@payez/next-mvp 4.1.8 → 4.1.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (155) hide show
  1. package/README.md +792 -792
  2. package/dist/auth/better-auth.js +15 -3
  3. package/dist/components/account/MobileNavDrawer.js +18 -18
  4. package/dist/components/account/UserAvatarMenu.js +1 -1
  5. package/dist/components/admin/AlertSettingsTab.js +40 -40
  6. package/dist/components/admin/LoggingSettingsTab.js +28 -28
  7. package/dist/lib/idp-fetch.js +9 -25
  8. package/dist/pages/login/page.js +28 -28
  9. package/dist/pages/settings/EnhancedSettingsPage.js +17 -17
  10. package/package.json +1 -1
  11. package/scripts/dev-broker.ps1 +35 -35
  12. package/scripts/dev-local.ps1 +45 -45
  13. package/src/api/auth-handler.ts +548 -548
  14. package/src/api-handlers/account/change-password.ts +142 -142
  15. package/src/api-handlers/account/update-phone.ts +79 -79
  16. package/src/api-handlers/account/verify-email.ts +125 -125
  17. package/src/api-handlers/account/verify-sms.ts +125 -125
  18. package/src/api-handlers/admin/analytics.ts +443 -443
  19. package/src/api-handlers/admin/audit.ts +223 -223
  20. package/src/api-handlers/admin/index.ts +63 -63
  21. package/src/api-handlers/admin/redis-sessions.ts +251 -251
  22. package/src/api-handlers/admin/sessions.ts +318 -318
  23. package/src/api-handlers/admin/site-logs.ts +365 -365
  24. package/src/api-handlers/admin/users.ts +242 -242
  25. package/src/api-handlers/admin/vibe-data.ts +324 -324
  26. package/src/api-handlers/auth/refresh.ts +682 -682
  27. package/src/api-handlers/auth/signout.ts +199 -199
  28. package/src/api-handlers/auth/status.ts +20 -20
  29. package/src/api-handlers/auth/update-session.ts +110 -110
  30. package/src/api-handlers/auth/verify-code.ts +112 -112
  31. package/src/api-handlers/session/refresh-viability.ts +36 -36
  32. package/src/api-handlers/test/force-expire.ts +60 -60
  33. package/src/auth/auth-decision.ts +229 -229
  34. package/src/auth/better-auth.ts +15 -3
  35. package/src/auth/route-config.ts +219 -219
  36. package/src/auth/types/auth-types.ts +555 -555
  37. package/src/auth/types/index.ts +7 -7
  38. package/src/auth/utils/idp-client.ts +445 -445
  39. package/src/auth/utils/index.ts +6 -6
  40. package/src/auth/utils/token-utils.ts +243 -243
  41. package/src/client/AuthContext.tsx +143 -143
  42. package/src/client/fetch-with-auth.ts +47 -47
  43. package/src/components/SessionSync.tsx +138 -138
  44. package/src/components/SignalRHealthCheck.tsx +131 -131
  45. package/src/components/account/MobileNavDrawer.tsx +305 -305
  46. package/src/components/account/UserAvatarMenu.tsx +266 -266
  47. package/src/components/account/index.ts +13 -13
  48. package/src/components/admin/AlertSettingsTab.tsx +728 -728
  49. package/src/components/admin/AnalyticsTab.tsx +703 -703
  50. package/src/components/admin/DataBrowserTab.tsx +505 -505
  51. package/src/components/admin/LoggingSettingsTab.tsx +665 -665
  52. package/src/components/admin/SessionsTab.tsx +414 -414
  53. package/src/components/admin/StatsTab.tsx +379 -379
  54. package/src/components/admin/VibeAdminLayout.tsx +187 -187
  55. package/src/components/admin/index.ts +59 -59
  56. package/src/components/auth/FederatedAuthSection.tsx +95 -95
  57. package/src/components/auth/ModeAwareLoginPage.tsx +135 -135
  58. package/src/components/auth/ModeAwareSignupPage.tsx +267 -267
  59. package/src/components/auth/TraditionalAuthSection.tsx +99 -99
  60. package/src/components/recovery/CompleteStep.tsx +36 -36
  61. package/src/components/recovery/InitiateRecoveryStep.tsx +68 -68
  62. package/src/components/recovery/SelectMethodStep.tsx +73 -73
  63. package/src/components/recovery/SetPasswordStep.tsx +97 -97
  64. package/src/components/recovery/VerifyCodeStep.tsx +90 -90
  65. package/src/components/reserved/ReservedRecoveryWarning.tsx +160 -160
  66. package/src/components/reserved/ReservedStatusBox.tsx +118 -118
  67. package/src/components/ui/BetaBadge.tsx +58 -58
  68. package/src/components/ui/Footer.tsx +93 -93
  69. package/src/config/env.ts +57 -57
  70. package/src/config/logger.ts +62 -62
  71. package/src/config/vibe-log-transport.ts +264 -264
  72. package/src/hooks/useAuth.ts +117 -117
  73. package/src/hooks/useAuthSettings.ts +97 -97
  74. package/src/hooks/useAvailableProviders.ts +120 -120
  75. package/src/hooks/usePasswordValidation.ts +127 -127
  76. package/src/hooks/usePublicAuthSettings.ts +149 -149
  77. package/src/hooks/useSessionExpiration.ts +101 -101
  78. package/src/hooks/useViabilitySession.ts +336 -336
