@zintrust/core 0.4.28 → 0.4.30

package/app/Controllers/AuthController.js

@@ -1,233 +0,0 @@
-/**
- * Auth Controller
- * Minimal, real auth endpoints backing the example API routes.
- */
-import { Auth } from '../../src/auth/Auth.js';
-import { isUndefinedOrNull } from '../../src/helper/index.js';
-import { User } from '../Models/User.js';
-import { getString } from '../../src/common/utility.js';
-import DefaultLogger, { Logger as NamedLogger } from '../../src/config/logger.js';
-import { getValidatedBody } from '../../src/http/ValidationHelper.js';
-import { JwtManager } from '../../src/security/JwtManager.js';
-const noopLoggerMethod = (_message, _data) => undefined;
-const Logger = NamedLogger ??
-    DefaultLogger ??
-    Object.freeze({
-        debug: noopLoggerMethod,
-        info: noopLoggerMethod,
-        warn: noopLoggerMethod,
-        error: noopLoggerMethod,
-        fatal: noopLoggerMethod,
-    });
-const pickPublicUser = (row) => {
-    return {
-        id: row.id,
-        name: getString(row.name),
-        email: getString(row.email),
-    };
-};
-/**
- * Authenticates a user by email and password.
- * Validates credentials against the database and returns a JWT access token on success.
- * Logs all authentication attempts for security auditing.
- * @param req - HTTP request containing email and password
- * @param res - HTTP response to send authentication result
- * @returns Promise that resolves after sending the response
- */
-async function login(req, res) {
-    const body = getValidatedBody(req);
-    if (!body) {
-        Logger.error('AuthController.login: validation middleware did not populate req.validated.body');
-        return res.setStatus(500).json({ error: 'Internal server error' });
-    }
-    const email = getString(body['email']);
-    const password = getString(body['password']);
-    const ipAddress = req.getRaw().socket.remoteAddress ?? 'unknown';
-    try {
-        const existing = await User.where('email', '=', email).limit(1).first();
-        if (existing === null) {
-            Logger.warn('AuthController.login: failed login attempt', {
-                email,
-                ip: ipAddress,
-                reason: 'user_not_found',
-                timestamp: new Date().toISOString(),
-            });
-            res.setStatus(401).json({ error: 'Invalid credentials' });
-            return;
-        }
-        const passwordHash = getString(existing.password);
-        const ok = await Auth.compare(password, passwordHash);
-        if (!ok) {
-            Logger.warn('AuthController.login: failed login attempt', {
-                email,
-                ip: ipAddress,
-                reason: 'invalid_password',
-                timestamp: new Date().toISOString(),
-            });
-            res.setStatus(401).json({ error: 'Invalid credentials' });
-            return;
-        }
-        const user = pickPublicUser(existing);
-        const subject = (() => {
-            const id = user.id;
-            if (typeof id === 'string' && id.length > 0)
-                return id;
-            if (typeof id === 'number' && Number.isFinite(id))
-                return String(id);
-            return undefined;
-        })();
-        // Bulletproof Auth (device binding) expects a device id header to match a JWT claim.
-        // For the example app, we mint a stable device id derived from the subject.
-        // Production apps should issue a per-device id and manage a per-device signing secret.
-        const deviceId = isUndefinedOrNull(subject) ? undefined : `dev-${subject}`;
-        const token = await JwtManager.signAccessToken({
-            sub: subject,
-            email,
-            ...(isUndefinedOrNull(deviceId) ? {} : { deviceId }),
-        });
-        Logger.info('AuthController.login: successful login', {
-            userId: subject,
-            email,
-            ip: ipAddress,
-            timestamp: new Date().toISOString(),
-        });
-        res.json({
-            token,
-            token_type: 'Bearer',
-            ...(isUndefinedOrNull(deviceId) ? {} : { deviceId }),
-            user,
-        });
-    }
-    catch (error) {
-        Logger.error('AuthController.login: unexpected error', {
-            email,
-            ip: ipAddress,
-            error: error instanceof Error ? error.message : String(error),
-            timestamp: new Date().toISOString(),
-        });
-        res.setStatus(500).json({ error: 'Login failed' });
-    }
-}
-/**
- * Registers a new user with name, email, and password.
- * Validates email uniqueness, hashes password, and stores user in database.
