create-easy-stack 1.0.3

package/templates/node-express/files/src/routes/comment/index.route.js

@@ -0,0 +1,16 @@
+"use strict";
+const express = require("express");
+const { asyncHandler } = require("../../auth/checkAuth");
+const { authentication } = require("../../auth/authUtils");
+const commentController = require("../../controllers/comment.controller");
+const router = express.Router();
+
+router.use(authentication);
+router.post("/add-new", asyncHandler(commentController.createComment));
+router.post("/delete", asyncHandler(commentController.deleteComments));
+router.post(
+  "/get-list-by-parent-id",
+  asyncHandler(commentController.getCommentsByParentId)
+);
+
+module.exports = router;

package/templates/node-express/files/src/routes/discount/index.route.js

@@ -0,0 +1,26 @@
+"use strict";
+const express = require("express");
+const { asyncHandler } = require("../../auth/checkAuth");
+const { authentication } = require("../../auth/authUtils");
+const discountController = require("../../controllers/discount.controller");
+const router = express.Router();
+router.post(
+  "/get-discount-amount",
+  asyncHandler(discountController.getDiscountAmount)
+);
+router.get(
+  "/get-products-by-discount/:code/:shopId",
+  asyncHandler(discountController.getProductsByDiscount)
+);
+
+router.use(authentication);
+router.post("/create", asyncHandler(discountController.createDiscount));
+router.post("/delete", asyncHandler(discountController.deleteDiscount));
+router.patch("/cancel", asyncHandler(discountController.cancelDiscount));
+router.get(
+  "/get-all-discounts-by-shop",
+  asyncHandler(discountController.getAllDiscountCodeByShop)
+);
+router.patch("/update", asyncHandler(discountController.updateDiscount));
+
+module.exports = router;

package/templates/node-express/files/src/routes/index.route.js

@@ -0,0 +1,27 @@
+"use strict";
+const express = require("express");
+const router = express.Router();
+const { checkApiKey, checkPermissions } = require("../auth/checkAuth.js");
+const { pushToLogDiscord } = require("../middlewares/index.js");
+
+// add log to discord
+router.use(pushToLogDiscord);
+router.use("/v1/api/upload", require("./upload/index.route.js"));
+router.use("/v1/api/profile", require("./profile/index.route.js"));
+
+// check api key
+router.use(checkApiKey);
+router.use(checkPermissions("0000"));
+
+router.use("/v1/api", require("./access/index.route.js"));
+router.use("/v1/api/template", require("./template/index.route.js"));
+router.use("/v1/api/rbac", require("./rbac/index.route.js"));
+router.use("/v1/api/product", require("./product/index.route.js"));
+router.use("/v1/api/discount", require("./discount/index.route.js"));
+router.use("/v1/api/cart", require("./cart/index.route.js"));
+router.use("/v1/api/checkout", require("./checkout/index.route.js"));
+router.use("/v1/api/inventory", require("./inventory/index.route.js"));
+router.use("/v1/api/comment", require("./comment/index.route.js"));
+router.use("/v1/api/notification", require("./notification/index.route.js"));
+
+module.exports = router;

package/templates/node-express/files/src/routes/inventory/index.route.js

@@ -0,0 +1,11 @@
+"use strict";
+const express = require("express");
+const { asyncHandler } = require("../../auth/checkAuth");
+const { authentication } = require("../../auth/authUtils");
+const inventoryController = require("../../controllers/inventory.controller");
+const router = express.Router();
+
+router.use(authentication);
+router.post("/add-stock", asyncHandler(inventoryController.addStockToInventory));
+
+module.exports = router;

package/templates/node-express/files/src/routes/notification/index.route.js

@@ -0,0 +1,14 @@
+"use strict";
+const express = require("express");
+const { asyncHandler } = require("../../auth/checkAuth");
+const { authentication } = require("../../auth/authUtils");
+const notificationController = require("../../controllers/notification.controller");
+const router = express.Router();
+
+router.use(authentication);
+router.get(
+  "/list-noti-by-user",
+  asyncHandler(notificationController.getListNotiByUser)
+);
+
+module.exports = router;

