create-jinmankn-app 1.0.13 → 1.0.15

package/templates/HRMS (reba kuri iyi bro)/frontend/src/pages/CreateUser.jsx

@@ -0,0 +1,150 @@
+import { useEffect, useState } from 'react';
+import axios from 'axios';
+
+function CreateUser() {
+  const [employees, setEmployees] = useState([]);
+  const [selectedEmployeeId, setSelectedEmployeeId] = useState('');
+  const [password, setPassword] = useState('');
+  const [message, setMessage] = useState('');
+  const [error, setError] = useState('');
+  const [loading, setLoading] = useState(false);
+  const [user, setUser] = useState(null);
+
+  useEffect(() => {
+    const storedUser = localStorage.getItem('user');
+    if (storedUser) {
+      setUser(JSON.parse(storedUser));
+    }
+
+    axios
+      .get('/api/auth/me', {
+        withCredentials: true,
+      })
+      .then((response) => {
+        setUser(response.data.user);
+        localStorage.setItem('user', JSON.stringify(response.data.user));
+      })
+      .catch((err) => {
+        setError(err.response?.data?.message || 'Unable to verify admin rights');
+      });
+  }, []);
+
+  useEffect(() => {
+    if (!user || user.role !== 'admin') return;
+
+    axios
+      .get('/api/employees/list', {
+        withCredentials: true,
+      })
+      .then((response) => setEmployees(response.data))
+      .catch((err) => setError(err.response?.data?.message || 'Could not load employees'));
+  }, [user]);
+
+  const handleSubmit = async (e) => {
+    e.preventDefault();
+    setError('');
+    setMessage('');
+
+    if (!selectedEmployeeId) {
+      setError('Please select an existing employee.');
+      return;
+    }
+
+    if (password.length < 6) {
+      setError('Password must be at least 6 characters long.');
+      return;
+    }
+
+    setLoading(true);
+
+    try {
+      const response = await axios.post(
+        '/api/auth/users',
+        {
+          employeeId: selectedEmployeeId,
+          password,
+        },
+        {
+          withCredentials: true,
+        }
+      );
+
+      setMessage(`User account created for ${response.data.user.name}.`);
+      setSelectedEmployeeId('');
+      setPassword('');
+    } catch (err) {
+      setError(err.response?.data?.message || 'Failed to create user account');
+      console.error(err.response?.data || err.message);
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  if (!user) {
+    return (
+      <div className="rounded-xl bg-white p-6 shadow-sm">
+        <h1 className="mb-4 text-2xl font-bold">Create User</h1>
+        <p className="text-sm text-gray-600">Loading your account...</p>
+      </div>
+    );
+  }
+
+  if (user.role !== 'admin') {
+    return (
+      <div className="rounded-xl bg-white p-6 shadow-sm">
+        <h1 className="mb-4 text-2xl font-bold">Access Denied</h1>
+        <p className="text-sm text-gray-600">Only admins can create dashboard users.</p>
+      </div>
+    );
+  }
+
+  return (
+    <div className="rounded-xl bg-white p-6 shadow-sm">
+      <h1 className="mb-4 text-2xl font-bold">Create Dashboard User</h1>
+      <p className="mb-4 text-sm text-gray-600">
+        Choose an existing employee and assign a password. New users will be created with the <strong>user</strong> role.
+      </p>
+
+      {message && <p className="alert-success mb-4">{message}</p>}
+      {error && <p className="alert-error mb-4">{error}</p>}
+
+      <form onSubmit={handleSubmit} className="space-y-4">
+        <div>
+          <label className="mb-1 block text-sm font-medium">Employee</label>
+          <select
+            value={selectedEmployeeId}
+            onChange={(e) => setSelectedEmployeeId(e.target.value)}
+            className="input-field w-full"
+          >
+            <option value="">Select an employee</option>
+            {employees.map((employee) => (
+              <option key={employee._id} value={employee._id}>
+                {employee.firstName} {employee.lastName} — {employee.email}
+              </option>
+            ))}
+          </select>
+        </div>
+
+        <div>
+          <label className="mb-1 block text-sm font-medium">Password</label>
+          <input
+            type="password"
+            required
+            minLength={6}
+            placeholder="Enter a password for this user"
+            value={password}
+            onChange={(e) => setPassword(e.target.value)}
+            className="input-field w-full"
+          />
+        </div>
+
+        <button type="submit" disabled={loading} className="btn-primary w-full">
+          {loading ? 'Creating user...' : 'Create User'}
+        </button>
+      </form>
+    </div>
+  );
+}
+
+export default CreateUser;
+

