@payez/next-mvp 4.1.9 → 4.1.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (161) hide show
  1. package/README.md +792 -792
  2. package/dist/api-handlers/auth/refresh.js +38 -15
  3. package/dist/auth/better-auth.js +7 -18
  4. package/dist/components/account/MobileNavDrawer.js +18 -18
  5. package/dist/components/account/UserAvatarMenu.js +1 -1
  6. package/dist/components/admin/AlertSettingsTab.js +40 -40
  7. package/dist/components/admin/LoggingSettingsTab.js +28 -28
  8. package/dist/lib/ensure-fresh-access-token.js +30 -7
  9. package/dist/lib/idp-fetch.js +25 -9
  10. package/dist/lib/session-store.d.ts +1 -0
  11. package/dist/lib/session-store.js +12 -8
  12. package/dist/pages/login/page.js +28 -28
  13. package/dist/pages/settings/EnhancedSettingsPage.js +17 -17
  14. package/package.json +893 -893
  15. package/scripts/dev-broker.ps1 +35 -35
  16. package/scripts/dev-local.ps1 +45 -45
  17. package/src/api/auth-handler.ts +548 -548
  18. package/src/api-handlers/account/change-password.ts +142 -142
  19. package/src/api-handlers/account/update-phone.ts +79 -79
  20. package/src/api-handlers/account/verify-email.ts +125 -125
  21. package/src/api-handlers/account/verify-sms.ts +125 -125
  22. package/src/api-handlers/admin/analytics.ts +443 -443
  23. package/src/api-handlers/admin/audit.ts +223 -223
  24. package/src/api-handlers/admin/index.ts +63 -63
  25. package/src/api-handlers/admin/redis-sessions.ts +251 -251
  26. package/src/api-handlers/admin/sessions.ts +318 -318
  27. package/src/api-handlers/admin/site-logs.ts +365 -365
  28. package/src/api-handlers/admin/users.ts +242 -242
  29. package/src/api-handlers/admin/vibe-data.ts +324 -324
  30. package/src/api-handlers/auth/refresh.ts +705 -682
  31. package/src/api-handlers/auth/signout.ts +199 -199
  32. package/src/api-handlers/auth/status.ts +20 -20
  33. package/src/api-handlers/auth/update-session.ts +110 -110
  34. package/src/api-handlers/auth/verify-code.ts +112 -112
  35. package/src/api-handlers/session/refresh-viability.ts +36 -36
  36. package/src/api-handlers/test/force-expire.ts +60 -60
  37. package/src/auth/auth-decision.ts +229 -229
  38. package/src/auth/better-auth.ts +7 -18
  39. package/src/auth/route-config.ts +219 -219
  40. package/src/auth/types/auth-types.ts +555 -555
  41. package/src/auth/types/index.ts +7 -7
  42. package/src/auth/utils/idp-client.ts +445 -445
  43. package/src/auth/utils/index.ts +6 -6
  44. package/src/auth/utils/token-utils.ts +243 -243
  45. package/src/client/AuthContext.tsx +143 -143
  46. package/src/client/fetch-with-auth.ts +47 -47
  47. package/src/components/SessionSync.tsx +138 -138
  48. package/src/components/SignalRHealthCheck.tsx +131 -131
  49. package/src/components/account/MobileNavDrawer.tsx +305 -305
  50. package/src/components/account/UserAvatarMenu.tsx +266 -266
  51. package/src/components/account/index.ts +13 -13
  52. package/src/components/admin/AlertSettingsTab.tsx +728 -728
  53. package/src/components/admin/AnalyticsTab.tsx +703 -703
  54. package/src/components/admin/DataBrowserTab.tsx +505 -505
  55. package/src/components/admin/LoggingSettingsTab.tsx +665 -665
  56. package/src/components/admin/SessionsTab.tsx +414 -414
  57. package/src/components/admin/StatsTab.tsx +379 -379
  58. package/src/components/admin/VibeAdminLayout.tsx +187 -187
  59. package/src/components/admin/index.ts +59 -59
  60. package/src/components/auth/FederatedAuthSection.tsx +95 -95
  61. package/src/components/auth/ModeAwareLoginPage.tsx +135 -135
  62. package/src/components/auth/ModeAwareSignupPage.tsx +267 -267
  63. package/src/components/auth/TraditionalAuthSection.tsx +99 -99
  64. package/src/components/recovery/CompleteStep.tsx +36 -36
  65. package/src/components/recovery/InitiateRecoveryStep.tsx +68 -68
  66. package/src/components/recovery/SelectMethodStep.tsx +73 -73
  67. package/src/components/recovery/SetPasswordStep.tsx +97 -97
  68. package/src/components/recovery/VerifyCodeStep.tsx +90 -90
  69. package/src/components/reserved/ReservedRecoveryWarning.tsx +160 -160
  70. package/src/components/reserved/ReservedStatusBox.tsx +118 -118
  71. package/src/components/ui/BetaBadge.tsx +58 -58
  72. package/src/components/ui/Footer.tsx +93 -93
  73. package/src/config/env.ts +57 -57
  74. package/src/config/logger.ts +62 -62
  75. package/src/config/vibe-log-transport.ts +264 -264
  76. package/src/hooks/useAuth.ts +117 -117
  77. package/src/hooks/useAuthSettings.ts +97 -97
  78. package/src/hooks/useAvailableProviders.ts +120 -120
  79. package/src/hooks/usePasswordValidation.ts +127 -127
  80. package/src/hooks/usePublicAuthSettings.ts +149 -149
  81. package/src/hooks/useSessionExpiration.ts +101 -101
