create-ishvexa-app 1.0.0

package/templates/epms-app/backend-mongodb/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "backend-mongodb",
+  "version": "1.0.0",
+  "description": "MongoDB backend",
+  "type": "module",
+  "main": "server.js",
+  "scripts": {
+    "dev": "nodemon server.js",
+    "start": "node server.js"
+  },
+  "dependencies": {
+    "bcryptjs": "^3.0.3",
+    "cors": "^2.8.6",
+    "dotenv": "^17.4.2",
+    "express": "^5.2.1",
+    "jsonwebtoken": "^9.0.3",
+    "mongoose": "^8.19.1"
+  },
+  "devDependencies": {
+    "nodemon": "^3.1.14"
+  }
+}

package/templates/epms-app/backend-mongodb/routes/authRoutes.js

@@ -0,0 +1,8 @@
+import { Router } from "express";
+import { login, register, forgotPassword } from "../controllers/authController.js";
+
+const router = Router();
+router.post("/register", register);
+router.post("/login", login);
+router.post("/forgot-password", forgotPassword);
+export default router;

package/templates/epms-app/backend-mongodb/routes/departmentRoutes.js

@@ -0,0 +1,6 @@
+import { Router } from "express";
+import { create, getAll } from "../controllers/departmentController.js";
+const router = Router();
+router.post("/", create);
+router.get("/", getAll);
+export default router;

package/templates/epms-app/backend-mongodb/routes/employeeRoutes.js

@@ -0,0 +1,6 @@
+import { Router } from "express";
+import { create, getAll } from "../controllers/employeeController.js";
+const router = Router();
+router.post("/", create);
+router.get("/", getAll);
+export default router;

package/templates/epms-app/backend-mongodb/routes/reportRoutes.js

@@ -0,0 +1,5 @@
+import { Router } from "express";
+import { getReports } from "../controllers/reportController.js";
+const router = Router();
+router.get("/", getReports);
+export default router;

package/templates/epms-app/backend-mongodb/routes/salaryRoutes.js

@@ -0,0 +1,8 @@
+import { Router } from "express";
+import { create, getAll, update, remove } from "../controllers/salaryController.js";
+const router = Router();
+router.post("/", create);
+router.get("/", getAll);
+router.put("/:id", update);
+router.delete("/:id", remove);
+export default router;

package/templates/epms-app/backend-mongodb/server.js

@@ -0,0 +1,39 @@
+import express from "express";
+import cors from "cors";
+import dotenv from "dotenv";
+import { connectDatabase } from "./config/db.js";
+import auth from "./middleware/auth.js";
+import authRoutes from "./routes/authRoutes.js";
+import reportRoutes from "./routes/reportRoutes.js";
+import departmentRoutes from "./routes/departmentRoutes.js";
+import employeeRoutes from "./routes/employeeRoutes.js";
+import salaryRoutes from "./routes/salaryRoutes.js";
+
+dotenv.config();
+
+const app = express();
+const PORT = process.env.PORT || 5555;
+
+app.use(cors());
+app.use(express.json());
+
+app.get("/api/health", (_req, res) => {
+  res.json({ message: "API is running" });
+});
+
+app.use("/api/auth", authRoutes);
+app.use("/api/departments", auth, departmentRoutes);
+app.use("/api/employees", auth, employeeRoutes);
+app.use("/api/salaries", auth, salaryRoutes);
+app.use("/api/reports", auth, reportRoutes);
+
+app.use((err, _req, res, _next) => {
+  res.status(500).json({ message: err.message || "Server error" });
+});
+
+connectDatabase().then((ok) => {
+  app.listen(PORT, () => {
+    console.log(`Server running on port ${PORT}`);
+    if (!ok) console.log("Database Connection Failed");
+  });
+});

package/templates/epms-app/backend-mysql/.env

@@ -0,0 +1,7 @@
+PORT=5555
+JWT_SECRET=exam_jwt_secret_change_in_production
+DB_HOST=localhost
+DB_USER=student
+DB_PASSWORD=
+DB_NAME=EPMS
+DB_PORT=3306

