create-craftjs 1.0.14 → 1.0.15

package/bin/index.js

@@ -90,6 +90,7 @@ BASE_URL="http://localhost:4444"
 BASE_API_URL="http://localhost:4444/api"
 PORT=4444
 JWT_SECRET=
+COOKIE_ENCRYPTION_KEY=
 `;
 
   const envExampleContent = envContent.replace(/=.*/g, "=");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-craftjs",
-  "version": "1.0.14",
+  "version": "1.0.15",
   "description": "A starter kit backend framework powered by Express, TypeScript, EJS Engine, and Prisma — designed for rapid development, simplicity, and scalability.",
   "bin": {
     "create-craftjs": "bin/index.js"

package/template/craft/commands/key-generate.js

@@ -32,10 +32,21 @@ function keyGenerate() {
     envContent += `\APP_SECRET=${generateKey(32)}`;
   }
 
+  if (envContent.includes("COOKIE_ENCRYPTION_KEY=")) {
+    envContent = envContent.replace(
+      /COOKIE_ENCRYPTION_KEY=.*/g,
+      `COOKIE_ENCRYPTION_KEY=${generateKey(32)}`
+    );
+  } else {
+    envContent += `\COOKIE_ENCRYPTION_KEY=${generateKey(32)}`;
+  }
+
   fs.writeFileSync(envPath, envContent);
 
   console.log(
-    chalk.green("✅ App Secret and JWT Secret generated successfully.")
+    chalk.green(
+      "✅ App Secret, JWT Secret , and Cookie Encryption Key generated successfully."
+    )
   );
 }
 module.exports = keyGenerate;

package/template/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "craftjs",
-  "version": "1.0.4",
+  "version": "1.0.15",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "craftjs",
-      "version": "1.0.4",
+      "version": "1.0.14",
       "license": "UNLICENSED",
       "dependencies": {
         "@prisma/client": "^6.6.0",

package/template/package.json

@@ -1,7 +1,7 @@
 {
   "name": "craftjs",
   "description": "A starter kit backend framework powered by Express, TypeScript, EJS Engine, and Prisma — designed for rapid development, simplicity, and scalability.",
-  "version": "1.0.14",
+  "version": "1.0.15",
   "keywords": [
     "express",
     "typescript",

package/template/prisma/migrations/20250518142257_create_table_users/migration.sql

@@ -1,7 +1,7 @@
 -- CreateTable
 CREATE TABLE `users` (
     `id` VARCHAR(191) NOT NULL,
-    `fullName` VARCHAR(100) NOT NULL,
+    `full_name` VARCHAR(100) NOT NULL,
     `email` VARCHAR(100) NOT NULL,
     `password` VARCHAR(255) NOT NULL,
     `created_at` TIMESTAMP(0) NOT NULL DEFAULT CURRENT_TIMESTAMP(0),

package/template/prisma/migrations/20260118135332_create_table_auth_refresh_tokens/migration.sql

@@ -0,0 +1,16 @@
+-- CreateTable
+CREATE TABLE `auth_refresh_tokens` (
+    `id` VARCHAR(191) NOT NULL,
+    `token` TEXT NOT NULL,
+    `user_id` VARCHAR(191) NOT NULL,
+    `expires_at` DATETIME(3) NOT NULL,
+    `revoked` BOOLEAN NOT NULL DEFAULT false,
+    `created_at` TIMESTAMP(0) NOT NULL DEFAULT CURRENT_TIMESTAMP(0),
+    `updated_at` TIMESTAMP(0) NOT NULL,
+    `deleted_at` TIMESTAMP(0) NULL,
+
+    PRIMARY KEY (`id`)
+) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
+
+-- AddForeignKey
+ALTER TABLE `auth_refresh_tokens` ADD CONSTRAINT `auth_refresh_tokens_user_id_fkey` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE RESTRICT ON UPDATE CASCADE;