  82. package/src/hooks/useViabilitySession.ts +336 -336
  83. package/src/index.ts +60 -60
  84. package/src/lib/api-handler.ts +643 -643
  85. package/src/lib/app-slug.ts +178 -178
  86. package/src/lib/ensure-fresh-access-token.ts +358 -335
  87. package/src/lib/geolocation.ts +265 -265
  88. package/src/lib/idp-fetch.ts +26 -10
  89. package/src/lib/jwt-decode.ts +82 -82
  90. package/src/lib/roles.ts +177 -177
  91. package/src/lib/session-store.ts +4 -1
  92. package/src/lib/site-logger.ts +245 -245
  93. package/src/lib/standardized-client-api.ts +901 -901
  94. package/src/lib/test-aware-get-token.ts +41 -41
  95. package/src/lib/user-agent-parser.ts +252 -252
  96. package/src/logging/api/admin-analytics.ts +51 -51
  97. package/src/logging/api/audit-log.ts +53 -53
  98. package/src/logging/components/AdminAnalyticsLayout.tsx +49 -49
  99. package/src/logging/components/AuditLogViewer.tsx +125 -125
  100. package/src/logging/components/ErrorMetricsCard.tsx +98 -98
  101. package/src/logging/components/HealthMetricsCard.tsx +70 -70
  102. package/src/logging/hooks/useAdminAnalytics.ts +22 -22
  103. package/src/logging/hooks/useAuditLog.ts +24 -24
  104. package/src/logging/hooks/useErrorMetrics.ts +40 -40
  105. package/src/logging/hooks/useHealthMetrics.ts +44 -44
  106. package/src/logging/index.ts +18 -18
  107. package/src/logging/types/analytics.ts +81 -81
  108. package/src/logging/types/audit.ts +31 -31
  109. package/src/logging/types/index.ts +3 -3
  110. package/src/middleware/create-middleware.ts +663 -663
  111. package/src/middleware/rbac-check.ts +279 -279
  112. package/src/middleware/twofa-presets.ts +224 -224
  113. package/src/pages/admin-login/page.tsx +221 -221
  114. package/src/pages/admin-page-permissions/PagePermissionsAdminPage.tsx +527 -527
  115. package/src/pages/admin-page-permissions/index.ts +7 -7
  116. package/src/pages/admin-roles/RolesAdminPage.tsx +533 -533
  117. package/src/pages/admin-roles/modals.tsx +469 -469
  118. package/src/pages/client-admin/ClientSiteAdminPage.tsx +382 -382
  119. package/src/pages/client-admin/index.ts +33 -33
  120. package/src/pages/coming-soon/page.tsx +83 -83
  121. package/src/pages/login/page.tsx +456 -456
  122. package/src/pages/profile/EnhancedProfilePage.tsx +485 -485
  123. package/src/pages/profile/index.ts +9 -9
  124. package/src/pages/profile/page.tsx +166 -166
  125. package/src/pages/recovery/page.tsx +234 -234
  126. package/src/pages/roles/MyRolesPage.tsx +211 -211
  127. package/src/pages/roles/components.tsx +294 -294
  128. package/src/pages/roles/index.ts +17 -17
  129. package/src/pages/security/EnhancedSecurityPage.tsx +565 -565
  130. package/src/pages/security/index.ts +9 -9
  131. package/src/pages/security/page.tsx +507 -507
  132. package/src/pages/settings/EnhancedSettingsPage.tsx +642 -642
  133. package/src/pages/settings/index.ts +9 -9
  134. package/src/pages/settings/page.tsx +47 -47
  135. package/src/pages/showcase/ShowcasePage.tsx +532 -532
  136. package/src/pages/showcase/index.ts +13 -13
  137. package/src/pages/test-env/EmergencyLogoutPage.tsx +180 -180
  138. package/src/pages/test-env/JwtInspectPage.tsx +456 -456
  139. package/src/pages/test-env/RefreshTokenPage.tsx +157 -157
  140. package/src/pages/test-env/TestEnvPage.tsx +118 -118
  141. package/src/pages/test-env/index.ts +25 -25
  142. package/src/pages/verify-code/page.tsx +652 -652
  143. package/src/routes/account/update-phone.ts +13 -13
  144. package/src/routes/auth/logout.ts +108 -108
  145. package/src/routes/auth/nextauth.ts +45 -45
  146. package/src/routes/auth/settings.ts +75 -75
  147. package/src/routes/auth/viability.ts +224 -224
  148. package/src/server/auth-guard.ts +170 -170
  149. package/src/server/slim-middleware.ts +117 -117
  150. package/src/server/with-auth.ts +93 -93
  151. package/src/stores/authStore.ts +1899 -1899
  152. package/src/templates/instrumentation.ts +41 -41
  153. package/src/utils/logout.ts +30 -30
  154. package/src/vibe/client.ts +590 -590
  155. package/src/vibe/enterprise-auth.ts +208 -208
  156. package/src/vibe/errors.ts +185 -185
  157. package/src/vibe/generic.ts +431 -431
  158. package/src/vibe/hooks/index.ts +367 -367
  159. package/src/vibe/index.ts +132 -132
  160. package/src/vibe/sessions.ts +551 -551
  161. package/src/vibe/types.ts +577 -577
@@ -1,58 +1,58 @@
1
- 'use client';
2
-
3
- import React from 'react';
4
-
5
- export interface BetaBadgeProps {
6
- /** Text to display (default: 'beta') */
7
- text?: string;
8
- /** Additional CSS classes */
9
- className?: string;
10
- /** Badge variant */
11
- variant?: 'subtle' | 'outlined' | 'solid';
12
- }
13
-
14
- /**
15
- * A subtle badge component for indicating pre-release status.