- * Returns 201 on success, 409 if email already exists.
- * @param req - HTTP request containing name, email, and password
- * @param res - HTTP response to send registration result
- * @returns Promise that resolves after sending the response
- */
-async function register(req, res) {
-    const body = getValidatedBody(req);
-    if (!body) {
-        Logger.error('AuthController.register: validation middleware did not populate req.validated.body');
-        res.setStatus(500).json({ error: 'Internal server error' });
-        return;
-    }
-    const name = getString(body['name']);
-    const email = getString(body['email']);
-    const password = getString(body['password']);
-    const ipAddress = req.getRaw().socket.remoteAddress ?? 'unknown';
-    try {
-        const existing = await User.where('email', '=', email).limit(1).first();
-        if (existing !== null) {
-            Logger.warn('AuthController.register: duplicate email attempt', {
-                email,
-                ip: ipAddress,
-                timestamp: new Date().toISOString(),
-            });
-            res.setStatus(409).json({ error: 'Email already registered' });
-            return;
-        }
-        const passwordHash = await Auth.hash(password);
-        const result = await User.query().insert({
-            name,
-            email,
-            password: passwordHash,
-        });
-        let insertedUserId = result.id;
-        if (insertedUserId === null || insertedUserId === undefined) {
-            const inserted = await User.where('email', '=', email).limit(1).first();
-            if (inserted?.id !== null && inserted?.id !== undefined) {
-                insertedUserId = inserted.id;
-            }
-        }
-        if (insertedUserId !== null && insertedUserId !== undefined) {
-            Logger.info('AuthController.register: successful registration', {
-                user_id: insertedUserId,
-                email,
-                ip: ipAddress,
-                timestamp: new Date().toISOString(),
-            });
-            res.setStatus(201).json({ message: 'Registered' });
-        }
-        else {
-            Logger.error('Failed to retrieve inserted user ID', {
-                email,
-                ip: ipAddress,
-            });
-            res.setStatus(500).json({ error: 'Registration failed' });
-        }
-        return;
-    }
-    catch (error) {
-        Logger.error('AuthController.register failed', error);
-        res.setStatus(500).json({ error: 'Registration failed' });
-    }
-}
-/**
- * Logs out the current user by revoking their JWT token.
- * Extracts authorization header and marks token as revoked.
- * Requires persistent token revocation store for stateless JWT validation.
- * @param req - HTTP request containing authorization header with JWT token
- * @param res - HTTP response to send logout confirmation
- * @returns Promise that resolves after sending the response
- */
-async function logout(req, res) {
-    const authHeader = typeof req.getHeader === 'function' ? req.getHeader('authorization') : undefined;
-    await JwtManager.logout(authHeader);
-    res.json({ message: 'Logged out' });
-}
-/**
- * Logs out the current user from all devices by removing all active sessions for their subject.
- *
- * With session allowlist enforcement, deleting a user's session records causes any previously issued
- * tokens to become unauthorized (401) immediately.
- */
-async function logoutAll(req, res) {
-    const sub = typeof req.user?.sub === 'string' ? req.user.sub.trim() : '';
-    if (sub === '') {
-        res.setStatus(401).json({ error: 'Unauthorized' });
-        return;
-    }
-    await JwtManager.logoutAll(sub);
-    res.json({ message: 'Logged out everywhere' });
-}
-/**
- * Refreshes the user's JWT access token.
- * Generates a new token with the same claims as the current user.
- * Returns 401 if user is not authenticated.
- * @param req - HTTP request with user populated by authentication middleware
- * @param res - HTTP response to send refreshed token
- * @returns Promise that resolves after sending the response
- */
-async function refresh(req, res) {
-    const user = req.user;
-    if (user === undefined) {
-        res.setStatus(401).json({ error: 'Unauthorized' });
-        return;
-    }
-    const token = await JwtManager.signAccessToken(user);
-    res.json({ token, token_type: 'Bearer' });
-}
-export const AuthController = Object.freeze({
-    create() {
-        return {
-            login,
-            register,
-            logout,
-            logoutAll,
-            refresh,
-        };
-    },
-});
-export default AuthController;

