pssmssystem 1.0.0

package/backend/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "backend",
+  "version": "1.0.0",
+  "description": "",
+  "main": "sever.js",
+  "scripts": {
+    "start": "node server.js",
+    "dev": "nodemon server.js"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "type": "commonjs",
+  "dependencies": {
+    "bcrypt": "^6.0.0",
+    "cors": "^2.8.6",
+    "dotenv": "^17.4.2",
+    "express": "^5.2.1",
+    "express-session": "^1.19.0",
+    "jsonwebtoken": "^9.0.3",
+    "mysql2": "^3.22.4",
+    "nodemon": "^3.1.14"
+  }
+}

package/backend/sever.js

@@ -0,0 +1,333 @@
+const express = require('express');
+const mysql = require('mysql2');
+const cors = require('cors');
+const bcrypt = require('bcrypt');
+const session = require('express-session'); // 1. Twongeyeho express-session
+
+const app = express();
+
+// CORs Configuration iyoborwa na Credentials (kugira ngo session cookie yambuke)
+app.use(cors({
+    origin: 'http://localhost:5173', // Shyiraho URL ya Frontend (Vite) yawe
+    credentials: true // Buri ubusabe bwemerewe kwitwaza cookie ya session
+}));
+
+app.use(express.json());
+
+// 2. CONFIGURATION YA SESSION MIDDLEWARE
+app.use(session({
+    secret: 'rubavu_session_secret_key_2026', // Akajambo k'ibanga gakoreshwa mu gu-sign cookie
+    resave: false, // Ntabwo isubira kubika session nshya niba nta cyahindutse
+    saveUninitialized: false, // Ntabwo ibika session y'umuntu utarinjira (not logged in)
+    cookie: {
+        secure: false, // Yashyirwa `true` iyo dukoresha HTTPS nyakuri
+        httpOnly: true, // Umutekano: JavaScript ntabwo ishobora kwiba iyi cookie muri Browser
+        maxAge: 1000 * 60 * 60 // Session imara isaha imwe (1 hour)
+    }
+}));
+
+// Connection ya Database
+const db = mysql.createConnection({
+    host: 'localhost',
+    user: 'root',
+    password: '',
+    database: 'pssms_db'
+});
+
+db.connect((err) => {
+    if (err) console.error('Database connection failed: ' + err.stack);
+    else console.log('Connected to MySQL Database.');
+});
+
+// Function ireba niba Password ikomeye (Requirement: Imbura nka 8 characters, Litera nkuru, Into, Umubare, na Special Character)
+const isPasswordStrong = (password) => {
+    const strongPasswordRegex = /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/;
+    return strongPasswordRegex.test(password);
+};
+
+
+// ================= SYSTEM AUTHENTICATION (SESSION BASED) =================
+
+// 1. REGISTER (Kwandika umuyobozi mushya ufite password ikomeye kandi encrypted)
+app.post('/api/auth/register', async (req, res) => {
+    const { username, password } = req.body;
+
+    if (!username || !password) {
+        return res.status(400).json({ error: 'Andika username na password zose!' });
+    }
+
+    // Kureba niba password ikomeye (Requirement #10 / Security)
+    if (!isPasswordStrong(password)) {
+        return res.status(400).json({ 
+            error: 'Password ntabwo ikomeye! Igomba kuba ifite mu buryo bw\'ibura inyuguti 8, inyuguti nkuru (A), into (a), umubare (1), n\'ikimenyetso (@, $, !).' 
+        });
+    }
+
+    try {
+        // Enkrypitinga password dukoresheje bcrypt (Requirement #10)
+        const hashedPassword = await bcrypt.hash(password, 10);
+        
+        db.query('INSERT INTO users (Username, Password) VALUES (?, ?)', [username, hashedPassword], (err) => {
+            if (err) return res.status(400).json({ error: 'Username tayari yafashwe cyangwa table ntiyaboneka!' });
+            res.json({ message: 'User registered successfully with strong encrypted password!' });
+        });
+    } catch (e) { 
+        res.status(500).json({ error: e.message }); 
+    }
+});
+
+// 2. LOGIN (Kwinjira hakoreshejwe Session)
+app.post('/api/auth/login', (req, res) => {
+    const { username, password } = req.body;
+    
+    db.query('SELECT * FROM users WHERE Username = ?', [username], async (err, results) => {
+        if (err) return res.status(500).json({ error: err.message });
+        if (results.length === 0) return res.status(400).json({ error: 'User ntabwo abonetse!' });
+
+        const user = results[0];
+        
+        // Kugereranya password ikoresheje bcrypt.compare
+        const isMatch = await bcrypt.compare(password, user.Password);
+        if (!isMatch) return res.status(400).json({ error: 'Ijambo ry\'ibanga ntariryo!' });
+
+        // >>> HANO TWAKORESHEJE SESSION AHO KURI JWT <<<
+        // Tubika amakuru ya user muri server-side session table/memory
+        req.session.user = {
+            id: user.UserID || user.id,
+            username: user.Username
+        };
+
+        res.json({ 
+            message: 'Login successful using Session!', 
