@xeplr/auth 1.0.0

package/models/index.js

@@ -0,0 +1,29 @@
+const User = require('./User');
+const Menu = require('./Menu');
+const Api = require('./Api');
+const UiPage = require('./UiPage');
+const UiElement = require('./UiElement');
+const Role = require('./Role');
+const ApisRolesMapping = require('./ApisRolesMapping');
+const UiPagesRolesMapping = require('./UiPagesRolesMapping');
+const UiElementsRolesMapping = require('./UiElementsRolesMapping');
+const MenuRolesMapping = require('./MenuRolesMapping');
+const UserRolesMapping = require('./UserRolesMapping');
+const Tenant = require('./Tenant');
+const UserTenantsMapping = require('./UserTenantsMapping');
+
+module.exports = {
+  User,
+  Menu,
+  Api,
+  UiPage,
+  UiElement,
+  Role,
+  ApisRolesMapping,
+  UiPagesRolesMapping,
+  UiElementsRolesMapping,
+  MenuRolesMapping,
+  UserRolesMapping,
+  Tenant,
+  UserTenantsMapping
+};

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@xeplr/auth",
+  "version": "1.0.0",
+  "description": "Pluggable authentication service: register, login, forgot/reset password, RBAC, multi-tenancy",
+  "main": "index.js",
+  "files": ["index.js", "lib/", "bin/", "models/", "migrations/", "seeds/"],
+  "bin": {
+    "xeplr-auth-migrate": "./bin/migrate.js",
+    "xeplr-auth-server": "./bin/server.js"
+  },
+  "exports": {
+    ".": "./index.js",
+    "./bin/server": "./bin/server.js",
+    "./package.json": "./package.json"
+  },
+  "keywords": ["auth", "authentication", "jwt", "rbac", "express", "middleware", "multi-tenancy"],
+  "author": "xeplr",
+  "license": "MIT",
+  "repository": { "type": "git", "url": "https://github.com/Xeplr/xeplr-auth" },
+  "publishConfig": { "access": "public" },
+  "dependencies": {
+    "bcrypt": "^6.0.0",
+    "jsonwebtoken": "^9.0.3",
+    "@xeplr/base-apis": "^1.0.0",
+    "@xeplr/db": "^1.0.0",
+    "@xeplr/utils": "^1.0.0"
+  },
+  "peerDependencies": {
+    "express": "^4.0.0 || ^5.0.0"
+  }
+}

package/seeds/001_roles.js

@@ -0,0 +1,26 @@
+var crypto = require('crypto');
+
+function generateId() {
+  return crypto.randomBytes(12).toString('hex').substring(0, 25);
+}
+
+var now = new Date().toISOString();
+var MT_ALL = '*';
+
+var ROLES = ['Super Admin', 'Admin', 'Editor', 'Viewer'];
+
+exports.seed = async function(knex) {
+  for (var i = 0; i < ROLES.length; i++) {
+    var exists = await knex('roles').where({ name: ROLES[i] }).first();
+    if (!exists) {
+      await knex('roles').insert({
+        id: generateId(),
+        name: ROLES[i],
+        isActive: true,
+        recordCreatedDate: now,
+        recordModifiedDate: now,
+        mtId1: MT_ALL
+      });
+    }
+  }
+};

