@smi-digital/create-smi-app 2.9.2 → 2.10.0

package/dist/index.js

@@ -505,10 +505,10 @@ async function createApps(projectRoot, targets) {
         );
       }
       await runStep(
-        "Adding Postgres driver (pg) for production",
+        "Adding Postgres + email-provider dependencies for production",
         async () => runCommandQuiet(
           "npm",
-          ["install", "pg"],
+          ["install", "pg", "@strapi/provider-email-nodemailer"],
           join4(projectRoot, target.directory)
         )
       );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smi-digital/create-smi-app",
-  "version": "2.9.2",
+  "version": "2.10.0",
   "description": "",
   "main": "dist/index.js",
   "bin": {

package/templates/integrations/strapi-astro/backend/config/plugins.ts.template

@@ -0,0 +1,20 @@
+export default ({ env }) => ({
+    email: {
+        config: {
+            provider: 'nodemailer',
+            providerOptions: {
+                host: env('SMTP_HOST', 'smtp.example.com'),
+                port: env.int('SMTP_PORT', 587),
+                auth: {
+                    user: env('SMTP_USER'),
+                    pass: env('SMTP_PASSWORD'),
+                },
+                secure: false, // true for 465, false for other ports
+            },
+            settings: {
+                defaultFrom: env('SMTP_DEFAULT_FROM'),
+                defaultReplyTo: env('SMTP_DEFAULT_REPLY_TO'),
+            },
+        },
+    },
+});

package/templates/integrations/strapi-astro/backend/config/server.ts.template

@@ -0,0 +1,15 @@
+import type { Core } from '@strapi/strapi';
+
+const config = ({ env }: Core.Config.Shared.ConfigParams): Core.Config.Server => ({
+  host: env('HOST', '0.0.0.0'),
+  port: env.int('PORT', 1337),
+  // Public URL of the CMS backend itself. Used to build absolute links such as
+  // the admin password-reset email; without it Strapi falls back to host:port
+  // (e.g. http://0.0.0.0:1337). Set via PUBLIC_URL in production.backend.env.
+  url: env('PUBLIC_URL', undefined),
+  app: {
+    keys: env.array('APP_KEYS'),
+  },
+});
+
+export default config;

package/templates/integrations/strapi-astro/backend/src/extensions/users-permissions/strapi-server.ts.template

