create-ishvexa-app 1.0.0

package/templates/srms-app/backend-mongodb/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "backend-mongodb",
+  "version": "1.0.0",
+  "description": "MongoDB backend",
+  "type": "module",
+  "main": "server.js",
+  "scripts": {
+    "dev": "nodemon server.js",
+    "start": "node server.js"
+  },
+  "dependencies": {
+    "bcryptjs": "^3.0.3",
+    "cors": "^2.8.6",
+    "dotenv": "^17.4.2",
+    "express": "^5.2.1",
+    "jsonwebtoken": "^9.0.3",
+    "mongoose": "^8.19.1"
+  },
+  "devDependencies": {
+    "nodemon": "^3.1.14"
+  }
+}

package/templates/srms-app/backend-mongodb/routes/authRoutes.js

@@ -0,0 +1,8 @@
+import { Router } from "express";
+import { login, register, forgotPassword } from "../controllers/authController.js";
+
+const router = Router();
+router.post("/register", register);
+router.post("/login", login);
+router.post("/forgot-password", forgotPassword);
+export default router;

package/templates/srms-app/backend-mongodb/routes/customerRoutes.js

@@ -0,0 +1,6 @@
+import { Router } from "express";
+import { create, getAll } from "../controllers/customerController.js";
+const router = Router();
+router.post("/", create);
+router.get("/", getAll);
+export default router;

package/templates/srms-app/backend-mongodb/routes/productRoutes.js

@@ -0,0 +1,6 @@
+import { Router } from "express";
+import { create, getAll } from "../controllers/productController.js";
+const router = Router();
+router.post("/", create);
+router.get("/", getAll);
+export default router;

package/templates/srms-app/backend-mongodb/routes/reportRoutes.js

@@ -0,0 +1,5 @@
+import { Router } from "express";
+import { getReports } from "../controllers/reportController.js";
+const router = Router();
+router.get("/", getReports);
+export default router;

package/templates/srms-app/backend-mongodb/routes/saleRoutes.js

@@ -0,0 +1,8 @@
+import { Router } from "express";
+import { create, getAll, update, remove } from "../controllers/saleController.js";
+const router = Router();
+router.post("/", create);
+router.get("/", getAll);
+router.put("/:id", update);
+router.delete("/:id", remove);
+export default router;

package/templates/srms-app/backend-mongodb/server.js

@@ -0,0 +1,39 @@
+import express from "express";
+import cors from "cors";
+import dotenv from "dotenv";
+import { connectDatabase } from "./config/db.js";
+import auth from "./middleware/auth.js";
+import authRoutes from "./routes/authRoutes.js";
+import reportRoutes from "./routes/reportRoutes.js";
+import customerRoutes from "./routes/customerRoutes.js";
+import productRoutes from "./routes/productRoutes.js";
+import saleRoutes from "./routes/saleRoutes.js";
+
+dotenv.config();
+
+const app = express();
+const PORT = process.env.PORT || 5555;
+
+app.use(cors());
+app.use(express.json());
+
+app.get("/api/health", (_req, res) => {
+  res.json({ message: "API is running" });
+});
+
+app.use("/api/auth", authRoutes);
+app.use("/api/customers", auth, customerRoutes);
+app.use("/api/products", auth, productRoutes);
+app.use("/api/sales", auth, saleRoutes);
+app.use("/api/reports", auth, reportRoutes);
+
+app.use((err, _req, res, _next) => {
+  res.status(500).json({ message: err.message || "Server error" });
+});
+
+connectDatabase().then((ok) => {
+  app.listen(PORT, () => {
+    console.log(`Server running on port ${PORT}`);
+    if (!ok) console.log("Database Connection Failed");
+  });
+});

package/templates/srms-app/backend-mysql/.env

@@ -0,0 +1,7 @@
+PORT=5555
+JWT_SECRET=exam_jwt_secret_change_in_production
+DB_HOST=localhost
+DB_USER=student
+DB_PASSWORD=
+DB_NAME=SRMS
+DB_PORT=3306