  79. package/src/index.ts +60 -60
  80. package/src/lib/api-handler.ts +643 -643
  81. package/src/lib/app-slug.ts +178 -178
  82. package/src/lib/geolocation.ts +265 -265
  83. package/src/lib/idp-fetch.ts +10 -26
  84. package/src/lib/jwt-decode.ts +82 -82
  85. package/src/lib/roles.ts +177 -177
  86. package/src/lib/site-logger.ts +245 -245
  87. package/src/lib/standardized-client-api.ts +901 -901
  88. package/src/lib/test-aware-get-token.ts +41 -41
  89. package/src/lib/user-agent-parser.ts +252 -252
  90. package/src/logging/api/admin-analytics.ts +51 -51
  91. package/src/logging/api/audit-log.ts +53 -53
  92. package/src/logging/components/AdminAnalyticsLayout.tsx +49 -49
  93. package/src/logging/components/AuditLogViewer.tsx +125 -125
  94. package/src/logging/components/ErrorMetricsCard.tsx +98 -98
  95. package/src/logging/components/HealthMetricsCard.tsx +70 -70
  96. package/src/logging/hooks/useAdminAnalytics.ts +22 -22
  97. package/src/logging/hooks/useAuditLog.ts +24 -24
  98. package/src/logging/hooks/useErrorMetrics.ts +40 -40
  99. package/src/logging/hooks/useHealthMetrics.ts +44 -44
  100. package/src/logging/index.ts +18 -18
  101. package/src/logging/types/analytics.ts +81 -81
  102. package/src/logging/types/audit.ts +31 -31
  103. package/src/logging/types/index.ts +3 -3
  104. package/src/middleware/create-middleware.ts +663 -663
  105. package/src/middleware/rbac-check.ts +279 -279
  106. package/src/middleware/twofa-presets.ts +224 -224
  107. package/src/pages/admin-login/page.tsx +221 -221
  108. package/src/pages/admin-page-permissions/PagePermissionsAdminPage.tsx +527 -527
  109. package/src/pages/admin-page-permissions/index.ts +7 -7
  110. package/src/pages/admin-roles/RolesAdminPage.tsx +533 -533
  111. package/src/pages/admin-roles/modals.tsx +469 -469
  112. package/src/pages/client-admin/ClientSiteAdminPage.tsx +382 -382
  113. package/src/pages/client-admin/index.ts +33 -33
  114. package/src/pages/coming-soon/page.tsx +83 -83
  115. package/src/pages/login/page.tsx +456 -456
  116. package/src/pages/profile/EnhancedProfilePage.tsx +485 -485
  117. package/src/pages/profile/index.ts +9 -9
  118. package/src/pages/profile/page.tsx +166 -166
  119. package/src/pages/recovery/page.tsx +234 -234
  120. package/src/pages/roles/MyRolesPage.tsx +211 -211
  121. package/src/pages/roles/components.tsx +294 -294
  122. package/src/pages/roles/index.ts +17 -17
  123. package/src/pages/security/EnhancedSecurityPage.tsx +565 -565
  124. package/src/pages/security/index.ts +9 -9
  125. package/src/pages/security/page.tsx +507 -507
  126. package/src/pages/settings/EnhancedSettingsPage.tsx +642 -642
  127. package/src/pages/settings/index.ts +9 -9
  128. package/src/pages/settings/page.tsx +47 -47
  129. package/src/pages/showcase/ShowcasePage.tsx +532 -532
  130. package/src/pages/showcase/index.ts +13 -13
  131. package/src/pages/test-env/EmergencyLogoutPage.tsx +180 -180
  132. package/src/pages/test-env/JwtInspectPage.tsx +456 -456
  133. package/src/pages/test-env/RefreshTokenPage.tsx +157 -157
  134. package/src/pages/test-env/TestEnvPage.tsx +118 -118
  135. package/src/pages/test-env/index.ts +25 -25
  136. package/src/pages/verify-code/page.tsx +652 -652
  137. package/src/routes/account/update-phone.ts +13 -13
  138. package/src/routes/auth/logout.ts +108 -108
  139. package/src/routes/auth/nextauth.ts +45 -45
  140. package/src/routes/auth/settings.ts +75 -75
  141. package/src/routes/auth/viability.ts +224 -224
  142. package/src/server/auth-guard.ts +170 -170
  143. package/src/server/slim-middleware.ts +117 -117
  144. package/src/server/with-auth.ts +93 -93
  145. package/src/stores/authStore.ts +1899 -1899
  146. package/src/templates/instrumentation.ts +41 -41
  147. package/src/utils/logout.ts +30 -30
  148. package/src/vibe/client.ts +590 -590
  149. package/src/vibe/enterprise-auth.ts +208 -208
  150. package/src/vibe/errors.ts +185 -185
  151. package/src/vibe/generic.ts +431 -431
  152. package/src/vibe/hooks/index.ts +367 -367
  153. package/src/vibe/index.ts +132 -132
  154. package/src/vibe/sessions.ts +551 -551
  155. package/src/vibe/types.ts +577 -577
@@ -1,58 +1,58 @@
1
- 'use client';
2
-
3
- import React from 'react';
4
-
5
- export interface BetaBadgeProps {
6
- /** Text to display (default: 'beta') */
7
- text?: string;
8
- /** Additional CSS classes */
9
- className?: string;
10
- /** Badge variant */
11
- variant?: 'subtle' | 'outlined' | 'solid';
12
- }
13
-
14
- /**
15
- * A subtle badge component for indicating pre-release status.
