lapeeh 1.0.11 → 1.0.13

package/dist/src/modules/Auth/auth.controller.js

@@ -0,0 +1,427 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ACCESS_TOKEN_EXPIRES_IN_SECONDS = void 0;
+exports.register = register;
+exports.login = login;
+exports.me = me;
+exports.logout = logout;
+exports.refreshToken = refreshToken;
+exports.updateAvatar = updateAvatar;
+exports.updatePassword = updatePassword;
+exports.updateProfile = updateProfile;
+const bcryptjs_1 = __importDefault(require("bcryptjs"));
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const uuid_1 = require("uuid");
+const response_1 = require("../../../lib/utils/response");
+const validator_1 = require("../../../lib/utils/validator");
+const serializer_1 = require("../../../lib/core/serializer");
+const store_1 = require("../../../lib/core/store");
+const redis_1 = require("../../../lib/core/redis");
+exports.ACCESS_TOKEN_EXPIRES_IN_SECONDS = 7 * 24 * 60 * 60;
+// --- Serializers ---
+const registerSchema = {
+    type: "object",
+    properties: {
+        id: { type: "string" },
+        email: { type: "string" },
+        name: { type: "string" },
+        role: { type: "string" },
+    },
+};
+const loginSchema = {
+    type: "object",
+    properties: {
+        token: { type: "string" },
+        refreshToken: { type: "string" },
+        expiresIn: { type: "integer" },
+        expiresAt: { type: "string" },
+        name: { type: "string" },
+        role: { type: "string" },
+    },
+};
+const userProfileSchema = {
+    type: "object",
+    properties: {
+        id: { type: "string" },
+        name: { type: "string" },
+        email: { type: "string" },
+        role: { type: "string" },
+        avatar: { type: "string", nullable: true },
+        avatar_url: { type: "string", nullable: true },
+        email_verified_at: { type: "string", format: "date-time", nullable: true },
+        created_at: { type: "string", format: "date-time", nullable: true },
+        updated_at: { type: "string", format: "date-time", nullable: true },
+    },
+};
+const refreshTokenSchema = {
+    type: "object",
+    properties: {
+        token: { type: "string" },
+        expiresIn: { type: "integer" },
+        expiresAt: { type: "string" },
+        name: { type: "string" },
+        role: { type: "string" },
+    },
+};
+const registerSerializer = (0, serializer_1.getSerializer)("auth-register", (0, serializer_1.createResponseSchema)(registerSchema));
+const loginSerializer = (0, serializer_1.getSerializer)("auth-login", (0, serializer_1.createResponseSchema)(loginSchema));
+const userProfileSerializer = (0, serializer_1.getSerializer)("auth-profile", (0, serializer_1.createResponseSchema)(userProfileSchema));
+const refreshTokenSerializer = (0, serializer_1.getSerializer)("auth-refresh", (0, serializer_1.createResponseSchema)(refreshTokenSchema));
+const voidSerializer = (0, serializer_1.getSerializer)("void", (0, serializer_1.createResponseSchema)({ type: "null" }));
+// --- Controllers ---
+async function register(req, res) {
+    const validator = validator_1.Validator.make(req.body || {}, {
+        email: "required|email|unique:users,email",
+        name: "required|min:1",
+        password: "required|min:4",
+        confirmPassword: "required|min:4|same:password",
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { email, name, password } = await validator.validated();
+    // Manual unique check (In-Memory)
+    if (store_1.users.find((u) => u.email === email)) {
+        (0, response_1.sendError)(res, 422, "Validation error", { email: "Email already taken" });
+        return;
+    }
+    const hash = await bcryptjs_1.default.hash(password, 10);
+    const newUser = {
+        id: (store_1.users.length + 1).toString(), // Simple ID generation
+        email,
+        name,
+        password: hash,
+        uuid: (0, uuid_1.v4)(),
+        created_at: new Date(),
+        updated_at: new Date(),