package/templates/srms-app/backend-mysql/.env.example

@@ -0,0 +1,7 @@
+PORT=5555
+JWT_SECRET=exam_jwt_secret_change_in_production
+DB_HOST=localhost
+DB_USER=student
+DB_PASSWORD=
+DB_NAME=SRMS
+DB_PORT=3306

package/templates/srms-app/backend-mysql/config/db.js

@@ -0,0 +1,33 @@
+import mysql from "mysql2/promise";
+import dotenv from "dotenv";
+
+dotenv.config();
+
+const pool = mysql.createPool({
+  host: process.env.DB_HOST || "localhost",
+  user: process.env.DB_USER || "root",
+  password: process.env.DB_PASSWORD || "",
+  database: process.env.DB_NAME || "SRMS",
+  port: Number(process.env.DB_PORT || 3306),
+  waitForConnections: true,
+  connectionLimit: 10,
+});
+
+export const query = async (sql, params = []) => {
+  const [rows] = await pool.execute(sql, params);
+  return rows;
+};
+
+export const connectDatabase = async () => {
+  try {
+    await query("SELECT 1");
+    console.log("Database Connected Successfully");
+    return true;
+  } catch (error) {
+    console.log("Database Connection Failed");
+    console.error(error.message);
+    return false;
+  }
+};
+
+export default pool;

package/templates/srms-app/backend-mysql/controllers/authController.js

@@ -0,0 +1,98 @@
+import bcrypt from "bcryptjs";
+import jwt from "jsonwebtoken";
+import { query } from "../config/db.js";
+
+const signToken = (user) =>
+  jwt.sign(
+    { id: user.id, username: user.username },
+    process.env.JWT_SECRET || "exam_secret",
+    { expiresIn: "8h" }
+  );
+
+const normalizeEmail = (email) => String(email || "").trim().toLowerCase();
+
+export const register = async (req, res) => {
+  try {
+    const { username, email, password } = req.body;
+    if (!username || !email || !password) {
+      return res.status(400).json({ message: "Username, email and password are required." });
+    }
+    const emailNorm = normalizeEmail(email);
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(emailNorm)) {
+      return res.status(400).json({ message: "Enter a valid email address." });
+    }
+    const existingUser = await query("SELECT id FROM users WHERE username = ?", [username.trim()]);
+    if (existingUser.length) {
+      return res.status(409).json({ message: "Username already exists." });
+    }
+    const existingEmail = await query("SELECT id FROM users WHERE email = ?", [emailNorm]);
+    if (existingEmail.length) {
+      return res.status(409).json({ message: "Email already registered." });
+    }
+    const hash = await bcrypt.hash(password, 10);
+    await query("INSERT INTO users (username, email, password) VALUES (?, ?, ?)", [
+      username.trim(),
+      emailNorm,
+      hash,
+    ]);
+    return res.status(201).json({ message: "Account created successfully." });
+  } catch {
+    return res.status(500).json({ message: "Server error during registration." });
+  }
+};
+
+export const login = async (req, res) => {
+  try {
+    const { username, password } = req.body;
+    if (!username || !password) {
+      return res.status(400).json({ message: "Username and password are required." });
+    }
+    const rows = await query("SELECT * FROM users WHERE username = ?", [username.trim()]);
+    if (!rows.length) {
+      return res.status(401).json({ message: "Invalid credentials." });
+    }
+    const user = rows[0];
+    const match = await bcrypt.compare(password, user.password);
+    if (!match) {
+      return res.status(401).json({ message: "Invalid credentials." });
+    }
+    return res.json({
+      message: "Login successful.",
+      token: signToken(user),
+      user: { id: user.id, username: user.username, email: user.email },
+    });
+  } catch {
+    return res.status(500).json({ message: "Server error during login." });
+  }
+};
+
+export const forgotPassword = async (req, res) => {
+  try {
+    const { email, newPassword, confirmPassword } = req.body;
+    if (!email) {
+      return res.status(400).json({ success: false, message: "Email is required." });
+    }
+    if (!newPassword) {
+      return res.status(400).json({ success: false, message: "New password is required." });
+    }
+    if (!confirmPassword) {
+      return res.status(400).json({ success: false, message: "Confirm password is required." });
+    }
+    if (newPassword !== confirmPassword) {
+      return res.status(400).json({
+        success: false,
+        message: "New password and confirm password must match.",
+      });
+    }
+    const emailNorm = normalizeEmail(email);
+    const rows = await query("SELECT id FROM users WHERE email = ?", [emailNorm]);
+    if (!rows.length) {
+      return res.status(404).json({ success: false, message: "User not found" });
+    }
+    const hash = await bcrypt.hash(newPassword, 10);
+    await query("UPDATE users SET password = ? WHERE email = ?", [hash, emailNorm]);
+    return res.json({ success: true, message: "Password reset successfully" });
+  } catch {
+    return res.status(500).json({ success: false, message: "Server error." });
+  }
+};

