@payez/next-mvp 4.1.9 → 4.1.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (164) hide show
  1. package/README.md +792 -792
  2. package/dist/api-handlers/auth/refresh.js +38 -15
  3. package/dist/auth/better-auth.js +4 -3
  4. package/dist/components/account/MobileNavDrawer.js +18 -18
  5. package/dist/components/account/UserAvatarMenu.js +1 -1
  6. package/dist/components/admin/AlertSettingsTab.js +40 -40
  7. package/dist/components/admin/LoggingSettingsTab.js +28 -28
  8. package/dist/lib/ensure-fresh-access-token.js +42 -8
  9. package/dist/lib/idp-fetch.js +25 -9
  10. package/dist/lib/session-store.d.ts +1 -0
  11. package/dist/lib/session-store.js +12 -8
  12. package/dist/lib/token-lifecycle.d.ts +2 -0
  13. package/dist/lib/token-lifecycle.js +21 -3
  14. package/dist/pages/login/page.js +28 -28
  15. package/dist/pages/settings/EnhancedSettingsPage.js +17 -17
  16. package/package.json +893 -893
  17. package/scripts/dev-broker.ps1 +35 -35
  18. package/scripts/dev-local.ps1 +45 -45
  19. package/src/api/auth-handler.ts +548 -548
  20. package/src/api-handlers/account/change-password.ts +142 -142
  21. package/src/api-handlers/account/update-phone.ts +79 -79
  22. package/src/api-handlers/account/verify-email.ts +125 -125
  23. package/src/api-handlers/account/verify-sms.ts +125 -125
  24. package/src/api-handlers/admin/analytics.ts +443 -443
  25. package/src/api-handlers/admin/audit.ts +223 -223
  26. package/src/api-handlers/admin/index.ts +63 -63
  27. package/src/api-handlers/admin/redis-sessions.ts +251 -251
  28. package/src/api-handlers/admin/sessions.ts +318 -318
  29. package/src/api-handlers/admin/site-logs.ts +365 -365
  30. package/src/api-handlers/admin/users.ts +242 -242
  31. package/src/api-handlers/admin/vibe-data.ts +324 -324
  32. package/src/api-handlers/auth/refresh.ts +705 -682
  33. package/src/api-handlers/auth/signout.ts +199 -199
  34. package/src/api-handlers/auth/status.ts +20 -20
  35. package/src/api-handlers/auth/update-session.ts +110 -110
  36. package/src/api-handlers/auth/verify-code.ts +112 -112
  37. package/src/api-handlers/session/refresh-viability.ts +36 -36
  38. package/src/api-handlers/test/force-expire.ts +60 -60
  39. package/src/auth/auth-decision.ts +229 -229
  40. package/src/auth/better-auth.ts +467 -466
  41. package/src/auth/route-config.ts +219 -219
  42. package/src/auth/types/auth-types.ts +555 -555
  43. package/src/auth/types/index.ts +7 -7
  44. package/src/auth/utils/idp-client.ts +445 -445
  45. package/src/auth/utils/index.ts +6 -6
  46. package/src/auth/utils/token-utils.ts +243 -243
  47. package/src/client/AuthContext.tsx +143 -143
  48. package/src/client/fetch-with-auth.ts +47 -47
  49. package/src/components/SessionSync.tsx +138 -138
  50. package/src/components/SignalRHealthCheck.tsx +131 -131
  51. package/src/components/account/MobileNavDrawer.tsx +305 -305
  52. package/src/components/account/UserAvatarMenu.tsx +266 -266
  53. package/src/components/account/index.ts +13 -13
  54. package/src/components/admin/AlertSettingsTab.tsx +728 -728
  55. package/src/components/admin/AnalyticsTab.tsx +703 -703
  56. package/src/components/admin/DataBrowserTab.tsx +505 -505
  57. package/src/components/admin/LoggingSettingsTab.tsx +665 -665
  58. package/src/components/admin/SessionsTab.tsx +414 -414
  59. package/src/components/admin/StatsTab.tsx +379 -379
  60. package/src/components/admin/VibeAdminLayout.tsx +187 -187
  61. package/src/components/admin/index.ts +59 -59
  62. package/src/components/auth/FederatedAuthSection.tsx +95 -95
  63. package/src/components/auth/ModeAwareLoginPage.tsx +135 -135
  64. package/src/components/auth/ModeAwareSignupPage.tsx +267 -267
  65. package/src/components/auth/TraditionalAuthSection.tsx +99 -99
  66. package/src/components/recovery/CompleteStep.tsx +36 -36
  67. package/src/components/recovery/InitiateRecoveryStep.tsx +68 -68
  68. package/src/components/recovery/SelectMethodStep.tsx +73 -73
  69. package/src/components/recovery/SetPasswordStep.tsx +97 -97
  70. package/src/components/recovery/VerifyCodeStep.tsx +90 -90
  71. package/src/components/reserved/ReservedRecoveryWarning.tsx +160 -160
  72. package/src/components/reserved/ReservedStatusBox.tsx +118 -118
  73. package/src/components/ui/BetaBadge.tsx +58 -58
  74. package/src/components/ui/Footer.tsx +93 -93
  75. package/src/config/env.ts +57 -57
  76. package/src/config/logger.ts +62 -62
  77. package/src/config/vibe-log-transport.ts +264 -264
  78. package/src/hooks/useAuth.ts +117 -117
  79. package/src/hooks/useAuthSettings.ts +97 -97
  80. package/src/hooks/useAvailableProviders.ts +120 -120
  81. package/src/hooks/usePasswordValidation.ts +127 -127
  82. package/src/hooks/usePublicAuthSettings.ts +149 -149
  83. package/src/hooks/useSessionExpiration.ts +101 -101