+        avatar: null,
+        avatar_url: null,
+        email_verified_at: null,
+        remember_token: null,
+    };
+    store_1.users.push(newUser);
+    const defaultRole = store_1.roles.find((r) => r.slug === "user");
+    if (defaultRole) {
+        store_1.user_roles.push({
+            id: (store_1.user_roles.length + 1).toString(),
+            user_id: newUser.id,
+            role_id: defaultRole.id,
+            created_at: new Date(),
+        });
+    }
+    (0, store_1.saveStore)();
+    (0, response_1.sendFastSuccess)(res, 201, registerSerializer, {
+        status: "success",
+        message: "Registration successful. You can now login.",
+        data: {
+            id: newUser.id.toString(),
+            email: newUser.email,
+            name: newUser.name,
+            role: defaultRole ? defaultRole.slug : "user",
+        },
+    });
+}
+async function login(req, res) {
+    const validator = validator_1.Validator.make(req.body || {}, {
+        email: "required|email",
+        password: "required|min:4",
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { email, password } = await validator.validated();
+    const user = store_1.users.find((u) => u.email === email);
+    if (!user) {
+        (0, response_1.sendError)(res, 401, "Email not registered", {
+            field: "email",
+            message: "Email is not registered, please register first",
+        });
+        return;
+    }
+    const ok = await bcryptjs_1.default.compare(password, user.password || "");
+    if (!ok) {
+        (0, response_1.sendError)(res, 401, "Invalid credentials", {
+            field: "password",
+            message: "The password you entered is incorrect",
+        });
+        return;
+    }
+    const secret = process.env.JWT_SECRET;
+    if (!secret) {
+        (0, response_1.sendError)(res, 500, "Server misconfigured");
+        return;
+    }
+    // Find user roles
+    const userRoleLinks = store_1.user_roles.filter((ur) => ur.user_id === user.id);
+    const userRoleObjects = userRoleLinks
+        .map((ur) => store_1.roles.find((r) => r.id === ur.role_id))
+        .filter((r) => r);
+    const primaryUserRole = userRoleObjects.length > 0 && userRoleObjects[0]
+        ? userRoleObjects[0].slug
+        : "user";
+    const accessExpiresInSeconds = exports.ACCESS_TOKEN_EXPIRES_IN_SECONDS;
+    const accessExpiresAt = new Date(Date.now() + accessExpiresInSeconds * 1000).toISOString();
+    const token = jsonwebtoken_1.default.sign({ userId: user.id.toString(), role: primaryUserRole }, secret, { expiresIn: accessExpiresInSeconds });
+    const refreshExpiresInSeconds = 30 * 24 * 60 * 60;
+    const refreshToken = jsonwebtoken_1.default.sign({
+        userId: user.id.toString(),
+        role: primaryUserRole,
+        tokenType: "refresh",
+    }, secret, { expiresIn: refreshExpiresInSeconds });
+    (0, response_1.sendFastSuccess)(res, 200, loginSerializer, {
+        status: "success",
+        message: "Login successful",
+        data: {
+            token,
+            refreshToken,
+            expiresIn: accessExpiresInSeconds,
+            expiresAt: accessExpiresAt,
+            name: user.name,
+            role: primaryUserRole,
+        },
+    });
+}
+async function me(req, res) {
+    const payload = req.user;
+    if (!payload || !payload.userId) {
+        (0, response_1.sendError)(res, 401, "Unauthorized");
+        return;
+    }
+    // Try to get from Redis
+    const cachedUser = await redis_1.redis.get(`user:${payload.userId}`);
+    if (cachedUser) {
+        const user = JSON.parse(cachedUser);
+        (0, response_1.sendFastSuccess)(res, 200, userProfileSerializer, {
+            status: "success",
+            message: "User profile (cached)",
+            data: user,
+        });
+        return;
+    }
+    const user = store_1.users.find((u) => u.id === payload.userId);
+    if (!user) {
+        (0, response_1.sendError)(res, 404, "User not found");
