create-arktos 1.0.0

package/src/routes/index.ts

@@ -0,0 +1,63 @@
+import { Router, Request, Response } from 'express';
+import authRoutes from './auth.routes';
+import { createSuccessResponse } from '../utils/response';
+import DatabaseService from '../services/database.service';
+
+const router = Router();
+
+// Health check endpoint
+router.get('/health', async (req: Request, res: Response) => {
+  try {
+    const dbService = DatabaseService.getInstance();
+    const dbHealth = await dbService.healthCheck();
+    
+    if (!dbHealth.connected) {
+      res.status(503).json({
+        status: 'error',
+        timestamp: new Date().toISOString(),
+        uptime: process.uptime(),
+        database: dbHealth,
+        memory: process.memoryUsage(),
+        version: process.env.npm_package_version || '1.0.0',
+      });
+      return;
+    }
+
+    const healthStatus = {
+      status: 'ok',
+      timestamp: new Date().toISOString(),
+      uptime: process.uptime(),
+      database: dbHealth,
+      memory: process.memoryUsage(),
+      version: process.env.npm_package_version || '1.0.0',
+    };
+
+    res.json(healthStatus);
+  } catch (error) {
+    res.status(503).json({
+      status: 'error',
+      message: 'Health check failed',
+      timestamp: new Date().toISOString(),
+    });
+  }
+});
+
+// API routes
+router.use('/auth', authRoutes);
+
+// Root endpoint
+router.get('/', (req: Request, res: Response) => {
+  res.json(createSuccessResponse(
+    {
+      name: 'Arktos Backend API',
+      version: process.env.npm_package_version || '1.0.0',
+      description: 'Modern Node.js backend boilerplate with TypeScript, Express, JWT, Prisma, PostgreSQL, and Resend',
+      documentation: '/api/docs',
+      health: '/api/health',
+    },
+    'Welcome to Arktos Backend API',
+    'API_INFO'
+  ));
+});
+
+export default router;

package/src/schemas/index.ts

@@ -0,0 +1,139 @@
+import { z } from 'zod';
+
+// Environment validation schema
+export const envSchema = z.object({
+  NODE_ENV: z.enum(['development', 'production', 'test']).default('development'),
+  PORT: z.string().default('3001'),
+  
+  // Database
+  DATABASE_URL: z.string().min(1, 'Database URL is required'),
+  DIRECT_URL: z.string().optional(),
+  
+  // JWT
+  JWT_SECRET: z.string().min(32, 'JWT Secret must be at least 32 characters'),
+  JWT_REFRESH_SECRET: z.string().min(32, 'JWT Refresh Secret must be at least 32 characters'),
+  JWT_EXPIRES_IN: z.string().default('15m'),
+  JWT_REFRESH_EXPIRES_IN: z.string().default('7d'),
+  
+  // Email
+  RESEND_API_KEY: z.string().optional(),
+  FROM_EMAIL: z.string().email().default('noreply@yourapp.com'),
+  FROM_NAME: z.string().default('Arktos'),
+  
+  // App URLs
+  FRONTEND_URL: z.string().url().default('http://localhost:3000'),
+  BACKEND_URL: z.string().url().default('http://localhost:3001'),
+  APP_NAME: z.string().default('Arktos'),
+  
+  // Security
+  BCRYPT_SALT_ROUNDS: z.string().default('12'),
+  PASSWORD_MIN_LENGTH: z.string().default('8'),
+  MAX_LOGIN_ATTEMPTS: z.string().default('5'),
+  ACCOUNT_LOCK_TIME: z.string().default('900000'),
+  
+  // CORS
+  CORS_ORIGIN: z.string().default('http://localhost:3000'),
+  CORS_CREDENTIALS: z.string().default('true'),
+  
+  // Rate Limiting
+  RATE_LIMIT_WINDOW: z.string().default('900000'),
+  RATE_LIMIT_MAX: z.string().default('100'),
+  
+  // Logging
+  LOG_LEVEL: z.enum(['error', 'warn', 'info', 'debug']).default('info'),
+  LOG_FILE: z.string().default('logs/app.log'),
+});
+
+// Authentication schemas
+export const loginSchema = z.object({
+  email: z.string().email('Invalid email format'),
+  password: z.string().min(1, 'Password is required'),
+});
+
+export const registerSchema = z.object({
+  email: z.string().email('Invalid email format'),
+  password: z
+    .string()
+    .min(8, 'Password must be at least 8 characters long')
+    .regex(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)/, 'Password must contain at least one lowercase letter, one uppercase letter, and one number'),
+  firstName: z.string().min(1, 'First name is required').max(50, 'First name too long').optional(),
