@nebulit/embuilder 0.1.39

package/templates/backend/prd.json.example

@@ -0,0 +1,64 @@
+{
+  "project": "MyApp",
+  "branchName": "ralph/task-priority",
+  "description": "Task Priority System - Add priority levels to tasks",
+  "userStories": [
+    {
+      "id": "US-001",
+      "title": "Add priority field to database",
+      "description": "As a developer, I need to store task priority so it persists across sessions.",
+      "acceptanceCriteria": [
+        "Add priority column to tasks table: 'high' | 'medium' | 'low' (default 'medium')",
+        "Generate and run migration successfully",
+        "Typecheck passes"
+      ],
+      "priority": 1,
+      "passes": false,
+      "notes": ""
+    },
+    {
+      "id": "US-002",
+      "title": "Display priority indicator on task cards",
+      "description": "As a user, I want to see task priority at a glance.",
+      "acceptanceCriteria": [
+        "Each task card shows colored priority badge (red=high, yellow=medium, gray=low)",
+        "Priority visible without hovering or clicking",
+        "Typecheck passes",
+        "Verify in browser using dev-browser skill"
+      ],
+      "priority": 2,
+      "passes": false,
+      "notes": ""
+    },
+    {
+      "id": "US-003",
+      "title": "Add priority selector to task edit",
+      "description": "As a user, I want to change a task's priority when editing it.",
+      "acceptanceCriteria": [
+        "Priority dropdown in task edit modal",
+        "Shows current priority as selected",
+        "Saves immediately on selection change",
+        "Typecheck passes",
+        "Verify in browser using dev-browser skill"
+      ],
+      "priority": 3,
+      "passes": false,
+      "notes": ""
+    },
+    {
+      "id": "US-004",
+      "title": "Filter tasks by priority",
+      "description": "As a user, I want to filter the task list to see only high-priority items.",
+      "acceptanceCriteria": [
+        "Filter dropdown with options: All | High | Medium | Low",
+        "Filter persists in URL params",
+        "Empty state message when no tasks match filter",
+        "Typecheck passes",
+        "Verify in browser using dev-browser skill"
+      ],
+      "priority": 4,
+      "passes": false,
+      "notes": ""
+    }
+  ]
+}

package/templates/backend/public/file.svg

@@ -0,0 +1,4 @@
+<svg fill="none" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg">
+    <path d="M14.5 13.5V5.41a1 1 0 0 0-.3-.7L9.8.29A1 1 0 0 0 9.08 0H1.5v13.5A2.5 2.5 0 0 0 4 16h8a2.5 2.5 0 0 0 2.5-2.5m-1.5 0v-7H8v-5H3v12a1 1 0 0 0 1 1h8a1 1 0 0 0 1-1M9.5 5V2.12L12.38 5zM5.13 5h-.62v1.25h2.12V5zm-.62 3h7.12v1.25H4.5zm.62 3h-.62v1.25h7.12V11z"
+          clip-rule="evenodd" fill="#666" fill-rule="evenodd"/>
+</svg>