+        return;
+    }
+    // Find user roles
+    const userRoleLinks = store_1.user_roles.filter((ur) => ur.user_id === user.id);
+    const userRoleObjects = userRoleLinks
+        .map((ur) => store_1.roles.find((r) => r.id === ur.role_id))
+        .filter((r) => r);
+    const primaryRoleSlug = userRoleObjects.length > 0 ? userRoleObjects[0]?.slug : "user";
+    const { password, ...rest } = user;
+    const userData = {
+        ...rest,
+        id: user.id.toString(),
+        role: primaryRoleSlug,
+    };
+    // Cache in Redis for 1 hour
+    await redis_1.redis.set(`user:${payload.userId}`, JSON.stringify(userData), "EX", 3600);
+    (0, response_1.sendFastSuccess)(res, 200, userProfileSerializer, {
+        status: "success",
+        message: "User profile",
+        data: userData,
+    });
+}
+async function logout(_req, res) {
+    // In a stateless JWT setup, logout is client-side (delete token).
+    // If using a whitelist/blacklist in Redis, invalidate the token here.
+    // For now, just return success.
+    (0, response_1.sendFastSuccess)(res, 200, voidSerializer, {
+        status: "success",
+        message: "Logout successful",
+        data: null,
+    });
+}
+async function refreshToken(req, res) {
+    const validator = validator_1.Validator.make(req.body || {}, {
+        refreshToken: "required|min:1",
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const secret = process.env.JWT_SECRET;
+    if (!secret) {
+        (0, response_1.sendError)(res, 500, "Server misconfigured");
+        return;
+    }
+    try {
+        const validatedData = await validator.validated();
+        const decoded = jsonwebtoken_1.default.verify(validatedData.refreshToken, secret);
+        if (decoded.tokenType !== "refresh") {
+            (0, response_1.sendError)(res, 401, "Invalid refresh token");
+            return;
+        }
+        const user = store_1.users.find((u) => u.id === decoded.userId);
+        if (!user) {
+            (0, response_1.sendError)(res, 401, "Invalid refresh token");
+            return;
+        }
+        // Find user roles
+        const userRoleLinks = store_1.user_roles.filter((ur) => ur.user_id === user.id);
+        const userRoleObjects = userRoleLinks
+            .map((ur) => store_1.roles.find((r) => r.id === ur.role_id))
+            .filter((r) => r);
+        const primaryUserRole = userRoleObjects.length > 0 && userRoleObjects[0]
+            ? userRoleObjects[0].slug
+            : "user";
+        const accessExpiresInSeconds = exports.ACCESS_TOKEN_EXPIRES_IN_SECONDS;
+        const accessExpiresAt = new Date(Date.now() + accessExpiresInSeconds * 1000).toISOString();
+        const token = jsonwebtoken_1.default.sign({ userId: user.id.toString(), role: primaryUserRole }, secret, { expiresIn: accessExpiresInSeconds });
+        (0, response_1.sendFastSuccess)(res, 200, refreshTokenSerializer, {
+            status: "success",
+            message: "Token refreshed",
+            data: {
+                token,
+                expiresIn: accessExpiresInSeconds,
+                expiresAt: accessExpiresAt,
+                name: user.name,
+                role: primaryUserRole,
+            },
+        });
+    }
+    catch {
+        (0, response_1.sendError)(res, 401, "Invalid refresh token");
+    }
+}
+async function updateAvatar(req, res) {
+    const payload = req.user;
+    if (!payload || !payload.userId) {
+        (0, response_1.sendError)(res, 401, "Unauthorized");
+        return;
+    }
+    const data = {
+        avatar: req.file,
+    };
+    const validator = validator_1.Validator.make(data, {
+        avatar: "nullable|image|mimes:jpeg,png,jpg,gif|max:2048",
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { avatar: file } = await validator.validated();
+    if (!file) {
+        (0, response_1.sendError)(res, 400, "Avatar file is required");
+        return;
