@payez/next-mvp 4.1.7 → 4.1.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (154) hide show
  1. package/README.md +792 -792
  2. package/dist/auth/better-auth.js +15 -3
  3. package/dist/components/account/MobileNavDrawer.js +18 -18
  4. package/dist/components/account/UserAvatarMenu.js +1 -1
  5. package/dist/components/admin/AlertSettingsTab.js +40 -40
  6. package/dist/components/admin/LoggingSettingsTab.js +28 -28
  7. package/dist/pages/login/page.js +28 -28
  8. package/dist/pages/settings/EnhancedSettingsPage.js +17 -17
  9. package/package.json +1 -1
  10. package/scripts/dev-broker.ps1 +35 -35
  11. package/scripts/dev-local.ps1 +45 -45
  12. package/src/api/auth-handler.ts +548 -548
  13. package/src/api-handlers/account/change-password.ts +142 -142
  14. package/src/api-handlers/account/update-phone.ts +79 -79
  15. package/src/api-handlers/account/verify-email.ts +125 -125
  16. package/src/api-handlers/account/verify-sms.ts +125 -125
  17. package/src/api-handlers/admin/analytics.ts +443 -443
  18. package/src/api-handlers/admin/audit.ts +223 -223
  19. package/src/api-handlers/admin/index.ts +63 -63
  20. package/src/api-handlers/admin/redis-sessions.ts +251 -251
  21. package/src/api-handlers/admin/sessions.ts +318 -318
  22. package/src/api-handlers/admin/site-logs.ts +365 -365
  23. package/src/api-handlers/admin/users.ts +242 -242
  24. package/src/api-handlers/admin/vibe-data.ts +324 -324
  25. package/src/api-handlers/auth/refresh.ts +682 -682
  26. package/src/api-handlers/auth/signout.ts +199 -199
  27. package/src/api-handlers/auth/status.ts +20 -20
  28. package/src/api-handlers/auth/update-session.ts +110 -110
  29. package/src/api-handlers/auth/verify-code.ts +112 -112
  30. package/src/api-handlers/session/refresh-viability.ts +36 -36
  31. package/src/api-handlers/test/force-expire.ts +60 -60
  32. package/src/auth/auth-decision.ts +229 -229
  33. package/src/auth/better-auth.ts +15 -3
  34. package/src/auth/route-config.ts +219 -219
  35. package/src/auth/types/auth-types.ts +555 -555
  36. package/src/auth/types/index.ts +7 -7
  37. package/src/auth/utils/idp-client.ts +445 -445
  38. package/src/auth/utils/index.ts +6 -6
  39. package/src/auth/utils/token-utils.ts +243 -243
  40. package/src/client/AuthContext.tsx +143 -143
  41. package/src/client/fetch-with-auth.ts +47 -47
  42. package/src/components/SessionSync.tsx +138 -138
  43. package/src/components/SignalRHealthCheck.tsx +131 -131
  44. package/src/components/account/MobileNavDrawer.tsx +305 -305
  45. package/src/components/account/UserAvatarMenu.tsx +266 -266
  46. package/src/components/account/index.ts +13 -13
  47. package/src/components/admin/AlertSettingsTab.tsx +728 -728
  48. package/src/components/admin/AnalyticsTab.tsx +703 -703
  49. package/src/components/admin/DataBrowserTab.tsx +505 -505
  50. package/src/components/admin/LoggingSettingsTab.tsx +665 -665
  51. package/src/components/admin/SessionsTab.tsx +414 -414
  52. package/src/components/admin/StatsTab.tsx +379 -379
  53. package/src/components/admin/VibeAdminLayout.tsx +187 -187
  54. package/src/components/admin/index.ts +59 -59
  55. package/src/components/auth/FederatedAuthSection.tsx +95 -95
  56. package/src/components/auth/ModeAwareLoginPage.tsx +135 -135
  57. package/src/components/auth/ModeAwareSignupPage.tsx +267 -267
  58. package/src/components/auth/TraditionalAuthSection.tsx +99 -99
  59. package/src/components/recovery/CompleteStep.tsx +36 -36
  60. package/src/components/recovery/InitiateRecoveryStep.tsx +68 -68
  61. package/src/components/recovery/SelectMethodStep.tsx +73 -73
  62. package/src/components/recovery/SetPasswordStep.tsx +97 -97
  63. package/src/components/recovery/VerifyCodeStep.tsx +90 -90
  64. package/src/components/reserved/ReservedRecoveryWarning.tsx +160 -160
  65. package/src/components/reserved/ReservedStatusBox.tsx +118 -118
  66. package/src/components/ui/BetaBadge.tsx +58 -58
  67. package/src/components/ui/Footer.tsx +93 -93
  68. package/src/config/env.ts +57 -57
  69. package/src/config/logger.ts +62 -62
  70. package/src/config/vibe-log-transport.ts +264 -264
  71. package/src/hooks/useAuth.ts +117 -117
  72. package/src/hooks/useAuthSettings.ts +97 -97
  73. package/src/hooks/useAvailableProviders.ts +120 -120
  74. package/src/hooks/usePasswordValidation.ts +127 -127
  75. package/src/hooks/usePublicAuthSettings.ts +149 -149
  76. package/src/hooks/useSessionExpiration.ts +101 -101
  77. package/src/hooks/useViabilitySession.ts +336 -336
  78. package/src/index.ts +60 -60
