create-jinmankn-app 1.0.13 → 1.0.15

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-jinmankn-app",
-  "version": "1.0.13",
+  "version": "1.0.15",
   "type": "module",
   "bin": {
     "create-jinmankn-app": "./bin/index.js"

package/templates/HRMS (reba kuri iyi bro)/README.md

@@ -0,0 +1 @@
+umvax mbaye nshyizeho iyi reka mbanze nkore test numona i dakora fresh uze gusubiroho after 10min ndaba naya updatinze

package/templates/{index/backend/controllers/authController.js → HRMS (reba kuri iyi bro)/backend/controllers/authController.js }

@@ -1,17 +1,14 @@
 const bcrypt = require('bcrypt');
-const jwt = require('jsonwebtoken');
 const User = require('../models/User');
-const JWT_SECRET = 'change_this_to_a_long_random_secret';
+const Employee = require('../models/Employee');
 
-function createToken(userId) {
-  return jwt.sign({ userId }, JWT_SECRET, { expiresIn: '7d' });
-}
-//this function is formatting the user object to return the id, name, and email when 
 function formatUser(user) {
   return {
     id: user._id,
     name: user.name,
     email: user.email,
+    role: user.role || 'user',
+    employee: user.employee || null,
   };
 }
 
@@ -32,17 +29,57 @@ exports.register = async (req, res) => {
       return res.status(409).json({ message: 'Email already registered' });
     }
 
+    const userCount = await User.countDocuments();
+    if (userCount > 0) {
+      return res.status(403).json({ message: 'Registration closed. Ask an admin to create an account.' });
+    }
+
     const hashedPassword = await bcrypt.hash(password, 10);
     const user = await User.create({
       name: name.trim(),
       email: email.trim().toLowerCase(),
       password: hashedPassword,
+      role: 'admin',
+    });
+
+    req.session.userId = user._id;
+
+    res.status(201).json({
+      user: formatUser(user),
     });
+  } catch (err) {
+    res.status(500).json({ message: err.message });
+  }
+};
+
+exports.createUser = async (req, res) => {
+  try {
+    const { employeeId, password } = req.body;
+
+    if (!employeeId || !password) {
+      return res.status(400).json({ message: 'Employee and password are required' });
+    }
 
-    const token = createToken(user._id);
+    const employee = await Employee.findById(employeeId);
+    if (!employee) {
+      return res.status(404).json({ message: 'Employee not found' });
+    }
+
+    const existing = await User.findOne({ email: employee.email });
+    if (existing) {
+      return res.status(409).json({ message: 'A user already exists for this employee' });
+    }
+
+    const hashedPassword = await bcrypt.hash(password, 10);
+    const user = await User.create({
+      name: `${employee.firstName} ${employee.lastName}`.trim(),
+      email: employee.email,
+      password: hashedPassword,
+      role: 'user',
+      employee: employee._id,
+    });
 
     res.status(201).json({
-      token,
       user: formatUser(user),
     });
   } catch (err) {
@@ -68,10 +105,9 @@ exports.login = async (req, res) => {
       return res.status(401).json({ message: 'Invalid email or password' });
     }
 
-    const token = createToken(user._id);
+    req.session.userId = user._id;
 
     res.json({
-      token,
       user: formatUser(user),
     });
   } catch (err) {
@@ -86,3 +122,17 @@ exports.getMe = async (req, res) => {
     res.status(500).json({ message: err.message });
   }
 };
+
+exports.logout = async (req, res) => {
+  try {
+    req.session.destroy((err) => {
+      if (err) {
+        return res.status(500).json({ message: 'Logout failed' });
+      }
+      res.clearCookie('connect.sid');
+      res.json({ message: 'Logged out successfully' });
+    });
+  } catch (err) {
+    res.status(500).json({ message: err.message });
+  }
+};

package/templates/HRMS (reba kuri iyi bro)/backend/cookiejar.txt

@@ -0,0 +1,4 @@
+# Netscape HTTP Cookie File
+# https://curl.se/docs/http-cookies.html
+# This file was generated by libcurl! Edit at your own risk.
+

