powr-sdk-api 3.1.3 → 3.1.5

package/dist/middleware/projectId.js

@@ -3,29 +3,37 @@
 const config = require('../config');
 
 /**
- * Middleware to inject projectId into requests
+ * Middleware to inject and validate projectId into requests
  * @param {Object} options - Configuration options
  * @param {boolean} options.isCentralService - Whether this is a central service (like powr-base-cloud)
+ * @param {Array} options.excludePaths - Array of paths to exclude from projectId validation
  * @returns {Function} Express middleware function
  */
 const injectProjectId = (options = {}) => {
   const isCentralService = options.isCentralService || false;
+  const excludePaths = options.excludePaths || ['/auth/login', '/auth/register', '/health'];
   return (req, res, next) => {
     try {
+      // Skip validation for excluded paths
+      if (excludePaths.some(path => req.path.startsWith(path))) {
+        req.projectId = null;
+        return next();
+      }
       if (isCentralService) {
         // For central services, get projectId from request
-        const projectId = req.query.projectId || req.body.projectId;
-        if (!projectId) {
-          return res.status(400).json({
-            success: false,
-            message: 'projectId is required for central services'
-          });
-        }
-        req.projectId = projectId;
+        req.projectId = req.query.projectId || req.body.projectId;
       } else {
         // For individual APIs, use config.projectId
         req.projectId = config.projectId;
       }
+
+      // Validate projectId (always required except for excluded paths)
+      if (!req.projectId) {
+        return res.status(400).json({
+          success: false,
+          message: 'projectId is required'
+        });
+      }
       next();
     } catch (error) {
       console.error('❌ ProjectId injection error:', error.message);

package/dist/routes/forms.js

@@ -52,12 +52,6 @@ router.get('/:formName', async (req, res) => {
       formName
     } = req.params;
     const projectId = req.projectId;
-    if (!projectId) {
-      return res.status(400).json({
-        success: false,
-        message: 'projectId is required'
-      });
-    }
     const db = await getDb();
     const collection = db.collection("powrForm");
     const formData = await collection.findOne({
@@ -170,15 +164,7 @@ router.get('/getCount/:formName', async (req, res) => {
 // POST /create-form - Upload JSON file and store form data
 router.post('/create-form', upload.single('jsonFile'), async (req, res) => {
   try {
-    const {
-      projectId
-    } = req.query;
-    if (!projectId) {
-      return res.status(400).json({
-        success: false,
-        message: 'projectId is required as query parameter'
-      });
-    }
+    const projectId = req.projectId;
     if (!req.file) {
       return res.status(400).json({
         success: false,

package/dist/routes/functions.js

@@ -90,12 +90,6 @@ router.get('/', async (req, res) => {
     const query = {
       projectId
     };
-    if (!projectId) {
-      return res.status(400).json({
-        success: false,
-        message: 'projectId is required.'
-      });
-    }
     const db = await getDb();
     const functionsData = await db.collection("functions").find(query).toArray();
     return res.status(200).json({
@@ -115,12 +109,6 @@ router.get('/', async (req, res) => {
 router.post('/', async (req, res) => {
   try {
     const projectId = req.projectId;
-    if (!projectId) {
-      return res.status(400).json({
-        success: false,
-        message: 'projectId is required.'
-      });
-    }
     const newFunction = req.body;
     newFunction.projectId = projectId;
     if (!newFunction || Object.keys(newFunction).length === 0) {
@@ -159,12 +147,6 @@ router.put('/:function', async (req, res) => {
       code
     } = req.body;
     const projectId = req.projectId;
-    if (!projectId) {
-      return res.status(400).json({
-        success: false,
-        message: 'projectId is required.'
-      });
-    }
     if (!code) {
       return res.status(400).json({
         success: false,
@@ -222,12 +204,6 @@ router.post("/:function", async (req, res) => {
     function: functionName
   } = req.params;
   const projectId = req.projectId;
-  if (!projectId) {
-    return res.status(400).json({
-      success: false,
-      message: 'projectId is required.'
-    });
-  }
   try {
     // Use pre-compiled function (NO COMPILATION HERE)
     const params = {