16
- *
17
- * Controlled by NEXT_PUBLIC_SHOW_BETA_BADGE env var.
18
- * When env var is not 'true', renders nothing.
19
- *
20
- * @example
21
- * ```tsx
22
- * // In your header, next to logo
23
- * <Logo />
24
- * <BetaBadge />
25
- *
26
- * // Custom text
27
- * <BetaBadge text="preview" />
28
- *
29
- * // Different variant
30
- * <BetaBadge variant="outlined" text="coming soon" />
31
- * ```
32
- */
33
- export function BetaBadge({
34
- text = 'beta',
35
- className = '',
36
- variant = 'subtle'
37
- }: BetaBadgeProps) {
38
- // Check env var - only render if explicitly enabled
39
- if (process.env.NEXT_PUBLIC_SHOW_BETA_BADGE !== 'true') {
40
- return null;
41
- }
42
-
43
- const baseStyles = 'inline-flex items-center px-2 py-0.5 text-xs font-medium rounded-full lowercase tracking-wide';
44
-
45
- const variantStyles = {
46
- subtle: 'bg-gray-100 text-gray-500 dark:bg-gray-800 dark:text-gray-400',
47
- outlined: 'border border-gray-300 text-gray-500 dark:border-gray-600 dark:text-gray-400',
48
- solid: 'bg-gray-500 text-white dark:bg-gray-600',
49
- };
50
-
51
- return (
52
- <span className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
53
- {text}
54
- </span>
55
- );
56
- }
57
-
58
- export default BetaBadge;
1
+ 'use client';
2
+
3
+ import React from 'react';
4
+
5
+ export interface BetaBadgeProps {
6
+ /** Text to display (default: 'beta') */
7
+ text?: string;
8
+ /** Additional CSS classes */
9
+ className?: string;
10
+ /** Badge variant */
11
+ variant?: 'subtle' | 'outlined' | 'solid';
12
+ }
13
+
14
+ /**
15
+ * A subtle badge component for indicating pre-release status.
16
+ *
17
+ * Controlled by NEXT_PUBLIC_SHOW_BETA_BADGE env var.
18
+ * When env var is not 'true', renders nothing.
19
+ *
20
+ * @example
21
+ * ```tsx
22
+ * // In your header, next to logo
23
+ * <Logo />
24
+ * <BetaBadge />
25
+ *
26
+ * // Custom text
27
+ * <BetaBadge text="preview" />
28
+ *
29
+ * // Different variant
30
+ * <BetaBadge variant="outlined" text="coming soon" />
31
+ * ```
32
+ */
33
+ export function BetaBadge({
34
+ text = 'beta',
35
+ className = '',
36
+ variant = 'subtle'
37
+ }: BetaBadgeProps) {
38
+ // Check env var - only render if explicitly enabled
39
+ if (process.env.NEXT_PUBLIC_SHOW_BETA_BADGE !== 'true') {
40
+ return null;
41
+ }
42
+
43
+ const baseStyles = 'inline-flex items-center px-2 py-0.5 text-xs font-medium rounded-full lowercase tracking-wide';
44
+
45
+ const variantStyles = {
46
+ subtle: 'bg-gray-100 text-gray-500 dark:bg-gray-800 dark:text-gray-400',
47
+ outlined: 'border border-gray-300 text-gray-500 dark:border-gray-600 dark:text-gray-400',
48
+ solid: 'bg-gray-500 text-white dark:bg-gray-600',
49
+ };
50
+
51
+ return (
52
+ <span className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
53
+ {text}
54
+ </span>
55
+ );
56
+ }
57
+
58
+ export default BetaBadge;
@@ -1,93 +1,93 @@
1
- 'use client';
2
-
3
- import React from 'react';
4
-
5
- export interface FooterProps {
6
- /** Company or product name (default: 'PayEz') */
7
- companyName?: string;
8
- /** Start year for copyright range (shows "2024-2025" format if provided) */
9
- startYear?: number;
10
- /** Additional links to display */
11
- links?: Array<{ label: string; href: string }>;
12
- /** Additional CSS classes */
13
- className?: string;
14
- /** Variant style */
15
- variant?: 'minimal' | 'standard';
16
- }
17
-
18
- /**
19
- * A themeable footer component with dynamic copyright year.
