freeschema 1.0.6 → 1.0.7

package/bin/freeschema.js

@@ -6,6 +6,7 @@ const { spawnSync }    = require('child_process');
 const fs               = require('fs');
 const path             = require('path');
 const https            = require('https');
+const http             = require('http');
 const crypto           = require('crypto');
 const readline         = require('readline');
 
@@ -510,7 +511,7 @@ function waitForMySQL(container, user, pass, maxAttempts = 30) {
   return false;
 }
 
-function cmdStart() {
+async function cmdStart() {
   patchComposeFile();
   const cwd     = process.cwd();
   const missing = ['.env', '.env.frontend'].filter(f => !fs.existsSync(path.join(cwd, f)));
@@ -560,6 +561,18 @@ function cmdStart() {
   console.log('  Status: freeschema status');
   console.log('  Logs:   freeschema logs');
   console.log('  Stop:   freeschema stop');
+
+  // Auto-setup credentials if CLIENT_SECRET is missing or placeholder
+  const envAfterStart = readEnv();
+  const clientSecret  = envAfterStart.CLIENT_SECRET || '';
+  const isPlaceholder = clientSecret === '' || clientSecret === 'sk_test_placeholder';
+  if (isPlaceholder) {
+    console.log('\n─────────────────────────────────────────');
+    console.log('  CLIENT_SECRET is not configured.');
+    console.log('  Setting up admin credentials now…');
+    console.log('─────────────────────────────────────────');
+    await cmdSetupCredentials();
+  }
 }
 
 // ── other commands ────────────────────────────────────────────────────────────
@@ -701,6 +714,135 @@ function cmdDbRestore() {
   console.log('Restore complete.');
 }
 
+// ── setup-credentials ─────────────────────────────────────────────────────────
+
+function httpPost(url, body) {
+  return new Promise((resolve, reject) => {
+    const parsed  = new URL(url);
+    const payload = JSON.stringify(body);
+    const opts = {
+      hostname: parsed.hostname,
+      port:     parsed.port || (parsed.protocol === 'https:' ? 443 : 80),
+      path:     parsed.pathname,
+      method:   'POST',
+      headers:  { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) },
+    };
+    const lib = parsed.protocol === 'https:' ? https : http;
+    const req = lib.request(opts, res => {
+      let data = '';
+      res.on('data', chunk => { data += chunk; });
+      res.on('end', () => {
+        try { resolve({ status: res.statusCode, body: JSON.parse(data) }); }
+        catch { resolve({ status: res.statusCode, body: data }); }
+      });
+    });
+    req.on('error', reject);
+    req.write(payload);
+    req.end();
+  });
+}
+
+function httpPostWithToken(url, token) {
+  return new Promise((resolve, reject) => {
+    const parsed = new URL(url);
+    const opts = {
+      hostname: parsed.hostname,
+      port:     parsed.port || (parsed.protocol === 'https:' ? 443 : 80),
+      path:     parsed.pathname,
+      method:   'POST',
+      headers:  { 'Authorization': `Bearer ${token}`, 'Content-Length': 0 },
+    };
+    const lib = parsed.protocol === 'https:' ? https : http;
+    const req = lib.request(opts, res => {
+      let data = '';
+      res.on('data', chunk => { data += chunk; });
+      res.on('end', () => {
+        try { resolve({ status: res.statusCode, body: JSON.parse(data) }); }
+        catch { resolve({ status: res.statusCode, body: data }); }
+      });
+    });
+    req.on('error', reject);
+    req.end();
+  });
+}
+
+async function cmdSetupCredentials() {
+  const envPath = path.join(process.cwd(), '.env');
+  if (!fs.existsSync(envPath)) die('.env not found. Run `freeschema init` first.');
+
+  const env      = readEnv();
+  const wicoPort = env.WICO_PORT   || '7071';
+  const baseUrl  = `http://localhost:${wicoPort}/api`;
+
+  console.log(`\nSetting up CLIENT_ID and CLIENT_SECRET`);
+  console.log(`Using WICO server at ${baseUrl}\n`);
+
+  // Step 1: login
+  const email    = await prompt('Admin email');
+  const password = await promptSecret('Admin password');
+  if (!email || !password) die('Email and password are required.');
+
+  process.stdout.write('\n[1/3] Logging in… ');
+  let loginRes;
+  try {
+    loginRes = await httpPost(`${baseUrl}/auth/login`, { email, password, application: 'boomconsole' });
+  } catch (e) {
+    die(`Could not reach WICO server at ${baseUrl}/auth/login\nIs FreeSchema running? Try: freeschema start`);
+  }
+
+  if (loginRes.status !== 200 || !loginRes.body) {
+    die(`Login failed (HTTP ${loginRes.status}): ${JSON.stringify(loginRes.body)}`);
+  }
+
+  const token = loginRes.body.token || loginRes.body.access_token || (loginRes.body.data && loginRes.body.data.token);
+  if (!token) die(`No token in login response: ${JSON.stringify(loginRes.body)}`);
+
+  // Decode entity concept ID from JWT upn claim
+  let entityId;
+  try {
+    const payload = JSON.parse(Buffer.from(token.split('.')[1], 'base64url').toString());
+    entityId = payload.upn || payload.sub;
+  } catch {
+    die('Could not decode JWT token.');
+  }
+  if (!entityId) die('Could not determine entity ID from JWT.');
+  console.log(`done (entity ${entityId})`);
+
+  // Step 2: generate client-secret
+  process.stdout.write('[2/3] Generating client-secret… ');
+  let secretRes;
+  try {
+    secretRes = await httpPostWithToken(`${baseUrl}/client-secret`, token);
+  } catch (e) {
+    die(`Request to /api/client-secret failed: ${e.message}`);
+  }
+
+  if (secretRes.status !== 200 || !secretRes.body) {
+    die(`client-secret failed (HTTP ${secretRes.status}): ${JSON.stringify(secretRes.body)}`);
+  }
+
+  const secret = secretRes.body.message || secretRes.body.data || secretRes.body;
+  if (!secret || typeof secret !== 'string') die(`Empty secret in response: ${JSON.stringify(secretRes.body)}`);
+  console.log('done');
+
+  // Step 3: update .env
+  process.stdout.write('[3/3] Updating .env… ');
+  setEnvVar(envPath, 'CLIENT_ID',     String(entityId));
+  setEnvVar(envPath, 'CLIENT_SECRET', secret);
+  console.log('done');
+
+  console.log(`
+─────────────────────────────────────────
+  Credentials saved to .env:
+    CLIENT_ID     = ${entityId}
+    CLIENT_SECRET = ${secret}
+─────────────────────────────────────────
+
+  Restart the node-server to apply:
+  freeschema restart node-server
+`);
+}
+
 // ── help ──────────────────────────────────────────────────────────────────────
 