  84. package/src/hooks/useViabilitySession.ts +336 -336
  85. package/src/index.ts +60 -60
  86. package/src/lib/api-handler.ts +643 -643
  87. package/src/lib/app-slug.ts +178 -178
  88. package/src/lib/ensure-fresh-access-token.ts +369 -335
  89. package/src/lib/geolocation.ts +265 -265
  90. package/src/lib/idp-fetch.ts +26 -10
  91. package/src/lib/jwt-decode.ts +82 -82
  92. package/src/lib/roles.ts +177 -177
  93. package/src/lib/session-store.ts +4 -1
  94. package/src/lib/site-logger.ts +245 -245
  95. package/src/lib/standardized-client-api.ts +901 -901
  96. package/src/lib/test-aware-get-token.ts +41 -41
  97. package/src/lib/token-lifecycle.ts +30 -3
  98. package/src/lib/user-agent-parser.ts +252 -252
  99. package/src/logging/api/admin-analytics.ts +51 -51
  100. package/src/logging/api/audit-log.ts +53 -53
  101. package/src/logging/components/AdminAnalyticsLayout.tsx +49 -49
  102. package/src/logging/components/AuditLogViewer.tsx +125 -125
  103. package/src/logging/components/ErrorMetricsCard.tsx +98 -98
  104. package/src/logging/components/HealthMetricsCard.tsx +70 -70
  105. package/src/logging/hooks/useAdminAnalytics.ts +22 -22
  106. package/src/logging/hooks/useAuditLog.ts +24 -24
  107. package/src/logging/hooks/useErrorMetrics.ts +40 -40
  108. package/src/logging/hooks/useHealthMetrics.ts +44 -44
  109. package/src/logging/index.ts +18 -18
  110. package/src/logging/types/analytics.ts +81 -81
  111. package/src/logging/types/audit.ts +31 -31
  112. package/src/logging/types/index.ts +3 -3
  113. package/src/middleware/create-middleware.ts +663 -663
  114. package/src/middleware/rbac-check.ts +279 -279
  115. package/src/middleware/twofa-presets.ts +224 -224
  116. package/src/pages/admin-login/page.tsx +221 -221
  117. package/src/pages/admin-page-permissions/PagePermissionsAdminPage.tsx +527 -527
  118. package/src/pages/admin-page-permissions/index.ts +7 -7
  119. package/src/pages/admin-roles/RolesAdminPage.tsx +533 -533
  120. package/src/pages/admin-roles/modals.tsx +469 -469
  121. package/src/pages/client-admin/ClientSiteAdminPage.tsx +382 -382
  122. package/src/pages/client-admin/index.ts +33 -33
  123. package/src/pages/coming-soon/page.tsx +83 -83
  124. package/src/pages/login/page.tsx +456 -456
  125. package/src/pages/profile/EnhancedProfilePage.tsx +485 -485
  126. package/src/pages/profile/index.ts +9 -9
  127. package/src/pages/profile/page.tsx +166 -166
  128. package/src/pages/recovery/page.tsx +234 -234
  129. package/src/pages/roles/MyRolesPage.tsx +211 -211
  130. package/src/pages/roles/components.tsx +294 -294
  131. package/src/pages/roles/index.ts +17 -17
  132. package/src/pages/security/EnhancedSecurityPage.tsx +565 -565
  133. package/src/pages/security/index.ts +9 -9
  134. package/src/pages/security/page.tsx +507 -507
  135. package/src/pages/settings/EnhancedSettingsPage.tsx +642 -642
  136. package/src/pages/settings/index.ts +9 -9
  137. package/src/pages/settings/page.tsx +47 -47
  138. package/src/pages/showcase/ShowcasePage.tsx +532 -532
  139. package/src/pages/showcase/index.ts +13 -13
  140. package/src/pages/test-env/EmergencyLogoutPage.tsx +180 -180
  141. package/src/pages/test-env/JwtInspectPage.tsx +456 -456
  142. package/src/pages/test-env/RefreshTokenPage.tsx +157 -157
  143. package/src/pages/test-env/TestEnvPage.tsx +118 -118
  144. package/src/pages/test-env/index.ts +25 -25
  145. package/src/pages/verify-code/page.tsx +652 -652
  146. package/src/routes/account/update-phone.ts +13 -13
  147. package/src/routes/auth/logout.ts +108 -108
  148. package/src/routes/auth/nextauth.ts +45 -45
  149. package/src/routes/auth/settings.ts +75 -75
  150. package/src/routes/auth/viability.ts +224 -224
  151. package/src/server/auth-guard.ts +170 -170
  152. package/src/server/slim-middleware.ts +117 -117
  153. package/src/server/with-auth.ts +93 -93
  154. package/src/stores/authStore.ts +1899 -1899
  155. package/src/templates/instrumentation.ts +41 -41
  156. package/src/utils/logout.ts +30 -30
  157. package/src/vibe/client.ts +590 -590
  158. package/src/vibe/enterprise-auth.ts +208 -208
  159. package/src/vibe/errors.ts +185 -185
  160. package/src/vibe/generic.ts +431 -431
  161. package/src/vibe/hooks/index.ts +367 -367
  162. package/src/vibe/index.ts +132 -132
  163. package/src/vibe/sessions.ts +551 -551
  164. package/src/vibe/types.ts +577 -577
@@ -1,58 +1,58 @@
1
- 'use client';
2
-
3
- import React from 'react';
4
-
5
- export interface BetaBadgeProps {
6
- /** Text to display (default: 'beta') */
7
- text?: string;
8
- /** Additional CSS classes */
9
- className?: string;
10
- /** Badge variant */
11
- variant?: 'subtle' | 'outlined' | 'solid';
12
- }
13
-
14
- /**
15
- * A subtle badge component for indicating pre-release status.
