my-crud-lib 2.0.0 → 2.1.0

package/docs/migration-v2.md

@@ -0,0 +1,131 @@
+# Migrating to v2
+
+Version 2 changed the package from a Prisma-coupled helper into an adapter-driven library. Existing apps should update route setup and imports before upgrading.
+
+## What changed
+
+- Auth no longer creates its own Prisma dependency. Pass a `userRepo` into auth or library factories.
+- `createLibrary()` now separates route config from dependencies.
+- Self-registration now creates `USER` accounts by default.
+- Public imports should use documented package entry points only.
+
+## Auth router
+
+Before v2, apps could mount auth without passing persistence explicitly:
+
+```ts
+import { createAuthRouter } from "my-crud-lib";
+
+app.use("/auth", createAuthRouter());
+```
+
+In v2, create or import a repository adapter and pass it to the router:
+
+```ts
+import { PrismaClient } from "@prisma/client";
+import { createAuthRouter } from "my-crud-lib/auth";
+import { makePrismaUserRepo } from "my-crud-lib/adapter-prisma";
+
+const prisma = new PrismaClient();
+const userRepo = makePrismaUserRepo(prisma);
+
+app.use("/auth", createAuthRouter({ userRepo }));
+```
+
+## Full library mount
+
+Before:
+
+```ts
+import { createLibrary } from "my-crud-lib";
+
+const lib = createLibrary({ routesPrefix: "/api" });
+app.use(lib.router);
+```
+
+After:
+
+```ts
+import { PrismaClient } from "@prisma/client";
+import { createLibrary } from "my-crud-lib";
+import { makePrismaUserRepo } from "my-crud-lib/adapter-prisma";
+
+const prisma = new PrismaClient();
+const userRepo = makePrismaUserRepo(prisma);
+
+const lib = createLibrary(
+  {
+    routesPrefix: "/api",
+    auth: {
+      passwordHashRounds: 10,
+    },
+  },
+  { userRepo }
+);
+
+app.use(lib.router);
+```
+
+## Custom adapters
+
+Apps that do not use Prisma can implement `UserRepo` directly:
+
+```ts
+import type { UserRepo } from "my-crud-lib/user";
+
+const userRepo: UserRepo = {
+  async count() {
+    return 0;
+  },
+  async findMany() {
+    return [];
+  },
+  async findById(id) {
+    return null;
+  },
+  async findByEmail(email) {
+    return null;
+  },
+  async create(input) {
+    throw new Error("Implement user creation");
+  },
+  async update(id, input) {
+    throw new Error("Implement user update");
+  },
+  async delete(id) {},
+  async updateMe(userId, input) {
+    throw new Error("Implement profile update");
+  },
+};
+```
+
+## Import paths
+
+Use these public paths:
+
+```ts
+import { createLibrary, createServer, mountDefaultRoutes } from "my-crud-lib";
+import { createAuthRouter, makeAuthService } from "my-crud-lib/auth";
+import { createUserRouter, type UserRepo } from "my-crud-lib/user";
+import { registerSchema, listUsersQuerySchema } from "my-crud-lib/schemas";
+import { isAuth, hasRole } from "my-crud-lib/middleware";
+import { makePrismaUserRepo } from "my-crud-lib/adapter-prisma";
+```
+
+Avoid importing from `dist` or internal `modules/*` paths. Those files are implementation details.
+
+## Role defaults
+
+Self-registration now resolves to `USER` unless you explicitly configure a different role:
+
+```ts
+app.use(
+  "/auth",
+  createAuthRouter({
+    userRepo,
+    defaultRegisterRole: "USER",
+  })
+);
+```
+
+Create admin users through your own seed script, internal admin workflow, or controlled provisioning path.

package/examples/express-prisma/prisma/schema.prisma

@@ -8,14 +8,19 @@ datasource db {
 }
 
 model User {
-  id           Int      @id @default(autoincrement())
-  email        String   @unique
-  passwordHash String
-  name         String?
-  role         Role     @default(USER)
-  createdAt    DateTime @default(now())
-  updatedAt    DateTime @updatedAt
-  profile      Profile?
+  id                      Int                      @id @default(autoincrement())
+  email                   String                   @unique
+  passwordHash            String
+  name                    String?
+  role                    Role                     @default(USER)
+  emailVerifiedAt         DateTime?
+  createdAt               DateTime                 @default(now())
+  updatedAt               DateTime                 @updatedAt
+  profile                 Profile?
+  refreshTokens           RefreshToken[]
+  passwordResetTokens     PasswordResetToken[]
+  emailVerificationTokens EmailVerificationToken[]
+  oauthAccounts           OauthAccount[]
 }
 
 model Profile {
@@ -26,6 +31,62 @@ model Profile {
   user      User    @relation(fields: [userId], references: [id], onDelete: Cascade)
 }
 
