create-fluxstack 1.5.2 → 1.5.4

package/app/server/routes/example-with-crypto-auth.routes.ts

@@ -0,0 +1,235 @@
+/**
+ * Exemplo de uso dos middlewares crypto-auth
+ * Demonstra como proteger rotas com autenticação criptográfica
+ */
+
+import { Elysia, t } from 'elysia'
+import {
+  cryptoAuthRequired,
+  cryptoAuthAdmin,
+  cryptoAuthPermissions,
+  cryptoAuthOptional,
+  getCryptoAuthUser,
+  isCryptoAuthAdmin
+} from '@/plugins/crypto-auth/server'
+
+// ========================================
+// 1️⃣ ROTAS QUE REQUEREM AUTENTICAÇÃO
+// ========================================
+
+export const protectedRoutes = new Elysia()
+  // ✅ Aplica middleware a TODAS as rotas deste grupo
+  .use(cryptoAuthRequired())
+
+  // Agora TODAS as rotas abaixo requerem autenticação
+  .get('/users/me', ({ request }) => {
+    const user = getCryptoAuthUser(request)!
+
+    return {
+      profile: {
+        publicKey: user.publicKey,
+        isAdmin: user.isAdmin,
+        permissions: user.permissions
+      }
+    }
+  })
+
+  .get('/users', ({ request }) => {
+    const user = getCryptoAuthUser(request)!
+
+    return {
+      users: [
+        { id: 1, name: 'João' },
+        { id: 2, name: 'Maria' }
+      ],
+      requestedBy: user.publicKey.substring(0, 16) + '...'
+    }
+  })
+
+  .post('/posts', ({ request, body }) => {
+    const user = getCryptoAuthUser(request)!
+    const { title, content } = body as { title: string; content: string }
+
+    return {
+      success: true,
+      post: {
+        title,
+        content,
+        author: user.publicKey,
+        createdAt: new Date()
+      }
+    }
+  }, {
+    body: t.Object({
+      title: t.String(),
+      content: t.String()
+    })
+  })
+
+// ========================================
+// 2️⃣ ROTAS QUE REQUEREM ADMIN
+// ========================================
+
+export const adminRoutes = new Elysia()
+  // ✅ Apenas admins podem acessar
+  .use(cryptoAuthAdmin())
+
+  .get('/admin/stats', () => ({
+    totalUsers: 100,
+    totalPosts: 500,
+    systemHealth: 'optimal'
+  }))
+
+  .delete('/admin/users/:id', ({ params, request }) => {
+    const user = getCryptoAuthUser(request)!
+
+    return {
+      success: true,
+      message: `Usuário ${params.id} deletado`,
+      deletedBy: user.publicKey
+    }
+  })
+
+  .post('/admin/broadcast', ({ body }) => ({
+    success: true,
+    message: 'Mensagem enviada para todos os usuários',
+    content: body
+  }), {
+    body: t.Object({
+      message: t.String()
+    })
+  })
+
+// ========================================
+// 3️⃣ ROTAS COM PERMISSÕES ESPECÍFICAS
+// ========================================
+
+export const writeRoutes = new Elysia()
+  // ✅ Requer permissão 'write'
+  .use(cryptoAuthPermissions(['write']))
+
+  .put('/posts/:id', ({ params, body }) => ({
+    success: true,
+    message: `Post ${params.id} atualizado`,
+    data: body
+  }), {
+    body: t.Object({
+      title: t.Optional(t.String()),
+      content: t.Optional(t.String())
+    })
+  })
+
+  .patch('/posts/:id/publish', ({ params }) => ({
+    success: true,
+    message: `Post ${params.id} publicado`
+  }))
+
+// ========================================
+// 4️⃣ ROTAS MISTAS (Opcional)
+// ========================================
+
+export const mixedRoutes = new Elysia()
+  // ✅ Autenticação OPCIONAL - adiciona user se autenticado
+  .use(cryptoAuthOptional())
+
+  // Comportamento diferente se autenticado
+  .get('/posts/:id', ({ request, params }) => {
+    const user = getCryptoAuthUser(request)
+    const isAdmin = isCryptoAuthAdmin(request)
+
+    return {
+      post: {
+        id: params.id,
+        title: 'Título do Post',
+        // Mostra conteúdo completo apenas se autenticado
+        content: user ? 'Conteúdo completo do post...' : 'Prévia...',
+        author: 'João'
+      },
+      viewer: user ? {
+        publicKey: user.publicKey.substring(0, 16) + '...',
+        canEdit: isAdmin,
+        canComment: true
+      } : {
+        canEdit: false,
+        canComment: false
+      }
+    }
+  })
+
+  .get('/posts', ({ request }) => {
+    const user = getCryptoAuthUser(request)
+
+    return {
+      posts: [
+        { id: 1, title: 'Post 1' },
+        { id: 2, title: 'Post 2' }
+      ],
+      authenticated: !!user
+    }
+  })
+
+// ========================================
+// 5️⃣ ROTAS COM VERIFICAÇÃO MANUAL
+// ========================================
+
+export const customRoutes = new Elysia()
+  .use(cryptoAuthRequired())
+
+  .get('/posts/:id/edit', ({ request, params, set }) => {
+    const user = getCryptoAuthUser(request)!
+
+    // Verificação customizada - apenas autor ou admin
+    const post = { id: params.id, authorKey: 'abc123...' } // Buscar do DB
+
+    const canEdit = user.isAdmin || user.publicKey === post.authorKey
+
+    if (!canEdit) {
+      set.status = 403
+      return {
+        error: 'Apenas o autor ou admin podem editar este post'
+      }
+    }
+
+    return {
+      post,
+      canEdit: true
+    }
+  })
+
+// ========================================
+// 6️⃣ COMBINANDO MÚLTIPLOS MIDDLEWARES
+// ========================================
+
+export const combinedRoutes = new Elysia({ prefix: '/api/v1' })
+  // Primeiro grupo - rotas públicas
+  .get('/health', () => ({ status: 'ok' }))
+
+  .get('/posts', () => ({
+    posts: [/* ... */]
+  }))
+
+  // Segundo grupo - rotas protegidas
+  .group('/users', (app) => app
+    .use(cryptoAuthRequired())
+    .get('/', () => ({ users: [] }))
+    .post('/', ({ body }) => ({ created: body }))
+  )
+
+  // Terceiro grupo - rotas admin
+  .group('/admin', (app) => app
+    .use(cryptoAuthAdmin())
+    .get('/stats', () => ({ stats: {} }))
+    .delete('/users/:id', ({ params }) => ({ deleted: params.id }))
+  )
+
+// ========================================
+// 7️⃣ EXPORTAR TODAS AS ROTAS
+// ========================================
+
+export const allExampleRoutes = new Elysia()
+  .use(protectedRoutes)
+  .use(adminRoutes)
+  .use(writeRoutes)
+  .use(mixedRoutes)
+  .use(customRoutes)
+  .use(combinedRoutes)