16
- *
17
- * Controlled by NEXT_PUBLIC_SHOW_BETA_BADGE env var.
18
- * When env var is not 'true', renders nothing.
19
- *
20
- * @example
21
- * ```tsx
22
- * // In your header, next to logo
23
- * <Logo />
24
- * <BetaBadge />
25
- *
26
- * // Custom text
27
- * <BetaBadge text="preview" />
28
- *
29
- * // Different variant
30
- * <BetaBadge variant="outlined" text="coming soon" />
31
- * ```
32
- */
33
- export function BetaBadge({
34
- text = 'beta',
35
- className = '',
36
- variant = 'subtle'
37
- }: BetaBadgeProps) {
38
- // Check env var - only render if explicitly enabled
39
- if (process.env.NEXT_PUBLIC_SHOW_BETA_BADGE !== 'true') {
40
- return null;
41
- }
42
-
43
- const baseStyles = 'inline-flex items-center px-2 py-0.5 text-xs font-medium rounded-full lowercase tracking-wide';
44
-
45
- const variantStyles = {
46
- subtle: 'bg-gray-100 text-gray-500 dark:bg-gray-800 dark:text-gray-400',
47
- outlined: 'border border-gray-300 text-gray-500 dark:border-gray-600 dark:text-gray-400',
48
- solid: 'bg-gray-500 text-white dark:bg-gray-600',
49
- };
50
-
51
- return (
52
- <span className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
53
- {text}
54
- </span>
55
- );
56
- }
57
-
58
- export default BetaBadge;
1
+ 'use client';
2
+
3
+ import React from 'react';
4
+
5
+ export interface BetaBadgeProps {
6
+ /** Text to display (default: 'beta') */
7
+ text?: string;
8
+ /** Additional CSS classes */
9
+ className?: string;
10
+ /** Badge variant */
11
+ variant?: 'subtle' | 'outlined' | 'solid';
12
+ }
13
+
14
+ /**
15
+ * A subtle badge component for indicating pre-release status.
16
+ *
17
+ * Controlled by NEXT_PUBLIC_SHOW_BETA_BADGE env var.
18
+ * When env var is not 'true', renders nothing.
19
+ *
20
+ * @example
21
+ * ```tsx
22
+ * // In your header, next to logo
23
+ * <Logo />
24
+ * <BetaBadge />
25
+ *
26
+ * // Custom text
27
+ * <BetaBadge text="preview" />
28
+ *
29
+ * // Different variant
30
+ * <BetaBadge variant="outlined" text="coming soon" />
31
+ * ```
32
+ */
33
+ export function BetaBadge({
34
+ text = 'beta',
35
+ className = '',
36
+ variant = 'subtle'
37
+ }: BetaBadgeProps) {
38
+ // Check env var - only render if explicitly enabled
39
+ if (process.env.NEXT_PUBLIC_SHOW_BETA_BADGE !== 'true') {
40
+ return null;
41
+ }
42
+
43
+ const baseStyles = 'inline-flex items-center px-2 py-0.5 text-xs font-medium rounded-full lowercase tracking-wide';
44
+
45
+ const variantStyles = {
46
+ subtle: 'bg-gray-100 text-gray-500 dark:bg-gray-800 dark:text-gray-400',
47
+ outlined: 'border border-gray-300 text-gray-500 dark:border-gray-600 dark:text-gray-400',
48
+ solid: 'bg-gray-500 text-white dark:bg-gray-600',
49
+ };
50
+
51
+ return (
52
+ <span className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
53
+ {text}
54
+ </span>
55
+ );
56
+ }
57
+
58
+ export default BetaBadge;
@@ -1,93 +1,93 @@
1
- 'use client';
2
-
3
- import React from 'react';
4
-
5
- export interface FooterProps {
6
- /** Company or product name (default: 'PayEz') */
7
- companyName?: string;
8
- /** Start year for copyright range (shows "2024-2025" format if provided) */
9
- startYear?: number;
10
- /** Additional links to display */
11
- links?: Array<{ label: string; href: string }>;
12
- /** Additional CSS classes */
13
- className?: string;
14
- /** Variant style */
15
- variant?: 'minimal' | 'standard';
16
- }
17
-
18
- /**
19
- * A themeable footer component with dynamic copyright year.