package/templates/epms-app/backend-mysql/.env.example

@@ -0,0 +1,7 @@
+PORT=5555
+JWT_SECRET=exam_jwt_secret_change_in_production
+DB_HOST=localhost
+DB_USER=student
+DB_PASSWORD=
+DB_NAME=EPMS
+DB_PORT=3306

package/templates/epms-app/backend-mysql/config/db.js

@@ -0,0 +1,33 @@
+import mysql from "mysql2/promise";
+import dotenv from "dotenv";
+
+dotenv.config();
+
+const pool = mysql.createPool({
+  host: process.env.DB_HOST || "localhost",
+  user: process.env.DB_USER || "root",
+  password: process.env.DB_PASSWORD || "",
+  database: process.env.DB_NAME || "EPMS",
+  port: Number(process.env.DB_PORT || 3306),
+  waitForConnections: true,
+  connectionLimit: 10,
+});
+
+export const query = async (sql, params = []) => {
+  const [rows] = await pool.execute(sql, params);
+  return rows;
+};
+
+export const connectDatabase = async () => {
+  try {
+    await query("SELECT 1");
+    console.log("Database Connected Successfully");
+    return true;
+  } catch (error) {
+    console.log("Database Connection Failed");
+    console.error(error.message);
+    return false;
+  }
+};
+
+export default pool;

package/templates/epms-app/backend-mysql/controllers/authController.js

@@ -0,0 +1,98 @@
+import bcrypt from "bcryptjs";
+import jwt from "jsonwebtoken";
+import { query } from "../config/db.js";
+
+const signToken = (user) =>
+  jwt.sign(
+    { id: user.id, username: user.username },
+    process.env.JWT_SECRET || "exam_secret",
+    { expiresIn: "8h" }
+  );
+
+const normalizeEmail = (email) => String(email || "").trim().toLowerCase();
+
+export const register = async (req, res) => {
+  try {
+    const { username, email, password } = req.body;
+    if (!username || !email || !password) {
+      return res.status(400).json({ message: "Username, email and password are required." });
+    }
+    const emailNorm = normalizeEmail(email);
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(emailNorm)) {
+      return res.status(400).json({ message: "Enter a valid email address." });
+    }
+    const existingUser = await query("SELECT id FROM users WHERE username = ?", [username.trim()]);
+    if (existingUser.length) {
+      return res.status(409).json({ message: "Username already exists." });
+    }
+    const existingEmail = await query("SELECT id FROM users WHERE email = ?", [emailNorm]);
+    if (existingEmail.length) {
+      return res.status(409).json({ message: "Email already registered." });
+    }
+    const hash = await bcrypt.hash(password, 10);
+    await query("INSERT INTO users (username, email, password) VALUES (?, ?, ?)", [
+      username.trim(),
+      emailNorm,
+      hash,
+    ]);
+    return res.status(201).json({ message: "Account created successfully." });
+  } catch {
+    return res.status(500).json({ message: "Server error during registration." });
+  }
+};
+
+export const login = async (req, res) => {
+  try {
+    const { username, password } = req.body;
+    if (!username || !password) {
+      return res.status(400).json({ message: "Username and password are required." });
+    }
+    const rows = await query("SELECT * FROM users WHERE username = ?", [username.trim()]);
+    if (!rows.length) {
+      return res.status(401).json({ message: "Invalid credentials." });
+    }
+    const user = rows[0];
+    const match = await bcrypt.compare(password, user.password);
+    if (!match) {
+      return res.status(401).json({ message: "Invalid credentials." });
+    }
+    return res.json({
+      message: "Login successful.",
+      token: signToken(user),
+      user: { id: user.id, username: user.username, email: user.email },
+    });
+  } catch {
+    return res.status(500).json({ message: "Server error during login." });
+  }
+};
+
+export const forgotPassword = async (req, res) => {
+  try {
+    const { email, newPassword, confirmPassword } = req.body;
+    if (!email) {
+      return res.status(400).json({ success: false, message: "Email is required." });
+    }
+    if (!newPassword) {
+      return res.status(400).json({ success: false, message: "New password is required." });
+    }
+    if (!confirmPassword) {
+      return res.status(400).json({ success: false, message: "Confirm password is required." });
+    }
+    if (newPassword !== confirmPassword) {
+      return res.status(400).json({
+        success: false,
+        message: "New password and confirm password must match.",
+      });
+    }
+    const emailNorm = normalizeEmail(email);
+    const rows = await query("SELECT id FROM users WHERE email = ?", [emailNorm]);
+    if (!rows.length) {
+      return res.status(404).json({ success: false, message: "User not found" });
+    }
+    const hash = await bcrypt.hash(newPassword, 10);
+    await query("UPDATE users SET password = ? WHERE email = ?", [hash, emailNorm]);
+    return res.json({ success: true, message: "Password reset successfully" });
+  } catch {
+    return res.status(500).json({ success: false, message: "Server error." });
+  }
+};