+  lastName: z.string().min(1, 'Last name is required').max(50, 'Last name too long').optional(),
+  username: z
+    .string()
+    .min(3, 'Username must be at least 3 characters')
+    .max(30, 'Username too long')
+    .regex(/^[a-zA-Z0-9_-]+$/, 'Username can only contain letters, numbers, underscores, and hyphens')
+    .optional(),
+});
+
+export const refreshTokenSchema = z.object({
+  refreshToken: z.string().min(1, 'Refresh token is required'),
+});
+
+export const resendVerificationSchema = z.object({
+  email: z.string().email('Invalid email format'),
+});
+
+export const forgotPasswordSchema = z.object({
+  email: z.string().email('Invalid email format'),
+});
+
+export const resetPasswordSchema = z.object({
+  token: z.string().min(1, 'Reset token is required'),
+  newPassword: z
+    .string()
+    .min(8, 'Password must be at least 8 characters long')
+    .regex(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)/, 'Password must contain at least one lowercase letter, one uppercase letter, and one number'),
+});
+
+export const changePasswordSchema = z.object({
+  currentPassword: z.string().min(1, 'Current password is required'),
+  newPassword: z
+    .string()
+    .min(8, 'Password must be at least 8 characters long')
+    .regex(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)/, 'Password must contain at least one lowercase letter, one uppercase letter, and one number'),
+}).refine((data) => {
+  return data.newPassword !== data.currentPassword;
+}, {
+  message: 'New password must be different from current password',
+  path: ['newPassword'],
+});
+
+// Profile schemas
+export const updateProfileSchema = z.object({
+  firstName: z.string().min(1, 'First name is required').max(50, 'First name too long').optional(),
+  lastName: z.string().min(1, 'Last name is required').max(50, 'Last name too long').optional(),
+  username: z
+    .string()
+    .min(3, 'Username must be at least 3 characters')
+    .max(30, 'Username too long')
+    .regex(/^[a-zA-Z0-9_-]+$/, 'Username can only contain letters, numbers, underscores, and hyphens')
+    .optional(),
+  avatar: z.string().url('Avatar must be a valid URL').optional(),
+});
+
+// Pagination schema
+export const paginationSchema = z.object({
+  page: z.string().default('1'),
+  limit: z.string().default('10'),
+});
+
+// Contact/Support schemas
+export const contactSchema = z.object({
+  name: z.string().min(1, 'Name is required').max(100, 'Name too long'),
+  email: z.string().email('Invalid email format'),
+  subject: z.string().min(1, 'Subject is required').max(200, 'Subject too long'),
+  message: z.string().min(10, 'Message too short').max(2000, 'Message too long'),
+});
+
+export type EnvSchema = z.infer<typeof envSchema>;
+export type LoginSchema = z.infer<typeof loginSchema>;
+export type RegisterSchema = z.infer<typeof registerSchema>;
+export type RefreshTokenSchema = z.infer<typeof refreshTokenSchema>;
+export type ResendVerificationSchema = z.infer<typeof resendVerificationSchema>;
+export type ForgotPasswordSchema = z.infer<typeof forgotPasswordSchema>;
+export type ResetPasswordSchema = z.infer<typeof resetPasswordSchema>;
+export type ChangePasswordSchema = z.infer<typeof changePasswordSchema>;
+export type UpdateProfileSchema = z.infer<typeof updateProfileSchema>;
+export type PaginationSchema = z.infer<typeof paginationSchema>;
+export type ContactSchema = z.infer<typeof contactSchema>;

package/src/services/database.service.ts

@@ -0,0 +1,120 @@
+import { PrismaClient } from '@prisma/client';
+import { DatabaseHealth } from '../types';
+import logger from '../config/logger';
+
+export class DatabaseService {
+  private static instance: DatabaseService;
+  private prisma: PrismaClient;
+  private isConnected: boolean = false;
+
+  private constructor() {
+    this.prisma = new PrismaClient({
+      log: ['query', 'error', 'info', 'warn'],
+    });
+
+    // Set up event listeners
+    this.setupEventListeners();
+  }
+
+  public static getInstance(): DatabaseService {
+    if (!DatabaseService.instance) {
+      DatabaseService.instance = new DatabaseService();
+    }
+    return DatabaseService.instance;
+  }
+
+  private setupEventListeners(): void {