  79. package/src/lib/api-handler.ts +643 -643
  80. package/src/lib/app-slug.ts +178 -178
  81. package/src/lib/geolocation.ts +265 -265
  82. package/src/lib/idp-fetch.ts +110 -110
  83. package/src/lib/jwt-decode.ts +82 -82
  84. package/src/lib/roles.ts +177 -177
  85. package/src/lib/site-logger.ts +245 -245
  86. package/src/lib/standardized-client-api.ts +901 -901
  87. package/src/lib/test-aware-get-token.ts +41 -41
  88. package/src/lib/user-agent-parser.ts +252 -252
  89. package/src/logging/api/admin-analytics.ts +51 -51
  90. package/src/logging/api/audit-log.ts +53 -53
  91. package/src/logging/components/AdminAnalyticsLayout.tsx +49 -49
  92. package/src/logging/components/AuditLogViewer.tsx +125 -125
  93. package/src/logging/components/ErrorMetricsCard.tsx +98 -98
  94. package/src/logging/components/HealthMetricsCard.tsx +70 -70
  95. package/src/logging/hooks/useAdminAnalytics.ts +22 -22
  96. package/src/logging/hooks/useAuditLog.ts +24 -24
  97. package/src/logging/hooks/useErrorMetrics.ts +40 -40
  98. package/src/logging/hooks/useHealthMetrics.ts +44 -44
  99. package/src/logging/index.ts +18 -18
  100. package/src/logging/types/analytics.ts +81 -81
  101. package/src/logging/types/audit.ts +31 -31
  102. package/src/logging/types/index.ts +3 -3
  103. package/src/middleware/create-middleware.ts +663 -663
  104. package/src/middleware/rbac-check.ts +279 -279
  105. package/src/middleware/twofa-presets.ts +224 -224
  106. package/src/pages/admin-login/page.tsx +221 -221
  107. package/src/pages/admin-page-permissions/PagePermissionsAdminPage.tsx +527 -527
  108. package/src/pages/admin-page-permissions/index.ts +7 -7
  109. package/src/pages/admin-roles/RolesAdminPage.tsx +533 -533
  110. package/src/pages/admin-roles/modals.tsx +469 -469
  111. package/src/pages/client-admin/ClientSiteAdminPage.tsx +382 -382
  112. package/src/pages/client-admin/index.ts +33 -33
  113. package/src/pages/coming-soon/page.tsx +83 -83
  114. package/src/pages/login/page.tsx +456 -456
  115. package/src/pages/profile/EnhancedProfilePage.tsx +485 -485
  116. package/src/pages/profile/index.ts +9 -9
  117. package/src/pages/profile/page.tsx +166 -166
  118. package/src/pages/recovery/page.tsx +234 -234
  119. package/src/pages/roles/MyRolesPage.tsx +211 -211
  120. package/src/pages/roles/components.tsx +294 -294
  121. package/src/pages/roles/index.ts +17 -17
  122. package/src/pages/security/EnhancedSecurityPage.tsx +565 -565
  123. package/src/pages/security/index.ts +9 -9
  124. package/src/pages/security/page.tsx +507 -507
  125. package/src/pages/settings/EnhancedSettingsPage.tsx +642 -642
  126. package/src/pages/settings/index.ts +9 -9
  127. package/src/pages/settings/page.tsx +47 -47
  128. package/src/pages/showcase/ShowcasePage.tsx +532 -532
  129. package/src/pages/showcase/index.ts +13 -13
  130. package/src/pages/test-env/EmergencyLogoutPage.tsx +180 -180
  131. package/src/pages/test-env/JwtInspectPage.tsx +456 -456
  132. package/src/pages/test-env/RefreshTokenPage.tsx +157 -157
  133. package/src/pages/test-env/TestEnvPage.tsx +118 -118
  134. package/src/pages/test-env/index.ts +25 -25
  135. package/src/pages/verify-code/page.tsx +652 -652
  136. package/src/routes/account/update-phone.ts +13 -13
  137. package/src/routes/auth/logout.ts +108 -108
  138. package/src/routes/auth/nextauth.ts +45 -45
  139. package/src/routes/auth/settings.ts +75 -75
  140. package/src/routes/auth/viability.ts +224 -224
  141. package/src/server/auth-guard.ts +170 -170
  142. package/src/server/slim-middleware.ts +117 -117
  143. package/src/server/with-auth.ts +93 -93
  144. package/src/stores/authStore.ts +1899 -1899
  145. package/src/templates/instrumentation.ts +41 -41
  146. package/src/utils/logout.ts +30 -30
  147. package/src/vibe/client.ts +590 -590
  148. package/src/vibe/enterprise-auth.ts +208 -208
  149. package/src/vibe/errors.ts +185 -185
  150. package/src/vibe/generic.ts +431 -431
  151. package/src/vibe/hooks/index.ts +367 -367
  152. package/src/vibe/index.ts +132 -132
  153. package/src/vibe/sessions.ts +551 -551
  154. package/src/vibe/types.ts +577 -577
@@ -1,58 +1,58 @@
1
- 'use client';
2
-
3
- import React from 'react';
4
-
5
- export interface BetaBadgeProps {
6
- /** Text to display (default: 'beta') */
7
- text?: string;
8
- /** Additional CSS classes */
9
- className?: string;
10
- /** Badge variant */
11
- variant?: 'subtle' | 'outlined' | 'solid';
12
- }
13
-
14
- /**
15
- * A subtle badge component for indicating pre-release status.