16
- *
17
- * Controlled by NEXT_PUBLIC_SHOW_BETA_BADGE env var.
18
- * When env var is not 'true', renders nothing.
19
- *
20
- * @example
21
- * ```tsx
22
- * // In your header, next to logo
23
- * <Logo />
24
- * <BetaBadge />
25
- *
26
- * // Custom text
27
- * <BetaBadge text="preview" />
28
- *
29
- * // Different variant
30
- * <BetaBadge variant="outlined" text="coming soon" />
31
- * ```
32
- */
33
- export function BetaBadge({
34
- text = 'beta',
35
- className = '',
36
- variant = 'subtle'
37
- }: BetaBadgeProps) {
38
- // Check env var - only render if explicitly enabled
39
- if (process.env.NEXT_PUBLIC_SHOW_BETA_BADGE !== 'true') {
40
- return null;
41
- }
42
-
43
- const baseStyles = 'inline-flex items-center px-2 py-0.5 text-xs font-medium rounded-full lowercase tracking-wide';
44
-
45
- const variantStyles = {
46
- subtle: 'bg-gray-100 text-gray-500 dark:bg-gray-800 dark:text-gray-400',
47
- outlined: 'border border-gray-300 text-gray-500 dark:border-gray-600 dark:text-gray-400',
48
- solid: 'bg-gray-500 text-white dark:bg-gray-600',
49
- };
50
-
51
- return (
52
- <span className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
53
- {text}
54
- </span>
55
- );
56
- }
57
-
58
- export default BetaBadge;
1
+ 'use client';
2
+
3
+ import React from 'react';
4
+
5
+ export interface BetaBadgeProps {
6
+ /** Text to display (default: 'beta') */
7
+ text?: string;
8
+ /** Additional CSS classes */
9
+ className?: string;
10
+ /** Badge variant */
11
+ variant?: 'subtle' | 'outlined' | 'solid';
12
+ }
13
+
14
+ /**
15
+ * A subtle badge component for indicating pre-release status.
16
+ *
17
+ * Controlled by NEXT_PUBLIC_SHOW_BETA_BADGE env var.
18
+ * When env var is not 'true', renders nothing.
19
+ *
20
+ * @example
21
+ * ```tsx
22
+ * // In your header, next to logo
23
+ * <Logo />
24
+ * <BetaBadge />
25
+ *
26
+ * // Custom text
27
+ * <BetaBadge text="preview" />
28
+ *
29
+ * // Different variant
30
+ * <BetaBadge variant="outlined" text="coming soon" />
31
+ * ```
32
+ */
33
+ export function BetaBadge({
34
+ text = 'beta',
35
+ className = '',
36
+ variant = 'subtle'
37
+ }: BetaBadgeProps) {
38
+ // Check env var - only render if explicitly enabled
39
+ if (process.env.NEXT_PUBLIC_SHOW_BETA_BADGE !== 'true') {
40
+ return null;
41
+ }
42
+
43
+ const baseStyles = 'inline-flex items-center px-2 py-0.5 text-xs font-medium rounded-full lowercase tracking-wide';
44
+
45
+ const variantStyles = {
46
+ subtle: 'bg-gray-100 text-gray-500 dark:bg-gray-800 dark:text-gray-400',
47
+ outlined: 'border border-gray-300 text-gray-500 dark:border-gray-600 dark:text-gray-400',
48
+ solid: 'bg-gray-500 text-white dark:bg-gray-600',
49
+ };
50
+
51
+ return (
52
+ <span className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
53
+ {text}
54
+ </span>
55
+ );
56
+ }
57
+
58
+ export default BetaBadge;
@@ -1,93 +1,93 @@
1
- 'use client';
2
-
3
- import React from 'react';
4
-
5
- export interface FooterProps {
6
- /** Company or product name (default: 'PayEz') */
7
- companyName?: string;
8
- /** Start year for copyright range (shows "2024-2025" format if provided) */
9
- startYear?: number;
10
- /** Additional links to display */
11
- links?: Array<{ label: string; href: string }>;
12
- /** Additional CSS classes */
13
- className?: string;
14
- /** Variant style */
15
- variant?: 'minimal' | 'standard';
16
- }
17
-
18
- /**
19
- * A themeable footer component with dynamic copyright year.