+    // Event listeners can be added here if needed
+    // For now, we're using simple logging configuration
+  }
+
+  public async connect(): Promise<void> {
+    try {
+      await this.prisma.$connect();
+      this.isConnected = true;
+      logger.info('✅ Database connected successfully');
+    } catch (error) {
+      this.isConnected = false;
+      logger.error('❌ Database connection failed:', error);
+      throw error;
+    }
+  }
+
+  public async disconnect(): Promise<void> {
+    try {
+      await this.prisma.$disconnect();
+      this.isConnected = false;
+      logger.info('✅ Database disconnected successfully');
+    } catch (error) {
+      logger.error('❌ Database disconnection failed:', error);
+      throw error;
+    }
+  }
+
+  public async healthCheck(): Promise<DatabaseHealth> {
+    try {
+      const startTime = Date.now();
+      await this.prisma.$queryRaw`SELECT 1`;
+      const responseTime = Date.now() - startTime;
+      
+      return {
+        connected: true,
+        responseTime,
+      };
+    } catch (error) {
+      logger.error('Database health check failed:', error);
+      return {
+        connected: false,
+        error: error instanceof Error ? error.message : 'Unknown error',
+      };
+    }
+  }
+
+  public getClient(): PrismaClient {
+    return this.prisma;
+  }
+
+  public isConnectedToDatabase(): boolean {
+    return this.isConnected;
+  }
+
+  // Graceful shutdown handler
+  public async gracefulShutdown(): Promise<void> {
+    logger.info('🔄 Starting graceful database shutdown...');
+    
+    try {
+      await this.disconnect();
+      logger.info('✅ Database shutdown completed');
+    } catch (error) {
+      logger.error('❌ Error during database shutdown:', error);
+      throw error;
+    }
+  }
+}
+
+// Setup process handlers for graceful shutdown
+const dbService = DatabaseService.getInstance();
+
+process.on('SIGINT', async () => {
+  logger.info('📡 Received SIGINT signal');
+  try {
+    await dbService.gracefulShutdown();
+    process.exit(0);
+  } catch (error) {
+    logger.error('Failed to shutdown gracefully:', error);
+    process.exit(1);
+  }
+});
+
+process.on('SIGTERM', async () => {
+  logger.info('📡 Received SIGTERM signal');
+  try {
+    await dbService.gracefulShutdown();
+    process.exit(0);
+  } catch (error) {
+    logger.error('Failed to shutdown gracefully:', error);
+    process.exit(1);
+  }
+});
+
+export default DatabaseService;

package/src/services/email.service.ts

@@ -0,0 +1,244 @@
+import { Resend } from 'resend';
+import logger from '../config/logger';
+
+export class EmailService {
+  private static resend = new Resend(process.env.RESEND_API_KEY);
+
+  private static getFromAddress(): string {
+    return process.env.FROM_EMAIL || 'noreply@arktos.com';
+  }
+
+  private static getFromName(): string {
+    return process.env.FROM_NAME || 'Arktos';
+  }
+
+  public static async sendEmailVerification(
+    email: string,
+    verifyToken: string,
+    userName: string
+  ): Promise<void> {
+    try {
+      if (!process.env.RESEND_API_KEY) {
+        throw new Error('Resend API key is not configured');
+      }
+
+      const verificationUrl = `${process.env.FRONTEND_URL}/verify-email?token=${verifyToken}`;
+
+      await this.resend.emails.send({
+        from: `${this.getFromName()} <${this.getFromAddress()}>`,
+        to: [email],
+        subject: 'Verify Your Email Address',
+        html: `
+          <div style="font-family: Arial, sans-serif; max-width: 600px; margin: 0 auto; padding: 20px;">
+            <div style="text-align: center; margin-bottom: 30px;">
+              <h1 style="color: #333; margin: 0;">Welcome to ${this.getFromName()}!</h1>
+            </div>
+            
+            <div style="background-color: #f8f9fa; padding: 20px; border-radius: 8px; margin-bottom: 20px;">
+              <h2 style="color: #333; margin: 0 0 15px 0;">Hi ${userName},</h2>
+              <p style="color: #555; line-height: 1.6; margin: 0;">
+                Thank you for signing up! To complete your registration and start using your account, 
+                please verify your email address by clicking the button below.