package/templates/backend/public/globe.svg

@@ -0,0 +1,12 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16">
+    <g clip-path="url(#a)">
+        <path fill-rule="evenodd" clip-rule="evenodd"
+              d="M10.27 14.1a6.5 6.5 0 0 0 3.67-3.45q-1.24.21-2.7.34-.31 1.83-.97 3.1M8 16A8 8 0 1 0 8 0a8 8 0 0 0 0 16m.48-1.52a7 7 0 0 1-.96 0H7.5a4 4 0 0 1-.84-1.32q-.38-.89-.63-2.08a40 40 0 0 0 3.92 0q-.25 1.2-.63 2.08a4 4 0 0 1-.84 1.31zm2.94-4.76q1.66-.15 2.95-.43a7 7 0 0 0 0-2.58q-1.3-.27-2.95-.43a18 18 0 0 1 0 3.44m-1.27-3.54a17 17 0 0 1 0 3.64 39 39 0 0 1-4.3 0 17 17 0 0 1 0-3.64 39 39 0 0 1 4.3 0m1.1-1.17q1.45.13 2.69.34a6.5 6.5 0 0 0-3.67-3.44q.65 1.26.98 3.1M8.48 1.5l.01.02q.41.37.84 1.31.38.89.63 2.08a40 40 0 0 0-3.92 0q.25-1.2.63-2.08a4 4 0 0 1 .85-1.32 7 7 0 0 1 .96 0m-2.75.4a6.5 6.5 0 0 0-3.67 3.44 29 29 0 0 1 2.7-.34q.31-1.83.97-3.1M4.58 6.28q-1.66.16-2.95.43a7 7 0 0 0 0 2.58q1.3.27 2.95.43a18 18 0 0 1 0-3.44m.17 4.71q-1.45-.12-2.69-.34a6.5 6.5 0 0 0 3.67 3.44q-.65-1.27-.98-3.1"
+              fill="#666"/>
+    </g>
+    <defs>
+        <clipPath id="a">
+            <path fill="#fff" d="M0 0h16v16H0z"/>
+        </clipPath>
+    </defs>
+</svg>

package/templates/backend/public/next.svg

@@ -0,0 +1,6 @@
+<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 394 80">
+    <path fill="#000"
+          d="M262 0h68.5v12.7h-27.2v66.6h-13.6V12.7H262V0ZM149 0v12.7H94v20.4h44.3v12.6H94v21h55v12.6H80.5V0h68.7zm34.3 0h-17.8l63.8 79.4h17.9l-32-39.7 32-39.6h-17.9l-23 28.6-23-28.6zm18.3 56.7-9-11-27.1 33.7h17.8l18.3-22.7z"/>
+    <path fill="#000"
+          d="M81 79.3 17 0H0v79.3h13.6V17l50.2 62.3H81Zm252.6-.4c-1 0-1.8-.4-2.5-1s-1.1-1.6-1.1-2.6.3-1.8 1-2.5 1.6-1 2.6-1 1.8.3 2.5 1a3.4 3.4 0 0 1 .6 4.3 3.7 3.7 0 0 1-3 1.8zm23.2-33.5h6v23.3c0 2.1-.4 4-1.3 5.5a9.1 9.1 0 0 1-3.8 3.5c-1.6.8-3.5 1.3-5.7 1.3-2 0-3.7-.4-5.3-1s-2.8-1.8-3.7-3.2c-.9-1.3-1.4-3-1.4-5h6c.1.8.3 1.6.7 2.2s1 1.2 1.6 1.5c.7.4 1.5.5 2.4.5 1 0 1.8-.2 2.4-.6a4 4 0 0 0 1.6-1.8c.3-.8.5-1.8.5-3V45.5zm30.9 9.1a4.4 4.4 0 0 0-2-3.3 7.5 7.5 0 0 0-4.3-1.1c-1.3 0-2.4.2-3.3.5-.9.4-1.6 1-2 1.6a3.5 3.5 0 0 0-.3 4c.3.5.7.9 1.3 1.2l1.8 1 2 .5 3.2.8c1.3.3 2.5.7 3.7 1.2a13 13 0 0 1 3.2 1.8 8.1 8.1 0 0 1 3 6.5c0 2-.5 3.7-1.5 5.1a10 10 0 0 1-4.4 3.5c-1.8.8-4.1 1.2-6.8 1.2-2.6 0-4.9-.4-6.8-1.2-2-.8-3.4-2-4.5-3.5a10 10 0 0 1-1.7-5.6h6a5 5 0 0 0 3.5 4.6c1 .4 2.2.6 3.4.6 1.3 0 2.5-.2 3.5-.6 1-.4 1.8-1 2.4-1.7a4 4 0 0 0 .8-2.4c0-.9-.2-1.6-.7-2.2a11 11 0 0 0-2.1-1.4l-3.2-1-3.8-1c-2.8-.7-5-1.7-6.6-3.2a7.2 7.2 0 0 1-2.4-5.7 8 8 0 0 1 1.7-5 10 10 0 0 1 4.3-3.5c2-.8 4-1.2 6.4-1.2 2.3 0 4.4.4 6.2 1.2 1.8.8 3.2 2 4.3 3.4 1 1.4 1.5 3 1.5 5h-5.8z"/>
+</svg>