20
- *
21
- * @example
22
- * ```tsx
23
- * // Minimal footer
24
- * <Footer />
25
- *
26
- * // With company name and start year
27
- * <Footer companyName="Acme Inc" startYear={2020} />
28
- *
29
- * // With links
30
- * <Footer
31
- * links={[
32
- * { label: 'Privacy', href: '/privacy' },
33
- * { label: 'Terms', href: '/terms' }
34
- * ]}
35
- * />
36
- * ```
37
- */
38
- export function Footer({
39
- companyName = 'PayEz',
40
- startYear,
41
- links = [],
42
- className = '',
43
- variant = 'minimal'
44
- }: FooterProps) {
45
- const currentYear = new Date().getFullYear();
46
- const yearDisplay = startYear && startYear < currentYear
47
- ? `${startYear}-${currentYear}`
48
- : `${currentYear}`;
49
-
50
- const baseStyles = 'w-full py-4 text-sm';
51
-
52
- const variantStyles = {
53
- minimal: 'text-center text-gray-500 dark:text-gray-400',
54
- standard: 'border-t border-gray-200 dark:border-gray-700 text-gray-500 dark:text-gray-400'
55
- };
56
-
57
- if (variant === 'minimal') {
58
- return (
59
- <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
60
- <p>
61
- &copy; {yearDisplay} {companyName}. All rights reserved.
62
- </p>
63
- </footer>
64
- );
65
- }
66
-
67
- return (
68
- <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
69
- <div className="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8">
70
- <div className="flex flex-col sm:flex-row justify-between items-center gap-4">
71
- <p>
72
- &copy; {yearDisplay} {companyName}. All rights reserved.
73
- </p>
74
- {links.length > 0 && (
75
- <nav className="flex gap-4" aria-label="Footer links">
76
- {links.map((link, index) => (
77
- <a
78
- key={`${index}-${link.label}`}
79
- href={link.href}
80
- className="hover:text-gray-700 dark:hover:text-gray-200 focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 dark:focus:ring-offset-gray-900 rounded transition-colors"
81
- >
82
- {link.label}
83
- </a>
84
- ))}
85
- </nav>
86
- )}
87
- </div>
88
- </div>
89
- </footer>
90
- );
91
- }
92
-
93
- export default Footer;
1
+ 'use client';
2
+
3
+ import React from 'react';
4
+
5
+ export interface FooterProps {
6
+ /** Company or product name (default: 'PayEz') */
7
+ companyName?: string;
8
+ /** Start year for copyright range (shows "2024-2025" format if provided) */
9
+ startYear?: number;
10
+ /** Additional links to display */
11
+ links?: Array<{ label: string; href: string }>;
12
+ /** Additional CSS classes */
13
+ className?: string;
14
+ /** Variant style */
15
+ variant?: 'minimal' | 'standard';
16
+ }
17
+
18
+ /**
19
+ * A themeable footer component with dynamic copyright year.
20
+ *
21
+ * @example
22
+ * ```tsx
23
+ * // Minimal footer
24
+ * <Footer />
25
+ *
26
+ * // With company name and start year
27
+ * <Footer companyName="Acme Inc" startYear={2020} />
28
+ *
29
+ * // With links
30
+ * <Footer
31
+ * links={[
32
+ * { label: 'Privacy', href: '/privacy' },
33
+ * { label: 'Terms', href: '/terms' }
34
+ * ]}
35
+ * />
36
+ * ```
37
+ */
38
+ export function Footer({
39
+ companyName = 'PayEz',
40
+ startYear,
41
+ links = [],
42
+ className = '',
43
+ variant = 'minimal'
44
+ }: FooterProps) {
45
+ const currentYear = new Date().getFullYear();
46
+ const yearDisplay = startYear && startYear < currentYear
47
+ ? `${startYear}-${currentYear}`
48
+ : `${currentYear}`;
49
+
50
+ const baseStyles = 'w-full py-4 text-sm';
51
+
52
+ const variantStyles = {
53
+ minimal: 'text-center text-gray-500 dark:text-gray-400',
54
+ standard: 'border-t border-gray-200 dark:border-gray-700 text-gray-500 dark:text-gray-400'
55
+ };
56
+
57
+ if (variant === 'minimal') {
58
+ return (
59
+ <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
60
+ <p>
61
+ &copy; {yearDisplay} {companyName}. All rights reserved.
62
+ </p>
63
+ </footer>
64
+ );
65
+ }
66
+
67
+ return (
68
+ <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
69
+ <div className="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8">
70
+ <div className="flex flex-col sm:flex-row justify-between items-center gap-4">
71
+ <p>
72
+ &copy; {yearDisplay} {companyName}. All rights reserved.