+              </p>
+            </div>
+
+            <div style="text-align: center; margin: 30px 0;">
+              <a href="${verificationUrl}" 
+                 style="display: inline-block; padding: 12px 30px; background-color: #007bff; color: white; text-decoration: none; border-radius: 5px; font-weight: bold;">
+                Verify Email Address
+              </a>
+            </div>
+
+            <div style="background-color: #fff3cd; padding: 15px; border-radius: 5px; border-left: 4px solid #ffc107; margin: 20px 0;">
+              <p style="color: #856404; margin: 0; font-size: 14px;">
+                <strong>Important:</strong> This verification link will expire in 24 hours for security reasons.
+              </p>
+            </div>
+
+            <div style="margin-top: 30px; padding-top: 20px; border-top: 1px solid #eee;">
+              <p style="color: #666; font-size: 12px; margin: 0;">
+                If you didn't create an account with us, you can safely ignore this email.
+                <br><br>
+                If you're having trouble with the button above, copy and paste this link into your browser:
+                <br>
+                <a href="${verificationUrl}" style="color: #007bff;">${verificationUrl}</a>
+              </p>
+            </div>
+          </div>
+        `,
+      });
+
+      logger.info(`Email verification sent to: ${email}`, {
+        recipient: email,
+        userName,
+        timestamp: new Date().toISOString(),
+      });
+    } catch (error) {
+      logger.error('Failed to send verification email:', error);
+      throw new Error('Failed to send verification email');
+    }
+  }
+
+  public static async sendPasswordResetEmail(
+    email: string,
+    resetToken: string,
+    userName?: string
+  ): Promise<void> {
+    try {
+      if (!process.env.RESEND_API_KEY) {
+        throw new Error('Resend API key is not configured');
+      }
+
+      const resetUrl = `${process.env.FRONTEND_URL}/reset-password?token=${resetToken}`;
+
+      await this.resend.emails.send({
+        from: `${this.getFromName()} <${this.getFromAddress()}>`,
+        to: [email],
+        subject: 'Reset Your Password',
+        html: `
+          <div style="font-family: Arial, sans-serif; max-width: 600px; margin: 0 auto; padding: 20px;">
+            <div style="text-align: center; margin-bottom: 30px;">
+              <h1 style="color: #333; margin: 0;">Password Reset Request</h1>
+            </div>
+            
+            <div style="background-color: #f8f9fa; padding: 20px; border-radius: 8px; margin-bottom: 20px;">
+              <h2 style="color: #333; margin: 0 0 15px 0;">${userName ? `Hi ${userName}` : 'Hello'},</h2>
+              <p style="color: #555; line-height: 1.6; margin: 0;">
+                We received a request to reset the password for your account. 
+                Click the button below to create a new password.
+              </p>
+            </div>
+
+            <div style="text-align: center; margin: 30px 0;">
+              <a href="${resetUrl}" 
+                 style="display: inline-block; padding: 12px 30px; background-color: #dc3545; color: white; text-decoration: none; border-radius: 5px; font-weight: bold;">
+                Reset Password
+              </a>
+            </div>
+
+            <div style="background-color: #f8d7da; padding: 15px; border-radius: 5px; border-left: 4px solid #dc3545; margin: 20px 0;">
+              <p style="color: #721c24; margin: 0; font-size: 14px;">
+                <strong>Security Notice:</strong> This password reset link will expire in 1 hour for your security.
+              </p>
+            </div>
+
+            <div style="margin-top: 30px; padding-top: 20px; border-top: 1px solid #eee;">
+              <p style="color: #666; font-size: 12px; margin: 0;">
+                If you didn't request a password reset, you can safely ignore this email. 
+                Your password will remain unchanged.
