create-authenik8-app 1.0.7 → 2.0.1

package/LICENSE

@@ -0,0 +1,22 @@
+
+MIT License
+
+Copyright (c) 2026 TheSBD
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,8 +1,4 @@
 
-
-
----
-
 # create-authenik8-app
 
 <p align="center">
@@ -15,7 +11,7 @@
 
 ---
 
-## 📦 Usage
+##  Usage
 
 Create a new project:
 
@@ -27,8 +23,8 @@ Then:
 cd my-app
 npm install
 npm run dev
-```
 
+```
 ---
 
 ## What you get instantly
@@ -37,19 +33,19 @@ A fully working Express authentication starter with:
 
 JWT authentication (access + refresh tokens)
 
-Secure refresh token rotation
+ Secure refresh token rotation
 
-Redis-based token storage
+ Redis-based token storage
 
-Role-Based Access Control (RBAC)
+ Role-Based Access Control (RBAC)
 
 TypeScript setup
 
-Express server preconfigured
+ Express server preconfigured
 
 Clean scalable folder structure
 
-.env file generated automatically
+ .env file generated automatically
 
 
 
@@ -83,8 +79,8 @@ Redis (required for refresh tokens)
 
 ---
 
-## Redis Setup
-```
+ ## Redis Setup
+ ```
 
 Local
 
@@ -93,11 +89,10 @@ redis-server
 Docker
 
 docker run -p 6379:6379 redis
-
 ```
 ---
 
-## Environment Variables
+ Environment Variables
 
 Generated automatically:
 ```
@@ -106,22 +101,22 @@ REFRESH_SECRET=your-refresh-secret
 
 REDIS_HOST=127.0.0.1
 REDIS_PORT=6379
-
 ```
+
 ---
 
-## RBAC Example
-```
-Example of a protected route:
+RBAC Example
 
+Example of a protected route:
+```
 app.get("/admin", auth.requireAdmin, (req, res) => {
   res.json({ message: "Admin only route" });
 });
-
 ```
+
 ---
 
-📦 Powered by
+## Powered by
 
 authenik8-core
 
@@ -131,10 +126,9 @@ authenik8-core
 
 ## Project Structure
 ```
-
 my-app/
 ├── src/
-│   | 
+│   ├
 │   ├
 │   └── server.ts
 ├── .env
@@ -156,7 +150,7 @@ RBAC is included via middleware (e.g. requireAdmin)
 
 ---
 
- ## Roadmap
+## Roadmap
 
 OAuth providers (Google, GitHub)
 