20
- *
21
- * @example
22
- * ```tsx
23
- * // Minimal footer
24
- * <Footer />
25
- *
26
- * // With company name and start year
27
- * <Footer companyName="Acme Inc" startYear={2020} />
28
- *
29
- * // With links
30
- * <Footer
31
- * links={[
32
- * { label: 'Privacy', href: '/privacy' },
33
- * { label: 'Terms', href: '/terms' }
34
- * ]}
35
- * />
36
- * ```
37
- */
38
- export function Footer({
39
- companyName = 'PayEz',
40
- startYear,
41
- links = [],
42
- className = '',
43
- variant = 'minimal'
44
- }: FooterProps) {
45
- const currentYear = new Date().getFullYear();
46
- const yearDisplay = startYear && startYear < currentYear
47
- ? `${startYear}-${currentYear}`
48
- : `${currentYear}`;
49
-
50
- const baseStyles = 'w-full py-4 text-sm';
51
-
52
- const variantStyles = {
53
- minimal: 'text-center text-gray-500 dark:text-gray-400',
54
- standard: 'border-t border-gray-200 dark:border-gray-700 text-gray-500 dark:text-gray-400'
55
- };
56
-
57
- if (variant === 'minimal') {
58
- return (
59
- <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
60
- <p>
61
- &copy; {yearDisplay} {companyName}. All rights reserved.
62
- </p>
63
- </footer>
64
- );
65
- }
66
-
67
- return (
68
- <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
69
- <div className="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8">
70
- <div className="flex flex-col sm:flex-row justify-between items-center gap-4">
71
- <p>
72
- &copy; {yearDisplay} {companyName}. All rights reserved.
73
- </p>
74
- {links.length > 0 && (
75
- <nav className="flex gap-4" aria-label="Footer links">
76
- {links.map((link, index) => (
77
- <a
78
- key={`${index}-${link.label}`}
79
- href={link.href}
80
- className="hover:text-gray-700 dark:hover:text-gray-200 focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 dark:focus:ring-offset-gray-900 rounded transition-colors"
81
- >
82
- {link.label}
83
- </a>
84
- ))}
85
- </nav>
86
- )}
87
- </div>
88
- </div>
89
- </footer>
90
- );
91
- }
92
-
93
- export default Footer;
1
+ 'use client';
2
+
3
+ import React from 'react';
4
+
5
+ export interface FooterProps {
6
+ /** Company or product name (default: 'PayEz') */
7
+ companyName?: string;
8
+ /** Start year for copyright range (shows "2024-2025" format if provided) */
9
+ startYear?: number;
10
+ /** Additional links to display */
11
+ links?: Array<{ label: string; href: string }>;
12
+ /** Additional CSS classes */
13
+ className?: string;
14
+ /** Variant style */
15
+ variant?: 'minimal' | 'standard';
16
+ }
17
+
18
+ /**
19
+ * A themeable footer component with dynamic copyright year.
20
+ *
21
+ * @example
22
+ * ```tsx
23
+ * // Minimal footer
24
+ * <Footer />
25
+ *
26
+ * // With company name and start year
27
+ * <Footer companyName="Acme Inc" startYear={2020} />
28
+ *
29
+ * // With links
30
+ * <Footer
31
+ * links={[
32
+ * { label: 'Privacy', href: '/privacy' },
33
+ * { label: 'Terms', href: '/terms' }
34
+ * ]}
35
+ * />
36
+ * ```
37
+ */
38
+ export function Footer({
39
+ companyName = 'PayEz',
40
+ startYear,
41
+ links = [],
42
+ className = '',
43
+ variant = 'minimal'
44
+ }: FooterProps) {
45
+ const currentYear = new Date().getFullYear();
46
+ const yearDisplay = startYear && startYear < currentYear
47
+ ? `${startYear}-${currentYear}`
48
+ : `${currentYear}`;
49
+
50
+ const baseStyles = 'w-full py-4 text-sm';
51
+
52
+ const variantStyles = {
53
+ minimal: 'text-center text-gray-500 dark:text-gray-400',
54
+ standard: 'border-t border-gray-200 dark:border-gray-700 text-gray-500 dark:text-gray-400'
55
+ };
56
+
57
+ if (variant === 'minimal') {
58
+ return (
59
+ <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
60
+ <p>
61
+ &copy; {yearDisplay} {companyName}. All rights reserved.
62
+ </p>
63
+ </footer>
64
+ );
65
+ }
66
+
67
+ return (
68
+ <footer className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
69
+ <div className="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8">
70
+ <div className="flex flex-col sm:flex-row justify-between items-center gap-4">
71
+ <p>
72
+ &copy; {yearDisplay} {companyName}. All rights reserved.