package/templates/HRMS (reba kuri iyi bro)/backend/middleware/auth.js

@@ -0,0 +1,28 @@
+
+const User = require('../models/User');
+
+exports.protect = async (req, res, next) => {
+  try {
+    if (!req.session || !req.session.userId) {
+      return res.status(401).json({ message: 'Not authorized' });
+    }
+
+    const user = await User.findById(req.session.userId).select('-password');
+
+    if (!user) {
+      return res.status(401).json({ message: 'Not authorized' });
+    } 
+
+    req.user = user;
+    next();
+  } catch (err) {
+    return res.status(401).json({ message: 'Not authorized' });
+  }
+};
+
+exports.admin = (req, res, next) => {
+  if (!req.user || req.user.role !== 'admin') {
+    return res.status(403).json({ message: 'Admin access required' });
+  }
+  next();
+};

package/templates/{index/backend/models/User.js → HRMS (reba kuri iyi bro)/backend/models/User.js }

@@ -19,6 +19,11 @@ const userSchema = new mongoose.Schema(
       required: true,
       minlength: 6,
     },
+    role: {
+      type: String,
+      enum: ['admin', 'user', 'employee'],
+      default: 'user',
+    },
     employee: {
       type: mongoose.Schema.Types.ObjectId,
       ref: 'Employee',

package/templates/{index/backend/package-lock.json → HRMS (reba kuri iyi bro)/backend/package-lock.json }

@@ -11,8 +11,8 @@
       "dependencies": {
         "bcrypt": "^5.1.1",
         "cors": "^2.8.5",
-        "dotenv": "^16.4.7",
         "express": "^4.21.2",
+        "express-session": "^1.19.0",
         "jsonwebtoken": "^9.0.2",
         "mongoose": "^8.9.3"
       },
@@ -458,18 +458,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/dotenv": {
-      "version": "16.6.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
-      "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
-      "license": "BSD-2-Clause",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://dotenvx.com"
-      }
-    },
     "node_modules/dunder-proto": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
@@ -605,6 +593,29 @@
         "url": "https://opencollective.com/express"
       }
     },
+    "node_modules/express-session": {
+      "version": "1.19.0",
+      "resolved": "https://registry.npmjs.org/express-session/-/express-session-1.19.0.tgz",
+      "integrity": "sha512-0csaMkGq+vaiZTmSMMGkfdCOabYv192VbytFypcvI0MANrp+4i/7yEkJ0sbAEhycQjntaKGzYfjfXQyVb7BHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "cookie": "~0.7.2",
+        "cookie-signature": "~1.0.7",
+        "debug": "~2.6.9",
+        "depd": "~2.0.0",
+        "on-headers": "~1.1.0",
+        "parseurl": "~1.3.3",
+        "safe-buffer": "~5.2.1",
+        "uid-safe": "~2.1.5"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/fill-range": {
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz",
@@ -1613,6 +1624,15 @@
         "node": ">= 0.8"
       }
     },
+    "node_modules/on-headers": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz",
+      "integrity": "sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/once": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
@@ -1703,6 +1723,15 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/random-bytes": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/random-bytes/-/random-bytes-1.0.0.tgz",
+      "integrity": "sha512-iv7LhNVO047HzYR3InF6pUcUsPQiHTM1Qal51DcGSuZFBil1aBBWG5eHPNek7bvILMaYJ/8RU1e8w1AMdHmLQQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/range-parser": {
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
@@ -2103,6 +2132,18 @@
         "node": ">= 0.6"
       }
     },
+    "node_modules/uid-safe": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.1.5.tgz",
+      "integrity": "sha512-KPHm4VL5dDXKz01UuEd88Df+KzynaohSL9fBh096KWAxSKZQDI2uBrVqtvRM4rwrIrRRKsdLNML/lnaaVSRioA==",
+      "license": "MIT",
+      "dependencies": {
+        "random-bytes": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/undefsafe": {
       "version": "2.0.5",
       "resolved": "https://registry.npmjs.org/undefsafe/-/undefsafe-2.0.5.tgz",

package/templates/{index/backend/package.json → HRMS (reba kuri iyi bro)/backend/package.json }