package/app/server/routes/exemplo-posts.routes.ts

@@ -0,0 +1,161 @@
+/**
+ * 🎓 EXEMPLO PRÁTICO: Como criar rotas com Crypto-Auth
+ *
+ * Este arquivo demonstra como um desenvolvedor cria rotas usando
+ * o sistema de autenticação crypto-auth do FluxStack.
+ */
+
+import { Elysia, t } from 'elysia'
+import {
+  cryptoAuthRequired,
+  cryptoAuthAdmin,
+  cryptoAuthOptional,
+  getCryptoAuthUser
+} from '@/plugins/crypto-auth/server'
+
+// Mock database (simulação)
+const posts = [
+  { id: 1, title: 'Post Público 1', content: 'Conteúdo aberto', public: true },
+  { id: 2, title: 'Post Público 2', content: 'Conteúdo aberto', public: true }
+]
+
+export const exemploPostsRoutes = new Elysia({ prefix: '/exemplo-posts' })
+
+  // ========================================
+  // 🌐 ROTA PÚBLICA - Qualquer um acessa
+  // ========================================
+  .get('/', () => {
+    return {
+      success: true,
+      message: 'Lista pública de posts',
+      posts: posts.filter(p => p.public)
+    }
+  })
+
+  // ========================================
+  // 🌓 ROTA COM AUTH OPCIONAL
+  // Funciona com ou sem autenticação
+  // ========================================
+  .guard({}, (app) =>
+    app.use(cryptoAuthOptional())
+
+      .get('/:id', ({ request, params }) => {
+        const user = getCryptoAuthUser(request)
+        const isAuthenticated = !!user
+        const post = posts.find(p => p.id === parseInt(params.id))
+
+        if (!post) {
+          return { success: false, error: 'Post não encontrado' }
+        }
+
+        return {
+          success: true,
+          post: {
+            ...post,
+            // ✅ Conteúdo extra apenas para autenticados
+            premiumContent: isAuthenticated
+              ? 'Conteúdo premium exclusivo para usuários autenticados!'
+              : null,
+            viewer: isAuthenticated
+              ? `Autenticado: ${user.publicKey.substring(0, 8)}...`
+              : 'Visitante anônimo'
+          }
+        }
+      })
+  )
+
+  // ========================================
+  // 🔒 ROTAS PROTEGIDAS - Requer autenticação
+  // ========================================
+  .guard({}, (app) =>
+    app.use(cryptoAuthRequired())
+
+      // GET /api/exemplo-posts/meus-posts
+      .get('/meus-posts', ({ request }) => {
+        const user = getCryptoAuthUser(request)!
+
+        return {
+          success: true,
+          message: `Posts criados por você`,
+          user: {
+            publicKey: user.publicKey.substring(0, 16) + '...',
+            isAdmin: user.isAdmin
+          },
+          posts: [
+            {
+              id: 999,
+              title: 'Meu Post Privado',
+              content: 'Só eu posso ver',
+              author: user.publicKey
+            }
+          ]
+        }
+      })
+
+      // POST /api/exemplo-posts/criar
+      .post('/criar', ({ request, body }) => {
+        const user = getCryptoAuthUser(request)!
+        const { title, content } = body as { title: string; content: string }
+
+        const newPost = {
+          id: Date.now(),
+          title,
+          content,
+          author: user.publicKey,
+          createdAt: new Date().toISOString(),
+          public: false
+        }
+
+        posts.push(newPost)
+
+        return {
+          success: true,
+          message: 'Post criado com sucesso!',
+          post: newPost
+        }
+      }, {
+        body: t.Object({
+          title: t.String({ minLength: 3 }),
+          content: t.String({ minLength: 10 })
+        })
+      })
+  )
+
+  // ========================================
+  // 👑 ROTAS ADMIN - Apenas administradores
+  // ========================================
+  .guard({}, (app) =>
+    app.use(cryptoAuthAdmin())
+
+      // GET /api/exemplo-posts/admin/todos
+      .get('/admin/todos', ({ request }) => {
+        const user = getCryptoAuthUser(request)!
+
+        return {
+          success: true,
+          message: 'Painel administrativo',
+          admin: user.publicKey.substring(0, 8) + '...',
+          totalPosts: posts.length,
+          posts: posts // Admin vê tudo
+        }
+      })
+
+      // DELETE /api/exemplo-posts/admin/:id
+      .delete('/admin/:id', ({ request, params }) => {
+        const user = getCryptoAuthUser(request)!
+        const postIndex = posts.findIndex(p => p.id === parseInt(params.id))
+
+        if (postIndex === -1) {
+          return { success: false, error: 'Post não encontrado' }
+        }
+
+        const deletedPost = posts.splice(postIndex, 1)[0]
+
+        return {
+          success: true,
+          message: `Post "${deletedPost.title}" deletado pelo admin`,
+          deletedBy: user.publicKey.substring(0, 8) + '...',
+          deletedPost
+        }
+      })
+  )

