create-nodemin-app 1.0.16

package/templates/HRMS_Mysql/backend/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "hrms-backend",
+  "version": "1.0.0",
+  "description": "HRMS Backend API",
+  "main": "server.js",
+  "scripts": {
+    "start": "node server.js",
+    "dev": "nodemon server.js"
+  },
+  "dependencies": {
+    "axios": "^1.6.0",
+    "bcryptjs": "^2.4.3",
+    "cors": "^2.8.5",
+    "express": "^4.18.2",
+    "express-session": "^1.17.3",
+    "mysql2": "^3.6.0"
+  },
+  "devDependencies": {
+    "nodemon": "^3.0.1"
+  }
+}

package/templates/HRMS_Mysql/backend/server.js

@@ -0,0 +1,421 @@
+const express = require('express');
+const session = require('express-session');
+const cors = require('cors');
+const path = require('path');
+const bcrypt = require('bcryptjs');
+const db = require('./db');
+
+const app = express();
+const PORT = process.env.PORT || 5000;
+
+app.use(cors({
+  origin: 'http://localhost:5173',
+  credentials: true
+}));
+app.use(express.json());
+app.use(express.urlencoded({ extended: true }));
+
+app.use(session({
+  secret: 'hrms_secret_key_2024',
+  resave: false,
+  saveUninitialized: false,
+  cookie: {
+    secure: false,
+    maxAge: 24 * 60 * 60 * 1000
+  }
+}));
+
+function requireAuth(req, res, next) {
+  if (!req.session.userId) {
+    return res.status(401).json({ error: 'Unauthorized' });
+  }
+  next();
+}
+
+// ─── AUTH ROUTES ───
+
+app.post('/api/register', async (req, res) => {
+  try {
+    const { firstName, lastName, email, username, password } = req.body;
+    if (!firstName || !lastName || !email || !username || !password) {
+      return res.status(400).json({ error: 'All fields are required' });
+    }
+    const [existing] = await db.query('SELECT UserID FROM Users WHERE UserName = ?', [username]);
+    if (existing.length > 0) {
+      return res.status(400).json({ error: 'Username already exists' });
+    }
+    const [emailExists] = await db.query('SELECT EmpID FROM Employee WHERE EmpEmail = ?', [email]);
+    if (emailExists.length > 0) {
+      return res.status(400).json({ error: 'Email already in use' });
+    }
+    const [empResult] = await db.query(
+      'INSERT INTO Employee (EmpFirstName, EmpLastName, EmpEmail, EmpStatus) VALUES (?, ?, ?, ?)',
+      [firstName, lastName, email, 'on leave']
+    );
+    const hashed = await bcrypt.hash(password, 10);
+    const [userResult] = await db.query(
+      'INSERT INTO Users (EmpID, UserName, Password) VALUES (?, ?, ?)',
+      [empResult.insertId, username, hashed]
+    );
+    req.session.userId = userResult.insertId;
+    req.session.userName = username;
+    req.session.empName = firstName;
+    res.json({
+      success: true,
+      user: { id: userResult.insertId, username, name: firstName }
+    });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.post('/api/login', async (req, res) => {
+  try {
+    const { username, password } = req.body;
+    const [rows] = await db.query('SELECT u.*, e.EmpFirstName, e.EmpEmail FROM Users u JOIN Employee e ON u.EmpID = e.EmpID WHERE u.UserName = ?', [username]);
+    if (rows.length === 0) {
+      return res.status(401).json({ error: 'Invalid credentials' });
+    }
+    const user = rows[0];
+    const valid = await bcrypt.compare(password, user.Password);
+    if (!valid) {
+      return res.status(401).json({ error: 'Invalid credentials' });
+    }
+    req.session.userId = user.UserID;
+    req.session.userName = user.UserName;
+    req.session.empName = user.EmpFirstName;
+    res.json({ success: true, user: { id: user.UserID, username: user.UserName, name: user.EmpFirstName } });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.post('/api/logout', (req, res) => {
+  req.session.destroy();
+  res.json({ success: true });
+});
+
+app.get('/api/me', requireAuth, async (req, res) => {
+  try {
+    const [rows] = await db.query(
+      'SELECT u.UserID, u.UserName, e.EmpFirstName, e.EmpLastName, e.EmpEmail FROM Users u JOIN Employee e ON u.EmpID = e.EmpID WHERE u.UserID = ?',
+      [req.session.userId]
+    );
+    if (rows.length === 0) return res.status(404).json({ error: 'User not found' });
+    res.json(rows[0]);
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.post('/api/forgot-password', async (req, res) => {
+  try {
+    const { email } = req.body;
+    const [rows] = await db.query(
+      'SELECT u.UserID, u.UserName, e.EmpEmail FROM Users u JOIN Employee e ON u.EmpID = e.EmpID WHERE e.EmpEmail = ?',
+      [email]
+    );
+    if (rows.length === 0) {
+      return res.status(404).json({ error: 'Email not found' });
+    }
+    const user = rows[0];
+    const tempPassword = Math.random().toString(36).slice(-8);
+    const hashed = await bcrypt.hash(tempPassword, 10);
+    await db.query('UPDATE Users SET Password = ? WHERE UserID = ?', [hashed, user.UserID]);
+    res.json({
+      success: true,
+      message: `Your temporary password has been sent to ${email}`,