package/templates/node-express/files/src/routes/product/index.route.js

@@ -0,0 +1,38 @@
+"use strict";
+const express = require("express");
+const productController = require("../../controllers/product.controller");
+const { asyncHandler } = require("../../auth/checkAuth");
+const { authentication } = require("../../auth/authUtils");
+const router = express.Router();
+
+router.get(
+  "/search/:keySearch",
+  asyncHandler(productController.searchProductsByUser)
+);
+router.get("/all", asyncHandler(productController.findAllProducts));
+router.get("/detail/:id", asyncHandler(productController.findDetailProduct));
+router.get("/sku", asyncHandler(productController.getDetailSku));
+router.get(
+  "/sku/listBySpuId",
+  asyncHandler(productController.getListSkuBySpuId)
+);
+
+// => /sku?sku_id=123&spu_id=123 => for example
+
+// authentication
+router.use(authentication);
+// authentication
+
+router.get("/spu", asyncHandler(productController.getDetailSpu));
+router.post("/spu/create", asyncHandler(productController.createNewSpu));
+router.post("/create", asyncHandler(productController.createNewProduct));
+router.post("/publish/:id", asyncHandler(productController.publishProduct));
+router.post("/unpublish/:id", asyncHandler(productController.unpublishProduct));
+router.get("/drafts/all", asyncHandler(productController.getAllDraftProducts));
+router.get(
+  "/published/all",
+  asyncHandler(productController.getAllPulishedProducts)
+);
+router.patch("/update/:id", asyncHandler(productController.updateProductById));
+
+module.exports = router;

package/templates/node-express/files/src/routes/profile/index.route.js

@@ -0,0 +1,15 @@
+"use strict";
+const express = require("express");
+const { profiles, profile } = require("../../controllers/profile.controller");
+const { grantAccess } = require("../../middlewares/rbac");
+const router = express.Router();
+
+// admin
+router.get("/view-any", grantAccess("readAny", "profile"), profiles);
+
+// shop
+router.get("/view-own", grantAccess("readOwn", "profile"), profile);
+
+// user
+
+module.exports = router;

package/templates/node-express/files/src/routes/rbac/index.route.js

@@ -0,0 +1,21 @@
+"use strict";
+const express = require("express");
+const { asyncHandler } = require("../../auth/checkAuth");
+const { authentication } = require("../../auth/authUtils");
+const rbacController = require("../../controllers/rbac.controller");
+const router = express.Router();
+
+router.use(authentication);
+
+router.post("/create-new-role", asyncHandler(rbacController.createNewRole));
+router.post(
+  "/create-new-resource",
+  asyncHandler(rbacController.createNewResource)
+);
+router.get("/get-resource-list", asyncHandler(rbacController.getResourceList));
+router.get("/get-role-list", asyncHandler(rbacController.getRoleList));
+
+module.exports = router;
+
+
+// rbac => role based access control

package/templates/node-express/files/src/routes/template/index.route.js

@@ -0,0 +1,11 @@
+"use strict";
+const express = require("express");
+const { asyncHandler } = require("../../auth/checkAuth");
+const { authentication } = require("../../auth/authUtils");
+const router = express.Router();
+const templateController = require("../../controllers/template.controller");
+router.use(authentication);
+
+router.post("/create", asyncHandler(templateController.createTemplate));
+
+module.exports = router;

package/templates/node-express/files/src/routes/upload/index.route.js

@@ -0,0 +1,28 @@
+"use strict";
+const express = require("express");
+const { asyncHandler } = require("../../auth/checkAuth");
+const uploadController = require("../../controllers/upload.controller");
+const { uploadToDisk, uploadToMemory } = require("../../config/config.multer");
+// const { authentication } = require("../../auth/authUtils");
+const router = express.Router();
+
+// cloudinary
+router.post("/fromUrl", asyncHandler(uploadController.uploadImgFromUrl));
+router.post(
+  "/fromLocal",
+  uploadToDisk.single("file"),
+  asyncHandler(uploadController.uploadImgFromLocal)
+);
+router.post(
+  "/multiple/fromLocal",
+  uploadToDisk.array("files", 3),
+  asyncHandler(uploadController.uploadImagesFromLocal)
+);
+// aws-s3
+router.post(
+  "/fromLocal/aws-s3-service-upload",
+  uploadToMemory.single("file"),
+  asyncHandler(uploadController.uploadImgFromLocalS3)
+);
+
+module.exports = router;