package/seeds/002_apis.js

@@ -0,0 +1,70 @@
+var crypto = require('crypto');
+
+function generateId() {
+  return crypto.randomBytes(12).toString('hex').substring(0, 25);
+}
+
+var now = new Date().toISOString();
+var MT_ALL = '*';
+
+var APIS = [
+  // Auth APIs (public — no role needed)
+  { name: '/auth/api/register', apiGroup: '', isPublic: true },
+  { name: '/auth/api/activate', apiGroup: '', isPublic: true },
+  { name: '/auth/api/login', apiGroup: '', isPublic: true },
+  { name: '/auth/api/forgot-password', apiGroup: '', isPublic: true },
+  { name: '/auth/api/reset-password', apiGroup: '', isPublic: true },
+  { name: '/auth/api/refresh', apiGroup: '', isPublic: true },
+  { name: '/auth/api/logout', apiGroup: '', isPublic: true },
+  { name: '/auth/api/me', apiGroup: 'account:view', isPublic: false },
+
+  // Admin APIs — user/role management
+  { name: '/auth/api/admin/users', apiGroup: 'users:view', isPublic: false },
+  { name: '/auth/api/admin/roles', apiGroup: 'users:view', isPublic: false },
+  { name: '/auth/api/admin/user-role', apiGroup: 'users:edit', isPublic: false },
+  { name: '/auth/api/admin/access-items', apiGroup: 'access:view', isPublic: false },
+  { name: '/auth/api/admin/access-role', apiGroup: 'access:edit', isPublic: false },
+  { name: '/auth/api/admin/module-role', apiGroup: 'access:edit', isPublic: false },
+
+  // Admin APIs — tenant management
+  { name: '/auth/api/admin/tenants', apiGroup: 'tenants:view', isPublic: false },
+  { name: '/auth/api/admin/tenants/save', apiGroup: 'tenants:edit', isPublic: false },
+  { name: '/auth/api/admin/tenants/delete', apiGroup: 'tenants:delete', isPublic: false },
+  { name: '/auth/api/admin/tenants/assign-user', apiGroup: 'tenants:edit', isPublic: false },
+
+  // Admin APIs — master settings
+  { name: '/auth/api/admin/master/roles', apiGroup: 'settings:view', isPublic: false },
+  { name: '/auth/api/admin/master/roles/save', apiGroup: 'settings:edit', isPublic: false },
+  { name: '/auth/api/admin/master/roles/delete', apiGroup: 'settings:delete', isPublic: false },
+  { name: '/auth/api/admin/master/apis', apiGroup: 'settings:view', isPublic: false },
+  { name: '/auth/api/admin/master/apis/save', apiGroup: 'settings:edit', isPublic: false },
+  { name: '/auth/api/admin/master/apis/delete', apiGroup: 'settings:delete', isPublic: false },
+  { name: '/auth/api/admin/master/pages', apiGroup: 'settings:view', isPublic: false },
+  { name: '/auth/api/admin/master/pages/save', apiGroup: 'settings:edit', isPublic: false },
+  { name: '/auth/api/admin/master/pages/delete', apiGroup: 'settings:delete', isPublic: false },
+  { name: '/auth/api/admin/master/elements', apiGroup: 'settings:view', isPublic: false },
+  { name: '/auth/api/admin/master/elements/save', apiGroup: 'settings:edit', isPublic: false },
+  { name: '/auth/api/admin/master/elements/delete', apiGroup: 'settings:delete', isPublic: false },
+  { name: '/auth/api/admin/master/menus', apiGroup: 'settings:view', isPublic: false },
+  { name: '/auth/api/admin/master/menus/save', apiGroup: 'settings:edit', isPublic: false },
+  { name: '/auth/api/admin/master/menus/delete', apiGroup: 'settings:delete', isPublic: false },
+];
+
+exports.seed = async function(knex) {
+  for (var i = 0; i < APIS.length; i++) {
+    var api = APIS[i];
+    var exists = await knex('apis').where({ name: api.name }).first();
+    if (!exists) {
+      await knex('apis').insert({
+        id: generateId(),
+        name: api.name,
+        apiGroup: api.apiGroup,
+        isPublic: api.isPublic,
+        isActive: true,
+        recordCreatedDate: now,
+        recordModifiedDate: now,
+        mtId1: MT_ALL
+      });
+    }
+  }
+};