@@ -13,6 +13,7 @@
     "bcrypt": "^5.1.1",
     "cors": "^2.8.5",
     "express": "^4.21.2",
+    "express-session": "^1.19.0",
     "jsonwebtoken": "^9.0.2",
     "mongoose": "^8.9.3"
   },

package/templates/HRMS (reba kuri iyi bro)/backend/routes/authRoutes.js

@@ -0,0 +1,13 @@
+const express = require('express');
+const { register, login, getMe, createUser, logout } = require('../controllers/authController');
+const { protect, admin } = require('../middleware/auth');
+
+const router = express.Router();
+
+router.post('/register', register);
+router.post('/login', login);
+router.post('/logout', protect, logout);
+router.post('/users', protect, admin, createUser);
+router.get('/me', protect, getMe);
+
+module.exports = router;

package/templates/{index/backend/routes/departmentRoutes.js → HRMS (reba kuri iyi bro)/backend/routes/departmentRoutes.js }

@@ -1,6 +1,6 @@
 const express = require('express');
 const router = express.Router();
-const { protect } = require('../middleware/auth');
+const { protect, admin } = require('../middleware/auth');
 const {
   addDepartment,
   getDepartments,
@@ -9,9 +9,9 @@ const {
 } = require('../controllers/departmentController');
 
 router.use(protect);
-router.post('/add', addDepartment);
+router.post('/add', admin, addDepartment);
 router.get('/list', getDepartments);
-router.put('/:id', updateDepartment);
-router.delete('/:id', deleteDepartment);
+router.put('/:id', admin, updateDepartment);
+router.delete('/:id', admin, deleteDepartment);
 
 module.exports = router;

package/templates/{index/backend/routes/employeeRoutes.js → HRMS (reba kuri iyi bro)/backend/routes/employeeRoutes.js }

@@ -1,6 +1,6 @@
 const express = require('express');
 const router = express.Router();
-const { protect } = require('../middleware/auth');
+const { protect, admin } = require('../middleware/auth');
 const {
   addEmployee,
   getEmployees,
@@ -10,10 +10,10 @@ const {
 } = require('../controllers/employeeController');
 
 router.use(protect);
-router.post('/add', addEmployee);
+router.post('/add', admin, addEmployee);
 router.get('/list', getEmployees);
 router.get('/:id', getEmployee);
-router.put('/:id', updateEmployee);
-router.delete('/:id', deleteEmployee);
+router.put('/:id', admin, updateEmployee);
+router.delete('/:id', admin, deleteEmployee);
 
 module.exports = router;

package/templates/{index/backend/routes/positionRoutes.js → HRMS (reba kuri iyi bro)/backend/routes/positionRoutes.js }

@@ -1,6 +1,6 @@
 const express = require('express');
 const router = express.Router();
-const { protect } = require('../middleware/auth');
+const { protect, admin } = require('../middleware/auth');
 const {
   addPosition,
   getPositions,
@@ -9,9 +9,9 @@ const {
 } = require('../controllers/positionController');
 
 router.use(protect);
-router.post('/add', addPosition);
+router.post('/add', admin, addPosition);
 router.get('/list', getPositions);
-router.put('/:id', updatePosition);
-router.delete('/:id', deletePosition);
+router.put('/:id', admin, updatePosition);
+router.delete('/:id', admin, deletePosition);
 
 module.exports = router;

package/templates/{index/backend/routes/reportRoutes.js → HRMS (reba kuri iyi bro)/backend/routes/reportRoutes.js }

@@ -1,9 +1,9 @@
 const express = require('express');
 const { getOnLeaveByDepartment } = require('../controllers/reportController');
-const { protect } = require('../middleware/auth');
+const { protect, admin } = require('../middleware/auth');
 
 const router = express.Router();
 
-router.get('/on-leave-by-department', protect, getOnLeaveByDepartment);
+router.get('/on-leave-by-department', protect, admin, getOnLeaveByDepartment);
 
 module.exports = router;

package/templates/{index/backend/server.js → HRMS (reba kuri iyi bro)/backend/server.js }

@@ -1,5 +1,6 @@
 const express = require('express');
 const cors = require('cors');
+const session = require('express-session');
 
 const connectDB = require('./config/db');
 
@@ -12,8 +13,29 @@ const protectedRoutes = require('./routes/protectedRoutes');
 
 const app = express();
 
-app.use(cors());
+app.set('trust proxy', 1);
+
+const corsOptions = {
+  origin: 'http://localhost:5173',
+  credentials: true,
+};
+
+app.use(cors(corsOptions));
+app.options('*', cors(corsOptions));
 app.use(express.json());
+app.use(
+  session({
+    secret: 'change_this_to_a_long_random_secret',
+    resave: false,
+    saveUninitialized: false,
+    cookie: {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === 'production',
+      sameSite: 'lax',
+      maxAge: 1000 * 60 * 60 * 24,
+    },
+  })
+);
 connectDB();
 
 app.use('/api/auth', authRoutes);

package/templates/{index/frontend/src/App.jsx → HRMS (reba kuri iyi bro)/frontend/src/App.jsx }