package/dist/routes/invoices.js

@@ -14,12 +14,6 @@ router.get('/', async (req, res) => {
     const query = {
       projectId
     };
-    if (!projectId) {
-      return res.status(400).json({
-        success: false,
-        message: 'projectId is required.'
-      });
-    }
     const db = await getDb();
     const invoiceData = await db.collection("invoices").find(query).toArray();
     return res.status(200).json({
@@ -40,12 +34,6 @@ router.get('/:invoiceId', async (req, res) => {
   } = req.params;
   const projectId = req.projectId;
   try {
-    if (!projectId) {
-      return res.status(400).json({
-        success: false,
-        message: 'projectId is required.'
-      });
-    }
     const _id = new ObjectId(invoiceId);
     const db = await getDb();
     const invoiceData = await db.collection("invoices").findOne({
@@ -74,12 +62,6 @@ router.post('/', async (req, res) => {
     serviceSection,
     paymentSection
   } = req.body;
-  if (!projectId) {
-    return res.status(400).json({
-      success: false,
-      message: "projectId is required."
-    });
-  }
   const invoice = {
     invoiceNumber,
     dateOfIssue,
@@ -119,12 +101,6 @@ router.put('/:invoiceId', async (req, res) => {
     invoiceId
   } = req.params;
   const projectId = req.projectId;
-  if (!projectId) {
-    return res.status(400).json({
-      success: false,
-      message: "projectId is required."
-    });
-  }
   let filter;
   try {
     filter = {

package/dist/routes/likes.js

@@ -16,13 +16,13 @@ router.post('/', async (req, res) => {
   } = req.body;
   const {
     userId,
-    projectId,
     contentId
   } = req.query;
-  if (!userId || typeof liked !== 'boolean' || !projectId) {
+  const projectId = req.projectId;
+  if (!userId || typeof liked !== 'boolean') {
     return res.status(400).json({
       success: false,
-      message: 'userId and projectId are required in query, liked (boolean) is required in body.'
+      message: 'userId is required in query, liked (boolean) is required in body.'
     });
   }
   try {
@@ -58,15 +58,9 @@ router.post('/', async (req, res) => {
 });
 router.get('/', async (req, res) => {
   const {
-    projectId,
     contentId
   } = req.query;
-  if (!projectId) {
-    return res.status(400).json({
-      success: false,
-      message: 'projectId is required in query.'
-    });
-  }
+  const projectId = req.projectId;
   try {
     const query = {
       projectId
@@ -97,14 +91,14 @@ router.get('/:likeId', async (req, res) => {
     likeId
   } = req.params;
   const {
-    projectId,
     contentId
   } = req.query;
+  const projectId = req.projectId;
   try {
     const filter = {
-      userId: new ObjectId(likeId)
+      userId: new ObjectId(likeId),
+      projectId
     };
-    if (projectId) filter.projectId = projectId;
     if (contentId) filter.contentId = contentId;
     const db = await getDb();
     const like = await db.collection('likes').findOne(filter);

package/dist/routes/ratings.js

@@ -65,12 +65,6 @@ router.get("/", async (req, res) => {
     userId
   } = req.query;
   const projectId = req.projectId;
-  if (!projectId) {
-    return res.status(400).json({
-      success: false,
-      message: "projectId is required."
-    });
-  }
   try {
     const query = {
       projectId
@@ -106,10 +100,10 @@ router.delete("/", async (req, res) => {
     ratingId
   } = req.query;
   const projectId = req.projectId;
-  if (!ratingId || !projectId) {
+  if (!ratingId) {
     return res.status(400).json({
       success: false,
-      message: "Both ratingId and projectId are required to delete a rating."
+      message: "ratingId is required to delete a rating."
     });
   }
   try {
@@ -143,10 +137,10 @@ router.get("/average", async (req, res) => {
     itemId
   } = req.query;
   const projectId = req.projectId;
-  if (!projectId || !itemId) {
+  if (!itemId) {
     return res.status(400).json({
       success: false,
-      message: "Both projectId and itemId are required."
+      message: "itemId is required."
     });
   }
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "powr-sdk-api",
-  "version": "3.1.3",
+  "version": "3.1.5",
   "description": "Shared API core library for PowrStack projects",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",