package/templates/node-express/files/src/routes/user/index.route.js

@@ -0,0 +1,13 @@
+"use strict";
+
+const express = require("express");
+const userController = require("../../controllers/user.controller");
+const { asyncHandler } = require("../../auth/checkAuth");
+const router = express.Router();
+
+router.post("/new", asyncHandler(userController.newUser));
+router.post(
+  "/verify-email",
+  asyncHandler(userController.checkRegisterEmailToken)
+);
+module.exports = router;

package/templates/node-express/files/src/services/access.service.js

@@ -0,0 +1,257 @@
+"use strict";
+
+const shopModel = require("../models/shop.model");
+const bcrypt = require("bcrypt");
+const crypto = require("crypto");
+const KeyTokenService = require("./keyToken.service");
+const { createTokenPair, verifyJWT } = require("../auth/authUtils");
+const { getInfoData } = require("../utils");
+const {
+  BadRequestError,
+  AuthFailureError,
+  ForbiddenError,
+} = require("../core/error.response");
+const { findByEmail } = require("./shop.service");
+const RoleShop = {
+  SHOP: "SHOP",
+  WRITER: "WRITER",
+  EDITOR: "EDITOR",
+  ADMIN: "ADMIN",
+};
+
+class AccessService {
+  static handleRefreshToken = async (refreshToken) => {
+    // xem refreshToken gui len da het han hay chua
+    const foundToken = await KeyTokenService.findByRefreshTokenUsed(
+      refreshToken
+    );
+
+    if (foundToken) {
+      // decode ra xem may la thang nao?
+      const { userId, email } = await verifyJWT(
+        refreshToken,
+        foundToken.privateKey
+      );
+
+      if (userId && email) {
+        await KeyTokenService.deleteKeyByUserId(userId);
+        throw new ForbiddenError("Something wrong happened!! Please relogin");
+      }
+    }
+
+    // neu refreshToken chua het han, kiem tra xem refreshToken co phai do he thong tao hay khong
+    const holderToken = await KeyTokenService.findByRefreshToken(refreshToken);
+    if (!holderToken) {
+      throw new AuthFailureError("Shop not registerred");
+    }
+
+    // verify token
+    const { userId, email } = await verifyJWT(
+      refreshToken,
+      holderToken.privateKey
+    );
+
+    // check userId, email
+    const foundShop = await findByEmail({ email });
+    if (!foundShop) {
+      throw new AuthFailureError("Shop not registerred");
+    }
+
+    // neu thoa man hop le
+    // 1. create cap token moi
+    const { accessToken: newAccessToken, refreshToken: newRefreshToken } =
+      await createTokenPair(
+        {
+          userId,
+          email,
+        },
+        holderToken.privateKey,
+        holderToken.publicKey
+      );
+    // 2. dua refreshToken vua gui vao danh sach het han
+    await holderToken.updateOne({
+      $set: {
+        refreshToken: newRefreshToken,
+      },
+      $addToSet: {
+        refreshTokenUsed: refreshToken,
+      },
+    });
+    return {
+      user: { userId, email },
+      tokens: {
+        refreshToken: newRefreshToken,
+        accessToken: newAccessToken,
+      },
+    };
+  };
+
+  static handleRefreshTokenV2 = async ({ refreshToken, user, keyStore }) => {
+    const { userId, email } = user;
+
+    if (keyStore.refreshTokenUsed.includes(refreshToken)) {
+      await KeyTokenService.deleteKeyByUserId(userId);
+      throw new ForbiddenError("Something wrong happened!! Please relogin");
+    }
+
+    if (keyStore.refreshToken !== refreshToken) {
+      throw new AuthFailureError("Shop not registered");
+    }
+
+    // check userId, email
+    const foundShop = await findByEmail({ email });
+    if (!foundShop) {
+      throw new AuthFailureError("Shop not registerred");
+    }
+
+    // neu thoa man hop le
+    // 1. create cap token moi
+    const { accessToken: newAccessToken, refreshToken: newRefreshToken } =
+      await createTokenPair(