package/templates/{index/frontend/src/pages/DashboardHome.jsx → HRMS (reba kuri iyi bro)/frontend/src/pages/DashboardHome.jsx }

@@ -8,11 +8,10 @@ function DashboardHome() {
   const [positions, setPositions] = useState([]);
 
   useEffect(() => {
-    const headers = { Authorization: `Bearer ${localStorage.getItem('token')}` };
     Promise.all([
-      axios.get('http://localhost:5006/api/departments/list', { headers }),
-      axios.get('http://localhost:5006/api/employees/list', { headers }),
-      axios.get('http://localhost:5006/api/positions/list', { headers }),
+      axios.get('/api/departments/list', { withCredentials: true }),
+      axios.get('/api/employees/list', { withCredentials: true }),
+      axios.get('/api/positions/list', { withCredentials: true }),
     ])
       .then(([deptRes, empRes, posRes]) => {
         setDepartments(deptRes.data);
@@ -56,3 +55,4 @@ function DashboardHome() {
 
 export default DashboardHome;
 
+

package/templates/{index/frontend/src/pages/Department.jsx → HRMS (reba kuri iyi bro)/frontend/src/pages/Department.jsx }

@@ -6,12 +6,11 @@ function Department() {
   const [departmentName, setDepartmentName] = useState('');
   const [editingId, setEditingId] = useState(null);
   const [message, setMessage] = useState('');
-
-  const headers = { Authorization: `Bearer ${localStorage.getItem('token')}` };
+  const currentUser = JSON.parse(localStorage.getItem('user') || 'null');
 
   const getDepartments = async () => {
     try {
-      const res = await axios.get('http://localhost:5006/api/departments/list', { headers });
+      const res = await axios.get('/api/departments/list', { withCredentials: true });
       setDepartments(res.data);
     } catch (err) {
       console.error(err);
@@ -27,16 +26,16 @@ function Department() {
     try {
       if (editingId) {
         await axios.put(
-          `http://localhost:5006/api/departments/${editingId}`,
+          `/api/departments/${editingId}`,
           { departmentName },
-          { headers }
+          { withCredentials: true }
         );
         setMessage('Department updated successfully');
       } else {
         await axios.post(
-          'http://localhost:5006/api/departments/add',
+          '/api/departments/add',
           { departmentName },
-          { headers }
+          { withCredentials: true }
         );
         setMessage('Department added successfully');
       }
@@ -57,7 +56,7 @@ function Department() {
   const handleDelete = async (id) => {
     if (!window.confirm('Delete this department?')) return;
     try {
-      await axios.delete(`http://localhost:5006/api/departments/${id}`, { headers });
+      await axios.delete(`/api/departments/${id}`, { withCredentials: true });
       setMessage('Department deleted successfully');
       if (editingId === id) {
         setEditingId(null);
@@ -85,30 +84,37 @@ function Department() {
         <p className={isSuccess ? 'alert-success' : 'alert-error'}>{message}</p>
       )}
 