16
- *
17
- * Controlled by NEXT_PUBLIC_SHOW_BETA_BADGE env var.
18
- * When env var is not 'true', renders nothing.
19
- *
20
- * @example
21
- * ```tsx
22
- * // In your header, next to logo
23
- * <Logo />
24
- * <BetaBadge />
25
- *
26
- * // Custom text
27
- * <BetaBadge text="preview" />
28
- *
29
- * // Different variant
30
- * <BetaBadge variant="outlined" text="coming soon" />
31
- * ```
32
- */
33
- export function BetaBadge({
34
- text = 'beta',
35
- className = '',
36
- variant = 'subtle'
37
- }: BetaBadgeProps) {
38
- // Check env var - only render if explicitly enabled
39
- if (process.env.NEXT_PUBLIC_SHOW_BETA_BADGE !== 'true') {
40
- return null;
41
- }
42
-
43
- const baseStyles = 'inline-flex items-center px-2 py-0.5 text-xs font-medium rounded-full lowercase tracking-wide';
44
-
45
- const variantStyles = {
46
- subtle: 'bg-gray-100 text-gray-500 dark:bg-gray-800 dark:text-gray-400',
47
- outlined: 'border border-gray-300 text-gray-500 dark:border-gray-600 dark:text-gray-400',
48
- solid: 'bg-gray-500 text-white dark:bg-gray-600',
49
- };
50
-
51
- return (
52
- <span className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
53
- {text}
54
- </span>
55
- );
56
- }
57
-
58
- export default BetaBadge;
1
+ 'use client';
2
+
3
+ import React from 'react';
4
+
5
+ export interface BetaBadgeProps {
6
+ /** Text to display (default: 'beta') */
7
+ text?: string;
8
+ /** Additional CSS classes */
9
+ className?: string;
10
+ /** Badge variant */
11
+ variant?: 'subtle' | 'outlined' | 'solid';
12
+ }
13
+
14
+ /**
15
+ * A subtle badge component for indicating pre-release status.
16
+ *
17
+ * Controlled by NEXT_PUBLIC_SHOW_BETA_BADGE env var.
18
+ * When env var is not 'true', renders nothing.
19
+ *
20
+ * @example
21
+ * ```tsx
22
+ * // In your header, next to logo
23
+ * <Logo />
24
+ * <BetaBadge />
25
+ *
26
+ * // Custom text
27
+ * <BetaBadge text="preview" />
28
+ *
29
+ * // Different variant
30
+ * <BetaBadge variant="outlined" text="coming soon" />
31
+ * ```
32
+ */
33
+ export function BetaBadge({
34
+ text = 'beta',
35
+ className = '',
36
+ variant = 'subtle'
37
+ }: BetaBadgeProps) {
38
+ // Check env var - only render if explicitly enabled
39
+ if (process.env.NEXT_PUBLIC_SHOW_BETA_BADGE !== 'true') {
40
+ return null;
41
+ }
42
+
43
+ const baseStyles = 'inline-flex items-center px-2 py-0.5 text-xs font-medium rounded-full lowercase tracking-wide';
44
+
45
+ const variantStyles = {
46
+ subtle: 'bg-gray-100 text-gray-500 dark:bg-gray-800 dark:text-gray-400',
47
+ outlined: 'border border-gray-300 text-gray-500 dark:border-gray-600 dark:text-gray-400',
48
+ solid: 'bg-gray-500 text-white dark:bg-gray-600',
49
+ };
50
+
51
+ return (
52
+ <span className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
53
+ {text}
54
+ </span>
55
+ );
56
+ }
57
+
58
+ export default BetaBadge;
@@ -1,93 +1,93 @@
1
- 'use client';
2
-
3
- import React from 'react';
4
-
5
- export interface FooterProps {
6
- /** Company or product name (default: 'PayEz') */
7
- companyName?: string;
8
- /** Start year for copyright range (shows "2024-2025" format if provided) */
9
- startYear?: number;
10
- /** Additional links to display */
11
- links?: Array<{ label: string; href: string }>;
12
- /** Additional CSS classes */
13
- className?: string;
14
- /** Variant style */
15
- variant?: 'minimal' | 'standard';
16
- }
17
-
18
- /**
19
- * A themeable footer component with dynamic copyright year.