73
+ </p>
74
+ {links.length > 0 && (
75
+ <nav className="flex gap-4" aria-label="Footer links">
76
+ {links.map((link, index) => (
77
+ <a
78
+ key={`${index}-${link.label}`}
79
+ href={link.href}
80
+ className="hover:text-gray-700 dark:hover:text-gray-200 focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 dark:focus:ring-offset-gray-900 rounded transition-colors"
81
+ >
82
+ {link.label}
83
+ </a>
84
+ ))}
85
+ </nav>
86
+ )}
87
+ </div>
88
+ </div>
89
+ </footer>
90
+ );
91
+ }
92
+
93
+ export default Footer;
package/src/config/env.ts CHANGED
@@ -1,57 +1,57 @@
1
- export const ENV_CONFIG = {
2
- CLIENT_ID: process.env.CLIENT_ID,
3
- INTERNAL_URL: process.env.IDP_URL,
4
- IDP_CLIENT_ID: (() => { const raw = process.env.NEXT_PUBLIC_IDP_CLIENT_ID || process.env.IDP_CLIENT_ID; const n = raw ? parseInt(raw, 10) : undefined; return Number.isFinite(n as any) ? (n as number) : undefined; })(),
5
- IDP_URL: process.env.IDP_URL,
6
- API_URL: process.env.IDP_URL,
7
- PAYEZ_CORE_BASE_URL: process.env.NEXT_PUBLIC_PAYEZ_CORE_BASE_URL,
8
- SUPPORT_EMAIL: 'support@PayEz.net',
9
- LOG_LEVEL: process.env.LOG_LEVEL || 'info',
10
- LOG_CONSOLE: process.env.LOG_CONSOLE === 'true' || process.env.NODE_ENV === 'development',
11
- GRAYLOG_HOST: process.env.GRAYLOG_HOST || '10.6.10.5',
12
- GRAYLOG_PORT: parseInt(process.env.GRAYLOG_PORT || '12201'),
13
-
14
- // Redis key prefix for multi-tenant session isolation
15
- // Each application should have a unique prefix to prevent session conflicts
16
- // Example: 'cryptaply:', 'website-membership:', 'myapp:'
17
- // Leave empty ('') for backward compatibility
18
- REDIS_KEY_PREFIX: process.env.REDIS_KEY_PREFIX || '',
19
-
20
- // Redirect URLs - configurable per-tenant
21
- // LOGOUT_REDIRECT_URL: Where to redirect after logout (default: '/')
22
- // UNAUTHENTICATED_REDIRECT_URL: Where to redirect unauthenticated users from root (default: '/account-auth/login')
23
- LOGOUT_REDIRECT_URL: process.env.LOGOUT_REDIRECT_URL || '/',
24
- UNAUTHENTICATED_REDIRECT_URL: process.env.UNAUTHENTICATED_REDIRECT_URL || '/account-auth/login',
25
- } as const;
26
-
27
- export const API_ENDPOINTS = {
28
- account: {
29
- profile: '/api/account/profile',
30
- updateProfile: '/api/account/profile',
31
- maskedInfo: '/api/account/masked-info',
32
- sendResetCode: '/api/account/send-reset-code',
33
- verifyResetCode: '/api/account/verify-reset-code',
34
- resetPassword: '/api/account/reset-password',
35
- changePassword: '/api/account/change-password',
36
- validatePassword: '/api/account/validate-password'
37
- },
38
- externalAuth: {
39
- login: '/api/ExternalAuth/login',
40
- refresh: '/api/ExternalAuth/refresh',
41
- validate: '/api/ExternalAuth/validate',
42
- verifyCode: '/api/ExternalAuth/verify-code',
43
- revoke: '/api/ExternalAuth/revoke',
44
- roles: (username: string) => `/api/ExternalAuth/roles/${username}`,
45
- jwks: '/api/ExternalAuth/.well-known/jwks.json',
46
- openidConfig: '/api/ExternalAuth/.well-known/openid-configuration',
47
- passwordless: {
48
- sms: { start: '/api/ExternalAuth/passwordless/sms/start', login: '/api/ExternalAuth/passwordless/sms/login', resend: '/api/ExternalAuth/passwordless/sms/resend' },
49
- email: { start: '/api/ExternalAuth/passwordless/email/start', login: '/api/ExternalAuth/passwordless/email/login', resend: '/api/ExternalAuth/passwordless/email/resend' }
50
- },
51
- lead: { registration: '/api/ExternalAuth/lead/registration', verify: '/api/ExternalAuth/lead/verify' }
52
- },
53
- progressiveAuth: {
54
- step1: '/api/ProgressiveAuth/step1', step2: '/api/ProgressiveAuth/step2', step3: '/api/ProgressiveAuth/step3', step4: '/api/ProgressiveAuth/step4', step5: '/api/ProgressiveAuth/step5', verifyEmail: '/api/ProgressiveAuth/verify-email'
55
- },
56
- azureAuth: { login: '/auth/azure/login', logout: '/auth/azure/logout' }
57
- } as const;
1
+ export const ENV_CONFIG = {
2
+ CLIENT_ID: process.env.CLIENT_ID,
3
+ INTERNAL_URL: process.env.IDP_URL,
4
+ IDP_CLIENT_ID: (() => { const raw = process.env.NEXT_PUBLIC_IDP_CLIENT_ID || process.env.IDP_CLIENT_ID; const n = raw ? parseInt(raw, 10) : undefined; return Number.isFinite(n as any) ? (n as number) : undefined; })(),
5
+ IDP_URL: process.env.IDP_URL,
6
+ API_URL: process.env.IDP_URL,
7
+ PAYEZ_CORE_BASE_URL: process.env.NEXT_PUBLIC_PAYEZ_CORE_BASE_URL,
8
+ SUPPORT_EMAIL: 'support@PayEz.net',
9
+ LOG_LEVEL: process.env.LOG_LEVEL || 'info',
10
+ LOG_CONSOLE: process.env.LOG_CONSOLE === 'true' || process.env.NODE_ENV === 'development',
11
+ GRAYLOG_HOST: process.env.GRAYLOG_HOST || '10.6.10.5',
12
+ GRAYLOG_PORT: parseInt(process.env.GRAYLOG_PORT || '12201'),
13
+
14
+ // Redis key prefix for multi-tenant session isolation
15
+ // Each application should have a unique prefix to prevent session conflicts
16
+ // Example: 'cryptaply:', 'website-membership:', 'myapp:'
17
+ // Leave empty ('') for backward compatibility
18
+ REDIS_KEY_PREFIX: process.env.REDIS_KEY_PREFIX || '',
19
+
20
+ // Redirect URLs - configurable per-tenant
21
+ // LOGOUT_REDIRECT_URL: Where to redirect after logout (default: '/')