package/templates/backend/public/vercel.svg

@@ -0,0 +1,3 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1155 1000">
+    <path d="m577.3 0 577.4 1000H0z" fill="#fff"/>
+</svg>

package/templates/backend/public/window.svg

@@ -0,0 +1,5 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16">
+    <path fill-rule="evenodd" clip-rule="evenodd"
+          d="M1.5 2.5h13v10a1 1 0 0 1-1 1h-11a1 1 0 0 1-1-1zM0 1h16v11.5a2.5 2.5 0 0 1-2.5 2.5h-11A2.5 2.5 0 0 1 0 12.5zm3.75 4.5a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5M7 4.75a.75.75 0 1 1-1.5 0 .75.75 0 0 1 1.5 0m1.75.75a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5"
+          fill="#666"/>
+</svg>

package/templates/backend/server.ts

@@ -0,0 +1,129 @@
+import {join} from 'path';
+import {getApplication, startAPI, WebApiSetup} from '@event-driven-io/emmett-expressjs';
+import {glob} from "glob";
+import {replayProjection} from "./src/common/replay";
+import express, {Application, Request, Response} from 'express';
+import {requireUser} from "./src/supabase/requireUser";
+import swaggerUi from 'swagger-ui-express'
+import {specs} from './src/swagger';
+import cors from 'cors';
+import {api as replayApi} from "./src/common/routes"
+
+async function startServer() {
+    const routesPattern = join(__dirname, 'src/slices/**/routes{,-*}.@(ts|js)');
+    const routeFiles = await glob(routesPattern, {nodir: true});
+    console.log('Found route files:', routeFiles);
+
+    const processorPattern = join(__dirname, 'src/slices/**/processor{,-*}.@(ts|js)');
+    const processorFiles = await glob(processorPattern, {nodir: true});
+    console.log('Found processor files:', processorFiles);
+
+    const rootApp: Application = express();
+
+    // Configure CORS to allow requests from localhost:8080 and localhost:8081
+    rootApp.use(cors({
+        origin: ['http://localhost:8080', 'http://localhost:8081', '*'],
+        credentials: true,
+        methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
+        allowedHeaders: ['Content-Type', 'Authorization','x-user-id']
+    }));
+
+    const webApis: WebApiSetup[] = [];
+
+    for (const file of routeFiles) {
+        const webApiModule: { api: () => WebApiSetup } = await import(file);
+        if (typeof webApiModule.api == 'function') {
+            var module = webApiModule.api()
+            webApis.push(module);
+        } else {
+            console.error(`Expected api function to be defined in ${file}`);
+        }
+    }
+
+    webApis.push(replayApi)
+
+    for (const processorFile of processorFiles) {
+        const processor: { processor: { start: () => {} } } = await import(processorFile);
+        if (typeof processor.processor.start == "function") {
+            console.log(`starting processor ${processorFile}`)
+            processor.processor.start()
+        }
+    }
+
+    // Get the main application from emmett
+    const childApp: Application = getApplication({
+        apis: webApis,
+        disableJsonMiddleware: false,
+        enableDefaultExpressEtag: true,
+    });
+
+    // Add your custom routes to the main application (BEFORE the catch-all)
+    childApp.post("/internal/replay/:slice/:projectionName", async (req: Request, resp: Response) => {
+        const {slice, projectionName} = req.params
+        await replayProjection(slice, projectionName);
+        return resp.status(200).json({status: 'ok'});
+    });
+
+    // Protected user info endpoint - requires JWT token in Authorization header
+    childApp.get('/api/user', async (req: Request, res: Response) => {
+        console.log('API user route hit'); // Debug log
+        try {
+            const result = await requireUser(req, res, false)
+            if (result.error) {
+                // Response already sent by requireUser if sendUnauthorized=true
+                if (!res.headersSent) {
+                    res.status(401).json({error: result.error})
+                }
+            } else {
+                res.status(200).json({
+                    userId: result.user.id,
+                    email: result.user.email,
+                    metadata: result.user.user_metadata
+                })
+            }
+        } catch (error) {
+            console.error('Error in /api/user:', error);
+            if (!res.headersSent) {
+                res.status(500).json({error: 'Internal server error'});
+            }
+        }
+    });
+
+    // Swagger UI endpoints
+    childApp.use('/api-docs', swaggerUi.serve);
+    childApp.get('/api-docs', swaggerUi.setup(specs, {
+        swaggerOptions: {
+            urls: [
+                {
+                    url: '/swagger.json',
+                    name: 'JSON',
+                },
+            ],
+        },
+    }));
+
+    // OpenAPI spec endpoint
+    childApp.get('/swagger.json', (req: Request, res: Response) => {
+        res.setHeader('Content-Type', 'application/json');
+        res.send(specs);
+    });
+
+    const port = parseInt(process.env.PORT || '3000', 10);
+    console.log(`> Ready on port ${port}`);
+
+    rootApp.use(childApp)
+    // Start the main application
+    startAPI(rootApp, {port: port});
+
+    process.on('unhandledRejection', (reason, promise) => {
+        console.error('⛔ Unhandled Rejection:', reason);
+        if (reason instanceof Error && reason.stack) {
+            console.error('Stack trace:\n', reason.stack);
+        }
+    });
+}
+
+startServer().catch(error => {
+    console.error('Failed to start server:', error);
+    process.exit(1);
+});