20
- *
21
- * @example
22
- * ```tsx
23
- * // Minimal footer
24
- * <Footer />
25
- *
26
- * // With company name and start year
27
- * <Footer companyName="Acme Inc" startYear={2020} />
28
- *
29
- * // With links
30
- * <Footer
31
- * links={[
32
- * { label: 'Privacy', href: '/privacy' },
33
- * { label: 'Terms', href: '/terms' }
34
- * ]}
35
- * />
36
- * ```
37
- */
38
- export function Footer({
39
- companyName = 'PayEz',
40
- startYear,
41
- links = [],
42
- className = '',
43
- variant = 'minimal'
44
- }: FooterProps) {
45
- const currentYear = new Date().getFullYear();
46
- const yearDisplay = startYear && startYear < currentYear
47
- ? `${startYear}-${currentYear}`
48
- : `${currentYear}`;
49
-
50
- const baseStyles = 'w-full py-4 text-sm';
51
-
52
- const variantStyles = {
53
- minimal: 'text-center text-gray-500 dark:text-gray-400',
54
- standard: 'border-t border-gray-200 dark:border-gray-700 text-gray-500 dark:text-gray-400'
55
- };
56
-
57
- if (variant === 'minimal') {
58
- return (
59
- <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
60
- <p>
61
- &copy; {yearDisplay} {companyName}. All rights reserved.
62
- </p>
63
- </footer>
64
- );
65
- }
66
-
67
- return (
68
- <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
69
- <div className="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8">
70
- <div className="flex flex-col sm:flex-row justify-between items-center gap-4">
71
- <p>
72
- &copy; {yearDisplay} {companyName}. All rights reserved.
73
- </p>
74
- {links.length > 0 && (
75
- <nav className="flex gap-4" aria-label="Footer links">
76
- {links.map((link, index) => (
77
- <a
78
- key={`${index}-${link.label}`}
79
- href={link.href}
80
- className="hover:text-gray-700 dark:hover:text-gray-200 focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 dark:focus:ring-offset-gray-900 rounded transition-colors"
81
- >
82
- {link.label}
83
- </a>
84
- ))}
85
- </nav>
86
- )}
87
- </div>
88
- </div>
89
- </footer>
90
- );
91
- }
92
-
93
- export default Footer;
1
+ 'use client';
2
+
3
+ import React from 'react';
4
+
5
+ export interface FooterProps {
6
+ /** Company or product name (default: 'PayEz') */
7
+ companyName?: string;
8
+ /** Start year for copyright range (shows "2024-2025" format if provided) */
9
+ startYear?: number;
10
+ /** Additional links to display */
11
+ links?: Array<{ label: string; href: string }>;
12
+ /** Additional CSS classes */
13
+ className?: string;
14
+ /** Variant style */
15
+ variant?: 'minimal' | 'standard';
16
+ }
17
+
18
+ /**
19
+ * A themeable footer component with dynamic copyright year.
20
+ *
21
+ * @example
22
+ * ```tsx
23
+ * // Minimal footer
24
+ * <Footer />
25
+ *
26
+ * // With company name and start year
27
+ * <Footer companyName="Acme Inc" startYear={2020} />
28
+ *
29
+ * // With links
30
+ * <Footer
31
+ * links={[
32
+ * { label: 'Privacy', href: '/privacy' },
33
+ * { label: 'Terms', href: '/terms' }
34
+ * ]}
35
+ * />
36
+ * ```
37
+ */
38
+ export function Footer({
39
+ companyName = 'PayEz',
40
+ startYear,
41
+ links = [],
42
+ className = '',
43
+ variant = 'minimal'
44
+ }: FooterProps) {
45
+ const currentYear = new Date().getFullYear();
46
+ const yearDisplay = startYear && startYear < currentYear
47
+ ? `${startYear}-${currentYear}`
48
+ : `${currentYear}`;
49
+
50
+ const baseStyles = 'w-full py-4 text-sm';
51
+
52
+ const variantStyles = {
53
+ minimal: 'text-center text-gray-500 dark:text-gray-400',
54
+ standard: 'border-t border-gray-200 dark:border-gray-700 text-gray-500 dark:text-gray-400'
55
+ };
56
+
57
+ if (variant === 'minimal') {
58
+ return (
59
+ <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
60
+ <p>
61
+ &copy; {yearDisplay} {companyName}. All rights reserved.
62
+ </p>
63
+ </footer>
64
+ );
65
+ }
66
+
67
+ return (
68
+ <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
69
+ <div className="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8">
70
+ <div className="flex flex-col sm:flex-row justify-between items-center gap-4">
71
+ <p>
72
+ &copy; {yearDisplay} {companyName}. All rights reserved.