-      <form onSubmit={handleSubmit} className="mb-6 box space-y-4">
-        <h2 className="font-semibold">{editingId ? 'Edit Department' : 'Add Department'}</h2>
-        <div>
-          <label className="mb-1 block text-sm">Department Name</label>
-          <input
-            type="text"
-            value={departmentName}
-            onChange={(e) => setDepartmentName(e.target.value)}
-            className="input-field"
-            placeholder="e.g. Human Resources"
-            required
-          />
-        </div>
-        <div className="flex items-center gap-3">
-          <button type="submit" className="btn-primary">
-            {editingId ? 'Update Department' : 'Add Department'}
-          </button>
-          {editingId && (
-            <button type="button" className="btn-secondary" onClick={handleCancel}>
-              Cancel
+      {currentUser?.role === 'admin' ? (
+        <form onSubmit={handleSubmit} className="mb-6 box space-y-4">
+          <h2 className="font-semibold">{editingId ? 'Edit Department' : 'Add Department'}</h2>
+          <div>
+            <label className="mb-1 block text-sm">Department Name</label>
+            <input
+              type="text"
+              value={departmentName}
+              onChange={(e) => setDepartmentName(e.target.value)}
+              className="input-field"
+              placeholder="e.g. Human Resources"
+              required
+            />
+          </div>
+          <div className="flex items-center gap-3">
+            <button type="submit" className="btn-primary">
+              {editingId ? 'Update Department' : 'Add Department'}
             </button>
-          )}
+            {editingId && (
+              <button type="button" className="btn-secondary" onClick={handleCancel}>
+                Cancel
+              </button>
+            )}
+          </div>
+        </form>
+      ) : (
+        <div className="mb-6 box">
+          <h2 className="font-semibold">Departments (read-only)</h2>
+          <p className="text-sm text-gray-600">You have read-only access. Contact an admin for changes.</p>
         </div>
-      </form>
+      )}
 
       <div className="box">
         <h2 className="mb-3 font-semibold">Department List ({departments.length})</h2>
@@ -128,12 +134,16 @@ function Department() {
                   <tr key={dept._id}>
                     <td>{dept.departmentName}</td>
                     <td className="space-x-2">
-                      <button type="button" className="btn-secondary btn-small" onClick={() => handleEdit(dept)}>
-                        Edit
-                      </button>
-                      <button type="button" className="btn-danger btn-small" onClick={() => handleDelete(dept._id)}>
-                        Delete
-                      </button>
+                      {currentUser?.role === 'admin' && (
+                        <>
+                          <button type="button" className="btn-secondary btn-small" onClick={() => handleEdit(dept)}>
+                            Edit
+                          </button>
+                          <button type="button" className="btn-danger btn-small" onClick={() => handleDelete(dept._id)}>
+                            Delete
+                          </button>
+                        </>
+                      )}
                     </td>
                   </tr>
                 ))}
@@ -147,4 +157,5 @@ function Department() {
 }
 
 export default Department;
+
 

package/templates/{index/frontend/src/pages/Employee.jsx → HRMS (reba kuri iyi bro)/frontend/src/pages/Employee.jsx }

@@ -21,12 +21,11 @@ function Employee() {
   const [status, setStatus] = useState('on mission');
   const [department, setDepartment] = useState('');
   const [message, setMessage] = useState('');
-
-  const headers = { Authorization: `Bearer ${localStorage.getItem('token')}` };
+  const currentUser = JSON.parse(localStorage.getItem('user') || 'null');
 
   const getEmployees = async () => {
     try {
-      const res = await axios.get('http://localhost:5006/api/employees/list', { headers });
+      const res = await axios.get('/api/employees/list', { withCredentials: true });
       setEmployees(res.data);
     } catch (err) {
       console.error(err);
@@ -35,7 +34,7 @@ function Employee() {
 
   const getDepartments = async () => {
     try {
-      const res = await axios.get('http://localhost:5006/api/departments/list', { headers });
+      const res = await axios.get('/api/departments/list', { withCredentials: true });
       setDepartments(res.data);
     } catch (err) {
       console.error(err);
@@ -44,7 +43,7 @@ function Employee() {
 
   const getPositions = async () => {
     try {
-      const res = await axios.get('http://localhost:5006/api/positions/list', { headers });
+      const res = await axios.get('/api/positions/list', { withCredentials: true });
       setPositions(res.data);
     } catch (err) {
       console.error(err);
@@ -92,10 +91,10 @@ function Employee() {
       };
 
