create-arktos 1.0.0

package/src/services/jwt.service.ts

@@ -0,0 +1,227 @@
+import jwt from 'jsonwebtoken';
+
+export interface JwtPayload {
+  userId: string;
+  email: string;
+  role: string;
+  sessionId: string;
+  type: 'access' | 'refresh';
+}
+
+export class JwtService {
+  private static getAccessSecret(): string {
+    const secret = process.env.JWT_SECRET;
+    if (!secret) {
+      throw new Error('JWT_SECRET environment variable is not defined');
+    }
+    return secret;
+  }
+
+  private static getRefreshSecret(): string {
+    const secret = process.env.JWT_REFRESH_SECRET;
+    if (!secret) {
+      throw new Error('JWT_REFRESH_SECRET environment variable is not defined');
+    }
+    return secret;
+  }
+
+  private static getAccessExpiresIn(): string {
+    return process.env.JWT_EXPIRES_IN || '15m';
+  }
+
+  private static getRefreshExpiresIn(): string {
+    return process.env.JWT_REFRESH_EXPIRES_IN || '7d';
+  }
+
+  public static generateAccessToken(
+    userId: string,
+    email: string,
+    role: string,
+    sessionId: string
+  ): string {
+    try {
+      const payload: Omit<JwtPayload, 'type'> & { type: 'access' } = {
+        userId,
+        email,
+        role,
+        sessionId,
+        type: 'access',
+      };
+
+      return jwt.sign(payload, this.getAccessSecret(), {
+        expiresIn: this.getAccessExpiresIn(),
+      } as jwt.SignOptions);
+    } catch (error) {
+      throw new Error('Failed to generate access token');
+    }
+  }
+
+  public static generateRefreshToken(
+    userId: string,
+    email: string,
+    role: string,
+    sessionId: string
+  ): string {
+    try {
+      const payload: Omit<JwtPayload, 'type'> & { type: 'refresh' } = {
+        userId,
+        email,
+        role,
+        sessionId,
+        type: 'refresh',
+      };
+
+      return jwt.sign(payload, this.getRefreshSecret(), {
+        expiresIn: this.getRefreshExpiresIn(),
+      } as jwt.SignOptions);
+    } catch (error) {
+      throw new Error('Failed to generate refresh token');
+    }
+  }
+
+  public static verifyAccessToken(token: string): JwtPayload {
+    try {
+      const decoded = jwt.verify(token, this.getAccessSecret());
+      return decoded as JwtPayload;
+    } catch (error) {
+      if (error instanceof jwt.TokenExpiredError) {
+        throw new Error('Access token expired');
+      }
+      if (error instanceof jwt.JsonWebTokenError) {
+        throw new Error('Invalid access token');
+      }
+      throw new Error('Access token verification failed');
+    }
+  }
+
+  public static verifyRefreshToken(token: string): JwtPayload {
+    try {
+      const decoded = jwt.verify(token, this.getRefreshSecret());
+      return decoded as JwtPayload;
+    } catch (error) {
+      if (error instanceof jwt.TokenExpiredError) {
+        throw new Error('Refresh token expired');
+      }
+      if (error instanceof jwt.JsonWebTokenError) {
+        throw new Error('Invalid refresh token');
+      }
+      throw new Error('Refresh token verification failed');
+    }
+  }
+
+  public static generatePasswordResetToken(
+    userId: string,
+    email: string
+  ): string {
+    try {
+      const payload = {
+        userId,
+        email,
+        type: 'password_reset',
+        iat: Math.floor(Date.now() / 1000),
+      };
+
+      return jwt.sign(payload, this.getAccessSecret(), {
+        expiresIn: '1h',
+      });
+    } catch (error) {
+      throw new Error('Failed to generate password reset token');
+    }
+  }
+
+  public static verifyPasswordResetToken(token: string): {
+    userId: string;
+    email: string;
+    iat: number;
+  } {
+    try {
+      const decoded = jwt.verify(token, this.getAccessSecret()) as any;
+
+      if (decoded.type !== 'password_reset') {
+        throw new Error('Invalid token type');
+      }
+
+      return {
+        userId: decoded.userId,
+        email: decoded.email,
+        iat: decoded.iat,
+      };
+    } catch (error) {
+      if (error instanceof jwt.TokenExpiredError) {
+        throw new Error('Password reset token expired');
+      }
+      if (error instanceof jwt.JsonWebTokenError) {
+        throw new Error('Invalid password reset token');
+      }
+      throw new Error('Password reset token verification failed');
+    }
+  }
+
+  public static generateEmailVerifyToken(
+    userId: string,
+    email: string
+  ): string {
+    try {
+      const payload = {
+        userId,
+        email,
+        type: 'email_verify',
+      };
+
+      return jwt.sign(payload, this.getAccessSecret(), {
+        expiresIn: '24h',
+      });
+    } catch (error) {
+      throw new Error('Failed to generate email verification token');
+    }
+  }
+
+  public static verifyEmailVerifyToken(token: string): {
+    userId: string;
+    email: string;
+  } {
+    try {
+      const decoded = jwt.verify(token, this.getAccessSecret()) as any;
+
+      if (decoded.type !== 'email_verify') {
+        throw new Error('Invalid token type');
+      }
+
+      return {
+        userId: decoded.userId,
+        email: decoded.email,
+      };
+    } catch (error) {
+      if (error instanceof jwt.TokenExpiredError) {
+        throw new Error('Email verification token expired');
+      }
+      if (error instanceof jwt.JsonWebTokenError) {
+        throw new Error('Invalid email verification token');
+      }
+      throw new Error('Email verification token verification failed');
+    }
+  }
+
+  public static getExpiresInSeconds(): number {
+    try {
+      const expiresIn = this.getAccessExpiresIn();
+
+      if (expiresIn.endsWith('h')) {
+        return parseInt(expiresIn.slice(0, -1)) * 3600;
+      }
+      if (expiresIn.endsWith('m')) {
+        return parseInt(expiresIn.slice(0, -1)) * 60;
+      }
+      if (expiresIn.endsWith('d')) {
+        return parseInt(expiresIn.slice(0, -1)) * 24 * 3600;
+      }
+      if (expiresIn.endsWith('s')) {
+        return parseInt(expiresIn.slice(0, -1));
+      }
+
+      return parseInt(expiresIn);
+    } catch (error) {
+      throw new Error('Failed to calculate token expiration time');
+    }
+  }
+}

