create-authenik8-app 1.0.6 → 2.0.0

package/README.md

@@ -1,4 +1,8 @@
 
+
+
+---
+
 # create-authenik8-app
 
 <p align="center">
@@ -11,7 +15,7 @@
 
 ---
 
-##  Usage
+## 📦 Usage
 
 Create a new project:
 
@@ -23,8 +27,8 @@ Then:
 cd my-app
 npm install
 npm run dev
-
 ```
+
 ---
 
 ## What you get instantly
@@ -33,19 +37,19 @@ A fully working Express authentication starter with:
 
 JWT authentication (access + refresh tokens)
 
- Secure refresh token rotation
+Secure refresh token rotation
 
- Redis-based token storage
+Redis-based token storage
 
- Role-Based Access Control (RBAC)
+Role-Based Access Control (RBAC)
 
 TypeScript setup
 
- Express server preconfigured
+Express server preconfigured
 
 Clean scalable folder structure
 
- .env file generated automatically
+.env file generated automatically
 
 
 
@@ -79,8 +83,8 @@ Redis (required for refresh tokens)
 
 ---
 
- ## Redis Setup
- ```
+## Redis Setup
+```
 
 Local
 
@@ -89,10 +93,11 @@ redis-server
 Docker
 
 docker run -p 6379:6379 redis
+
 ```
 ---
 
- Environment Variables
+## Environment Variables
 
 Generated automatically:
 ```
@@ -101,22 +106,22 @@ REFRESH_SECRET=your-refresh-secret
 
 REDIS_HOST=127.0.0.1
 REDIS_PORT=6379
-```
 
+```
 ---
 
-RBAC Example
-
-Example of a protected route:
+## RBAC Example
 ```
+Example of a protected route:
+
 app.get("/admin", auth.requireAdmin, (req, res) => {
   res.json({ message: "Admin only route" });
 });
-```
 
+```
 ---
 
-## Powered by
+📦 Powered by
 
 authenik8-core
 
@@ -126,9 +131,10 @@ authenik8-core
 
 ## Project Structure
 ```
+
 my-app/
 ├── src/
-│   ├
+│   | 
 │   ├
 │   └── server.ts
 ├── .env
@@ -150,7 +156,7 @@ RBAC is included via middleware (e.g. requireAdmin)
 
 ---
 
-## Roadmap
+ ## Roadmap
 
 OAuth providers (Google, GitHub)
 
@@ -162,3 +168,6 @@ Admin dashboard
 
 Production presets
 
+
+
+---

package/dist/bin/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/bin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/bin/index.ts"],"names":[],"mappings":""}