20
- *
21
- * @example
22
- * ```tsx
23
- * // Minimal footer
24
- * <Footer />
25
- *
26
- * // With company name and start year
27
- * <Footer companyName="Acme Inc" startYear={2020} />
28
- *
29
- * // With links
30
- * <Footer
31
- * links={[
32
- * { label: 'Privacy', href: '/privacy' },
33
- * { label: 'Terms', href: '/terms' }
34
- * ]}
35
- * />
36
- * ```
37
- */
38
- export function Footer({
39
- companyName = 'PayEz',
40
- startYear,
41
- links = [],
42
- className = '',
43
- variant = 'minimal'
44
- }: FooterProps) {
45
- const currentYear = new Date().getFullYear();
46
- const yearDisplay = startYear && startYear < currentYear
47
- ? `${startYear}-${currentYear}`
48
- : `${currentYear}`;
49
-
50
- const baseStyles = 'w-full py-4 text-sm';
51
-
52
- const variantStyles = {
53
- minimal: 'text-center text-gray-500 dark:text-gray-400',
54
- standard: 'border-t border-gray-200 dark:border-gray-700 text-gray-500 dark:text-gray-400'
55
- };
56
-
57
- if (variant === 'minimal') {
58
- return (
59
- <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
60
- <p>
61
- &copy; {yearDisplay} {companyName}. All rights reserved.
62
- </p>
63
- </footer>
64
- );
65
- }
66
-
67
- return (
68
- <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
69
- <div className="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8">
70
- <div className="flex flex-col sm:flex-row justify-between items-center gap-4">
71
- <p>
72
- &copy; {yearDisplay} {companyName}. All rights reserved.
73
- </p>
74
- {links.length > 0 && (
75
- <nav className="flex gap-4" aria-label="Footer links">
76
- {links.map((link, index) => (
77
- <a
78
- key={`${index}-${link.label}`}
79
- href={link.href}
80
- className="hover:text-gray-700 dark:hover:text-gray-200 focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 dark:focus:ring-offset-gray-900 rounded transition-colors"
81
- >
82
- {link.label}
83
- </a>
84
- ))}
85
- </nav>
86
- )}
87
- </div>
88
- </div>
89
- </footer>
90
- );
91
- }
92
-
93
- export default Footer;
1
+ 'use client';
2
+
3
+ import React from 'react';
4
+
5
+ export interface FooterProps {
6
+ /** Company or product name (default: 'PayEz') */
7
+ companyName?: string;
8
+ /** Start year for copyright range (shows "2024-2025" format if provided) */
9
+ startYear?: number;
10
+ /** Additional links to display */
11
+ links?: Array<{ label: string; href: string }>;
12
+ /** Additional CSS classes */
13
+ className?: string;
14
+ /** Variant style */
15
+ variant?: 'minimal' | 'standard';
16
+ }
17
+
18
+ /**
19
+ * A themeable footer component with dynamic copyright year.
20
+ *
21
+ * @example
22
+ * ```tsx
23
+ * // Minimal footer
24
+ * <Footer />
25
+ *
26
+ * // With company name and start year
27
+ * <Footer companyName="Acme Inc" startYear={2020} />
28
+ *
29
+ * // With links
30
+ * <Footer
31
+ * links={[
32
+ * { label: 'Privacy', href: '/privacy' },
33
+ * { label: 'Terms', href: '/terms' }
34
+ * ]}
35
+ * />
36
+ * ```
37
+ */
38
+ export function Footer({
39
+ companyName = 'PayEz',
40
+ startYear,
41
+ links = [],
42
+ className = '',
43
+ variant = 'minimal'
44
+ }: FooterProps) {
45
+ const currentYear = new Date().getFullYear();
46
+ const yearDisplay = startYear && startYear < currentYear
47
+ ? `${startYear}-${currentYear}`
48
+ : `${currentYear}`;
49
+
50
+ const baseStyles = 'w-full py-4 text-sm';
51
+
52
+ const variantStyles = {
53
+ minimal: 'text-center text-gray-500 dark:text-gray-400',
54
+ standard: 'border-t border-gray-200 dark:border-gray-700 text-gray-500 dark:text-gray-400'
55
+ };
56
+
57
+ if (variant === 'minimal') {
58
+ return (
59
+ <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
60
+ <p>
61
+ &copy; {yearDisplay} {companyName}. All rights reserved.
62
+ </p>
63
+ </footer>
64
+ );
65
+ }
66
+
67
+ return (
68
+ <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
69
+ <div className="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8">
70
+ <div className="flex flex-col sm:flex-row justify-between items-center gap-4">
71
+ <p>
72
+ &copy; {yearDisplay} {companyName}. All rights reserved.