@@ -168,6 +162,3 @@ Admin dashboard
 
 Production presets
 
-
-
----

package/dist/bin/index.js

@@ -3,6 +3,7 @@ import fs from "fs-extra";
 import path from "path";
 import chalk from "chalk";
 import inquirer from "inquirer";
+import { ExitPromptError } from "@inquirer/core";
 import ora from "ora";
 import { execSync } from "child_process";
 import { fileURLToPath } from "url";
@@ -14,6 +15,7 @@ if (!projectName) {
     process.exit(1);
 }
 const targetDir = path.join(process.cwd(), projectName);
+let projectCreated = false;
 async function main() {
     console.log(chalk.blue.bold("\n🚀 Authenik8 App Generator\n"));
     if (process.argv.includes("--help")) {
@@ -72,8 +74,8 @@ Available options:
             name: "database",
             message: "Choose database:",
             choices: [
-                { name: "PostgreSQL", value: "postgresql" },
-                { name: "SQLite (quick start)", value: "sqlite" }
+                { name: "PostgreSQL", value: "postgresql(recommended for auth)" },
+                { name: "SQLite (quick start, limited features)", value: "sqlite" }
             ],
             when: (answers) => answers.usePrisma,
         },
@@ -83,6 +85,13 @@ Available options:
             message: "Initialize git?",
             default: true,
         },
+        {
+            type: "confirm",
+            name: "usePasswordAuth",
+            message: "Include email/password authentication?",
+            default: true,
+            when: (answers) => answers.usePrisma && answers.database === "postgresql"
+        },
     ]);
     // 🚫 Prevent overwrite
     if (fs.existsSync(targetDir)) {
@@ -91,13 +100,16 @@ Available options:
     }
     console.log(chalk.cyan("\n⚙️ Setting things up...\n"));
     const templateRoot = path.resolve(__dirname, "../../templates");
-    const templatePath = answers.framework === "Express"
-        ? path.join(templateRoot, "express-ts")
-        : path.join(templateRoot, "express-ts"); // fallback for now
+    let templateName = "express-base";
+    if (answers.usePasswordAuth && answers.usePrisma) {
+        templateName = "express-auth";
+    }
+    const templatePath = path.join(templateRoot, templateName);
     // 📁 Create project (SPINNER)
     const createSpinner = ora("Creating project structure...").start();
     try {
         await fs.copy(templatePath, targetDir);
+        projectCreated = true;
         createSpinner.succeed("Project files created");
     }
     catch (err) {
@@ -108,8 +120,8 @@ Available options:
     if (answers.usePrisma) {
         const prismaSpinner = ora("Adding Prisma setup...").start();
         try {
-            const dbType = answers.database.toLowerCase().includes("post")
-                ? "postgresql"
+            const dbType = answers.database ===
+                "postgresql" ? "postgresql"
                 : "sqlite";
             const prismaTemplatePath = path.join(templateRoot, `prisma/${dbType}`);
             // Copy prisma schema
@@ -118,14 +130,15 @@ Available options:
             await fs.copy(path.join(prismaTemplatePath, ".env"), path.join(targetDir, ".env"));
             const pkgPath = path.join(targetDir, "package.json");
             const pkg = await fs.readJson(pkgPath);
+            await fs.writeJson(pkgPath, pkg, { spaces: 2 });
             // Inject dependencies
             pkg.dependencies = {
                 ...pkg.dependencies,
-                "@prisma/client": "^5.0.0",
+                "@prisma/client": "5.22.0",
             };
             pkg.devDependencies = {
                 ...pkg.devDependencies,
-                prisma: "^5.0.0",
+                prisma: "5.22.0",
             };
             // Add scripts
             pkg.scripts = {
@@ -133,26 +146,52 @@ Available options:
                 "prisma:generate": "prisma generate",
                 "prisma:migrate": "prisma migrate dev",
             };
-            prismaSpinner.succeed(`Prisma (${answers.database}) configured`);
+            prismaSpinner.succeed(`Prisma (${dbType}) configured`);
         }
         catch (err) {
             prismaSpinner.fail("Failed to setup Prisma");
             console.error(err);
         }
-    }
-    // 
-    const installSpinner = ora("Installing dependencies...(this may take a few minutes)").start();
-    try {
-        execSync("npm install", {
-            cwd: targetDir,
-            stdio: "ignore",
-        });
-        installSpinner.succeed("Dependencies installed");
-    }
-    catch (err) {
-        installSpinner.fail("Failed to install dependencies");
-        console.error(err);
-        process.exit(1);
+        const installSpinner = ora("Installing dependencies...(this may take a few minutes)").start();
+        try {
+            execSync("npm install", {
+                cwd: targetDir,
+                stdio: "ignore",
+            });
+            installSpinner.succeed("Dependencies installed");
+        }
+        catch (err) {
+            installSpinner.fail("Failed to install dependencies");
+            console.error(err);
+            process.exit(1);
+        }
+        if (answers.usePrisma) {
+            const prismaGenSpinner = ora("Generating Prisma client...").start();
+            try {
+                execSync("npx prisma@5.22.0 generate", {
+                    cwd: targetDir,
+                    stdio: "ignore"
+                });
+                prismaGenSpinner.succeed("Prisma client generated");
+            }
+            catch (err) {
+                prismaGenSpinner.fail("Failed to generate Prisma client");
+                console.error(err);
+            }
+        }
+        const authSpinner = ora("Installing password auth...").start();
+        try {
+            execSync("npm install argon2", {
+                cwd: targetDir,
+                stdio: "ignore",
+            });
+            authSpinner.succeed("Password auth ready (argon2)");
+        }
+        catch (err) {
+            authSpinner.fail("Failed to install password auth");
+            console.error(err);
+            process.exit(1);
+        }
     }
     if (answers.useGit) {
         const gitSpinner = ora("Initializing git...").start();
@@ -177,6 +216,35 @@ Next steps:
 