73
+ </p>
74
+ {links.length > 0 && (
75
+ <nav className="flex gap-4" aria-label="Footer links">
76
+ {links.map((link, index) => (
77
+ <a
78
+ key={`${index}-${link.label}`}
79
+ href={link.href}
80
+ className="hover:text-gray-700 dark:hover:text-gray-200 focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 dark:focus:ring-offset-gray-900 rounded transition-colors"
81
+ >
82
+ {link.label}
83
+ </a>
84
+ ))}
85
+ </nav>
86
+ )}
87
+ </div>
88
+ </div>
89
+ </footer>
90
+ );
91
+ }
92
+
93
+ export default Footer;
package/src/config/env.ts CHANGED
@@ -1,57 +1,57 @@
1
- export const ENV_CONFIG = {
2
- CLIENT_ID: process.env.CLIENT_ID,
3
- INTERNAL_URL: process.env.IDP_URL,
4
- IDP_CLIENT_ID: (() => { const raw = process.env.NEXT_PUBLIC_IDP_CLIENT_ID || process.env.IDP_CLIENT_ID; const n = raw ? parseInt(raw, 10) : undefined; return Number.isFinite(n as any) ? (n as number) : undefined; })(),
5
- IDP_URL: process.env.IDP_URL,
6
- API_URL: process.env.IDP_URL,
7
- PAYEZ_CORE_BASE_URL: process.env.NEXT_PUBLIC_PAYEZ_CORE_BASE_URL,
8
- SUPPORT_EMAIL: 'support@PayEz.net',
9
- LOG_LEVEL: process.env.LOG_LEVEL || 'info',
10
- LOG_CONSOLE: process.env.LOG_CONSOLE === 'true' || process.env.NODE_ENV === 'development',
11
- GRAYLOG_HOST: process.env.GRAYLOG_HOST || '10.6.10.5',
12
- GRAYLOG_PORT: parseInt(process.env.GRAYLOG_PORT || '12201'),
13
-
14
- // Redis key prefix for multi-tenant session isolation
15
- // Each application should have a unique prefix to prevent session conflicts
16
- // Example: 'cryptaply:', 'website-membership:', 'myapp:'
17
- // Leave empty ('') for backward compatibility
18
- REDIS_KEY_PREFIX: process.env.REDIS_KEY_PREFIX || '',
19
-
20
- // Redirect URLs - configurable per-tenant
21
- // LOGOUT_REDIRECT_URL: Where to redirect after logout (default: '/')
22
- // UNAUTHENTICATED_REDIRECT_URL: Where to redirect unauthenticated users from root (default: '/account-auth/login')
23
- LOGOUT_REDIRECT_URL: process.env.LOGOUT_REDIRECT_URL || '/',
24
- UNAUTHENTICATED_REDIRECT_URL: process.env.UNAUTHENTICATED_REDIRECT_URL || '/account-auth/login',
25
- } as const;
26
-
27
- export const API_ENDPOINTS = {
28
- account: {
29
- profile: '/api/account/profile',
30
- updateProfile: '/api/account/profile',
31
- maskedInfo: '/api/account/masked-info',
32
- sendResetCode: '/api/account/send-reset-code',
33
- verifyResetCode: '/api/account/verify-reset-code',
34
- resetPassword: '/api/account/reset-password',
35
- changePassword: '/api/account/change-password',
36
- validatePassword: '/api/account/validate-password'
37
- },
38
- externalAuth: {
39
- login: '/api/ExternalAuth/login',
40
- refresh: '/api/ExternalAuth/refresh',
41
- validate: '/api/ExternalAuth/validate',
42
- verifyCode: '/api/ExternalAuth/verify-code',
43
- revoke: '/api/ExternalAuth/revoke',
44
- roles: (username: string) => `/api/ExternalAuth/roles/${username}`,
45
- jwks: '/api/ExternalAuth/.well-known/jwks.json',
46
- openidConfig: '/api/ExternalAuth/.well-known/openid-configuration',
47
- passwordless: {
48
- sms: { start: '/api/ExternalAuth/passwordless/sms/start', login: '/api/ExternalAuth/passwordless/sms/login', resend: '/api/ExternalAuth/passwordless/sms/resend' },
49
- email: { start: '/api/ExternalAuth/passwordless/email/start', login: '/api/ExternalAuth/passwordless/email/login', resend: '/api/ExternalAuth/passwordless/email/resend' }
50
- },
51
- lead: { registration: '/api/ExternalAuth/lead/registration', verify: '/api/ExternalAuth/lead/verify' }
52
- },
53
- progressiveAuth: {
54
- step1: '/api/ProgressiveAuth/step1', step2: '/api/ProgressiveAuth/step2', step3: '/api/ProgressiveAuth/step3', step4: '/api/ProgressiveAuth/step4', step5: '/api/ProgressiveAuth/step5', verifyEmail: '/api/ProgressiveAuth/verify-email'
55
- },
56
- azureAuth: { login: '/auth/azure/login', logout: '/auth/azure/logout' }
57
- } as const;
1
+ export const ENV_CONFIG = {
2
+ CLIENT_ID: process.env.CLIENT_ID,
3
+ INTERNAL_URL: process.env.IDP_URL,
4
+ IDP_CLIENT_ID: (() => { const raw = process.env.NEXT_PUBLIC_IDP_CLIENT_ID || process.env.IDP_CLIENT_ID; const n = raw ? parseInt(raw, 10) : undefined; return Number.isFinite(n as any) ? (n as number) : undefined; })(),
5
+ IDP_URL: process.env.IDP_URL,
6
+ API_URL: process.env.IDP_URL,
7
+ PAYEZ_CORE_BASE_URL: process.env.NEXT_PUBLIC_PAYEZ_CORE_BASE_URL,
8
+ SUPPORT_EMAIL: 'support@PayEz.net',
9
+ LOG_LEVEL: process.env.LOG_LEVEL || 'info',
10
+ LOG_CONSOLE: process.env.LOG_CONSOLE === 'true' || process.env.NODE_ENV === 'development',
11
+ GRAYLOG_HOST: process.env.GRAYLOG_HOST || '10.6.10.5',
12
+ GRAYLOG_PORT: parseInt(process.env.GRAYLOG_PORT || '12201'),
13
+
14
+ // Redis key prefix for multi-tenant session isolation
15
+ // Each application should have a unique prefix to prevent session conflicts
16
+ // Example: 'cryptaply:', 'website-membership:', 'myapp:'
17
+ // Leave empty ('') for backward compatibility
18
+ REDIS_KEY_PREFIX: process.env.REDIS_KEY_PREFIX || '',
19
+
20
+ // Redirect URLs - configurable per-tenant
21