package/templates/backend/setup-env.sh

@@ -0,0 +1,50 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+prompt() {
+  local var_name="$1"
+  local prompt_text="$2"
+  local value
+  read -rp "$prompt_text: " value
+  if [[ -z "$value" ]]; then
+    echo "Error: $var_name cannot be empty." >&2
+    exit 1
+  fi
+  echo "$value"
+}
+
+prompt_secret() {
+  local var_name="$1"
+  local prompt_text="$2"
+  local value
+  read -rsp "$prompt_text: " value
+  echo "" >&2
+  if [[ -z "$value" ]]; then
+    echo "Error: $var_name cannot be empty." >&2
+    exit 1
+  fi
+  echo "$value"
+}
+
+echo "=== Supabase .env setup ==="
+echo ""
+
+PROJECT_ID=$(prompt SUPABASE_PROJECT_ID "Supabase Project ID")
+DB_PASSWORD=$(prompt_secret SUPABASE_DB_PASSWORD "Database Password")
+PUBLISHABLE_KEY=$(prompt_secret SUPABASE_PUBLISHABLE_KEY "Supabase Publishable Key")
+SECRET_KEY=$(prompt_secret SUPABASE_SECRET_KEY "Supabase Secret Key")
+
+cat > .env <<EOF
+SUPABASE_URL=https://${PROJECT_ID}.supabase.co
+SUPABASE_PUBLISHABLE_KEY=${PUBLISHABLE_KEY}
+SUPABASE_DB_URL=postgresql://postgres.${PROJECT_ID}:${DB_PASSWORD}@aws-1-eu-central-1.pooler.supabase.com:5432/postgres?prepareThreshold=0
+SUPABASE_SECRET_KEY=${SECRET_KEY}
+
+# Flyway configuration
+FLYWAY_URL=jdbc:postgresql://aws-1-eu-west-1.pooler.supabase.com:6543/postgres?user=postgres.${PROJECT_ID}&password=${DB_PASSWORD}
+FLYWAY_USER=postgres.${PROJECT_ID}
+FLYWAY_PASSWORD=${DB_PASSWORD}
+EOF
+
+echo ""
+echo ".env created successfully."