package/dist/bin/index.js

@@ -0,0 +1,250 @@
+#!/usr/bin/env node
+import fs from "fs-extra";
+import path from "path";
+import chalk from "chalk";
+import inquirer from "inquirer";
+import { ExitPromptError } from "@inquirer/core";
+import ora from "ora";
+import { execSync } from "child_process";
+import { fileURLToPath } from "url";
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const projectName = process.argv[2];
+if (!projectName) {
+    console.log(chalk.red("❌ Please provide a project name"));
+    process.exit(1);
+}
+const targetDir = path.join(process.cwd(), projectName);
+let projectCreated = false;
+async function main() {
+    console.log(chalk.blue.bold("\n🚀 Authenik8 App Generator\n"));
+    if (process.argv.includes("--help")) {
+        console.log(`
+Authenik8 CLI
+
+Usage:
+  create-authenik8-app <project-name>
+
+Options:
+  --help           Show this help message
+
+Features:
+  - Express backend (default)
+  - Optional Prisma ORM
+  - PostgreSQL (production)
+  - SQLite (quick start)
+  - Optional Git initialization
+
+Examples:
+  create-authenik8-app my-app
+`);
+        process.exit(0);
+    }
+    console.log(chalk.gray(`
+Available options:
+
+  Frameworks:
+    - Express
+    - Fastify(coming soon)
+
+  Database (if Prisma enabled):
+    - PostgreSQL
+    - SQLite (quick start)
+
+  Features:
+    - Prisma ORM (optional)
+    - Git initialization (optional)
+`));
+    // 🔥 PROMPTS
+    const answers = await inquirer.prompt([
+        {
+            type: "list",
+            name: "framework",
+            message: "Choose framework:",
+            choices: ["Express", "Fastify (coming soon)"],
+        },
+        {
+            type: "confirm",
+            name: "usePrisma",
+            message: "Use Prisma?",
+            default: true,
+        },
+        {
+            type: "list",
+            name: "database",
+            message: "Choose database:",
+            choices: [
+                { name: "PostgreSQL", value: "postgresql(recommended for auth)" },
+                { name: "SQLite (quick start, limited features)", value: "sqlite" }
+            ],
+            when: (answers) => answers.usePrisma,
+        },
+        {
+            type: "confirm",
+            name: "useGit",
+            message: "Initialize git?",
+            default: true,
+        },
+        {
+            type: "confirm",
+            name: "usePasswordAuth",
+            message: "Include email/password authentication?",
+            default: true,
+            when: (answers) => answers.usePrisma && answers.database === "postgresql"
+        },
+    ]);
+    // 🚫 Prevent overwrite
+    if (fs.existsSync(targetDir)) {
+        console.log(chalk.red("\n❌ Folder already exists"));
+        process.exit(1);
+    }
+    console.log(chalk.cyan("\n⚙️ Setting things up...\n"));
+    const templateRoot = path.resolve(__dirname, "../../templates");
+    let templateName = "express-base";
+    if (answers.usePasswordAuth && answers.usePrisma) {
+        templateName = "express-auth";
+    }
+    const templatePath = path.join(templateRoot, templateName);
+    // 📁 Create project (SPINNER)
+    const createSpinner = ora("Creating project structure...").start();
+    try {
+        await fs.copy(templatePath, targetDir);
+        projectCreated = true;
+        createSpinner.succeed("Project files created");
+    }
+    catch (err) {
+        createSpinner.fail("Failed to create project");
+        console.error(err);
+        process.exit(1);
+    }
+    if (answers.usePrisma) {
+        const prismaSpinner = ora("Adding Prisma setup...").start();
+        try {
+            const dbType = answers.database ===
+                "postgresql" ? "postgresql"
+                : "sqlite";
+            const prismaTemplatePath = path.join(templateRoot, `prisma/${dbType}`);
+            // Copy prisma schema
+            await fs.copy(path.join(prismaTemplatePath, "schema.prisma"), path.join(targetDir, "prisma/schema.prisma"));
+            // Copy env
+            await fs.copy(path.join(prismaTemplatePath, ".env"), path.join(targetDir, ".env"));
+            const pkgPath = path.join(targetDir, "package.json");
+            const pkg = await fs.readJson(pkgPath);
+            await fs.writeJson(pkgPath, pkg, { spaces: 2 });
+            // Inject dependencies
+            pkg.dependencies = {
+                ...pkg.dependencies,
+                "@prisma/client": "5.22.0",
+            };
+            pkg.devDependencies = {
+                ...pkg.devDependencies,
+                prisma: "5.22.0",
+            };
+            // Add scripts
+            pkg.scripts = {
+                ...pkg.scripts,
+                "prisma:generate": "prisma generate",
+                "prisma:migrate": "prisma migrate dev",
+            };
+            prismaSpinner.succeed(`Prisma (${dbType}) configured`);
+        }
+        catch (err) {
+            prismaSpinner.fail("Failed to setup Prisma");
+            console.error(err);
+        }
+        const installSpinner = ora("Installing dependencies...(this may take a few minutes)").start();
+        try {
+            execSync("npm install", {
+                cwd: targetDir,
+                stdio: "ignore",
+            });
+            installSpinner.succeed("Dependencies installed");
+        }
+        catch (err) {
+            installSpinner.fail("Failed to install dependencies");
+            console.error(err);
+            process.exit(1);
+        }
+        if (answers.usePrisma) {
+            const prismaGenSpinner = ora("Generating Prisma client...").start();
+            try {
+                execSync("npx prisma@5.22.0 generate", {
+                    cwd: targetDir,
+                    stdio: "inherit"
+                });
+                prismaGenSpinner.succeed("Prisma client generated");
+            }
+            catch (err) {
+                prismaGenSpinner.fail("Failed to generate Prisma client");
+                console.error(err);
+            }
+        }
+        const authSpinner = ora("Installing password auth...").start();
+        try {
+            execSync("npm install argon2", {
+                cwd: targetDir,
+                stdio: "ignore",
+            });
+            authSpinner.succeed("Password auth ready (argon2)");
+        }
+        catch (err) {
+            authSpinner.fail("Failed to install password auth");
+            console.error(err);
+            process.exit(1);
+        }
+    }
+    if (answers.useGit) {
+        const gitSpinner = ora("Initializing git...").start();
+        try {
+            execSync("git init", {
+                cwd: targetDir,