package/template/prisma/schema.prisma

@@ -10,13 +10,29 @@ datasource db {
 }
 
 model User {
+  id                String             @id @default(uuid())
+  full_name         String             @db.VarChar(100)
+  email             String             @unique @db.VarChar(100)
+  password          String             @db.VarChar(255)
+  created_at        DateTime           @default(now()) @db.Timestamp(0)
+  updated_at        DateTime           @updatedAt @db.Timestamp(0)
+  deleted_at        DateTime?          @db.Timestamp(0)
+  authRefreshTokens AuthRefreshToken[]
+
+  @@map("users")
+}
+
+model AuthRefreshToken {
   id         String    @id @default(uuid())
-  fullName   String    @db.VarChar(100)
-  email      String    @unique @db.VarChar(100)
-  password   String    @db.VarChar(255)
+  token      String    @db.Text
+  user_id    String
+  expires_at DateTime
+  revoked    Boolean   @default(false)
   created_at DateTime  @default(now()) @db.Timestamp(0)
   updated_at DateTime  @updatedAt @db.Timestamp(0)
   deleted_at DateTime? @db.Timestamp(0)
 
-  @@map("users")
+  user User @relation(fields: [user_id], references: [id])
+
+  @@map("auth_refresh_tokens")
 }

package/template/prisma/seed.ts

@@ -11,7 +11,7 @@ async function main() {
     where: { email: "tes@gmail.com" },
     update: {},
     create: {
-      fullName: "Tes",
+      full_name: "Tes",
       email: "tes@gmail.com",
       password: await argon2.hash("12345678"),
     },

package/template/src/apidocs/auth-docs.ts

@@ -11,11 +11,11 @@
  *           schema:
  *             type: object
  *             required:
- *               - fullName
+ *               - full_name
  *               - email
  *               - password
  *             properties:
- *               fullName:
+ *               full_name:
  *                 type: string
  *               email:
  *                 type: string
@@ -42,7 +42,7 @@
  *                     id:
  *                       type: string
  *                       format: uuid
- *                     fullName:
+ *                     full_name:
  *                       type: string
  *                     email:
  *                       type: string
@@ -110,18 +110,16 @@
  *                       properties:
  *                         id:
  *                           type: string
- *                         fullName:
+ *                         full_name:
  *                           type: string
  *                         email:
  *                           type: string
  *                     accessToken:
  *                       type: string
- *                     refreshToken:
- *                       type: string
  *       400:
  *          $ref: '#/components/responses/ValidationError'
  *       401:
- *         description: Login gagal - username,email atau password salah
+ *         description: Login gagal - email atau password salah
  *         content:
  *           application/json:
  *             example:
@@ -158,7 +156,7 @@
  *                   properties:
  *                     id:
  *                       type: string
- *                     fullName:
+ *                     full_name:
  *                       type: string
  *                     email:
  *                       type: string
@@ -232,24 +230,6 @@
  *                 data:
  *                   type: object
  *                   properties:
- *                     user:
- *                       type: object
- *                       properties:
- *                         id:
- *                           type: string
- *                         fullName:
- *                           type: string
- *                         email:
- *                           type: string
- *                         password:
- *                           type: string
- *                         created_at:
- *                           type: string
- *                         updated_at:
- *                           type: string
- *                         deleted_at:
- *                           type: string
- *                           nullable: true
  *                     accessToken:
  *                       type: string
  *       401:
@@ -271,7 +251,7 @@
  *           schema:
  *             type: object
  *             properties:
- *               fullName:
+ *               full_name:
  *                 type: string
  *                 example: tes
  *               email:
@@ -301,7 +281,7 @@
  *                       type: string
  *                       format: uuid
  *                       example: c1fa015f-48b0-456f-8c41-baf54ce092f5
- *                     fullName:
+ *                     full_name:
  *                       type: string
  *                       example: tes update
  *                     email:

