create-tigra 1.0.7 → 2.0.0

package/template/server/prisma/schema.prisma

@@ -1,93 +1,77 @@
-// ==============================================
-// Prisma Schema for {{PROJECT_DISPLAY_NAME}}
-// ==============================================
-// Database: MySQL 8.0+
-// Naming Convention:
-//   - Models: PascalCase (User, Resource)
-//   - Tables/Columns: snake_case (users, created_at)
-// ==============================================
-
-generator client {
-  provider      = "prisma-client-js"
-  binaryTargets = ["native"]
-}
-
-datasource db {
-  provider = "mysql"
-  url      = env("DATABASE_URL")
-}
-
-// ==============================================
-// ENUMS
-// ==============================================
-
-enum UserRole {
-  USER
-  ADMIN
-}
-
-// ==============================================
-// USER MANAGEMENT
-// ==============================================
-
-model User {
-  id            String    @id @default(uuid())
-  email         String    @unique
-  password      String
-  name          String?
-  role          UserRole  @default(USER)
-  emailVerified Boolean   @default(false) @map("email_verified")
-  createdAt     DateTime  @default(now()) @map("created_at")
-  updatedAt     DateTime  @updatedAt @map("updated_at")
-
-  // Relations
-  resources Resource[]
-  sessions  Session[]
-
-  // Indexes
-  @@index([email])
-  @@map("users")
-}
-
-// ==============================================
-// AUTHENTICATION SESSIONS
-// ==============================================
-
-model Session {
-  id           String   @id @default(uuid())
-  userId       String   @map("user_id")
-  refreshToken String   @map("refresh_token") @db.Text
-  expiresAt    DateTime @map("expires_at")
-  createdAt    DateTime @default(now()) @map("created_at")
-
-  // Relations
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  // Indexes
-  @@index([userId])
-  @@map("sessions")
-}
-
-// ==============================================
-// RESOURCES (Example CRUD Entity)
-// ==============================================
-
-model Resource {
-  id        String   @id @default(uuid())
-  ownerId   String   @map("owner_id")
-  title     String
-  summary   String?  @db.Text
-  price     Float
-  status    String   @default("active")
-  createdAt DateTime @default(now()) @map("created_at")
-  updatedAt DateTime @updatedAt @map("updated_at")
-
-  // Relations
-  owner User @relation(fields: [ownerId], references: [id], onDelete: Cascade)
-
-  // Indexes
-  @@index([ownerId])
-  @@index([status])
-  @@index([createdAt])
-  @@map("resources")
-}
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "mysql"
+  url      = env("DATABASE_URL")
+}
+
+enum UserRole {
+  USER
+  ADMIN
+}
+
+model User {
+  id            String    @id @default(uuid())
+  email         String    @unique
+  password      String
+  firstName     String
+  lastName      String
+  avatarUrl     String?   // SEO-friendly path: /uploads/avatars/{userId}/{firstName-lastName}-avatar.webp
+  role          UserRole  @default(USER)
+  isActive      Boolean   @default(true)
+  deletedAt     DateTime?
+
+  // Account lockout
+  failedLoginAttempts Int       @default(0)
+  lockedUntil         DateTime?
+
+  createdAt     DateTime  @default(now())
+  updatedAt     DateTime  @updatedAt
+
+  refreshTokens RefreshToken[]
+  sessions      Session[]
+
+  // Performance indexes for high-traffic scenarios (10K-100K users/day)
+  @@index([role])           // For role-based authorization queries
+  @@index([isActive])       // For filtering active/inactive users
+  @@index([deletedAt])      // For soft delete filtering
+  @@index([email, isActive]) // Compound index for login queries
+  @@map("users")
+}
+
+model RefreshToken {
+  id        String   @id @default(uuid())
+  token     String   @unique @db.VarChar(500)
+  userId    String
+  expiresAt DateTime
+  createdAt DateTime @default(now())
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  // Performance indexes for token operations and cleanup
+  @@index([userId])
+  @@index([token])
+  @@index([userId, expiresAt]) // Compound index for efficient token cleanup queries
+  @@index([expiresAt])         // For expired token cleanup cron jobs
+  @@map("refresh_tokens")
+}
+
+model Session {
+  id           String    @id @default(uuid())
+  userId       String
+  deviceInfo   String?   @db.VarChar(500) // User agent, device type
+  ipAddress    String?   @db.VarChar(45)  // IPv4 or IPv6
+  lastActiveAt DateTime  @default(now())
+  expiresAt    DateTime
+  createdAt    DateTime  @default(now())
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  // Performance indexes for session queries
+  @@index([userId])
+  @@index([userId, expiresAt])
+  @@index([expiresAt])         // For expired session cleanup
+  @@map("sessions")
+}