+model RefreshToken {
+  id                String    @id
+  userId            Int
+  tokenHash         String
+  familyId          String
+  expiresAt         DateTime
+  revokedAt         DateTime?
+  replacedByTokenId String?
+  createdAt         DateTime  @default(now())
+  user              User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@index([familyId])
+}
+
+model PasswordResetToken {
+  id        String    @id
+  userId    Int
+  tokenHash String
+  expiresAt DateTime
+  usedAt    DateTime?
+  revokedAt DateTime?
+  createdAt DateTime  @default(now())
+  user      User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+}
+
+model EmailVerificationToken {
+  id        String    @id
+  userId    Int
+  tokenHash String
+  expiresAt DateTime
+  usedAt    DateTime?
+  revokedAt DateTime?
+  createdAt DateTime  @default(now())
+  user      User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+}
+
+model OauthAccount {
+  id                Int      @id @default(autoincrement())
+  provider          String
+  providerAccountId String
+  userId            Int
+  email             String?
+  createdAt         DateTime @default(now())
+  updatedAt         DateTime @updatedAt
+  user              User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@unique([provider, providerAccountId])
+  @@index([userId])
+  @@map("OAuthAccount")
+}
+
 enum Role {
   USER
   ADMIN

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "my-crud-lib",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "TypeScript auth and user/profile CRUD helpers for Express with Prisma and custom repository adapters",
   "license": "MIT",
   "author": "Riccardo Sensi",
@@ -60,18 +60,18 @@
   },
   "files": [
     "dist",
+    "docs",
     "examples",
+    "CHANGELOG.md",
     "README.md",
     "RELEASE.md",
     "LICENSE",
-    "prisma/schema.prisma"
+    "prisma/schema.prisma",
+    "prisma.config.ts"
   ],
   "engines": {
     "node": ">=18.17"
   },
-  "prisma": {
-    "schema": "prisma/schema.prisma"
-  },
   "scripts": {
     "prebuild": "node scripts/prisma-generate.mjs",
     "build": "tsc",

package/prisma/schema.prisma

@@ -8,14 +8,19 @@ datasource db {
 }
 
 model User {
-  id           Int      @id @default(autoincrement())
-  email        String   @unique
-  passwordHash String
-  name         String?
-  role         Role     @default(USER)
-  createdAt    DateTime @default(now())
-  updatedAt    DateTime @updatedAt
-  profile      Profile?
+  id                      Int                      @id @default(autoincrement())
+  email                   String                   @unique
+  passwordHash            String
+  name                    String?
+  role                    Role                     @default(USER)
+  emailVerifiedAt         DateTime?
+  createdAt               DateTime                 @default(now())
+  updatedAt               DateTime                 @updatedAt
+  profile                 Profile?
+  refreshTokens           RefreshToken[]
+  passwordResetTokens     PasswordResetToken[]
+  emailVerificationTokens EmailVerificationToken[]
+  oauthAccounts           OauthAccount[]
 }
 
 model Profile {
@@ -26,6 +31,62 @@ model Profile {
   user      User    @relation(fields: [userId], references: [id], onDelete: Cascade)
 }
 
+model RefreshToken {
+  id                String    @id
+  userId            Int
+  tokenHash         String
+  familyId          String
+  expiresAt         DateTime
+  revokedAt         DateTime?
+  replacedByTokenId String?
+  createdAt         DateTime  @default(now())
+  user              User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@index([familyId])
+}
+
+model PasswordResetToken {
+  id        String    @id
+  userId    Int
+  tokenHash String
+  expiresAt DateTime
+  usedAt    DateTime?
+  revokedAt DateTime?
+  createdAt DateTime  @default(now())
+  user      User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+}
+
+model EmailVerificationToken {
+  id        String    @id
+  userId    Int
+  tokenHash String
+  expiresAt DateTime
+  usedAt    DateTime?
+  revokedAt DateTime?
+  createdAt DateTime  @default(now())
+  user      User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+}
+
+model OauthAccount {
+  id                Int      @id @default(autoincrement())
+  provider          String
+  providerAccountId String
+  userId            Int
+  email             String?
+  createdAt         DateTime @default(now())
+  updatedAt         DateTime @updatedAt
+  user              User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@unique([provider, providerAccountId])
+  @@index([userId])
+  @@map("OAuthAccount")
+}
+
 enum Role {
   USER
   ADMIN

package/prisma.config.ts

@@ -0,0 +1,6 @@
+import 'dotenv/config';
+import { defineConfig } from 'prisma/config';
+
+export default defineConfig({
+  schema: 'prisma/schema.prisma',
+});