+                stdio: "ignore",
+            });
+            gitSpinner.succeed("Git initialized");
+        }
+        catch (err) {
+            gitSpinner.fail("Git init failed");
+        }
+    }
+    console.log(chalk.green.bold("\n🎉 Authenik8 app created successfully!\n"));
+    console.log(chalk.white(`
+Next steps:
+
+  cd ${projectName}
+  cp .env.example .env
+  npm run dev
+
+🔥 Your Authenik8 server is ready to go!
+`));
+    console.log(`
+✔ Auth: ${answers.usePasswordAuth ? "JWT + Password" : "JWT only"}
+✔ Database: ${answers.usePrisma ? answers.database : "None"}
+✔ ORM: ${answers.usePrisma ? "Prisma" : "None"}
+`);
+}
+process.on("SIGINT", async () => {
+    console.log("\n👋 Authenik8 setup cancelled.");
+    if (projectCreated && fs.existsSync(targetDir)) {
+        await fs.remove(targetDir);
+        console.log("🧹 Cleaned up incomplete project.");
+    }
+    process.exit(0);
+});
+main().catch(async (err) => {
+    if (err instanceof ExitPromptError) {
+        console.log("\n👋 Authenik8 setup cancelled.");
+        if (projectCreated && fs.existsSync(targetDir)) {
+            await fs.remove(targetDir);
+            console.log("🧹 Cleaned up incomplete project.");
+        }
+        process.exit(0);
+    }
+    console.error("\n❌ Unexpected error:");
+    console.error(err);
+    if (projectCreated && fs.existsSync(targetDir)) {
+        await fs.remove(targetDir);
+        console.log("🧹 Cleaned up incomplete project.");
+    }
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/bin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bin/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAGpC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAG3C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEpC,IAAI,CAAC,WAAW,EAAE,CAAC;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;AACxD,IAAI,cAAc,GAAG,KAAK,CAAA;AAE1B,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAE/D,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBb,CAAC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAEC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;;;;;;;;;;;;;;CAcxB,CAAC,CAAC,CAAC;IAEF,aAAa;IACb,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACpC;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE,CAAC,SAAS,EAAE,uBAAuB,CAAC;SAC9C;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,IAAI;SACd;QACD;YACA,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAC;gBACR,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,kCAAkC,EAAE;gBACjE,EAAE,IAAI,EAAE,wCAAwC,EAAE,KAAK,EAAE,QAAQ,EAAE;aACpE;YACC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS;SACnC;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EAAE,IAAI;SACd;QACD;YACF,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,wCAAwC;YACjD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,YAAY;SACzD;KACE,CAAC,CAAC;IAEH,uBAAuB;IACvB,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAGzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAGhE,IAAI,YAAY,GAAG,cAAc,CAAC;IAElC,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC/C,YAAY,GAAG,cAAc,CAAC;IAChC,CAAC;IAEH,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAGzD,8BAA8B;IAC9B,MAAM,aAAa,GAAG,GAAG,CAAC,+BAA+B,CAAC,CAAC,KAAK,EAAE,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACvC,cAAc,GAAG,IAAI,CAAA;QACrB,aAAa,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,aAAa,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;QAE5D,IAAI,CAAC;YACL,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ;gBAChC,YAAY,CAAC,CAAC,CAAC,YAAY;gBAC5B,CAAC,CAAC,QAAQ,CAAC;YAET,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAClC,YAAY,EACZ,UAAU,MAAM,EAAE,CACnB,CAAC;YAEF,qBAAqB;YACrB,MAAM,EAAE,CAAC,IAAI,CACZ,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,eAAe,CAAC,EAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAC7C,CAAC;YAEF,WAAW;YACX,MAAM,EAAE,CAAC,IAAI,CACX,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,EACrC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAC7B,CAAC;YAEF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEvC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5C,sBAAsB;YACtB,GAAG,CAAC,YAAY,GAAG;gBACjB,GAAG,GAAG,CAAC,YAAY;gBACnB,gBAAgB,EAAE,QAAQ;aAC3B,CAAC;YAEF,GAAG,CAAC,eAAe,GAAG;gBACpB,GAAG,GAAG,CAAC,eAAe;gBACtB,MAAM,EAAE,QAAQ;aACjB,CAAC;YAEF,cAAc;YACd,GAAG,CAAC,OAAO,GAAG;gBACZ,GAAG,GAAG,CAAC,OAAO;gBACd,iBAAiB,EAAE,iBAAiB;gBACpC,gBAAgB,EAAE,oBAAoB;aACvC,CAAC;YAEF,aAAa,CAAC,OAAO,CAAC,WAAW,MAAM,cAAc,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,aAAa,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,CAAC,yDAAyD,CAAC,CAAC,KAAK,EAAE,CAAC;QAE9F,IAAI,CAAC;YACH,QAAQ,CAAC,aAAa,EAAE;gBACtB,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YAGH,cAAc,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,cAAc,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YACtD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,gBAAgB,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;YAEpE,IAAI,CAAC;gBACH,QAAQ,CAAC,4BAA4B,EAAE;oBACrC,GAAG,EAAE,SAAS;oBACd,KAAK,EAAE,SAAS;iBACjB,CAAC,CAAC;gBAEH,gBAAgB,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gBAAgB,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAEG,MAAM,WAAW,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;QAE/D,IAAI,CAAC;YACH,QAAQ,CAAC,oBAAoB,EAAE;gBAC7B,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YAEH,WAAW,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACL,CAAC;IAEC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEtD,IAAI,CAAC;YACH,QAAQ,CAAC,UAAU,EAAE;gBACnB,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAE5E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;;;OAGnB,WAAW;;;;;CAKjB,CAAC,CAAC,CAAC;IACJ,OAAO,CAAC,GAAG,CAAC;UACF,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU;cACnD,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;SAClD,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;CAC7C,CAAC,CAAC;AACH,CAAC;AACD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IAC9B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAE/C,IAAI,cAAc,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAE/C,IAAI,cAAc,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACvC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEnB,IAAI,cAAc,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEnD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-authenik8-app",
-  "version": "1.0.6",
+  "version": "2.0.0",
   "description":"Create production-ready backend APIs in seconds. Authenik8 scaffolds Express + Prisma projects with JWT authentication, database setup (PostgreSQL or SQLite), and scalable architecture out of the box.",
   "bin": {
     "create-authenik8-app": "dist/bin/index.js"

