzB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAEhB,IAAI,EAAE,CAAC;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/middlewares/checkRole.d.ts

@@ -1,3 +1,28 @@
 import { NextFunction, Request, Response } from "express";
 import { validRoles } from "../constants/validRoles.js";
-export declare function checkRole(roles: (typeof validRoles)[number][]): (req: Request, res: Response, next: NextFunction) => Promise<Response<any, Record<string, any>> | undefined>;
+type Role = (typeof validRoles)[number];
+declare const ROLE_CHECK_MODES: readonly ["All", "Exact", "Any"];
+export type RoleCheckMode = (typeof ROLE_CHECK_MODES)[number];
+export type CheckRoleOptions = {
+    mode: RoleCheckMode;
+};
+/**
+ * Used as a middleware to check whether the user has permission to access this endpoint
+ * based on their role.
+ *
+ * @param allowedRoles
+ * @param options
+ *
+ * Options :  mode : "All" | "Exact" | "Any"
+ *
+ * - "All" : All roles in allowedRoles are required. They must exist in the user's roles
+ * even if user has more roles.
+ *
+ * - "Exact" : All roles in allowedRoles are required. They must exist in the user's roles
+ * exactly without any other roles.
+ *
+ * - "Any" : At least one role in allowedRoles is required. One role in the allowedRoles
+ * must exist in the user's roles regardless of other roles in user's roles array and allowed roles array.
+ */
+export declare function checkRole(allowedRoles: Role[], options?: CheckRoleOptions): (req: Request, res: Response, next: NextFunction) => void | Response<any, Record<string, any>>;
+export {};

package/dist/middlewares/checkRole.js

@@ -1,11 +1,68 @@
 import { getAuth } from "@clerk/express";
-export function checkRole(roles) {
-    return async (req, res, next) => {
+import { checkUnique } from "../utils/checkUnique.js";
+import { checkValidRoles } from "../utils/checkValidRoles.js";
+const ROLE_CHECK_MODES = ["All", "Exact", "Any"];
+/**
+ * Used as a middleware to check whether the user has permission to access this endpoint
+ * based on their role.
+ *
+ * @param allowedRoles
+ * @param options
+ *
+ * Options :  mode : "All" | "Exact" | "Any"
+ *
+ * - "All" : All roles in allowedRoles are required. They must exist in the user's roles
+ * even if user has more roles.
+ *
+ * - "Exact" : All roles in allowedRoles are required. They must exist in the user's roles
+ * exactly without any other roles.
+ *
+ * - "Any" : At least one role in allowedRoles is required. One role in the allowedRoles
+ * must exist in the user's roles regardless of other roles in user's roles array and allowed roles array.
+ */
+export function checkRole(allowedRoles, options = { mode: "Any" }) {
+    return (req, res, next) => {
+        if (allowedRoles.length === 0) {
+            return next(new Error("Allowed roles cannot be empty in checkRole middleware !!"));
+        }
+        if (!checkUnique(allowedRoles)) {
+            return next(new Error("Allowed roles array should have unique values !!"));
+        }
         const { sessionClaims } = getAuth(req);
-        const userMetaData = sessionClaims?.userMetadata;
-        const role = userMetaData?.role;
-        if (!roles.includes(role))
-            return res.status(403).json({ message: "Unauthorized !!" });
+        const userMetadata = sessionClaims?.userMetadata;
+        const userRoles = userMetadata?.roles;
+        if (!userRoles || userRoles.length === 0) {
+            return res.status(403).json({
+                message: "User roles not found",
+            });
+        }
+        if (!checkUnique(userRoles)) {
+            return next(new Error("User roles from clerk array should have unique values !!"));
+        }
+        if (!checkValidRoles(userRoles)) {
+            return next(new Error("User roles from clerk contains invalid roles !!"));
+        }
+        let isAuthorized = false;
+        switch (options.mode) {
+            case "Any":
+                isAuthorized = allowedRoles.some((role) => userRoles.includes(role));
+                break;
+            case "Exact":
+                isAuthorized =
+                    allowedRoles.every((role) => userRoles.includes(role)) &&
+                        allowedRoles.length === userRoles.length;
+                break;
+            case "All":
+                isAuthorized = allowedRoles.every((role) => userRoles.includes(role));
+                break;
+            default:
+                break;
+        }
+        if (!isAuthorized) {
+            return res.status(403).json({
+                message: "Forbidden",
+            });
+        }
         next();
     };
 }

