Initial version
This commit is contained in:
Flatlogic Bot
commit
42cd142f4b
305
.cursorrules
Normal file
305
.cursorrules
Normal file
@ -0,0 +1,305 @@
|
||||
# Cursor Rules - Group 1: Development Philosophy & Coding Conventions
|
||||
1. Overall Architecture & Structure:
|
||||
- Enforce a clear separation of concerns between the backend and the frontend:
|
||||
- **Backend**: Use Express for routing, Passport for authentication, and Swagger for API documentation. Organize code into modules such as routes, services, and helpers.
|
||||
- **Example**:
|
||||
- Routes: `src/routes/auth.js` for authentication routes.
|
||||
- Services: `src/services/auth.js` for authentication logic.
|
||||
- Helpers: `src/helpers/wrapAsync.js` for wrapping asynchronous functions.
|
||||
- **Frontend**: Use Next.js with React and TypeScript. Structure components using functional components, hooks, and layouts.
|
||||
- **Example**:
|
||||
- Pages: `pages/index.tsx` for the main page.
|
||||
- Components: `components/Header.tsx` for the header component.
|
||||
- Layouts: `layouts/MainLayout.tsx` for common page layouts.
|
||||
- Ensure that backend modules and frontend components are organized for reusability and maintainability:
|
||||
- **Backend**: Separate business logic into services and use middleware for common tasks.
|
||||
- **Frontend**: Use reusable components and hooks to manage state and lifecycle.
|
||||
|
||||
2. Coding Style & Formatting:
|
||||
- For the backend (JavaScript):
|
||||
• Use ES6+ features (const/let, arrow functions) consistently.
|
||||
• Follow Prettier and ESLint configurations (e.g., consistent 2-space indentation, semicolons, and single quotes).
|
||||
• Maintain clear asynchronous patterns with helper wrappers (e.g., wrapAsync).
|
||||
- **Example from auth.js**:
|
||||
```javascript
|
||||
router.post('/signin/local', wrapAsync(async (req, res) => {
|
||||
const payload = await AuthService.signin(req.body.email, req.body.password, req);
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
```
|
||||
• Document API endpoints with inline Swagger comments to ensure API clarity and consistency.
|
||||
- **Example**:
|
||||
```javascript
|
||||
/**
|
||||
* @swagger
|
||||
* /api/auth/signin:
|
||||
* post:
|
||||
* summary: Sign in a user
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Successful login
|
||||
*/
|
||||
```
|
||||
- For the frontend (TypeScript/React):
|
||||
• Use functional components with strict typing and separation of concerns.
|
||||
- **Example**:
|
||||
```typescript
|
||||
const Button: React.FC<{ onClick: () => void }> = ({ onClick }) => (
|
||||
<button onClick={onClick}>Click me</button>
|
||||
);
|
||||
```
|
||||
• Follow naming conventions: PascalCase for components and types/interfaces, camelCase for variables, hooks, and function names.
|
||||
- **Example**:
|
||||
```typescript
|
||||
const useCustomHook = () => {
|
||||
const [state, setState] = useState(false);
|
||||
return [state, setState];
|
||||
};
|
||||
```
|
||||
• Utilize hooks (useEffect, useState) to manage state and lifecycle in a clear and concise manner.
|
||||
- **Example**:
|
||||
```typescript
|
||||
useEffect(() => {
|
||||
console.log('Component mounted');
|
||||
}, []);
|
||||
```
|
||||
|
||||
3. Code Quality & Best Practices:
|
||||
- Ensure code modularity by splitting complex logic into smaller, testable units.
|
||||
- **Example**: In `auth.js`, routes are separated from business logic, which is handled in `AuthService`.
|
||||
- Write self-documenting code and add comments where the logic is non-trivial.
|
||||
- **Example**: Use descriptive function and variable names in `auth.js`, and add comments for complex asynchronous operations.
|
||||
- Embrace declarative programming and adhere to SOLID principles.
|
||||
- **Example**: In service functions, ensure each function has a single responsibility and dependencies are injected rather than hardcoded.
|
||||
|
||||
4. Consistency & Tools Integration:
|
||||
- Leverage existing tools like Prettier and ESLint to automatically enforce style and formatting rules.
|
||||
- **Example**: Use `.prettierrc` and `.eslintrc.cjs` for configuration in your project.
|
||||
- Use TypeScript in the frontend to ensure type safety and catch errors early.
|
||||
- **Example**: Define interfaces and types in your React components to enforce strict typing.
|
||||
- Maintain uniformity in API design and error handling strategies.
|
||||
- **Example**: Consistently use Passport for authentication and a common error handling middleware in `auth.js`.
|
||||
|
||||
## Group 2 – Naming Conventions
|
||||
1. File Naming and Structure:
|
||||
• Frontend:
|
||||
- Page Files: Use lower-case filenames (e.g., index.tsx) as prescribed by Next.js conventions.
|
||||
- **Example**: `pages/index.tsx`, `pages/about.tsx`
|
||||
- Component Files: Use PascalCase for React component files (e.g., WebSiteHeader.tsx, NavBar.tsx).
|
||||
- **Example**: `components/Header.tsx`, `components/Footer.tsx`
|
||||
- Directories: Use clear, descriptive names (e.g., 'pages', 'components', 'WebPageComponents').
|
||||
- **Example**: `src/pages`, `src/components`
|
||||
• Backend:
|
||||
- Use lower-case filenames for modules (e.g., index.js, auth.js, projects.js).
|
||||
- **Example**: `routes/auth.js`, `services/user.js`
|
||||
- When needed, use hyphenation for clarity, but maintain consistency.
|
||||
- **Example**: `helpers/wrap-async.js`
|
||||
|
||||
2. Component and Module Naming:
|
||||
• Frontend:
|
||||
- React Components: Define components in PascalCase.
|
||||
- TypeScript Interfaces/Types: Use PascalCase (e.g., WebSiteHeaderProps).
|
||||
• Backend:
|
||||
- Classes (if any) and constructors should be in PascalCase; most helper functions and modules use camelCase.
|
||||
|
||||
3. Variable, Function, and Hook Naming:
|
||||
• Use camelCase for variables and function names in both frontend and backend.
|
||||
- **Example**:
|
||||
```javascript
|
||||
const userName = 'John Doe';
|
||||
function handleLogin() { ... }
|
||||
```
|
||||
• Custom Hooks: Prefix with 'use' (e.g., useAuth, useForm).
|
||||
- **Example**:
|
||||
```typescript
|
||||
const useAuth = () => {
|
||||
const [isAuthenticated, setIsAuthenticated] = useState(false);
|
||||
return { isAuthenticated, setIsAuthenticated };
|
||||
};
|
||||
```
|
||||
|
||||
4. Consistency and Readability:
|
||||
• Maintain uniform naming across the project to ensure clarity and ease of maintenance.
|
||||
- **Example**: Use consistent naming conventions for variables, functions, and components, such as camelCase for variables and functions, and PascalCase for components.
|
||||
- **Example**: In `auth.js`, ensure that all function names clearly describe their purpose, such as `handleLogin` or `validateUserInput`.
|
||||
|
||||
## Group 3 – Frontend & React Best Practices
|
||||
1. Use of Functional Components & TypeScript:
|
||||
• Build all components as functional components.
|
||||
- **Example**:
|
||||
```typescript
|
||||
const Header: React.FC = () => {
|
||||
return <header>Header Content</header>;
|
||||
};
|
||||
```
|
||||
• Leverage TypeScript for static type checking and enforce strict prop and state types.
|
||||
- **Example**:
|
||||
```typescript
|
||||
interface ButtonProps {
|
||||
onClick: () => void;
|
||||
}
|
||||
const Button: React.FC<ButtonProps> = ({ onClick }) => (
|
||||
<button onClick={onClick}>Click me</button>
|
||||
);
|
||||
```
|
||||
|
||||
2. Effective Use of React Hooks:
|
||||
• Utilize useState and useEffect appropriately with proper dependency arrays.
|
||||
- **Example**:
|
||||
```typescript
|
||||
const [count, setCount] = useState(0);
|
||||
useEffect(() => {
|
||||
console.log('Component mounted');
|
||||
}, []);
|
||||
```
|
||||
• Create custom hooks to encapsulate shared logic (e.g., useAppSelector).
|
||||
- **Example**:
|
||||
```typescript
|
||||
const useAuth = () => {
|
||||
const [isAuthenticated, setIsAuthenticated] = useState(false);
|
||||
return { isAuthenticated, setIsAuthenticated };
|
||||
};
|
||||
```
|
||||
|
||||
3. Component Composition & Separation of Concerns:
|
||||
• Separate presentational (stateless) components from container components managing logic.
|
||||
- **Example**: Use `LayoutGuest` to encapsulate common page structures.
|
||||
|
||||
4. Code Quality & Readability:
|
||||
• Maintain consistent formatting and adhere to Prettier and ESLint rules.
|
||||
• Use descriptive names for variables, functions, and components.
|
||||
• Document non-trivial logic with inline comments and consider implementing error boundaries where needed.
|
||||
• New code must adhere to these conventions to avoid ambiguity.
|
||||
• Use descriptive names that reflect the purpose and domain, avoiding abbreviations unless standard in the project.
|
||||
|
||||
## Group 4 – Backend & API Guidelines
|
||||
1. API Endpoint Design & Documentation:
|
||||
• Follow RESTful naming conventions; all route handlers should be named clearly and consistently.
|
||||
- **Example**: Use verbs like `GET`, `POST`, `PUT`, `DELETE` to define actions, e.g., `GET /api/auth/me` to retrieve user info.
|
||||
• Document endpoints with Swagger annotations to provide descriptions, expected request bodies, and response codes.
|
||||
- **Example**:
|
||||
```javascript
|
||||
/**
|
||||
* @swagger
|
||||
* /api/auth/signin:
|
||||
* post:
|
||||
* summary: Sign in a user
|
||||
* requestBody:
|
||||
* description: User credentials
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Auth"
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Successful login
|
||||
* 400:
|
||||
* description: Invalid username/password supplied
|
||||
*/
|
||||
```
|
||||
• Examples (for Auth endpoints):
|
||||
- POST /api/auth/signin/local
|
||||
• Description: Logs the user into the system.
|
||||
• Request Body (application/json):
|
||||
{ "email": "admin@flatlogic.com", "password": "password" }
|
||||
• Responses:
|
||||
- 200: Successful login (returns token and user data).
|
||||
- 400: Invalid username/password supplied.
|
||||
- GET /api/auth/me
|
||||
• Description: Retrieves current authorized user information.
|
||||
• Secured via Passport JWT; uses req.currentUser.
|
||||
• Responses:
|
||||
- 200: Returns current user info.
|
||||
- 400: Invalid credentials or missing user data.
|
||||
- POST /api/auth/signup
|
||||
• Description: Registers a new user.
|
||||
• Request Body (application/json):
|
||||
{ "email": "admin@flatlogic.com", "password": "password" }
|
||||
• Responses:
|
||||
- 200: New user signed up successfully.
|
||||
- 400: Invalid input supplied.
|
||||
- 500: Server error.
|
||||
|
||||
## Group 5 – Testing, Quality Assurance & Error Handling
|
||||
1. Testing Guidelines:
|
||||
• Write unit tests for critical backend and frontend components using frameworks such as Jest, React Testing Library, and Mocha/Chai.
|
||||
- **Example**:
|
||||
```javascript
|
||||
test('should return user data', async () => {
|
||||
const user = await getUserData();
|
||||
expect(user).toHaveProperty('email');
|
||||
});
|
||||
```
|
||||
• Practice test-driven development and maintain high test coverage.
|
||||
• Regularly update tests following changes in business logic.
|
||||
|
||||
2. Quality Assurance:
|
||||
• Enforce code quality with ESLint, Prettier, and static analysis tools.
|
||||
• Integrate continuous testing workflows (CI/CD) to catch issues early.
|
||||
- **Example**: Use GitHub Actions for automated testing and deployment.
|
||||
• Ensure documentation is kept up-to-date with the implemented code.
|
||||
|
||||
3. Error Handling:
|
||||
• Back-end:
|
||||
- Wrap asynchronous route handlers with a helper (e.g., wrapAsync) to capture errors.
|
||||
- **Example**:
|
||||
```javascript
|
||||
router.post('/signin', wrapAsync(async (req, res) => {
|
||||
const user = await AuthService.signin(req.body);
|
||||
res.send(user);
|
||||
}));
|
||||
```
|
||||
- Use centralized error handling middleware (e.g., commonErrorHandler) for uniform error responses.
|
||||
• Front-end:
|
||||
- Implement error boundaries in React to gracefully handle runtime errors.
|
||||
- Display user-friendly error messages and log errors for further analysis.
|
||||
|
||||
2. Authentication & Security:
|
||||
• Protect endpoints by using Passport.js with JWT (e.g., passport.authenticate('jwt', { session: false })).
|
||||
- **Example**:
|
||||
```javascript
|
||||
router.get('/profile', passport.authenticate('jwt', { session: false }), (req, res) => {
|
||||
res.send(req.user);
|
||||
});
|
||||
```
|
||||
• Ensure that secure routes check for existence of req.currentUser. If absent, return a ForbiddenError.
|
||||
|
||||
3. Consistent Error Handling & Middleware Usage:
|
||||
• Wrap asynchronous route handlers with helpers like wrapAsync for error propagation.
|
||||
• Use centralized error handling middleware (e.g., commonErrorHandler) to capture and format errors uniformly.
|
||||
|
||||
4. Modular Code Organization:
|
||||
• Organize backend code into separate files for routes, services, and database access (e.g., auth.js, projects.js, tasks.js).
|
||||
• Use descriptive, lowercase filenames for modules and routes.
|
||||
|
||||
5. Endpoint Security Best Practices:
|
||||
• Validate input data and sanitize requests where necessary.
|
||||
• Restrict sensitive operations to authenticated users with proper role-based permissions.
|
||||
|
||||
|
||||
────────────────────────────────────────
|
||||
Group 6 – Accessibility, UI, and Styling Guidelines (Updated)
|
||||
────────────────────────────────────────
|
||||
1. Sidebar Styling:
|
||||
• The sidebar is implemented in the authenticated layout via the AsideMenu component, with the actual element defined in AsideMenuLayer (located at frontend/src/components/AsideMenuLayer.tsx) as an <aside> element with id="asideMenu".
|
||||
- **Example**:
|
||||
```css
|
||||
#asideMenu {
|
||||
background-color: #F8F4E1 !important;
|
||||
}
|
||||
```
|
||||
• When modifying sidebar styles, target #asideMenu and its child elements rather than generic selectors (e.g., avoid .app-sidebar) to ensure that the changes affect the actual rendered sidebar.
|
||||
• Remove or override any conflicting background utilities (such as an unwanted bg-white) so our desired background color (#F8F4E1) is fully visible. Use a highly specific selector if necessary.
|
||||
• Adjust spacing (padding/margins) at both the container (#asideMenu) and the individual menu item level to maintain a consistent, compact design.
|
||||
|
||||
2. General Project Styling and Tailwind CSS Usage:
|
||||
• The application leverages Tailwind CSS extensively, with core styling defined in _theme.css using the @apply directive. Any new modifications should follow this pattern to ensure consistency.
|
||||
- **Example**:
|
||||
```css
|
||||
.btn {
|
||||
@apply bg-blue-500 text-white;
|
||||
}
|
||||
```
|
||||
• The themed blocks (like .theme-pink and .theme-green) standardize the UI's appearance. When applying custom overrides, ensure they integrate cleanly into these structures and avoid conflicts or circular dependency errors (e.g., issues when redefining utilities such as text-blue-600).
|
||||
• Adjustments via Tailwind CSS generally require modifying class names in the components and ensuring that global overrides are applied in the correct order. Consistent use of design tokens and custom color codes (e.g., #F8F4E1) throughout the app is crucial to a cohesive design.
|
||||
• Specificity is key. If a change isn't visually reflected as expected, inspect the rendered HTML to identify which classes are taking precedence.
|
||||
3
.dockerignore
Normal file
3
.dockerignore
Normal file
@ -0,0 +1,3 @@
|
||||
backend/node_modules
|
||||
frontend/node_modules
|
||||
frontend/build
|
||||
42
.github/workflows/quality.yml
vendored
Normal file
42
.github/workflows/quality.yml
vendored
Normal file
@ -0,0 +1,42 @@
|
||||
name: Quality
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
push:
|
||||
branches: [main]
|
||||
|
||||
jobs:
|
||||
test:
|
||||
runs-on: ubuntu-latest
|
||||
env:
|
||||
SECRET_KEY: ci-only-secret
|
||||
NEXT_PUBLIC_SITE_URL: https://coaching-workspace.example.co
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: 22
|
||||
cache: yarn
|
||||
cache-dependency-path: |
|
||||
backend/yarn.lock
|
||||
frontend/yarn.lock
|
||||
- name: Backend checks
|
||||
working-directory: backend
|
||||
run: yarn install --frozen-lockfile && yarn lint && yarn test
|
||||
- name: Frontend checks
|
||||
working-directory: frontend
|
||||
run: yarn install --frozen-lockfile && yarn lint && yarn typecheck && yarn build
|
||||
- name: Start frontend
|
||||
working-directory: frontend
|
||||
run: yarn start &
|
||||
- name: Accessibility checks
|
||||
working-directory: frontend
|
||||
run: |
|
||||
for attempt in $(seq 1 30); do
|
||||
if curl --fail --silent http://127.0.0.1:3000/ > /dev/null; then
|
||||
break
|
||||
fi
|
||||
sleep 1
|
||||
done
|
||||
curl --fail http://127.0.0.1:3000/ > /dev/null
|
||||
yarn a11y
|
||||
3
.gitignore
vendored
Normal file
3
.gitignore
vendored
Normal file
@ -0,0 +1,3 @@
|
||||
node_modules/
|
||||
*/node_modules/
|
||||
*/build/
|
||||
0
.perm_test_apache
Normal file
0
.perm_test_apache
Normal file
0
.perm_test_exec
Normal file
0
.perm_test_exec
Normal file
187
502.html
Normal file
187
502.html
Normal file
@ -0,0 +1,187 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Service Starting</title>
|
||||
<style>
|
||||
body {
|
||||
font-family: sans-serif;
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
justify-content: center;
|
||||
align-items: center;
|
||||
min-height: 100vh;
|
||||
background-color: #EFF2FF;
|
||||
margin: 0;
|
||||
padding: 20px;
|
||||
}
|
||||
|
||||
.container {
|
||||
text-align: center;
|
||||
padding: 30px 40px;
|
||||
background-color: #fff;
|
||||
border-radius: 20px;
|
||||
margin-bottom: 20px;
|
||||
max-width: 538px;
|
||||
width: 100%;
|
||||
box-shadow: 0 13px 34px 0 rgba(167, 187, 242, 0.2);
|
||||
box-sizing: border-box;
|
||||
}
|
||||
|
||||
#status-heading {
|
||||
font-size: 24px;
|
||||
font-weight: 700;
|
||||
color: #02004E;
|
||||
margin-bottom: 20px;
|
||||
}
|
||||
|
||||
h2 {
|
||||
color: #333;
|
||||
margin-bottom: 15px;
|
||||
}
|
||||
|
||||
p {
|
||||
color: #666;
|
||||
font-size: 1.1em;
|
||||
margin-bottom: 10px;
|
||||
}
|
||||
|
||||
.tip {
|
||||
font-weight: 300;
|
||||
font-size: 17px;
|
||||
line-height: 150%;
|
||||
letter-spacing: 0;
|
||||
text-align: center;
|
||||
margin-top: 30px;
|
||||
}
|
||||
|
||||
.loader-container {
|
||||
position: relative;
|
||||
display: flex;
|
||||
justify-content: center;
|
||||
align-items: center;
|
||||
}
|
||||
|
||||
.loader {
|
||||
width: 100px;
|
||||
aspect-ratio: 1;
|
||||
border-radius: 50%;
|
||||
background:
|
||||
radial-gradient(farthest-side, #5C7EF1 94%, #0000) top/8px 8px no-repeat,
|
||||
conic-gradient(#0000 30%, #5C7EF1);
|
||||
-webkit-mask: radial-gradient(farthest-side, #0000 calc(100% - 8px), #000 0);
|
||||
animation: l13 2s infinite linear;
|
||||
}
|
||||
|
||||
@keyframes l13 {
|
||||
100% {
|
||||
transform: rotate(1turn)
|
||||
}
|
||||
}
|
||||
|
||||
.app-logo {
|
||||
position: absolute;
|
||||
width: 36px;
|
||||
}
|
||||
|
||||
.panel {
|
||||
padding: 0 18px;
|
||||
display: none;
|
||||
background-color: white;
|
||||
overflow: hidden;
|
||||
margin-top: 10px;
|
||||
}
|
||||
.show {
|
||||
display: block;
|
||||
}
|
||||
|
||||
.project-info {
|
||||
border: 1px solid #8C9DFF;
|
||||
border-radius: 10px;
|
||||
padding: 12px 16px;
|
||||
max-width: 600px;
|
||||
margin: 40px auto;
|
||||
background-color: #FBFCFF;
|
||||
}
|
||||
|
||||
.project-info h2 {
|
||||
color: #02004E;
|
||||
font-size: 14px;
|
||||
font-weight: 500;
|
||||
margin-bottom: 10px;
|
||||
text-align: left;
|
||||
}
|
||||
|
||||
.project-info p {
|
||||
color: #686791;
|
||||
font-size: 12px;
|
||||
font-weight: 400;
|
||||
text-align: left;
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<div class="container">
|
||||
<h2 id="status-heading">Loading the app, just a moment…</h2>
|
||||
<p class="tip">The application is currently launching. The page will automatically refresh once site is
|
||||
available.</p>
|
||||
<div class="project-info">
|
||||
<h2>Coaching Workspace — Client Portal & AI Session Memory</h2>
|
||||
<p>Internal sales pipeline CRM to track leads, deals, contacts, and follow-ups with clear stage visibility.</p>
|
||||
</div>
|
||||
<div class="loader-container">
|
||||
<img src="https://flatlogic.com/blog/wp-content/uploads/2025/05/logo-bot-1.png" alt="App Logo"
|
||||
class="app-logo">
|
||||
<div class="loader"></div>
|
||||
</div>
|
||||
<div class="panel">
|
||||
<video width="100%" height="315" controls loop>
|
||||
<source
|
||||
src="https://flatlogic.com/blog/wp-content/uploads/2025/04/20250430_1336_professional_dynamo_spinner_simple_compose_01jt349yvtenxt7xhg8hhr85j8.mp4"
|
||||
type="video/mp4">
|
||||
Your browser does not support the video tag.