73
+ </p>
74
+ {links.length > 0 && (
75
+ <nav className="flex gap-4" aria-label="Footer links">
76
+ {links.map((link, index) => (
77
+ <a
78
+ key={`${index}-${link.label}`}
79
+ href={link.href}
80
+ className="hover:text-gray-700 dark:hover:text-gray-200 focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 dark:focus:ring-offset-gray-900 rounded transition-colors"
81
+ >
82
+ {link.label}
83
+ </a>
84
+ ))}
85
+ </nav>
86
+ )}
87
+ </div>
88
+ </div>
89
+ </footer>
90
+ );
91
+ }
92
+
93
+ export default Footer;
package/src/config/env.ts CHANGED
@@ -1,57 +1,57 @@
1
- export const ENV_CONFIG = {
2
- CLIENT_ID: process.env.CLIENT_ID,
3
- INTERNAL_URL: process.env.IDP_URL,
4
- IDP_CLIENT_ID: (() => { const raw = process.env.NEXT_PUBLIC_IDP_CLIENT_ID || process.env.IDP_CLIENT_ID; const n = raw ? parseInt(raw, 10) : undefined; return Number.isFinite(n as any) ? (n as number) : undefined; })(),
5
- IDP_URL: process.env.IDP_URL,
6
- API_URL: process.env.IDP_URL,
7
- PAYEZ_CORE_BASE_URL: process.env.NEXT_PUBLIC_PAYEZ_CORE_BASE_URL,
8
- SUPPORT_EMAIL: 'support@PayEz.net',
9
- LOG_LEVEL: process.env.LOG_LEVEL || 'info',
10
- LOG_CONSOLE: process.env.LOG_CONSOLE === 'true' || process.env.NODE_ENV === 'development',
11
- GRAYLOG_HOST: process.env.GRAYLOG_HOST || '10.6.10.5',
12
- GRAYLOG_PORT: parseInt(process.env.GRAYLOG_PORT || '12201'),
13
-
14
- // Redis key prefix for multi-tenant session isolation
15
- // Each application should have a unique prefix to prevent session conflicts
16
- // Example: 'cryptaply:', 'website-membership:', 'myapp:'
17
- // Leave empty ('') for backward compatibility
18
- REDIS_KEY_PREFIX: process.env.REDIS_KEY_PREFIX || '',
19
-
20
- // Redirect URLs - configurable per-tenant
21
- // LOGOUT_REDIRECT_URL: Where to redirect after logout (default: '/')
22
- // UNAUTHENTICATED_REDIRECT_URL: Where to redirect unauthenticated users from root (default: '/account-auth/login')
23
- LOGOUT_REDIRECT_URL: process.env.LOGOUT_REDIRECT_URL || '/',
24
- UNAUTHENTICATED_REDIRECT_URL: process.env.UNAUTHENTICATED_REDIRECT_URL || '/account-auth/login',
25
- } as const;
26
-
27
- export const API_ENDPOINTS = {
28
- account: {
29
- profile: '/api/account/profile',
30
- updateProfile: '/api/account/profile',
31
- maskedInfo: '/api/account/masked-info',
32
- sendResetCode: '/api/account/send-reset-code',
33
- verifyResetCode: '/api/account/verify-reset-code',
34
- resetPassword: '/api/account/reset-password',
35
- changePassword: '/api/account/change-password',
36
- validatePassword: '/api/account/validate-password'
37
- },
38
- externalAuth: {
39
- login: '/api/ExternalAuth/login',
40
- refresh: '/api/ExternalAuth/refresh',
41
- validate: '/api/ExternalAuth/validate',
42
- verifyCode: '/api/ExternalAuth/verify-code',
43
- revoke: '/api/ExternalAuth/revoke',
44
- roles: (username: string) => `/api/ExternalAuth/roles/${username}`,
45
- jwks: '/api/ExternalAuth/.well-known/jwks.json',
46
- openidConfig: '/api/ExternalAuth/.well-known/openid-configuration',
47
- passwordless: {
48
- sms: { start: '/api/ExternalAuth/passwordless/sms/start', login: '/api/ExternalAuth/passwordless/sms/login', resend: '/api/ExternalAuth/passwordless/sms/resend' },
49
- email: { start: '/api/ExternalAuth/passwordless/email/start', login: '/api/ExternalAuth/passwordless/email/login', resend: '/api/ExternalAuth/passwordless/email/resend' }
50
- },
51
- lead: { registration: '/api/ExternalAuth/lead/registration', verify: '/api/ExternalAuth/lead/verify' }
52
- },
53
- progressiveAuth: {
54
- step1: '/api/ProgressiveAuth/step1', step2: '/api/ProgressiveAuth/step2', step3: '/api/ProgressiveAuth/step3', step4: '/api/ProgressiveAuth/step4', step5: '/api/ProgressiveAuth/step5', verifyEmail: '/api/ProgressiveAuth/verify-email'
55
- },
56
- azureAuth: { login: '/auth/azure/login', logout: '/auth/azure/logout' }
57
- } as const;
1
+ export const ENV_CONFIG = {
2
+ CLIENT_ID: process.env.CLIENT_ID,
3
+ INTERNAL_URL: process.env.IDP_URL,
4
+ IDP_CLIENT_ID: (() => { const raw = process.env.NEXT_PUBLIC_IDP_CLIENT_ID || process.env.IDP_CLIENT_ID; const n = raw ? parseInt(raw, 10) : undefined; return Number.isFinite(n as any) ? (n as number) : undefined; })(),
5
+ IDP_URL: process.env.IDP_URL,
6
+ API_URL: process.env.IDP_URL,
7
+ PAYEZ_CORE_BASE_URL: process.env.NEXT_PUBLIC_PAYEZ_CORE_BASE_URL,
8
+ SUPPORT_EMAIL: 'support@PayEz.net',
9
+ LOG_LEVEL: process.env.LOG_LEVEL || 'info',
10
+ LOG_CONSOLE: process.env.LOG_CONSOLE === 'true' || process.env.NODE_ENV === 'development',
11
+ GRAYLOG_HOST: process.env.GRAYLOG_HOST || '10.6.10.5',
12
+ GRAYLOG_PORT: parseInt(process.env.GRAYLOG_PORT || '12201'),
13
+
14
+ // Redis key prefix for multi-tenant session isolation
15
+ // Each application should have a unique prefix to prevent session conflicts
16
+ // Example: 'cryptaply:', 'website-membership:', 'myapp:'
17
+ // Leave empty ('') for backward compatibility
18
+ REDIS_KEY_PREFIX: process.env.REDIS_KEY_PREFIX || '',
19
+
20
+ // Redirect URLs - configurable per-tenant
21