package/templates/epms-app/backend-mysql/controllers/departmentController.js

@@ -0,0 +1,25 @@
+import { query } from "../config/db.js";
+
+export const create = async (req, res) => {
+  try {
+    if (!req.body.departmentCode) return res.status(400).json({ message: "Department Code is required." });
+    if (!req.body.departmentName) return res.status(400).json({ message: "Department Name is required." });
+    const values = [req.body.departmentCode, req.body.departmentName];
+    await query("INSERT INTO departments (department_code, department_name) VALUES (?, ?)", values);
+    return res.status(201).json({ message: "Department added successfully." });
+  } catch (error) {
+    if (error.code === "ER_DUP_ENTRY") {
+      return res.status(409).json({ message: "Department already exists." });
+    }
+    return res.status(500).json({ message: "Failed to add department." });
+  }
+};
+
+export const getAll = async (_req, res) => {
+  try {
+    const rows = await query("SELECT * FROM departments ORDER BY department_code DESC");
+    return res.json(rows);
+  } catch {
+    return res.status(500).json({ message: "Failed to fetch department records." });
+  }
+};

package/templates/epms-app/backend-mysql/controllers/employeeController.js

@@ -0,0 +1,39 @@
+import { query } from "../config/db.js";
+
+const ALLOWED_GENDERS = ["Male", "Female"];
+
+export const create = async (req, res) => {
+  try {
+    if (!req.body.employeeNumber) return res.status(400).json({ message: "Employee Number is required." });
+    if (!req.body.firstName) return res.status(400).json({ message: "First Name is required." });
+    if (!req.body.lastName) return res.status(400).json({ message: "Last Name is required." });
+    if (!req.body.address) return res.status(400).json({ message: "Address is required." });
+    if (!req.body.position) return res.status(400).json({ message: "Position is required." });
+    if (!req.body.telephone) return res.status(400).json({ message: "Telephone is required." });
+    if (!req.body.gender) return res.status(400).json({ message: "Gender is required." });
+    if (!ALLOWED_GENDERS.includes(req.body.gender)) {
+      return res.status(400).json({ message: "Select a valid gender (Male or Female)." });
+    }
+    if (!req.body.hiredDate) return res.status(400).json({ message: "Hired Date is required." });
+    if (!req.body.departmentCode) return res.status(400).json({ message: "Select a department from the list." });
+    const dept = await query("SELECT department_code FROM departments WHERE department_code = ?", [req.body.departmentCode]);
+    if (!dept.length) return res.status(400).json({ message: "Selected department does not exist." });
+    const values = [req.body.employeeNumber, req.body.firstName, req.body.lastName, req.body.address, req.body.position, req.body.telephone, req.body.gender, req.body.hiredDate, req.body.departmentCode];
+    await query("INSERT INTO employees (employee_number, first_name, last_name, address, position, telephone, gender, hired_date, department_code) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)", values);
+    return res.status(201).json({ message: "Employee added successfully." });
+  } catch (error) {
+    if (error.code === "ER_DUP_ENTRY") {
+      return res.status(409).json({ message: "Employee already exists." });
+    }
+    return res.status(500).json({ message: "Failed to add employee." });
+  }
+};
+
+export const getAll = async (_req, res) => {
+  try {
+    const rows = await query("SELECT * FROM employees ORDER BY employee_number DESC");
+    return res.json(rows);
+  } catch {
+    return res.status(500).json({ message: "Failed to fetch employee records." });
+  }
+};

