ar-saas 0.4.2 → 0.5.0

package/templates/backend/src/modules/tasks/tasks.controller.ts

@@ -0,0 +1,104 @@
+import {
+  Body,
+  Controller,
+  Delete,
+  Get,
+  HttpCode,
+  HttpStatus,
+  Param,
+  Patch,
+  Post,
+  Query,
+  UseGuards,
+} from '@nestjs/common';
+import {
+  ApiBearerAuth,
+  ApiOperation,
+  ApiResponse,
+  ApiTags,
+} from '@nestjs/swagger';
+import { CurrentUser } from '../../common/decorators/current-user.decorator';
+import type { TokenPayload } from '../../common/decorators/current-user.decorator';
+import { WorkspaceId } from '../../common/decorators/workspace-id.decorator';
+import { JwtAuthGuard } from '../../common/guards/jwt-auth.guard';
+import { CreateTaskDto } from './dto/create-task.dto';
+import { MoveTaskDto } from './dto/move-task.dto';
+import { QueryTaskDto } from './dto/query-task.dto';
+import { UpdateTaskDto } from './dto/update-task.dto';
+import { TasksService } from './tasks.service';
+
+@ApiTags('Tasks')
+@ApiBearerAuth()
+@UseGuards(JwtAuthGuard)
+@Controller('tasks')
+export class TasksController {
+  constructor(private readonly tasksService: TasksService) {}
+
+  @Get()
+  @ApiOperation({ summary: 'Listar tareas del workspace' })
+  @ApiResponse({ status: 200, description: 'Lista paginada de tareas' })
+  findAll(
+    @WorkspaceId() workspaceId: string,
+    @Query() query: QueryTaskDto,
+  ) {
+    return this.tasksService.findAll(workspaceId, query);
+  }
+
+  @Get(':id')
+  @ApiOperation({ summary: 'Obtener una tarea por ID' })
+  @ApiResponse({ status: 200, description: 'Tarea encontrada' })
+  @ApiResponse({ status: 404, description: 'Tarea no encontrada' })
+  findOne(
+    @WorkspaceId() workspaceId: string,
+    @Param('id') id: string,
+  ) {
+    return this.tasksService.findOne(workspaceId, id);
+  }
+
+  @Post()
+  @ApiOperation({ summary: 'Crear una nueva tarea' })
+  @ApiResponse({ status: 201, description: 'Tarea creada' })
+  create(
+    @WorkspaceId() workspaceId: string,
+    @CurrentUser() user: TokenPayload,
+    @Body() dto: CreateTaskDto,
+  ) {
+    return this.tasksService.create(workspaceId, user.userId, dto);
+  }
+
+  @Patch(':id')
+  @ApiOperation({ summary: 'Actualizar una tarea' })
+  @ApiResponse({ status: 200, description: 'Tarea actualizada' })
+  @ApiResponse({ status: 404, description: 'Tarea no encontrada' })
+  update(
+    @WorkspaceId() workspaceId: string,
+    @Param('id') id: string,
+    @Body() dto: UpdateTaskDto,
+  ) {
+    return this.tasksService.update(workspaceId, id, dto);
+  }
+
+  @Patch(':id/move')
+  @ApiOperation({ summary: 'Mover una tarea a otra columna' })
+  @ApiResponse({ status: 200, description: 'Tarea movida' })
+  @ApiResponse({ status: 404, description: 'Tarea no encontrada' })
+  move(
+    @WorkspaceId() workspaceId: string,
+    @Param('id') id: string,
+    @Body() dto: MoveTaskDto,
+  ) {
+    return this.tasksService.move(workspaceId, id, dto);
+  }
+
+  @Delete(':id')
+  @HttpCode(HttpStatus.NO_CONTENT)
+  @ApiOperation({ summary: 'Eliminar una tarea (soft delete)' })
+  @ApiResponse({ status: 204, description: 'Tarea eliminada' })
+  @ApiResponse({ status: 404, description: 'Tarea no encontrada' })
+  remove(
+    @WorkspaceId() workspaceId: string,
+    @Param('id') id: string,
+  ) {
+    return this.tasksService.remove(workspaceId, id);
+  }
+}