|
||||
</video>
|
||||
</div>
|
||||
</div>
|
||||
<script>
|
||||
function checkAvailability() {
|
||||
fetch('/')
|
||||
.then(response => {
|
||||
if (response.ok) {
|
||||
window.location.reload();
|
||||
} else {
|
||||
setTimeout(checkAvailability, 5000);
|
||||
}
|
||||
})
|
||||
.catch(() => {
|
||||
setTimeout(checkAvailability, 5000);
|
||||
});
|
||||
}
|
||||
document.addEventListener('DOMContentLoaded', checkAvailability);
|
||||
|
||||
document.addEventListener('DOMContentLoaded', function () {
|
||||
const appTitle = document.querySelector('#status-heading');
|
||||
const panel = document.querySelector('.panel');
|
||||
const video = panel.querySelector('video');
|
||||
let clickCount = 0;
|
||||
|
||||
appTitle.addEventListener('click', function () {
|
||||
clickCount++;
|
||||
if (clickCount === 5) {
|
||||
panel.classList.toggle('show');
|
||||
if (panel.classList.contains('show')) {
|
||||
video.play();
|
||||
} else {
|
||||
video.pause();
|
||||
}
|
||||
clickCount = 0;
|
||||
}
|
||||
});
|
||||
});
|
||||
</script>
|
||||
</body>
|
||||
|
||||
</html>
|
||||
21
Dockerfile
Normal file
21
Dockerfile
Normal file
@ -0,0 +1,21 @@
|
||||
FROM node:20.15.1-alpine AS builder
|
||||
RUN apk add --no-cache git
|
||||
WORKDIR /app
|
||||
COPY frontend/package.json frontend/yarn.lock ./
|
||||
RUN yarn install --pure-lockfile
|
||||
COPY frontend .
|
||||
RUN yarn build
|
||||
|
||||
|
||||
|
||||
FROM node:20.15.1-alpine
|
||||
WORKDIR /app
|
||||
COPY backend/package.json backend/yarn.lock ./
|
||||
RUN yarn install --pure-lockfile
|
||||
COPY backend .
|
||||
|
||||
COPY --from=builder /app/build /app/public
|
||||
CMD ["yarn", "start"]
|
||||
|
||||
|
||||
|
||||
85
Dockerfile.dev
Normal file
85
Dockerfile.dev
Normal file
@ -0,0 +1,85 @@
|
||||
# Base image for Node.js dependencies
|
||||
FROM node:20.15.1-alpine AS frontend-deps
|
||||
RUN apk add --no-cache git
|
||||
WORKDIR /app/frontend
|
||||
COPY frontend/package.json frontend/yarn.lock ./
|
||||
RUN yarn install --pure-lockfile
|
||||
|
||||
FROM node:20.15.1-alpine AS backend-deps
|
||||
RUN apk add --no-cache git
|
||||
WORKDIR /app/backend
|
||||
COPY backend/package.json backend/yarn.lock ./
|
||||
RUN yarn install --pure-lockfile
|
||||
|
||||
FROM node:20.15.1-alpine AS app-shell-deps
|
||||
RUN apk add --no-cache git
|
||||
WORKDIR /app/app-shell
|
||||
COPY app-shell/package.json app-shell/yarn.lock ./
|
||||
RUN yarn install --pure-lockfile
|
||||
|
||||
# Nginx setup and application build
|
||||
FROM node:20.15.1-alpine AS build
|
||||
RUN apk add --no-cache git nginx curl
|
||||
RUN apk add --no-cache lsof procps
|
||||
RUN yarn global add concurrently
|
||||
|
||||
RUN apk add --no-cache \
|
||||
chromium \
|
||||
nss \
|
||||
freetype \
|
||||
harfbuzz \
|
||||
ttf-freefont \
|
||||
fontconfig
|
||||
|
||||
ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
|
||||
ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
|
||||
|
||||
RUN mkdir -p /app/pids
|
||||
|
||||
# Make sure to add yarn global bin to PATH
|
||||
ENV PATH /root/.yarn/bin:/root/.config/yarn/global/node_modules/.bin:$PATH
|
||||
|
||||
# Copy dependencies
|
||||
WORKDIR /app
|
||||
COPY --from=frontend-deps /app/frontend /app/frontend
|
||||
COPY --from=backend-deps /app/backend /app/backend
|
||||
COPY --from=app-shell-deps /app/app-shell /app/app-shell
|
||||
|
||||
COPY frontend /app/frontend
|
||||
COPY backend /app/backend
|
||||
COPY app-shell /app/app-shell
|
||||
COPY docker /app/docker
|
||||
|
||||
# Copy all files from root to /app
|
||||
COPY . /app
|
||||
|
||||
# Copy Nginx configuration
|
||||
COPY nginx.conf /etc/nginx/nginx.conf
|
||||
|
||||
# Copy custom error page
|
||||
COPY 502.html /usr/share/nginx/html/502.html
|
||||
|
||||
# Change owner and permissions of the error page
|
||||
RUN chown nginx:nginx /usr/share/nginx/html/502.html && \
|
||||
chmod 644 /usr/share/nginx/html/502.html
|
||||
|
||||
# Expose the port the app runs on
|
||||
EXPOSE 8080
|
||||
ENV NODE_ENV=dev_stage
|
||||
ENV FRONT_PORT=3001
|
||||
ENV BACKEND_PORT=3000
|
||||
ENV APP_SHELL_PORT=4000
|
||||
|
||||
|
||||
CMD ["sh", "-c", "\
|
||||
yarn --cwd /app/frontend dev & echo $! > /app/pids/frontend.pid && \
|
||||
yarn --cwd /app/backend start & echo $! > /app/pids/backend.pid && \
|
||||
sleep 10 && nginx -g 'daemon off;' & \
|
||||
NGINX_PID=$! && \
|
||||
echo 'Waiting for backend (port 3000) to be available...' && \
|
||||
while ! nc -z localhost ${BACKEND_PORT}; do \
|
||||
sleep 2; \
|
||||
done && \
|
||||
echo 'Backend is up. Starting app_shell for Git check...' && \
|
||||
yarn --cwd /app/app-shell start && \
|
||||
wait $NGINX_PID"]
|
||||
21
README.md
Normal file
21
README.md
Normal file
@ -0,0 +1,21 @@
|
||||
# Coaching Workspace — Client Portal & AI Session Memory
|
||||
|
||||
A prebuilt coaching SaaS workspace with a public coaching site, client CRM,
|
||||
session notes, consent-aware AI summaries, follow-up drafts, next-session prep,
|
||||
action items, reminders, intake, and a client portal.
|
||||
|
||||
## Stack
|
||||
|
||||
- Frontend: Next.js and React
|
||||
- Backend: Node.js and Express
|
||||
- Database: PostgreSQL
|
||||
- Styling: Tailwind CSS
|
||||
|
||||
## Development
|
||||
|
||||
Run the backend and frontend from their respective directories. Runtime database,
|
||||
project, domain, and AI proxy settings are supplied by AppWizzy when a project is
|
||||
created from the template.
|
||||
|
||||
Do not add provider API keys to the repository. AI features must use the existing
|
||||
AppWizzy proxy integration through the backend.
|
||||
1
REMEDIATION_BUILD
Normal file
1
REMEDIATION_BUILD
Normal file
@ -0,0 +1 @@
|
||||
coaching-workspace-20260722-r2
|
||||
41
SECURITY_AND_OPERATIONS.md
Normal file
41
SECURITY_AND_OPERATIONS.md
Normal file
@ -0,0 +1,41 @@
|
||||
# Coaching Workspace security and operations
|
||||
|
||||
This template is a single-workspace deployment. Each coach or practice receives its own virtual machine, PostgreSQL database, secrets, and private upload directory. It is not a shared multi-tenant SaaS database.
|
||||
|
||||
## Required production configuration
|
||||
|
||||
- Set `NODE_ENV=production`, `PUBLIC_APP_URL` to the final HTTPS origin, and strong unique values for all database, JWT, email, and AI proxy secrets.
|
||||
- Set `COACHING_UPLOAD_DIR` and `COACHING_BACKUP_DIR` to persistent private paths readable only by the application operator.
|
||||
- Install ClamAV and keep its definitions current. Uploads fail closed when `clamscan` is unavailable or reports a threat.
|
||||
- Set `SENTRY_DSN` for backend exception monitoring. Never attach transcript, audio, private-note, or generated-content bodies to monitoring events.
|
||||
- Keep `DEMO_MODE=false` for customer workspaces. A public fictional demo must use `DEMO_MODE=true` and `NEXT_PUBLIC_DEMO_MODE=true`.
|
||||
- Configure encrypted VM storage and encrypted backups in the hosting layer. The application cannot truthfully claim encryption at rest until the operator verifies both.
|
||||
|
||||
## Retention
|
||||
|
||||
The daily scheduler enforces these defaults:
|
||||
|
||||
- Raw audio: 30 days (`COACHING_AUDIO_RETENTION_DAYS`)
|
||||
- Transcript text: 90 days (`COACHING_TRANSCRIPT_RETENTION_DAYS`)
|
||||
- Deleted session memories and their action/preparation records: 30 days (`COACHING_DELETED_RECORD_RETENTION_DAYS`)
|
||||
- Backup files: 30 days (`COACHING_BACKUP_EXPIRY_DAYS`)
|
||||
|
||||
Run the job manually with `yarn coaching:retention` from `backend`. Failures are logged and cause a non-zero exit.
|
||||
|
||||
## Backup and restore verification
|
||||
|
||||
Create database backups with the PostgreSQL credentials supplied through the production environment. Store the result in `COACHING_BACKUP_DIR`, never in a public web directory. Private uploads must be backed up separately with the same access controls and expiry.
|
||||
|
||||
At least monthly, restore the newest database backup into an isolated database and run migrations plus the backend test suite against it. Verify row counts for users, clients, sessions, action items, resources, consent records, and audit events without printing confidential field values. Verify a sample private upload by checksum, then destroy the isolated restore database and record the date, backup identifier, operator, and result.
|
||||
|
||||
Do not treat an untested backup as recoverable. A failed backup, restore, malware scan, migration, retention run, or monitoring delivery requires visible operator action.
|
||||
|
||||
## Release verification
|
||||
|
||||
Before making a deployment public:
|
||||
|
||||
1. Run backend tests, lint, and dependency audit.
|
||||
2. Run frontend lint, typecheck, production build, dependency audit, and accessibility checks.
|
||||
3. Run the role-by-route, role-by-API, object-isolation, consent, demo-mode, upload, deletion, invitation, and reminder matrices.
|
||||
4. Confirm production security headers, secure cookies, no development assets, `noindex` on authenticated/demo pages, and private-file authorization.
|
||||
5. Confirm public data is synthetic or explicitly approved and that legal entity/contact/effective-date fields have been reviewed before publication.
|
||||
4
backend/.eslintignore
Normal file
4
backend/.eslintignore
Normal file
@ -0,0 +1,4 @@
|
||||
# Ignore generated and runtime files
|
||||
node_modules/
|
||||
tmp/
|
||||
logs/
|
||||
15
backend/.eslintrc.cjs
Normal file
15
backend/.eslintrc.cjs
Normal file
@ -0,0 +1,15 @@
|
||||
module.exports = {
|
||||
env: {
|
||||
node: true,
|
||||
es2021: true
|
||||
},
|
||||
extends: [
|
||||
'eslint:recommended'
|
||||
],
|
||||
plugins: [
|
||||
'import'
|
||||
],
|
||||
rules: {
|
||||
'import/no-unresolved': 'error'
|
||||
}
|
||||
};
|
||||
11
backend/.prettierrc
Normal file
11
backend/.prettierrc
Normal file
@ -0,0 +1,11 @@
|
||||
{
|
||||
"singleQuote": true,
|
||||
"tabWidth": 2,
|
||||
"printWidth": 80,
|
||||
"trailingComma": "all",
|
||||
"quoteProps": "as-needed",
|
||||
"jsxSingleQuote": true,
|
||||
"bracketSpacing": true,
|
||||
"bracketSameLine": false,
|
||||
"arrowParens": "always"
|
||||
}
|
||||
7
backend/.sequelizerc
Normal file
7
backend/.sequelizerc
Normal file
@ -0,0 +1,7 @@
|
||||
const path = require('path');
|
||||
module.exports = {
|
||||
"config": path.resolve("src", "db", "db.config.js"),
|
||||
"models-path": path.resolve("src", "db", "models"),
|
||||
"seeders-path": path.resolve("src", "db", "seeders"),
|
||||
"migrations-path": path.resolve("src", "db", "migrations")
|
||||
};
|
||||
23
backend/Dockerfile
Normal file
23
backend/Dockerfile
Normal file
@ -0,0 +1,23 @@
|
||||
FROM node:20.15.1-alpine
|
||||
|
||||
RUN apk update && apk add bash
|
||||
# Create app directory
|
||||
WORKDIR /usr/src/app
|
||||
|
||||
# Install app dependencies
|
||||
# A wildcard is used to ensure both package.json AND package-lock.json are copied
|
||||
# where available (npm@5+)
|
||||
COPY package*.json ./
|
||||
|
||||
RUN yarn install
|
||||
# If you are building your code for production
|
||||
# RUN npm ci --only=production
|
||||
|
||||
|
||||
# Bundle app source
|
||||
COPY . .
|
||||
|
||||
|
||||
EXPOSE 8080
|
||||
|
||||
CMD [ "yarn", "start" ]
|
||||
56
backend/README.md
Normal file
56
backend/README.md
Normal file
@ -0,0 +1,56 @@
|
||||
|
||||
# Coaching SaaS Workspace - template backend
|
||||
|
||||
#### Run App on local machine:
|
||||
|
||||
##### Install local dependencies:
|
||||
- `yarn install`
|
||||
|
||||
------------
|
||||
|
||||
##### Adjust local db:
|
||||
###### 1. Install postgres:
|
||||
- MacOS:
|
||||
- `brew install postgres`
|
||||
|
||||
- Ubuntu:
|
||||
- `sudo apt update`
|
||||
- `sudo apt install postgresql postgresql-contrib`
|
||||
|
||||
###### 2. Create db and admin user:
|
||||
- Before run and test connection, make sure you have created a database as described in the above configuration. You can use the `psql` command to create a user and database.
|
||||
- `psql postgres --u postgres`
|
||||
|
||||
- Next, type this command for creating a new user with password then give access for creating the database.
|
||||
- `postgres-# CREATE ROLE admin WITH LOGIN PASSWORD 'admin_pass';`
|
||||
- `postgres-# ALTER ROLE admin CREATEDB;`
|
||||
|
||||
- Quit `psql` then log in again using the new user that previously created.
|
||||
- `postgres-# \q`
|
||||
- `psql postgres -U admin`
|
||||
|
||||
- Type this command to creating a new database.
|
||||
- `postgres=> CREATE DATABASE db_coaching_saas_workspace;`
|
||||
|
||||
- Then give that new user privileges to the new database then quit the `psql`.
|
||||
- `postgres=> GRANT ALL PRIVILEGES ON DATABASE db_coaching_saas_workspace TO admin;`
|
||||
- `postgres=> \q`
|
||||
|
||||
------------
|
||||
|
||||
#### Api Documentation (Swagger)
|
||||
|
||||
http://localhost:8080/api-docs (local host)
|
||||
|
||||
http://host_name/api-docs
|
||||
|
||||
------------
|
||||
|
||||
##### Setup database tables or update after schema change
|
||||
- `yarn db:migrate`
|
||||
|
||||
##### Seed the initial data (admin users, roles, and coaching demo data):
|
||||
- `yarn db:seed`
|
||||
|
||||
##### Start build:
|
||||
- `yarn start`
|
||||
67
backend/package.json
Normal file
67
backend/package.json
Normal file
@ -0,0 +1,67 @@
|
||||
{
|
||||
"name": "coaching-saas-workspace",
|
||||
"description": "Coaching SaaS Workspace - template backend",
|
||||
"scripts": {
|
||||
"start": "node src/index.js",
|
||||
"start:development": "npm run db:migrate && npm run db:seed && npm run watch",
|
||||
"setup:production": "npm run db:migrate && npm run db:seed",
|
||||
"lint": "eslint . --ext .js",
|
||||
"test": "node --test test/*.test.js",
|
||||
"coaching:retention": "node src/jobs/enforceCoachingRetention.js",
|
||||
"coaching:reminders": "node src/jobs/scheduleCoachingReminders.js",
|
||||
"db:migrate": "sequelize-cli db:migrate",
|
||||
"db:seed": "sequelize-cli db:seed:all",
|
||||
"db:drop": "sequelize-cli db:drop",
|
||||
"db:create": "sequelize-cli db:create",
|
||||
"watch": "node watcher.js"
|
||||
},
|
||||
"dependencies": {
|
||||
"@sentry/node": "^10.67.0",
|
||||
"axios": "^1.18.1",
|
||||
"bcrypt": "^6.0.0",
|
||||
"chokidar": "^4.0.3",
|
||||
"cors": "^2.8.6",
|
||||
"csv-parser": "^3.2.1",
|
||||
"express": "^4.21.2",
|
||||
"formidable": "^3.5.4",
|
||||
"helmet": "^8.3.0",
|
||||
"json2csv": "^5.0.7",
|
||||
"jsonwebtoken": "^9.0.2",
|
||||
"lodash": "^4.18.1",
|
||||
"moment": "2.30.1",
|
||||
"multer": "^2.0.2",
|
||||
"nodemailer": "^9.0.3",
|
||||
"passport": "^0.7.0",
|
||||
"passport-google-oauth2": "^0.2.0",
|
||||
"passport-jwt": "^4.0.1",
|
||||
"passport-microsoft": "^0.1.0",
|
||||
"pg": "^8.16.3",
|
||||
"pg-hstore": "2.3.4",
|
||||
"sequelize": "^6.37.8",
|
||||
"sequelize-json-schema": "^2.1.1"
|
||||
},
|
||||
"engines": {
|
||||
"node": ">=18"
|
||||
},
|
||||
"private": true,
|
||||
"devDependencies": {
|
||||
"cross-env": "7.0.3",
|
||||
"eslint": "^8.57.1",
|
||||
"eslint-plugin-import": "^2.29.1",
|
||||
"node-mocks-http": "1.9.0",
|
||||
"nodemon": "^3.1.10",
|
||||
"sequelize-cli": "^6.6.5",
|
||||
"swagger-jsdoc": "^6.3.0",
|
||||
"swagger-ui-express": "^5.0.1"
|
||||
},
|
||||
"resolutions": {
|
||||
"js-yaml": "^5.2.1",
|
||||
"dottie": "2.0.7",
|
||||
"jws": "4.0.1",
|
||||
"lodash": "^4.18.1",
|
||||
"passport-oauth2": "1.8.0",
|
||||
"underscore": "^1.13.8",
|
||||
"uuid": "11.1.1",
|
||||
"validator": "^13.15.35"
|
||||
}
|
||||
}
|
||||
482
backend/src/ai/LocalAIApi.js
Normal file
482
backend/src/ai/LocalAIApi.js
Normal file
@ -0,0 +1,482 @@
|
||||
"use strict";
|
||||
|
||||
const fs = require("fs");
|
||||
const path = require("path");
|
||||
const http = require("http");
|
||||
const https = require("https");
|
||||
const { URL } = require("url");
|
||||
|
||||
let CONFIG_CACHE = null;
|
||||
|
||||
class LocalAIApi {
|
||||
static createResponse(params, options) {
|
||||
return createResponse(params, options);
|
||||
}
|
||||
|
||||
static request(pathValue, payload, options) {
|
||||
return request(pathValue, payload, options);
|
||||
}
|
||||
|
||||
static fetchStatus(aiRequestId, options) {
|
||||
return fetchStatus(aiRequestId, options);
|
||||
}
|
||||
|
||||
static awaitResponse(aiRequestId, options) {
|
||||
return awaitResponse(aiRequestId, options);
|
||||
}
|
||||
|
||||
static extractText(response) {
|
||||
return extractText(response);
|
||||
}
|
||||
|
||||
static decodeJsonFromResponse(response) {
|
||||
return decodeJsonFromResponse(response);
|
||||
}
|
||||
}
|
||||
|
||||
async function createResponse(params, options = {}) {
|
||||
const payload = { ...(params || {}) };
|
||||
|
||||
if (!Array.isArray(payload.input) || payload.input.length === 0) {
|
||||
return {
|
||||
success: false,
|
||||
error: "input_missing",
|
||||
message: 'Parameter "input" is required and must be a non-empty array.',
|
||||
};
|
||||
}
|
||||
|
||||
const cfg = config();
|
||||
if (!payload.model) {
|
||||
payload.model = cfg.defaultModel;
|
||||
}
|
||||
|
||||
const initial = await request(options.path, payload, options);
|
||||
if (!initial.success) {
|
||||
return initial;
|
||||
}
|
||||
|
||||
const data = initial.data;
|
||||
if (data && typeof data === "object" && data.ai_request_id) {
|
||||
const pollTimeout = Number(options.poll_timeout ?? 300);
|
||||
const pollInterval = Number(options.poll_interval ?? 5);
|
||||
return await awaitResponse(data.ai_request_id, {
|
||||
interval: pollInterval,
|
||||
timeout: pollTimeout,
|
||||
headers: options.headers,
|
||||
timeout_per_call: options.timeout,
|
||||
verify_tls: options.verify_tls,
|
||||
});
|
||||
}
|
||||
|
||||
return initial;
|
||||
}
|
||||
|
||||
async function request(pathValue, payload = {}, options = {}) {
|
||||
const cfg = config();
|
||||
const resolvedPath = pathValue || options.path || cfg.responsesPath;
|
||||
|
||||
if (!resolvedPath) {
|
||||
return {
|
||||
success: false,
|
||||
error: "project_id_missing",
|
||||
message: "PROJECT_ID is not defined; cannot resolve AI proxy endpoint.",
|
||||
};
|
||||
}
|
||||
|
||||
if (!cfg.projectUuid) {
|
||||
return {
|
||||
success: false,
|
||||
error: "project_uuid_missing",
|
||||
message: "PROJECT_UUID is not defined; aborting AI request.",
|
||||
};
|
||||
}
|
||||
|
||||
const bodyPayload = { ...(payload || {}) };
|
||||
if (!bodyPayload.project_uuid) {
|
||||
bodyPayload.project_uuid = cfg.projectUuid;
|
||||
}
|
||||
|
||||
const url = buildUrl(resolvedPath, cfg.baseUrl);
|
||||
const timeout = resolveTimeout(options.timeout, cfg.timeout);
|
||||
const verifyTls = resolveVerifyTls(options.verify_tls, cfg.verifyTls);
|
||||
|
||||
const headers = {
|
||||
Accept: "application/json",
|
||||
"Content-Type": "application/json",
|
||||
[cfg.projectHeader]: cfg.projectUuid,
|
||||
};
|
||||
if (Array.isArray(options.headers)) {
|
||||
for (const header of options.headers) {
|
||||
if (typeof header === "string" && header.includes(":")) {
|
||||
const [name, value] = header.split(":", 2);
|
||||
headers[name.trim()] = value.trim();
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
const body = JSON.stringify(bodyPayload);
|
||||
return sendRequest(url, "POST", body, headers, timeout, verifyTls);
|
||||
}
|
||||
|
||||
async function fetchStatus(aiRequestId, options = {}) {
|
||||
const cfg = config();
|
||||
if (!cfg.projectUuid) {
|
||||
return {
|
||||
success: false,
|
||||
error: "project_uuid_missing",
|
||||
message: "PROJECT_UUID is not defined; aborting status check.",
|
||||
};
|
||||
}
|
||||
|
||||
const statusPath = resolveStatusPath(aiRequestId, cfg);
|
||||
const url = buildUrl(statusPath, cfg.baseUrl);
|
||||
const timeout = resolveTimeout(options.timeout, cfg.timeout);
|
||||
const verifyTls = resolveVerifyTls(options.verify_tls, cfg.verifyTls);
|
||||
|
||||
const headers = {
|
||||
Accept: "application/json",
|
||||
[cfg.projectHeader]: cfg.projectUuid,
|
||||
};
|
||||
if (Array.isArray(options.headers)) {
|
||||
for (const header of options.headers) {
|
||||
if (typeof header === "string" && header.includes(":")) {
|
||||
const [name, value] = header.split(":", 2);
|
||||
headers[name.trim()] = value.trim();