package/templates/srms-app/backend-mysql/controllers/customerController.js

@@ -0,0 +1,28 @@
+import { query } from "../config/db.js";
+
+export const create = async (req, res) => {
+  try {
+    if (!req.body.customerNumber) return res.status(400).json({ message: "Customer Number is required." });
+    if (!req.body.firstName) return res.status(400).json({ message: "First Name is required." });
+    if (!req.body.lastName) return res.status(400).json({ message: "Last Name is required." });
+    if (!req.body.telephone) return res.status(400).json({ message: "Telephone is required." });
+    if (!req.body.address) return res.status(400).json({ message: "Address is required." });
+    const values = [req.body.customerNumber, req.body.firstName, req.body.lastName, req.body.telephone, req.body.address];
+    await query("INSERT INTO customers (customer_number, first_name, last_name, telephone, address) VALUES (?, ?, ?, ?, ?)", values);
+    return res.status(201).json({ message: "Customer added successfully." });
+  } catch (error) {
+    if (error.code === "ER_DUP_ENTRY") {
+      return res.status(409).json({ message: "Customer already exists." });
+    }
+    return res.status(500).json({ message: "Failed to add customer." });
+  }
+};
+
+export const getAll = async (_req, res) => {
+  try {
+    const rows = await query("SELECT * FROM customers ORDER BY customer_number DESC");
+    return res.json(rows);
+  } catch {
+    return res.status(500).json({ message: "Failed to fetch customer records." });
+  }
+};

package/templates/srms-app/backend-mysql/controllers/productController.js

@@ -0,0 +1,27 @@
+import { query } from "../config/db.js";
+
+export const create = async (req, res) => {
+  try {
+    if (!req.body.productCode) return res.status(400).json({ message: "Product Code is required." });
+    if (!req.body.productName) return res.status(400).json({ message: "Product Name is required." });
+    if (req.body.quantitySold === undefined || req.body.quantitySold === "") return res.status(400).json({ message: "Quantity Sold is required." });
+    if (req.body.unitPrice === undefined || req.body.unitPrice === "") return res.status(400).json({ message: "Unit Price is required." });
+    const values = [req.body.productCode, req.body.productName, req.body.quantitySold, req.body.unitPrice];
+    await query("INSERT INTO products (product_code, product_name, quantity_sold, unit_price) VALUES (?, ?, ?, ?)", values);
+    return res.status(201).json({ message: "Product added successfully." });
+  } catch (error) {
+    if (error.code === "ER_DUP_ENTRY") {
+      return res.status(409).json({ message: "Product already exists." });
+    }
+    return res.status(500).json({ message: "Failed to add product." });
+  }
+};
+
+export const getAll = async (_req, res) => {
+  try {
+    const rows = await query("SELECT * FROM products ORDER BY product_code DESC");
+    return res.json(rows);
+  } catch {
+    return res.status(500).json({ message: "Failed to fetch product records." });
+  }
+};