package/dist/middlewares/checkRole.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkRole.js","sourceRoot":"","sources":["../../src/middlewares/checkRole.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAIzC,MAAM,UAAU,SAAS,CAAC,KAAoC;IAC5D,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,aAAa,EAAE,YAGnC,CAAC;QACF,MAAM,IAAI,GAAG,YAAY,EAAE,IAAmC,CAAC;QAE/D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YACvB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAE9D,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"checkRole.js","sourceRoot":"","sources":["../../src/middlewares/checkRole.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAGzC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAI9D,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AAQ1D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,SAAS,CACvB,YAAoB,EACpB,UAA4B,EAAE,IAAI,EAAE,KAAK,EAAE;IAE3C,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CACT,IAAI,KAAK,CAAC,0DAA0D,CAAC,CACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CACT,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAC9D,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAEvC,MAAM,YAAY,GAAG,aAAa,EAAE,YAKvB,CAAC;QAEd,MAAM,SAAS,GAAG,YAAY,EAAE,KAAK,CAAC;QAEtC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,sBAAsB;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CACT,IAAI,KAAK,CAAC,0DAA0D,CAAC,CACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,YAAY,GAAG,KAAK,CAAC;QAEzB,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,KAAK;gBACR,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrE,MAAM;YAER,KAAK,OAAO;gBACV,YAAY;oBACV,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;wBACtD,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,CAAC;gBAC3C,MAAM;YAER,KAAK,KAAK;gBACR,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtE,MAAM;YAER;gBACE,MAAM;QACV,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,WAAW;aACrB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/middlewares/validationMiddleware.d.ts

@@ -1,3 +1,9 @@
 import { NextFunction, Request, Response } from "express";
 import z from "zod";
-export declare function validationMiddleware(validaitonSchema: z.ZodType): (req: Request, res: Response, next: NextFunction) => void;
+type validationSchemaType = {
+    body?: z.ZodType;
+    query?: z.ZodType;
+    params?: z.ZodType;
+};
+export declare function validationMiddleware(validaitonSchema: validationSchemaType): (req: Request, res: Response, next: NextFunction) => void;
+export {};

package/dist/middlewares/validationMiddleware.js

@@ -1,26 +1,37 @@
-import z from "zod";
+import { ValidationError, } from "../errors/validationError.js";
 export function validationMiddleware(validaitonSchema) {
     return (req, res, next) => {
-        try {
-            const result = validaitonSchema.safeParse(req.body);
+        const validationErrors = [];
+        for (const [location, schema] of Object.entries(validaitonSchema)) {
+            if (!schema)
+                continue;
+            const result = schema.safeParse(req[location]);
             if (!result.success) {
-                const formattedErrors = result.error.issues.map((issue) => ({
+                validationErrors.push(...result.error.issues.map((issue) => ({
+                    location: location,
                     field: issue.path.join("."),
                     message: issue.message,
-                }));
-                req.validationErrorArr = formattedErrors;
-                return next(new Error(""));
+                })));
             }
             else {
-                return next();
+                switch (location) {
+                    case "body":
+                        req.body = result.data;
+                        break;
+                    case "params":
+                        req.params = result.data;
+                        break;
+                    case "query":
+                        req.query = result.data;
+                        break;
+                }
             }
         }
-        catch (error) {
-            if (error instanceof z.ZodError) {
-                req.validationErrorArr = error.issues;
-                return next(error.issues);
-            }
-            return next(error);
+        if (validationErrors.length > 0) {
+            return next(new ValidationError("Validation failed", validationErrors));
+        }
+        else {
+            return next();
         }
     };
 }

