postbase 0.1.0

package/backend/lib/postbase/middlewares/auth.js

@@ -0,0 +1,57 @@
+// server/middleware/auth.js
+import { runQuery } from '../db.js';
+
+export function authMiddleware(pool) {
+    return async function sessionAuth(req, res, next) {
+        try {
+            const header = req.get('authorization') || '';
+            if (!header.startsWith('Bearer ')) {
+                req.auth = null;
+                return next();
+            }
+            const token = header.slice(7).trim();
+
+            // Lookup session in database
+            const sql = `
+                SELECT s.*, u.id AS user_id, u.email, u.name, u.role
+                FROM "session" s
+                JOIN "user" u ON u.id = s."userId"
+                WHERE s.token = $1
+                LIMIT 1
+            `;
+            const result = await runQuery(pool, sql, [token]);
+            if (!result.rowCount) {
+                req.auth = null;
+                return next();
+            }
+
+            const session = result.rows[0];
+            const now = new Date();
+            if (new Date(session.expires_at) < now) {
+                req.auth = null; // expired
+                return next();
+            }
+
+            // Attach verified auth info
+            req.auth = {
+                id: String(session.user_id),
+                session_id: session.id,
+                expires_at: session.expires_at,
+                token,
+            };
+
+            req.user = {
+                id: String(session.user_id),
+                email: session.email,
+                name: session.name,
+                role: session.role,
+            };
+
+            next();
+        } catch (err) {
+            console.error('auth middleware error', err);
+            req.auth = null;
+            next();
+        }
+    };
+}

package/backend/lib/postbase/migrations/1765239687559_rtdb-nodes.js

@@ -0,0 +1,93 @@
+/**
+ * @type {import('node-pg-migrate').ColumnDefinitions | undefined}
+ */
+export const shorthands = undefined;
+
+/**
+ * @param pgm {import('node-pg-migrate').MigrationBuilder}
+ * @param run {() => void | undefined}
+ * @returns {Promise<void> | void}
+ */
+export const up = (pgm) => {
+    // ---- Extensions ----
+    pgm.createExtension('ltree', { ifNotExists: true });
+
+    // ---- Table ----
+    pgm.createTable('rtdb_nodes', {
+        path: {
+            type: 'text',
+            primaryKey: true,
+            notNull: true,
+        },
+
+        parent_path: {
+            type: 'text',
+            notNull: false,
+        },
+
+        key: {
+            type: 'text',
+            notNull: true,
+        },
+
+        value: {
+            type: 'jsonb',
+            notNull: true,
+        },
+
+        version: {
+            type: 'bigint',
+            notNull: true,
+            default: 1,
+        },
+
+        updated_at: {
+            type: 'timestamptz',
+            notNull: true,
+            default: pgm.func('now()'),
+        },
+
+        // Generated ltree column for fast subtree queries
+        path_ltree: {
+            type: 'ltree',
+            generated: {
+                as: "replace(path, '/', '.')::ltree",
+                stored: true,
+            },
+        },
+    });
+
+    // ---- Indexes ----
+
+    // Fast exact + prefix lookups (LIKE 'a/b/%')
+    pgm.createIndex('rtdb_nodes', 'parent_path', {
+        name: 'rtdb_nodes_parent_idx',
+    });
+
+    pgm.createIndex('rtdb_nodes', 'value', {
+        name: 'rtdb_nodes_value_gin_idx',
+        method: 'gin',
+    });
+
+    pgm.createIndex('rtdb_nodes', 'path_ltree', {
+        name: 'rtdb_nodes_ltree_idx',
+        method: 'gist',
+    });
+
+    // ✅ PREFIX INDEX (RAW SQL – avoids TS error)
+    pgm.sql(`
+        CREATE INDEX rtdb_nodes_path_prefix_idx
+        ON rtdb_nodes (path text_pattern_ops)
+    `);
+};
+
+/**
+ * @param pgm {import('node-pg-migrate').MigrationBuilder}
+ * @param run {() => void | undefined}
+ * @returns {Promise<void> | void}
+ */
+export const down = (pgm) => {
+    pgm.sql(`DROP INDEX IF EXISTS rtdb_nodes_path_prefix_idx`);
+    pgm.dropTable('rtdb_nodes', { ifExists: true });
+    pgm.dropExtension('ltree', { ifExists: true });
+};