package/template/src/apidocs/users-docs.ts

@@ -11,20 +11,33 @@
  *         name: page
  *         schema:
  *           type: integer
- *         required: false
  *         description: Nomor halaman
  *       - in: query
  *         name: take
  *         schema:
  *           type: integer
- *         required: false
  *         description: Jumlah data per halaman
  *       - in: query
- *         name: name
+ *         name: search
  *         schema:
  *           type: string
- *         required: false
- *         description: Filter berdasarkan nama (fullName)
+ *         description: Filter berdasarkan nama atau email
+ *       - in: query
+ *         name: sort_field
+ *         schema:
+ *           type: string
+ *         description: Urutkan berdasarkan field
+ *       - in: query
+ *         name: sort_order
+ *         schema:
+ *           type: string
+ *           enum: [asc, desc]
+ *         description: Urutkan berdasarkan asc atau desc
+ *       - in: query
+ *         name: no_paginate
+ *         schema:
+ *           type: boolean
+ *         description: Menampilkan semua data tanpa paginasi
  *     responses:
  *       200:
  *         description: Berhasil Get All Data
@@ -35,61 +48,78 @@
  *               properties:
  *                 status:
  *                   type: boolean
+ *                   example: true
  *                 status_code:
  *                   type: integer
+ *                   example: 200
  *                 message:
  *                   type: string
+ *                   example: Berhasil Get All Data
  *                 data:
+ *                   type: array
+ *                   items:
+ *                     type: object
+ *                     properties:
+ *                       id:
+ *                         type: string
+ *                         format: uuid
+ *                         example: da613a6c-86e2-45f2-b583-157d9e7214a8
+ *                       full_name:
+ *                         type: string
+ *                         example: Tes
+ *                       email:
+ *                         type: string
+ *                         example: tes@gmail.com
+ *                       created_at:
+ *                         type: string
+ *                         example: 18-01-2026 21:55:22
+ *                       updated_at:
+ *                         type: string
+ *                         example: 18-01-2026 21:55:22
+ *                       deleted_at:
+ *                         type: string
+ *                         nullable: true
+ *                         example: ""
+ *                 meta:
  *                   type: object
  *                   properties:
- *                     data:
- *                       type: array
- *                       items:
- *                         type: object
- *                         properties:
- *                           id:
- *                             type: string
- *                             format: uuid
- *                           fullName:
- *                             type: string
- *                           email:
- *                             type: string
- *                           username:
- *                             type: string
- *                           password:
- *                             type: string
- *                             description: (Hashed password)
- *                           image_id:
- *                             type: string
- *                           image_url:
- *                             type: string
- *                             format: uri
- *                           is_verify:
- *                             type: boolean
- *                           created_at:
- *                             type: string
- *                             format: date-time
- *                           updated_at:
- *                             type: string
- *                             format: date-time
- *                           deleted_at:
- *                             type: string
- *                             format: date-time
- *                             nullable: true
- *                           role_id:
- *                             type: string
- *                             format: uuid
- *                     total_data:
+ *                     current_page:
  *                       type: integer
- *                     paging:
- *                       type: object
- *                       properties:
- *                         current_page:
- *                           type: integer
- *                         total_page:
- *                           type: integer
-
+ *                       example: 1
+ *                     from:
+ *                       type: integer
+ *                       example: 1
+ *                     last_page:
+ *                       type: integer
+ *                       example: 1
+ *                     per_page:
+ *                       type: integer
+ *                       example: 10
+ *                     to:
+ *                       type: integer
+ *                       example: 1
+ *                     total:
+ *                       type: integer
+ *                       example: 1
+ *                 links:
+ *                   type: object
+ *                   properties:
+ *                     first:
+ *                       type: string
+ *                       example: http://localhost:4444/api/users?page=1
+ *                     last:
+ *                       type: string
+ *                       example: http://localhost:4444/api/users?page=1
+ *                     prev:
+ *                       type: string
+ *                       nullable: true
+ *                       example: null
+ *                     next:
+ *                       type: string
+ *                       nullable: true
+ *                       example: null
  */
+
 /**
  * @swagger
  * /api/users/{id}:
@@ -121,7 +151,7 @@
  *                   type: object
  *                   properties:
  *                     id: { type: string, format: uuid }
- *                     fullName: { type: string }
+ *                     full_name: { type: string }
  *                     email: { type: string, format: email }
  *                     username: { type: string }
  *                     role_id: { type: string, format: uuid }
@@ -141,9 +171,9 @@
  *         application/json:
  *           schema:
  *             type: object
- *             required: [ fullName, email, password ]
+ *             required: [ full_name, email, password ]
  *             properties:
- *               fullName: { type: string }
+ *               full_name: { type: string }
  *               email: { type: string, format: email }
  *               password: { type: string, format: password }
  *     responses:
@@ -161,7 +191,7 @@
  *                   type: object
  *                   properties:
  *                     id: { type: string, format: uuid }
- *                     fullName: { type: string }
+ *                     full_name: { type: string }
  *                     email: { type: string }
  */
 /**
@@ -187,7 +217,7 @@
  *           schema:
  *             type: object
  *             properties:
- *               fullName: { type: string }
+ *               full_name: { type: string }
  *               email: { type: string, format: email }
  *     responses:
  *       200:
@@ -204,7 +234,7 @@
  *                   type: object
  *                   properties:
  *                     id: { type: string, format: uuid }
- *                     fullName: { type: string }
+ *                     full_name: { type: string }
  *                     email: { type: string }
  */
 /**