73
+ </p>
74
+ {links.length > 0 && (
75
+ <nav className="flex gap-4" aria-label="Footer links">
76
+ {links.map((link, index) => (
77
+ <a
78
+ key={`${index}-${link.label}`}
79
+ href={link.href}
80
+ className="hover:text-gray-700 dark:hover:text-gray-200 focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 dark:focus:ring-offset-gray-900 rounded transition-colors"
81
+ >
82
+ {link.label}
83
+ </a>
84
+ ))}
85
+ </nav>
86
+ )}
87
+ </div>
88
+ </div>
89
+ </footer>
90
+ );
91
+ }
92
+
93
+ export default Footer;
package/src/config/env.ts CHANGED
@@ -1,57 +1,57 @@
1
- export const ENV_CONFIG = {
2
- CLIENT_ID: process.env.CLIENT_ID,
3
- INTERNAL_URL: process.env.IDP_URL,
4
- IDP_CLIENT_ID: (() => { const raw = process.env.NEXT_PUBLIC_IDP_CLIENT_ID || process.env.IDP_CLIENT_ID; const n = raw ? parseInt(raw, 10) : undefined; return Number.isFinite(n as any) ? (n as number) : undefined; })(),
5
- IDP_URL: process.env.IDP_URL,
6
- API_URL: process.env.IDP_URL,
7
- PAYEZ_CORE_BASE_URL: process.env.NEXT_PUBLIC_PAYEZ_CORE_BASE_URL,
8
- SUPPORT_EMAIL: 'support@PayEz.net',
9
- LOG_LEVEL: process.env.LOG_LEVEL || 'info',
10
- LOG_CONSOLE: process.env.LOG_CONSOLE === 'true' || process.env.NODE_ENV === 'development',
11
- GRAYLOG_HOST: process.env.GRAYLOG_HOST || '10.6.10.5',
12
- GRAYLOG_PORT: parseInt(process.env.GRAYLOG_PORT || '12201'),
13
-
14
- // Redis key prefix for multi-tenant session isolation
15
- // Each application should have a unique prefix to prevent session conflicts
16
- // Example: 'cryptaply:', 'website-membership:', 'myapp:'
17
- // Leave empty ('') for backward compatibility
18
- REDIS_KEY_PREFIX: process.env.REDIS_KEY_PREFIX || '',
19
-
20
- // Redirect URLs - configurable per-tenant
21
- // LOGOUT_REDIRECT_URL: Where to redirect after logout (default: '/')
22
- // UNAUTHENTICATED_REDIRECT_URL: Where to redirect unauthenticated users from root (default: '/account-auth/login')
23
- LOGOUT_REDIRECT_URL: process.env.LOGOUT_REDIRECT_URL || '/',
24
- UNAUTHENTICATED_REDIRECT_URL: process.env.UNAUTHENTICATED_REDIRECT_URL || '/account-auth/login',
25
- } as const;
26
-
27
- export const API_ENDPOINTS = {
28
- account: {
29
- profile: '/api/account/profile',
30
- updateProfile: '/api/account/profile',
31
- maskedInfo: '/api/account/masked-info',
32
- sendResetCode: '/api/account/send-reset-code',
33
- verifyResetCode: '/api/account/verify-reset-code',
34
- resetPassword: '/api/account/reset-password',
35
- changePassword: '/api/account/change-password',
36
- validatePassword: '/api/account/validate-password'
37
- },
38
- externalAuth: {
39
- login: '/api/ExternalAuth/login',
40
- refresh: '/api/ExternalAuth/refresh',
41
- validate: '/api/ExternalAuth/validate',
42
- verifyCode: '/api/ExternalAuth/verify-code',
43
- revoke: '/api/ExternalAuth/revoke',
44
- roles: (username: string) => `/api/ExternalAuth/roles/${username}`,
45
- jwks: '/api/ExternalAuth/.well-known/jwks.json',
46
- openidConfig: '/api/ExternalAuth/.well-known/openid-configuration',
47
- passwordless: {
48
- sms: { start: '/api/ExternalAuth/passwordless/sms/start', login: '/api/ExternalAuth/passwordless/sms/login', resend: '/api/ExternalAuth/passwordless/sms/resend' },
49
- email: { start: '/api/ExternalAuth/passwordless/email/start', login: '/api/ExternalAuth/passwordless/email/login', resend: '/api/ExternalAuth/passwordless/email/resend' }
50
- },
51
- lead: { registration: '/api/ExternalAuth/lead/registration', verify: '/api/ExternalAuth/lead/verify' }
52
- },
53
- progressiveAuth: {
54
- step1: '/api/ProgressiveAuth/step1', step2: '/api/ProgressiveAuth/step2', step3: '/api/ProgressiveAuth/step3', step4: '/api/ProgressiveAuth/step4', step5: '/api/ProgressiveAuth/step5', verifyEmail: '/api/ProgressiveAuth/verify-email'
55
- },
56
- azureAuth: { login: '/auth/azure/login', logout: '/auth/azure/logout' }
57
- } as const;
1
+ export const ENV_CONFIG = {
2
+ CLIENT_ID: process.env.CLIENT_ID,
3
+ INTERNAL_URL: process.env.IDP_URL,
4
+ IDP_CLIENT_ID: (() => { const raw = process.env.NEXT_PUBLIC_IDP_CLIENT_ID || process.env.IDP_CLIENT_ID; const n = raw ? parseInt(raw, 10) : undefined; return Number.isFinite(n as any) ? (n as number) : undefined; })(),
5
+ IDP_URL: process.env.IDP_URL,
6
+ API_URL: process.env.IDP_URL,
7
+ PAYEZ_CORE_BASE_URL: process.env.NEXT_PUBLIC_PAYEZ_CORE_BASE_URL,
8
+ SUPPORT_EMAIL: 'support@PayEz.net',
9
+ LOG_LEVEL: process.env.LOG_LEVEL || 'info',
10
+ LOG_CONSOLE: process.env.LOG_CONSOLE === 'true' || process.env.NODE_ENV === 'development',
11
+ GRAYLOG_HOST: process.env.GRAYLOG_HOST || '10.6.10.5',
12
+ GRAYLOG_PORT: parseInt(process.env.GRAYLOG_PORT || '12201'),
13
+
14
+ // Redis key prefix for multi-tenant session isolation
15
+ // Each application should have a unique prefix to prevent session conflicts
16
+ // Example: 'cryptaply:', 'website-membership:', 'myapp:'
17
+ // Leave empty ('') for backward compatibility
18
+ REDIS_KEY_PREFIX: process.env.REDIS_KEY_PREFIX || '',
19
+
20
+ // Redirect URLs - configurable per-tenant
21