package/seeds/003_pages.js

@@ -0,0 +1,41 @@
+var crypto = require('crypto');
+
+function generateId() {
+  return crypto.randomBytes(12).toString('hex').substring(0, 25);
+}
+
+var now = new Date().toISOString();
+var MT_ALL = '*';
+
+var PAGES = [
+  { name: 'Login', uiPagesGroup: '', isPublic: true },
+  { name: 'Register', uiPagesGroup: '', isPublic: true },
+  { name: 'Forgot Password', uiPagesGroup: '', isPublic: true },
+  { name: 'Reset Password', uiPagesGroup: '', isPublic: true },
+  { name: 'Activate Account', uiPagesGroup: '', isPublic: true },
+  { name: 'Profile', uiPagesGroup: 'account:view', isPublic: false },
+  { name: 'Change Password', uiPagesGroup: 'account:edit', isPublic: false },
+  { name: 'User Roles', uiPagesGroup: 'users:view', isPublic: false },
+  { name: 'Access Matrix', uiPagesGroup: 'access:view', isPublic: false },
+  { name: 'Master Settings', uiPagesGroup: 'settings:view', isPublic: false },
+  { name: 'Tenant Management', uiPagesGroup: 'tenants:view', isPublic: false },
+];
+
+exports.seed = async function(knex) {
+  for (var i = 0; i < PAGES.length; i++) {
+    var page = PAGES[i];
+    var exists = await knex('uiPages').where({ name: page.name }).first();
+    if (!exists) {
+      await knex('uiPages').insert({
+        id: generateId(),
+        name: page.name,
+        uiPagesGroup: page.uiPagesGroup,
+        isPublic: page.isPublic,
+        isActive: true,
+        recordCreatedDate: now,
+        recordModifiedDate: now,
+        mtId1: MT_ALL
+      });
+    }
+  }
+};

package/seeds/004_elements.js

@@ -0,0 +1,46 @@
+var crypto = require('crypto');
+
+function generateId() {
+  return crypto.randomBytes(12).toString('hex').substring(0, 25);
+}
+
+var now = new Date().toISOString();
+var MT_ALL = '*';
+
+var ELEMENTS = [
+  { name: 'Assign Role Button', uiElementsGroup: 'users:edit' },
+  { name: 'Remove Role Button', uiElementsGroup: 'users:edit' },
+  { name: 'Toggle Access Checkbox', uiElementsGroup: 'access:edit' },
+  { name: 'Toggle Module Access Checkbox', uiElementsGroup: 'access:edit' },
+  { name: 'Add Role Button', uiElementsGroup: 'settings:edit' },
+  { name: 'Delete Role Button', uiElementsGroup: 'settings:delete' },
+  { name: 'Add API Button', uiElementsGroup: 'settings:edit' },
+  { name: 'Delete API Button', uiElementsGroup: 'settings:delete' },
+  { name: 'Add Page Button', uiElementsGroup: 'settings:edit' },
+  { name: 'Delete Page Button', uiElementsGroup: 'settings:delete' },
+  { name: 'Add Element Button', uiElementsGroup: 'settings:edit' },
+  { name: 'Delete Element Button', uiElementsGroup: 'settings:delete' },
+  { name: 'Add Menu Button', uiElementsGroup: 'settings:edit' },
+  { name: 'Delete Menu Button', uiElementsGroup: 'settings:delete' },
+  { name: 'Add Tenant Button', uiElementsGroup: 'tenants:edit' },
+  { name: 'Delete Tenant Button', uiElementsGroup: 'tenants:delete' },
+  { name: 'Assign User Tenant', uiElementsGroup: 'tenants:edit' },
+];
+
+exports.seed = async function(knex) {
+  for (var i = 0; i < ELEMENTS.length; i++) {
+    var el = ELEMENTS[i];
+    var exists = await knex('uiElements').where({ name: el.name }).first();
+    if (!exists) {
+      await knex('uiElements').insert({
+        id: generateId(),
+        name: el.name,
+        uiElementsGroup: el.uiElementsGroup,
+        isActive: true,
+        recordCreatedDate: now,
+        recordModifiedDate: now,
+        mtId1: MT_ALL
+      });
+    }
+  }
+};

package/seeds/005_menus.js

@@ -0,0 +1,35 @@
+var crypto = require('crypto');
+
+function generateId() {
+  return crypto.randomBytes(12).toString('hex').substring(0, 25);
+}
+
+var now = new Date().toISOString();
+var MT_ALL = '*';
+
+var MENUS = [
+  { name: 'Profile', menuGroup: 'account:view', isPublic: false },
+  { name: 'User Roles', menuGroup: 'users:view', isPublic: false },
+  { name: 'Access Matrix', menuGroup: 'access:view', isPublic: false },
+  { name: 'Master Settings', menuGroup: 'settings:view', isPublic: false },
+  { name: 'Tenant Management', menuGroup: 'tenants:view', isPublic: false },
+];
+
+exports.seed = async function(knex) {
+  for (var i = 0; i < MENUS.length; i++) {
+    var menu = MENUS[i];
+    var exists = await knex('menus').where({ name: menu.name }).first();
+    if (!exists) {
+      await knex('menus').insert({
+        id: generateId(),
+        name: menu.name,
+        menuGroup: menu.menuGroup,
+        isPublic: menu.isPublic,
+        isActive: true,
+        recordCreatedDate: now,
+        recordModifiedDate: now,
+        mtId1: MT_ALL
+      });
+    }
+  }
+};