+                <br><br>
+                If you're having trouble with the button above, copy and paste this link into your browser:
+                <br>
+                <a href="${resetUrl}" style="color: #dc3545;">${resetUrl}</a>
+              </p>
+            </div>
+          </div>
+        `,
+      });
+
+      logger.info(`Password reset email sent to: ${email}`);
+    } catch (error) {
+      logger.error('Failed to send password reset email:', error);
+      throw new Error('Failed to send password reset email');
+    }
+  }
+
+  public static async sendWelcomeEmail(
+    email: string,
+    userName: string
+  ): Promise<void> {
+    try {
+      if (!process.env.RESEND_API_KEY) {
+        throw new Error('Resend API key is not configured');
+      }
+
+      await this.resend.emails.send({
+        from: `${this.getFromName()} <${this.getFromAddress()}>`,
+        to: [email],
+        subject: `Welcome to ${this.getFromName()}!`,
+        html: `
+          <div style="font-family: Arial, sans-serif; max-width: 600px; margin: 0 auto; padding: 20px;">
+            <div style="text-align: center; margin-bottom: 30px;">
+              <h1 style="color: #28a745; margin: 0;">Welcome to ${this.getFromName()}!</h1>
+            </div>
+            
+            <div style="background-color: #d4edda; padding: 20px; border-radius: 8px; margin-bottom: 20px;">
+              <h2 style="color: #155724; margin: 0 0 15px 0;">Hi ${userName},</h2>
+              <p style="color: #155724; line-height: 1.6; margin: 0;">
+                🎉 Your email has been successfully verified! Welcome to the ${this.getFromName()} community.
+                You can now access all features of your account.
+              </p>
+            </div>
+
+            <div style="text-align: center; margin: 30px 0;">
+              <a href="${process.env.FRONTEND_URL}/dashboard" 
+                 style="display: inline-block; padding: 12px 30px; background-color: #28a745; color: white; text-decoration: none; border-radius: 5px; font-weight: bold;">
+                Get Started
+              </a>
+            </div>
+
+            <div style="margin-top: 30px; padding-top: 20px; border-top: 1px solid #eee;">
+              <p style="color: #666; font-size: 12px; margin: 0;">
+                If you have any questions or need help getting started, feel free to contact our support team.
+              </p>
+            </div>
+          </div>
+        `,
+      });
+
+      logger.info(`Welcome email sent to: ${email}`);
+    } catch (error) {
+      logger.error('Failed to send welcome email:', error);
+      throw new Error('Failed to send welcome email');
+    }
+  }
+
+  public static async sendContactMessage(data: {
+    name: string;
+    email: string;
+    subject: string;
+    message: string;
+  }): Promise<void> {
+    try {
+      if (!process.env.RESEND_API_KEY) {
+        throw new Error('Resend API key is not configured');
+      }
+
+      const adminEmail = process.env.ADMIN_EMAIL || this.getFromAddress();
+
+      await this.resend.emails.send({
+        from: `${this.getFromName()} <${this.getFromAddress()}>`,
+        to: [adminEmail],
+        replyTo: data.email,
+        subject: `[Contact Form] ${data.subject}`,
+        html: `
+          <div style="font-family: Arial, sans-serif; max-width: 600px; margin: 0 auto; padding: 20px;">
+            <h2 style="color: #333;">New Contact Form Submission</h2>
+            
+            <div style="background-color: #f8f9fa; padding: 15px; border-radius: 5px; margin: 15px 0;">
+              <p style="margin: 5px 0;"><strong>Name:</strong> ${data.name}</p>
+              <p style="margin: 5px 0;"><strong>Email:</strong> ${data.email}</p>
+              <p style="margin: 5px 0;"><strong>Subject:</strong> ${data.subject}</p>
+            </div>
+            
+            <div style="margin: 20px 0;">
+              <h3 style="color: #333;">Message:</h3>
+              <div style="background-color: #ffffff; padding: 15px; border: 1px solid #ddd; border-radius: 5px;">
+                ${data.message.replace(/\n/g, '<br>')}
+              </div>
+            </div>
+            
+            <p style="color: #666; font-size: 12px;">
+              Submitted at: ${new Date().toISOString()}
+            </p>
+          </div>
+        `,
+      });
+
+      logger.info(`Contact message sent from: ${data.email}`);
+    } catch (error) {
+      logger.error('Failed to send contact message:', error);
+      throw new Error('Failed to send contact message');
+    }
+  }
+}