+ // LOGOUT_REDIRECT_URL: Where to redirect after logout (default: '/')
22
+ // UNAUTHENTICATED_REDIRECT_URL: Where to redirect unauthenticated users from root (default: '/account-auth/login')
23
+ LOGOUT_REDIRECT_URL: process.env.LOGOUT_REDIRECT_URL || '/',
24
+ UNAUTHENTICATED_REDIRECT_URL: process.env.UNAUTHENTICATED_REDIRECT_URL || '/account-auth/login',
25
+ } as const;
26
+
27
+ export const API_ENDPOINTS = {
28
+ account: {
29
+ profile: '/api/account/profile',
30
+ updateProfile: '/api/account/profile',
31
+ maskedInfo: '/api/account/masked-info',
32
+ sendResetCode: '/api/account/send-reset-code',
33
+ verifyResetCode: '/api/account/verify-reset-code',
34
+ resetPassword: '/api/account/reset-password',
35
+ changePassword: '/api/account/change-password',
36
+ validatePassword: '/api/account/validate-password'
37
+ },
38
+ externalAuth: {
39
+ login: '/api/ExternalAuth/login',
40
+ refresh: '/api/ExternalAuth/refresh',
41
+ validate: '/api/ExternalAuth/validate',
42
+ verifyCode: '/api/ExternalAuth/verify-code',
43
+ revoke: '/api/ExternalAuth/revoke',
44
+ roles: (username: string) => `/api/ExternalAuth/roles/${username}`,
45
+ jwks: '/api/ExternalAuth/.well-known/jwks.json',
46
+ openidConfig: '/api/ExternalAuth/.well-known/openid-configuration',
47
+ passwordless: {
48
+ sms: { start: '/api/ExternalAuth/passwordless/sms/start', login: '/api/ExternalAuth/passwordless/sms/login', resend: '/api/ExternalAuth/passwordless/sms/resend' },
49
+ email: { start: '/api/ExternalAuth/passwordless/email/start', login: '/api/ExternalAuth/passwordless/email/login', resend: '/api/ExternalAuth/passwordless/email/resend' }
50
+ },
51
+ lead: { registration: '/api/ExternalAuth/lead/registration', verify: '/api/ExternalAuth/lead/verify' }
52
+ },
53
+ progressiveAuth: {
54
+ step1: '/api/ProgressiveAuth/step1', step2: '/api/ProgressiveAuth/step2', step3: '/api/ProgressiveAuth/step3', step4: '/api/ProgressiveAuth/step4', step5: '/api/ProgressiveAuth/step5', verifyEmail: '/api/ProgressiveAuth/verify-email'
55
+ },
56
+ azureAuth: { login: '/auth/azure/login', logout: '/auth/azure/logout' }
57
+ } as const;
@@ -1,62 +1,62 @@
1
- import { getLoggingConfigSync, startConfigWatching, addConfigWatcher } from './logging-config';
2
- import { LoggingConfig } from '../types/logging';
3
- import { createVibeLogTransport } from './vibe-log-transport';
4
-
5
- let loggingConfig: LoggingConfig = getLoggingConfigSync();
6
- startConfigWatching();
7
-
8
- const isEdgeRuntime = (): boolean => {
9
- return typeof (globalThis as any).EdgeRuntime !== 'undefined' || process.env.NEXT_RUNTIME === 'edge';
10
- };
11
- const isBrowser = (): boolean => typeof window !== 'undefined';
12
-
13
- interface Logger { error: (message: string, meta?: any) => void; warn: (message: string, meta?: any) => void; info: (message: string, meta?: any) => void; http: (message: string, meta?: any) => void; debug: (message: string, meta?: any) => void; }
14
-
15
- class EdgeLogger implements Logger {
16
- private logLevel: string = loggingConfig.logLevel; private levelOrder: string[] = Object.keys(loggingConfig.levels);
17
- private shouldLog(level: string): boolean { const currentLevelIndex = this.levelOrder.indexOf(this.logLevel); const messageLevelIndex = this.levelOrder.indexOf(level); return messageLevelIndex <= currentLevelIndex; }
18
- private format(level: string, message: string, meta?: any) { const timestamp = new Date().toISOString(); const metaString = meta ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level.toUpperCase()}: ${message}${metaString}`; }
19
- error(m: string, meta?: any) { if (this.shouldLog('error')) console.error(this.format('error', m, meta)); }
20
- warn(m: string, meta?: any) { if (this.shouldLog('warn')) console.warn(this.format('warn', m, meta)); }
21
- info(m: string, meta?: any) { if (this.shouldLog('info')) console.info(this.format('info', m, meta)); }
22
- http(m: string, meta?: any) { if (this.shouldLog('http')) console.log(this.format('http', m, meta)); }
23
- debug(m: string, meta?: any) { if (this.shouldLog('debug')) console.debug(this.format('debug', m, meta)); }
24
- }
25
-
26
- const createLogger = (): any => {
27
- if (isEdgeRuntime()) return new EdgeLogger();
28
- if (isBrowser()) return { error: (m: string, meta?: any) => console.error(m, meta), warn: (m: string, meta?: any) => console.warn(m, meta), info: (m: string, meta?: any) => console.info(m, meta), http: (m: string, meta?: any) => console.log(m, meta), debug: (m: string, meta?: any) => console.debug(m, meta) };
29
- try {
30
- const winston = require('winston');
31
- const transports: any[] = [];
32
- if (loggingConfig.console.enabled) {
33
- transports.push(new winston.transports.Console({ format: winston.format.combine(winston.format.colorize({ all: true }), winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), winston.format.printf(({ timestamp, level, message, ...meta }: any) => { const metaString = Object.keys(meta).length > 0 ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level}: ${message}${metaString}`; })) }));