+ // LOGOUT_REDIRECT_URL: Where to redirect after logout (default: '/')
22
+ // UNAUTHENTICATED_REDIRECT_URL: Where to redirect unauthenticated users from root (default: '/account-auth/login')
23
+ LOGOUT_REDIRECT_URL: process.env.LOGOUT_REDIRECT_URL || '/',
24
+ UNAUTHENTICATED_REDIRECT_URL: process.env.UNAUTHENTICATED_REDIRECT_URL || '/account-auth/login',
25
+ } as const;
26
+
27
+ export const API_ENDPOINTS = {
28
+ account: {
29
+ profile: '/api/account/profile',
30
+ updateProfile: '/api/account/profile',
31
+ maskedInfo: '/api/account/masked-info',
32
+ sendResetCode: '/api/account/send-reset-code',
33
+ verifyResetCode: '/api/account/verify-reset-code',
34
+ resetPassword: '/api/account/reset-password',
35
+ changePassword: '/api/account/change-password',
36
+ validatePassword: '/api/account/validate-password'
37
+ },
38
+ externalAuth: {
39
+ login: '/api/ExternalAuth/login',
40
+ refresh: '/api/ExternalAuth/refresh',
41
+ validate: '/api/ExternalAuth/validate',
42
+ verifyCode: '/api/ExternalAuth/verify-code',
43
+ revoke: '/api/ExternalAuth/revoke',
44
+ roles: (username: string) => `/api/ExternalAuth/roles/${username}`,
45
+ jwks: '/api/ExternalAuth/.well-known/jwks.json',
46
+ openidConfig: '/api/ExternalAuth/.well-known/openid-configuration',
47
+ passwordless: {
48
+ sms: { start: '/api/ExternalAuth/passwordless/sms/start', login: '/api/ExternalAuth/passwordless/sms/login', resend: '/api/ExternalAuth/passwordless/sms/resend' },
49
+ email: { start: '/api/ExternalAuth/passwordless/email/start', login: '/api/ExternalAuth/passwordless/email/login', resend: '/api/ExternalAuth/passwordless/email/resend' }
50
+ },
51
+ lead: { registration: '/api/ExternalAuth/lead/registration', verify: '/api/ExternalAuth/lead/verify' }
52
+ },
53
+ progressiveAuth: {
54
+ step1: '/api/ProgressiveAuth/step1', step2: '/api/ProgressiveAuth/step2', step3: '/api/ProgressiveAuth/step3', step4: '/api/ProgressiveAuth/step4', step5: '/api/ProgressiveAuth/step5', verifyEmail: '/api/ProgressiveAuth/verify-email'
55
+ },
56
+ azureAuth: { login: '/auth/azure/login', logout: '/auth/azure/logout' }
57
+ } as const;
@@ -1,62 +1,62 @@
1
- import { getLoggingConfigSync, startConfigWatching, addConfigWatcher } from './logging-config';
2
- import { LoggingConfig } from '../types/logging';
3
- import { createVibeLogTransport } from './vibe-log-transport';
4
-
5
- let loggingConfig: LoggingConfig = getLoggingConfigSync();
6
- startConfigWatching();
7
-
8
- const isEdgeRuntime = (): boolean => {
9
- return typeof (globalThis as any).EdgeRuntime !== 'undefined' || process.env.NEXT_RUNTIME === 'edge';
10
- };
11
- const isBrowser = (): boolean => typeof window !== 'undefined';
12
-
13
- interface Logger { error: (message: string, meta?: any) => void; warn: (message: string, meta?: any) => void; info: (message: string, meta?: any) => void; http: (message: string, meta?: any) => void; debug: (message: string, meta?: any) => void; }
14
-
15
- class EdgeLogger implements Logger {
16
- private logLevel: string = loggingConfig.logLevel; private levelOrder: string[] = Object.keys(loggingConfig.levels);
17
- private shouldLog(level: string): boolean { const currentLevelIndex = this.levelOrder.indexOf(this.logLevel); const messageLevelIndex = this.levelOrder.indexOf(level); return messageLevelIndex <= currentLevelIndex; }
18
- private format(level: string, message: string, meta?: any) { const timestamp = new Date().toISOString(); const metaString = meta ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level.toUpperCase()}: ${message}${metaString}`; }
19
- error(m: string, meta?: any) { if (this.shouldLog('error')) console.error(this.format('error', m, meta)); }
20
- warn(m: string, meta?: any) { if (this.shouldLog('warn')) console.warn(this.format('warn', m, meta)); }
21
- info(m: string, meta?: any) { if (this.shouldLog('info')) console.info(this.format('info', m, meta)); }
22
- http(m: string, meta?: any) { if (this.shouldLog('http')) console.log(this.format('http', m, meta)); }
23
- debug(m: string, meta?: any) { if (this.shouldLog('debug')) console.debug(this.format('debug', m, meta)); }
24
- }
25
-
26
- const createLogger = (): any => {
27
- if (isEdgeRuntime()) return new EdgeLogger();
28
- if (isBrowser()) return { error: (m: string, meta?: any) => console.error(m, meta), warn: (m: string, meta?: any) => console.warn(m, meta), info: (m: string, meta?: any) => console.info(m, meta), http: (m: string, meta?: any) => console.log(m, meta), debug: (m: string, meta?: any) => console.debug(m, meta) };
29
- try {
30
- const winston = require('winston');
31
- const transports: any[] = [];
32
- if (loggingConfig.console.enabled) {
33
- transports.push(new winston.transports.Console({ format: winston.format.combine(winston.format.colorize({ all: true }), winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), winston.format.printf(({ timestamp, level, message, ...meta }: any) => { const metaString = Object.keys(meta).length > 0 ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level}: ${message}${metaString}`; })) }));