package/templates/backend/src/modules/tasks/tasks.module.ts

@@ -0,0 +1,18 @@
+import { Module } from '@nestjs/common';
+import { MongooseModule } from '@nestjs/mongoose';
+import { TaskColumnsModule } from '../task-columns/task-columns.module';
+import { Task, TaskSchema } from './schemas/task.schema';
+import { TasksController } from './tasks.controller';
+import { TasksRepository } from './tasks.repository';
+import { TasksService } from './tasks.service';
+
+@Module({
+  imports: [
+    TaskColumnsModule,
+    MongooseModule.forFeature([{ name: Task.name, schema: TaskSchema }]),
+  ],
+  controllers: [TasksController],
+  providers: [TasksService, TasksRepository],
+  exports: [TasksService],
+})
+export class TasksModule {}

package/templates/backend/src/modules/tasks/tasks.repository.ts

@@ -0,0 +1,14 @@
+import { Injectable } from '@nestjs/common';
+import { InjectModel } from '@nestjs/mongoose';
+import { Model } from 'mongoose';
+import { BaseRepository } from '../../common/base/base.repository';
+import { Task, TaskDocument } from './schemas/task.schema';
+
+@Injectable()
+export class TasksRepository extends BaseRepository<TaskDocument> {
+  constructor(
+    @InjectModel(Task.name) private readonly taskModel: Model<TaskDocument>,
+  ) {
+    super(taskModel);
+  }
+}

package/templates/backend/src/modules/tasks/tasks.service.ts

@@ -0,0 +1,76 @@
+import { Injectable, NotFoundException } from '@nestjs/common';
+import { TaskColumnsService } from '../task-columns/task-columns.service';
+import { CreateTaskDto } from './dto/create-task.dto';
+import { MoveTaskDto } from './dto/move-task.dto';
+import { QueryTaskDto } from './dto/query-task.dto';
+import { UpdateTaskDto } from './dto/update-task.dto';
+import { TasksRepository } from './tasks.repository';
+
+@Injectable()
+export class TasksService {
+  constructor(
+    private readonly tasksRepository: TasksRepository,
+    private readonly taskColumnsService: TaskColumnsService,
+  ) {}
+
+  findAll(workspaceId: string, query: QueryTaskDto) {
+    const { page, limit, search, status, priority, columnId } = query;
+    const filter: Record<string, unknown> = {};
+
+    if (status) filter.status = status;
+    if (priority) filter.priority = priority;
+    if (columnId !== undefined) filter.columnId = columnId;
+    if (search) filter.title = { $regex: search, $options: 'i' };
+
+    return this.tasksRepository.paginate(workspaceId, {
+      page,
+      limit,
+      filter,
+      sort: { columnId: 1, order: 1 },
+    });
+  }
+
+  async findOne(workspaceId: string, id: string) {
+    const task = await this.tasksRepository.findById(workspaceId, id);
+    if (!task) throw new NotFoundException('Tarea no encontrada');
+    return task;
+  }
+
+  async create(workspaceId: string, userId: string, dto: CreateTaskDto) {
+    if (dto.columnId) {
+      await this.taskColumnsService.findOne(workspaceId, dto.columnId);
+    }
+    return this.tasksRepository.create({
+      ...dto,
+      dueDate: dto.dueDate ? new Date(dto.dueDate) : undefined,
+      workspaceId: workspaceId as unknown as import('mongoose').Types.ObjectId,
+      createdBy: userId as unknown as import('mongoose').Types.ObjectId,
+      deletedAt: null,
+    } as never);
+  }
+
+  async update(workspaceId: string, id: string, dto: UpdateTaskDto) {
+    await this.findOne(workspaceId, id);
+    if (dto.columnId) {
+      await this.taskColumnsService.findOne(workspaceId, dto.columnId);
+    }
+    const task = await this.tasksRepository.update(workspaceId, id, dto as never);
+    if (!task) throw new NotFoundException('Tarea no encontrada');
+    return task;
+  }
+
+  async move(workspaceId: string, id: string, dto: MoveTaskDto) {
+    await this.findOne(workspaceId, id);
+    if (dto.columnId) {
+      await this.taskColumnsService.findOne(workspaceId, dto.columnId);
+    }
+    const task = await this.tasksRepository.update(workspaceId, id, dto as never);
+    if (!task) throw new NotFoundException('Tarea no encontrada');
+    return task;
+  }
+
+  async remove(workspaceId: string, id: string) {
+    await this.findOne(workspaceId, id);
+    await this.tasksRepository.softDelete(workspaceId, id);
+  }
+}