+            username: user.Username 
+            // Nta Token igisohoka hano kuko byose bibikwa mu buryo bwa cookie!
+        });
+    });
+});
+
+// 3. LOGOUT (Gusohoka mu buryo bwa Session)
+app.post('/api/auth/logout', (req, res) => {
+    req.session.destroy((err) => {
+        if (err) return res.status(500).json({ error: 'Kunanirwa gusohoka!' });
+        res.clearCookie('connect.sid'); // Siba cookie yari ibitse id ya session muri browser
+        res.json({ message: 'Logged out successfully!' });
+    });
+});
+
+// 4. CHECK SESSION STATUS (Gusuzuma niba umuntu akiri logged in iyo arefresha-inze page)
+app.get('/api/auth/me', (req, res) => {
+    if (req.session.user) {
+        res.json({ loggedIn: true, user: req.session.user });
+    } else {
+        res.json({ loggedIn: false });
+    }
+});
+
+
+// ================= PARKING MANAGEMENT APIs (ZINDI ZOSE NTACYOHINDUSE) =================
+
+app.get('/api/slots', (req, res) => {
+    db.query('SELECT * FROM ParkingSlot', (err, results) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json(results);
+    });
+});
+
+app.post('/api/entry', (req, res) => {
+    const { plateNumber, driverName, phoneNumber, slotNumber } = req.body;
+    const carQuery = 'INSERT INTO Car (PlateNumber, DriverName, PhoneNumber) VALUES (?, ?, ?) ON DUPLICATE KEY UPDATE DriverName=?, PhoneNumber=?';
+    
+    db.query(carQuery, [plateNumber, driverName, phoneNumber, driverName, phoneNumber], (err) => {
+        if (err) return res.status(500).json({ error: err.message });
+
+        db.query('INSERT INTO ParkingRecord (PlateNumber, SlotNumber, EntryTime) VALUES (?, ?, NOW())', [plateNumber, slotNumber], (err, recordResult) => {
+            if (err) return res.status(500).json({ error: err.message });
+
+            db.query('UPDATE ParkingSlot SET SlotStatus = "Occupied" WHERE SlotNumber = ?', [slotNumber], (err) => {
+                if (err) return res.status(500).json({ error: err.message });
+                res.json({ message: 'Imodoka yinjiye neza!', recordId: recordResult.insertId });
+            });
+        });
+    });
+});
+
+app.get('/api/exit/calculate/:slotNumber', (req, res) => {
+    const { slotNumber } = req.params;
+    const RATE_PER_MINUTE = 100;
+
+    const findRecordQuery = `
+        SELECT EntryTime FROM ParkingRecord 
+        WHERE SlotNumber = ? AND ExitTime IS NULL
+    `;
+    db.query(findRecordQuery, [slotNumber], (err, results) => {
+        if (err || results.length === 0) return res.status(404).json({ error: 'Nta modoka iri kuri iyi slot.' });
+        
+        const entryTime = new Date(results[0].EntryTime);
+        const exitTime = new Date();
+        let duration = Math.ceil((exitTime - entryTime) / (1000 * 60));
+        if (duration <= 0) duration = 1;
+
+        const expectedAmount = duration * RATE_PER_MINUTE;
+        res.json({ duration, expectedAmount });
+    });
+});
+
+app.post('/api/exit', (req, res) => {
+    const { slotNumber, amountPaid, paymentMethod } = req.body; 
+    const RATE_PER_MINUTE = 100; 
+
+    if (!amountPaid || isNaN(amountPaid)) {
+        return res.status(400).json({ error: 'Ugomba kwandika umubare w\'amafaranga umukiriya wishyuye!' });
+    }
+    if (!paymentMethod) {
+        return res.status(400).json({ error: 'Ugomba guhitamo uburyo bw\'ubwishyu (Payment Method)!' });
+    }
+
+    const findRecordQuery = `
+        SELECT r.RecordID, r.EntryTime, c.DriverName, c.PlateNumber
+        FROM ParkingRecord r 
+        JOIN Car c ON r.PlateNumber = c.PlateNumber 
+        WHERE r.SlotNumber = ? AND r.ExitTime IS NULL
+    `;
+    
+    db.query(findRecordQuery, [slotNumber], (err, results) => {
+        if (err || results.length === 0) return res.status(404).json({ error: 'Nta modoka iri kuri iyi slot.' });
+
+        const recordId = results[0].RecordID;
+        const driverName = results[0].DriverName;
+        const plateNumber = results[0].PlateNumber;
+        const entryTime = new Date(results[0].EntryTime);
+        const exitTime = new Date();
+        
+        let duration = Math.ceil((exitTime - entryTime) / (1000 * 60));
+        if (duration <= 0) duration = 1;
+        
+        const expectedAmount = duration * RATE_PER_MINUTE; 
+        const parsedAmountPaid = parseFloat(amountPaid);
+        
+        if (parsedAmountPaid < expectedAmount) {
+            return res.status(400).json({ 
+                error: `Bidashoboka! Amafaranga make. Imodoka ${plateNumber} muri Slot ${slotNumber} igomba kwishyura ${expectedAmount} FRW.` 
+            });
+        }
+
+        db.query('UPDATE ParkingRecord SET ExitTime = NOW(), Duration = ? WHERE RecordID = ?', [duration, recordId], (err) => {