package/src/types/express.d.ts

@@ -0,0 +1,19 @@
+import { User } from '@prisma/client';
+
+declare global {
+  namespace Express {
+    interface Request {
+      user?: User;
+      file?: Express.Multer.File;
+      files?: Express.Multer.File[];
+      sessionId?: string;
+      rateLimitInfo?: {
+        limit: number;
+        remaining: number;
+        resetTime: Date;
+      };
+    }
+  }
+}
+
+export {};

package/src/types/index.ts

@@ -0,0 +1,156 @@
+import { Request } from 'express';
+import type { User, Role } from '@prisma/client';
+
+// API Response Types
+export interface ApiResponse<T = any> {
+  success: boolean;
+  message?: string;
+  data?: T;
+  error?: string;
+  code?: string;
+  timestamp?: string;
+  path?: string;
+  method?: string;
+}
+
+export interface PaginatedResponse<T> extends ApiResponse<T[]> {
+  data: T[];
+  pagination: {
+    total: number;
+    page: number;
+    limit: number;
+    totalPages: number;
+    hasNext: boolean;
+    hasPrev: boolean;
+  };
+}
+
+// Authentication Types
+export interface LoginRequest {
+  email: string;
+  password: string;
+}
+
+export interface RegisterRequest {
+  email: string;
+  password: string;
+  firstName?: string;
+  lastName?: string;
+  username?: string;
+}
+
+export interface AuthResponse {
+  user: Omit<User, 'password'>;
+  tokens: {
+    accessToken: string;
+    refreshToken: string;
+  };
+}
+
+export interface JwtPayload {
+  userId: string;
+  email: string;
+  role: Role;
+  iat?: number;
+  exp?: number;
+}
+
+// Express Request Extensions  
+export interface AuthenticatedRequest extends Omit<Request, 'user'> {
+  user?: {
+    id: string;
+    email: string;
+    username: string | null;
+    firstName: string | null;
+    lastName: string | null;
+    avatar: string | null;
+    role: Role;
+    isActive: boolean;
+    isEmailVerified: boolean;
+    emailVerifiedAt: Date | null;
+    lastLoginAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+  };
+}
+
+// Database Types
+export interface DatabaseHealth {
+  connected: boolean;
+  responseTime?: number;
+  error?: string;
+}
+
+// File Upload Types
+export interface FileUploadOptions {
+  maxSize?: number;
+  allowedTypes?: string[];
+  destination?: string;
+  filename?: string;
+}
+
+export interface UploadedFile {
+  originalname: string;
+  filename: string;
+  mimetype: string;
+  size: number;
+  path: string;
+  url?: string;
+}
+
+// Error Types
+export interface AppError extends Error {
+  statusCode: number;
+  code?: string;
+  isOperational: boolean;
+}
+
+// Email Types
+export interface EmailTemplate {
+  subject: string;
+  html: string;
+  text?: string;
+}
+
+export interface EmailContext {
+  [key: string]: any;
+}
+
+// Validation Types
+export interface ValidationError {
+  field: string;
+  message: string;
+  value?: any;
+}
+
+// Service Types
+export interface ServiceResponse<T = any> {
+  success: boolean;
+  data?: T;
+  error?: string;
+  code?: string;
+}
+
+// Cache Types
+export interface CacheOptions {
+  ttl?: number; // Time to live in seconds
+  prefix?: string;
+}
+
+// Rate Limiting Types
+export interface RateLimitConfig {
+  windowMs: number;
+  max: number;
+  message?: string;
+  standardHeaders?: boolean;
+  legacyHeaders?: boolean;
+}
+
+export type LogLevel = 'error' | 'warn' | 'info' | 'debug';
+
+export interface LoggerConfig {
+  level: LogLevel;
+  format: string;
+  transports: string[];
+  meta?: boolean;