package/templates/srms-app/backend-mysql/controllers/reportController.js

@@ -0,0 +1,29 @@
+import { query } from "../config/db.js";
+
+export const getReports = async (req, res) => {
+  try {
+    const period = req.query.period || "daily";
+    const date = req.query.date || new Date().toISOString().slice(0, 10);
+    const startDate = req.query.startDate;
+    const endDate = req.query.endDate;
+    const month = req.query.month || date.slice(0, 7);
+
+    let sales;
+    if (period === "daily") {
+      sales = await query("SELECT * FROM sales WHERE DATE(sales_date) = ?", [date]);
+    } else if (period === "weekly") {
+      if (!startDate || !endDate) {
+        return res.status(400).json({ message: "Start date and end date are required for weekly reports." });
+      }
+      sales = await query("SELECT * FROM sales WHERE DATE(sales_date) BETWEEN ? AND ?", [startDate, endDate]);
+    } else {
+      sales = await query("SELECT * FROM sales WHERE DATE_FORMAT(sales_date, '%Y-%m') = ?", [month]);
+    }
+
+    const customers = await query("SELECT * FROM customers");
+    const products = await query("SELECT * FROM products");
+    return res.json({ period, reports: { customers, products, sales } });
+  } catch {
+    return res.status(500).json({ message: "Failed to generate reports." });
+  }
+};

package/templates/srms-app/backend-mysql/controllers/saleController.js

@@ -0,0 +1,68 @@
+import { query } from "../config/db.js";
+
+export const create = async (req, res) => {
+  try {
+    if (!req.body.invoiceNumber) return res.status(400).json({ message: "Invoice Number is required." });
+    if (!req.body.salesDate) return res.status(400).json({ message: "Sales Date is required." });
+    if (!req.body.paymentMethod) return res.status(400).json({ message: "Payment Method is required." });
+    if (req.body.totalAmountPaid === undefined || req.body.totalAmountPaid === "") return res.status(400).json({ message: "Total Amount is required." });
+    if (!req.body.customerNumber) return res.status(400).json({ message: "Customer Number is required." });
+    if (!req.body.productCode) return res.status(400).json({ message: "Product Code is required." });
+    const customer = await query("SELECT customer_number FROM customers WHERE customer_number = ?", [req.body.customerNumber]);
+    if (!customer.length) return res.status(400).json({ message: "Selected customer does not exist." });
+    const product = await query("SELECT product_code FROM products WHERE product_code = ?", [req.body.productCode]);
+    if (!product.length) return res.status(400).json({ message: "Selected product does not exist." });
+    const values = [req.body.invoiceNumber, req.body.salesDate, req.body.paymentMethod, req.body.totalAmountPaid, req.body.customerNumber, req.body.productCode];
+    await query("INSERT INTO sales (invoice_number, sales_date, payment_method, total_amount_paid, customer_number, product_code) VALUES (?, ?, ?, ?, ?, ?)", values);
+    return res.status(201).json({ message: "Sale added successfully." });
+  } catch (error) {
+    if (error.code === "ER_DUP_ENTRY") {
+      return res.status(409).json({ message: "Sale already exists." });
+    }
+    return res.status(500).json({ message: "Failed to add sale." });
+  }
+};
+
+export const getAll = async (_req, res) => {
+  try {
+    const rows = await query("SELECT * FROM sales ORDER BY invoice_number DESC");
+    return res.json(rows);
+  } catch {
+    return res.status(500).json({ message: "Failed to fetch sale records." });
+  }
+};
+
+export const update = async (req, res) => {
+  try {
+    if (!req.body.invoiceNumber) return res.status(400).json({ message: "Invoice Number is required." });
+    if (!req.body.salesDate) return res.status(400).json({ message: "Sales Date is required." });
+    if (!req.body.paymentMethod) return res.status(400).json({ message: "Payment Method is required." });
+    if (req.body.totalAmountPaid === undefined || req.body.totalAmountPaid === "") return res.status(400).json({ message: "Total Amount is required." });
+    if (!req.body.customerNumber) return res.status(400).json({ message: "Customer Number is required." });
+    if (!req.body.productCode) return res.status(400).json({ message: "Product Code is required." });
+    const customer = await query("SELECT customer_number FROM customers WHERE customer_number = ?", [req.body.customerNumber]);
+    if (!customer.length) return res.status(400).json({ message: "Selected customer does not exist." });
+    const product = await query("SELECT product_code FROM products WHERE product_code = ?", [req.body.productCode]);
+    if (!product.length) return res.status(400).json({ message: "Selected product does not exist." });
+    const values = [req.body.invoiceNumber, req.body.salesDate, req.body.paymentMethod, req.body.totalAmountPaid, req.body.customerNumber, req.body.productCode, req.params.id];
+    const result = await query("UPDATE sales SET invoice_number = ?, sales_date = ?, payment_method = ?, total_amount_paid = ?, customer_number = ?, product_code = ? WHERE invoice_number = ?", values);
+    if (!result.affectedRows) {
+      return res.status(404).json({ message: "Sale not found." });
+    }
+    return res.json({ message: "Sale updated successfully." });
+  } catch {
+    return res.status(500).json({ message: "Failed to update sale." });
+  }
+};
+
+export const remove = async (req, res) => {
+  try {
+    const result = await query("DELETE FROM sales WHERE invoice_number = ?", [req.params.id]);
+    if (!result.affectedRows) {
+      return res.status(404).json({ message: "Sale not found." });
+    }
+    return res.json({ message: "Sale deleted successfully." });
+  } catch {
+    return res.status(500).json({ message: "Failed to delete sale." });
+  }
+};