package/app/Controllers/TestController.d.ts

@@ -1,22 +0,0 @@
-/**
- * Test Controller
- * Utility endpoints to create test jobs in Redis for Queue Monitor demo.
- */
-import type { IRequest } from '../../src/http/Request';
-import type { IResponse } from '../../src/http/Response';
-declare function enqueue(req: IRequest, res: IResponse): Promise<void>;
-declare function populateAll(req: IRequest, res: IResponse): Promise<void>;
-declare function workerStart(req: IRequest, res: IResponse): Promise<void>;
-declare function workerStop(_req: IRequest, res: IResponse): Promise<void>;
-declare function workerStatus(_req: IRequest, res: IResponse): Promise<void>;
-export declare const TestController: Readonly<{
-    create(): {
-        enqueue: typeof enqueue;
-        populateAll: typeof populateAll;
-        workerStart: typeof workerStart;
-        workerStop: typeof workerStop;
-        workerStatus: typeof workerStatus;
-    };
-}>;
-export default TestController;
-//# sourceMappingURL=TestController.d.ts.map

package/app/Controllers/TestController.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"TestController.d.ts","sourceRoot":"","sources":["../../../app/Controllers/TestController.ts"],"names":[],"mappings":"AACA;;;GAGG;AAUH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAgDhD,iBAAe,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BnE;AAED,iBAAe,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAuEvE;AAED,iBAAe,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBvE;AAED,iBAAe,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAavE;AAED,iBAAe,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBzE;AAED,eAAO,MAAM,cAAc;;;;;;;;EAIzB,CAAC;AAEH,eAAe,cAAc,CAAC"}

package/app/Controllers/TestController.js

@@ -1,188 +0,0 @@
-/* eslint-disable no-await-in-loop */
-/**
- * Test Controller
- * Utility endpoints to create test jobs in Redis for Queue Monitor demo.
- */
-import { getTestWorkerHealth, getTestWorkerMetrics, isWorkerRunning, startTestWorker, stopTestWorker, } from '../Workers/TestWorker.js';
-import { Logger } from '../../src/config/logger.js';
-import { getValidatedBody } from '../../src/http/ValidationHelper.js';
-import queueConfig from '../../config/queue.js';
-import { createBullMQDriver } from '../../packages/queue-monitor/src/index.js';
-/**
- * Helper: Create BullMQ driver with Redis config
- */
-const createDriver = () => createBullMQDriver({
-    host: queueConfig.drivers.redis.host,
-    port: queueConfig.drivers.redis.port,
-    password: queueConfig.drivers.redis.password ?? '',
-    db: queueConfig.drivers.redis.database ?? '',
-});
-/**
- * Helper: Enqueue a single job
- */
-const enqueueJob = async (driver, queueName, index, type, delayMs) => {
-    const payload = {
-        test: true,
-        createdAt: Date.now(),
-        index,
-        type,
-        message: `Test job ${index} for queue ${queueName} (${type})`,
-        shouldFail: type === 'failed',
-    };
-    const options = {
-        removeOnComplete: true,
-        attempts: type === 'failed' ? 1 : 3,
-    };
-    if (type === 'delayed') {
-        options['delay'] = delayMs;
-    }
-    const id = await driver.enqueue(queueName, payload, options);
-    return String(id);
-};
-async function enqueue(req, res) {
-    const body = getValidatedBody(req) ??
-        req.getBody?.() ??
-        req.body ??
-        {};
-    const queueName = body['queue'] || 'default';
-    const count = Number(body['count'] ?? 1) || 1;
-    const type = body['type'] || 'waiting';
-    const delayMs = Number(body['delay'] ?? 5000) || 5000;
-    try {
-        const driver = createDriver();
-        const ids = [];
-        for (let i = 0; i < count; i += 1) {
-            const id = await enqueueJob(driver, queueName, i, type, delayMs);
-            ids.push(id);
-        }
-        await driver.close();
-        res.json({ ok: true, queue: queueName, count, type, ids });
-    }
-    catch (error) {
-        Logger.error('TestController.enqueue failed', error);
-        res.setStatus(500).json({ error: 'Enqueue failed' });
-    }
-}
-async function populateAll(req, res) {
-    const body = getValidatedBody(req) ??
-        req.getBody?.() ??
-        req.body ??
-        {};
-    const queueName = body['queue'] || 'demo';
-    try {
-        const driver = createBullMQDriver({
-            host: queueConfig.drivers.redis.host,
-            port: queueConfig.drivers.redis.port,
-            password: queueConfig.drivers.redis.password ?? '',
-            db: queueConfig.drivers.redis.database,
-        });
-        const results = {};
-        // Create 5 waiting jobs
-        results['waiting'] = [];
-        for (let i = 0; i < 5; i += 1) {
-            const id = await driver.enqueue(queueName, {
-                type: 'waiting',
-                index: i,
-                message: `Waiting job ${i}`,
-            });
-            results['waiting'].push(String(id));
-        }
-        // Create 3 delayed jobs (5 seconds)
-        results['delayed'] = [];
-        for (let i = 0; i < 3; i += 1) {
-            const id = await driver.enqueue(queueName, {
-                type: 'delayed',
-                index: i,
-                message: `Delayed job ${i}`,
-            }, { delay: 5000 });
-            results['delayed'].push(String(id));
-        }
-        // Create 2 failed jobs (these will fail when processed)
-        results['failed'] = [];
-        for (let i = 0; i < 2; i += 1) {
-            const id = await driver.enqueue(queueName, {
-                type: 'failed',
-                shouldFail: true,
-                index: i,
-                message: `Job that will fail ${i}`,
-            }, { attempts: 1 });
-            results['failed'].push(String(id));
-        }
-        await driver.close();
-        res.json({
-            ok: true,
-            queue: queueName,
-            message: 'Created 5 waiting, 3 delayed (5s), and 2 jobs that will fail when processed',
-            results,
-        });
-    }
-    catch (error) {
-        Logger.error('TestController.populateAll failed', error);
-        res.setStatus(500).json({ error: 'Populate all failed' });
-    }
-}
-async function workerStart(req, res) {
-    const body = getValidatedBody(req) ??
-        req.getBody?.() ??
-        req.body ??
-        {};
-    const queueName = body['queue'] || 'demo';
-    try {
-        if (isWorkerRunning()) {
-            res.json({ ok: false, message: 'Worker already running' });
-            return;
-        }
-        await startTestWorker(queueName);
-        res.json({
-            ok: true,
-            message: `Worker started for queue: ${queueName}`,
-            info: 'Jobs will be processed with 1-3 second delay. Jobs with shouldFail=true will fail.',
-        });
-    }
-    catch (error) {
-        Logger.error('TestController.workerStart failed', error);
-        res.setStatus(500).json({ error: 'Failed to start worker' });
-    }
-}
-async function workerStop(_req, res) {
-    try {
-        if (!isWorkerRunning()) {
-            res.json({ ok: false, message: 'No worker running' });
-            return;
-        }
-        await stopTestWorker();
-        res.json({ ok: true, message: 'Worker stopped' });
-    }
-    catch (error) {
-        Logger.error('TestController.workerStop failed', error);
-        res.setStatus(500).json({ error: 'Failed to stop worker' });
-    }
-}
-async function workerStatus(_req, res) {
-    try {
-        const running = isWorkerRunning();
-        const status = {
-            ok: true,
-            running,
-            message: running ? 'Worker is running' : 'Worker is not running',
-        };
-        if (running) {
-            // Get metrics and health
-            const metrics = await getTestWorkerMetrics();
-            const health = await getTestWorkerHealth();
-            status['metrics'] = metrics;
-            status['health'] = health;
-        }
-        res.json(status);
-    }
-    catch (error) {
-        Logger.error('TestController.workerStatus failed', error);
-        res.setStatus(500).json({ error: 'Failed to get worker status' });
-    }
-}
-export const TestController = Object.freeze({
-    create() {
-        return { enqueue, populateAll, workerStart, workerStop, workerStatus };
-    },
-});
-export default TestController;