       if (editingId) {
-        await axios.put(`http://localhost:5006/api/employees/${editingId}`, payload, { headers });
+        await axios.put(`/api/employees/${editingId}`, payload, { withCredentials: true });
         setMessage('Employee updated successfully');
       } else {
-        await axios.post('http://localhost:5006/api/employees/add', payload, { headers });
+        await axios.post('/api/employees/add', payload, { withCredentials: true });
         setMessage('Employee added successfully');
       }
 
@@ -126,7 +125,7 @@ function Employee() {
   const handleDelete = async (id) => {
     if (!window.confirm('Delete this employee?')) return;
     try {
-      await axios.delete(`http://localhost:5006/api/employees/${id}`, { headers });
+      await axios.delete(`/api/employees/${id}`, { withCredentials: true });
       setMessage('Employee deleted successfully');
       if (editingId === id) {
         resetForm();
@@ -152,7 +151,8 @@ function Employee() {
         <p className={isSuccess ? 'alert-success' : 'alert-error'}>{message}</p>
       )}
 
-      <form onSubmit={handleSubmit} className="mb-6 box space-y-4">
+      {currentUser?.role === 'admin' ? (
+        <form onSubmit={handleSubmit} className="mb-6 box space-y-4">
         <h2 className="font-semibold">{editingId ? 'Edit Employee' : 'Add Employee'}</h2>
         <div className="grid gap-4 sm:grid-cols-2">
           <div>
@@ -304,7 +304,13 @@ function Employee() {
             </button>
           )}
         </div>
-      </form>
+        </form>
+      ) : (
+        <div className="mb-6 box">
+          <h2 className="font-semibold">Employees (read-only)</h2>
+          <p className="text-sm text-gray-600">You have read-only access. Contact an admin for changes.</p>
+        </div>
+      )}
 
       <div className="box">
         <h2 className="mb-3 font-semibold">Employee List ({employees.length})</h2>
@@ -344,12 +350,16 @@ function Employee() {
                     <td>{emp.position?.posName || 'N/A'}</td>
                     <td className="capitalize">{emp.status}</td>
                     <td className="space-x-2">
-                      <button type="button" className="btn-secondary btn-small" onClick={() => handleEdit(emp)}>
-                        Edit
-                      </button>
-                      <button type="button" className="btn-danger btn-small" onClick={() => handleDelete(emp._id)}>
-                        Delete
-                      </button>
+                      {currentUser?.role === 'admin' && (
+                        <>
+                          <button type="button" className="btn-secondary btn-small" onClick={() => handleEdit(emp)}>
+                            Edit
+                          </button>
+                          <button type="button" className="btn-danger btn-small" onClick={() => handleDelete(emp._id)}>
+                            Delete
+                          </button>
+                        </>
+                      )}
                     </td>
                   </tr>
                 ))}
@@ -364,3 +374,4 @@ function Employee() {
 
 export default Employee;
 
+

package/templates/{index/frontend/src/pages/Login.jsx → HRMS (reba kuri iyi bro)/frontend/src/pages/Login.jsx }

@@ -17,8 +17,11 @@ function Login() {
     setLoading(true);
 
     try {
-      const response = await axios.post('http://localhost:5006/api/auth/login', { email, password });
-      localStorage.setItem('token', response.data.token);
+      const response = await axios.post(
+        '/api/auth/login',
+        { email, password },
+        { withCredentials: true }
+      );
       localStorage.setItem('user', JSON.stringify(response.data.user));
       setMessage('Login successful');
       navigate('/dashboard');
@@ -70,7 +73,7 @@ function Login() {
         </form>
 