package/dist/middlewares/validationMiddleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"validationMiddleware.js","sourceRoot":"","sources":["../../src/middlewares/validationMiddleware.ts"],"names":[],"mappings":"AACA,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,MAAM,UAAU,oBAAoB,CAAC,gBAA2B;IAC9D,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC1D,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB,CAAC,CAAC,CAAC;gBAEJ,GAAG,CAAC,kBAAkB,GAAG,eAAe,CAAC;gBAEzC,OAAO,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC/B,GAAW,CAAC,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAAC;gBAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"validationMiddleware.js","sourceRoot":"","sources":["../../src/middlewares/validationMiddleware.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,eAAe,GAEhB,MAAM,8BAA8B,CAAC;AAQtC,MAAM,UAAU,oBAAoB,CAAC,gBAAsC;IACzE,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,MAAM,gBAAgB,GAA0B,EAAE,CAAC;QAEnD,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,MAAM;gBAAE,SAAS;YAEtB,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAyB,CAAC,CAAC,CAAC;YAEhE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,gBAAgB,CAAC,IAAI,CACnB,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACrC,QAAQ,EAAE,QAAoB;oBAC9B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB,CAAC,CAAC,CACJ,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,QAAQ,QAAoB,EAAE,CAAC;oBAC7B,KAAK,MAAM;wBACT,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;wBACvB,MAAM;oBACR,KAAK,QAAQ;wBACX,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,IAAyB,CAAC;wBAC9C,MAAM;oBACR,KAAK,OAAO;wBACV,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,IAAwB,CAAC;wBAC5C,MAAM;gBACV,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,IAAI,eAAe,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/types/express.d.ts

@@ -3,10 +3,6 @@ declare global {
     namespace Express {
         interface Request {
             user?: ClerkUser;
-            validationErrorArr?: {
-                field: string;
-                message: string;
-            }[];
         }
     }
 }

package/dist/types/locationType.d.ts

@@ -0,0 +1 @@
+export type Location = "body" | "params" | "query";

package/dist/types/locationType.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=locationType.js.map

package/dist/types/locationType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"locationType.js","sourceRoot":"","sources":["../../src/types/locationType.ts"],"names":[],"mappings":""}

package/dist/utils/checkUnique.d.ts

@@ -0,0 +1 @@
+export declare function checkUnique(arr: string[]): boolean;

package/dist/utils/checkUnique.js

@@ -0,0 +1,4 @@
+export function checkUnique(arr) {
+    return arr.every((item, index) => arr.indexOf(item) === index);
+}
+//# sourceMappingURL=checkUnique.js.map

package/dist/utils/checkUnique.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkUnique.js","sourceRoot":"","sources":["../../src/utils/checkUnique.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,WAAW,CAAC,GAAa;IACvC,OAAO,GAAG,CAAC,KAAK,CACd,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAC7D,CAAC;AACJ,CAAC"}

package/dist/utils/checkValidRoles.d.ts

@@ -0,0 +1 @@
+export declare function checkValidRoles(arr: string[]): boolean;

package/dist/utils/checkValidRoles.js

@@ -0,0 +1,5 @@
+import { validRoles } from "../constants/validRoles.js";
+export function checkValidRoles(arr) {
+    return arr.every((item) => validRoles.includes(item));
+}
+//# sourceMappingURL=checkValidRoles.js.map

package/dist/utils/checkValidRoles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkValidRoles.js","sourceRoot":"","sources":["../../src/utils/checkValidRoles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE9D,MAAM,UAAU,eAAe,CAAC,GAAa;IAC3C,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAY,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mustafahmed1997/learnify-backend",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "Shared Clerk-based auth middlewares, role checking, error utilities, and Express types for Learnify backend microservices.",
   "keywords": [
     "express",