+}

package/src/utils/response.ts

@@ -0,0 +1,55 @@
+import { ApiResponse, PaginatedResponse } from '../types';
+
+export const createSuccessResponse = <T = any>(
+  data?: T,
+  message?: string,
+  code?: string
+): ApiResponse<T> => {
+  return {
+    success: true,
+    message,
+    data,
+    code,
+    timestamp: new Date().toISOString(),
+  };
+};
+
+export const createErrorResponse = (
+  message: string,
+  code?: string,
+  additionalData?: any
+): ApiResponse => {
+  return {
+    success: false,
+    message,
+    error: message,
+    code,
+    timestamp: new Date().toISOString(),
+    ...additionalData,
+  };
+};
+
+export const createPaginatedResponse = <T>(
+  data: T[],
+  total: number,
+  page: number,
+  limit: number,
+  message?: string
+): PaginatedResponse<T> => {
+  const totalPages = Math.ceil(total / limit);
+  
+  return {
+    success: true,
+    message,
+    data,
+    pagination: {
+      total,
+      page,
+      limit,
+      totalPages,
+      hasNext: page < totalPages,
+      hasPrev: page > 1,
+    },
+    timestamp: new Date().toISOString(),
+  };
+};

package/src/views/emails/notification.html

@@ -0,0 +1,87 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Notification - {{appName}}</title>
+    <style>
+        body {
+            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
+            line-height: 1.6;
+            color: #333;
+            background-color: #f4f4f4;
+            margin: 0;
+            padding: 0;
+        }
+        .container {
+            max-width: 600px;
+            margin: 20px auto;
+            background: white;
+            padding: 40px;
+            border-radius: 10px;
+            box-shadow: 0 0 20px rgba(0,0,0,0.1);
+        }
+        .header {
+            text-align: center;
+            margin-bottom: 30px;
+        }
+        .logo {
+            font-size: 24px;
+            font-weight: bold;
+            color: #3b82f6;
+            margin-bottom: 10px;
+        }
+        h1 {
+            color: #1f2937;
+            margin-bottom: 20px;
+            font-size: 24px;
+        }
+        .message-box {
+            background-color: #f8fafc;
+            border: 1px solid #e2e8f0;
+            border-radius: 8px;
+            padding: 20px;
+            margin: 20px 0;
+        }
+        .footer {
+            margin-top: 40px;
+            text-align: center;
+            color: #6b7280;
+            font-size: 14px;
+        }
+        .footer a {
+            color: #3b82f6;
+            text-decoration: none;
+        }
+        .divider {
+            border-top: 1px solid #e5e7eb;
+            margin: 30px 0;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <div class="header">
+            <div class="logo">{{appName}}</div>
+        </div>
+        
+        <h1>Hi {{firstName}},</h1>
+        
+        <div class="message-box">
+            {{message}}
+        </div>
+        
+        <p>If you have any questions about this notification, please don't hesitate to contact our support team.</p>
+        
+        <div class="divider"></div>
+        
+        <div class="footer">
+            <p>Best regards,</p>
+            <p>The {{appName}} Team</p>
+            <br>
+            <p>Need help? Contact our support team or visit our <a href="{{frontendUrl}}">help center</a>.</p>
+            <p>&copy; 2025 {{appName}}. All rights reserved.</p>
+        </div>
+    </div>
+</body>
+</html>