package/app/Controllers/UserController.d.ts

@@ -1,9 +0,0 @@
-/**
- * User Controller (compat)
- *
- * This file remains for backwards-compatibility. The actual implementation is
- * QueryBuilder-backed and lives in UserQueryBuilderController.
- */
-export { UserQueryBuilderController as UserController, UserQueryBuilderController, } from '../Controllers/UserQueryBuilderController';
-export { UserQueryBuilderController as default } from '../Controllers/UserQueryBuilderController';
-//# sourceMappingURL=UserController.d.ts.map

package/app/Controllers/UserController.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserController.d.ts","sourceRoot":"","sources":["../../../app/Controllers/UserController.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,0BAA0B,IAAI,cAAc,EAC5C,0BAA0B,GAC3B,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAAE,0BAA0B,IAAI,OAAO,EAAE,MAAM,6CAA6C,CAAC"}

package/app/Controllers/UserController.js

@@ -1,8 +0,0 @@
-/**
- * User Controller (compat)
- *
- * This file remains for backwards-compatibility. The actual implementation is
- * QueryBuilder-backed and lives in UserQueryBuilderController.
- */
-export { UserQueryBuilderController as UserController, UserQueryBuilderController, } from '../Controllers/UserQueryBuilderController.js';
-export { UserQueryBuilderController as default } from '../Controllers/UserQueryBuilderController.js';

package/app/Controllers/UserQueryBuilderController.d.ts

@@ -1,16 +0,0 @@
-/**
- * User QueryBuilder Controller
- * QueryBuilder-backed controller for the users resource.
- */
-import type { IUserController } from '../Types/controller';
-/**
- * User QueryBuilder Controller Factory
- */
-export declare const UserQueryBuilderController: {
-    /**
-     * Create a new user controller instance
-     */
-    create(): IUserController;
-};
-export default UserQueryBuilderController;
-//# sourceMappingURL=UserQueryBuilderController.d.ts.map

package/app/Controllers/UserQueryBuilderController.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserQueryBuilderController.d.ts","sourceRoot":"","sources":["../../../app/Controllers/UserQueryBuilderController.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAmC,MAAM,uBAAuB,CAAC;AAkc9F;;GAEG;AACH,eAAO,MAAM,0BAA0B;IACrC;;OAEG;cACO,eAAe;CAG1B,CAAC;AAEF,eAAe,0BAA0B,CAAC"}