 🔥 Your Authenik8 server is ready to go!
 `));
+    console.log(`
+✔ Auth: ${answers.usePasswordAuth ? "JWT + Password" : "JWT only"}
+✔ Database: ${answers.usePrisma ? answers.database : "None"}
+✔ ORM: ${answers.usePrisma ? "Prisma" : "None"}
+`);
 }
-main();
+process.on("SIGINT", async () => {
+    console.log("\n👋 Authenik8 setup cancelled.");
+    if (projectCreated && fs.existsSync(targetDir)) {
+        await fs.remove(targetDir);
+        console.log("🧹 Cleaned up incomplete project.");
+    }
+    process.exit(0);
+});
+main().catch(async (err) => {
+    if (err instanceof ExitPromptError) {
+        console.log("\n👋 Authenik8 setup cancelled.");
+        if (projectCreated && fs.existsSync(targetDir)) {
+            await fs.remove(targetDir);
+            console.log("🧹 Cleaned up incomplete project.");
+        }
+        process.exit(0);
+    }
+    console.error("\n❌ Unexpected error:");
+    console.error(err);
+    if (projectCreated && fs.existsSync(targetDir)) {
+        await fs.remove(targetDir);
+        console.log("🧹 Cleaned up incomplete project.");
+    }
+    process.exit(1);
+});
 //# sourceMappingURL=index.js.map