package/app/server/routes/index.ts

@@ -2,6 +2,8 @@ import { Elysia, t } from "elysia"
 import { usersRoutes } from "./users.routes"
 import { uploadRoutes } from "./upload"
 import { configRoutes } from "./config"
+import { cryptoAuthDemoRoutes } from "./crypto-auth-demo.routes"
+import { exemploPostsRoutes } from "./exemplo-posts.routes"
 
 export const apiRoutes = new Elysia({ prefix: "/api" })
   .get("/", () => ({ message: "🔥 Hot Reload funcionando! FluxStack API v1.4.0 ⚡" }), {
@@ -36,4 +38,6 @@ export const apiRoutes = new Elysia({ prefix: "/api" })
   })
   .use(usersRoutes)
   .use(uploadRoutes)
-  .use(configRoutes)
+  .use(configRoutes)
+  .use(cryptoAuthDemoRoutes)
+  .use(exemploPostsRoutes)  // ✅ Exemplo de rotas com crypto-auth

package/config/index.ts

@@ -27,6 +27,9 @@ export { buildConfig } from './build.config'
 export { appRuntimeConfig } from './runtime.config'
 export { systemConfig, systemRuntimeInfo } from './system.config'
 
+// Plugin configs (re-exported for convenience)
+export { cryptoAuthConfig } from '../plugins/crypto-auth/config'
+
 // Re-export types
 export type { AppConfig } from './app.config'
 export type { DatabaseConfig } from './database.config'
@@ -41,6 +44,9 @@ export type {
   RedisConfig
 } from './services.config'
 
+// Plugin types
+export type { CryptoAuthConfig } from '../plugins/crypto-auth/config'
+
 /**
  * All configs in one object
  */
@@ -52,6 +58,7 @@ import { loggerConfig } from './logger.config'
 import { buildConfig } from './build.config'
 import { appRuntimeConfig } from './runtime.config'
 import { systemConfig, systemRuntimeInfo } from './system.config'
+import { cryptoAuthConfig } from '../plugins/crypto-auth/config'
 
 export const config = {
   app: appConfig,
@@ -62,7 +69,8 @@ export const config = {
   build: buildConfig,
   runtime: appRuntimeConfig,
   system: systemConfig,
-  systemRuntime: systemRuntimeInfo
+  systemRuntime: systemRuntimeInfo,
+  cryptoAuth: cryptoAuthConfig
 }
 
 export default config