+    }
+    const userId = payload.userId;
+    const avatar = file.filename;
+    const avatar_url = process.env.AVATAR_BASE_URL || `/uploads/avatars/${file.filename}`;
+    const userIndex = store_1.users.findIndex((u) => u.id === userId);
+    if (userIndex === -1) {
+        (0, response_1.sendError)(res, 404, "User not found");
+        return;
+    }
+    store_1.users[userIndex] = {
+        ...store_1.users[userIndex],
+        avatar,
+        avatar_url,
+        updated_at: new Date(),
+    };
+    const updated = store_1.users[userIndex];
+    const { password, ...rest } = updated;
+    (0, response_1.sendFastSuccess)(res, 200, userProfileSerializer, {
+        status: "success",
+        message: "Avatar updated successfully",
+        data: {
+            ...rest,
+            id: updated.id.toString(),
+            role: payload.role, // Use role from JWT payload as it shouldn't change here
+        },
+    });
+}
+async function updatePassword(req, res) {
+    const payload = req.user;
+    if (!payload || !payload.userId) {
+        (0, response_1.sendError)(res, 401, "Unauthorized");
+        return;
+    }
+    const validator = validator_1.Validator.make(req.body || {}, {
+        currentPassword: "required|min:4",
+        newPassword: "required|min:4",
+        confirmPassword: "required|min:4|same:newPassword",
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { currentPassword, newPassword } = await validator.validated();
+    const userIndex = store_1.users.findIndex((u) => u.id === payload.userId);
+    if (userIndex === -1) {
+        (0, response_1.sendError)(res, 404, "User not found");
+        return;
+    }
+    const user = store_1.users[userIndex];
+    const ok = await bcryptjs_1.default.compare(currentPassword, user.password || "");
+    if (!ok) {
+        (0, response_1.sendError)(res, 401, "Invalid credentials", {
+            field: "currentPassword",
+            message: "Current password is incorrect",
+        });
+        return;
+    }
+    const hash = await bcryptjs_1.default.hash(newPassword, 10);
+    store_1.users[userIndex] = {
+        ...user,
+        password: hash,
+        updated_at: new Date(),
+    };
+    (0, response_1.sendFastSuccess)(res, 200, voidSerializer, {
+        status: "success",
+        message: "Password updated successfully",
+        data: null,
+    });
+}
+async function updateProfile(req, res) {
+    const payload = req.user;
+    if (!payload || !payload.userId) {
+        (0, response_1.sendError)(res, 401, "Unauthorized");
+        return;
+    }
+    const validator = validator_1.Validator.make(req.body || {}, {
+        name: "required|min:1",
+        email: `required|email|unique:users,email,${payload.userId}`,
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { name, email } = await validator.validated();
+    const userId = payload.userId;
+    // Manual unique check (In-Memory)
+    if (store_1.users.find((u) => u.email === email && u.id !== userId)) {
+        (0, response_1.sendError)(res, 422, "Validation error", { email: "Email already taken" });
+        return;
+    }
+    const userIndex = store_1.users.findIndex((u) => u.id === userId);
+    if (userIndex === -1) {
+        (0, response_1.sendError)(res, 404, "User not found");
+        return;
+    }
+    store_1.users[userIndex] = {
+        ...store_1.users[userIndex],
+        name,
+        email,
+        updated_at: new Date(),
+    };
+    (0, store_1.saveStore)();
+    await redis_1.redis.del(`user:${userId}`);
+    const updated = store_1.users[userIndex];
+    const { password, ...rest } = updated;
+    (0, response_1.sendFastSuccess)(res, 200, userProfileSerializer, {
+        status: "success",
+        message: "Profile updated successfully",
+        data: {
+            ...rest,
+            id: updated.id.toString(),
+            role: payload.role, // Use role from JWT payload
+        },
+    });
+}

