backend-scaffold-cli 1.7.0 → 1.9.0

package/bin/cli.js

@@ -1,4 +1,4 @@
-#!/usr/bin/env node
+#!/usr/bin/env node
 
 
 const { program } = require('commander');
@@ -162,6 +162,7 @@ const createConfigFiles = (projectPath, answers) => {
       mongoose: '^7.0.0',
       dotenv: '^16.0.3',
       cors: '^2.8.5',
+      helmet: '^7.1.0',
       ...(answers.useAuth && { jsonwebtoken: '^9.0.0' , bcryptjs: '^2.4.3'}),
       ...(answers.useValidation && { joi: '^17.9.0' }),
       ...(answers.useRateLimit && { 'express-rate-limit': '^6.7.0' }),
@@ -197,6 +198,7 @@ ${answers.useDNSFix ? '\n# DNS Configuration (for MongoDB connection issues)\nDN
 # JWT Configuration
 JWT_SECRET=your-secret-key-change-this-in-production
 JWT_EXPIRE=7d
+${answers.useAuth ? 'BCRYPT_SALT_ROUNDS=10' : ''}
 
 # CORS
 CORS_ORIGIN=http://localhost:3000
@@ -399,11 +401,13 @@ module.exports=limiter;
 const { ErrorHandler } = require('./errorHandler');
 
 const authenticateToken = (req, res, next) => {
-  const token = req.headers['authorization']?.split(' ')[1];
+  const authHeader = req.headers.authorization;
 
-  if (!token) {
-    return next(new ErrorHandler('Access token is missing', 401));
+  if(!authHeader || !authHeader.startsWith('Bearer ')){
+    return next(new ErrorHandler('Authorization header is missing or malformed', 401));
   }
+  const token = authHeader.split(' ')[1];
+
 
   try {
     const decoded = jwt.verify(token, process.env.JWT_SECRET);
@@ -558,6 +562,7 @@ module.exports = connectDB;
 
   const server = `require('dotenv').config();
 const express = require('express');
+const helmet = require('helmet');
 const cors = require('cors');
 const connectDB = require('./config/db');
 const routes = require('./routes');
@@ -566,11 +571,13 @@ const { errorMiddleware } = require('./middleware/errorHandler');
 
 const app = express();
 ${answers.useRateLimit ? "const limiter = require('./middleware/rateLimiter');" : ''}
+
 const PORT = process.env.PORT || 5000;
 
 
 
 // Middleware
+app.use(helmet());
 app.use(cors({
   origin: process.env.CORS_ORIGIN || '*'
 }));
@@ -666,7 +673,8 @@ function createUserModel(projectPath) {
     if (!this.isModified('password')) {
       return next();
     }
-    this.password = await bcrypt.hash(this.password,10);
+    const salt = Number(process.env.BCRYPT_SALT_ROUNDS || 10);
+    this.password = await bcrypt.hash(this.password,salt);
     next();
   });
 
@@ -715,7 +723,7 @@ function createAuthController(projectPath) {
       }
 
       const user= await User.create({name,email,password});
-      const tocken= generateToken(user._id);
+      const token= generateToken(user._id);
 
       res.status(201).json({
         success:true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "backend-scaffold-cli",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "description": "CLI tool to scaffold Express.js backend projects with MongoDB, middleware, and common setup",
   "main": "bin/cli.js",
   "bin": {