package/dist/bin/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bin/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAGpC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAG3C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEpC,IAAI,CAAC,WAAW,EAAE,CAAC;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;AAExD,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAE/D,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBb,CAAC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAEC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;;;;;;;;;;;;;;CAcxB,CAAC,CAAC,CAAC;IAEF,aAAa;IACb,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACpC;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE,CAAC,SAAS,EAAE,uBAAuB,CAAC;SAC9C;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,IAAI;SACd;QACD;YACA,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAC;gBACR,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE;gBAC3C,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,QAAQ,EAAE;aAClD;YACC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS;SACnC;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EAAE,IAAI;SACd;KACF,CAAC,CAAC;IAEH,uBAAuB;IACvB,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAEzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAEhE,MAAM,YAAY,GAChB,OAAO,CAAC,SAAS,KAAK,SAAS;QAC7B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,mBAAmB;IAE9D,8BAA8B;IAC9B,MAAM,aAAa,GAAG,GAAG,CAAC,+BAA+B,CAAC,CAAC,KAAK,EAAE,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACvC,aAAa,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAGD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,aAAa,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;QAE5D,IAAI,CAAC;YACL,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAChE,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,QAAQ,CAAC;YAET,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAClC,YAAY,EACZ,UAAU,MAAM,EAAE,CACnB,CAAC;YAEF,qBAAqB;YACrB,MAAM,EAAE,CAAC,IAAI,CACZ,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,eAAe,CAAC,EAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAC7C,CAAC;YAEF,WAAW;YACX,MAAM,EAAE,CAAC,IAAI,CACX,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,EACrC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAC7B,CAAC;YAEF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEnC,sBAAsB;YACtB,GAAG,CAAC,YAAY,GAAG;gBACjB,GAAG,GAAG,CAAC,YAAY;gBACnB,gBAAgB,EAAE,QAAQ;aAC3B,CAAC;YAEF,GAAG,CAAC,eAAe,GAAG;gBACpB,GAAG,GAAG,CAAC,eAAe;gBACtB,MAAM,EAAE,QAAQ;aACjB,CAAC;YAEF,cAAc;YACd,GAAG,CAAC,OAAO,GAAG;gBACZ,GAAG,GAAG,CAAC,OAAO;gBACd,iBAAiB,EAAE,iBAAiB;gBACpC,gBAAgB,EAAE,oBAAoB;aACvC,CAAC;YAEF,aAAa,CAAC,OAAO,CAAC,WAAW,OAAO,CAAC,QAAQ,cAAc,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,aAAa,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAEC,GAAG;IACH,MAAM,cAAc,GAAG,GAAG,CAAC,yDAAyD,CAAC,CAAC,KAAK,EAAE,CAAC;IAE9F,IAAI,CAAC;QACH,QAAQ,CAAC,aAAa,EAAE;YACtB,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QAGH,cAAc,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,cAAc,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACtD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAGD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEtD,IAAI,CAAC;YACH,QAAQ,CAAC,UAAU,EAAE;gBACnB,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAE5E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;;;OAGnB,WAAW;;;;;CAKjB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bin/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAGpC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAG3C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEpC,IAAI,CAAC,WAAW,EAAE,CAAC;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;AACxD,IAAI,cAAc,GAAG,KAAK,CAAA;AAE1B,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAE/D,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBb,CAAC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAEC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;;;;;;;;;;;;;;CAcxB,CAAC,CAAC,CAAC;IAEF,aAAa;IACb,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACpC;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE,CAAC,SAAS,EAAE,uBAAuB,CAAC;SAC9C;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,IAAI;SACd;QACD;YACA,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAC;gBACR,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,kCAAkC,EAAE;gBACjE,EAAE,IAAI,EAAE,wCAAwC,EAAE,KAAK,EAAE,QAAQ,EAAE;aACpE;YACC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS;SACnC;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EAAE,IAAI;SACd;QACD;YACF,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,wCAAwC;YACjD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,YAAY;SACzD;KACE,CAAC,CAAC;IAEH,uBAAuB;IACvB,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAGzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAGhE,IAAI,YAAY,GAAG,cAAc,CAAC;IAElC,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC/C,YAAY,GAAG,cAAc,CAAC;IAChC,CAAC;IAEH,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAGzD,8BAA8B;IAC9B,MAAM,aAAa,GAAG,GAAG,CAAC,+BAA+B,CAAC,CAAC,KAAK,EAAE,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACvC,cAAc,GAAG,IAAI,CAAA;QACrB,aAAa,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,aAAa,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;QAE5D,IAAI,CAAC;YACL,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ;gBAChC,YAAY,CAAC,CAAC,CAAC,YAAY;gBAC5B,CAAC,CAAC,QAAQ,CAAC;YAET,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAClC,YAAY,EACZ,UAAU,MAAM,EAAE,CACnB,CAAC;YAEF,qBAAqB;YACrB,MAAM,EAAE,CAAC,IAAI,CACZ,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,eAAe,CAAC,EAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAC7C,CAAC;YAEF,WAAW;YACX,MAAM,EAAE,CAAC,IAAI,CACX,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,EACrC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAC7B,CAAC;YAEF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEvC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5C,sBAAsB;YACtB,GAAG,CAAC,YAAY,GAAG;gBACjB,GAAG,GAAG,CAAC,YAAY;gBACnB,gBAAgB,EAAE,QAAQ;aAC3B,CAAC;YAEF,GAAG,CAAC,eAAe,GAAG;gBACpB,GAAG,GAAG,CAAC,eAAe;gBACtB,MAAM,EAAE,QAAQ;aACjB,CAAC;YAEF,cAAc;YACd,GAAG,CAAC,OAAO,GAAG;gBACZ,GAAG,GAAG,CAAC,OAAO;gBACd,iBAAiB,EAAE,iBAAiB;gBACpC,gBAAgB,EAAE,oBAAoB;aACvC,CAAC;YAEF,aAAa,CAAC,OAAO,CAAC,WAAW,MAAM,cAAc,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,aAAa,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,CAAC,yDAAyD,CAAC,CAAC,KAAK,EAAE,CAAC;QAE9F,IAAI,CAAC;YACH,QAAQ,CAAC,aAAa,EAAE;gBACtB,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YAGH,cAAc,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,cAAc,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YACtD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,gBAAgB,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;YAEpE,IAAI,CAAC;gBACH,QAAQ,CAAC,4BAA4B,EAAE;oBACrC,GAAG,EAAE,SAAS;oBACd,KAAK,EAAE,QAAQ;iBAChB,CAAC,CAAC;gBAEH,gBAAgB,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gBAAgB,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAEG,MAAM,WAAW,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;QAE/D,IAAI,CAAC;YACH,QAAQ,CAAC,oBAAoB,EAAE;gBAC7B,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YAEH,WAAW,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACL,CAAC;IAEC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEtD,IAAI,CAAC;YACH,QAAQ,CAAC,UAAU,EAAE;gBACnB,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAE5E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;;;OAGnB,WAAW;;;;;CAKjB,CAAC,CAAC,CAAC;IACJ,OAAO,CAAC,GAAG,CAAC;UACF,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU;cACnD,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;SAClD,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;CAC7C,CAAC,CAAC;AACH,CAAC;AACD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IAC9B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAE/C,IAAI,cAAc,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAE/C,IAAI,cAAc,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACvC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEnB,IAAI,cAAc,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEnD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-authenik8-app",
-  "version": "1.0.7",
+  "version": "2.0.1",
   "description":"Create production-ready backend APIs in seconds. Authenik8 scaffolds Express + Prisma projects with JWT authentication, database setup (PostgreSQL or SQLite), and scalable architecture out of the box.",
   "bin": {
     "create-authenik8-app": "dist/bin/index.js"