package/template/src/config/database.ts

@@ -1,8 +1,6 @@
 import { PrismaClient } from "@prisma/client";
 import { logger } from "./logger";
-import { DateTime } from "luxon";
 import { dbLogger } from "./logger";
-import { env } from "./env";
 
 export const prismaClient = new PrismaClient({
   log: [
@@ -25,8 +23,6 @@ export const prismaClient = new PrismaClient({
   ],
 });
 
-
-
 prismaClient.$on("query", (e) => {
   dbLogger.info(`${e.query} - ${e.params}`);
 });

package/template/src/config/env.ts

@@ -34,7 +34,8 @@ const envSchema = z.object({
           "CLIENT_URL harus berupa URL valid, dipisah koma jika lebih dari satu",
       }
     ),
-  PORT: z.coerce.number().default(3000),
+  PORT: z.coerce.number().default(4444),
+  COOKIE_ENCRYPTION_KEY: z.string(),
   JWT_SECRET: z.string(),
   CLOUDINARY_CLOUD_NAME: z.string().optional(),
   CLOUDINARY_API_KEY: z.string().optional(),

package/template/src/config/logger.ts

@@ -65,7 +65,7 @@ export const dbLogger = winston.createLogger({
   ],
 });
 
-// Format untuk FILE logs — tanpa warna
+
 const plainFormat = winston.format.printf(({ timestamp, level, message }) => {
   return `[${timestamp}] ${level.toUpperCase()}: ${message}`;
 });
@@ -93,7 +93,7 @@ const coloredHttpFormat = winston.format.printf(
         break;
     }
 
-    // Pewarnaan method HTTP
+
     const methodMatch = msg.match(/^(GET|POST|PUT|DELETE|PATCH|OPTIONS|HEAD)/);
     const methodColors = {
       GET: chalk.green.bold("GET"),

package/template/src/controllers/auth-controller.ts

@@ -4,7 +4,7 @@ import {
   CreateUserRequest,
   UpdateUserRequest,
 } from "../dtos/user-dto";
-import { successResponse, successUpdateResponse } from "../utils/response";
+import { successResponse } from "../utils/response";
 import { AuthService } from "../services/auth-service";
 import { UserRequest } from "../types/type-request";
 import { env } from "../config/env";
@@ -61,7 +61,9 @@ export class AuthController {
     try {
       const request: UpdateUserRequest = req.body as UpdateUserRequest;
       const response = await AuthService.updateProfile(req.user!, request);
-      res.status(200).json(successUpdateResponse(response));
+      res
+        .status(200)
+        .json(successResponse("Update User Berhasil", 200, response));
     } catch (error) {
       next(error);
     }
@@ -69,7 +71,12 @@ export class AuthController {
 