+        {
+          userId,
+          email,
+        },
+        keyStore.privateKey,
+        keyStore.publicKey
+      );
+    // 2. dua refreshToken vua gui vao danh sach het han
+    await keyStore.updateOne({
+      $set: {
+        refreshToken: newRefreshToken,
+      },
+      $addToSet: {
+        refreshTokenUsed: refreshToken,
+      },
+    });
+    return {
+      user: { userId, email },
+      tokens: {
+        refreshToken: newRefreshToken,
+        accessToken: newAccessToken,
+      },
+    };
+  };
+
+  static signUp = async ({ name, email, password }) => {
+    try {
+      // step 1: check su ton tai cua email
+      const holderShop = await shopModel.findOne({ email }).lean();
+      if (holderShop) {
+        throw new BadRequestError("Error: Shop already registered");
+      }
+
+      const hassPassword = await bcrypt.hash(password, 10);
+
+      const newShop = await shopModel.create({
+        name,
+        email,
+        password: hassPassword,
+        roles: [RoleShop.SHOP],
+      });
+
+      if (newShop) {
+        // create a pair of public/private key
+        // rsa => unsymetric cryptopancy algo
+        // const { privateKey, publicKey } = crypto.generateKeyPairSync("rsa", {
+        //   modulusLength: 4096,
+        //   publicKeyEncoding: {
+        //     type: "pkcs1",
+        //     format: "pem",
+        //   },
+        //   privateKeyEncoding: {
+        //     type: "pkcs1",
+        //     format: "pem",
+        //   },
+        // });
+
+        const privateKey = crypto.randomBytes(64).toString("hex");
+        const publicKey = crypto.randomBytes(64).toString("hex");
+
+        const tokens = await createTokenPair(
+          {
+            userId: newShop._id,
+            email,
+          },
+          privateKey,
+          publicKey
+        );
+
+        const keyStore = await KeyTokenService.createKeyToken({
+          userId: newShop._id,
+          publicKey,
+          privateKey,
+          refreshToken: tokens.refreshToken,
+        });
+
+        if (!keyStore) {
+          throw new BadRequestError("Error: Public key string error");
+        }
+
+        return {
+          shop: getInfoData({
+            fields: ["_id", "name", "email"],
+            object: newShop,
+          }),
+          tokens,
+        };
+      }
+
+      return {
+        code: 200,
+        metadata: null,
+      };
+    } catch (error) {
+      throw new Error(error.message);
+    }
+  };
+
+  static login = async ({ email, password, refreshToken = null }) => {
+    try {
+      const foundShop = await findByEmail({ email });
+      if (!foundShop) {
+        throw new BadRequestError("Shop not registered");
+      }
+      const match = bcrypt.compare(password, foundShop.password);
+      if (!match) {
+        throw new AuthFailureError("Invalid credentials");
+      }
+
+      const privateKey = crypto.randomBytes(64).toString("hex");
+      const publicKey = crypto.randomBytes(64).toString("hex");
+
+      const tokens = await createTokenPair(
+        {
+          userId: foundShop._id,
+          email,
+        },
+        privateKey,
+        publicKey
+      );
+
+      await KeyTokenService.createKeyToken({
+        refreshToken: tokens.refreshToken,
+        privateKey,
+        publicKey,
+        userId: foundShop._id,
+      });
+
+      return {
+        shop: getInfoData({
+          fields: ["_id", "name", "email"],
+          object: foundShop,
+        }),
+        tokens,
+      };
+    } catch (error) {
+      throw new Error(error.message);
+    }
+  };
+
+  static logout = async (keyStore) => {
+    const delKey = await KeyTokenService.removeKeyTokenById(keyStore._id);
+    return delKey;
+  };
+}
+
+module.exports = AccessService;