 function cmdHelp() {
@@ -725,6 +867,8 @@ Commands:
   update                      Update CLI + pull latest images and restart
   down [-v]                   Remove containers (-v also removes data volumes)
 
+  setup-credentials           Login as admin, generate CLIENT_SECRET, save to .env
+
   db seed --url <url>         Download SQL seed file into seed-db/
   db seed --file <path>       Copy local SQL file into seed-db/
   db backup [file]            Dump database to a .sql file
@@ -746,7 +890,7 @@ Examples:
 
 switch (command) {
   case 'init':    cmdInit().catch(e => { console.error(e); process.exit(1); }); break;
-  case 'start':   cmdStart();   break;
+  case 'start':   cmdStart().catch(e => { console.error(e); process.exit(1); }); break;
   case 'stop':    cmdStop();    break;
   case 'restart': cmdRestart(); break;
   case 'status':  cmdStatus();  break;
@@ -754,7 +898,8 @@ switch (command) {
   case 'pull':    cmdPull();    break;
   case 'update':  cmdUpdate();  break;
   case 'down':    cmdDown();    break;
-  case 'db':      cmdDb();      break;
+  case 'db':                cmdDb();      break;
+  case 'setup-credentials': cmdSetupCredentials().catch(e => { console.error(e); process.exit(1); }); break;
   case '--version': case '-v': console.log(VERSION); break;
   case '--help': case '-h': case undefined: cmdHelp(); break;
   default:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "freeschema",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "description": "FreeSchema — self-hosted deployment CLI",
   "keywords": [
     "freeschema",

package/templates/.env.example

@@ -99,9 +99,9 @@ LINKEDIN_SECRET=""
 # ====================================
 # PAYMENT GATEWAY (STRIPE)
 # ====================================
-STRIPE_SECRET=""
+STRIPE_SECRET="sk_test_placeholder"
 WEBHOOK_KEY=""
-STRIPE_TEST_SECRET=""
+STRIPE_TEST_SECRET="sk_test_placeholder"
 WEBHOOK_TEST_KEY=""
 
 # ====================================