+ // LOGOUT_REDIRECT_URL: Where to redirect after logout (default: '/')
22
+ // UNAUTHENTICATED_REDIRECT_URL: Where to redirect unauthenticated users from root (default: '/account-auth/login')
23
+ LOGOUT_REDIRECT_URL: process.env.LOGOUT_REDIRECT_URL || '/',
24
+ UNAUTHENTICATED_REDIRECT_URL: process.env.UNAUTHENTICATED_REDIRECT_URL || '/account-auth/login',
25
+ } as const;
26
+
27
+ export const API_ENDPOINTS = {
28
+ account: {
29
+ profile: '/api/account/profile',
30
+ updateProfile: '/api/account/profile',
31
+ maskedInfo: '/api/account/masked-info',
32
+ sendResetCode: '/api/account/send-reset-code',
33
+ verifyResetCode: '/api/account/verify-reset-code',
34
+ resetPassword: '/api/account/reset-password',
35
+ changePassword: '/api/account/change-password',
36
+ validatePassword: '/api/account/validate-password'
37
+ },
38
+ externalAuth: {
39
+ login: '/api/ExternalAuth/login',
40
+ refresh: '/api/ExternalAuth/refresh',
41
+ validate: '/api/ExternalAuth/validate',
42
+ verifyCode: '/api/ExternalAuth/verify-code',
43
+ revoke: '/api/ExternalAuth/revoke',
44
+ roles: (username: string) => `/api/ExternalAuth/roles/${username}`,
45
+ jwks: '/api/ExternalAuth/.well-known/jwks.json',
46
+ openidConfig: '/api/ExternalAuth/.well-known/openid-configuration',
47
+ passwordless: {
48
+ sms: { start: '/api/ExternalAuth/passwordless/sms/start', login: '/api/ExternalAuth/passwordless/sms/login', resend: '/api/ExternalAuth/passwordless/sms/resend' },
49
+ email: { start: '/api/ExternalAuth/passwordless/email/start', login: '/api/ExternalAuth/passwordless/email/login', resend: '/api/ExternalAuth/passwordless/email/resend' }
50
+ },
51
+ lead: { registration: '/api/ExternalAuth/lead/registration', verify: '/api/ExternalAuth/lead/verify' }
52
+ },
53
+ progressiveAuth: {
54
+ step1: '/api/ProgressiveAuth/step1', step2: '/api/ProgressiveAuth/step2', step3: '/api/ProgressiveAuth/step3', step4: '/api/ProgressiveAuth/step4', step5: '/api/ProgressiveAuth/step5', verifyEmail: '/api/ProgressiveAuth/verify-email'
55
+ },
56
+ azureAuth: { login: '/auth/azure/login', logout: '/auth/azure/logout' }
57
+ } as const;
@@ -1,62 +1,62 @@
1
- import { getLoggingConfigSync, startConfigWatching, addConfigWatcher } from './logging-config';
2
- import { LoggingConfig } from '../types/logging';
3
- import { createVibeLogTransport } from './vibe-log-transport';
4
-
5
- let loggingConfig: LoggingConfig = getLoggingConfigSync();
6
- startConfigWatching();
7
-
8
- const isEdgeRuntime = (): boolean => {
9
- return typeof (globalThis as any).EdgeRuntime !== 'undefined' || process.env.NEXT_RUNTIME === 'edge';
10
- };
11
- const isBrowser = (): boolean => typeof window !== 'undefined';
12
-
13
- interface Logger { error: (message: string, meta?: any) => void; warn: (message: string, meta?: any) => void; info: (message: string, meta?: any) => void; http: (message: string, meta?: any) => void; debug: (message: string, meta?: any) => void; }
14
-
15
- class EdgeLogger implements Logger {
16
- private logLevel: string = loggingConfig.logLevel; private levelOrder: string[] = Object.keys(loggingConfig.levels);
17
- private shouldLog(level: string): boolean { const currentLevelIndex = this.levelOrder.indexOf(this.logLevel); const messageLevelIndex = this.levelOrder.indexOf(level); return messageLevelIndex <= currentLevelIndex; }
18
- private format(level: string, message: string, meta?: any) { const timestamp = new Date().toISOString(); const metaString = meta ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level.toUpperCase()}: ${message}${metaString}`; }
19
- error(m: string, meta?: any) { if (this.shouldLog('error')) console.error(this.format('error', m, meta)); }
20
- warn(m: string, meta?: any) { if (this.shouldLog('warn')) console.warn(this.format('warn', m, meta)); }
21
- info(m: string, meta?: any) { if (this.shouldLog('info')) console.info(this.format('info', m, meta)); }
22
- http(m: string, meta?: any) { if (this.shouldLog('http')) console.log(this.format('http', m, meta)); }
23
- debug(m: string, meta?: any) { if (this.shouldLog('debug')) console.debug(this.format('debug', m, meta)); }
24
- }
25
-
26
- const createLogger = (): any => {
27
- if (isEdgeRuntime()) return new EdgeLogger();
28
- if (isBrowser()) return { error: (m: string, meta?: any) => console.error(m, meta), warn: (m: string, meta?: any) => console.warn(m, meta), info: (m: string, meta?: any) => console.info(m, meta), http: (m: string, meta?: any) => console.log(m, meta), debug: (m: string, meta?: any) => console.debug(m, meta) };
29
- try {
30
- const winston = require('winston');
31
- const transports: any[] = [];
32
- if (loggingConfig.console.enabled) {
33
- transports.push(new winston.transports.Console({ format: winston.format.combine(winston.format.colorize({ all: true }), winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), winston.format.printf(({ timestamp, level, message, ...meta }: any) => { const metaString = Object.keys(meta).length > 0 ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level}: ${message}${metaString}`; })) }));