package/templates/node-express/files/src/services/apiKey.service.js

@@ -0,0 +1,15 @@
+const apiKeyModel = require("../models/apiKey.model");
+
+const findById = async (key) => {
+  // const newKey = await apiKeyModel.create({
+  //   key: "abcdefabcdefabcdefabcdef",
+  //   permissions: ["0000"],
+  // });
+  // console.log(newKey);
+  const objKey = await apiKeyModel.findOne({ key, status: true }).lean();
+  return objKey;
+};
+
+module.exports = {
+  findById,
+};

package/templates/node-express/files/src/services/cart.service.js

@@ -0,0 +1,115 @@
+/**
+ * 1 - Add product to cart [User]
+ * 2 - Reduce / Increase product quantity [User]
+ * 3 - Get list products from cart [User]
+ * 4 - Delete cart [User]
+ * 5 - Delete cart item [User]
+ */
+
+const { NotFoundError } = require("../core/error.response");
+const cartModel = require("../models/cart.model");
+const {
+  createUserCart,
+  updateCartItemQuantity,
+  removeItemFromCart,
+} = require("../models/repository/cart.repo");
+const { getProductById } = require("../models/repository/product.repo");
+const { convertToObjectId } = require("../utils");
+
+class CartService {
+  static async addProductToCart({ userId, product = {} }) {
+    // check cart ton tai hay khong
+    const userCart = await cartModel.findOne({
+      cart_user_id: convertToObjectId(userId),
+    });
+    if (!userCart) {
+      // tao gio hang moi neu gio hang chua ton tai
+      return await createUserCart({
+        userId,
+        product,
+      });
+    }
+    // neu gio hang ton tai nhung chua co san pham thi them san pham
+    if (!userCart.cart_products.length) {
+      userCart.cart_products = [product];
+      return await userCart.save();
+    }
+    // neu gio hang ton tai va ton tai san pham => cap nhat so luong
+    return await updateCartItemQuantity({
+      userId,
+      product,
+    });
+  }
+
+  /*
+    shop_order_ids:[
+      {
+        shop_id,
+        item_products: [
+          {
+            quantity,
+            price,
+            shop_id,
+            old_quantity,
+            product_id
+          }
+        ],
+        version
+      }
+    ]
+  */
+  // update quantity of each product
+  static async updateCart({ userId, shop_order_ids }) {
+    const { product_id, quantity, old_quantity } =
+      shop_order_ids[0]?.item_products[0];
+    // check product exists
+    const foundProduct = await getProductById({ productId: product_id });
+    if (!foundProduct) {
+      throw new NotFoundError("Product does not exist");
+    }
+    if (foundProduct.product_shop.toString() !== shop_order_ids[0]?.shop_id) {
+      throw new NotFoundError("Product does not belong to the shop");
+    }
+    if (quantity === 0) {
+      // remove item from cart
+      return await removeItemFromCart({
+        user_id: userId,
+        product_id,
+      });
+    }
+    return await updateCartItemQuantity({
+      userId,
+      product: {
+        product_id,
+        quantity: quantity - old_quantity,
+      },
+    });
+  }
+
+  static async getListProductsFromCart({ userId }) {
+    return await cartModel.findOne({
+      cart_user_id: convertToObjectId(userId),
+    });
+  }
+
+  static async removeItemFromCart({ user_id, product_id }) {
+    return await removeItemFromCart({
+      user_id,
+      product_id,
+    });
+  }
+
+  static async removeAllProductsFromCart({ cartId, userId }) {
+    const query = {
+      cart_user_id: convertToObjectId(userId),
+    };
+    const updateSet = {
+      $set: {
+        cart_products: [],
+      },
+    };
+    return await cartModel.findOneAndUpdate(query, updateSet);
+  }
+}
+
+module.exports = CartService;