+            if (err) return res.status(500).json({ error: err.message });
+
+            const insertPaymentQuery = 'INSERT INTO Payment (RecordID, AmountPaid, PaymentMethod, PaymentDate) VALUES (?, ?, ?, NOW())';
+            db.query(insertPaymentQuery, [recordId, parsedAmountPaid, paymentMethod], (err) => {
+                if (err) return res.status(500).json({ error: err.message });
+
+                db.query('UPDATE ParkingSlot SET SlotStatus = "Available" WHERE SlotNumber = ?', [slotNumber], (err) => {
+                    res.json({ 
+                        message: 'Imodoka yasohotse neza kandi ubwishyu bwemejwe!', 
+                        invoice: { 
+                            companyName: 'Rubavu Car Parking Services Ltd',
+                            driverName: driverName, 
+                            amount: parsedAmountPaid,
+                            paymentMethod: paymentMethod,
+                            date: exitTime 
+                        } 
+                    });
+                });
+            });
+        });
+    });
+});
+
+app.get('/api/cars', (req, res) => {
+    db.query('SELECT * FROM Car', (err, results) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json(results);
+    });
+});
+
+app.get('/api/records', (req, res) => {
+    db.query('SELECT * FROM ParkingRecord ORDER BY EntryTime DESC', (err, results) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json(results);
+    });
+});
+
+app.put('/api/records/:id', (req, res) => {
+    const { id } = req.params;
+    const { PlateNumber, SlotNumber, EntryTime, ExitTime, Duration } = req.body;
+    
+    const query = `
+        UPDATE ParkingRecord 
+        SET PlateNumber = ?, SlotNumber = ?, EntryTime = ?, ExitTime = ?, Duration = ? 
+        WHERE RecordID = ?
+    `;
+    db.query(query, [PlateNumber, SlotNumber, EntryTime, ExitTime || null, Duration || null, id], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Record yavuguruwe neza!' });
+    });
+});
+
+app.delete('/api/records/:id', (req, res) => {
+    const { id } = req.params;
+    db.query('DELETE FROM ParkingRecord WHERE RecordID = ?', [id], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Record yasibwe neza burundu!' });
+    });
+});
+
+app.get('/api/payments', (req, res) => {
+    const query = `
+        SELECT p.PaymentID, p.RecordID, r.PlateNumber, r.SlotNumber, p.AmountPaid, p.PaymentMethod, p.PaymentDate 
+        FROM Payment p
+        JOIN ParkingRecord r ON p.RecordID = r.RecordID
+        ORDER BY p.PaymentDate DESC
+    `;
+    db.query(query, (err, results) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json(results);
+    });
+});
+
+app.get('/api/reports/summary', (req, res) => {
+    const query = `
+        SELECT 
+            (SELECT COUNT(*) FROM ParkingSlot) as total_slots,
+            (SELECT COUNT(*) FROM ParkingSlot WHERE SlotStatus='Occupied') as occupied_slots,
+            (SELECT COUNT(*) FROM Car) as total_cars,
+            (SELECT IFNULL(SUM(AmountPaid), 0) FROM Payment) as total_revenue
+    `;
+    db.query(query, (err, results) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json(results[0]);
+    });
+});
+
+app.get('/api/reports/filtered', (req, res) => {
+    const { type } = req.query;
+    let dateCondition = "";
+    if (type === 'day') dateCondition = "WHERE DATE(PaymentDate) = CURDATE()";
+    else if (type === 'week') dateCondition = "WHERE PaymentDate >= DATE_SUB(NOW(), INTERVAL 7 DAY)";
+    else if (type === 'month') dateCondition = "WHERE PaymentDate >= DATE_SUB(NOW(), INTERVAL 1 MONTH)";
+    else dateCondition = "WHERE DATE(PaymentDate) = CURDATE()";
+
+    const reportQuery = `SELECT IFNULL(SUM(AmountPaid), 0) AS revenue, COUNT(PaymentID) AS carsCount FROM Payment ${dateCondition}`;
+    const detailsQuery = `
+        SELECT p.PaymentID, r.SlotNumber, r.PlateNumber, p.AmountPaid, p.PaymentMethod, p.PaymentDate 
+        FROM Payment p
+        JOIN ParkingRecord r ON p.RecordID = r.RecordID
+        ${dateCondition}
+        ORDER BY p.PaymentDate DESC
+    `;
+
+    db.query(reportQuery, (err, summaryResult) => {
+        if (err) return res.status(500).json({ error: err.message });
+        db.query(detailsQuery, (err, detailsResult) => {
+            if (err) return res.status(500).json({ error: err.message });
+            res.json({ 
+                revenue: summaryResult[0].revenue, 
+                carsCount: summaryResult[0].carsCount, 
+                transactions: detailsResult 
+            });
+        });
+    });
+});
+
+const PORT = 5000;
+app.listen(PORT, () => console.log(`Server running on port ${PORT}`));