package/templates/backend/src/common/assertions.ts

@@ -0,0 +1,6 @@
+export function assertNotEmpty<T>(value: T): NonNullable<T> {
+    if (value === null || value === undefined) {
+        throw new Error("Expected non-empty value");
+    }
+    return value!!;
+}

package/templates/backend/src/common/db.ts

@@ -0,0 +1 @@
+export const postgresUrl = process.env.SUPABASE_DB_URL ?? "missing-url"

package/templates/backend/src/common/loadPostgresEventstore.ts

@@ -0,0 +1,16 @@
+import {getPostgreSQLEventStore} from "@event-driven-io/emmett-postgresql";
+import {projections} from "@event-driven-io/emmett";
+import {postgresUrl} from "./db";
+
+export const findEventstore = async () => {
+
+    return getPostgreSQLEventStore(postgresUrl, {
+        schema: {
+            autoMigration: "CreateOrUpdate"
+        },
+        projections: projections.inline([
+        ]),
+
+    });
+
+}

package/templates/backend/src/common/parseEndpoint.ts

@@ -0,0 +1,51 @@
+/*
+ * Copyright (c) 2025 Nebulit GmbH
+ * Licensed under the MIT License.
+ */
+
+const serviceURI = "http://localhost:3000"
+
+export function parseEndpoint(endpoint: string, data?: any) {
+    var parsedEndpoint = endpoint?.startsWith("/") ? endpoint.substring(1) : endpoint
+    return serviceURI + "/" + lowercaseFirstCharacter(parsedEndpoint).replace(/{(\w+)}/g, (match, param) => {
+        return param && data && data[param] !== undefined ? data[param] : match;
+    })
+}
+
+
+export function parseQueryEndpoint(
+    endpoint: string,
+    queries?: Record<string, string>
+) {
+    const parsedEndpoint = endpoint.startsWith("/")
+        ? endpoint.substring(1)
+        : endpoint;
+
+    const basePath =
+        serviceURI + "/api/query/" + parsedEndpoint;
+
+    const queryString = queries
+        ? "?" + new URLSearchParams(filterEmptyEntries(queries)).toString()
+        : "";
+
+    return basePath + queryString;
+}
+
+function filterEmptyEntries(queries?: Record<string, string>): Record<string, string> {
+    if (!queries) return {};
+    return Object.fromEntries(
+        Object.entries(queries).filter(([key, value]) => value !== "")
+    );
+}
+
+
+function lowercaseFirstCharacter(inputString: string) {
+    // Check if the string is not empty
+    if (inputString?.length > 0) {
+        // Capitalize the first character and concatenate the rest of the string
+        return inputString.charAt(0).toLowerCase() + inputString.substring(1);
+    } else {
+        // Return an empty string if the input is empty
+        return "";
+    }
+}

package/templates/backend/src/common/replay.ts

@@ -0,0 +1,9 @@
+import {PostgreSQLProjectionDefinition, rebuildPostgreSQLProjections} from "@event-driven-io/emmett-postgresql";
+import {postgresUrl} from "./db";
+
+export const replayProjection = async (slice: string, projectionName: string): Promise<void> => {
+    const projectionImport = await import((`../slices/${slice}/${projectionName}.ts`))
+    const projection: PostgreSQLProjectionDefinition = projectionImport[projectionName]
+
+    return rebuildPostgreSQLProjections({projection: projection, connectionString: postgresUrl}).start();
+}