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return sendRequest(url, "GET", null, headers, timeout, verifyTls);
|
||||
}
|
||||
|
||||
async function awaitResponse(aiRequestId, options = {}) {
|
||||
const timeout = Number(options.timeout ?? 300);
|
||||
const interval = Math.max(Number(options.interval ?? 5), 1);
|
||||
const deadline = Date.now() + Math.max(timeout, interval) * 1000;
|
||||
|
||||
while (Date.now() < deadline) {
|
||||
const statusResp = await fetchStatus(aiRequestId, {
|
||||
headers: options.headers,
|
||||
timeout: options.timeout_per_call,
|
||||
verify_tls: options.verify_tls,
|
||||
});
|
||||
|
||||
if (statusResp.success) {
|
||||
const data = statusResp.data || {};
|
||||
if (data && typeof data === "object") {
|
||||
if (data.status === "success") {
|
||||
return {
|
||||
success: true,
|
||||
status: 200,
|
||||
data: data.response || data,
|
||||
};
|
||||
}
|
||||
if (data.status === "failed") {
|
||||
return {
|
||||
success: false,
|
||||
status: 500,
|
||||
error: String(data.error || "AI request failed"),
|
||||
data,
|
||||
};
|
||||
}
|
||||
}
|
||||
} else {
|
||||
return statusResp;
|
||||
}
|
||||
|
||||
await sleep(interval * 1000);
|
||||
}
|
||||
|
||||
return {
|
||||
success: false,
|
||||
error: "timeout",
|
||||
message: "Timed out waiting for AI response.",
|
||||
};
|
||||
}
|
||||
|
||||
function extractText(response) {
|
||||
const payload = response && typeof response === "object" ? response.data || response : null;
|
||||
if (!payload || typeof payload !== "object") {
|
||||
return "";
|
||||
}
|
||||
|
||||
if (Array.isArray(payload.output)) {
|
||||
let combined = "";
|
||||
for (const item of payload.output) {
|
||||
if (!item || !Array.isArray(item.content)) {
|
||||
continue;
|
||||
}
|
||||
for (const block of item.content) {
|
||||
if (
|
||||
block &&
|
||||
typeof block === "object" &&
|
||||
block.type === "output_text" &&
|
||||
typeof block.text === "string" &&
|
||||
block.text.length > 0
|
||||
) {
|
||||
combined += block.text;
|
||||
}
|
||||
}
|
||||
}
|
||||
if (combined) {
|
||||
return combined;
|
||||
}
|
||||
}
|
||||
|
||||
if (
|
||||
payload.choices &&
|
||||
payload.choices[0] &&
|
||||
payload.choices[0].message &&
|
||||
typeof payload.choices[0].message.content === "string"
|
||||
) {
|
||||
return payload.choices[0].message.content;
|
||||
}
|
||||
|
||||
return "";
|
||||
}
|
||||
|
||||
function decodeJsonFromResponse(response) {
|
||||
const text = extractText(response);
|
||||
if (!text) {
|
||||
throw new Error("No text found in AI response.");
|
||||
}
|
||||
|
||||
const parsed = parseJson(text);
|
||||
if (parsed.ok && parsed.value && typeof parsed.value === "object") {
|
||||
return parsed.value;
|
||||
}
|
||||
|
||||
const stripped = stripJsonFence(text);
|
||||
if (stripped !== text) {
|
||||
const parsedStripped = parseJson(stripped);
|
||||
if (parsedStripped.ok && parsedStripped.value && typeof parsedStripped.value === "object") {
|
||||
return parsedStripped.value;
|
||||
}
|
||||
throw new Error(`JSON parse failed after stripping fences: ${parsedStripped.error}`);
|
||||
}
|
||||
|
||||
throw new Error(`JSON parse failed: ${parsed.error}`);
|
||||
}
|
||||
|
||||
function config() {
|
||||
if (CONFIG_CACHE) {
|
||||
return CONFIG_CACHE;
|
||||
}
|
||||
|
||||
ensureEnvLoaded();
|
||||
|
||||
const baseUrl = process.env.AI_PROXY_BASE_URL || "https://flatlogic.com";
|
||||
const projectId = process.env.PROJECT_ID || null;
|
||||
let responsesPath = process.env.AI_RESPONSES_PATH || null;
|
||||
if (!responsesPath && projectId) {
|
||||
responsesPath = `/projects/${projectId}/ai-request`;
|
||||
}
|
||||
|
||||
const timeout = resolveTimeout(process.env.AI_TIMEOUT, 30);
|
||||
const verifyTls = resolveVerifyTls(process.env.AI_VERIFY_TLS, true);
|
||||
|
||||
CONFIG_CACHE = {
|
||||
baseUrl,
|
||||
responsesPath,
|
||||
projectId,
|
||||
projectUuid: process.env.PROJECT_UUID || null,
|
||||
projectHeader: process.env.AI_PROJECT_HEADER || "project-uuid",
|
||||
defaultModel: process.env.AI_DEFAULT_MODEL || "gpt-5.5",
|
||||
timeout,
|
||||
verifyTls,
|
||||
};
|
||||
|
||||
return CONFIG_CACHE;
|
||||
}
|
||||
|
||||
function buildUrl(pathValue, baseUrl) {
|
||||
const trimmed = String(pathValue || "").trim();
|
||||
if (trimmed === "") {
|
||||
return baseUrl;
|
||||
}
|
||||
if (trimmed.startsWith("http://") || trimmed.startsWith("https://")) {
|
||||
return trimmed;
|
||||
}
|
||||
if (trimmed.startsWith("/")) {
|
||||
return `${baseUrl}${trimmed}`;
|
||||
}
|
||||
return `${baseUrl}/${trimmed}`;
|
||||
}
|
||||
|
||||
function resolveStatusPath(aiRequestId, cfg) {
|
||||
const basePath = (cfg.responsesPath || "").replace(/\/+$/, "");
|
||||
if (!basePath) {
|
||||
return `/ai-request/${encodeURIComponent(String(aiRequestId))}/status`;
|
||||
}
|
||||
const normalized = basePath.endsWith("/ai-request") ? basePath : `${basePath}/ai-request`;
|
||||
return `${normalized}/${encodeURIComponent(String(aiRequestId))}/status`;
|
||||
}
|
||||
|
||||
function sendRequest(urlString, method, body, headers, timeoutSeconds, verifyTls) {
|
||||
return new Promise((resolve) => {
|
||||
let targetUrl;
|
||||
try {
|
||||
targetUrl = new URL(urlString);
|
||||
} catch (err) {
|
||||
resolve({
|
||||
success: false,
|
||||
error: "invalid_url",
|
||||
message: err.message,
|
||||
});
|
||||
return;
|
||||
}
|
||||
|
||||
const isHttps = targetUrl.protocol === "https:";
|
||||
const requestFn = isHttps ? https.request : http.request;
|
||||
const options = {
|
||||
protocol: targetUrl.protocol,
|
||||
hostname: targetUrl.hostname,
|
||||
port: targetUrl.port || (isHttps ? 443 : 80),
|
||||
path: `${targetUrl.pathname}${targetUrl.search}`,
|
||||
method: method.toUpperCase(),
|
||||
headers,
|
||||
timeout: Math.max(Number(timeoutSeconds || 30), 1) * 1000,
|
||||
};
|
||||
if (isHttps) {
|
||||
options.rejectUnauthorized = Boolean(verifyTls);
|
||||
}
|
||||
|
||||
const req = requestFn(options, (res) => {
|
||||
let responseBody = "";
|
||||
res.setEncoding("utf8");
|
||||
res.on("data", (chunk) => {
|
||||
responseBody += chunk;
|
||||
});
|
||||
res.on("end", () => {
|
||||
const status = res.statusCode || 0;
|
||||
const parsed = parseJson(responseBody);
|
||||
const payload = parsed.ok ? parsed.value : responseBody;
|
||||
|
||||
if (status >= 200 && status < 300) {
|
||||
const result = {
|
||||
success: true,
|
||||
status,
|
||||
data: payload,
|
||||
};
|
||||
if (!parsed.ok) {
|
||||
result.json_error = parsed.error;
|
||||
}
|
||||
resolve(result);
|
||||
return;
|
||||
}
|
||||
|
||||
const errorMessage =
|
||||
parsed.ok && payload && typeof payload === "object"
|
||||
? String(payload.error || payload.message || "AI proxy request failed")
|
||||
: String(responseBody || "AI proxy request failed");
|
||||
|
||||
resolve({
|
||||
success: false,
|
||||
status,
|
||||
error: errorMessage,
|
||||
response: payload,
|
||||
json_error: parsed.ok ? undefined : parsed.error,
|
||||
});
|
||||
});
|
||||
});
|
||||
|
||||
req.on("timeout", () => {
|
||||
req.destroy(new Error("request_timeout"));
|
||||
});
|
||||
|
||||
req.on("error", (err) => {
|
||||
resolve({
|
||||
success: false,
|
||||
error: "request_failed",
|
||||
message: err.message,
|
||||
});
|
||||
});
|
||||
|
||||
if (body) {
|
||||
req.write(body);
|
||||
}
|
||||
req.end();
|
||||
});
|
||||
}
|
||||
|
||||
function parseJson(value) {
|
||||
if (typeof value !== "string" || value.trim() === "") {
|
||||
return { ok: false, error: "empty_response" };
|
||||
}
|
||||
try {
|
||||
return { ok: true, value: JSON.parse(value) };
|
||||
} catch (err) {
|
||||
return { ok: false, error: err.message };
|
||||
}
|
||||
}
|
||||
|
||||
function stripJsonFence(text) {
|
||||
const trimmed = text.trim();
|
||||
if (trimmed.startsWith("```json")) {
|
||||
return trimmed.replace(/^```json/, "").replace(/```$/, "").trim();
|
||||
}
|
||||
if (trimmed.startsWith("```")) {
|
||||
return trimmed.replace(/^```/, "").replace(/```$/, "").trim();
|
||||
}
|
||||
return text;
|
||||
}
|
||||
|
||||
function resolveTimeout(value, fallback) {
|
||||
const parsed = Number.parseInt(String(value ?? fallback), 10);
|
||||
return Number.isNaN(parsed) ? Number(fallback) : parsed;
|
||||
}
|
||||
|
||||
function resolveVerifyTls(value, fallback) {
|
||||
if (value === undefined || value === null) {
|
||||
return Boolean(fallback);
|
||||
}
|
||||
return String(value).toLowerCase() !== "false" && String(value) !== "0";
|
||||
}
|
||||
|
||||
function ensureEnvLoaded() {
|
||||
if (process.env.PROJECT_UUID && process.env.PROJECT_ID) {
|
||||
return;
|
||||
}
|
||||
|
||||
const envPath = path.resolve(__dirname, "../../../../.env");
|
||||
if (!fs.existsSync(envPath)) {
|
||||
return;
|
||||
}
|
||||
|
||||
let content;
|
||||
try {
|
||||
content = fs.readFileSync(envPath, "utf8");
|
||||
} catch (err) {
|
||||
throw new Error(`Failed to read executor .env: ${err.message}`);
|
||||
}
|
||||
|
||||
for (const line of content.split(/\r?\n/)) {
|
||||
const trimmed = line.trim();
|
||||
if (!trimmed || trimmed.startsWith("#") || !trimmed.includes("=")) {
|
||||
continue;
|
||||
}
|
||||
const [rawKey, ...rest] = trimmed.split("=");
|
||||
const key = rawKey.trim();
|
||||
if (!key) {
|
||||
continue;
|
||||
}
|
||||
const value = rest.join("=").trim().replace(/^['"]|['"]$/g, "");
|
||||
if (!process.env[key]) {
|
||||
process.env[key] = value;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
function sleep(ms) {
|
||||
return new Promise((resolve) => setTimeout(resolve, ms));
|
||||
}
|
||||
|
||||
module.exports = {
|
||||
LocalAIApi,
|
||||
createResponse,
|
||||
request,
|
||||
fetchStatus,
|
||||
awaitResponse,
|
||||
extractText,
|
||||
decodeJsonFromResponse,
|
||||
};
|
||||
85
backend/src/auth/auth.js
Normal file
85
backend/src/auth/auth.js
Normal file
@ -0,0 +1,85 @@
|
||||
const config = require('../config');
|
||||
const providers = config.providers;
|
||||
const helpers = require('../helpers');
|
||||
const db = require('../db/models');
|
||||
|
||||
const passport = require('passport');
|
||||
const JWTstrategy = require('passport-jwt').Strategy;
|
||||
const ExtractJWT = require('passport-jwt').ExtractJwt;
|
||||
const GoogleStrategy = require('passport-google-oauth2').Strategy;
|
||||
const MicrosoftStrategy = require('passport-microsoft').Strategy;
|
||||
const UsersDBApi = require('../db/api/users');
|
||||
const { sessionTokenFromRequest } = require('../security/cookieAuth');
|
||||
const { isTokenRevoked } = require('../security/tokenRevocation');
|
||||
|
||||
|
||||
passport.use(new JWTstrategy({
|
||||
passReqToCallback: true,
|
||||
secretOrKey: config.secret_key,
|
||||
jwtFromRequest: ExtractJWT.fromExtractors([
|
||||
ExtractJWT.fromAuthHeaderAsBearerToken(),
|
||||
sessionTokenFromRequest,
|
||||
])
|
||||
}, async (req, token, done) => {
|
||||
try {
|
||||
if (isTokenRevoked(token)) {
|
||||
return done(null, false, { message: 'Session has been revoked' });
|
||||
}
|
||||
|
||||
const user = await UsersDBApi.findBy( {email: token.user.email});
|
||||
|
||||
if (user && user.disabled) {
|
||||
return done(null, false, { message: 'User is disabled' });
|
||||
}
|
||||
|
||||
if (!user) {
|
||||
return done(null, false, { message: 'User does not exist' });
|
||||
}
|
||||
|
||||
if (user.sessionInvalidatedAt && token.iat * 1000 <= new Date(user.sessionInvalidatedAt).getTime()) {
|
||||
return done(null, false, { message: 'Session has been invalidated' });
|
||||
}
|
||||
|
||||
req.currentUser = user;
|
||||
|
||||
return done(null, user);
|
||||
} catch (error) {
|
||||
done(error);
|
||||
}
|
||||
}));
|
||||
|
||||
passport.use(new GoogleStrategy({
|
||||
clientID: config.google.clientId,
|
||||
clientSecret: config.google.clientSecret,
|
||||
callbackURL: config.apiUrl + '/auth/signin/google/callback',
|
||||
passReqToCallback: true
|
||||
},
|
||||
function (request, accessToken, refreshToken, profile, done) {
|
||||
socialStrategy(profile.email, profile, providers.GOOGLE, done);
|
||||
}
|
||||
));
|
||||
|
||||
|
||||
passport.use(new MicrosoftStrategy({
|
||||
clientID: config.microsoft.clientId,
|
||||
clientSecret: config.microsoft.clientSecret,
|
||||
callbackURL: config.apiUrl + '/auth/signin/microsoft/callback',
|
||||
passReqToCallback: true
|
||||
},
|
||||
function (request, accessToken, refreshToken, profile, done) {
|
||||
const email = profile._json.mail || profile._json.userPrincipalName;
|
||||
socialStrategy(email, profile, providers.MICROSOFT, done);
|
||||
}
|
||||
));
|
||||
|
||||
function socialStrategy(email, profile, provider, done) {
|
||||
db.users.findOrCreate({where: {email, provider}}).then(([user]) => {
|
||||
const body = {
|
||||
id: user.id,
|
||||
email: user.email,
|
||||
name: profile.displayName,
|
||||
};
|
||||
const token = helpers.jwtSign({user: body});
|
||||
return done(null, {token});
|
||||
});
|
||||
}
|
||||
85
backend/src/config.js
Normal file
85
backend/src/config.js
Normal file
@ -0,0 +1,85 @@
|
||||
|
||||
|
||||
|
||||
const path = require('path');
|
||||
|
||||
const secretKey = process.env.SECRET_KEY;
|
||||
|
||||
if (!secretKey) {
|
||||
throw new Error('SECRET_KEY is required');
|
||||
}
|
||||
|
||||
const config = {
|
||||
gcloud: {
|
||||
bucket: "fldemo-files",
|
||||
hash: "afeefb9d49f5b7977577876b99532ac7"
|
||||
},
|
||||
bcrypt: {
|
||||
saltRounds: 12
|
||||
},
|
||||
admin_pass: process.env.DEMO_ADMIN_PASSWORD || '',
|
||||
user_pass: process.env.DEMO_USER_PASSWORD || '',
|
||||
admin_email: "admin@coaching-demo.invalid",
|
||||
providers: {
|
||||
LOCAL: 'local',
|
||||
GOOGLE: 'google',
|
||||
MICROSOFT: 'microsoft'
|
||||
},
|
||||
secret_key: secretKey,
|
||||
remote: '',
|
||||
port: process.env.NODE_ENV === "production" ? "" : "8080",
|
||||
hostUI: process.env.NODE_ENV === "production" ? "" : "http://localhost",
|
||||
portUI: process.env.NODE_ENV === "production" ? "" : "3000",
|
||||
|
||||
portUIProd: process.env.NODE_ENV === "production" ? "" : ":3000",
|
||||
|
||||
swaggerUI: process.env.NODE_ENV === "production" ? "" : "http://localhost",
|
||||
swaggerPort: process.env.NODE_ENV === "production" ? "" : ":8080",
|
||||
google: {
|
||||
clientId: process.env.GOOGLE_CLIENT_ID || '',
|
||||
clientSecret: process.env.GOOGLE_CLIENT_SECRET || '',
|
||||
},
|
||||
microsoft: {
|
||||
clientId: process.env.MS_CLIENT_ID || '',
|
||||
clientSecret: process.env.MS_CLIENT_SECRET || '',
|
||||
},
|
||||
uploadDir: process.env.COACHING_UPLOAD_DIR || path.join(__dirname, '../private/uploads'),
|
||||
email: {
|
||||
from: 'Coaching SaaS Workspace <app@flatlogic.app>',
|
||||
host: 'email-smtp.us-east-1.amazonaws.com',
|
||||
port: 587,
|
||||
auth: {
|
||||
user: process.env.EMAIL_USER || '',
|
||||
pass: process.env.EMAIL_PASS,
|
||||
},
|
||||
tls: {
|
||||
rejectUnauthorized: false
|
||||
}
|
||||
},
|
||||
roles: {
|
||||
|
||||
admin: 'Administrator',
|
||||
|
||||
|
||||
|
||||
user: 'Coach',
|
||||
|
||||
},
|
||||
|
||||
project_uuid: process.env.PROJECT_UUID || '',
|
||||
flHost: process.env.NODE_ENV === 'production' || process.env.NODE_ENV === 'dev_stage' ? 'https://flatlogic.com/projects' : 'http://localhost:3000/projects',
|
||||
|
||||
|
||||
gpt_key: process.env.GPT_KEY || '',
|
||||
};
|
||||
|
||||
config.pexelsKey = process.env.PEXELS_KEY || '';
|
||||
|
||||
config.pexelsQuery = 'executive coaching workspace';
|
||||
config.host = process.env.NODE_ENV === "production" ? config.remote : "http://localhost";
|
||||
config.apiUrl = `${config.host}${config.port ? `:${config.port}` : ``}/api`;
|
||||
config.swaggerUrl = `${config.swaggerUI}${config.swaggerPort}`;
|
||||
config.uiUrl = `${config.hostUI}${config.portUI ? `:${config.portUI}` : ``}/#`;
|
||||
config.backUrl = `${config.hostUI}${config.portUI ? `:${config.portUI}` : ``}`;
|
||||
|
||||
module.exports = config;
|
||||
87
backend/src/db/api/file.js
Normal file
87
backend/src/db/api/file.js
Normal file
@ -0,0 +1,87 @@
|
||||
const db = require('../models');
|
||||
const assert = require('assert');
|
||||
const services = require('../../services/file');
|
||||
|
||||
module.exports = class FileDBApi {
|
||||
static async replaceRelationFiles(
|
||||
relation,
|
||||
rawFiles,
|
||||
options,
|
||||
) {
|
||||
assert(relation.belongsTo, 'belongsTo is required');
|
||||
assert(
|
||||
relation.belongsToColumn,
|
||||
'belongsToColumn is required',
|
||||
);
|
||||
assert(relation.belongsToId, 'belongsToId is required');
|
||||
|
||||
let files = [];
|
||||
|
||||
if (Array.isArray(rawFiles)) {
|
||||
files = rawFiles;
|
||||
} else {
|
||||
files = rawFiles ? [rawFiles] : [];
|
||||
}
|
||||
|
||||
await this._removeLegacyFiles(relation, files, options);
|
||||
await this._addFiles(relation, files, options);
|
||||
}
|
||||
|
||||
static async _addFiles(relation, files, options) {
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
const currentUser = (options && options.currentUser) || {id: null};
|
||||
|
||||
const inexistentFiles = files.filter(
|
||||
(file) => !!file.new,
|
||||
);
|
||||
|
||||
for (const file of inexistentFiles) {
|
||||
await db.file.create(
|
||||
{
|
||||
belongsTo: relation.belongsTo,
|
||||
belongsToColumn: relation.belongsToColumn,
|
||||
belongsToId: relation.belongsToId,
|
||||
name: file.name,
|
||||
sizeInBytes: file.sizeInBytes,
|
||||
privateUrl: file.privateUrl,
|
||||
publicUrl: file.publicUrl,
|
||||
createdById: currentUser.id,
|
||||
updatedById: currentUser.id,
|
||||
},
|
||||
{
|
||||
transaction,
|
||||
},
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
static async _removeLegacyFiles(
|
||||
relation,
|
||||
files,
|
||||
options,
|
||||
) {
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const filesToDelete = await db.file.findAll({
|
||||
where: {
|
||||
belongsTo: relation.belongsTo,
|
||||
belongsToId: relation.belongsToId,
|
||||
belongsToColumn: relation.belongsToColumn,
|
||||
id: {
|
||||
[db.Sequelize.Op
|
||||
.notIn]: files
|
||||
.filter((file) => !file.new)
|
||||
.map((file) => file.id)
|
||||
},
|
||||
},
|
||||
transaction,
|
||||
});
|
||||
|
||||
for (let file of filesToDelete) {
|
||||
await services.deleteGCloud(file.privateUrl);
|
||||
await file.destroy({
|
||||
transaction,
|
||||
});
|
||||
}
|
||||
}
|
||||
};
|
||||
329
backend/src/db/api/permissions.js
Normal file
329
backend/src/db/api/permissions.js
Normal file
@ -0,0 +1,329 @@
|
||||
|
||||
const db = require('../models');
|
||||
const Utils = require('../utils');
|
||||
|
||||
|
||||
|
||||
const Sequelize = db.Sequelize;
|
||||
const Op = Sequelize.Op;
|
||||
|
||||
module.exports = class PermissionsDBApi {
|
||||
|
||||
|
||||
|
||||
static async create(data, options) {
|
||||
const currentUser = (options && options.currentUser) || { id: null };
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const permissions = await db.permissions.create(
|
||||
{
|
||||
id: data.id || undefined,
|
||||
|
||||
name: data.name
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
importHash: data.importHash || null,
|
||||
createdById: currentUser.id,
|
||||
updatedById: currentUser.id,
|
||||
},
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
return permissions;
|
||||
}
|
||||
|
||||
|
||||
static async bulkImport(data, options) {
|
||||
const currentUser = (options && options.currentUser) || { id: null };
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
// Prepare data - wrapping individual data transformations in a map() method
|
||||
const permissionsData = data.map((item, index) => ({
|
||||
id: item.id || undefined,
|
||||
|
||||
name: item.name
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
importHash: item.importHash || null,
|
||||
createdById: currentUser.id,
|
||||
updatedById: currentUser.id,
|
||||
createdAt: new Date(Date.now() + index * 1000),
|
||||
}));
|
||||
|
||||
// Bulk create items
|
||||
const permissions = await db.permissions.bulkCreate(permissionsData, { transaction });
|
||||
|
||||
// For each item created, replace relation files
|
||||
|
||||
|
||||
return permissions;
|
||||
}
|
||||
|
||||
static async update(id, data, options) {
|
||||
const currentUser = (options && options.currentUser) || {id: null};
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
