create-lyrajs 1.1.1 → 1.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-lyrajs",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "description": "CLI tool to create new LyraJS projects",
   "keywords": [
     "create",

package/template/package.json

@@ -7,7 +7,7 @@
     "maestro": "maestro"
   },
   "dependencies": {
-    "@lyra-js/core": "^1.1.1",
+    "@lyra-js/core": "^1.1.3",
     "bcrypt": "^6.0.0",
     "cookie-parser": "^1.4.7",
     "cors": "^2.8.5",

package/template/src/controller/AuthController.ts

@@ -177,7 +177,7 @@ export class AuthController {
         sameSite: "lax",
         httpOnly: true,
         secure: process.env.ENV === "production",
-        maxAge: securityConfig.jwt.token_expiration,
+        maxAge: securityConfig.jwt.token_expiration * 1000,
         partitioned: false
       })
 

package/template/src/controller/UserController.ts

@@ -6,7 +6,7 @@ import { User } from "@entity/User"
 import { userRepository } from "@repository/UserRepository"
 
 export class UserController {
-  static list = async (req: Request, res: Response, next: NextFunction): Promise<void> => {
+  static list = async (req: AuthenticatedRequest<Request>, res: Response, next: NextFunction): Promise<void> => {
     try {
       const users = (await userRepository.findAll()).map((user: User) => {
         delete user?.password
@@ -18,7 +18,7 @@ export class UserController {
     }
   }
 
-  static read = async (req: Request, res: Response, next: NextFunction) => {
+  static read = async (req: AuthenticatedRequest<Request>, res: Response, next: NextFunction) => {
     try {
       const { id } = req.params
       const user = await userRepository.find(id)
@@ -29,7 +29,7 @@ export class UserController {
     }
   }
 
-  static create = async (req: Request, res: Response, next: NextFunction) => {
+  static create = async (req: AuthenticatedRequest<Request>, res: Response, next: NextFunction) => {
     try {
       const { data }: { data: User } = req.body
 
@@ -83,11 +83,12 @@ export class UserController {
       const { data }: { data: User } = req.body
       const user = await userRepository.find(data.id)
       if (!user) res.status(404).json({ message: "User not found" })
-      delete user?.password
-      delete user?.email
-      user.updated_at = new Date()
+      if (!AccessControl.isOwner(req.user, user.id) && !AccessControl.hasRoleHigherThan(req.user, user.role)) throw new UnauthorizedException()
       if (AccessControl.hasRoleHigherThan(req.user, user.role)) delete user.role
-      if (user) await userRepository.save(data)
+      delete data?.password
+      delete data?.email
+      data.updated_at = new Date()
+      await userRepository.save(data)
       res.status(200).json({ message: "Users updated successfully" })
     } catch (error) {
       next(error)

package/template/src/server.ts

@@ -9,6 +9,8 @@ import { Config, SecurityConfig, LyraConsole, accessMiddleware, errorHandler, ht
 
 dotenv.config()
 
+process.env.TZ = process.env.TZ || "Europe/Paris"
+
 const params = new Config().get("parameters")
 const securityConfig = new SecurityConfig().getConfig()