package/templates/backend/src/common/routes.ts

@@ -0,0 +1,19 @@
+import {Request, Response, Router} from 'express';
+import {WebApiSetup} from "@event-driven-io/emmett-expressjs";
+import {assertNotEmpty} from "../util/assertions";
+import {replayProjection} from "./replay";
+
+
+export const api =
+    (
+        // external dependencies
+    ): WebApiSetup =>
+        (router: Router): void => {
+
+            router.post('/api/replay/:slice/:projection', async (req: Request, res: Response) => {
+                const slice= assertNotEmpty(req.params.slice)
+                const projection = assertNotEmpty(req.params.projection)
+                replayProjection(slice, projection)
+            });
+        };
+

package/templates/backend/src/common/testHelpers.ts

@@ -0,0 +1,53 @@
+import {execSync} from 'child_process';
+import {writeFileSync, unlinkSync} from 'fs';
+import {tmpdir} from 'os';
+import {join} from 'path';
+
+/**
+ * Runs Flyway migrations against a test database
+ * @param connectionString PostgreSQL connection string
+ */
+export async function runFlywayMigrations(connectionString: string): Promise<void> {
+    // Parse connection string to extract components
+    const url = new URL(connectionString);
+    const jdbcUrl = `jdbc:postgresql://${url.hostname}:${url.port || 5432}${url.pathname}`;
+    const user = url.username;
+    const password = url.password;
+
+    // Create temporary Flyway config file
+    const tempConfigPath = join(tmpdir(), `flyway-test-${Date.now()}.conf`);
+    const migrationsPath = join(process.cwd(), 'supabase', 'migrations');
+
+    const config = `
+flyway.url=${jdbcUrl}
+flyway.user=${user}
+flyway.password=${password}
+flyway.locations=filesystem:${migrationsPath}
+flyway.schemas=public
+flyway.placeholderReplacement=false
+flyway.validateOnMigrate=true
+flyway.cleanDisabled=false
+`;
+
+    try {
+        writeFileSync(tempConfigPath, config, 'utf8');
+
+        // Run Flyway migrate
+        execSync(`flyway -configFiles=${tempConfigPath} migrate`, {
+            stdio: 'pipe',
+            encoding: 'utf8'
+        });
+    } catch (error: any) {
+        console.error('Flyway migration failed:', error.message);
+        if (error.stdout) console.error('STDOUT:', error.stdout);
+        if (error.stderr) console.error('STDERR:', error.stderr);
+        throw new Error(`Flyway migration failed: ${error.message}`);
+    } finally {
+        // Cleanup temp config file
+        try {
+            unlinkSync(tempConfigPath);
+        } catch {
+            // Ignore cleanup errors
+        }
+    }
+}

package/templates/backend/src/core/readmodel.ts

@@ -0,0 +1,28 @@
+import {SupabaseClient} from "@supabase/supabase-js";
+import {PostgrestFilterBuilder} from "@supabase/postgrest-js";
+
+
+export const readmodel = (collection: string, supabase: SupabaseClient) => ({
+    findAll: async <T>(query?: Record<string, any>,
+                       queryWrapper: (query: PostgrestFilterBuilder<any, any, any, any, any>) => PostgrestFilterBuilder<any, any, any, any, any> = (query) => query): Promise<T[]> => {
+        var query1 = supabase.from(collection).select("*");
+        Object.entries(query??{}).forEach((it,value) => {
+            query1 = query1.eq(it[0], it[1])
+        })
+        let qb = queryWrapper(query1);
+        const response = await qb;
+        if (response.error) throw response.error;
+        return response.data as T[]
+    },
+
+    findById: async <T>(idcolumn: string, id: string): Promise<T | null> => {
+        const response = await supabase
+            .from(collection)
+            .select("*")
+            .eq(idcolumn, id)
+            .maybeSingle();
+        if (response.error) throw response.error;
+        return response as T | null;
+    },
+
+});