|
||||
const permissions = await db.permissions.findByPk(id, {}, {transaction});
|
||||
|
||||
|
||||
|
||||
|
||||
const updatePayload = {};
|
||||
|
||||
if (data.name !== undefined) updatePayload.name = data.name;
|
||||
|
||||
|
||||
updatePayload.updatedById = currentUser.id;
|
||||
|
||||
await permissions.update(updatePayload, {transaction});
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
return permissions;
|
||||
}
|
||||
|
||||
static async deleteByIds(ids, options) {
|
||||
const currentUser = (options && options.currentUser) || { id: null };
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const permissions = await db.permissions.findAll({
|
||||
where: {
|
||||
id: {
|
||||
[Op.in]: ids,
|
||||
},
|
||||
},
|
||||
transaction,
|
||||
});
|
||||
|
||||
await db.sequelize.transaction(async (transaction) => {
|
||||
for (const record of permissions) {
|
||||
await record.update(
|
||||
{deletedBy: currentUser.id},
|
||||
{transaction}
|
||||
);
|
||||
}
|
||||
for (const record of permissions) {
|
||||
await record.destroy({transaction});
|
||||
}
|
||||
});
|
||||
|
||||
|
||||
return permissions;
|
||||
}
|
||||
|
||||
static async remove(id, options) {
|
||||
const currentUser = (options && options.currentUser) || {id: null};
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const permissions = await db.permissions.findByPk(id, options);
|
||||
|
||||
await permissions.update({
|
||||
deletedBy: currentUser.id
|
||||
}, {
|
||||
transaction,
|
||||
});
|
||||
|
||||
await permissions.destroy({
|
||||
transaction
|
||||
});
|
||||
|
||||
return permissions;
|
||||
}
|
||||
|
||||
static async findBy(where, options) {
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const permissions = await db.permissions.findOne(
|
||||
{ where },
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
if (!permissions) {
|
||||
return permissions;
|
||||
}
|
||||
|
||||
const output = permissions.get({plain: true});
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
return output;
|
||||
}
|
||||
|
||||
static async findAll(
|
||||
filter,
|
||||
options
|
||||
) {
|
||||
const limit = filter.limit || 0;
|
||||
let offset = 0;
|
||||
let where = {};
|
||||
const currentPage = +filter.page;
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
offset = currentPage * limit;
|
||||
|
||||
let include = [
|
||||
|
||||
|
||||
|
||||
];
|
||||
|
||||
if (filter) {
|
||||
if (filter.id) {
|
||||
where = {
|
||||
...where,
|
||||
['id']: Utils.uuid(filter.id),
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
if (filter.name) {
|
||||
where = {
|
||||
...where,
|
||||
[Op.and]: Utils.ilike(
|
||||
'permissions',
|
||||
'name',
|
||||
filter.name,
|
||||
),
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
if (filter.active !== undefined) {
|
||||
where = {
|
||||
...where,
|
||||
active: filter.active === true || filter.active === 'true'
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
if (filter.createdAtRange) {
|
||||
const [start, end] = filter.createdAtRange;
|
||||
|
||||
if (start !== undefined && start !== null && start !== '') {
|
||||
where = {
|
||||
...where,
|
||||
['createdAt']: {
|
||||
...where.createdAt,
|
||||
[Op.gte]: start,
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
if (end !== undefined && end !== null && end !== '') {
|
||||
where = {
|
||||
...where,
|
||||
['createdAt']: {
|
||||
...where.createdAt,
|
||||
[Op.lte]: end,
|
||||
},
|
||||
};
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
const queryOptions = {
|
||||
where,
|
||||
include,
|
||||
distinct: true,
|
||||
order: filter.field && filter.sort
|
||||
? [[filter.field, filter.sort]]
|
||||
: [['createdAt', 'desc']],
|
||||
transaction: options?.transaction,
|
||||
logging: false
|
||||
};
|
||||
|
||||
if (!options?.countOnly) {
|
||||
queryOptions.limit = limit ? Number(limit) : undefined;
|
||||
queryOptions.offset = offset ? Number(offset) : undefined;
|
||||
}
|
||||
|
||||
try {
|
||||
const { rows, count } = await db.permissions.findAndCountAll(queryOptions);
|
||||
|
||||
return {
|
||||
rows: options?.countOnly ? [] : rows,
|
||||
count: count
|
||||
};
|
||||
} catch (error) {
|
||||
console.error('Error executing query:', error);
|
||||
throw error;
|
||||
}
|
||||
}
|
||||
|
||||
static async findAllAutocomplete(query, limit, offset, ) {
|
||||
let where = {};
|
||||
|
||||
|
||||
|
||||
if (query) {
|
||||
where = {
|
||||
[Op.or]: [
|
||||
{ ['id']: Utils.uuid(query) },
|
||||
Utils.ilike(
|
||||
'permissions',
|
||||
'name',
|
||||
query,
|
||||
),
|
||||
],
|
||||
};
|
||||
}
|
||||
|
||||
const records = await db.permissions.findAll({
|
||||
attributes: [ 'id', 'name' ],
|
||||
where,
|
||||
limit: limit ? Number(limit) : undefined,
|
||||
offset: offset ? Number(offset) : undefined,
|
||||
orderBy: [['name', 'ASC']],
|
||||
});
|
||||
|
||||
return records.map((record) => ({
|
||||
id: record.id,
|
||||
label: record.name,
|
||||
}));
|
||||
}
|
||||
|
||||
|
||||
};
|
||||
399
backend/src/db/api/roles.js
Normal file
399
backend/src/db/api/roles.js
Normal file
@ -0,0 +1,399 @@
|
||||
|
||||
const db = require('../models');
|
||||
const Utils = require('../utils');
|
||||
|
||||
|
||||
|
||||
const Sequelize = db.Sequelize;
|
||||
const Op = Sequelize.Op;
|
||||
|
||||
module.exports = class RolesDBApi {
|
||||
|
||||
|
||||
|
||||
static async create(data, options) {
|
||||
const currentUser = (options && options.currentUser) || { id: null };
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const roles = await db.roles.create(
|
||||
{
|
||||
id: data.id || undefined,
|
||||
|
||||
name: data.name
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
role_customization: data.role_customization
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
importHash: data.importHash || null,
|
||||
createdById: currentUser.id,
|
||||
updatedById: currentUser.id,
|
||||
},
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
|
||||
|
||||
|
||||
await roles.setPermissions(data.permissions || [], {
|
||||
transaction,
|
||||
});
|
||||
|
||||
|
||||
|
||||
|
||||
return roles;
|
||||
}
|
||||
|
||||
|
||||
static async bulkImport(data, options) {
|
||||
const currentUser = (options && options.currentUser) || { id: null };
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
// Prepare data - wrapping individual data transformations in a map() method
|
||||
const rolesData = data.map((item, index) => ({
|
||||
id: item.id || undefined,
|
||||
|
||||
name: item.name
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
role_customization: item.role_customization
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
importHash: item.importHash || null,
|
||||
createdById: currentUser.id,
|
||||
updatedById: currentUser.id,
|
||||
createdAt: new Date(Date.now() + index * 1000),
|
||||
}));
|
||||
|
||||
// Bulk create items
|
||||
const roles = await db.roles.bulkCreate(rolesData, { transaction });
|
||||
|
||||
// For each item created, replace relation files
|
||||
|
||||
|
||||
return roles;
|
||||
}
|
||||
|
||||
static async update(id, data, options) {
|
||||
const currentUser = (options && options.currentUser) || {id: null};
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
|
||||
const roles = await db.roles.findByPk(id, {}, {transaction});
|
||||
|
||||
|
||||
|
||||
|
||||
const updatePayload = {};
|
||||
|
||||
if (data.name !== undefined) updatePayload.name = data.name;
|
||||
|
||||
|
||||
if (data.role_customization !== undefined) updatePayload.role_customization = data.role_customization;
|
||||
|
||||
|
||||
updatePayload.updatedById = currentUser.id;
|
||||
|
||||
await roles.update(updatePayload, {transaction});
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
if (data.permissions !== undefined) {
|
||||
await roles.setPermissions(data.permissions, { transaction });
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
return roles;
|
||||
}
|
||||
|
||||
static async deleteByIds(ids, options) {
|
||||
const currentUser = (options && options.currentUser) || { id: null };
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const roles = await db.roles.findAll({
|
||||
where: {
|
||||
id: {
|
||||
[Op.in]: ids,
|
||||
},
|
||||
},
|
||||
transaction,
|
||||
});
|
||||
|
||||
await db.sequelize.transaction(async (transaction) => {
|
||||
for (const record of roles) {
|
||||
await record.update(
|
||||
{deletedBy: currentUser.id},
|
||||
{transaction}
|
||||
);
|
||||
}
|
||||
for (const record of roles) {
|
||||
await record.destroy({transaction});
|
||||
}
|
||||
});
|
||||
|
||||
|
||||
return roles;
|
||||
}
|
||||
|
||||
static async remove(id, options) {
|
||||
const currentUser = (options && options.currentUser) || {id: null};
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const roles = await db.roles.findByPk(id, options);
|
||||
|
||||
await roles.update({
|
||||
deletedBy: currentUser.id
|
||||
}, {
|
||||
transaction,
|
||||
});
|
||||
|
||||
await roles.destroy({
|
||||
transaction
|
||||
});
|
||||
|
||||
return roles;
|
||||
}
|
||||
|
||||
static async findBy(where, options) {
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const roles = await db.roles.findOne(
|
||||
{ where },
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
if (!roles) {
|
||||
return roles;
|
||||
}
|
||||
|
||||
const output = roles.get({plain: true});
|
||||
|
||||
|
||||
output.users_app_role = await roles.getUsers_app_role({
|
||||
transaction
|
||||
});
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
output.permissions = await roles.getPermissions({
|
||||
transaction
|
||||
});
|
||||
|
||||
|
||||
|
||||
return output;
|
||||
}
|
||||
|
||||
static async findAll(
|
||||
filter,
|
||||
options
|
||||
) {
|
||||
const limit = filter.limit || 0;
|
||||
let offset = 0;
|
||||
let where = {};
|
||||
const currentPage = +filter.page;
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
offset = currentPage * limit;
|
||||
|
||||
let include = [
|
||||
|
||||
|
||||
{
|
||||
model: db.permissions,
|
||||
as: 'permissions',
|
||||
required: false,
|
||||
},
|
||||
|
||||
|
||||
];
|
||||
|
||||
if (filter) {
|
||||
if (filter.id) {
|
||||
where = {
|
||||
...where,
|
||||
['id']: Utils.uuid(filter.id),
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
if (filter.name) {
|
||||
where = {
|
||||
...where,
|
||||
[Op.and]: Utils.ilike(
|
||||
'roles',
|
||||
'name',
|
||||
filter.name,
|
||||
),
|
||||
};
|
||||
}
|
||||
|
||||
if (filter.role_customization) {
|
||||
where = {
|
||||
...where,
|
||||
[Op.and]: Utils.ilike(
|
||||
'roles',
|
||||
'role_customization',
|
||||
filter.role_customization,
|
||||
),
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
if (filter.active !== undefined) {
|
||||
where = {
|
||||
...where,
|
||||
active: filter.active === true || filter.active === 'true'
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
if (filter.permissions) {
|
||||
const searchTerms = filter.permissions.split('|');
|
||||
|
||||
include = [
|
||||
{
|
||||
model: db.permissions,
|
||||
as: 'permissions_filter',
|
||||
required: searchTerms.length > 0,
|
||||
where: searchTerms.length > 0 ? {
|
||||
[Op.or]: [
|
||||
{ id: { [Op.in]: searchTerms.map(term => Utils.uuid(term)) } },
|
||||
{
|
||||
name: {
|
||||
[Op.or]: searchTerms.map(term => ({ [Op.iLike]: `%${term}%` }))
|
||||
}
|
||||
}
|
||||
]
|
||||
} : undefined
|
||||
},
|
||||
...include,
|
||||
]
|
||||
}
|
||||
|
||||
|
||||
if (filter.createdAtRange) {
|
||||
const [start, end] = filter.createdAtRange;
|
||||
|
||||
if (start !== undefined && start !== null && start !== '') {
|
||||
where = {
|
||||
...where,
|
||||
['createdAt']: {
|
||||
...where.createdAt,
|
||||
[Op.gte]: start,
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
if (end !== undefined && end !== null && end !== '') {
|
||||
where = {
|
||||
...where,
|
||||
['createdAt']: {
|
||||
...where.createdAt,
|
||||
[Op.lte]: end,
|
||||
},
|
||||
};
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
const queryOptions = {
|
||||
where,
|
||||
include,
|
||||
distinct: true,
|
||||
order: filter.field && filter.sort
|
||||
? [[filter.field, filter.sort]]
|
||||
: [['createdAt', 'desc']],
|
||||
transaction: options?.transaction,
|
||||
logging: false
|
||||
};
|
||||
|
||||
if (!options?.countOnly) {
|
||||
queryOptions.limit = limit ? Number(limit) : undefined;
|
||||
queryOptions.offset = offset ? Number(offset) : undefined;
|
||||
}
|
||||
|
||||
try {
|
||||
const { rows, count } = await db.roles.findAndCountAll(queryOptions);
|
||||
|
||||
return {
|
||||
rows: options?.countOnly ? [] : rows,
|
||||
count: count
|
||||
};
|
||||
} catch (error) {
|
||||
console.error('Error executing query:', error);
|
||||
throw error;
|
||||
}
|
||||
}
|
||||
|
||||
static async findAllAutocomplete(query, limit, offset, ) {
|
||||
let where = {};
|
||||
|
||||
|
||||
|
||||
if (query) {
|
||||
where = {
|
||||
[Op.or]: [
|
||||
{ ['id']: Utils.uuid(query) },
|
||||
Utils.ilike(
|
||||
'roles',
|
||||
'name',
|
||||
query,
|
||||
),
|
||||
],
|
||||
};
|
||||
}
|
||||
|
||||
const records = await db.roles.findAll({
|
||||
attributes: [ 'id', 'name' ],
|
||||
where,
|
||||
limit: limit ? Number(limit) : undefined,
|
||||
offset: offset ? Number(offset) : undefined,
|
||||
orderBy: [['name', 'ASC']],
|
||||
});
|
||||
|
||||
return records.map((record) => ({
|
||||
id: record.id,
|
||||
label: record.name,
|
||||
}));
|
||||
}
|
||||
|
||||
|
||||
};
|
||||
920
backend/src/db/api/users.js
Normal file
920
backend/src/db/api/users.js
Normal file
@ -0,0 +1,920 @@
|
||||
|
||||
const db = require('../models');
|
||||
const FileDBApi = require('./file');
|
||||
const Utils = require('../utils');
|
||||
const { generateOneTimeToken, digestOneTimeToken } = require('../../security/oneTimeTokens');
|
||||
|
||||
const bcrypt = require('bcrypt');
|
||||
const config = require('../../config');
|
||||
|
||||
|
||||
|
||||
const Sequelize = db.Sequelize;
|
||||
const Op = Sequelize.Op;
|
||||
|
||||
module.exports = class UsersDBApi {
|
||||
|
||||
static async create(data, options) {
|
||||
const currentUser = (options && options.currentUser) || { id: null };
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
|
||||
const users = await db.users.create(
|
||||
{
|
||||
id: data.data.id || undefined,
|
||||
|
||||
firstName: data.data.firstName
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
lastName: data.data.lastName
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
phoneNumber: data.data.phoneNumber
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
email: data.data.email
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
disabled: data.data.disabled
|
||||
||
|
||||
false
|
||||
|
||||
,
|
||||
|
||||
password: data.data.password
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
emailVerified: data.data.emailVerified
|
||||
||
|
||||
true
|
||||
|
||||
,
|
||||
|
||||
emailVerificationToken: data.data.emailVerificationToken
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
emailVerificationTokenExpiresAt: data.data.emailVerificationTokenExpiresAt
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
passwordResetToken: data.data.passwordResetToken
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
passwordResetTokenExpiresAt: data.data.passwordResetTokenExpiresAt
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
provider: data.data.provider
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
importHash: data.data.importHash || null,
|
||||
createdById: currentUser.id,
|
||||
updatedById: currentUser.id,
|
||||
},
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
|
||||
|
||||
if (!data.data.app_role) {
|
||||
const role = await db.roles.findOne({
|
||||
where: { name: 'User' },
|
||||
});
|
||||
if (role) {
|
||||
await users.setApp_role(role, {
|
||||
transaction,
|
||||
});
|
||||
}
|
||||
}else{
|
||||
await users.setApp_role(data.data.app_role || null, {
|
||||
transaction,
|
||||
});
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
await users.setCustom_permissions(data.data.custom_permissions || [], {
|
||||
transaction,
|
||||
});
|
||||
|
||||
|
||||
|
||||
await FileDBApi.replaceRelationFiles(
|
||||
{
|
||||
belongsTo: db.users.getTableName(),
|
||||
belongsToColumn: 'avatar',
|
||||
belongsToId: users.id,
|
||||
},
|
||||
data.data.avatar,
|
||||
options,
|
||||
);
|
||||
|
||||
|
||||
return users;
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
static async bulkImport(data, options) {
|
||||
const currentUser = (options && options.currentUser) || { id: null };
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
// Prepare data - wrapping individual data transformations in a map() method
|
||||
const usersData = data.map((item, index) => ({
|
||||
id: item.id || undefined,
|
||||
|
||||
firstName: item.firstName
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
lastName: item.lastName
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
phoneNumber: item.phoneNumber
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
email: item.email
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
disabled: item.disabled
|
||||
||
|
||||
false
|
||||
|
||||
,
|
||||
|
||||
password: item.password
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
emailVerified: item.emailVerified
|
||||
||
|
||||
false
|
||||
|
||||
,
|
||||
|
||||
emailVerificationToken: item.emailVerificationToken
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
emailVerificationTokenExpiresAt: item.emailVerificationTokenExpiresAt
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
passwordResetToken: item.passwordResetToken
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
passwordResetTokenExpiresAt: item.passwordResetTokenExpiresAt
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
provider: item.provider
|
||||
||
|
||||
null
|
||||
,
|
||||
|
||||
importHash: item.importHash || null,
|
||||
createdById: currentUser.id,
|
||||
updatedById: currentUser.id,
|
||||
createdAt: new Date(Date.now() + index * 1000),
|
||||
}));
|
||||
|
||||
// Bulk create items
|
||||
const users = await db.users.bulkCreate(usersData, { transaction });
|
||||
|
||||
// For each item created, replace relation files
|
||||
|
||||
for (let i = 0; i < users.length; i++) {
|
||||
await FileDBApi.replaceRelationFiles(
|
||||
{
|
||||
belongsTo: db.users.getTableName(),
|
||||
belongsToColumn: 'avatar',
|
||||
belongsToId: users[i].id,
|
||||
},
|
||||
data[i].avatar,
|
||||
options,
|
||||
);
|
||||
}
|
||||
|
||||
|
||||
return users;
|
||||
}
|
||||
|
||||
static async update(id, data, options) {
|
||||
const currentUser = (options && options.currentUser) || {id: null};
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
|
||||
const users = await db.users.findByPk(id, {}, {transaction});
|
||||
|
||||
|
||||
|
||||
|
||||
if (!data?.app_role) {
|
||||
data.app_role = users?.app_role?.id;
|
||||
}
|
||||
if (!data?.custom_permissions) {
|
||||
data.custom_permissions = users?.custom_permissions?.map(item => item.id);
|
||||
}
|
||||
|
||||
if (data.password) {
|
||||
data.password = bcrypt.hashSync(
|
||||
data.password,
|
||||
config.bcrypt.saltRounds,
|
||||
);
|
||||
} else {
|
||||
data.password = users.password;
|
||||
}
|
||||
|
||||
|
||||
const updatePayload = {};
|
||||
|
||||
if (data.firstName !== undefined) updatePayload.firstName = data.firstName;
|
||||
|
||||
|
||||
if (data.lastName !== undefined) updatePayload.lastName = data.lastName;
|
||||
|
||||
|
||||
if (data.phoneNumber !== undefined) updatePayload.phoneNumber = data.phoneNumber;
|
||||
|
||||
|
||||
if (data.email !== undefined) updatePayload.email = data.email;
|
||||
|
||||
|
||||
if (data.disabled !== undefined) updatePayload.disabled = data.disabled;
|
||||
|
||||
|
||||
if (data.password !== undefined) updatePayload.password = data.password;
|
||||
|
||||
|
||||
if (data.emailVerified !== undefined) updatePayload.emailVerified = data.emailVerified;
|
||||
|
||||
else updatePayload.emailVerified = true;
|
||||
|
||||
|
||||
if (data.emailVerificationToken !== undefined) updatePayload.emailVerificationToken = data.emailVerificationToken;
|
||||
|
||||
|
||||