package/templates/backend/src/modules/users/schemas/user.schema.ts

@@ -20,6 +20,9 @@ export class User {
   @Prop({ type: String, default: null, select: false })
   password!: string | null;
 
+  @Prop({ type: String, default: null, index: true, sparse: true })
+  githubId!: string | null;
+
   @Prop({ required: true })
   workspaceId!: string;
 

package/templates/backend/src/modules/users/users.repository.ts

@@ -9,6 +9,10 @@ export class UsersRepository {
     @InjectModel(User.name) private readonly userModel: Model<UserDocument>,
   ) {}
 
+  async findByGithubId(githubId: string): Promise<UserDocument | null> {
+    return this.userModel.findOne({ githubId }).exec();
+  }
+
   async findByEmail(email: string): Promise<UserDocument | null> {
     return this.userModel
       .findOne({ email: email.toLowerCase().trim() })
@@ -54,4 +58,8 @@ export class UsersRepository {
       .findByIdAndUpdate(id, { $set: data }, { returnDocument: 'after' })
       .exec();
   }
+
+  async delete(id: string): Promise<UserDocument | null> {
+    return this.userModel.findByIdAndDelete(id).exec();
+  }
 }

package/templates/backend/src/modules/users/users.service.ts

@@ -27,6 +27,32 @@ export class UsersService {
     return this.usersRepository.findByEmail(email);
   }
 
+  async findByGithubId(githubId: string): Promise<UserDocument | null> {
+    return this.usersRepository.findByGithubId(githubId);
+  }
+
+  async createGithubUser(data: {
+    name: string;
+    email: string;
+    githubId: string;
+    workspaceId: string;
+    role?: UserRole;
+  }): Promise<UserDocument> {
+    const existing = await this.usersRepository.findByEmail(data.email);
+    if (existing) {
+      throw new ConflictException('Este email ya está registrado.');
+    }
+    return this.usersRepository.create({
+      ...data,
+      password: null,
+      emailVerified: true,
+    });
+  }
+
+  async linkGithubId(userId: string, githubId: string): Promise<void> {
+    await this.usersRepository.update(userId, { githubId });
+  }
+
   async findByEmailWithPassword(email: string): Promise<UserDocument | null> {
     return this.usersRepository.findByEmailWithPassword(email);
   }
@@ -111,6 +137,14 @@ export class UsersService {
     await this.usersRepository.update(userId, { lastLoginAt: new Date() });
   }
 