package/templates/backend/src/core/types.ts

@@ -0,0 +1,26 @@
+/*
+ * Copyright (c) 2025 Nebulit GmbH
+ * Licensed under the MIT License.
+ */
+
+import React from 'react';
+
+export type CommandConfig = {
+    command: string
+    endpoint: string,
+    schema: any // json schema
+}
+
+export type ReadModelConfig = {
+    readModel: string
+    endpoint: string,
+    readModelView: React.FC<any>,
+}
+
+export type ViewSelection = {
+    "slice": string,
+    "viewType": string,
+    "commandView": React.FC<any>,
+    "viewName": string
+}
+

package/templates/backend/src/process/process.ts

@@ -0,0 +1,53 @@
+import cron from "node-cron";
+import {parseQueryEndpoint} from "../common/parseEndpoint";
+
+export type ProcessorTodoItem = {
+    id: string,
+    status: string
+    createdAt: Date
+}
+
+export type ProcessorConfig = {
+    schedule: string,
+    endpoint: string,
+    query?: Record<string, string>,
+}
+
+export const startProcessor = <T>(config: ProcessorConfig, handler: (item: T & ProcessorTodoItem) => void) => {
+    cron.schedule(config.schedule, async () => {
+        const data = await fetchData(parseQueryEndpoint(config.endpoint, config.query ? config.query : {
+            "status": "OPEN",
+            "_limit": "1"
+        }))
+        if (Array.isArray(data) && data?.length > 0) {
+            handler(data[0]);
+        } else {
+            //console.log("No item to process")
+        }
+    })
+}
+
+
+async function fetchData(endpoint: string) {
+    try {
+        const response = await fetch(endpoint, {
+            method: 'GET',
+            headers: {
+                'Content-Type': 'application/json'
+            }
+        });
+
+        if (!response.ok) {
+            return Promise.reject(`HTTP error! status: ${response.status}`);
+        }
+
+        return await response.json(); // This will be a list of objects
+    } catch (error) {
+        console.error('Error fetching data:', error);
+        return Promise.reject(`Error fetching data ${error}`);
+    }
+}
+
+
+
+

package/templates/backend/src/supabase/LoginHandler.ts

@@ -0,0 +1,36 @@
+import {type EmailOtpType} from '@supabase/supabase-js'
+import {Request, Response} from "express";
+
+import createClient from './api'
+
+function stringOrFirstString(item: string | string[] | undefined) {
+    return Array.isArray(item) ? item[0] : item
+}
+
+export default async function LoginHandler(req: Request, res: Response) {
+    if (req.method !== 'GET') {
+        res.status(405).appendHeader('Allow', 'GET').end()
+        return
+    }
+
+    const queryParams = req.query
+    const token_hash = stringOrFirstString(queryParams["token_hash"]?.toString())
+    const type = stringOrFirstString(queryParams["type"]?.toString())
+
+    let next = '/error'
+
+    if (token_hash && type) {
+        const supabase = createClient()
+        const {error} = await supabase.auth.verifyOtp({
+            type: type as EmailOtpType,
+            token_hash,
+        })
+        if (error) {
+            console.error(error)
+        } else {
+            next = stringOrFirstString(queryParams["next"]?.toString()) || '/'
+        }
+    }
+
+    res.redirect(next)
+}

package/templates/backend/src/supabase/ProtectedPageProps.ts

@@ -0,0 +1,21 @@
+import {type Request, type Response} from "express";
+import {createClient} from "./serverProps";
+
+export async function getAuthenticatedUser(req: Request, res: Response) {
+    const supabase = createClient(req, res)
+    const {data, error} = await supabase.auth.getUser()
+    if (error || !data) {
+        return null
+    }
+    return data.user
+}
+
+export async function requireAuthMiddleware(req: Request, res: Response, next: () => void) {
+    const user = await getAuthenticatedUser(req, res)
+    if (!user) {
+        res.redirect('/auth/login')
+        return
+    }
+    (req as any).user = user
+    next()
+}