package/templates/srms-app/backend-mysql/database/schema.sql

@@ -0,0 +1,7 @@
+CREATE DATABASE IF NOT EXISTS SRMS;
+USE SRMS;
+CREATE TABLE IF NOT EXISTS users (id INT AUTO_INCREMENT PRIMARY KEY, username VARCHAR(50) NOT NULL UNIQUE, email VARCHAR(120) NOT NULL UNIQUE, password VARCHAR(255) NOT NULL);
+CREATE TABLE IF NOT EXISTS customers (customer_number VARCHAR(30) PRIMARY KEY, first_name VARCHAR(60) NOT NULL, last_name VARCHAR(60) NOT NULL, telephone VARCHAR(20) NOT NULL, address VARCHAR(255) NOT NULL);
+CREATE TABLE IF NOT EXISTS products (product_code VARCHAR(30) PRIMARY KEY, product_name VARCHAR(100) NOT NULL, quantity_sold INT NOT NULL DEFAULT 0, unit_price DECIMAL(12,2) NOT NULL);
+CREATE TABLE IF NOT EXISTS sales (invoice_number VARCHAR(30) PRIMARY KEY, sales_date DATETIME NOT NULL, payment_method VARCHAR(40) NOT NULL, total_amount_paid DECIMAL(12,2) NOT NULL, customer_number VARCHAR(30) NOT NULL, product_code VARCHAR(30) NOT NULL, FOREIGN KEY (customer_number) REFERENCES customers(customer_number), FOREIGN KEY (product_code) REFERENCES products(product_code));
+INSERT INTO users (username, email, password) VALUES ('admin', 'admin@exam.local', '$2b$10$aULsUjp9bb9lf5CZZyY.7./KhwsocVO0duyPlqu0Qnte75xHBdG5C') ON DUPLICATE KEY UPDATE username = username;

package/templates/srms-app/backend-mysql/middleware/auth.js

@@ -0,0 +1,16 @@
+import jwt from "jsonwebtoken";
+
+const auth = (req, res, next) => {
+  const header = req.headers.authorization;
+  if (!header || !header.startsWith("Bearer ")) {
+    return res.status(401).json({ message: "Authentication required." });
+  }
+  try {
+    req.user = jwt.verify(header.split(" ")[1], process.env.JWT_SECRET || "exam_secret");
+    next();
+  } catch {
+    return res.status(401).json({ message: "Invalid or expired token." });
+  }
+};
+
+export default auth;