+  async updateWorkspaceId(userId: string, workspaceId: string): Promise<void> {
+    await this.usersRepository.update(userId, { workspaceId });
+  }
+
+  async delete(userId: string): Promise<void> {
+    await this.usersRepository.delete(userId);
+  }
+
   async updateMe(
     userId: string,
     data: { name?: string; email?: string },

package/templates/frontend/.env.local.example

@@ -1 +1 @@
-NEXT_PUBLIC_API_URL=http://localhost:3000
+NEXT_PUBLIC_API_URL=http://localhost:3001

package/templates/frontend/README.md

@@ -96,10 +96,14 @@ src/
 │   ├── (auth)/          # Login, registro, verificación de email, reset de contraseña
 │   ├── (dashboard)/     # Rutas protegidas (dashboard, perfil, billing, equipo)
 │   ├── (legal)/         # Términos y privacidad
+│   ├── auth/
+│   │   └── github/
+│   │       └── callback/ # Página que completa el intercambio de código OAuth de GitHub
 │   ├── setup/           # Pantalla de setup inicial (se muestra al arrancar por primera vez)
 │   ├── layout.tsx       # Layout raíz con AuthProvider
 │   └── page.tsx         # Redirige a /login
 ├── components/
+│   ├── auth/            # Componentes de autenticación (GitHubButton)
 │   ├── landing/         # Componentes de la landing page (navbar, hero, features, pricing)
 │   ├── dashboard/       # Sidebar, header y cards del dashboard
 │   └── ui/              # Componentes shadcn/ui (no modificar directamente)
@@ -148,5 +152,43 @@ Para agregar nuevas rutas protegidas, crear la carpeta dentro de `src/app/(dashb
 ## Autenticación
 
 - Tokens JWT en cookies HttpOnly — el frontend nunca lee ni guarda tokens.
-- `useAuth()` expone `user`, `isAuthenticated`, `isLoading`, `login()`, `logout()`, `register()`.
+- `useAuth()` expone `user`, `isAuthenticated`, `isLoading`, `login()`, `logout()`, `register()`, `refreshUser()`.
 - El cliente axios renueva el access token automáticamente cuando recibe un 401.
+
+### GitHub OAuth
+
+El flujo de autenticación con GitHub está integrado en las páginas de login y registro.
+
+**Flujo completo:**
+
+1. Usuario hace click en "Continuar con GitHub"
+2. El browser redirige a `{NEXT_PUBLIC_API_URL}/api/auth/github`
+3. El backend inicia el OAuth flow con GitHub
+4. GitHub redirige al backend con un código de autorización
+5. El backend valida el código, busca o crea el usuario, y genera un código de intercambio (válido 30 segundos)
+6. El backend redirige al frontend a `/auth/github/callback?code=...`
+7. La página callback llama a `POST /api/auth/github/exchange` con el código
+8. El backend setea las cookies `access_token` y `refresh_token` y retorna `{ success, alreadyExisted }`
+9. El frontend refresca el estado de auth y redirige a `/dashboard`
+
+**Casos manejados:**
+
+| Caso | Comportamiento |
+|---|---|
+| Usuario nuevo | Se crea workspace + usuario, email marcado como verificado |
+| Usuario existente por githubId | Login directo |
+| Usuario existente por email | Se linkea el githubId, email marcado como verificado si no lo estaba |
+| GitHub sin email público | Error — el usuario debe hacer público su email en GitHub |
+| Código expirado o inválido | Redirección a `/auth/github/callback?error=github_failed`, se muestra pantalla de error |
+
+**Archivos relevantes:**
+
+| Archivo | Descripción |
+|---|---|
+| [`src/components/auth/github-button.tsx`](src/components/auth/github-button.tsx) | Botón reutilizable "Continuar con GitHub" |
+| [`src/app/auth/github/callback/page.tsx`](src/app/auth/github/callback/page.tsx) | Página que recibe el código y completa el intercambio |
+| [`src/lib/api/auth.ts`](src/lib/api/auth.ts) | `authApi.exchangeGithubCode(code)` |
+
+**Configuración necesaria en el backend** (ver `backend/README.md`):
+- Crear una GitHub OAuth App en [github.com/settings/applications/new](https://github.com/settings/applications/new)
+- Configurar `GITHUB_CLIENT_ID`, `GITHUB_CLIENT_SECRET`, `GITHUB_CALLBACK_URL` y `FRONTEND_URL` en el `.env` del backend