package/src/views/emails/resetPassword.html

@@ -0,0 +1,118 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Password Reset - {{appName}}</title>
+    <style>
+        body {
+            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
+            line-height: 1.6;
+            color: #333;
+            background-color: #f4f4f4;
+            margin: 0;
+            padding: 0;
+        }
+        .container {
+            max-width: 600px;
+            margin: 20px auto;
+            background: white;
+            padding: 40px;
+            border-radius: 10px;
+            box-shadow: 0 0 20px rgba(0,0,0,0.1);
+        }
+        .header {
+            text-align: center;
+            margin-bottom: 30px;
+        }
+        .logo {
+            font-size: 24px;
+            font-weight: bold;
+            color: #dc2626;
+            margin-bottom: 10px;
+        }
+        h1 {
+            color: #1f2937;
+            margin-bottom: 20px;
+            font-size: 24px;
+        }
+        .button {
+            display: inline-block;
+            padding: 12px 30px;
+            background-color: #dc2626;
+            color: white;
+            text-decoration: none;
+            border-radius: 6px;
+            font-weight: bold;
+            margin: 20px 0;
+            transition: background-color 0.3s ease;
+        }
+        .button:hover {
+            background-color: #b91c1c;
+        }
+        .footer {
+            margin-top: 40px;
+            text-align: center;
+            color: #6b7280;
+            font-size: 14px;
+        }
+        .footer a {
+            color: #dc2626;
+            text-decoration: none;
+        }
+        .divider {
+            border-top: 1px solid #e5e7eb;
+            margin: 30px 0;
+        }
+        .security-note {
+            background-color: #fef2f2;
+            border-left: 4px solid #dc2626;
+            padding: 15px;
+            margin: 20px 0;
+            font-size: 14px;
+        }
+        .warning {
+            background-color: #fffbeb;
+            border-left: 4px solid #f59e0b;
+            padding: 15px;
+            margin: 20px 0;
+            font-size: 14px;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <div class="header">
+            <div class="logo">{{appName}}</div>
+        </div>
+        
+        <h1>Hi {{firstName}},</h1>
+        
+        <p>We received a request to reset the password for your {{appName}} account.</p>
+        
+        <p>If you requested this password reset, please click the button below to create a new password:</p>
+        
+        <div style="text-align: center;">
+            <a href="{{resetUrl}}" class="button">Reset Password</a>
+        </div>
+        
+        <div class="security-note">
+            <strong>Security Notice:</strong> This password reset link will expire in 1 hour for your security. If you didn't request a password reset, please ignore this email and your password will remain unchanged.
+        </div>
+        
+        <div class="warning">
+            <strong>Important:</strong> If you suspect someone else requested this password reset, please contact our support team immediately and consider changing your password through the app directly.
+        </div>
+        
+        <p>If the button doesn't work, you can also copy and paste the following link into your browser:</p>
+        <p style="word-break: break-all; color: #dc2626;">{{resetUrl}}</p>
+        
+        <div class="divider"></div>
+        
+        <div class="footer">
+            <p>Need help? Contact our support team or visit our <a href="{{frontendUrl}}">help center</a>.</p>
+            <p>&copy; 2025 {{appName}}. All rights reserved.</p>
+        </div>
+    </div>
+</body>
+</html>