   static async logout(req: UserRequest, res: Response, next: NextFunction) {
     await AuthService.logout(req);
-    res.clearCookie("refresh_token");
+    res.clearCookie("refresh_token", {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "lax",
+      path: "/",
+    });
     res.status(200).json(successResponse("Logout berhasil", 200));
   }
   static async refreshToken(req: Request, res: Response, next: NextFunction) {
@@ -77,7 +84,6 @@ export class AuthController {
       const response = await AuthService.refreshToken(req);
       res.status(200).json(
         successResponse("Get Access Token Berhasil", 200, {
-          user: response.user,
           accessToken: response.accessToken,
         })
       );

package/template/src/controllers/user-controller.ts

@@ -5,16 +5,11 @@ import {
   UpdateUserRequest,
 } from "../dtos/user-dto";
 import { UserService } from "../services/user-service";
-import {
-  successCreateResponse,
-  successDeleteResponse,
-  successResponse,
-  successUpdateResponse,
-} from "../utils/response";
+import { successResponse, paginateResponse } from "../utils/response";
 import { UserRequest } from "../types/type-request";
-
+import { env } from "../config/env";
 export class UserController {
-  static async getAll(req: Request, res: Response, next: NextFunction) {
+  static async get(req: Request, res: Response, next: NextFunction) {
     try {
       const page = Number(req.query.page) || 1;
       const take = Number(req.query.take) || 10;
@@ -22,21 +17,27 @@ export class UserController {
         page: page,
         take: take,
         skip: (page - 1) * take,
-        name: req.query.name as string,
+        search: req.query.search as string,
+        sort_field: req.query.sort_field as any,
+        sort_order: req.query.sort_order as any,
+        no_paginate: req.query.no_paginate === "true",
       };
-      const response = await UserService.getAll(request);
+
+      const path = req.originalUrl.split("?")[0];
+      const baseUrl = `${env.BASE_URL}${path}`;
+      const response = await UserService.get(request, baseUrl, req.query);
       res
         .status(200)
-        .json(successResponse("Berhasil Get All Data", 200, response));
+        .json(paginateResponse("Berhasil Get All Data", 200, response));
     } catch (e) {
       next(e);
     }
   }
 
-  static async getOne(req: Request, res: Response, next: NextFunction) {
+  static async detail(req: Request, res: Response, next: NextFunction) {
     try {
       const id = req.params.id;
-      const response = await UserService.getOne(id);
+      const response = await UserService.detail(id);
       res
         .status(200)
         .json(successResponse("Berhasil Get Detail Data", 200, response));
@@ -48,9 +49,10 @@ export class UserController {
   static async create(req: Request, res: Response, next: NextFunction) {
     try {
       const request: CreateUserRequest = req.body as CreateUserRequest;
-      console.log(request);
       const response = await UserService.create(request);
-      res.status(201).json(successCreateResponse(response));
+      res
+        .status(201)
+        .json(successResponse("Create User Berhasil", 201, response));
     } catch (error) {
       next(error);
     }
@@ -61,7 +63,9 @@ export class UserController {
       const id = req.params.id;
       const request: UpdateUserRequest = req.body as UpdateUserRequest;
       const response = await UserService.update(id, request);
-      res.status(200).json(successUpdateResponse(response));
+      res
+        .status(200)
+        .json(successResponse("Update User Berhasil", 200, response));
     } catch (error) {
       next(error);
     }
@@ -71,7 +75,7 @@ export class UserController {
     try {
       const id = req.params.id;
       await UserService.delete(id);
-      res.status(200).json(successDeleteResponse());
+      res.status(200).json(successResponse("Delete User Berhasil", 200));
     } catch (e) {
       next(e);
     }

package/template/src/dtos/pagination-dto.ts

@@ -0,0 +1,21 @@
+export type PaginationMeta = {
+  current_page: number;
+  from: number | null;
+  last_page: number;
+  per_page: number;
+  to: number | null;
+  total: number;
+};
+
+export type PaginationLinks = {
+  first: string;
+  last: string;
+  prev: string | null;
+  next: string | null;
+};
+
+export type PaginatedResponse<T> = {
+  data: T[];
+  meta: PaginationMeta;
+  links: PaginationLinks;
+};