package/templates/express-auth/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "authenik8-app",
+  "version": "1.0.6",
+  "description": "Authenik8 generated Express auth app",
+  "main": "dist/server.js",
+  "type": "commonjs",
+  "scripts": {
+    "dev": "ts-node-dev --respawn --transpile-only src/server.ts",
+    "build": "tsc",
+    "start": "node dist/server.js",
+    "prisma:generate": "prisma generate",
+    "prisma:migrate": "prisma migrate dev"
+  },
+  "dependencies": {
+    "authenik8-core": "0.1.5",
+    "express": "^4.19.2"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "@types/node": "^20.0.0",
+    "ts-node-dev": "^2.0.0",
+    "typescript": "^5.0.0"
+  }
+}

package/templates/express-auth/src/prisma/client.ts

@@ -0,0 +1,15 @@
+import { PrismaClient } from "@prisma/client";
+
+const globalForPrisma = globalThis as unknown as {
+  prisma: PrismaClient | undefined;
+};
+
+export const prisma =
+  globalForPrisma.prisma ??
+  new PrismaClient({
+    log: ["error", "warn"],
+  });
+
+if (process.env.NODE_ENV !== "production") {
+  globalForPrisma.prisma = prisma;
+}

package/templates/express-auth/src/server.ts

@@ -0,0 +1,78 @@
+import express from "express";
+import { createAuthenik8 } from "authenik8-core";
+import { hashPassword, comparePassword } from "./utils/hash";
+import {prisma} from "./prisma/client"
+
+const app = express();
+app.use(express.json());
+
+async function start() {
+  const auth = await createAuthenik8({
+    jwtSecret: process.env.JWT_SECRET!,
+    refreshSecret: process.env.REFRESH_SECRET!,
+  });
+
+  
+  app.post("/register", async (req, res) => {
+    const { email, password } = req.body;
+
+    const hashedPassword = await hashPassword(password);
+
+    const user = await prisma.user.create({
+      data: {
+        email,
+        password: hashedPassword,
+      },
+    });
+
+    res.json({ message: "User created", userId: user.id });
+  });
+
+
+  app.post("/login", async (req, res) => {
+    const { email, password } = req.body;
+
+    const user = await prisma.user.findUnique({
+      where: { email },
+    });
+
+    if (!user) {
+      return res.status(401).json({ error: "Invalid credentials" });
+    }
+
+    const isValid = await comparePassword(password, user.password);
+
+    if (!isValid) {
+      return res.status(401).json({ error: "Invalid credentials" });
+    }
+
+    const accessToken = auth.signToken({
+      id: user.id,
+      email: user.email,
+    });
+
+    const refreshToken = await auth.generateRefreshToken({
+      id: user.id,
+      email: user.email,
+    });
+
+    res.json({ accessToken, refreshToken });
+  });
+
+  
+  app.post("/refresh", async (req, res) => {
+    const tokens = await auth.refreshToken(req.body.refreshToken);
+    res.json(tokens);
+  });
+
+  // ✅ PROTECTED
+  app.get("/protected", auth.requireAdmin, (req, res) => {
+    res.json({ message: "Protected route" });
+  });
+
+  app.listen(3000, () => {
+    console.log("🚀 Server running on http://localhost:3000");
+  });
+}
+
+start();