package/templates/express-auth/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "authenik8-app",
+  "version": "1.0.6",
+  "description": "Authenik8 generated Express auth app",
+  "main": "dist/server.js",
+  "type": "commonjs",
+  "scripts": {
+    "dev": "ts-node-dev --respawn --transpile-only src/server.ts",
+    "build": "tsc",
+    "start": "node dist/server.js",
+    "prisma:generate": "prisma generate",
+    "prisma:migrate": "prisma migrate dev"
+  },
+  "dependencies": {
+    "authenik8-core": "0.1.5",
+    "express": "^4.19.2"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "@types/node": "^20.0.0",
+    "ts-node-dev": "^2.0.0",
+    "typescript": "^5.0.0"
+  }
+}

package/templates/express-auth/src/prisma/client.ts

@@ -0,0 +1,15 @@
+import { PrismaClient } from "@prisma/client";
+
+const globalForPrisma = globalThis as unknown as {
+  prisma: PrismaClient | undefined;
+};
+
+export const prisma =
+  globalForPrisma.prisma ??
+  new PrismaClient({
+    log: ["error", "warn"],
+  });
+
+if (process.env.NODE_ENV !== "production") {
+  globalForPrisma.prisma = prisma;
+}

package/templates/express-auth/src/server.ts

@@ -0,0 +1,78 @@
+import express from "express";
+import { createAuthenik8 } from "authenik8-core";
+import { hashPassword, comparePassword } from "./utils/hash";
+import {prisma} from "./prisma/client"
+
+const app = express();
+app.use(express.json());
+
+async function start() {
+  const auth = await createAuthenik8({
+    jwtSecret: process.env.JWT_SECRET!,
+    refreshSecret: process.env.REFRESH_SECRET!,
+  });
+
+  
+  app.post("/register", async (req, res) => {
+    const { email, password } = req.body;
+
+    const hashedPassword = await hashPassword(password);
+
+    const user = await prisma.user.create({
+      data: {
+        email,
+        password: hashedPassword,
+      },
+    });
+
+    res.json({ message: "User created", userId: user.id });
+  });
+
+
+  app.post("/login", async (req, res) => {
+    const { email, password } = req.body;
+
+    const user = await prisma.user.findUnique({
+      where: { email },
+    });
+
+    if (!user) {
+      return res.status(401).json({ error: "Invalid credentials" });
+    }
+
+    const isValid = await comparePassword(password, user.password);
+
+    if (!isValid) {
+      return res.status(401).json({ error: "Invalid credentials" });
+    }
+
+    const accessToken = auth.signToken({
+      id: user.id,
+      email: user.email,
+    });
+
+    const refreshToken = await auth.generateRefreshToken({
+      id: user.id,
+      email: user.email,
+    });
+
+    res.json({ accessToken, refreshToken });
+  });
+
+  
+  app.post("/refresh", async (req, res) => {
+    const tokens = await auth.refreshToken(req.body.refreshToken);
+    res.json(tokens);
+  });
+
+  // ✅ PROTECTED
+  app.get("/protected", auth.requireAdmin, (req, res) => {
+    res.json({ message: "Protected route" });
+  });
+
+  app.listen(3000, () => {
+    console.log("🚀 Server running on http://localhost:3000");
+  });
+}
+
+start();