         <p className="mt-4 text-center text-sm text-gray-600">
-          No account? <Link to="/register" className="text-blue-600 hover:underline">Register</Link>
+          If you do not have an account, ask your administrator to create one.
         </p>
       </div>
     </div>
@@ -78,4 +81,5 @@ function Login() {
 }
 
 export default Login;
+
 

package/templates/{index/frontend/src/pages/Position.jsx → HRMS (reba kuri iyi bro)/frontend/src/pages/Position.jsx }

@@ -7,12 +7,11 @@ function Position() {
   const [requiredQualification, setRequiredQualification] = useState('');
   const [editingId, setEditingId] = useState(null);
   const [message, setMessage] = useState('');
-
-  const headers = { Authorization: `Bearer ${localStorage.getItem('token')}` };
+  const currentUser = JSON.parse(localStorage.getItem('user') || 'null');
 
   const getPositions = async () => {
     try {
-      const res = await axios.get('http://localhost:5006/api/positions/list', { headers });
+      const res = await axios.get('/api/positions/list', { withCredentials: true });
       setPositions(res.data);
     } catch (err) {
       console.error(err);
@@ -28,16 +27,16 @@ function Position() {
     try {
       if (editingId) {
         await axios.put(
-          `http://localhost:5006/api/positions/${editingId}`,
+          `/api/positions/${editingId}`,
           { posName, requiredQualification },
-          { headers }
+          { withCredentials: true }
         );
         setMessage('Position updated successfully');
       } else {
         await axios.post(
-          'http://localhost:5006/api/positions/add',
+          '/api/positions/add',
           { posName, requiredQualification },
-          { headers }
+          { withCredentials: true }
         );
         setMessage('Position added successfully');
       }
@@ -61,7 +60,7 @@ function Position() {
   const handleDelete = async (id) => {
     if (!window.confirm('Delete this position?')) return;
     try {
-      await axios.delete(`http://localhost:5006/api/positions/${id}`, { headers });
+      await axios.delete(`/api/positions/${id}`, { withCredentials: true });
       setMessage('Position deleted successfully');
       if (editingId === id) {
         setEditingId(null);
@@ -91,7 +90,8 @@ function Position() {
         <p className={isSuccess ? 'alert-success' : 'alert-error'}>{message}</p>
       )}
 
-      <form onSubmit={handleSubmit} className="mb-6 box space-y-4">
+      {currentUser?.role === 'admin' ? (
+        <form onSubmit={handleSubmit} className="mb-6 box space-y-4">
         <h2 className="font-semibold">{editingId ? 'Edit Position' : 'Add Position'}</h2>
         <div>
           <label className="mb-1 block text-sm">Position Name</label>
@@ -125,7 +125,13 @@ function Position() {
             </button>
           )}
         </div>
-      </form>
+        </form>
+      ) : (
+        <div className="mb-6 box">
+          <h2 className="font-semibold">Positions (read-only)</h2>
+          <p className="text-sm text-gray-600">You have read-only access. Contact an admin for changes.</p>
+        </div>
+      )}
 
       <div className="box">
         <h2 className="mb-3 font-semibold">Position List ({positions.length})</h2>
@@ -147,12 +153,16 @@ function Position() {
                     <td>{pos.posName}</td>
                     <td>{pos.requiredQualification}</td>
                     <td className="space-x-2">
-                      <button type="button" className="btn-secondary btn-small" onClick={() => handleEdit(pos)}>
-                        Edit
-                      </button>
-                      <button type="button" className="btn-danger btn-small" onClick={() => handleDelete(pos._id)}>
-                        Delete
-                      </button>
+                      {currentUser?.role === 'admin' && (
+                        <>
+                          <button type="button" className="btn-secondary btn-small" onClick={() => handleEdit(pos)}>
+                            Edit
+                          </button>
+                          <button type="button" className="btn-danger btn-small" onClick={() => handleDelete(pos._id)}>
+                            Delete
+                          </button>
+                        </>
+                      )}
                     </td>
                   </tr>
                 ))}
@@ -167,3 +177,4 @@ function Position() {
 
 export default Position;
 