34
- }
35
- // Add Vibe log transport (sends warn/error to Redis for drain to Vibe)
36
- const vibeTransport = createVibeLogTransport({ minLevel: 'warn' });
37
- if (vibeTransport) {
38
- transports.push(vibeTransport);
39
- console.log('[LOGGER] Vibe Redis transport ENABLED - logs will buffer to Redis');
40
- } else {
41
- console.log('[LOGGER] Vibe Redis transport DISABLED - no REDIS_URL configured');
42
- }
43
- return winston.createLogger({ level: loggingConfig.logLevel, levels: loggingConfig.levels, format: winston.format.combine(winston.format.timestamp(), winston.format.errors({ stack: true }), winston.format.json()), transports, exitOnError: false });
44
- } catch (error) { console.warn('Failed to initialize Winston logger, falling back to EdgeLogger:', error); return new EdgeLogger(); }
45
- };
46
-
47
- let logger: any;
48
- if (!(globalThis.process as any)?.browser) {
49
- logger = createLogger();
50
- addConfigWatcher((updatedConfig) => { loggingConfig = updatedConfig; if (logger && logger.level !== undefined) { logger.level = loggingConfig.logLevel; } });
51
- } else { logger = console; }
52
-
53
- export const log = { error: (m: string, meta?: any) => logger.error(m, meta), warn: (m: string, meta?: any) => logger.warn(m, meta), info: (m: string, meta?: any) => logger.info(m, meta), http: (m: string, meta?: any) => logger.http(m, meta), debug: (m: string, meta?: any) => logger.debug(m, meta) };
54
- export { logger };
55
- export const authLogger = { error: (m: string, meta?: any) => logger.error(`[AUTH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[AUTH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[AUTH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[AUTH] ${m}`, meta) };
56
- export const idpLogger = { error: (m: string, meta?: any) => logger.error(`[IDP] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[IDP] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[IDP] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[IDP] ${m}`, meta) };
57
- export const apiLogger = { error: (m: string, meta?: any) => logger.error(`[API] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[API] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[API] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[API] ${m}`, meta) };
58
- export const circuitBreakerLogger = { error: (m: string, meta?: any) => logger.error(`[CIRCUIT-BREAKER] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[CIRCUIT-BREAKER] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[CIRCUIT-BREAKER] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[CIRCUIT-BREAKER] ${m}`, meta) };
59
- export const tokenLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN] ${m}`, meta) };
60
- export const tokenSyncLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-SYNC] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-SYNC] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-SYNC] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-SYNC] ${m}`, meta) };
61
- export const tokenRefreshLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-REFRESH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-REFRESH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-REFRESH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-REFRESH] ${m}`, meta) };
62
- export const redisLogger = { error: (m: string, meta?: any) => logger.error(`[REDIS] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[REDIS] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[REDIS] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[REDIS] ${m}`, meta) };
1
+ import { getLoggingConfigSync, startConfigWatching, addConfigWatcher } from './logging-config';
2
+ import { LoggingConfig } from '../types/logging';
3
+ import { createVibeLogTransport } from './vibe-log-transport';
4
+
5
+ let loggingConfig: LoggingConfig = getLoggingConfigSync();
6
+ startConfigWatching();
7
+
8
+ const isEdgeRuntime = (): boolean => {
9
+ return typeof (globalThis as any).EdgeRuntime !== 'undefined' || process.env.NEXT_RUNTIME === 'edge';
10
+ };
11
+ const isBrowser = (): boolean => typeof window !== 'undefined';
12
+
13
+ interface Logger { error: (message: string, meta?: any) => void; warn: (message: string, meta?: any) => void; info: (message: string, meta?: any) => void; http: (message: string, meta?: any) => void; debug: (message: string, meta?: any) => void; }
14
+
15
+ class EdgeLogger implements Logger {
16
+ private logLevel: string = loggingConfig.logLevel; private levelOrder: string[] = Object.keys(loggingConfig.levels);
17
+ private shouldLog(level: string): boolean { const currentLevelIndex = this.levelOrder.indexOf(this.logLevel); const messageLevelIndex = this.levelOrder.indexOf(level); return messageLevelIndex <= currentLevelIndex; }
18
+ private format(level: string, message: string, meta?: any) { const timestamp = new Date().toISOString(); const metaString = meta ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level.toUpperCase()}: ${message}${metaString}`; }
19