22
+ // UNAUTHENTICATED_REDIRECT_URL: Where to redirect unauthenticated users from root (default: '/account-auth/login')
23
+ LOGOUT_REDIRECT_URL: process.env.LOGOUT_REDIRECT_URL || '/',
24
+ UNAUTHENTICATED_REDIRECT_URL: process.env.UNAUTHENTICATED_REDIRECT_URL || '/account-auth/login',
25
+ } as const;
26
+
27
+ export const API_ENDPOINTS = {
28
+ account: {
29
+ profile: '/api/account/profile',
30
+ updateProfile: '/api/account/profile',
31
+ maskedInfo: '/api/account/masked-info',
32
+ sendResetCode: '/api/account/send-reset-code',
33
+ verifyResetCode: '/api/account/verify-reset-code',
34
+ resetPassword: '/api/account/reset-password',
35
+ changePassword: '/api/account/change-password',
36
+ validatePassword: '/api/account/validate-password'
37
+ },
38
+ externalAuth: {
39
+ login: '/api/ExternalAuth/login',
40
+ refresh: '/api/ExternalAuth/refresh',
41
+ validate: '/api/ExternalAuth/validate',
42
+ verifyCode: '/api/ExternalAuth/verify-code',
43
+ revoke: '/api/ExternalAuth/revoke',
44
+ roles: (username: string) => `/api/ExternalAuth/roles/${username}`,
45
+ jwks: '/api/ExternalAuth/.well-known/jwks.json',
46
+ openidConfig: '/api/ExternalAuth/.well-known/openid-configuration',
47
+ passwordless: {
48
+ sms: { start: '/api/ExternalAuth/passwordless/sms/start', login: '/api/ExternalAuth/passwordless/sms/login', resend: '/api/ExternalAuth/passwordless/sms/resend' },
49
+ email: { start: '/api/ExternalAuth/passwordless/email/start', login: '/api/ExternalAuth/passwordless/email/login', resend: '/api/ExternalAuth/passwordless/email/resend' }
50
+ },
51
+ lead: { registration: '/api/ExternalAuth/lead/registration', verify: '/api/ExternalAuth/lead/verify' }
52
+ },
53
+ progressiveAuth: {
54
+ step1: '/api/ProgressiveAuth/step1', step2: '/api/ProgressiveAuth/step2', step3: '/api/ProgressiveAuth/step3', step4: '/api/ProgressiveAuth/step4', step5: '/api/ProgressiveAuth/step5', verifyEmail: '/api/ProgressiveAuth/verify-email'
55
+ },
56
+ azureAuth: { login: '/auth/azure/login', logout: '/auth/azure/logout' }
57
+ } as const;
@@ -1,62 +1,62 @@
1
- import { getLoggingConfigSync, startConfigWatching, addConfigWatcher } from './logging-config';
2
- import { LoggingConfig } from '../types/logging';
3
- import { createVibeLogTransport } from './vibe-log-transport';
4
-
5
- let loggingConfig: LoggingConfig = getLoggingConfigSync();
6
- startConfigWatching();
7
-
8
- const isEdgeRuntime = (): boolean => {
9
- return typeof (globalThis as any).EdgeRuntime !== 'undefined' || process.env.NEXT_RUNTIME === 'edge';
10
- };
11
- const isBrowser = (): boolean => typeof window !== 'undefined';
12
-
13
- interface Logger { error: (message: string, meta?: any) => void; warn: (message: string, meta?: any) => void; info: (message: string, meta?: any) => void; http: (message: string, meta?: any) => void; debug: (message: string, meta?: any) => void; }
14
-
15
- class EdgeLogger implements Logger {
16
- private logLevel: string = loggingConfig.logLevel; private levelOrder: string[] = Object.keys(loggingConfig.levels);
17
- private shouldLog(level: string): boolean { const currentLevelIndex = this.levelOrder.indexOf(this.logLevel); const messageLevelIndex = this.levelOrder.indexOf(level); return messageLevelIndex <= currentLevelIndex; }
18
- private format(level: string, message: string, meta?: any) { const timestamp = new Date().toISOString(); const metaString = meta ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level.toUpperCase()}: ${message}${metaString}`; }
19
- error(m: string, meta?: any) { if (this.shouldLog('error')) console.error(this.format('error', m, meta)); }
20
- warn(m: string, meta?: any) { if (this.shouldLog('warn')) console.warn(this.format('warn', m, meta)); }
21
- info(m: string, meta?: any) { if (this.shouldLog('info')) console.info(this.format('info', m, meta)); }
22
- http(m: string, meta?: any) { if (this.shouldLog('http')) console.log(this.format('http', m, meta)); }
23
- debug(m: string, meta?: any) { if (this.shouldLog('debug')) console.debug(this.format('debug', m, meta)); }
24
- }
25
-
26
- const createLogger = (): any => {
27
- if (isEdgeRuntime()) return new EdgeLogger();
28
- if (isBrowser()) return { error: (m: string, meta?: any) => console.error(m, meta), warn: (m: string, meta?: any) => console.warn(m, meta), info: (m: string, meta?: any) => console.info(m, meta), http: (m: string, meta?: any) => console.log(m, meta), debug: (m: string, meta?: any) => console.debug(m, meta) };
29
- try {
30
- const winston = require('winston');
31
- const transports: any[] = [];
32
- if (loggingConfig.console.enabled) {
33
- transports.push(new winston.transports.Console({ format: winston.format.combine(winston.format.colorize({ all: true }), winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), winston.format.printf(({ timestamp, level, message, ...meta }: any) => { const metaString = Object.keys(meta).length > 0 ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level}: ${message}${metaString}`; })) }));
34
- }
35