34
- }
35
- // Add Vibe log transport (sends warn/error to Redis for drain to Vibe)
36
- const vibeTransport = createVibeLogTransport({ minLevel: 'warn' });
37
- if (vibeTransport) {
38
- transports.push(vibeTransport);
39
- console.log('[LOGGER] Vibe Redis transport ENABLED - logs will buffer to Redis');
40
- } else {
41
- console.log('[LOGGER] Vibe Redis transport DISABLED - no REDIS_URL configured');
42
- }
43
- return winston.createLogger({ level: loggingConfig.logLevel, levels: loggingConfig.levels, format: winston.format.combine(winston.format.timestamp(), winston.format.errors({ stack: true }), winston.format.json()), transports, exitOnError: false });
44
- } catch (error) { console.warn('Failed to initialize Winston logger, falling back to EdgeLogger:', error); return new EdgeLogger(); }
45
- };
46
-
47
- let logger: any;
48
- if (!(globalThis.process as any)?.browser) {
49
- logger = createLogger();
50
- addConfigWatcher((updatedConfig) => { loggingConfig = updatedConfig; if (logger && logger.level !== undefined) { logger.level = loggingConfig.logLevel; } });
51
- } else { logger = console; }
52
-
53
- export const log = { error: (m: string, meta?: any) => logger.error(m, meta), warn: (m: string, meta?: any) => logger.warn(m, meta), info: (m: string, meta?: any) => logger.info(m, meta), http: (m: string, meta?: any) => logger.http(m, meta), debug: (m: string, meta?: any) => logger.debug(m, meta) };
54
- export { logger };
55
- export const authLogger = { error: (m: string, meta?: any) => logger.error(`[AUTH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[AUTH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[AUTH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[AUTH] ${m}`, meta) };
56
- export const idpLogger = { error: (m: string, meta?: any) => logger.error(`[IDP] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[IDP] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[IDP] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[IDP] ${m}`, meta) };
57
- export const apiLogger = { error: (m: string, meta?: any) => logger.error(`[API] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[API] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[API] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[API] ${m}`, meta) };
58
- export const circuitBreakerLogger = { error: (m: string, meta?: any) => logger.error(`[CIRCUIT-BREAKER] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[CIRCUIT-BREAKER] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[CIRCUIT-BREAKER] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[CIRCUIT-BREAKER] ${m}`, meta) };
59
- export const tokenLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN] ${m}`, meta) };
60
- export const tokenSyncLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-SYNC] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-SYNC] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-SYNC] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-SYNC] ${m}`, meta) };
61
- export const tokenRefreshLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-REFRESH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-REFRESH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-REFRESH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-REFRESH] ${m}`, meta) };
62
- export const redisLogger = { error: (m: string, meta?: any) => logger.error(`[REDIS] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[REDIS] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[REDIS] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[REDIS] ${m}`, meta) };
1
+ import { getLoggingConfigSync, startConfigWatching, addConfigWatcher } from './logging-config';
2
+ import { LoggingConfig } from '../types/logging';
3
+ import { createVibeLogTransport } from './vibe-log-transport';
4
+
5
+ let loggingConfig: LoggingConfig = getLoggingConfigSync();
6
+ startConfigWatching();
7
+
8
+ const isEdgeRuntime = (): boolean => {
9
+ return typeof (globalThis as any).EdgeRuntime !== 'undefined' || process.env.NEXT_RUNTIME === 'edge';
10
+ };
11
+ const isBrowser = (): boolean => typeof window !== 'undefined';
12
+
13
+ interface Logger { error: (message: string, meta?: any) => void; warn: (message: string, meta?: any) => void; info: (message: string, meta?: any) => void; http: (message: string, meta?: any) => void; debug: (message: string, meta?: any) => void; }
14
+
15
+ class EdgeLogger implements Logger {
16
+ private logLevel: string = loggingConfig.logLevel; private levelOrder: string[] = Object.keys(loggingConfig.levels);
17
+ private shouldLog(level: string): boolean { const currentLevelIndex = this.levelOrder.indexOf(this.logLevel); const messageLevelIndex = this.levelOrder.indexOf(level); return messageLevelIndex <= currentLevelIndex; }
18
+ private format(level: string, message: string, meta?: any) { const timestamp = new Date().toISOString(); const metaString = meta ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level.toUpperCase()}: ${message}${metaString}`; }
19