package/templates/epms-app/backend-mysql/controllers/reportController.js

@@ -0,0 +1,41 @@
+import { query } from "../config/db.js";
+
+export const getReports = async (req, res) => {
+  try {
+    const period = req.query.period || "daily";
+    const date = req.query.date || new Date().toISOString().slice(0, 10);
+    const startDate = req.query.startDate;
+    const endDate = req.query.endDate;
+    const month = req.query.month || date.slice(0, 7);
+
+    let employees;
+    let salaries;
+
+    if (period === "daily") {
+      employees = await query("SELECT * FROM employees WHERE DATE(hired_date) = ?", [date]);
+      salaries = await query("SELECT * FROM salaries WHERE month_of_payment = ?", [month]);
+    } else if (period === "weekly") {
+      if (!startDate || !endDate) {
+        return res.status(400).json({ message: "Start date and end date are required for weekly reports." });
+      }
+      employees = await query("SELECT * FROM employees WHERE hired_date BETWEEN ? AND ?", [startDate, endDate]);
+      const startMonth = startDate.slice(0, 7);
+      const endMonth = endDate.slice(0, 7);
+      salaries = await query(
+        "SELECT * FROM salaries WHERE month_of_payment >= ? AND month_of_payment <= ?",
+        [startMonth, endMonth]
+      );
+    } else {
+      employees = await query(
+        "SELECT * FROM employees WHERE DATE_FORMAT(hired_date, '%Y-%m') = ?",
+        [month]
+      );
+      salaries = await query("SELECT * FROM salaries WHERE month_of_payment = ?", [month]);
+    }
+
+    const departments = await query("SELECT * FROM departments");
+    return res.json({ period, reports: { employees, departments, salaries } });
+  } catch {
+    return res.status(500).json({ message: "Failed to generate reports." });
+  }
+};

package/templates/epms-app/backend-mysql/controllers/salaryController.js

@@ -0,0 +1,93 @@
+import { query } from "../config/db.js";
+
+const calcNet = (gross, deduction) => {
+  const g = Number(gross);
+  const d = Number(deduction);
+  if (Number.isNaN(g) || Number.isNaN(d)) return null;
+  return Math.round((g - d) * 100) / 100;
+};
+
+export const create = async (req, res) => {
+  try {
+    if (req.body.grossSalary === undefined || req.body.grossSalary === "") {
+      return res.status(400).json({ message: "Gross Salary is required." });
+    }
+    if (req.body.totalDeduction === undefined || req.body.totalDeduction === "") {
+      return res.status(400).json({ message: "Total Deduction is required." });
+    }
+    if (!req.body.monthOfPayment) {
+      return res.status(400).json({ message: "Month of Payment is required." });
+    }
+    if (!req.body.employeeNumber) {
+      return res.status(400).json({ message: "Employee is required." });
+    }
+    const netSalary = calcNet(req.body.grossSalary, req.body.totalDeduction);
+    if (netSalary === null) {
+      return res.status(400).json({ message: "Invalid salary amounts." });
+    }
+    const values = [req.body.grossSalary, req.body.totalDeduction, netSalary, req.body.monthOfPayment, req.body.employeeNumber];
+    await query(
+      "INSERT INTO salaries (gross_salary, total_deduction, net_salary, month_of_payment, employee_number) VALUES (?, ?, ?, ?, ?)",
+      values
+    );
+    return res.status(201).json({ message: "Salary added successfully." });
+  } catch (error) {
+    if (error.code === "ER_DUP_ENTRY") {
+      return res.status(409).json({ message: "Salary already exists." });
+    }
+    return res.status(500).json({ message: "Failed to add salary." });
+  }
+};
+
+export const getAll = async (_req, res) => {
+  try {
+    const rows = await query("SELECT * FROM salaries ORDER BY salary_id DESC");
+    return res.json(rows);
+  } catch {
+    return res.status(500).json({ message: "Failed to fetch salary records." });
+  }
+};
+
+export const update = async (req, res) => {
+  try {
+    if (req.body.grossSalary === undefined || req.body.grossSalary === "") {
+      return res.status(400).json({ message: "Gross Salary is required." });
+    }
+    if (req.body.totalDeduction === undefined || req.body.totalDeduction === "") {
+      return res.status(400).json({ message: "Total Deduction is required." });
+    }
+    if (!req.body.monthOfPayment) {
+      return res.status(400).json({ message: "Month of Payment is required." });
+    }
+    if (!req.body.employeeNumber) {
+      return res.status(400).json({ message: "Employee is required." });
+    }
+    const netSalary = calcNet(req.body.grossSalary, req.body.totalDeduction);
+    if (netSalary === null) {
+      return res.status(400).json({ message: "Invalid salary amounts." });
+    }
+    const values = [req.body.grossSalary, req.body.totalDeduction, netSalary, req.body.monthOfPayment, req.body.employeeNumber, req.params.id];
+    const result = await query(
+      "UPDATE salaries SET gross_salary = ?, total_deduction = ?, net_salary = ?, month_of_payment = ?, employee_number = ? WHERE salary_id = ?",
+      values
+    );
+    if (!result.affectedRows) {
+      return res.status(404).json({ message: "Salary not found." });
+    }
+    return res.json({ message: "Salary updated successfully." });
+  } catch {
+    return res.status(500).json({ message: "Failed to update salary." });
+  }
+};
+
+export const remove = async (req, res) => {
+  try {
+    const result = await query("DELETE FROM salaries WHERE salary_id = ?", [req.params.id]);
+    if (!result.affectedRows) {
+      return res.status(404).json({ message: "Salary not found." });
+    }
+    return res.json({ message: "Salary deleted successfully." });
+  } catch {
+    return res.status(500).json({ message: "Failed to delete salary." });
+  }
+};