- // Add Vibe log transport (sends warn/error to Redis for drain to Vibe)
36
- const vibeTransport = createVibeLogTransport({ minLevel: 'warn' });
37
- if (vibeTransport) {
38
- transports.push(vibeTransport);
39
- console.log('[LOGGER] Vibe Redis transport ENABLED - logs will buffer to Redis');
40
- } else {
41
- console.log('[LOGGER] Vibe Redis transport DISABLED - no REDIS_URL configured');
42
- }
43
- return winston.createLogger({ level: loggingConfig.logLevel, levels: loggingConfig.levels, format: winston.format.combine(winston.format.timestamp(), winston.format.errors({ stack: true }), winston.format.json()), transports, exitOnError: false });
44
- } catch (error) { console.warn('Failed to initialize Winston logger, falling back to EdgeLogger:', error); return new EdgeLogger(); }
45
- };
46
-
47
- let logger: any;
48
- if (!(globalThis.process as any)?.browser) {
49
- logger = createLogger();
50
- addConfigWatcher((updatedConfig) => { loggingConfig = updatedConfig; if (logger && logger.level !== undefined) { logger.level = loggingConfig.logLevel; } });
51
- } else { logger = console; }
52
-
53
- export const log = { error: (m: string, meta?: any) => logger.error(m, meta), warn: (m: string, meta?: any) => logger.warn(m, meta), info: (m: string, meta?: any) => logger.info(m, meta), http: (m: string, meta?: any) => logger.http(m, meta), debug: (m: string, meta?: any) => logger.debug(m, meta) };
54
- export { logger };
55
- export const authLogger = { error: (m: string, meta?: any) => logger.error(`[AUTH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[AUTH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[AUTH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[AUTH] ${m}`, meta) };
56
- export const idpLogger = { error: (m: string, meta?: any) => logger.error(`[IDP] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[IDP] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[IDP] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[IDP] ${m}`, meta) };
57
- export const apiLogger = { error: (m: string, meta?: any) => logger.error(`[API] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[API] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[API] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[API] ${m}`, meta) };
58
- export const circuitBreakerLogger = { error: (m: string, meta?: any) => logger.error(`[CIRCUIT-BREAKER] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[CIRCUIT-BREAKER] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[CIRCUIT-BREAKER] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[CIRCUIT-BREAKER] ${m}`, meta) };
59
- export const tokenLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN] ${m}`, meta) };
60
- export const tokenSyncLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-SYNC] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-SYNC] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-SYNC] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-SYNC] ${m}`, meta) };
61
- export const tokenRefreshLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-REFRESH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-REFRESH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-REFRESH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-REFRESH] ${m}`, meta) };
62
- export const redisLogger = { error: (m: string, meta?: any) => logger.error(`[REDIS] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[REDIS] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[REDIS] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[REDIS] ${m}`, meta) };
1
+ import { getLoggingConfigSync, startConfigWatching, addConfigWatcher } from './logging-config';
2
+ import { LoggingConfig } from '../types/logging';
3
+ import { createVibeLogTransport } from './vibe-log-transport';
4
+
5
+ let loggingConfig: LoggingConfig = getLoggingConfigSync();
6
+ startConfigWatching();
7
+
8
+ const isEdgeRuntime = (): boolean => {
9
+ return typeof (globalThis as any).EdgeRuntime !== 'undefined' || process.env.NEXT_RUNTIME === 'edge';
10
+ };
11
+ const isBrowser = (): boolean => typeof window !== 'undefined';
12
+
13
+ interface Logger { error: (message: string, meta?: any) => void; warn: (message: string, meta?: any) => void; info: (message: string, meta?: any) => void; http: (message: string, meta?: any) => void; debug: (message: string, meta?: any) => void; }
14
+
15
+ class EdgeLogger implements Logger {
16
+ private logLevel: string = loggingConfig.logLevel; private levelOrder: string[] = Object.keys(loggingConfig.levels);
17
+ private shouldLog(level: string): boolean { const currentLevelIndex = this.levelOrder.indexOf(this.logLevel); const messageLevelIndex = this.levelOrder.indexOf(level); return messageLevelIndex <= currentLevelIndex; }
18
+ private format(level: string, message: string, meta?: any) { const timestamp = new Date().toISOString(); const metaString = meta ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level.toUpperCase()}: ${message}${metaString}`; }
19
+ error(m: string, meta?: any) { if (this.shouldLog('error')) console.error(this.format('error', m, meta)); }