if (data.emailVerificationTokenExpiresAt !== undefined) updatePayload.emailVerificationTokenExpiresAt = data.emailVerificationTokenExpiresAt;
|
||||
|
||||
|
||||
if (data.passwordResetToken !== undefined) updatePayload.passwordResetToken = data.passwordResetToken;
|
||||
|
||||
|
||||
if (data.passwordResetTokenExpiresAt !== undefined) updatePayload.passwordResetTokenExpiresAt = data.passwordResetTokenExpiresAt;
|
||||
|
||||
|
||||
if (data.provider !== undefined) updatePayload.provider = data.provider;
|
||||
|
||||
|
||||
updatePayload.updatedById = currentUser.id;
|
||||
|
||||
await users.update(updatePayload, {transaction});
|
||||
|
||||
|
||||
|
||||
if (data.app_role !== undefined) {
|
||||
await users.setApp_role(
|
||||
|
||||
data.app_role,
|
||||
|
||||
{ transaction }
|
||||
);
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
if (data.custom_permissions !== undefined) {
|
||||
await users.setCustom_permissions(data.custom_permissions, { transaction });
|
||||
}
|
||||
|
||||
|
||||
|
||||
await FileDBApi.replaceRelationFiles(
|
||||
{
|
||||
belongsTo: db.users.getTableName(),
|
||||
belongsToColumn: 'avatar',
|
||||
belongsToId: users.id,
|
||||
},
|
||||
data.avatar,
|
||||
options,
|
||||
);
|
||||
|
||||
|
||||
return users;
|
||||
}
|
||||
|
||||
static async deleteByIds(ids, options) {
|
||||
const currentUser = (options && options.currentUser) || { id: null };
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const users = await db.users.findAll({
|
||||
where: {
|
||||
id: {
|
||||
[Op.in]: ids,
|
||||
},
|
||||
},
|
||||
transaction,
|
||||
});
|
||||
|
||||
await db.sequelize.transaction(async (transaction) => {
|
||||
for (const record of users) {
|
||||
await record.update(
|
||||
{deletedBy: currentUser.id},
|
||||
{transaction}
|
||||
);
|
||||
}
|
||||
for (const record of users) {
|
||||
await record.destroy({transaction});
|
||||
}
|
||||
});
|
||||
|
||||
|
||||
return users;
|
||||
}
|
||||
|
||||
static async remove(id, options) {
|
||||
const currentUser = (options && options.currentUser) || {id: null};
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const users = await db.users.findByPk(id, options);
|
||||
|
||||
await users.update({
|
||||
deletedBy: currentUser.id
|
||||
}, {
|
||||
transaction,
|
||||
});
|
||||
|
||||
await users.destroy({
|
||||
transaction
|
||||
});
|
||||
|
||||
return users;
|
||||
}
|
||||
|
||||
static async findBy(where, options) {
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const users = await db.users.findOne(
|
||||
{ where },
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
if (!users) {
|
||||
return users;
|
||||
}
|
||||
|
||||
const output = users.get({plain: true});
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
output.clients_owner = await users.getClients_owner({
|
||||
transaction
|
||||
});
|
||||
|
||||
|
||||
|
||||
output.avatar = await users.getAvatar({
|
||||
transaction
|
||||
});
|
||||
|
||||
|
||||
output.app_role = await users.getApp_role({
|
||||
transaction
|
||||
});
|
||||
|
||||
if (output.app_role) {
|
||||
output.app_role_permissions = await output.app_role.getPermissions({
|
||||
transaction,
|
||||
});
|
||||
}
|
||||
|
||||
|
||||
output.custom_permissions = await users.getCustom_permissions({
|
||||
transaction
|
||||
});
|
||||
|
||||
|
||||
|
||||
return output;
|
||||
}
|
||||
|
||||
static async findAll(
|
||||
filter,
|
||||
options
|
||||
) {
|
||||
const limit = filter.limit || 0;
|
||||
let offset = 0;
|
||||
let where = {};
|
||||
const currentPage = +filter.page;
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
offset = currentPage * limit;
|
||||
|
||||
let include = [
|
||||
|
||||
{
|
||||
model: db.roles,
|
||||
as: 'app_role',
|
||||
|
||||
where: filter.app_role ? {
|
||||
[Op.or]: [
|
||||
{ id: { [Op.in]: filter.app_role.split('|').map(term => Utils.uuid(term)) } },
|
||||
{
|
||||
name: {
|
||||
[Op.or]: filter.app_role.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
|
||||
}
|
||||
},
|
||||
]
|
||||
} : {},
|
||||
|
||||
},
|
||||
|
||||
|
||||
{
|
||||
model: db.permissions,
|
||||
as: 'custom_permissions',
|
||||
required: false,
|
||||
},
|
||||
|
||||
|
||||
{
|
||||
model: db.file,
|
||||
as: 'avatar',
|
||||
},
|
||||
|
||||
];
|
||||
|
||||
if (filter) {
|
||||
if (filter.id) {
|
||||
where = {
|
||||
...where,
|
||||
['id']: Utils.uuid(filter.id),
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
if (filter.firstName) {
|
||||
where = {
|
||||
...where,
|
||||
[Op.and]: Utils.ilike(
|
||||
'users',
|
||||
'firstName',
|
||||
filter.firstName,
|
||||
),
|
||||
};
|
||||
}
|
||||
|
||||
if (filter.lastName) {
|
||||
where = {
|
||||
...where,
|
||||
[Op.and]: Utils.ilike(
|
||||
'users',
|
||||
'lastName',
|
||||
filter.lastName,
|
||||
),
|
||||
};
|
||||
}
|
||||
|
||||
if (filter.phoneNumber) {
|
||||
where = {
|
||||
...where,
|
||||
[Op.and]: Utils.ilike(
|
||||
'users',
|
||||
'phoneNumber',
|
||||
filter.phoneNumber,
|
||||
),
|
||||
};
|
||||
}
|
||||
|
||||
if (filter.email) {
|
||||
where = {
|
||||
...where,
|
||||
[Op.and]: Utils.ilike(
|
||||
'users',
|
||||
'email',
|
||||
filter.email,
|
||||
),
|
||||
};
|
||||
}
|
||||
|
||||
if (filter.password) {
|
||||
where = {
|
||||
...where,
|
||||
[Op.and]: Utils.ilike(
|
||||
'users',
|
||||
'password',
|
||||
filter.password,
|
||||
),
|
||||
};
|
||||
}
|
||||
|
||||
if (filter.emailVerificationToken) {
|
||||
where = {
|
||||
...where,
|
||||
[Op.and]: Utils.ilike(
|
||||
'users',
|
||||
'emailVerificationToken',
|
||||
filter.emailVerificationToken,
|
||||
),
|
||||
};
|
||||
}
|
||||
|
||||
if (filter.passwordResetToken) {
|
||||
where = {
|
||||
...where,
|
||||
[Op.and]: Utils.ilike(
|
||||
'users',
|
||||
'passwordResetToken',
|
||||
filter.passwordResetToken,
|
||||
),
|
||||
};
|
||||
}
|
||||
|
||||
if (filter.provider) {
|
||||
where = {
|
||||
...where,
|
||||
[Op.and]: Utils.ilike(
|
||||
'users',
|
||||
'provider',
|
||||
filter.provider,
|
||||
),
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
if (filter.emailVerificationTokenExpiresAtRange) {
|
||||
const [start, end] = filter.emailVerificationTokenExpiresAtRange;
|
||||
|
||||
if (start !== undefined && start !== null && start !== '') {
|
||||
where = {
|
||||
...where,
|
||||
emailVerificationTokenExpiresAt: {
|
||||
...where.emailVerificationTokenExpiresAt,
|
||||
[Op.gte]: start,
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
if (end !== undefined && end !== null && end !== '') {
|
||||
where = {
|
||||
...where,
|
||||
emailVerificationTokenExpiresAt: {
|
||||
...where.emailVerificationTokenExpiresAt,
|
||||
[Op.lte]: end,
|
||||
},
|
||||
};
|
||||
}
|
||||
}
|
||||
|
||||
if (filter.passwordResetTokenExpiresAtRange) {
|
||||
const [start, end] = filter.passwordResetTokenExpiresAtRange;
|
||||
|
||||
if (start !== undefined && start !== null && start !== '') {
|
||||
where = {
|
||||
...where,
|
||||
passwordResetTokenExpiresAt: {
|
||||
...where.passwordResetTokenExpiresAt,
|
||||
[Op.gte]: start,
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
if (end !== undefined && end !== null && end !== '') {
|
||||
where = {
|
||||
...where,
|
||||
passwordResetTokenExpiresAt: {
|
||||
...where.passwordResetTokenExpiresAt,
|
||||
[Op.lte]: end,
|
||||
},
|
||||
};
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if (filter.active !== undefined) {
|
||||
where = {
|
||||
...where,
|
||||
active: filter.active === true || filter.active === 'true'
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
if (filter.disabled) {
|
||||
where = {
|
||||
...where,
|
||||
disabled: filter.disabled,
|
||||
};
|
||||
}
|
||||
|
||||
if (filter.emailVerified) {
|
||||
where = {
|
||||
...where,
|
||||
emailVerified: filter.emailVerified,
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
if (filter.custom_permissions) {
|
||||
const searchTerms = filter.custom_permissions.split('|');
|
||||
|
||||
include = [
|
||||
{
|
||||
model: db.permissions,
|
||||
as: 'custom_permissions_filter',
|
||||
required: searchTerms.length > 0,
|
||||
where: searchTerms.length > 0 ? {
|
||||
[Op.or]: [
|
||||
{ id: { [Op.in]: searchTerms.map(term => Utils.uuid(term)) } },
|
||||
{
|
||||
name: {
|
||||
[Op.or]: searchTerms.map(term => ({ [Op.iLike]: `%${term}%` }))
|
||||
}
|
||||
}
|
||||
]
|
||||
} : undefined
|
||||
},
|
||||
...include,
|
||||
]
|
||||
}
|
||||
|
||||
|
||||
if (filter.createdAtRange) {
|
||||
const [start, end] = filter.createdAtRange;
|
||||
|
||||
if (start !== undefined && start !== null && start !== '') {
|
||||
where = {
|
||||
...where,
|
||||
['createdAt']: {
|
||||
...where.createdAt,
|
||||
[Op.gte]: start,
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
if (end !== undefined && end !== null && end !== '') {
|
||||
where = {
|
||||
...where,
|
||||
['createdAt']: {
|
||||
...where.createdAt,
|
||||
[Op.lte]: end,
|
||||
},
|
||||
};
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
const queryOptions = {
|
||||
where,
|
||||
include,
|
||||
distinct: true,
|
||||
order: filter.field && filter.sort
|
||||
? [[filter.field, filter.sort]]
|
||||
: [['createdAt', 'desc']],
|
||||
transaction: options?.transaction,
|
||||
logging: false
|
||||
};
|
||||
|
||||
if (!options?.countOnly) {
|
||||
queryOptions.limit = limit ? Number(limit) : undefined;
|
||||
queryOptions.offset = offset ? Number(offset) : undefined;
|
||||
}
|
||||
|
||||
try {
|
||||
const { rows, count } = await db.users.findAndCountAll(queryOptions);
|
||||
|
||||
return {
|
||||
rows: options?.countOnly ? [] : rows,
|
||||
count: count
|
||||
};
|
||||
} catch (error) {
|
||||
console.error('Error executing query:', error);
|
||||
throw error;
|
||||
}
|
||||
}
|
||||
|
||||
static async findAllAutocomplete(query, limit, offset, ) {
|
||||
let where = {};
|
||||
|
||||
|
||||
|
||||
if (query) {
|
||||
where = {
|
||||
[Op.or]: [
|
||||
{ ['id']: Utils.uuid(query) },
|
||||
Utils.ilike(
|
||||
'users',
|
||||
'firstName',
|
||||
query,
|
||||
),
|
||||
],
|
||||
};
|
||||
}
|
||||
|
||||
const records = await db.users.findAll({
|
||||
attributes: [ 'id', 'firstName' ],
|
||||
where,
|
||||
limit: limit ? Number(limit) : undefined,
|
||||
offset: offset ? Number(offset) : undefined,
|
||||
orderBy: [['firstName', 'ASC']],
|
||||
});
|
||||
|
||||
return records.map((record) => ({
|
||||
id: record.id,
|
||||
label: record.firstName,
|
||||
}));
|
||||
}
|
||||
|
||||
|
||||
static async createFromAuth(data, options) {
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
const users = await db.users.create(
|
||||
{
|
||||
email: data.email,
|
||||
firstName: data.firstName,
|
||||
authenticationUid: data.authenticationUid,
|
||||
password: data.password,
|
||||
|
||||
},
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
const app_role = await db.roles.findOne({
|
||||
where: { name: config.roles?.user || "User" },
|
||||
});
|
||||
if (app_role?.id) {
|
||||
await users.setApp_role(app_role?.id || null, {
|
||||
transaction,
|
||||
});
|
||||
}
|
||||
|
||||
await users.update(
|
||||
{
|
||||
authenticationUid: users.id,
|
||||
},
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
delete users.password;
|
||||
return users;
|
||||
}
|
||||
|
||||
static async updatePassword(id, password, options) {
|
||||
const currentUser = (options && options.currentUser) || { id: null };
|
||||
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const users = await db.users.findByPk(id, {
|
||||
transaction,
|
||||
});
|
||||
|
||||
await users.update(
|
||||
{
|
||||
password,
|
||||
authenticationUid: id,
|
||||
passwordResetToken: null,
|
||||
passwordResetTokenExpiresAt: null,
|
||||
updatedById: currentUser.id,
|
||||
},
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
return users;
|
||||
}
|
||||
|
||||
static async generateEmailVerificationToken(email, options) {
|
||||
return this._generateToken(['emailVerificationToken', 'emailVerificationTokenExpiresAt'], email, options);
|
||||
}
|
||||
|
||||
static async generatePasswordResetToken(email, options) {
|
||||
return this._generateToken(['passwordResetToken', 'passwordResetTokenExpiresAt'], email, options);
|
||||
}
|
||||
|
||||
static async findByPasswordResetToken(token, options) {
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
return db.users.findOne({
|
||||
where: {
|
||||
passwordResetToken: digestOneTimeToken(token),
|
||||
passwordResetTokenExpiresAt: {
|
||||
[db.Sequelize.Op.gt]: Date.now(),
|
||||
},
|
||||
},
|
||||
transaction,
|
||||
});
|
||||
}
|
||||
|
||||
static async findByEmailVerificationToken(
|
||||
token,
|
||||
options,
|
||||
) {
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
return db.users.findOne({
|
||||
where: {
|
||||
emailVerificationToken: digestOneTimeToken(token),
|
||||
emailVerificationTokenExpiresAt: {
|
||||
[db.Sequelize.Op.gt]: Date.now(),
|
||||
},
|
||||
},
|
||||
transaction,
|
||||
});
|
||||
}
|
||||
|
||||
static async markEmailVerified(id, options) {
|
||||
const currentUser = (options && options.currentUser) || { id: null };
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
|
||||
const users = await db.users.findByPk(id, {
|
||||
transaction,
|
||||
});
|
||||
|
||||
await users.update(
|
||||
{
|
||||
emailVerified: true,
|
||||
emailVerificationToken: null,
|
||||
emailVerificationTokenExpiresAt: null,
|
||||
updatedById: currentUser.id,
|
||||
},
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
static async _generateToken(keyNames, email, options) {
|
||||
const currentUser = (options && options.currentUser) || {id: null};
|
||||
const transaction = (options && options.transaction) || undefined;
|
||||
const users = await db.users.findOne({
|
||||
where: { email: email.toLowerCase() },
|
||||
transaction,
|
||||
});
|
||||
|
||||
const generated = generateOneTimeToken();
|
||||
|
||||
if(users){
|
||||
await users.update(
|
||||
{
|
||||
[keyNames[0]]: generated.digest,
|
||||
[keyNames[1]]: generated.expiresAt,
|
||||
updatedById: currentUser.id,
|
||||
},
|
||||
{transaction},
|
||||
);
|
||||
}
|
||||
|
||||
|
||||
return generated.token;
|
||||
}
|
||||
|
||||
|
||||
|
||||
};
|
||||
33
backend/src/db/db.config.js
Normal file
33
backend/src/db/db.config.js
Normal file
@ -0,0 +1,33 @@
|
||||
|
||||
|
||||
module.exports = {
|
||||
production: {
|
||||
dialect: 'postgres',
|
||||
username: process.env.DB_USER,
|
||||
password: process.env.DB_PASS,
|
||||
database: process.env.DB_NAME,
|
||||
host: process.env.DB_HOST,
|
||||
port: process.env.DB_PORT,
|
||||
logging: false,
|
||||
seederStorage: 'sequelize',
|
||||
},
|
||||
development: {
|
||||
username: 'postgres',
|
||||
dialect: 'postgres',
|
||||
password: '',
|
||||
database: 'db_sales_pipeline_crm',
|
||||
host: process.env.DB_HOST || 'localhost',
|
||||
logging: console.log,
|
||||
seederStorage: 'sequelize',
|
||||
},
|
||||
dev_stage: {
|
||||
dialect: 'postgres',
|
||||
username: process.env.DB_USER,
|
||||
password: process.env.DB_PASS,
|
||||
database: process.env.DB_NAME,
|
||||
host: process.env.DB_HOST,
|
||||
port: process.env.DB_PORT,
|
||||
logging: false,
|
||||
seederStorage: 'sequelize',
|
||||
}
|
||||
};
|
||||
278
backend/src/db/migrations/1780999621284.js
Normal file
278
backend/src/db/migrations/1780999621284.js
Normal file
@ -0,0 +1,278 @@
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
const transaction = await queryInterface.sequelize.transaction();
|
||||
|
||||
try {
|
||||
await queryInterface.createTable('users', {
|
||||
id: { type: Sequelize.DataTypes.UUID, defaultValue: Sequelize.DataTypes.UUIDV4, primaryKey: true },
|
||||
firstName: { type: Sequelize.DataTypes.TEXT },
|
||||
lastName: { type: Sequelize.DataTypes.TEXT },
|
||||
phoneNumber: { type: Sequelize.DataTypes.TEXT },
|
||||
email: { type: Sequelize.DataTypes.TEXT },
|
||||
disabled: { type: Sequelize.DataTypes.BOOLEAN, allowNull: false, defaultValue: false },
|
||||
password: { type: Sequelize.DataTypes.TEXT },
|
||||
emailVerified: { type: Sequelize.DataTypes.BOOLEAN, allowNull: false, defaultValue: false },
|
||||
emailVerificationToken: { type: Sequelize.DataTypes.TEXT },
|
||||
emailVerificationTokenExpiresAt: { type: Sequelize.DataTypes.DATE },
|
||||
passwordResetToken: { type: Sequelize.DataTypes.TEXT },
|
||||
passwordResetTokenExpiresAt: { type: Sequelize.DataTypes.DATE },
|
||||
provider: { type: Sequelize.DataTypes.TEXT },
|
||||
importHash: { type: Sequelize.DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
createdById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
updatedById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
createdAt: { type: Sequelize.DataTypes.DATE },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE },
|
||||
deletedAt: { type: Sequelize.DataTypes.DATE },
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('roles', {
|
||||
id: { type: Sequelize.DataTypes.UUID, defaultValue: Sequelize.DataTypes.UUIDV4, primaryKey: true },
|
||||
name: { type: Sequelize.DataTypes.TEXT },
|
||||
role_customization: { type: Sequelize.DataTypes.TEXT },
|
||||
importHash: { type: Sequelize.DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
createdById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
updatedById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
createdAt: { type: Sequelize.DataTypes.DATE },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE },
|
||||
deletedAt: { type: Sequelize.DataTypes.DATE },
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('permissions', {
|
||||
id: { type: Sequelize.DataTypes.UUID, defaultValue: Sequelize.DataTypes.UUIDV4, primaryKey: true },
|
||||
name: { type: Sequelize.DataTypes.TEXT },
|
||||
importHash: { type: Sequelize.DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
createdById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
updatedById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
createdAt: { type: Sequelize.DataTypes.DATE },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE },
|
||||
deletedAt: { type: Sequelize.DataTypes.DATE },
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.addColumn('users', 'app_roleId', {
|
||||
type: Sequelize.DataTypes.UUID,
|
||||
references: { model: 'roles', key: 'id' },
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('rolesPermissionsPermissions', {
|
||||
createdAt: { type: Sequelize.DataTypes.DATE, allowNull: false },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE, allowNull: false },
|
||||
roles_permissionsId: {
|
||||
type: Sequelize.DataTypes.UUID,
|
||||
allowNull: false,
|
||||
references: { model: 'roles', key: 'id' },
|
||||
primaryKey: true,
|
||||
},
|
||||
permissionId: {
|
||||
type: Sequelize.DataTypes.UUID,
|
||||
allowNull: false,
|
||||
references: { model: 'permissions', key: 'id' },
|
||||
primaryKey: true,
|
||||
},
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('usersCustom_permissionsPermissions', {
|
||||
createdAt: { type: Sequelize.DataTypes.DATE, allowNull: false },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE, allowNull: false },
|
||||
users_custom_permissionsId: {
|
||||
type: Sequelize.DataTypes.UUID,
|
||||
allowNull: false,
|
||||
references: { model: 'users', key: 'id' },
|
||||
primaryKey: true,
|
||||
},
|
||||
permissionId: {
|
||||
type: Sequelize.DataTypes.UUID,
|
||||
allowNull: false,
|
||||
references: { model: 'permissions', key: 'id' },
|
||||
primaryKey: true,
|
||||
},
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('packages', {
|
||||
id: { type: Sequelize.DataTypes.UUID, defaultValue: Sequelize.DataTypes.UUIDV4, primaryKey: true },
|
||||
title: { type: Sequelize.DataTypes.TEXT },
|
||||
description: { type: Sequelize.DataTypes.TEXT },
|
||||
price: { type: Sequelize.DataTypes.TEXT },
|
||||
duration: { type: Sequelize.DataTypes.TEXT },
|
||||
cta: { type: Sequelize.DataTypes.TEXT },
|
||||
included_sessions: { type: Sequelize.DataTypes.INTEGER },
|
||||
is_active: { type: Sequelize.DataTypes.BOOLEAN, allowNull: false, defaultValue: true },
|
||||
importHash: { type: Sequelize.DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
createdById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
updatedById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
createdAt: { type: Sequelize.DataTypes.DATE },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE },
|
||||
deletedAt: { type: Sequelize.DataTypes.DATE },
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('clients', {
|
||||
id: { type: Sequelize.DataTypes.UUID, defaultValue: Sequelize.DataTypes.UUIDV4, primaryKey: true },
|
||||
name: { type: Sequelize.DataTypes.TEXT },
|
||||
email: { type: Sequelize.DataTypes.TEXT },
|
||||
status: { type: Sequelize.DataTypes.ENUM('lead', 'active', 'paused', 'completed'), allowNull: false, defaultValue: 'active' },
|
||||
goals: { type: Sequelize.DataTypes.TEXT },
|
||||
notes: { type: Sequelize.DataTypes.TEXT },
|
||||
company: { type: Sequelize.DataTypes.TEXT },
|
||||
role_title: { type: Sequelize.DataTypes.TEXT },
|
||||
tags: { type: Sequelize.DataTypes.TEXT },
|
||||
next_session_at: { type: Sequelize.DataTypes.DATE },
|
||||
last_session_at: { type: Sequelize.DataTypes.DATE },
|
||||
packageId: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'packages' } },
|
||||
ownerId: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
importHash: { type: Sequelize.DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
createdById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
updatedById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
createdAt: { type: Sequelize.DataTypes.DATE },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE },
|
||||
deletedAt: { type: Sequelize.DataTypes.DATE },
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('intake_leads', {
|
||||
id: { type: Sequelize.DataTypes.UUID, defaultValue: Sequelize.DataTypes.UUIDV4, primaryKey: true },
|
||||
name: { type: Sequelize.DataTypes.TEXT },
|
||||
email: { type: Sequelize.DataTypes.TEXT },
|
||||
company: { type: Sequelize.DataTypes.TEXT },
|
||||
role_title: { type: Sequelize.DataTypes.TEXT },
|
||||
goal: { type: Sequelize.DataTypes.TEXT },
|
||||
challenge: { type: Sequelize.DataTypes.TEXT },
|
||||
desired_outcome: { type: Sequelize.DataTypes.TEXT },
|
||||
source: { type: Sequelize.DataTypes.TEXT },
|
||||
status: { type: Sequelize.DataTypes.ENUM('new', 'reviewed', 'invited', 'converted', 'archived'), allowNull: false, defaultValue: 'new' },
|
||||
consent_ai_notes: { type: Sequelize.DataTypes.BOOLEAN, allowNull: false, defaultValue: false },
|
||||
importHash: { type: Sequelize.DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
createdById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
updatedById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
createdAt: { type: Sequelize.DataTypes.DATE },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE },
|
||||
deletedAt: { type: Sequelize.DataTypes.DATE },
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('sessions', {
|
||||
id: { type: Sequelize.DataTypes.UUID, defaultValue: Sequelize.DataTypes.UUIDV4, primaryKey: true },
|
||||
clientId: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'clients' } },
|
||||
title: { type: Sequelize.DataTypes.TEXT },
|
||||
session_at: { type: Sequelize.DataTypes.DATE },
|
||||
status: { type: Sequelize.DataTypes.ENUM('planned', 'completed', 'draft_review', 'shared'), allowNull: false, defaultValue: 'completed' },
|
||||
transcript_notes: { type: Sequelize.DataTypes.TEXT },
|
||||
ai_summary: { type: Sequelize.DataTypes.TEXT },
|
||||
key_topics: { type: Sequelize.DataTypes.TEXT },
|
||||
goals_discussed: { type: Sequelize.DataTypes.TEXT },
|
||||
blockers: { type: Sequelize.DataTypes.TEXT },
|
||||
commitments: { type: Sequelize.DataTypes.TEXT },
|
||||
homework: { type: Sequelize.DataTypes.TEXT },
|
||||
emotional_themes: { type: Sequelize.DataTypes.TEXT },
|
||||
important_quotes: { type: Sequelize.DataTypes.TEXT },
|
||||
follow_up_email: { type: Sequelize.DataTypes.TEXT },
|
||||
next_session_prep: { type: Sequelize.DataTypes.TEXT },
|
||||
private_coach_notes: { type: Sequelize.DataTypes.TEXT },
|
||||
shared_client_notes: { type: Sequelize.DataTypes.TEXT },
|
||||
importHash: { type: Sequelize.DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
createdById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
updatedById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
createdAt: { type: Sequelize.DataTypes.DATE },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE },
|
||||
deletedAt: { type: Sequelize.DataTypes.DATE },
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('action_items', {
|
||||
id: { type: Sequelize.DataTypes.UUID, defaultValue: Sequelize.DataTypes.UUIDV4, primaryKey: true },
|
||||
clientId: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'clients' } },
|
||||
sessionId: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'sessions' } },
|
||||
title: { type: Sequelize.DataTypes.TEXT },
|
||||
due_at: { type: Sequelize.DataTypes.DATE },
|
||||
status: { type: Sequelize.DataTypes.ENUM('not_started', 'in_progress', 'done'), allowNull: false, defaultValue: 'not_started' },
|
||||
notes: { type: Sequelize.DataTypes.TEXT },
|
||||
importHash: { type: Sequelize.DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
createdById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
updatedById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
createdAt: { type: Sequelize.DataTypes.DATE },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE },
|
||||
deletedAt: { type: Sequelize.DataTypes.DATE },
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('resources', {
|
||||
id: { type: Sequelize.DataTypes.UUID, defaultValue: Sequelize.DataTypes.UUIDV4, primaryKey: true },
|
||||
clientId: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'clients' } },
|
||||
packageId: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'packages' } },
|
||||
title: { type: Sequelize.DataTypes.TEXT },
|
||||
description: { type: Sequelize.DataTypes.TEXT },
|
||||
url: { type: Sequelize.DataTypes.TEXT },
|
||||
resource_type: { type: Sequelize.DataTypes.ENUM('link', 'worksheet', 'pdf', 'video'), allowNull: false, defaultValue: 'link' },
|
||||
is_shared: { type: Sequelize.DataTypes.BOOLEAN, allowNull: false, defaultValue: true },
|
||||
importHash: { type: Sequelize.DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
createdById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
updatedById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
createdAt: { type: Sequelize.DataTypes.DATE },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE },
|
||||
deletedAt: { type: Sequelize.DataTypes.DATE },
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('testimonials', {
|
||||
id: { type: Sequelize.DataTypes.UUID, defaultValue: Sequelize.DataTypes.UUIDV4, primaryKey: true },
|
||||
name: { type: Sequelize.DataTypes.TEXT },
|
||||
role_company: { type: Sequelize.DataTypes.TEXT },
|
||||
quote: { type: Sequelize.DataTypes.TEXT },
|
||||
photo_url: { type: Sequelize.DataTypes.TEXT },
|
||||
visible_on_site: { type: Sequelize.DataTypes.BOOLEAN, allowNull: false, defaultValue: true },
|
||||
importHash: { type: Sequelize.DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
createdById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
updatedById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
createdAt: { type: Sequelize.DataTypes.DATE },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE },
|
||||
deletedAt: { type: Sequelize.DataTypes.DATE },
|
||||
}, { transaction });
|
||||
|
||||
await queryInterface.createTable('prep_briefs', {
|
||||
id: { type: Sequelize.DataTypes.UUID, defaultValue: Sequelize.DataTypes.UUIDV4, primaryKey: true },
|
||||
clientId: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'clients' } },
|
||||
sessionId: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'sessions' } },
|
||||
next_session_at: { type: Sequelize.DataTypes.DATE },
|
||||
previous_summary: { type: Sequelize.DataTypes.TEXT },
|
||||
open_commitments: { type: Sequelize.DataTypes.TEXT },
|
||||
suggested_questions: { type: Sequelize.DataTypes.TEXT },
|
||||
sensitive_topics: { type: Sequelize.DataTypes.TEXT },
|
||||
status: { type: Sequelize.DataTypes.ENUM('draft', 'ready', 'archived'), allowNull: false, defaultValue: 'ready' },
|
||||
importHash: { type: Sequelize.DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
createdById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
updatedById: { type: Sequelize.DataTypes.UUID, references: { key: 'id', model: 'users' } },
|
||||
createdAt: { type: Sequelize.DataTypes.DATE },
|
||||
updatedAt: { type: Sequelize.DataTypes.DATE },
|
||||
deletedAt: { type: Sequelize.DataTypes.DATE },
|
||||
}, { transaction });
|
||||
|
||||
await transaction.commit();
|
||||
} catch (error) {
|
||||
await transaction.rollback();
|
||||
throw error;
|
||||
}
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
const transaction = await queryInterface.sequelize.transaction();
|
||||
try {
|
||||
const tables = [
|
||||
'prep_briefs',
|
||||
'testimonials',
|
||||
'resources',
|
||||
'action_items',
|
||||
'sessions',
|
||||
'intake_leads',
|
||||
'clients',
|
||||
'packages',
|
||||
'usersCustom_permissionsPermissions',
|
||||
'rolesPermissionsPermissions',
|
||||
'permissions',
|
||||
'roles',
|
||||
'users',
|
||||
];
|
||||
|
||||
for (const table of tables) {
|
||||
await queryInterface.dropTable(table, { transaction });
|
||||
}
|
||||
|
||||
await transaction.commit();
|
||||
} catch (error) {
|
||||
await transaction.rollback();
|
||||
throw error;
|
||||
}
|
||||
},
|
||||
};
|
||||
124
backend/src/db/migrations/20260316000000-create-files.js
Normal file
124
backend/src/db/migrations/20260316000000-create-files.js
Normal file
@ -0,0 +1,124 @@
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
const transaction = await queryInterface.sequelize.transaction();
|
||||
|
||||
try {
|
||||
const rows = await queryInterface.sequelize.query(
|
||||
"SELECT to_regclass('public.files') AS regclass_name;",
|
||||
{
|
||||
transaction,
|
||||
type: Sequelize.QueryTypes.SELECT,
|
||||
},
|
||||
);
|
||||
const tableName = rows[0].regclass_name;
|
||||
|
||||
if (tableName) {
|
||||
await transaction.commit();
|
||||
return;
|
||||
}
|
||||
|
||||
await queryInterface.createTable(
|
||||
'files',
|
||||
{
|
||||
id: {
|
||||
type: Sequelize.DataTypes.UUID,
|
||||
defaultValue: Sequelize.DataTypes.UUIDV4,
|
||||
primaryKey: true,
|
||||
},
|
||||
belongsTo: {
|
||||
type: Sequelize.DataTypes.STRING(255),
|
||||
allowNull: true,
|
||||
},
|
||||
belongsToId: {
|
||||
type: Sequelize.DataTypes.UUID,
|
||||
allowNull: true,
|
||||
},
|
||||
belongsToColumn: {
|
||||
type: Sequelize.DataTypes.STRING(255),
|
||||
allowNull: true,
|
||||
},
|
||||
name: {
|
||||
type: Sequelize.DataTypes.STRING(2083),
|
||||
allowNull: false,
|
||||
},
|
||||
sizeInBytes: {
|
||||
type: Sequelize.DataTypes.INTEGER,
|
||||
allowNull: true,
|
||||
},
|
||||
privateUrl: {
|
||||
type: Sequelize.DataTypes.STRING(2083),
|
||||
allowNull: true,
|
||||
},
|
||||
publicUrl: {
|
||||
type: Sequelize.DataTypes.STRING(2083),
|
||||
allowNull: false,
|
||||
},
|
||||
createdAt: {
|
||||
type: Sequelize.DataTypes.DATE,
|
||||
allowNull: false,
|
||||
},
|
||||
updatedAt: {
|
||||
type: Sequelize.DataTypes.DATE,
|
||||
allowNull: false,
|
||||
},
|
||||
deletedAt: {
|
||||
type: Sequelize.DataTypes.DATE,
|
||||
allowNull: true,
|
||||
},
|
||||
createdById: {
|
||||
type: Sequelize.DataTypes.UUID,
|
||||
allowNull: true,
|
||||
references: {
|
||||
key: 'id',
|
||||
model: 'users',
|
||||
},
|
||||
onDelete: 'SET NULL',
|
||||
onUpdate: 'CASCADE',
|
||||
},
|
||||
updatedById: {
|
||||
type: Sequelize.DataTypes.UUID,
|
||||
allowNull: true,
|
||||
references: {
|
||||
key: 'id',
|
||||
model: 'users',
|
||||
},
|
||||
onDelete: 'SET NULL',
|
||||
onUpdate: 'CASCADE',
|
||||
},
|
||||
},
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
await transaction.commit();
|
||||
} catch (err) {
|
||||
await transaction.rollback();
|
||||
throw err;
|
||||
}
|
||||
},
|
||||
|
||||
async down(queryInterface, Sequelize) {
|
||||
const transaction = await queryInterface.sequelize.transaction();
|
||||
|
||||
try {
|
||||
const rows = await queryInterface.sequelize.query(
|
||||
"SELECT to_regclass('public.files') AS regclass_name;",
|
||||
{
|
||||
transaction,
|
||||
type: Sequelize.QueryTypes.SELECT,
|
||||
},
|
||||
);
|
||||
const tableName = rows[0].regclass_name;
|
||||
|
||||
if (!tableName) {
|
||||
await transaction.commit();
|
||||
return;
|
||||
}
|
||||
|
||||
await queryInterface.dropTable('files', { transaction });
|
||||
await transaction.commit();
|
||||
} catch (err) {
|
||||
await transaction.rollback();
|
||||
throw err;
|
||||
}
|
||||
},
|
||||
};
|
||||
@ -0,0 +1,77 @@
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
const transaction = await queryInterface.sequelize.transaction();
|
||||
|
||||
try {
|
||||
const rows = await queryInterface.sequelize.query(
|
||||
"SELECT to_regclass('public.\"usersCustom_permissionsPermissions\"') AS regclass_name;",
|
||||
{
|
||||
transaction,
|
||||
type: Sequelize.QueryTypes.SELECT,
|
||||
},
|
||||
);
|
||||
const tableName = rows[0].regclass_name;
|
||||
|
||||
if (tableName) {
|
||||
await transaction.commit();
|
||||
return;
|
||||
}
|
||||
|
||||
await queryInterface.createTable(
|
||||
'usersCustom_permissionsPermissions',
|
||||
{
|
||||
createdAt: {
|
||||
type: Sequelize.DataTypes.DATE,
|
||||
allowNull: false,
|
||||
},
|
||||
updatedAt: {
|
||||
type: Sequelize.DataTypes.DATE,
|
||||
allowNull: false,
|
||||
},
|
||||
users_custom_permissionsId: {
|
||||
type: Sequelize.DataTypes.UUID,
|
||||
allowNull: false,
|
||||
primaryKey: true,
|
||||
},
|
||||
permissionId: {
|
||||
type: Sequelize.DataTypes.UUID,
|
||||
allowNull: false,
|
||||
primaryKey: true,
|
||||
},
|
||||
},
|
||||
{ transaction },
|
||||
);
|
||||
|
||||
await transaction.commit();
|
||||
} catch (err) {
|
||||
await transaction.rollback();
|
||||
throw err;
|
||||
}
|
||||
},
|
||||
|
||||
async down(queryInterface, Sequelize) {
|
||||
const transaction = await queryInterface.sequelize.transaction();
|
||||
|
||||
try {
|
||||
const rows = await queryInterface.sequelize.query(
|
||||
"SELECT to_regclass('public.\"usersCustom_permissionsPermissions\"') AS regclass_name;",
|
||||
{
|
||||
transaction,
|
||||
type: Sequelize.QueryTypes.SELECT,
|
||||
},
|
||||
);
|
||||
const tableName = rows[0].regclass_name;
|
||||
|
||||
if (!tableName) {
|
||||
await transaction.commit();
|
||||
return;
|
||||
}
|
||||
|
||||
await queryInterface.dropTable('usersCustom_permissionsPermissions', { transaction });
|
||||
await transaction.commit();
|
||||
} catch (err) {
|
||||
await transaction.rollback();
|
||||
throw err;
|
||||
}
|
||||
},
|
||||
};
|
||||
@ -0,0 +1,16 @@
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
await queryInterface.addColumn("prep_briefs", "client_reflection", {
|
||||
type: Sequelize.DataTypes.TEXT,
|
||||
});
|
||||
|
||||
await queryInterface.addColumn("prep_briefs", "client_reflection_at", {
|
||||
type: Sequelize.DataTypes.DATE,
|
||||
});
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
await queryInterface.removeColumn("prep_briefs", "client_reflection_at");
|
||||
await queryInterface.removeColumn("prep_briefs", "client_reflection");
|
||||
},
|
||||
};
|
||||
@ -0,0 +1,26 @@
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
await queryInterface.addColumn("sessions", "audio_url", {
|
||||
type: Sequelize.DataTypes.TEXT,
|
||||
});
|
||||
|
||||
await queryInterface.addColumn("sessions", "audio_filename", {
|
||||
type: Sequelize.DataTypes.TEXT,
|
||||
});
|
||||
|
||||
await queryInterface.addColumn("sessions", "audio_mime_type", {
|
||||
type: Sequelize.DataTypes.TEXT,
|
||||
});
|
||||
|
||||
await queryInterface.addColumn("sessions", "audio_size", {
|
||||
type: Sequelize.DataTypes.INTEGER,
|
||||
});
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
await queryInterface.removeColumn("sessions", "audio_size");
|
||||
await queryInterface.removeColumn("sessions", "audio_mime_type");
|
||||
await queryInterface.removeColumn("sessions", "audio_filename");
|
||||
await queryInterface.removeColumn("sessions", "audio_url");
|
||||
},
|
||||
};
|
||||
@ -0,0 +1,20 @@
|
||||
'use strict';
|
||||
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
await queryInterface.addColumn('intake_leads', 'package_name', {
|
||||
type: Sequelize.TEXT,
|
||||
allowNull: true,
|
||||
});
|
||||
|
||||
await queryInterface.addColumn('intake_leads', 'preferred_time', {
|
||||
type: Sequelize.TEXT,
|
||||
allowNull: true,
|
||||
});
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
await queryInterface.removeColumn('intake_leads', 'preferred_time');
|
||||
await queryInterface.removeColumn('intake_leads', 'package_name');
|
||||
},
|
||||
};
|
||||
@ -0,0 +1,80 @@
|
||||
'use strict';
|
||||
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
await queryInterface.addColumn('clients', 'portalUserId', {
|
||||
type: Sequelize.UUID,
|
||||
allowNull: true,
|
||||
});
|
||||
await queryInterface.addConstraint('clients', {
|
||||
fields: ['portalUserId'],
|
||||
type: 'unique',
|
||||
name: 'clients_portal_user_id_unique',
|
||||
});
|
||||
await queryInterface.addColumn('clients', 'ai_processing_consent_granted', {
|
||||
type: Sequelize.BOOLEAN,
|
||||
allowNull: false,
|
||||
defaultValue: false,
|
||||
});
|
||||
await queryInterface.addColumn('clients', 'ai_processing_consent_at', {
|
||||
type: Sequelize.DATE,
|
||||
allowNull: true,
|
||||
});
|
||||
await queryInterface.addColumn('clients', 'ai_processing_consent_policy_version', {
|
||||
type: Sequelize.TEXT,
|
||||
allowNull: true,
|
||||
});
|
||||
await queryInterface.addColumn('clients', 'recording_consent_granted', {
|
||||
type: Sequelize.BOOLEAN,
|
||||
allowNull: false,
|
||||
defaultValue: false,
|
||||
});
|
||||
await queryInterface.addColumn('clients', 'recording_consent_at', {
|
||||
type: Sequelize.DATE,
|
||||
allowNull: true,
|
||||
});
|
||||
await queryInterface.addColumn('clients', 'recording_consent_policy_version', {
|
||||
type: Sequelize.TEXT,
|
||||
allowNull: true,
|
||||
});
|
||||
await queryInterface.addColumn('clients', 'consent_withdrawn_at', {
|
||||
type: Sequelize.DATE,
|
||||
allowNull: true,
|
||||
});
|
||||
await queryInterface.addColumn('clients', 'consent_updated_by_id', {
|
||||
type: Sequelize.UUID,
|
||||
allowNull: true,
|
||||
});
|
||||
await queryInterface.addColumn('intake_leads', 'consent_ai_notes_at', {
|
||||
type: Sequelize.DATE,
|
||||
allowNull: true,
|
||||
});
|
||||
await queryInterface.addColumn('intake_leads', 'consent_policy_version', {
|
||||
type: Sequelize.TEXT,
|
||||
allowNull: true,
|
||||
});
|
||||
|
||||
await queryInterface.sequelize.query(`
|
||||
UPDATE clients
|
||||
SET "portalUserId" = users.id
|
||||
FROM users
|
||||
WHERE lower(clients.email) = lower(users.email)
|
||||
AND clients."portalUserId" IS NULL
|
||||
`);
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
await queryInterface.removeColumn('intake_leads', 'consent_policy_version');
|
||||
await queryInterface.removeColumn('intake_leads', 'consent_ai_notes_at');
|
||||
await queryInterface.removeColumn('clients', 'consent_updated_by_id');
|
||||
await queryInterface.removeColumn('clients', 'consent_withdrawn_at');
|
||||
await queryInterface.removeColumn('clients', 'recording_consent_policy_version');
|
||||
await queryInterface.removeColumn('clients', 'recording_consent_at');
|
||||
await queryInterface.removeColumn('clients', 'recording_consent_granted');
|
||||
await queryInterface.removeColumn('clients', 'ai_processing_consent_policy_version');
|
||||
await queryInterface.removeColumn('clients', 'ai_processing_consent_at');
|
||||
await queryInterface.removeColumn('clients', 'ai_processing_consent_granted');
|
||||
await queryInterface.removeConstraint('clients', 'clients_portal_user_id_unique');
|
||||
await queryInterface.removeColumn('clients', 'portalUserId');
|
||||
},
|
||||
};
|
||||
@ -0,0 +1,44 @@
|
||||
'use strict';
|
||||
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
await queryInterface.sequelize.query(`
|
||||
ALTER TABLE sessions ALTER COLUMN status DROP DEFAULT;
|
||||
ALTER TABLE sessions ALTER COLUMN status TYPE VARCHAR(32) USING status::text;
|
||||
UPDATE sessions
|
||||
SET status = CASE
|
||||
WHEN status = 'shared' THEN 'shared'