package/templates/epms-app/backend-mysql/database/schema.sql

@@ -0,0 +1,7 @@
+CREATE DATABASE IF NOT EXISTS EPMS;
+USE EPMS;
+CREATE TABLE IF NOT EXISTS users (id INT AUTO_INCREMENT PRIMARY KEY, username VARCHAR(50) NOT NULL UNIQUE, email VARCHAR(120) NOT NULL UNIQUE, password VARCHAR(255) NOT NULL);
+CREATE TABLE IF NOT EXISTS departments (department_code VARCHAR(30) PRIMARY KEY, department_name VARCHAR(100) NOT NULL);
+CREATE TABLE IF NOT EXISTS employees (employee_number VARCHAR(30) PRIMARY KEY, first_name VARCHAR(60) NOT NULL, last_name VARCHAR(60) NOT NULL, address VARCHAR(255) NOT NULL, position VARCHAR(80) NOT NULL, telephone VARCHAR(20) NOT NULL, gender VARCHAR(20) NOT NULL, hired_date DATE NOT NULL, department_code VARCHAR(30) NOT NULL, FOREIGN KEY (department_code) REFERENCES departments(department_code));
+CREATE TABLE IF NOT EXISTS salaries (salary_id INT AUTO_INCREMENT PRIMARY KEY, gross_salary DECIMAL(12,2) NOT NULL, total_deduction DECIMAL(12,2) NOT NULL, net_salary DECIMAL(12,2) NOT NULL, month_of_payment VARCHAR(30) NOT NULL, employee_number VARCHAR(30) NOT NULL, FOREIGN KEY (employee_number) REFERENCES employees(employee_number));
+INSERT INTO users (username, email, password) VALUES ('admin', 'admin@exam.local', '$2b$10$aULsUjp9bb9lf5CZZyY.7./KhwsocVO0duyPlqu0Qnte75xHBdG5C') ON DUPLICATE KEY UPDATE username = username;

package/templates/epms-app/backend-mysql/middleware/auth.js

@@ -0,0 +1,16 @@
+import jwt from "jsonwebtoken";
+
+const auth = (req, res, next) => {
+  const header = req.headers.authorization;
+  if (!header || !header.startsWith("Bearer ")) {
+    return res.status(401).json({ message: "Authentication required." });
+  }
+  try {
+    req.user = jwt.verify(header.split(" ")[1], process.env.JWT_SECRET || "exam_secret");
+    next();
+  } catch {
+    return res.status(401).json({ message: "Invalid or expired token." });
+  }
+};
+
+export default auth;