package/dist/src/modules/Auth/auth.routes.d.ts

@@ -0,0 +1,2 @@
+export declare const authRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=auth.routes.d.ts.map

package/dist/src/modules/Auth/auth.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.routes.d.ts","sourceRoot":"","sources":["../../../../src/modules/Auth/auth.routes.ts"],"names":[],"mappings":"AAoDA,eAAO,MAAM,UAAU,4CAAW,CAAC"}

package/dist/src/modules/Auth/auth.routes.js

@@ -0,0 +1,45 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authRouter = void 0;
+const express_1 = require("express");
+const express_rate_limit_1 = __importDefault(require("express-rate-limit"));
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const multer = require("multer");
+const path_1 = __importDefault(require("path"));
+const fs_1 = __importDefault(require("fs"));
+const auth_controller_1 = require("./auth.controller");
+const auth_1 = require("../../../lib/middleware/auth");
+const authLimiter = (0, express_rate_limit_1.default)({
+    windowMs: 15 * 60 * 1000,
+    max: 50,
+    standardHeaders: true,
+    legacyHeaders: false,
+});
+const avatarUploadDir = process.env.AVATAR_UPLOAD_DIR || "uploads/avatars";
+if (!fs_1.default.existsSync(avatarUploadDir)) {
+    fs_1.default.mkdirSync(avatarUploadDir, { recursive: true });
+}
+const storage = multer.diskStorage({
+    destination(_req, _file, cb) {
+        cb(null, avatarUploadDir);
+    },
+    filename(_req, file, cb) {
+        const ext = path_1.default.extname(file.originalname);
+        const base = path_1.default.basename(file.originalname, ext);
+        const unique = Date.now() + "-" + Math.round(Math.random() * 1e9);
+        cb(null, base + "-" + unique + ext);
+    },
+});
+const uploadAvatar = multer({ storage });
+exports.authRouter = (0, express_1.Router)();
+exports.authRouter.post("/register", authLimiter, auth_controller_1.register);
+exports.authRouter.post("/login", authLimiter, auth_controller_1.login);
+exports.authRouter.get("/me", auth_1.requireAuth, auth_controller_1.me);
+exports.authRouter.post("/logout", auth_1.requireAuth, auth_controller_1.logout);
+exports.authRouter.post("/refresh", authLimiter, auth_controller_1.refreshToken);
+exports.authRouter.put("/password", auth_1.requireAuth, auth_controller_1.updatePassword);
+exports.authRouter.put("/profile", auth_1.requireAuth, auth_controller_1.updateProfile);
+exports.authRouter.post("/avatar", auth_1.requireAuth, uploadAvatar.single("avatar"), auth_controller_1.updateAvatar);

package/dist/src/modules/Auth/auth.service.d.ts

@@ -0,0 +1,3 @@
+export declare class AuthService {
+}
+//# sourceMappingURL=auth.service.d.ts.map

package/dist/src/modules/Auth/auth.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../../../src/modules/Auth/auth.service.ts"],"names":[],"mappings":"AAGA,qBAAa,WAAW;CAEvB"}

package/dist/src/modules/Auth/auth.service.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthService = void 0;
+// Placeholder for Auth Service
+// You can move business logic from controller to here in the future
+class AuthService {
+}
+exports.AuthService = AuthService;

package/dist/src/modules/Rbac/rbac.controller.d.ts

@@ -0,0 +1,16 @@
+import { Request, Response } from "express";
+export declare function createRole(req: Request, res: Response): Promise<void>;
+export declare function listRoles(_req: Request, res: Response): Promise<void>;
+export declare function updateRole(req: Request, res: Response): Promise<void>;
+export declare function deleteRole(req: Request, res: Response): Promise<void>;
+export declare function createPermission(req: Request, res: Response): Promise<void>;
+export declare function listPermissions(_req: Request, res: Response): Promise<void>;
+export declare function updatePermission(req: Request, res: Response): Promise<void>;
+export declare function deletePermission(req: Request, res: Response): Promise<void>;
+export declare function assignRoleToUser(req: Request, res: Response): Promise<void>;
+export declare function removeRoleFromUser(req: Request, res: Response): Promise<void>;
+export declare function assignPermissionToRole(req: Request, res: Response): Promise<void>;
+export declare function removePermissionFromRole(req: Request, res: Response): Promise<void>;
+export declare function assignPermissionToUser(req: Request, res: Response): Promise<void>;
+export declare function removePermissionFromUser(req: Request, res: Response): Promise<void>;
+//# sourceMappingURL=rbac.controller.d.ts.map

package/dist/src/modules/Rbac/rbac.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.controller.d.ts","sourceRoot":"","sources":["../../../../src/modules/Rbac/rbac.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAkE5C,wBAAsB,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBAoC3D;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBAO3D;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBA+C3D;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBA+B3D;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBAmCjE;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBAUjE;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBA+CjE;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBA+BjE;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBAyCjE;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBAuBnE;AAED,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBAyCvE;AAED,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBA0BzE;AAED,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBAwCvE;AAED,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,iBAyBzE"}