+      tempPassword: tempPassword
+    });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.post('/api/reset-password', requireAuth, async (req, res) => {
+  try {
+    const { currentPassword, newPassword } = req.body;
+    const [rows] = await db.query('SELECT Password FROM Users WHERE UserID = ?', [req.session.userId]);
+    if (rows.length === 0) return res.status(404).json({ error: 'User not found' });
+    const valid = await bcrypt.compare(currentPassword, rows[0].Password);
+    if (!valid) return res.status(401).json({ error: 'Current password is incorrect' });
+    const hashed = await bcrypt.hash(newPassword, 10);
+    await db.query('UPDATE Users SET Password = ? WHERE UserID = ?', [hashed, req.session.userId]);
+    res.json({ success: true, message: 'Password updated successfully' });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+// ─── DEPARTMENT CRUD ───
+
+app.get('/api/departments', requireAuth, async (req, res) => {
+  try {
+    const [rows] = await db.query('SELECT * FROM Department ORDER BY DepartName');
+    res.json(rows);
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.get('/api/departments/:id', requireAuth, async (req, res) => {
+  try {
+    const [rows] = await db.query('SELECT * FROM Department WHERE DepartID = ?', [req.params.id]);
+    if (rows.length === 0) return res.status(404).json({ error: 'Department not found' });
+    res.json(rows[0]);
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.post('/api/departments', requireAuth, async (req, res) => {
+  try {
+    const { DepartName } = req.body;
+    const [result] = await db.query('INSERT INTO Department (DepartName) VALUES (?)', [DepartName]);
+    res.json({ success: true, id: result.insertId });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.put('/api/departments/:id', requireAuth, async (req, res) => {
+  try {
+    const { DepartName } = req.body;
+    await db.query('UPDATE Department SET DepartName = ? WHERE DepartID = ?', [DepartName, req.params.id]);
+    res.json({ success: true });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.delete('/api/departments/:id', requireAuth, async (req, res) => {
+  try {
+    await db.query('DELETE FROM Department WHERE DepartID = ?', [req.params.id]);
+    res.json({ success: true });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+// ─── POSITION CRUD ───
+
+app.get('/api/positions', requireAuth, async (req, res) => {
+  try {
+    const [rows] = await db.query('SELECT * FROM Positionemp ORDER BY PosName');
+    res.json(rows);
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.get('/api/positions/:id', requireAuth, async (req, res) => {
+  try {
+    const [rows] = await db.query('SELECT * FROM Positionemp WHERE PosID = ?', [req.params.id]);
+    if (rows.length === 0) return res.status(404).json({ error: 'Position not found' });
+    res.json(rows[0]);
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.post('/api/positions', requireAuth, async (req, res) => {
+  try {
+    const { PosName, RequiredQualification } = req.body;
+    const [result] = await db.query('INSERT INTO Positionemp (PosName, RequiredQualification) VALUES (?, ?)', [PosName, RequiredQualification]);
+    res.json({ success: true, id: result.insertId });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.put('/api/positions/:id', requireAuth, async (req, res) => {
+  try {
+    const { PosName, RequiredQualification } = req.body;
+    await db.query('UPDATE Positionemp SET PosName = ?, RequiredQualification = ? WHERE PosID = ?', [PosName, RequiredQualification, req.params.id]);
+    res.json({ success: true });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.delete('/api/positions/:id', requireAuth, async (req, res) => {
+  try {
+    await db.query('DELETE FROM Positionemp WHERE PosID = ?', [req.params.id]);
+    res.json({ success: true });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+// ─── EMPLOYEE CRUD ───
+
+app.get('/api/employees', requireAuth, async (req, res) => {
+  try {
+    const { search } = req.query;
+    let query = `
+      SELECT e.*, d.DepartName, p.PosName
+      FROM Employee e
+      LEFT JOIN Department d ON e.DepartID = d.DepartID
+      LEFT JOIN Positionemp p ON e.PosID = p.PosID
+    `;
+    let params = [];
+    if (search) {
+      query += ' WHERE e.EmpFirstName LIKE ? OR e.EmpLastName LIKE ? OR e.EmpEmail LIKE ? OR e.EmpTelephone LIKE ?';
+      const s = `%${search}%`;
+      params = [s, s, s, s];
+    }
+    query += ' ORDER BY e.EmpLastName, e.EmpFirstName';
+    const [rows] = await db.query(query, params);
+    res.json(rows);
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.get('/api/employees/:id', requireAuth, async (req, res) => {
+  try {
+    const [rows] = await db.query(`
+      SELECT e.*, d.DepartName, p.PosName
+      FROM Employee e
+      LEFT JOIN Department d ON e.DepartID = d.DepartID
+      LEFT JOIN Positionemp p ON e.PosID = p.PosID
+      WHERE e.EmpID = ?