+ error(m: string, meta?: any) { if (this.shouldLog('error')) console.error(this.format('error', m, meta)); }
20
+ warn(m: string, meta?: any) { if (this.shouldLog('warn')) console.warn(this.format('warn', m, meta)); }
21
+ info(m: string, meta?: any) { if (this.shouldLog('info')) console.info(this.format('info', m, meta)); }
22
+ http(m: string, meta?: any) { if (this.shouldLog('http')) console.log(this.format('http', m, meta)); }
23
+ debug(m: string, meta?: any) { if (this.shouldLog('debug')) console.debug(this.format('debug', m, meta)); }
24
+ }
25
+
26
+ const createLogger = (): any => {
27
+ if (isEdgeRuntime()) return new EdgeLogger();
28
+ if (isBrowser()) return { error: (m: string, meta?: any) => console.error(m, meta), warn: (m: string, meta?: any) => console.warn(m, meta), info: (m: string, meta?: any) => console.info(m, meta), http: (m: string, meta?: any) => console.log(m, meta), debug: (m: string, meta?: any) => console.debug(m, meta) };
29
+ try {
30
+ const winston = require('winston');
31
+ const transports: any[] = [];
32
+ if (loggingConfig.console.enabled) {
33
+ transports.push(new winston.transports.Console({ format: winston.format.combine(winston.format.colorize({ all: true }), winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), winston.format.printf(({ timestamp, level, message, ...meta }: any) => { const metaString = Object.keys(meta).length > 0 ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level}: ${message}${metaString}`; })) }));
34
+ }
35
+ // Add Vibe log transport (sends warn/error to Redis for drain to Vibe)
36
+ const vibeTransport = createVibeLogTransport({ minLevel: 'warn' });
37
+ if (vibeTransport) {
38
+ transports.push(vibeTransport);
39
+ console.log('[LOGGER] Vibe Redis transport ENABLED - logs will buffer to Redis');
40
+ } else {
41
+ console.log('[LOGGER] Vibe Redis transport DISABLED - no REDIS_URL configured');
42
+ }
43
+ return winston.createLogger({ level: loggingConfig.logLevel, levels: loggingConfig.levels, format: winston.format.combine(winston.format.timestamp(), winston.format.errors({ stack: true }), winston.format.json()), transports, exitOnError: false });
44
+ } catch (error) { console.warn('Failed to initialize Winston logger, falling back to EdgeLogger:', error); return new EdgeLogger(); }
45
+ };
46
+
47
+ let logger: any;
48
+ if (!(globalThis.process as any)?.browser) {
49
+ logger = createLogger();
50
+ addConfigWatcher((updatedConfig) => { loggingConfig = updatedConfig; if (logger && logger.level !== undefined) { logger.level = loggingConfig.logLevel; } });
51
+ } else { logger = console; }
52
+
53
+ export const log = { error: (m: string, meta?: any) => logger.error(m, meta), warn: (m: string, meta?: any) => logger.warn(m, meta), info: (m: string, meta?: any) => logger.info(m, meta), http: (m: string, meta?: any) => logger.http(m, meta), debug: (m: string, meta?: any) => logger.debug(m, meta) };
54
+ export { logger };
55
+ export const authLogger = { error: (m: string, meta?: any) => logger.error(`[AUTH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[AUTH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[AUTH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[AUTH] ${m}`, meta) };
56
+ export const idpLogger = { error: (m: string, meta?: any) => logger.error(`[IDP] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[IDP] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[IDP] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[IDP] ${m}`, meta) };
57
+ export const apiLogger = { error: (m: string, meta?: any) => logger.error(`[API] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[API] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[API] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[API] ${m}`, meta) };
58
+ export const circuitBreakerLogger = { error: (m: string, meta?: any) => logger.error(`[CIRCUIT-BREAKER] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[CIRCUIT-BREAKER] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[CIRCUIT-BREAKER] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[CIRCUIT-BREAKER] ${m}`, meta) };
59
+ export const tokenLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN] ${m}`, meta) };
60
+ export const tokenSyncLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-SYNC] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-SYNC] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-SYNC] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-SYNC] ${m}`, meta) };
61
+ export const tokenRefreshLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-REFRESH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-REFRESH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-REFRESH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-REFRESH] ${m}`, meta) };
62
+ export const redisLogger = { error: (m: string, meta?: any) => logger.error(`[REDIS] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[REDIS] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[REDIS] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[REDIS] ${m}`, meta) };