package/templates/frontend/package.json

@@ -1,45 +1,48 @@
-{
-  "name": "ar-saas-frontend",
-  "version": "0.1.0",
-  "private": true,
-  "license": "UNLICENSED",
-  "scripts": {
-    "dev": "next dev --turbopack",
-    "build": "next build",
-    "start": "next start",
-    "lint": "next lint"
-  },
-  "dependencies": {
-    "@radix-ui/react-accordion": "^1.2.13",
-    "@radix-ui/react-avatar": "^1.1.12",
-    "@radix-ui/react-checkbox": "^1.3.4",
-    "@radix-ui/react-dialog": "^1.1.16",
-    "@radix-ui/react-dropdown-menu": "^2.1.17",
-    "@radix-ui/react-label": "^2.1.2",
-    "@radix-ui/react-separator": "^1.1.9",
-    "@radix-ui/react-slot": "^1.1.2",
-    "@radix-ui/react-switch": "^1.3.0",
-    "@radix-ui/react-tabs": "^1.1.14",
-    "@radix-ui/react-toast": "^1.2.6",
-    "axios": "^1.7.9",
-    "class-variance-authority": "^0.7.1",
-    "clsx": "^2.1.1",
-    "lucide-react": "^0.477.0",
-    "next": "^15.3.3",
-    "react": "^19.1.0",
-    "react-dom": "^19.1.0",
-    "react-hook-form": "^7.54.2",
-    "tailwind-merge": "^2.6.0"
-  },
-  "devDependencies": {
-    "@eslint/eslintrc": "^3.2.0",
-    "@tailwindcss/postcss": "^4.1.0",
-    "@types/node": "^22.10.7",
-    "@types/react": "^19.1.0",
-    "@types/react-dom": "^19.1.0",
-    "eslint": "^9.18.0",
-    "eslint-config-next": "^15.3.3",
-    "tailwindcss": "^4.1.0",
-    "typescript": "^5.7.3"
-  }
-}
+{
+  "name": "ar-saas-frontend",
+  "version": "0.1.0",
+  "private": true,
+  "license": "UNLICENSED",
+  "scripts": {
+    "dev": "next dev --turbopack",
+    "build": "next build",
+    "start": "next start",
+    "lint": "next lint"
+  },
+  "dependencies": {
+    "@radix-ui/react-accordion": "^1.2.13",
+    "@radix-ui/react-alert-dialog": "^1.1.16",
+    "@radix-ui/react-avatar": "^1.1.12",
+    "@radix-ui/react-checkbox": "^1.3.4",
+    "@radix-ui/react-dialog": "^1.1.16",
+    "@radix-ui/react-dropdown-menu": "^2.1.17",
+    "@radix-ui/react-label": "^2.1.2",
+    "@radix-ui/react-popover": "^1.1.16",
+    "@radix-ui/react-select": "^2.3.0",
+    "@radix-ui/react-separator": "^1.1.9",
+    "@radix-ui/react-slot": "^1.2.5",
+    "@radix-ui/react-switch": "^1.3.0",
+    "@radix-ui/react-tabs": "^1.1.14",
+    "@radix-ui/react-toast": "^1.2.6",
+    "axios": "^1.7.9",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "lucide-react": "^0.477.0",
+    "next": "^15.3.3",
+    "react": "^19.1.0",
+    "react-dom": "^19.1.0",
+    "react-hook-form": "^7.54.2",
+    "tailwind-merge": "^2.6.0"
+  },
+  "devDependencies": {
+    "@eslint/eslintrc": "^3.2.0",
+    "@tailwindcss/postcss": "^4.1.0",
+    "@types/node": "^22.10.7",
+    "@types/react": "^19.1.0",
+    "@types/react-dom": "^19.1.0",
+    "eslint": "^9.18.0",
+    "eslint-config-next": "^15.3.3",
+    "tailwindcss": "^4.1.0",
+    "typescript": "^5.7.3"
+  }
+}