@@ -0,0 +1,223 @@
+import type { Core } from '@strapi/strapi';
+
+export type EmailLocale = 'de' | 'en';
+
+export interface ResetPasswordTemplateVars {
+    USER: { username: string; email: string };
+    URL: string;
+    TOKEN: string;
+}
+
+export interface EmailConfirmationTemplateVars {
+    USER: { username: string; email: string };
+    URL: string;
+    CODE: string;
+}
+
+// ─── Reset Password ────────────────────────────────────────────────────────────
+
+const resetPasswordSubject: Record<EmailLocale, string> = {
+    de: 'Passwort zurücksetzen – __PROJECT_DOMAIN__',
+    en: 'Reset your password – __PROJECT_DOMAIN__',
+};
+
+const resetPasswordHtml: Record<EmailLocale, (v: ResetPasswordTemplateVars) => string> = {
+    de: (v) => `
+        <div style="font-family:sans-serif;max-width:600px;margin:0 auto">
+            <h2>Hallo ${v.USER.username},</h2>
+            <p>wir haben eine Anfrage zum Zurücksetzen deines Passworts erhalten.</p>
+            <p>Klicke auf den folgenden Link, um dein Passwort zurückzusetzen:</p>
+            <p>
+                <a href="${v.URL}?code=${v.TOKEN}"
+                   style="display:inline-block;padding:12px 24px;background:#1C135D;color:#fff;text-decoration:none;border-radius:4px">
+                    Passwort zurücksetzen
+                </a>
+            </p>
+            <p style="color:#888;font-size:13px">
+                Falls du diese Anfrage nicht gestellt hast, kannst du diese E-Mail ignorieren.
+            </p>
+        </div>`,
+
+    en: (v) => `
+        <div style="font-family:sans-serif;max-width:600px;margin:0 auto">
+            <h2>Hi ${v.USER.username},</h2>
+            <p>We received a request to reset your password.</p>
+            <p>Click the link below to choose a new password:</p>
+            <p>
+                <a href="${v.URL}?code=${v.TOKEN}"
+                   style="display:inline-block;padding:12px 24px;background:#1C135D;color:#fff;text-decoration:none;border-radius:4px">
+                    Reset password
+                </a>
+            </p>
+            <p style="color:#888;font-size:13px">
+                If you did not request this, you can safely ignore this email.
+            </p>
+        </div>`,
+};
+
+const resetPasswordText: Record<EmailLocale, (v: ResetPasswordTemplateVars) => string> = {
+    de: (v) =>
+        `Hallo ${v.USER.username},\n\nKlicke auf diesen Link, um dein Passwort zurückzusetzen:\n${v.URL}?code=${v.TOKEN}\n\nFalls du diese Anfrage nicht gestellt hast, ignoriere diese E-Mail.`,
+    en: (v) =>
+        `Hi ${v.USER.username},\n\nClick this link to reset your password:\n${v.URL}?code=${v.TOKEN}\n\nIf you did not request this, ignore this email.`,
+};
+
+// ─── Email Confirmation ────────────────────────────────────────────────────────
+
+const emailConfirmationSubject: Record<EmailLocale, string> = {
+    de: 'E-Mail-Adresse bestätigen – __PROJECT_DOMAIN__',
+    en: 'Confirm your email address – __PROJECT_DOMAIN__',
+};
+
+const emailConfirmationHtml: Record<EmailLocale, (v: EmailConfirmationTemplateVars) => string> = {
+    de: (v) => `
+        <div style="font-family:sans-serif;max-width:600px;margin:0 auto">
+            <h2>Hallo ${v.USER.username},</h2>
+            <p>Bitte bestätige deine E-Mail-Adresse, indem du auf den folgenden Link klickst:</p>
+            <p>
+                <a href="${v.URL}?confirmation=${v.CODE}"
+                   style="display:inline-block;padding:12px 24px;background:#1C135D;color:#fff;text-decoration:none;border-radius:4px">
+                    E-Mail bestätigen
+                </a>
+            </p>
+            <p style="color:#888;font-size:13px">
+                Falls du kein Konto erstellt hast, kannst du diese E-Mail ignorieren.
+            </p>
+        </div>`,
+
+    en: (v) => `
+        <div style="font-family:sans-serif;max-width:600px;margin:0 auto">
+            <h2>Hi ${v.USER.username},</h2>
+            <p>Please confirm your email address by clicking the link below:</p>
+            <p>
+                <a href="${v.URL}?confirmation=${v.CODE}"
+                   style="display:inline-block;padding:12px 24px;background:#1C135D;color:#fff;text-decoration:none;border-radius:4px">
+                    Confirm email
+                </a>
+            </p>
+            <p style="color:#888;font-size:13px">
+                If you did not create an account, you can safely ignore this email.
+            </p>
+        </div>`,
+};
+
+const emailConfirmationText: Record<EmailLocale, (v: EmailConfirmationTemplateVars) => string> = {
+    de: (v) =>
+        `Hallo ${v.USER.username},\n\nBitte bestätige deine E-Mail-Adresse:\n${v.URL}?confirmation=${v.CODE}\n\nFalls du kein Konto erstellt hast, ignoriere diese E-Mail.`,
+    en: (v) =>
+        `Hi ${v.USER.username},\n\nPlease confirm your email address:\n${v.URL}?confirmation=${v.CODE}\n\nIf you did not create an account, ignore this email.`,
+};
+
+// ─── Helpers ───────────────────────────────────────────────────────────────────
+
+function resolveLocale(raw: unknown): EmailLocale {
+    if (raw === 'en') return 'en';
+    return 'de';
+}
+
+// ─── Extension ────────────────────────────────────────────────────────────────
+
+export default (plugin: any): any => {
+    const originalBootstrap = plugin.bootstrap;
+
+    plugin.bootstrap = async ({ strapi }: { strapi: Core.Strapi }): Promise<void> => {
+        // Run the original bootstrap first
+        if (originalBootstrap) {
+            await originalBootstrap({ strapi });
+        }
+
+        const authController = strapi
+            .plugin('users-permissions')
+            .controller('auth') as Record<string, Function>;
+
+        // ── Override: forgotPassword ──────────────────────────────────────────
+        authController.forgotPassword = async (ctx: any): Promise<void> => {
+            const locale = resolveLocale(ctx.request.body?.locale ?? ctx.query?.locale);
+            const email: string = (ctx.request.body?.email as string)?.toLowerCase();
+
+            if (!email) {
+                return ctx.badRequest('email is required');
+            }
+
+            const user = await strapi.db
+                .query('plugin::users-permissions.user')
+                .findOne({ where: { email } });
+
+            if (!user || user.blocked) {
+                ctx.send({ ok: true });
+                return;
+            }
+
+            const crypto = await import('crypto');
+            const resetPasswordToken = crypto.randomBytes(64).toString('hex');
+
+            const baseUrl = (process.env.PROD_URL ?? '').replace(/\/+$/, '');
+            const resetUrl = `${baseUrl}/reset-password`;
+            const vars: ResetPasswordTemplateVars = {
+                USER: { username: user.username, email: user.email },
+                URL: resetUrl,
+                TOKEN: resetPasswordToken,
+            };
+
+            await strapi.db
+                .query('plugin::users-permissions.user')
+                .update({ where: { id: user.id }, data: { resetPasswordToken } });
+
+            await strapi.plugin('email').provider.send({
+                to: user.email,
+                from: process.env.SMTP_DEFAULT_FROM,
+                subject: resetPasswordSubject[locale],
+                html: resetPasswordHtml[locale](vars),
+                text: resetPasswordText[locale](vars),
+            });
+
+            ctx.send({ ok: true });
+        };
+
+        // ── Override: sendEmailConfirmation ───────────────────────────────────
+        authController.sendEmailConfirmation = async (ctx: any): Promise<void> => {
+            const locale = resolveLocale(ctx.request.body?.locale ?? ctx.query?.locale);
+            const email: string = (ctx.request.body?.email as string)?.toLowerCase();
+
+            if (!email) {
+                return ctx.badRequest('email is required');
+            }
+
+            const user = await strapi.db
+                .query('plugin::users-permissions.user')
+                .findOne({ where: { email } });
+
+            if (!user) {
+                return ctx.badRequest('No user found with this email');
+            }
+
+            if (user.confirmed) {
+                return ctx.badRequest('This email is already confirmed');
+            }
+
+            const serverUrl: string = ((strapi.config.get('server.url') as string) ?? '').replace(
+                /\/+$/,
+                '',
+            );
+            const confirmUrl = `${serverUrl}/api/auth/email-confirmation`;
+
+            const vars: EmailConfirmationTemplateVars = {
+                USER: { username: user.username, email: user.email },
+                URL: confirmUrl,
+                CODE: user.confirmationToken ?? '',
+            };
+
+            await strapi.plugin('email').provider.send({
+                to: user.email,
+                from: process.env.SMTP_DEFAULT_FROM,
+                subject: emailConfirmationSubject[locale],
+                html: emailConfirmationHtml[locale](vars),
+                text: emailConfirmationText[locale](vars),
+            });
+
+            ctx.send({ email, sent: true });
+        };
+    };
+
+    return plugin;
+};