|
||||
WHEN status = 'draft_review' THEN 'draft'
|
||||
WHEN status = 'completed' THEN 'draft'
|
||||
ELSE status
|
||||
END;
|
||||
ALTER TABLE sessions ALTER COLUMN status SET DEFAULT 'draft';
|
||||
ALTER TABLE sessions ALTER COLUMN status SET NOT NULL
|
||||
`);
|
||||
await queryInterface.addColumn('sessions', 'revision', {
|
||||
type: Sequelize.INTEGER,
|
||||
allowNull: false,
|
||||
defaultValue: 1,
|
||||
});
|
||||
await queryInterface.addColumn('sessions', 'approved_at', { type: Sequelize.DATE });
|
||||
await queryInterface.addColumn('sessions', 'approved_by_id', { type: Sequelize.UUID });
|
||||
await queryInterface.addColumn('sessions', 'shared_at', { type: Sequelize.DATE });
|
||||
await queryInterface.addColumn('sessions', 'shared_by_id', { type: Sequelize.UUID });
|
||||
await queryInterface.addColumn('sessions', 'unshared_at', { type: Sequelize.DATE });
|
||||
await queryInterface.addColumn('sessions', 'unshared_by_id', { type: Sequelize.UUID });
|
||||
},
|
||||
|
||||
async down(queryInterface, Sequelize) {
|
||||
await queryInterface.removeColumn('sessions', 'unshared_by_id');
|
||||
await queryInterface.removeColumn('sessions', 'unshared_at');
|
||||
await queryInterface.removeColumn('sessions', 'shared_by_id');
|
||||
await queryInterface.removeColumn('sessions', 'shared_at');
|
||||
await queryInterface.removeColumn('sessions', 'approved_by_id');
|
||||
await queryInterface.removeColumn('sessions', 'approved_at');
|
||||
await queryInterface.removeColumn('sessions', 'revision');
|
||||
await queryInterface.changeColumn('sessions', 'status', {
|
||||
type: Sequelize.ENUM('planned', 'completed', 'draft_review', 'shared'),
|
||||
defaultValue: 'completed',
|
||||
});
|
||||
},
|
||||
};
|
||||
@ -0,0 +1,22 @@
|
||||
'use strict';
|
||||
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
await queryInterface.createTable('coaching_audit_events', {
|
||||
id: { type: Sequelize.UUID, allowNull: false, primaryKey: true },
|
||||
event_type: { type: Sequelize.STRING(64), allowNull: false },
|
||||
actorId: { type: Sequelize.UUID, allowNull: true },
|
||||
target_type: { type: Sequelize.STRING(32), allowNull: false },
|
||||
target_id: { type: Sequelize.UUID, allowNull: true },
|
||||
metadata: { type: Sequelize.JSONB, allowNull: false, defaultValue: {} },
|
||||
createdAt: { type: Sequelize.DATE, allowNull: false },
|
||||
updatedAt: { type: Sequelize.DATE, allowNull: false },
|
||||
});
|
||||
await queryInterface.addIndex('coaching_audit_events', ['event_type', 'createdAt']);
|
||||
await queryInterface.addIndex('coaching_audit_events', ['target_type', 'target_id']);
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
await queryInterface.dropTable('coaching_audit_events');
|
||||
},
|
||||
};
|
||||
@ -0,0 +1,41 @@
|
||||
'use strict';
|
||||
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
await queryInterface.createTable('workspace_settings', {
|
||||
id: { type: Sequelize.STRING(32), allowNull: false, primaryKey: true },
|
||||
practice_name: { type: Sequelize.TEXT },
|
||||
logo_url: { type: Sequelize.TEXT },
|
||||
coach_name: { type: Sequelize.TEXT },
|
||||
coach_photo_url: { type: Sequelize.TEXT },
|
||||
coach_bio: { type: Sequelize.TEXT },
|
||||
coach_credentials: { type: Sequelize.TEXT },
|
||||
coach_niche: { type: Sequelize.TEXT },
|
||||
brand_color: { type: Sequelize.STRING(16), allowNull: false, defaultValue: 'teal' },
|
||||
default_booking_url: { type: Sequelize.TEXT },
|
||||
contact_email: { type: Sequelize.TEXT },
|
||||
custom_domain: { type: Sequelize.TEXT },
|
||||
social_links: { type: Sequelize.JSONB, allowNull: false, defaultValue: [] },
|
||||
packages: { type: Sequelize.JSONB, allowNull: false, defaultValue: [] },
|
||||
testimonials: { type: Sequelize.JSONB, allowNull: false, defaultValue: [] },
|
||||
published: { type: Sequelize.BOOLEAN, allowNull: false, defaultValue: false },
|
||||
createdAt: { type: Sequelize.DATE, allowNull: false },
|
||||
updatedAt: { type: Sequelize.DATE, allowNull: false },
|
||||
updatedById: { type: Sequelize.UUID },
|
||||
});
|
||||
await queryInterface.bulkInsert('workspace_settings', [{
|
||||
id: 'default',
|
||||
brand_color: 'teal',
|
||||
social_links: JSON.stringify([]),
|
||||
packages: JSON.stringify([]),
|
||||
testimonials: JSON.stringify([]),
|
||||
published: false,
|
||||
createdAt: new Date(),
|
||||
updatedAt: new Date(),
|
||||
}]);
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
await queryInterface.dropTable('workspace_settings');
|
||||
},
|
||||
};
|
||||
@ -0,0 +1,45 @@
|
||||
'use strict';
|
||||
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
await queryInterface.addColumn('workspace_settings', 'reminders_enabled', {
|
||||
type: Sequelize.BOOLEAN, allowNull: false, defaultValue: true,
|
||||
});
|
||||
await queryInterface.addColumn('workspace_settings', 'default_reminder_minutes', {
|
||||
type: Sequelize.INTEGER, allowNull: false, defaultValue: 60,
|
||||
});
|
||||
await queryInterface.addColumn('workspace_settings', 'timezone', {
|
||||
type: Sequelize.TEXT, allowNull: false, defaultValue: 'UTC',
|
||||
});
|
||||
await queryInterface.addColumn('clients', 'reminders_enabled', {
|
||||
type: Sequelize.BOOLEAN, allowNull: false, defaultValue: true,
|
||||
});
|
||||
await queryInterface.addColumn('clients', 'reminder_minutes', {
|
||||
type: Sequelize.INTEGER, allowNull: true,
|
||||
});
|
||||
await queryInterface.createTable('coaching_reminder_deliveries', {
|
||||
id: { type: Sequelize.UUID, allowNull: false, primaryKey: true },
|
||||
clientId: { type: Sequelize.UUID, allowNull: false },
|
||||
session_at: { type: Sequelize.DATE, allowNull: false },
|
||||
scheduled_for: { type: Sequelize.DATE, allowNull: false },
|
||||
status: { type: Sequelize.STRING(16), allowNull: false, defaultValue: 'ready' },
|
||||
dismissed_at: { type: Sequelize.DATE },
|
||||
createdAt: { type: Sequelize.DATE, allowNull: false },
|
||||
updatedAt: { type: Sequelize.DATE, allowNull: false },
|
||||
});
|
||||
await queryInterface.addConstraint('coaching_reminder_deliveries', {
|
||||
fields: ['clientId', 'session_at', 'scheduled_for'],
|
||||
type: 'unique',
|
||||
name: 'coaching_reminder_delivery_unique',
|
||||
});
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
await queryInterface.dropTable('coaching_reminder_deliveries');
|
||||
await queryInterface.removeColumn('clients', 'reminder_minutes');
|
||||
await queryInterface.removeColumn('clients', 'reminders_enabled');
|
||||
await queryInterface.removeColumn('workspace_settings', 'timezone');
|
||||
await queryInterface.removeColumn('workspace_settings', 'default_reminder_minutes');
|
||||
await queryInterface.removeColumn('workspace_settings', 'reminders_enabled');
|
||||
},
|
||||
};
|
||||
@ -0,0 +1,15 @@
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
await queryInterface.addColumn('workspace_settings', 'legal_entity_name', { type: Sequelize.TEXT });
|
||||
await queryInterface.addColumn('workspace_settings', 'legal_contact_email', { type: Sequelize.TEXT });
|
||||
await queryInterface.addColumn('workspace_settings', 'legal_terms_effective_date', { type: Sequelize.DATEONLY });
|
||||
await queryInterface.addColumn('workspace_settings', 'legal_review_confirmed', { type: Sequelize.BOOLEAN, allowNull: false, defaultValue: false });
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
await queryInterface.removeColumn('workspace_settings', 'legal_review_confirmed');
|
||||
await queryInterface.removeColumn('workspace_settings', 'legal_terms_effective_date');
|
||||
await queryInterface.removeColumn('workspace_settings', 'legal_contact_email');
|
||||
await queryInterface.removeColumn('workspace_settings', 'legal_entity_name');
|
||||
},
|
||||
};
|
||||
@ -0,0 +1,9 @@
|
||||
module.exports = {
|
||||
async up(queryInterface, Sequelize) {
|
||||
await queryInterface.addColumn('users', 'sessionInvalidatedAt', { type: Sequelize.DATE });
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
await queryInterface.removeColumn('users', 'sessionInvalidatedAt');
|
||||
},
|
||||
};
|
||||
27
backend/src/db/models/action_items.js
Normal file
27
backend/src/db/models/action_items.js
Normal file
@ -0,0 +1,27 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const action_items = sequelize.define(
|
||||
"action_items",
|
||||
{
|
||||
id: { type: DataTypes.UUID, defaultValue: DataTypes.UUIDV4, primaryKey: true },
|
||||
title: { type: DataTypes.TEXT },
|
||||
due_at: { type: DataTypes.DATE },
|
||||
status: { type: DataTypes.ENUM("not_started", "in_progress", "done"), defaultValue: "not_started" },
|
||||
notes: { type: DataTypes.TEXT },
|
||||
importHash: { type: DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
freezeTableName: true,
|
||||
},
|
||||
);
|
||||
|
||||
action_items.associate = (db) => {
|
||||
db.action_items.belongsTo(db.clients, { as: "client", foreignKey: { name: "clientId" }, constraints: false });
|
||||
db.action_items.belongsTo(db.sessions, { as: "session", foreignKey: { name: "sessionId" }, constraints: false });
|
||||
db.action_items.belongsTo(db.users, { as: "createdBy", constraints: false });
|
||||
db.action_items.belongsTo(db.users, { as: "updatedBy", constraints: false });
|
||||
};
|
||||
|
||||
return action_items;
|
||||
};
|
||||
49
backend/src/db/models/clients.js
Normal file
49
backend/src/db/models/clients.js
Normal file
@ -0,0 +1,49 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const clients = sequelize.define(
|
||||
"clients",
|
||||
{
|
||||
id: { type: DataTypes.UUID, defaultValue: DataTypes.UUIDV4, primaryKey: true },
|
||||
name: { type: DataTypes.TEXT },
|
||||
email: { type: DataTypes.TEXT },
|
||||
status: { type: DataTypes.ENUM("lead", "active", "paused", "completed"), defaultValue: "active" },
|
||||
goals: { type: DataTypes.TEXT },
|
||||
notes: { type: DataTypes.TEXT },
|
||||
company: { type: DataTypes.TEXT },
|
||||
role_title: { type: DataTypes.TEXT },
|
||||
tags: { type: DataTypes.TEXT },
|
||||
next_session_at: { type: DataTypes.DATE },
|
||||
last_session_at: { type: DataTypes.DATE },
|
||||
portalUserId: { type: DataTypes.UUID },
|
||||
ai_processing_consent_granted: { type: DataTypes.BOOLEAN, allowNull: false, defaultValue: false },
|
||||
ai_processing_consent_at: { type: DataTypes.DATE },
|
||||
ai_processing_consent_policy_version: { type: DataTypes.TEXT },
|
||||
recording_consent_granted: { type: DataTypes.BOOLEAN, allowNull: false, defaultValue: false },
|
||||
recording_consent_at: { type: DataTypes.DATE },
|
||||
recording_consent_policy_version: { type: DataTypes.TEXT },
|
||||
consent_withdrawn_at: { type: DataTypes.DATE },
|
||||
consent_updated_by_id: { type: DataTypes.UUID },
|
||||
reminders_enabled: { type: DataTypes.BOOLEAN, allowNull: false, defaultValue: true },
|
||||
reminder_minutes: { type: DataTypes.INTEGER },
|
||||
importHash: { type: DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
freezeTableName: true,
|
||||
},
|
||||
);
|
||||
|
||||
clients.associate = (db) => {
|
||||
db.clients.belongsTo(db.packages, { as: "package", foreignKey: { name: "packageId" }, constraints: false });
|
||||
db.clients.belongsTo(db.users, { as: "owner", foreignKey: { name: "ownerId" }, constraints: false });
|
||||
db.clients.belongsTo(db.users, { as: "portal_user", foreignKey: { name: "portalUserId" }, constraints: false });
|
||||
db.clients.hasMany(db.sessions, { as: "sessions", foreignKey: { name: "clientId" }, constraints: false });
|
||||
db.clients.hasMany(db.action_items, { as: "action_items", foreignKey: { name: "clientId" }, constraints: false });
|
||||
db.clients.hasMany(db.resources, { as: "resources", foreignKey: { name: "clientId" }, constraints: false });
|
||||
db.clients.hasMany(db.prep_briefs, { as: "prep_briefs", foreignKey: { name: "clientId" }, constraints: false });
|
||||
db.clients.belongsTo(db.users, { as: "createdBy", constraints: false });
|
||||
db.clients.belongsTo(db.users, { as: "updatedBy", constraints: false });
|
||||
};
|
||||
|
||||
return clients;
|
||||
};
|
||||
14
backend/src/db/models/coaching_audit_events.js
Normal file
14
backend/src/db/models/coaching_audit_events.js
Normal file
@ -0,0 +1,14 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
return sequelize.define(
|
||||
"coaching_audit_events",
|
||||
{
|
||||
id: { type: DataTypes.UUID, defaultValue: DataTypes.UUIDV4, primaryKey: true },
|
||||
event_type: { type: DataTypes.STRING(64), allowNull: false },
|
||||
actorId: { type: DataTypes.UUID },
|
||||
target_type: { type: DataTypes.STRING(32), allowNull: false },
|
||||
target_id: { type: DataTypes.UUID },
|
||||
metadata: { type: DataTypes.JSONB, allowNull: false, defaultValue: {} },
|
||||
},
|
||||
{ timestamps: true, freezeTableName: true },
|
||||
);
|
||||
};
|
||||
20
backend/src/db/models/coaching_reminder_deliveries.js
Normal file
20
backend/src/db/models/coaching_reminder_deliveries.js
Normal file
@ -0,0 +1,20 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const reminders = sequelize.define(
|
||||
"coaching_reminder_deliveries",
|
||||
{
|
||||
id: { type: DataTypes.UUID, defaultValue: DataTypes.UUIDV4, primaryKey: true },
|
||||
clientId: { type: DataTypes.UUID, allowNull: false },
|
||||
session_at: { type: DataTypes.DATE, allowNull: false },
|
||||
scheduled_for: { type: DataTypes.DATE, allowNull: false },
|
||||
status: { type: DataTypes.STRING(16), allowNull: false, defaultValue: "ready" },
|
||||
dismissed_at: { type: DataTypes.DATE },
|
||||
},
|
||||
{ timestamps: true, freezeTableName: true },
|
||||
);
|
||||
|
||||
reminders.associate = (db) => {
|
||||
db.coaching_reminder_deliveries.belongsTo(db.clients, { as: "client", foreignKey: "clientId", constraints: false });
|
||||
};
|
||||
|
||||
return reminders;
|
||||
};
|
||||
53
backend/src/db/models/file.js
Normal file
53
backend/src/db/models/file.js
Normal file
@ -0,0 +1,53 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const file = sequelize.define(
|
||||
'file',
|
||||
{
|
||||
id: {
|
||||
type: DataTypes.UUID,
|
||||
defaultValue: DataTypes.UUIDV4,
|
||||
primaryKey: true,
|
||||
},
|
||||
belongsTo: DataTypes.STRING(255),
|
||||
belongsToId: DataTypes.UUID,
|
||||
belongsToColumn: DataTypes.STRING(255),
|
||||
name: {
|
||||
type: DataTypes.STRING(2083),
|
||||
allowNull: false,
|
||||
validate: {
|
||||
notEmpty: true,
|
||||
},
|
||||
},
|
||||
sizeInBytes: {
|
||||
type: DataTypes.INTEGER,
|
||||
allowNull: true,
|
||||
},
|
||||
privateUrl: {
|
||||
type: DataTypes.STRING(2083),
|
||||
allowNull: true,
|
||||
},
|
||||
publicUrl: {
|
||||
type: DataTypes.STRING(2083),
|
||||
allowNull: false,
|
||||
validate: {
|
||||
notEmpty: true,
|
||||
},
|
||||
},
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
},
|
||||
);
|
||||
|
||||
file.associate = (db) => {
|
||||
db.file.belongsTo(db.users, {
|
||||
as: 'createdBy',
|
||||
});
|
||||
|
||||
db.file.belongsTo(db.users, {
|
||||
as: 'updatedBy',
|
||||
});
|
||||
};
|
||||
|
||||
return file;
|
||||
};
|
||||
37
backend/src/db/models/index.js
Normal file
37
backend/src/db/models/index.js
Normal file
@ -0,0 +1,37 @@
|
||||
'use strict';
|
||||
|
||||
const fs = require('fs');
|
||||
const path = require('path');
|
||||
const Sequelize = require('sequelize');
|
||||
const basename = path.basename(__filename);
|
||||
const env = process.env.NODE_ENV || 'development';
|
||||
const config = require("../db.config")[env];
|
||||
const db = {};
|
||||
|
||||
let sequelize;
|
||||
if (config.use_env_variable) {
|
||||
sequelize = new Sequelize(process.env[config.use_env_variable], config);
|
||||
} else {
|
||||
sequelize = new Sequelize(config.database, config.username, config.password, config);
|
||||
}
|
||||
|
||||
fs
|
||||
.readdirSync(__dirname)
|
||||
.filter(file => {
|
||||
return (file.indexOf('.') !== 0) && (file !== basename) && (file.slice(-3) === '.js');
|
||||
})
|
||||
.forEach(file => {
|
||||
const model = require(path.join(__dirname, file))(sequelize, Sequelize.DataTypes)
|
||||
db[model.name] = model;
|
||||
});
|
||||
|
||||
Object.keys(db).forEach(modelName => {
|
||||
if (db[modelName].associate) {
|
||||
db[modelName].associate(db);
|
||||
}
|
||||
});
|
||||
|
||||
db.sequelize = sequelize;
|
||||
db.Sequelize = Sequelize;
|
||||
|
||||
module.exports = db;
|
||||
35
backend/src/db/models/intake_leads.js
Normal file
35
backend/src/db/models/intake_leads.js
Normal file
@ -0,0 +1,35 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const intake_leads = sequelize.define(
|
||||
"intake_leads",
|
||||
{
|
||||
id: { type: DataTypes.UUID, defaultValue: DataTypes.UUIDV4, primaryKey: true },
|
||||
name: { type: DataTypes.TEXT },
|
||||
email: { type: DataTypes.TEXT },
|
||||
company: { type: DataTypes.TEXT },
|
||||
role_title: { type: DataTypes.TEXT },
|
||||
package_name: { type: DataTypes.TEXT },
|
||||
preferred_time: { type: DataTypes.TEXT },
|
||||
goal: { type: DataTypes.TEXT },
|
||||
challenge: { type: DataTypes.TEXT },
|
||||
desired_outcome: { type: DataTypes.TEXT },
|
||||
source: { type: DataTypes.TEXT },
|
||||
status: { type: DataTypes.ENUM("new", "reviewed", "invited", "converted", "archived"), defaultValue: "new" },
|
||||
consent_ai_notes: { type: DataTypes.BOOLEAN, defaultValue: false },
|
||||
consent_ai_notes_at: { type: DataTypes.DATE },
|
||||
consent_policy_version: { type: DataTypes.TEXT },
|
||||
importHash: { type: DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
freezeTableName: true,
|
||||
},
|
||||
);
|
||||
|
||||
intake_leads.associate = (db) => {
|
||||
db.intake_leads.belongsTo(db.users, { as: "createdBy", constraints: false });
|
||||
db.intake_leads.belongsTo(db.users, { as: "updatedBy", constraints: false });
|
||||
};
|
||||
|
||||
return intake_leads;
|
||||
};
|
||||
30
backend/src/db/models/packages.js
Normal file
30
backend/src/db/models/packages.js
Normal file
@ -0,0 +1,30 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const packages = sequelize.define(
|
||||
"packages",
|
||||
{
|
||||
id: { type: DataTypes.UUID, defaultValue: DataTypes.UUIDV4, primaryKey: true },
|
||||
title: { type: DataTypes.TEXT },
|
||||
description: { type: DataTypes.TEXT },
|
||||
price: { type: DataTypes.TEXT },
|
||||
duration: { type: DataTypes.TEXT },
|
||||
cta: { type: DataTypes.TEXT },
|
||||
included_sessions: { type: DataTypes.INTEGER },
|
||||
is_active: { type: DataTypes.BOOLEAN, defaultValue: true },
|
||||
importHash: { type: DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
freezeTableName: true,
|
||||
},
|
||||
);
|
||||
|
||||
packages.associate = (db) => {
|
||||
db.packages.hasMany(db.clients, { as: "clients", foreignKey: { name: "packageId" }, constraints: false });
|
||||
db.packages.hasMany(db.resources, { as: "resources", foreignKey: { name: "packageId" }, constraints: false });
|
||||
db.packages.belongsTo(db.users, { as: "createdBy", constraints: false });
|
||||
db.packages.belongsTo(db.users, { as: "updatedBy", constraints: false });
|
||||
};
|
||||
|
||||
return packages;
|
||||
};
|
||||
68
backend/src/db/models/permissions.js
Normal file
68
backend/src/db/models/permissions.js
Normal file
@ -0,0 +1,68 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const permissions = sequelize.define(
|
||||
'permissions',
|
||||
{
|
||||
id: {
|
||||
type: DataTypes.UUID,
|
||||
defaultValue: DataTypes.UUIDV4,
|
||||
primaryKey: true,
|
||||
},
|
||||
|
||||
name: {
|
||||
type: DataTypes.TEXT,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
importHash: {
|
||||
type: DataTypes.STRING(255),
|
||||
allowNull: true,
|
||||
unique: true,
|
||||
},
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
freezeTableName: true,
|
||||
},
|
||||
);
|
||||
|
||||
permissions.associate = (db) => {
|
||||
|
||||
|
||||
/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
//end loop
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
db.permissions.belongsTo(db.users, {
|
||||
as: 'createdBy',
|
||||
});
|
||||
|
||||
db.permissions.belongsTo(db.users, {
|
||||
as: 'updatedBy',
|
||||
});
|
||||
};
|
||||
|
||||
|
||||
|
||||
return permissions;
|
||||
};
|
||||
|
||||
31
backend/src/db/models/prep_briefs.js
Normal file
31
backend/src/db/models/prep_briefs.js
Normal file