34
- }
35
- // Add Vibe log transport (sends warn/error to Redis for drain to Vibe)
36
- const vibeTransport = createVibeLogTransport({ minLevel: 'warn' });
37
- if (vibeTransport) {
38
- transports.push(vibeTransport);
39
- console.log('[LOGGER] Vibe Redis transport ENABLED - logs will buffer to Redis');
40
- } else {
41
- console.log('[LOGGER] Vibe Redis transport DISABLED - no REDIS_URL configured');
42
- }
43
- return winston.createLogger({ level: loggingConfig.logLevel, levels: loggingConfig.levels, format: winston.format.combine(winston.format.timestamp(), winston.format.errors({ stack: true }), winston.format.json()), transports, exitOnError: false });
44
- } catch (error) { console.warn('Failed to initialize Winston logger, falling back to EdgeLogger:', error); return new EdgeLogger(); }
45
- };
46
-
47
- let logger: any;
48
- if (!(globalThis.process as any)?.browser) {
49
- logger = createLogger();
50
- addConfigWatcher((updatedConfig) => { loggingConfig = updatedConfig; if (logger && logger.level !== undefined) { logger.level = loggingConfig.logLevel; } });
51
- } else { logger = console; }
52
-
53
- export const log = { error: (m: string, meta?: any) => logger.error(m, meta), warn: (m: string, meta?: any) => logger.warn(m, meta), info: (m: string, meta?: any) => logger.info(m, meta), http: (m: string, meta?: any) => logger.http(m, meta), debug: (m: string, meta?: any) => logger.debug(m, meta) };
54
- export { logger };
55
- export const authLogger = { error: (m: string, meta?: any) => logger.error(`[AUTH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[AUTH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[AUTH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[AUTH] ${m}`, meta) };
56
- export const idpLogger = { error: (m: string, meta?: any) => logger.error(`[IDP] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[IDP] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[IDP] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[IDP] ${m}`, meta) };
57
- export const apiLogger = { error: (m: string, meta?: any) => logger.error(`[API] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[API] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[API] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[API] ${m}`, meta) };
58
- export const circuitBreakerLogger = { error: (m: string, meta?: any) => logger.error(`[CIRCUIT-BREAKER] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[CIRCUIT-BREAKER] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[CIRCUIT-BREAKER] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[CIRCUIT-BREAKER] ${m}`, meta) };
59
- export const tokenLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN] ${m}`, meta) };
60
- export const tokenSyncLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-SYNC] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-SYNC] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-SYNC] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-SYNC] ${m}`, meta) };
61
- export const tokenRefreshLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-REFRESH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-REFRESH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-REFRESH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-REFRESH] ${m}`, meta) };
62
- export const redisLogger = { error: (m: string, meta?: any) => logger.error(`[REDIS] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[REDIS] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[REDIS] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[REDIS] ${m}`, meta) };
1
+ import { getLoggingConfigSync, startConfigWatching, addConfigWatcher } from './logging-config';
2
+ import { LoggingConfig } from '../types/logging';
3
+ import { createVibeLogTransport } from './vibe-log-transport';
4
+
5
+ let loggingConfig: LoggingConfig = getLoggingConfigSync();
6
+ startConfigWatching();
7
+
8
+ const isEdgeRuntime = (): boolean => {
9
+ return typeof (globalThis as any).EdgeRuntime !== 'undefined' || process.env.NEXT_RUNTIME === 'edge';
10
+ };
11
+ const isBrowser = (): boolean => typeof window !== 'undefined';
12
+
13
+ interface Logger { error: (message: string, meta?: any) => void; warn: (message: string, meta?: any) => void; info: (message: string, meta?: any) => void; http: (message: string, meta?: any) => void; debug: (message: string, meta?: any) => void; }
14
+
15
+ class EdgeLogger implements Logger {
16
+ private logLevel: string = loggingConfig.logLevel; private levelOrder: string[] = Object.keys(loggingConfig.levels);
17
+ private shouldLog(level: string): boolean { const currentLevelIndex = this.levelOrder.indexOf(this.logLevel); const messageLevelIndex = this.levelOrder.indexOf(level); return messageLevelIndex <= currentLevelIndex; }
18
+ private format(level: string, message: string, meta?: any) { const timestamp = new Date().toISOString(); const metaString = meta ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level.toUpperCase()}: ${message}${metaString}`; }
19