@@ -8,6 +8,7 @@ import Department from './pages/Department';
 import Employee from './pages/Employee';
 import Position from './pages/Position';
 import Reports from './pages/Reports';
+import CreateUser from './pages/CreateUser';
 
 function App() {
   return (
@@ -22,6 +23,7 @@ function App() {
           <Route path="employee" element={<Employee />} />
           <Route path="position" element={<Position />} />
           <Route path="reports" element={<Reports />} />
+          <Route path="create-user" element={<CreateUser />} />
         </Route>
 
         <Route path="/" element={<Navigate to="/dashboard" replace />} />
@@ -32,4 +34,4 @@ function App() {
 }
 
 export default App;
-
+

package/templates/{index/frontend/src/components/DashboardLayout.jsx → HRMS (reba kuri iyi bro)/frontend/src/components/DashboardLayout.jsx }

@@ -21,8 +21,8 @@ function DashboardLayout() {
       setUser(JSON.parse(storedUser));
     }
 
-    axios.get('http://localhost:5006/api/auth/me', {
-        headers: { Authorization: `Bearer ${localStorage.getItem('token')}` },
+    axios.get('/api/auth/me', {
+        withCredentials: true,
       })
       .then((response) => {
         setUser(response.data.user);
@@ -35,12 +35,22 @@ function DashboardLayout() {
       });
   }, []);
 
-  const handleLogout = () => {
-    localStorage.removeItem('token');
+  const handleLogout = async () => {
+    try {
+      await axios.post('/api/auth/logout', null, {
+        withCredentials: true,
+      });
+    } catch (err) {
+      console.error('Logout failed', err.response?.data || err.message);
+    }
     localStorage.removeItem('user');
     navigate('/login');
   };
 
+  const visibleNav = user?.role === 'employee'
+    ? navItems.filter((i) => ['/dashboard/employee', '/dashboard/department', '/dashboard/position'].includes(i.to))
+    : navItems;
+
   return (
     <div className="min-h-screen bg-gray-100">
       <aside className="fixed inset-y-0 left-0 flex w-56 flex-col bg-teal-900 text-white">
@@ -50,7 +60,7 @@ function DashboardLayout() {
         </div>
 
         <nav className="flex-1 space-y-1 overflow-y-auto px-2 py-4">
-          {navItems.map((item) => (
+          {visibleNav.map((item) => (
             <NavLink
               key={item.to}
               to={item.to}
@@ -60,6 +70,14 @@ function DashboardLayout() {
               {item.label}
             </NavLink>
           ))}
+          {user?.role === 'admin' && (
+            <NavLink
+              to="/dashboard/create-user"
+              className={({ isActive }) => `nav-link ${isActive ? 'nav-link-active' : ''}`}
+            >
+              Create User
+            </NavLink>
+          )}
         </nav>
 
         <div className="border-t border-teal-800 px-4 py-4">
@@ -87,4 +105,5 @@ function DashboardLayout() {
 }
 
 export default DashboardLayout;
+
 

package/templates/{index/frontend/src/components/ProtectedRoute.jsx → HRMS (reba kuri iyi bro)/frontend/src/components/ProtectedRoute.jsx }

@@ -2,8 +2,8 @@ import React from 'react';
 import { Navigate } from 'react-router-dom';
 
 export default function ProtectedRoute({ children }) {
-  const token = localStorage.getItem('token');
-  if (!token) return <Navigate to="/login" replace />;
+  const user = localStorage.getItem('user');
+  if (!user) return <Navigate to="/login" replace />;
   return children;
 }
 

package/templates/{index/frontend/src/main.jsx → HRMS (reba kuri iyi bro)/frontend/src/main.jsx }

@@ -1,11 +1,14 @@
 import { StrictMode } from 'react'
 import { createRoot } from 'react-dom/client'
+import axios from 'axios'
 import './index.css'
 import App from './App.jsx'
 
+axios.defaults.withCredentials = true
+
 createRoot(document.getElementById('root')).render(
   <StrictMode>
     <App />
   </StrictMode>,
 )
-
+