20
+ warn(m: string, meta?: any) { if (this.shouldLog('warn')) console.warn(this.format('warn', m, meta)); }
21
+ info(m: string, meta?: any) { if (this.shouldLog('info')) console.info(this.format('info', m, meta)); }
22
+ http(m: string, meta?: any) { if (this.shouldLog('http')) console.log(this.format('http', m, meta)); }
23
+ debug(m: string, meta?: any) { if (this.shouldLog('debug')) console.debug(this.format('debug', m, meta)); }
24
+ }
25
+
26
+ const createLogger = (): any => {
27
+ if (isEdgeRuntime()) return new EdgeLogger();
28
+ if (isBrowser()) return { error: (m: string, meta?: any) => console.error(m, meta), warn: (m: string, meta?: any) => console.warn(m, meta), info: (m: string, meta?: any) => console.info(m, meta), http: (m: string, meta?: any) => console.log(m, meta), debug: (m: string, meta?: any) => console.debug(m, meta) };
29
+ try {
30
+ const winston = require('winston');
31
+ const transports: any[] = [];
32
+ if (loggingConfig.console.enabled) {
33
+ transports.push(new winston.transports.Console({ format: winston.format.combine(winston.format.colorize({ all: true }), winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), winston.format.printf(({ timestamp, level, message, ...meta }: any) => { const metaString = Object.keys(meta).length > 0 ? ` ${JSON.stringify(meta)}` : ''; return `[${timestamp}] ${level}: ${message}${metaString}`; })) }));
34
+ }
35
+ // Add Vibe log transport (sends warn/error to Redis for drain to Vibe)
36
+ const vibeTransport = createVibeLogTransport({ minLevel: 'warn' });
37
+ if (vibeTransport) {
38
+ transports.push(vibeTransport);
39
+ console.log('[LOGGER] Vibe Redis transport ENABLED - logs will buffer to Redis');
40
+ } else {
41
+ console.log('[LOGGER] Vibe Redis transport DISABLED - no REDIS_URL configured');
42
+ }
43
+ return winston.createLogger({ level: loggingConfig.logLevel, levels: loggingConfig.levels, format: winston.format.combine(winston.format.timestamp(), winston.format.errors({ stack: true }), winston.format.json()), transports, exitOnError: false });
44
+ } catch (error) { console.warn('Failed to initialize Winston logger, falling back to EdgeLogger:', error); return new EdgeLogger(); }
45
+ };
46
+
47
+ let logger: any;
48
+ if (!(globalThis.process as any)?.browser) {
49
+ logger = createLogger();
50
+ addConfigWatcher((updatedConfig) => { loggingConfig = updatedConfig; if (logger && logger.level !== undefined) { logger.level = loggingConfig.logLevel; } });
51
+ } else { logger = console; }
52
+
53
+ export const log = { error: (m: string, meta?: any) => logger.error(m, meta), warn: (m: string, meta?: any) => logger.warn(m, meta), info: (m: string, meta?: any) => logger.info(m, meta), http: (m: string, meta?: any) => logger.http(m, meta), debug: (m: string, meta?: any) => logger.debug(m, meta) };
54
+ export { logger };
55
+ export const authLogger = { error: (m: string, meta?: any) => logger.error(`[AUTH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[AUTH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[AUTH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[AUTH] ${m}`, meta) };
56
+ export const idpLogger = { error: (m: string, meta?: any) => logger.error(`[IDP] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[IDP] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[IDP] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[IDP] ${m}`, meta) };
57
+ export const apiLogger = { error: (m: string, meta?: any) => logger.error(`[API] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[API] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[API] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[API] ${m}`, meta) };
58
+ export const circuitBreakerLogger = { error: (m: string, meta?: any) => logger.error(`[CIRCUIT-BREAKER] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[CIRCUIT-BREAKER] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[CIRCUIT-BREAKER] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[CIRCUIT-BREAKER] ${m}`, meta) };
59
+ export const tokenLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN] ${m}`, meta) };
60
+ export const tokenSyncLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-SYNC] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-SYNC] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-SYNC] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-SYNC] ${m}`, meta) };
61
+ export const tokenRefreshLogger = { error: (m: string, meta?: any) => logger.error(`[TOKEN-REFRESH] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[TOKEN-REFRESH] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[TOKEN-REFRESH] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[TOKEN-REFRESH] ${m}`, meta) };
62
+ export const redisLogger = { error: (m: string, meta?: any) => logger.error(`[REDIS] ${m}`, meta), warn: (m: string, meta?: any) => logger.warn(`[REDIS] ${m}`, meta), info: (m: string, meta?: any) => logger.info(`[REDIS] ${m}`, meta), debug: (m: string, meta?: any) => logger.debug(`[REDIS] ${m}`, meta) };