+    `, [req.params.id]);
+    if (rows.length === 0) return res.status(404).json({ error: 'Employee not found' });
+    res.json(rows[0]);
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.post('/api/employees', requireAuth, async (req, res) => {
+  try {
+    const { EmpFirstName, EmpLastName, EmpGender, EmpDateOfBirth, EmpEmail, EmpTelephone, EmpAddress, EmpHireDate, EmpStatus, DepartID, PosID } = req.body;
+    const [result] = await db.query(
+      'INSERT INTO Employee (EmpFirstName, EmpLastName, EmpGender, EmpDateOfBirth, EmpEmail, EmpTelephone, EmpAddress, EmpHireDate, EmpStatus, DepartID, PosID) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
+      [EmpFirstName, EmpLastName, EmpGender, EmpDateOfBirth, EmpEmail, EmpTelephone, EmpAddress, EmpHireDate, EmpStatus || 'on leave', DepartID || null, PosID || null]
+    );
+    res.json({ success: true, id: result.insertId });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.put('/api/employees/:id', requireAuth, async (req, res) => {
+  try {
+    const { EmpFirstName, EmpLastName, EmpGender, EmpDateOfBirth, EmpEmail, EmpTelephone, EmpAddress, EmpHireDate, EmpStatus, DepartID, PosID } = req.body;
+    await db.query(
+      'UPDATE Employee SET EmpFirstName=?, EmpLastName=?, EmpGender=?, EmpDateOfBirth=?, EmpEmail=?, EmpTelephone=?, EmpAddress=?, EmpHireDate=?, EmpStatus=?, DepartID=?, PosID=? WHERE EmpID=?',
+      [EmpFirstName, EmpLastName, EmpGender, EmpDateOfBirth, EmpEmail, EmpTelephone, EmpAddress, EmpHireDate, EmpStatus, DepartID || null, PosID || null, req.params.id]
+    );
+    res.json({ success: true });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.delete('/api/employees/:id', requireAuth, async (req, res) => {
+  try {
+    await db.query('DELETE FROM Employee WHERE EmpID = ?', [req.params.id]);
+    res.json({ success: true });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+// ─── USERS CRUD ───
+
+app.get('/api/users', requireAuth, async (req, res) => {
+  try {
+    const [rows] = await db.query(`
+      SELECT u.UserID, u.UserName, u.EmpID, e.EmpFirstName, e.EmpLastName, e.EmpEmail
+      FROM Users u
+      JOIN Employee e ON u.EmpID = e.EmpID
+      ORDER BY u.UserName
+    `);
+    res.json(rows);
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.get('/api/users/:id', requireAuth, async (req, res) => {
+  try {
+    const [rows] = await db.query(`
+      SELECT u.UserID, u.UserName, u.EmpID, e.EmpFirstName, e.EmpLastName, e.EmpEmail
+      FROM Users u
+      JOIN Employee e ON u.EmpID = e.EmpID
+      WHERE u.UserID = ?
+    `, [req.params.id]);
+    if (rows.length === 0) return res.status(404).json({ error: 'User not found' });
+    res.json(rows[0]);
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.post('/api/users', requireAuth, async (req, res) => {
+  try {
+    const { EmpID, UserName, Password } = req.body;
+    const hashed = await bcrypt.hash(Password, 10);
+    const [result] = await db.query('INSERT INTO Users (EmpID, UserName, Password) VALUES (?, ?, ?)', [EmpID, UserName, hashed]);
+    res.json({ success: true, id: result.insertId });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.put('/api/users/:id', requireAuth, async (req, res) => {
+  try {
+    const { UserName, Password } = req.body;
+    if (Password) {
+      const hashed = await bcrypt.hash(Password, 10);
+      await db.query('UPDATE Users SET UserName = ?, Password = ? WHERE UserID = ?', [UserName, hashed, req.params.id]);
+    } else {
+      await db.query('UPDATE Users SET UserName = ? WHERE UserID = ?', [UserName, req.params.id]);
+    }
+    res.json({ success: true });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.delete('/api/users/:id', requireAuth, async (req, res) => {
+  try {
+    await db.query('DELETE FROM Users WHERE UserID = ?', [req.params.id]);
+    res.json({ success: true });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+// ─── REPORTS ───
+
+app.get('/api/reports/employees-on-leave', requireAuth, async (req, res) => {
+  try {
+    const [rows] = await db.query(`
+      SELECT e.*, d.DepartName, p.PosName
+      FROM Employee e
+      LEFT JOIN Department d ON e.DepartID = d.DepartID
+      LEFT JOIN Positionemp p ON e.PosID = p.PosID
+      WHERE e.EmpStatus = 'on leave'
+      ORDER BY d.DepartName, e.EmpLastName, e.EmpFirstName
+    `);
+    const departments = {};
+    for (const emp of rows) {
+      const dept = emp.DepartName || 'No Department';
+      if (!departments[dept]) departments[dept] = [];
+      departments[dept].push(emp);
+    }
+    res.json({
+      total: rows.length,
+      departments
+    });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.listen(PORT, () => {
+  console.log(`HRMS Backend running on port ${PORT}`);
+});