package/frontend/README.md

@@ -0,0 +1,16 @@
+# React + Vite
+
+This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
+
+Currently, two official plugins are available:
+
+- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react) uses [Oxc](https://oxc.rs)
+- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc) uses [SWC](https://swc.rs/)
+
+## React Compiler
+
+The React Compiler is not enabled on this template because of its impact on dev & build performances. To add it, see [this documentation](https://react.dev/learn/react-compiler/installation).
+
+## Expanding the ESLint configuration
+
+If you are developing a production application, we recommend using TypeScript with type-aware lint rules enabled. Check out the [TS template](https://github.com/vitejs/vite/tree/main/packages/create-vite/template-react-ts) for information on how to integrate TypeScript and [`typescript-eslint`](https://typescript-eslint.io) in your project.

package/frontend/eslint.config.js

@@ -0,0 +1,21 @@
+import js from '@eslint/js'
+import globals from 'globals'
+import reactHooks from 'eslint-plugin-react-hooks'
+import reactRefresh from 'eslint-plugin-react-refresh'
+import { defineConfig, globalIgnores } from 'eslint/config'
+
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{js,jsx}'],
+    extends: [
+      js.configs.recommended,
+      reactHooks.configs.flat.recommended,
+      reactRefresh.configs.vite,
+    ],
+    languageOptions: {
+      globals: globals.browser,
+      parserOptions: { ecmaFeatures: { jsx: true } },
+    },
+  },
+])

package/frontend/index.html

@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>frontend</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.jsx"></script>
+  </body>
+</html>