package/templates/express-auth/src/utils/hash.ts

@@ -0,0 +1,12 @@
+import argon2 from "argon2";
+
+export const hashPassword = async (password: string): Promise<string> => {
+  return argon2.hash(password);
+};
+
+export const comparePassword = async (
+  password: string,
+  hash: string
+): Promise<boolean> => {
+  return argon2.verify(hash, password);
+};

package/templates/express-auth/tsconfig.json

@@ -0,0 +1,16 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "rootDir": "./src",
+    "outDir": "./dist",
+
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+
+    "forceConsistentCasingInFileNames": true
+  },
+  "include": ["src"],
+  "exclude": ["node_modules", "dist"]
+}

package/templates/express-base/src/server.ts

@@ -0,0 +1,56 @@
+import express from "express";
+import { createAuthenik8 } from "authenik8-core";
+
+const app = express();
+app.use(express.json());
+
+async function start() {
+  const auth = await createAuthenik8({
+    jwtSecret: process.env.JWT_SECRET!,
+    refreshSecret: process.env.REFRESH_SECRET!,
+  });
+
+  app.use(auth.helmet);
+  app.use(auth.rateLimit);
+
+  
+  app.get("/public", (req, res) => {
+    res.json({ message: "Public route" });
+  });
+
+  
+  app.get("/guest", async (req, res) => {
+    const token = await auth.guestToken({ role: "guest" });
+    res.json({ token });
+  });
+
+
+
+  app.get("/protected", async (req, res) => {
+    const token = req.headers.authorization?.split(" ")[1];
+
+    try {
+      const decoded = await auth.verifyToken(token);
+      res.json({ message: "Protected data", user: decoded });
+    } catch {
+      res.status(401).json({ error: "Unauthorized" });
+    }
+  });
+
+  
+  app.post("/refresh", async (req, res) => {
+    const tokens = await auth.refreshToken(req.body.refreshToken);
+    res.json(tokens);
+  });
+
+  // 🛡️ Admin route
+  app.get("/admin", auth.requireAdmin, (req, res) => {
+    res.json({ message: "Admin only" });
+  });
+
+  app.listen(3000, () => {
+    console.log("🚀 Server running on http://localhost:3000");
+  });
+}
+
+start();

package/templates/prisma/sqlite/schema.prisma

@@ -11,7 +11,7 @@ model User {
   id        String   @id @default(uuid())
   email     String   @unique
   password  String
-  role      Role     @default(USER)
+  role      String     @default("USER")
   verified  Boolean  @default(false)
 
   createdAt DateTime @default(now())
@@ -30,8 +30,3 @@ model Session {
 
   createdAt DateTime @default(now())
 }
-
-enum Role {
-  USER
-  ADMIN
-}

package/LICENSE

@@ -1,22 +0,0 @@
-
-MIT License
-
-Copyright (c) 2026 TheSBD
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/templates/express-ts/src/server.ts

@@ -1,36 +0,0 @@
-import express from "express";
-import { createAuthenik8 } from "authenik8-core";
-
-const app = express();
-app.use(express.json());
-
-async function start() {
-  const auth = await createAuthenik8({
-    jwtSecret: process.env.JWT_SECRET!,
-    refreshSecret: process.env.REFRESH_SECRET!,
-  });
-
-  app.post("/login", async (req, res) => {
-    const user = { id: "123", email: "test@test.com" };
-
-    const accessToken = auth.signToken(user);
-    const refreshToken = await auth.generateRefreshToken(user);
-
-    res.json({ accessToken, refreshToken });
-  });
-
-  app.post("/refresh", async (req, res) => {
-    const tokens = await auth.refreshToken(req.body.refreshToken);
-    res.json(tokens);
-  });
-
-  app.get("/protected", auth.requireAdmin, (req, res) => {
-    res.json({ message: "Protected route" });
-  });
-
-  app.listen(3000, () => {
-    console.log("🚀 Server running on http://localhost:3000");
-  });
-}
-
-start();