package/seeds/006_default_tenant.js

@@ -0,0 +1,50 @@
+var crypto = require('crypto');
+
+function generateId() {
+  return crypto.randomBytes(12).toString('hex').substring(0, 25);
+}
+
+var now = new Date().toISOString();
+var MT_ALL = '*';
+var DEFAULT_TENANT_NAME = 'Default';
+var DEFAULT_TENANT_CODE = 'default';
+
+exports.seed = async function(knex) {
+  // Create default tenant if not exists
+  var tenant = await knex('tenants').where({ code: DEFAULT_TENANT_CODE }).first();
+  if (!tenant) {
+    var tenantId = generateId();
+    await knex('tenants').insert({
+      id: tenantId,
+      name: DEFAULT_TENANT_NAME,
+      code: DEFAULT_TENANT_CODE,
+      level: 1,
+      description: 'Default tenant',
+      mtId1: MT_ALL,
+      isActive: true,
+      recordCreatedDate: now,
+      recordModifiedDate: now
+    });
+    tenant = { id: tenantId };
+  }
+
+  // Assign all Super Admin users to the default tenant
+  var superAdminRole = await knex('roles').where({ name: 'Super Admin' }).first();
+  if (!superAdminRole) return;
+
+  var superAdminMappings = await knex('userRolesMapping').where({ roleId: superAdminRole.id });
+  for (var i = 0; i < superAdminMappings.length; i++) {
+    var userId = superAdminMappings[i].userId;
+    var exists = await knex('userTenantsMapping').where({ userId: userId, tenantId: tenant.id }).first();
+    if (!exists) {
+      await knex('userTenantsMapping').insert({
+        id: generateId(),
+        userId: userId,
+        tenantId: tenant.id,
+        isActive: true,
+        recordCreatedDate: now,
+        recordModifiedDate: now
+      });
+    }
+  }
+};

package/seeds/zzz_admin_access.js

@@ -0,0 +1,49 @@
+var crypto = require('crypto');
+
+function generateId() {
+  return crypto.randomBytes(12).toString('hex').substring(0, 25);
+}
+
+var now = new Date().toISOString();
+var MT_ALL = '*';
+
+var ADMIN_ROLES = ['Super Admin', 'Admin'];
+
+var MAPPINGS = [
+  { table: 'apisRolesMapping', source: 'apis', fk: 'apiId' },
+  { table: 'uiPagesRolesMapping', source: 'uiPages', fk: 'uiPageId' },
+  { table: 'uiElementsRolesMapping', source: 'uiElements', fk: 'uiElementId' },
+  { table: 'menuRolesMapping', source: 'menus', fk: 'menuId' },
+];
+
+exports.seed = async function(knex) {
+  var roles = await knex('roles').whereIn('name', ADMIN_ROLES).select('id', 'name');
+  if (roles.length === 0) return;
+
+  for (var m = 0; m < MAPPINGS.length; m++) {
+    var mapping = MAPPINGS[m];
+    var items = await knex(mapping.source).select('id');
+
+    for (var r = 0; r < roles.length; r++) {
+      var roleId = roles[r].id;
+
+      for (var i = 0; i < items.length; i++) {
+        var where = { roleId: roleId };
+        where[mapping.fk] = items[i].id;
+
+        var exists = await knex(mapping.table).where(where).first();
+        if (!exists) {
+          var row = {
+            id: generateId(),
+            roleId: roleId,
+            recordCreatedDate: now,
+            recordModifiedDate: now,
+            mtId1: MT_ALL
+          };
+          row[mapping.fk] = items[i].id;
+          await knex(mapping.table).insert(row);
+        }
+      }
+    }
+  }
+};