+ error(m: string, meta?: any) { if (this.shouldLog('error')) console.error(this.format('error', m, meta)); }
20
+ warn(m: string, meta?: any) { if (this.shouldLog('warn')) console.warn(this.format('warn', m, meta)); }
21
+ info(m: string, meta?: any) { if (this.shouldLog('info')) console.info(this.format('info', m, meta)); }
22
+ http(m: string, meta?: any) { if (this.shouldLog('http')) console.log(this.format('http', m, meta)); }
23
+ debug(m: string, meta?: any) { if (this.shouldLog('debug')) console.debug(this.format('debug', m, meta)); }
24
+ }
25
+
26
+ const createLogger = (): any => {
27
+ if (isEdgeRuntime()) return new EdgeLogger();
28
+ if (isBrowser()) return { error: (m: string, meta?: any) => console.error(m, meta), warn: (m: string, meta?: any) => console.warn(m, meta), info: (m: string, meta?: any) => console.info(m, meta), http: (m: string, meta?: any) => console.log(m, meta), debug: (m: string, meta?: any) => console.debug(m, meta) };
29
+ try {
30
+ const winston = require('winston');
31
+ const transports: any[] = [];
32
+ if (loggingConfig.console.enabled) {
33
+ transports.push(new winston.transports.Console({ format: winston.format.combine(winston.format.colorize({ all: true }), winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), winston.format.printf(({ timestamp, level, message, ...meta }: any) => { const metaString = Object.keys(meta).length > 0 ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level}: ${message}${metaString}`; })) }));
34
+ }
35
+ // Add Vibe log transport (sends warn/error to Redis for drain to Vibe)
36
+ const vibeTransport = createVibeLogTransport({ minLevel: 'warn' });
37
+ if (vibeTransport) {
38
+ transports.push(vibeTransport);
39
+ console.log('[LOGGER] Vibe Redis transport ENABLED - logs will buffer to Redis');
40
+ } else {
41
+ console.log('[LOGGER] Vibe Redis transport DISABLED - no REDIS_URL configured');
42
+ }
43
+ return winston.createLogger({ level: loggingConfig.logLevel, levels: loggingConfig.levels, format: winston.format.combine(winston.format.timestamp(), winston.format.errors({ stack: true }), winston.format.json()), transports, exitOnError: false });
44
+ } catch (error) { console.warn('Failed to initialize Winston logger, falling back to EdgeLogger:', error); return new EdgeLogger(); }
45
+ };
46
+
47
+ let logger: any;
48
+ if (!(globalThis.process as any)?.browser) {
49
+ logger = createLogger();
50
+ addConfigWatcher((updatedConfig) => { loggingConfig = updatedConfig; if (logger && logger.level !== undefined) { logger.level = loggingConfig.logLevel; } });
51
+ } else { logger = console; }
52
+
53
+ export const log = { error: (m: string, meta?: any) => logger.error(m, meta), warn: (m: string, meta?: any) => logger.warn(m, meta), info: (m: string, meta?: any) => logger.info(m, meta), http: (m: string, meta?: any) => logger.http(m, meta), debug: (m: string, meta?: any) => logger.debug(m, meta) };
54
+ export { logger };
55
+ export const authLogger = { error: (m: string, meta?: any) => logger.error(`[AUTH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[AUTH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[AUTH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[AUTH] ${m}`, meta) };
56
+ export const idpLogger = { error: (m: string, meta?: any) => logger.error(`[IDP] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[IDP] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[IDP] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[IDP] ${m}`, meta) };
57
+ export const apiLogger = { error: (m: string, meta?: any) => logger.error(`[API] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[API] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[API] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[API] ${m}`, meta) };
58
+ export const circuitBreakerLogger = { error: (m: string, meta?: any) => logger.error(`[CIRCUIT-BREAKER] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[CIRCUIT-BREAKER] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[CIRCUIT-BREAKER] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[CIRCUIT-BREAKER] ${m}`, meta) };
59
+ export const tokenLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN] ${m}`, meta) };
60
+ export const tokenSyncLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-SYNC] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-SYNC] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-SYNC] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-SYNC] ${m}`, meta) };
61
+ export const tokenRefreshLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-REFRESH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-REFRESH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-REFRESH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-REFRESH] ${m}`, meta) };
62
+ export const redisLogger = { error: (m: string, meta?: any) => logger.error(`[REDIS] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[REDIS] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[REDIS] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[REDIS] ${m}`, meta) };