+

package/templates/{index/frontend/src/pages/Register.jsx → HRMS (reba kuri iyi bro)/frontend/src/pages/Register.jsx }

@@ -18,12 +18,15 @@ function Register() {
     setLoading(true);
 
     try {
-      const response = await axios.post('http://localhost:5006/api/auth/register', {
-        name,
-        email,
-        password,
-      });
-      localStorage.setItem('token', response.data.token);
+      const response = await axios.post(
+        '/api/auth/register',
+        {
+          name,
+          email,
+          password,
+        },
+        { withCredentials: true }
+      );
       localStorage.setItem('user', JSON.stringify(response.data.user));
       setMessage('Account created successfully');
       navigate('/dashboard');
@@ -99,4 +102,5 @@ function Register() {
 }
 
 export default Register;
+
 

package/templates/{index/frontend/src/pages/Reports.jsx → HRMS (reba kuri iyi bro)/frontend/src/pages/Reports.jsx }

@@ -6,11 +6,9 @@ function Reports() {
   const [loading, setLoading] = useState(true);
   const [error, setError] = useState('');
 
-  const headers = { Authorization: `Bearer ${localStorage.getItem('token')}` };
-
   useEffect(() => {
     axios
-      .get('http://localhost:5006/api/reports/on-leave-by-department', { headers })
+      .get('/api/reports/on-leave-by-department', { withCredentials: true })
       .then((res) => setReport(res.data))
       .catch((err) => setError(err.response?.data?.message || 'Failed to load report'))
       .finally(() => setLoading(false));
@@ -91,4 +89,5 @@ function Reports() {
 }
 
 export default Reports;
+
 

package/templates/HRMS (reba kuri iyi bro)/frontend/vite.config.js

@@ -0,0 +1,18 @@
+import { defineConfig } from 'vite'
+import react from '@vitejs/plugin-react'
+import tailwindcss from '@tailwindcss/vite'
+// https://vite.dev/config/
+export default defineConfig({
+  plugins: [react(), tailwindcss()],
+  server: {
+    proxy: {
+      '/api': {
+        target: 'http://localhost:5006',
+        changeOrigin: true,
+        secure: false,
+        cookieDomainRewrite: 'localhost',
+        cookiePathRewrite: '/',
+      },
+    },
+  },
+})

package/templates/index/README.md

@@ -1,34 +0,0 @@
-Problems the new system is fixing
-
-Data duplication
-Slow manual processes
-Poor record tracking
-Data inconsistency
-Delayed reporting
-Difficulty retrieving information
-
-
-What the new system will do
-
-Manage employee records
-Record purchases
-Record sales
-Store data centrally
-Retrieve information quickly
-Generate accurate reports
-Support management decision-making
-Simple summary
-
-The web-based system will replace the manual system by centralizing employee, purchase, and sales records, reducing duplication, improving data consistency, speeding up operations, and producing accurate reports.
-
-//middleware 
-Middleware in the MERN stack is a function that runs between a client's request and the server's response.
-
-It is used to:
-
-Check authentication (JWT tokens)
-Validate data
-Handle errors
-Log requests
-Modify request/response objects
-

package/templates/index/backend/middleware/auth.js

@@ -1,27 +0,0 @@
-
-const jwt = require('jsonwebtoken');
-const User = require('../models/User');
-const JWT_SECRET = 'change_this_to_a_long_random_secret';
-
-exports.protect = async (req, res, next) => {
-  try {
-    const header = req.headers.authorization;
-
-    if (!header || !header.startsWith('Bearer ')) {
-      return res.status(401).json({ message: 'Not authorized' });
-    }
-
-    const token = header.split(' ')[1];
-    const decoded = jwt.verify(token, JWT_SECRET);
-    const user = await User.findById(decoded.userId).select('-password');
-
-    if (!user) {
-      return res.status(401).json({ message: 'Not authorized' });
-    }
-
-    req.user = user;
-    next();
-  } catch (err) {
-    return res.status(401).json({ message: 'Not authorized' });
-  }
-};