package/templates/integrations/strapi-astro/integration.config.json

@@ -49,6 +49,18 @@
     }
   ],
   "cdFiles": [
+    {
+      "template": "backend/config/plugins.ts.template",
+      "target": "backend/config/plugins.ts"
+    },
+    {
+      "template": "backend/config/server.ts.template",
+      "target": "backend/config/server.ts"
+    },
+    {
+      "template": "backend/src/extensions/users-permissions/strapi-server.ts.template",
+      "target": "backend/src/extensions/users-permissions/strapi-server.ts"
+    },
     {
       "template": "docker-compose.yml.template",
       "target": "docker-compose.yml"

package/templates/integrations/strapi-astro/production.backend.env.template

@@ -28,6 +28,25 @@ DATABASE_USERNAME=__DB_NAME__
 DATABASE_PASSWORD=__DB_PASSWORD__
 DATABASE_SSL=false
 
+# Public URLs.
+# PROD_URL  → the public site (frontend). Used to build the end-user password
+#             reset link (<PROD_URL>/reset-password).
+# PUBLIC_URL → the CMS backend itself. Used for absolute backend links such as
+#             the admin password-reset email and the email-confirmation link.
+PROD_URL=https://__PROJECT_DOMAIN__
+PUBLIC_URL=https://__BACKEND_DOMAIN__
+
+# SMTP / contact form (FILL IN before relying on email — password reset,
+# email confirmation, contact flow).
+SMTP_HOST=
+SMTP_PORT=587
+SMTP_USER=
+SMTP_PASSWORD=
+SMTP_DEFAULT_FROM=
+SMTP_DEFAULT_REPLY_TO=
+CONTACTFLOW_SENDER=
+CONTACTFLOW_RECEIVER=
+
 # Production Settings
 HOST=0.0.0.0
 PORT=1337