package/template/server/prisma/seed.ts

@@ -1,142 +1,46 @@
-/**
- * Database Seed Script
- * 
- * Seeds the database with initial data including admin user.
- * Admin credentials can be configured via environment variables.
- * 
- * Usage:
- *   npm run prisma:seed
- * 
- * Environment Variables:
- *   ADMIN_EMAIL - Admin email (default: admin@example.com)
- *   ADMIN_PASSWORD - Admin password (default: Admin123!)
- */
-
-import { PrismaClient } from '@prisma/client';
-import bcrypt from 'bcryptjs';
-import logger from '../src/libs/logger';
-
-const prisma = new PrismaClient();
-
-/**
- * Password hashing rounds (must match auth.service.ts)
- */
-const BCRYPT_ROUNDS = 10;
-
-/**
- * Hash a password using bcrypt
- */
-async function hashPassword(password: string): Promise<string> {
-    return bcrypt.hash(password, BCRYPT_ROUNDS);
-}
-
-/**
- * Seed admin user
- */
-async function seedAdminUser() {
-    const adminEmail = 'admin@example.com';
-    const adminPassword = 'Admin123!';
-
-    // Check if admin already exists
-    const existingAdmin = await prisma.user.findUnique({
-        where: { email: adminEmail },
-    });
-
-    if (existingAdmin) {
-        logger.info({ email: adminEmail }, 'Admin user already exists');
-        return existingAdmin;
-    }
-
-    // Create admin user
-    const hashedPassword = await hashPassword(adminPassword);
-
-    const admin = await prisma.user.create({
-        data: {
-            email: adminEmail,
-            password: hashedPassword,
-            role: 'ADMIN',
-            emailVerified: true,
-        },
-    });
-
-    logger.info({ id: admin.id, email: admin.email }, 'Admin user created');
-    return admin;
-}
-
-/**
- * Seed regular user
- */
-async function seedRegularUser() {
-    const userEmail = 'user@example.com';
-    const userPassword = 'User123!';
-
-    // Check if user already exists
-    const existingUser = await prisma.user.findUnique({
-        where: { email: userEmail },
-    });
-
-    if (existingUser) {
-        logger.info({ email: userEmail }, 'Regular user already exists');
-        return existingUser;
-    }
-
-    // Create regular user
-    const hashedPassword = await hashPassword(userPassword);
-
-    const user = await prisma.user.create({
-        data: {
-            email: userEmail,
-            password: hashedPassword,
-            role: 'USER',
-            emailVerified: true,
-        },
-    });
-
-    logger.info({ id: user.id, email: user.email }, 'Regular user created');
-    return user;
-}
-
-/**
- * Main seed function
- */
-async function main() {
-    logger.info('Starting database seed...');
-
-    // Seed admin user
-    const admin = await seedAdminUser();
-
-    // Seed regular user
-    const user = await seedRegularUser();
-
-    // Summary
-    console.log('');
-    console.log('Database seeded successfully!');
-    console.log('');
-    console.log('═══════════════════════════════════════════════════════════');
-    console.log('LOGIN CREDENTIALS (Save these!)');
-    console.log('═══════════════════════════════════════════════════════════');
-    console.log('');
-    console.log('ADMIN:');
-    console.log('  Email:    admin@example.com');
-    console.log('  Password: Admin123!');
-    console.log('  Role:     ADMIN');
-    console.log('');
-    console.log('USER:');
-    console.log('  Email:    user@example.com');
-    console.log('  Password: User123!');
-    console.log('  Role:     USER');
-    console.log('');
-    console.log('═══════════════════════════════════════════════════════════');
-    console.log('');
-
-    logger.info('Database seed completed');
-}
-
-main()
-    .catch((e) => {
-        logger.error(e, 'Seed failed');
-        process.exit(1);
-    })
-    .finally(async () => {
-        await prisma.$disconnect();
-    });
+import { PrismaClient } from '@prisma/client';
+import argon2 from 'argon2';
+
+const prisma = new PrismaClient();
+
+async function main(): Promise<void> {
+  const adminPassword = await argon2.hash('Admin123!');
+  const userPassword = await argon2.hash('User123!');
+
+  const admin = await prisma.user.upsert({
+    where: { email: 'admin@example.com' },
+    update: {},
+    create: {
+      email: 'admin@example.com',
+      password: adminPassword,
+      firstName: 'Admin',
+      lastName: 'User',
+      role: 'ADMIN',
+    },
+  });
+
+  const user = await prisma.user.upsert({
+    where: { email: 'user@example.com' },
+    update: {},
+    create: {
+      email: 'user@example.com',
+      password: userPassword,
+      firstName: 'Test',
+      lastName: 'User',
+      role: 'USER',
+    },
+  });
+
+  // eslint-disable-next-line no-console
+  console.log('Seeded users:', { admin: admin.email, user: user.email });
+}
+
+main()
+  .catch((error) => {
+    // eslint-disable-next-line no-console
+    console.error('Seed failed:', error);
+    process.exit(1);
+  })
+  .finally(async () => {
+    await prisma.$disconnect();
+  });

package/template/server/scripts/flush-redis.ts

@@ -0,0 +1,41 @@
+import { Redis } from 'ioredis';
+import { config } from 'dotenv';
+
+// Load environment variables
+config();
+
+const REDIS_URL = process.env.REDIS_URL || 'redis://localhost:6379';
+
+async function flushRateLimits(): Promise<void> {
+  console.log('Connecting to Redis...');
+  const redis = new Redis(REDIS_URL);
+
+  try {
+    // Find all rate limit keys (Fastify rate-limit uses 'fastify-rate-limit:' prefix by default)
+    const rateLimitKeys = await redis.keys('fastify-rate-limit:*');
+
+    if (rateLimitKeys.length === 0) {
+      console.log('No rate limit keys found. Redis is clean!');
+      return;
+    }
+
+    console.log(`Found ${rateLimitKeys.length} rate limit keys`);
+
+    // Delete all rate limit keys
+    const result = await redis.del(...rateLimitKeys);
+    console.log(`Successfully deleted ${result} rate limit keys`);
+    console.log('Rate limits have been reset. You can continue testing!');
+  } catch (error) {
+    console.error('Error flushing rate limits:', error);
+    process.exit(1);
+  } finally {
+    await redis.quit();
+    console.log('Disconnected from Redis');
+  }
+}
+
+// Run the script
+flushRateLimits().catch((error) => {
+  console.error('Fatal error:', error);
+  process.exit(1);
+});