package/templates/express-auth/src/utils/hash.ts

@@ -0,0 +1,12 @@
+import argon2 from "argon2";
+
+export const hashPassword = async (password: string): Promise<string> => {
+  return argon2.hash(password);
+};
+
+export const comparePassword = async (
+  password: string,
+  hash: string
+): Promise<boolean> => {
+  return argon2.verify(hash, password);
+};

package/templates/express-auth/tsconfig.json

@@ -0,0 +1,16 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "rootDir": "./src",
+    "outDir": "./dist",
+
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+
+    "forceConsistentCasingInFileNames": true
+  },
+  "include": ["src"],
+  "exclude": ["node_modules", "dist"]
+}

package/templates/express-base/src/server.ts

@@ -0,0 +1,56 @@
+import express from "express";
+import { createAuthenik8 } from "authenik8-core";
+
+const app = express();
+app.use(express.json());
+
+async function start() {
+  const auth = await createAuthenik8({
+    jwtSecret: process.env.JWT_SECRET!,
+    refreshSecret: process.env.REFRESH_SECRET!,
+  });
+
+  app.use(auth.helmet);
+  app.use(auth.rateLimit);
+
+  
+  app.get("/public", (req, res) => {
+    res.json({ message: "Public route" });
+  });
+
+  
+  app.get("/guest", async (req, res) => {
+    const token = await auth.guestToken({ role: "guest" });
+    res.json({ token });
+  });
+
+
+
+  app.get("/protected", async (req, res) => {
+    const token = req.headers.authorization?.split(" ")[1];
+
+    try {
+      const decoded = await auth.verifyToken(token);
+      res.json({ message: "Protected data", user: decoded });
+    } catch {
+      res.status(401).json({ error: "Unauthorized" });
+    }
+  });
+
+  
+  app.post("/refresh", async (req, res) => {
+    const tokens = await auth.refreshToken(req.body.refreshToken);
+    res.json(tokens);
+  });
+
+  // 🛡️ Admin route
+  app.get("/admin", auth.requireAdmin, (req, res) => {
+    res.json({ message: "Admin only" });
+  });
+
+  app.listen(3000, () => {
+    console.log("🚀 Server running on http://localhost:3000");
+  });
+}
+
+start();

package/templates/prisma/sqlite/schema.prisma

@@ -11,7 +11,7 @@ model User {
   id        String   @id @default(uuid())
   email     String   @unique
   password  String
-  role      Role     @default(USER)
+  role      String     @default("USER")
   verified  Boolean  @default(false)
 
   createdAt DateTime @default(now())
@@ -30,8 +30,3 @@ model Session {
 
   createdAt DateTime @default(now())
 }
-
-enum Role {
-  USER
-  ADMIN
-}

package/templates/express-ts/src/server.ts

@@ -1,36 +0,0 @@
-import express from "express";
-import { createAuthenik8 } from "authenik8-core";
-
-const app = express();
-app.use(express.json());
-
-async function start() {
-  const auth = await createAuthenik8({
-    jwtSecret: process.env.JWT_SECRET!,
-    refreshSecret: process.env.REFRESH_SECRET!,
-  });
-
-  app.post("/login", async (req, res) => {
-    const user = { id: "123", email: "test@test.com" };
-
-    const accessToken = auth.signToken(user);
-    const refreshToken = await auth.generateRefreshToken(user);
-
-    res.json({ accessToken, refreshToken });
-  });
-
-  app.post("/refresh", async (req, res) => {
-    const tokens = await auth.refreshToken(req.body.refreshToken);
-    res.json(tokens);
-  });
-
-  app.get("/protected", auth.requireAdmin, (req, res) => {
-    res.json({ message: "Protected route" });
-  });
-
-  app.listen(3000, () => {
-    console.log("🚀 Server running on http://localhost:3000");
-  });
-}
-
-start();