+ error(m: string, meta?: any) { if (this.shouldLog('error')) console.error(this.format('error', m, meta)); }
20
+ warn(m: string, meta?: any) { if (this.shouldLog('warn')) console.warn(this.format('warn', m, meta)); }
21
+ info(m: string, meta?: any) { if (this.shouldLog('info')) console.info(this.format('info', m, meta)); }
22
+ http(m: string, meta?: any) { if (this.shouldLog('http')) console.log(this.format('http', m, meta)); }
23
+ debug(m: string, meta?: any) { if (this.shouldLog('debug')) console.debug(this.format('debug', m, meta)); }
24
+ }
25
+
26
+ const createLogger = (): any => {
27
+ if (isEdgeRuntime()) return new EdgeLogger();
28
+ if (isBrowser()) return { error: (m: string, meta?: any) => console.error(m, meta), warn: (m: string, meta?: any) => console.warn(m, meta), info: (m: string, meta?: any) => console.info(m, meta), http: (m: string, meta?: any) => console.log(m, meta), debug: (m: string, meta?: any) => console.debug(m, meta) };
29
+ try {
30
+ const winston = require('winston');
31
+ const transports: any[] = [];
32
+ if (loggingConfig.console.enabled) {
33
+ transports.push(new winston.transports.Console({ format: winston.format.combine(winston.format.colorize({ all: true }), winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), winston.format.printf(({ timestamp, level, message, ...meta }: any) => { const metaString = Object.keys(meta).length > 0 ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level}: ${message}${metaString}`; })) }));
34
+ }
35
+ // Add Vibe log transport (sends warn/error to Redis for drain to Vibe)
36
+ const vibeTransport = createVibeLogTransport({ minLevel: 'warn' });
37
+ if (vibeTransport) {
38
+ transports.push(vibeTransport);
39
+ console.log('[LOGGER] Vibe Redis transport ENABLED - logs will buffer to Redis');
40
+ } else {
41
+ console.log('[LOGGER] Vibe Redis transport DISABLED - no REDIS_URL configured');
42
+ }
43
+ return winston.createLogger({ level: loggingConfig.logLevel, levels: loggingConfig.levels, format: winston.format.combine(winston.format.timestamp(), winston.format.errors({ stack: true }), winston.format.json()), transports, exitOnError: false });
44
+ } catch (error) { console.warn('Failed to initialize Winston logger, falling back to EdgeLogger:', error); return new EdgeLogger(); }
45
+ };
46
+
47
+ let logger: any;
48
+ if (!(globalThis.process as any)?.browser) {
49
+ logger = createLogger();
50
+ addConfigWatcher((updatedConfig) => { loggingConfig = updatedConfig; if (logger && logger.level !== undefined) { logger.level = loggingConfig.logLevel; } });
51
+ } else { logger = console; }
52
+
53
+ export const log = { error: (m: string, meta?: any) => logger.error(m, meta), warn: (m: string, meta?: any) => logger.warn(m, meta), info: (m: string, meta?: any) => logger.info(m, meta), http: (m: string, meta?: any) => logger.http(m, meta), debug: (m: string, meta?: any) => logger.debug(m, meta) };
54
+ export { logger };
55
+ export const authLogger = { error: (m: string, meta?: any) => logger.error(`[AUTH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[AUTH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[AUTH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[AUTH] ${m}`, meta) };
56
+ export const idpLogger = { error: (m: string, meta?: any) => logger.error(`[IDP] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[IDP] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[IDP] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[IDP] ${m}`, meta) };
57
+ export const apiLogger = { error: (m: string, meta?: any) => logger.error(`[API] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[API] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[API] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[API] ${m}`, meta) };
58
+ export const circuitBreakerLogger = { error: (m: string, meta?: any) => logger.error(`[CIRCUIT-BREAKER] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[CIRCUIT-BREAKER] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[CIRCUIT-BREAKER] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[CIRCUIT-BREAKER] ${m}`, meta) };
59
+ export const tokenLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN] ${m}`, meta) };
60
+ export const tokenSyncLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-SYNC] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-SYNC] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-SYNC] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-SYNC] ${m}`, meta) };
61
+ export const tokenRefreshLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-REFRESH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-REFRESH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-REFRESH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-REFRESH] ${m}`, meta) };
62
+ export const redisLogger = { error: (m: string, meta?: any) => logger.error(`[REDIS] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[REDIS] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[REDIS] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[REDIS] ${m}`, meta) };