@ -0,0 +1,31 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const prep_briefs = sequelize.define(
|
||||
"prep_briefs",
|
||||
{
|
||||
id: { type: DataTypes.UUID, defaultValue: DataTypes.UUIDV4, primaryKey: true },
|
||||
next_session_at: { type: DataTypes.DATE },
|
||||
previous_summary: { type: DataTypes.TEXT },
|
||||
open_commitments: { type: DataTypes.TEXT },
|
||||
suggested_questions: { type: DataTypes.TEXT },
|
||||
sensitive_topics: { type: DataTypes.TEXT },
|
||||
client_reflection: { type: DataTypes.TEXT },
|
||||
client_reflection_at: { type: DataTypes.DATE },
|
||||
status: { type: DataTypes.ENUM("draft", "ready", "archived"), defaultValue: "ready" },
|
||||
importHash: { type: DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
freezeTableName: true,
|
||||
},
|
||||
);
|
||||
|
||||
prep_briefs.associate = (db) => {
|
||||
db.prep_briefs.belongsTo(db.clients, { as: "client", foreignKey: { name: "clientId" }, constraints: false });
|
||||
db.prep_briefs.belongsTo(db.sessions, { as: "session", foreignKey: { name: "sessionId" }, constraints: false });
|
||||
db.prep_briefs.belongsTo(db.users, { as: "createdBy", constraints: false });
|
||||
db.prep_briefs.belongsTo(db.users, { as: "updatedBy", constraints: false });
|
||||
};
|
||||
|
||||
return prep_briefs;
|
||||
};
|
||||
28
backend/src/db/models/resources.js
Normal file
28
backend/src/db/models/resources.js
Normal file
@ -0,0 +1,28 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const resources = sequelize.define(
|
||||
"resources",
|
||||
{
|
||||
id: { type: DataTypes.UUID, defaultValue: DataTypes.UUIDV4, primaryKey: true },
|
||||
title: { type: DataTypes.TEXT },
|
||||
description: { type: DataTypes.TEXT },
|
||||
url: { type: DataTypes.TEXT },
|
||||
resource_type: { type: DataTypes.ENUM("link", "worksheet", "pdf", "video"), defaultValue: "link" },
|
||||
is_shared: { type: DataTypes.BOOLEAN, defaultValue: true },
|
||||
importHash: { type: DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
freezeTableName: true,
|
||||
},
|
||||
);
|
||||
|
||||
resources.associate = (db) => {
|
||||
db.resources.belongsTo(db.clients, { as: "client", foreignKey: { name: "clientId" }, constraints: false });
|
||||
db.resources.belongsTo(db.packages, { as: "package", foreignKey: { name: "packageId" }, constraints: false });
|
||||
db.resources.belongsTo(db.users, { as: "createdBy", constraints: false });
|
||||
db.resources.belongsTo(db.users, { as: "updatedBy", constraints: false });
|
||||
};
|
||||
|
||||
return resources;
|
||||
};
|
||||
101
backend/src/db/models/roles.js
Normal file
101
backend/src/db/models/roles.js
Normal file
@ -0,0 +1,101 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const roles = sequelize.define(
|
||||
'roles',
|
||||
{
|
||||
id: {
|
||||
type: DataTypes.UUID,
|
||||
defaultValue: DataTypes.UUIDV4,
|
||||
primaryKey: true,
|
||||
},
|
||||
|
||||
name: {
|
||||
type: DataTypes.TEXT,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
role_customization: {
|
||||
type: DataTypes.TEXT,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
importHash: {
|
||||
type: DataTypes.STRING(255),
|
||||
allowNull: true,
|
||||
unique: true,
|
||||
},
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
freezeTableName: true,
|
||||
},
|
||||
);
|
||||
|
||||
roles.associate = (db) => {
|
||||
|
||||
db.roles.belongsToMany(db.permissions, {
|
||||
as: 'permissions',
|
||||
foreignKey: {
|
||||
name: 'roles_permissionsId',
|
||||
},
|
||||
constraints: false,
|
||||
through: 'rolesPermissionsPermissions',
|
||||
});
|
||||
|
||||
db.roles.belongsToMany(db.permissions, {
|
||||
as: 'permissions_filter',
|
||||
foreignKey: {
|
||||
name: 'roles_permissionsId',
|
||||
},
|
||||
constraints: false,
|
||||
through: 'rolesPermissionsPermissions',
|
||||
});
|
||||
|
||||
|
||||
/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
|
||||
|
||||
|
||||
db.roles.hasMany(db.users, {
|
||||
as: 'users_app_role',
|
||||
foreignKey: {
|
||||
name: 'app_roleId',
|
||||
},
|
||||
constraints: false,
|
||||
});
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
//end loop
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
db.roles.belongsTo(db.users, {
|
||||
as: 'createdBy',
|
||||
});
|
||||
|
||||
db.roles.belongsTo(db.users, {
|
||||
as: 'updatedBy',
|
||||
});
|
||||
};
|
||||
|
||||
|
||||
|
||||
return roles;
|
||||
};
|
||||
|
||||
56
backend/src/db/models/sessions.js
Normal file
56
backend/src/db/models/sessions.js
Normal file
@ -0,0 +1,56 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const sessions = sequelize.define(
|
||||
"sessions",
|
||||
{
|
||||
id: { type: DataTypes.UUID, defaultValue: DataTypes.UUIDV4, primaryKey: true },
|
||||
title: { type: DataTypes.TEXT },
|
||||
session_at: { type: DataTypes.DATE },
|
||||
status: {
|
||||
type: DataTypes.STRING(32),
|
||||
allowNull: false,
|
||||
defaultValue: "draft",
|
||||
validate: { isIn: [["planned", "draft", "approved", "shared", "unshared"]] },
|
||||
},
|
||||
revision: { type: DataTypes.INTEGER, allowNull: false, defaultValue: 1 },
|
||||
approved_at: { type: DataTypes.DATE },
|
||||
approved_by_id: { type: DataTypes.UUID },
|
||||
shared_at: { type: DataTypes.DATE },
|
||||
shared_by_id: { type: DataTypes.UUID },
|
||||
unshared_at: { type: DataTypes.DATE },
|
||||
unshared_by_id: { type: DataTypes.UUID },
|
||||
transcript_notes: { type: DataTypes.TEXT },
|
||||
ai_summary: { type: DataTypes.TEXT },
|
||||
key_topics: { type: DataTypes.TEXT },
|
||||
goals_discussed: { type: DataTypes.TEXT },
|
||||
blockers: { type: DataTypes.TEXT },
|
||||
commitments: { type: DataTypes.TEXT },
|
||||
homework: { type: DataTypes.TEXT },
|
||||
emotional_themes: { type: DataTypes.TEXT },
|
||||
important_quotes: { type: DataTypes.TEXT },
|
||||
follow_up_email: { type: DataTypes.TEXT },
|
||||
next_session_prep: { type: DataTypes.TEXT },
|
||||
private_coach_notes: { type: DataTypes.TEXT },
|
||||
shared_client_notes: { type: DataTypes.TEXT },
|
||||
audio_url: { type: DataTypes.TEXT },
|
||||
audio_filename: { type: DataTypes.TEXT },
|
||||
audio_mime_type: { type: DataTypes.TEXT },
|
||||
audio_size: { type: DataTypes.INTEGER },
|
||||
importHash: { type: DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
freezeTableName: true,
|
||||
},
|
||||
);
|
||||
|
||||
sessions.associate = (db) => {
|
||||
db.sessions.belongsTo(db.clients, { as: "client", foreignKey: { name: "clientId" }, constraints: false });
|
||||
db.sessions.hasMany(db.action_items, { as: "action_items", foreignKey: { name: "sessionId" }, constraints: false });
|
||||
db.sessions.hasMany(db.prep_briefs, { as: "prep_briefs", foreignKey: { name: "sessionId" }, constraints: false });
|
||||
db.sessions.belongsTo(db.users, { as: "createdBy", constraints: false });
|
||||
db.sessions.belongsTo(db.users, { as: "updatedBy", constraints: false });
|
||||
};
|
||||
|
||||
return sessions;
|
||||
};
|
||||
26
backend/src/db/models/testimonials.js
Normal file
26
backend/src/db/models/testimonials.js
Normal file
@ -0,0 +1,26 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const testimonials = sequelize.define(
|
||||
"testimonials",
|
||||
{
|
||||
id: { type: DataTypes.UUID, defaultValue: DataTypes.UUIDV4, primaryKey: true },
|
||||
name: { type: DataTypes.TEXT },
|
||||
role_company: { type: DataTypes.TEXT },
|
||||
quote: { type: DataTypes.TEXT },
|
||||
photo_url: { type: DataTypes.TEXT },
|
||||
visible_on_site: { type: DataTypes.BOOLEAN, defaultValue: true },
|
||||
importHash: { type: DataTypes.STRING(255), allowNull: true, unique: true },
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
freezeTableName: true,
|
||||
},
|
||||
);
|
||||
|
||||
testimonials.associate = (db) => {
|
||||
db.testimonials.belongsTo(db.users, { as: "createdBy", constraints: false });
|
||||
db.testimonials.belongsTo(db.users, { as: "updatedBy", constraints: false });
|
||||
};
|
||||
|
||||
return testimonials;
|
||||
};
|
||||
237
backend/src/db/models/users.js
Normal file
237
backend/src/db/models/users.js
Normal file
@ -0,0 +1,237 @@
|
||||
const config = require('../../config');
|
||||
const providers = config.providers;
|
||||
const crypto = require('crypto');
|
||||
const bcrypt = require('bcrypt');
|
||||
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
const users = sequelize.define(
|
||||
'users',
|
||||
{
|
||||
id: {
|
||||
type: DataTypes.UUID,
|
||||
defaultValue: DataTypes.UUIDV4,
|
||||
primaryKey: true,
|
||||
},
|
||||
|
||||
firstName: {
|
||||
type: DataTypes.TEXT,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
lastName: {
|
||||
type: DataTypes.TEXT,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
phoneNumber: {
|
||||
type: DataTypes.TEXT,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
email: {
|
||||
type: DataTypes.TEXT,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
disabled: {
|
||||
type: DataTypes.BOOLEAN,
|
||||
|
||||
allowNull: false,
|
||||
defaultValue: false,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
sessionInvalidatedAt: {
|
||||
type: DataTypes.DATE,
|
||||
},
|
||||
|
||||
password: {
|
||||
type: DataTypes.TEXT,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
emailVerified: {
|
||||
type: DataTypes.BOOLEAN,
|
||||
|
||||
allowNull: false,
|
||||
defaultValue: false,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
emailVerificationToken: {
|
||||
type: DataTypes.TEXT,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
emailVerificationTokenExpiresAt: {
|
||||
type: DataTypes.DATE,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
passwordResetToken: {
|
||||
type: DataTypes.TEXT,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
passwordResetTokenExpiresAt: {
|
||||
type: DataTypes.DATE,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
provider: {
|
||||
type: DataTypes.TEXT,
|
||||
|
||||
|
||||
|
||||
},
|
||||
|
||||
importHash: {
|
||||
type: DataTypes.STRING(255),
|
||||
allowNull: true,
|
||||
unique: true,
|
||||
},
|
||||
},
|
||||
{
|
||||
timestamps: true,
|
||||
paranoid: true,
|
||||
freezeTableName: true,
|
||||
},
|
||||
);
|
||||
|
||||
users.associate = (db) => {
|
||||
|
||||
db.users.belongsToMany(db.permissions, {
|
||||
as: 'custom_permissions',
|
||||
foreignKey: {
|
||||
name: 'users_custom_permissionsId',
|
||||
},
|
||||
constraints: false,
|
||||
through: 'usersCustom_permissionsPermissions',
|
||||
});
|
||||
|
||||
db.users.belongsToMany(db.permissions, {
|
||||
as: 'custom_permissions_filter',
|
||||
foreignKey: {
|
||||
name: 'users_custom_permissionsId',
|
||||
},
|
||||
constraints: false,
|
||||
through: 'usersCustom_permissionsPermissions',
|
||||
});
|
||||
|
||||
|
||||
/// loop through entities and it's fields, and if ref === current e[name] and create relation has many on parent entity
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
db.users.hasMany(db.clients, {
|
||||
as: 'clients_owner',
|
||||
foreignKey: {
|
||||
name: 'ownerId',
|
||||
},
|
||||
constraints: false,
|
||||
});
|
||||
|
||||
|
||||
|
||||
//end loop
|
||||
|
||||
|
||||
|
||||
db.users.belongsTo(db.roles, {
|
||||
as: 'app_role',
|
||||
foreignKey: {
|
||||
name: 'app_roleId',
|
||||
},
|
||||
constraints: false,
|
||||
});
|
||||
|
||||
|
||||
|
||||
db.users.hasMany(db.file, {
|
||||
as: 'avatar',
|
||||
foreignKey: 'belongsToId',
|
||||
constraints: false,
|
||||
scope: {
|
||||
belongsTo: db.users.getTableName(),
|
||||
belongsToColumn: 'avatar',
|
||||
},
|
||||
});
|
||||
|
||||
|
||||
db.users.belongsTo(db.users, {
|
||||
as: 'createdBy',
|
||||
});
|
||||
|
||||
db.users.belongsTo(db.users, {
|
||||
as: 'updatedBy',
|
||||
});
|
||||
};
|
||||
|
||||
|
||||
users.beforeCreate((users) => {
|
||||
users = trimStringFields(users);
|
||||
|
||||
if (users.provider !== providers.LOCAL && Object.values(providers).indexOf(users.provider) > -1) {
|
||||
users.emailVerified = true;
|
||||
|
||||
if (!users.password) {
|
||||
const password = crypto
|
||||
.randomBytes(20)
|
||||
.toString('hex');
|
||||
|
||||
const hashedPassword = bcrypt.hashSync(
|
||||
password,
|
||||
config.bcrypt.saltRounds,
|
||||
);
|
||||
|
||||
users.password = hashedPassword
|
||||
}
|
||||
}
|
||||
});
|
||||
|
||||
users.beforeUpdate((users) => {
|
||||
trimStringFields(users);
|
||||
});
|
||||
|
||||
|
||||
return users;
|
||||
};
|
||||
|
||||
|
||||
function trimStringFields(users) {
|
||||
users.email = users.email.trim();
|
||||
|
||||
users.firstName = users.firstName
|
||||
? users.firstName.trim()
|
||||
: null;
|
||||
|
||||
users.lastName = users.lastName
|
||||
? users.lastName.trim()
|
||||
: null;
|
||||
|
||||
return users;
|
||||
}
|
||||
32
backend/src/db/models/workspace_settings.js
Normal file
32
backend/src/db/models/workspace_settings.js
Normal file
@ -0,0 +1,32 @@
|
||||
module.exports = function(sequelize, DataTypes) {
|
||||
return sequelize.define(
|
||||
"workspace_settings",
|
||||
{
|
||||
id: { type: DataTypes.STRING(32), primaryKey: true },
|
||||
practice_name: { type: DataTypes.TEXT },
|
||||
logo_url: { type: DataTypes.TEXT },
|
||||
coach_name: { type: DataTypes.TEXT },
|
||||
coach_photo_url: { type: DataTypes.TEXT },
|
||||
coach_bio: { type: DataTypes.TEXT },
|
||||
coach_credentials: { type: DataTypes.TEXT },
|
||||
coach_niche: { type: DataTypes.TEXT },
|
||||
brand_color: { type: DataTypes.STRING(16), allowNull: false, defaultValue: "teal" },
|
||||
default_booking_url: { type: DataTypes.TEXT },
|
||||
contact_email: { type: DataTypes.TEXT },
|
||||
custom_domain: { type: DataTypes.TEXT },
|
||||
social_links: { type: DataTypes.JSONB, allowNull: false, defaultValue: [] },
|
||||
packages: { type: DataTypes.JSONB, allowNull: false, defaultValue: [] },
|
||||
testimonials: { type: DataTypes.JSONB, allowNull: false, defaultValue: [] },
|
||||
published: { type: DataTypes.BOOLEAN, allowNull: false, defaultValue: false },
|
||||
legal_entity_name: { type: DataTypes.TEXT },
|
||||
legal_contact_email: { type: DataTypes.TEXT },
|
||||
legal_terms_effective_date: { type: DataTypes.DATEONLY },
|
||||
legal_review_confirmed: { type: DataTypes.BOOLEAN, allowNull: false, defaultValue: false },
|
||||
reminders_enabled: { type: DataTypes.BOOLEAN, allowNull: false, defaultValue: true },
|
||||
default_reminder_minutes: { type: DataTypes.INTEGER, allowNull: false, defaultValue: 60 },
|
||||
timezone: { type: DataTypes.TEXT, allowNull: false, defaultValue: "UTC" },
|
||||
updatedById: { type: DataTypes.UUID },
|
||||
},
|
||||
{ timestamps: true, freezeTableName: true },
|
||||
);
|
||||
};
|
||||
16
backend/src/db/reset.js
Normal file
16
backend/src/db/reset.js
Normal file
@ -0,0 +1,16 @@
|
||||
const db = require('./models');
|
||||
const {execSync} = require("child_process");
|
||||
|
||||
console.log('Resetting Database');
|
||||
|
||||
db.sequelize
|
||||
.sync({ force: true })
|
||||
.then(() => {
|
||||
execSync("sequelize db:seed:all");
|
||||
console.log('OK');
|
||||
process.exit();
|
||||
})
|
||||
.catch((error) => {
|
||||
console.error(error);
|
||||
process.exit(1);
|
||||
});
|
||||
70
backend/src/db/seeders/20200430130759-admin-user.js
Normal file
70
backend/src/db/seeders/20200430130759-admin-user.js
Normal file
@ -0,0 +1,70 @@
|
||||
'use strict';
|
||||
const bcrypt = require("bcrypt");
|
||||
const config = require("../../config");
|
||||
|
||||
const ids = [
|
||||
'193bf4b5-9f07-4bd5-9a43-e7e41f3e96af',
|
||||
'af5a87be-8f9c-4630-902a-37a60b7005ba',
|
||||
'5bc531ab-611f-41f3-9373-b7cc5d09c93d',
|
||||
]
|
||||
|
||||
module.exports = {
|
||||
up: async (queryInterface) => {
|
||||
if (!config.admin_pass || !config.user_pass) {
|
||||
throw new Error('DEMO_ADMIN_PASSWORD and DEMO_USER_PASSWORD are required for account seeding');
|
||||
}
|
||||
|
||||
let admin_hash = bcrypt.hashSync(config.admin_pass, config.bcrypt.saltRounds);
|
||||
let user_hash = bcrypt.hashSync(config.user_pass, config.bcrypt.saltRounds);
|
||||
|
||||
try {
|
||||
await queryInterface.bulkInsert('users', [
|
||||
{
|
||||
id: ids[0],
|
||||
firstName: 'Admin',
|
||||
email: config.admin_email,
|
||||
emailVerified: true,
|
||||
provider: config.providers.LOCAL,
|
||||
password: admin_hash,
|
||||
createdAt: new Date(),
|
||||
updatedAt: new Date()
|
||||
},
|
||||
{
|
||||
id: ids[1],
|
||||
firstName: 'John',
|
||||
email: 'coach@coaching-demo.invalid',
|
||||
emailVerified: true,
|
||||
provider: config.providers.LOCAL,
|
||||
password: user_hash,
|
||||
createdAt: new Date(),
|
||||
updatedAt: new Date()
|
||||
},
|
||||
{
|
||||
id: ids[2],
|
||||
firstName: 'Client',
|
||||
email: 'client@coaching-demo.invalid',
|
||||
emailVerified: true,
|
||||
provider: config.providers.LOCAL,
|
||||
password: user_hash,
|
||||
createdAt: new Date(),
|
||||
updatedAt: new Date()
|
||||
},
|
||||
]);
|
||||
} catch (error) {
|
||||
console.error('Error during bulkInsert:', error);
|
||||
throw error;
|
||||
}
|
||||
},
|
||||
down: async (queryInterface, Sequelize) => {
|
||||
try {
|
||||
await queryInterface.bulkDelete('users', {
|
||||
id: {
|
||||
[Sequelize.Op.in]: ids,
|
||||
},
|
||||
}, {});
|
||||
} catch (error) {
|
||||
console.error('Error during bulkDelete:', error);
|
||||
throw error;
|
||||
}
|
||||
}
|
||||
}
|
||||
140
backend/src/db/seeders/20200430130760-user-roles.js
Normal file
140
backend/src/db/seeders/20200430130760-user-roles.js
Normal file
@ -0,0 +1,140 @@
|
||||
const { v4: uuid } = require("uuid");
|
||||
|
||||
module.exports = {
|
||||
async up(queryInterface) {
|
||||
const createdAt = new Date();
|
||||
const updatedAt = new Date();
|
||||
const ids = new Map();
|
||||
|
||||
function getId(key) {
|
||||
if (!ids.has(key)) {
|
||||
ids.set(key, uuid());
|
||||
}
|
||||
|
||||
return ids.get(key);
|
||||
}
|
||||
|
||||
function permissionRows(entity) {
|
||||
const name = entity.toUpperCase();
|
||||
|
||||
return [
|
||||
{ id: getId(`CREATE_${name}`), name: `CREATE_${name}`, createdAt, updatedAt },
|
||||
{ id: getId(`READ_${name}`), name: `READ_${name}`, createdAt, updatedAt },
|
||||
{ id: getId(`UPDATE_${name}`), name: `UPDATE_${name}`, createdAt, updatedAt },
|
||||
{ id: getId(`DELETE_${name}`), name: `DELETE_${name}`, createdAt, updatedAt },
|
||||
];
|
||||
}
|
||||
|
||||
const roles = [
|
||||
{ key: "Administrator", name: "Administrator" },
|
||||
{ key: "WorkspaceOwner", name: "Workspace Owner" },
|
||||
{ key: "Coach", name: "Coach" },
|
||||
{ key: "Assistant", name: "Assistant" },
|
||||
{ key: "Client", name: "Client" },
|
||||
{ key: "Public", name: "Public" },
|
||||
];
|
||||
|
||||
const entities = [
|
||||
"users",
|
||||
"roles",
|
||||
"permissions",
|
||||
"clients",
|
||||
"sessions",
|
||||
"action_items",
|
||||
"resources",
|
||||
"packages",
|
||||
"testimonials",
|
||||
"prep_briefs",
|
||||
"intake_leads",
|
||||
"coaching",
|
||||
];
|
||||
|
||||
const permissions = entities.flatMap(permissionRows);
|
||||
permissions.push({ id: getId("READ_API_DOCS"), name: "READ_API_DOCS", createdAt, updatedAt });
|
||||
permissions.push({ id: getId("CREATE_SEARCH"), name: "CREATE_SEARCH", createdAt, updatedAt });
|
||||
|
||||
await queryInterface.bulkInsert(
|
||||
"roles",
|
||||
roles.map((role) => ({
|
||||
id: getId(role.key),
|
||||
name: role.name,
|
||||
createdAt,
|
||||
updatedAt,
|
||||
})),
|
||||
);
|
||||
|
||||
await queryInterface.bulkInsert("permissions", permissions);
|
||||
|
||||
const rolePermissions = [];
|
||||
|
||||
function grant(roleKey, permissionNames) {
|
||||
for (const permissionName of permissionNames) {
|
||||
rolePermissions.push({
|
||||
createdAt,
|
||||
updatedAt,
|
||||
roles_permissionsId: getId(roleKey),
|
||||
permissionId: getId(permissionName),
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
const allPermissionNames = permissions.map((permission) => permission.name);
|
||||
grant("Administrator", allPermissionNames);
|
||||
grant("WorkspaceOwner", allPermissionNames);
|
||||
|
||||
const coachPermissionNames = allPermissionNames.filter((name) => {
|
||||
return !name.includes("_ROLES") && !name.includes("_PERMISSIONS");
|
||||
});
|
||||
grant("Coach", coachPermissionNames);
|
||||
|
||||
grant("Assistant", [
|
||||
"READ_CLIENTS",
|
||||
"UPDATE_CLIENTS",
|
||||
"READ_SESSIONS",
|
||||
"CREATE_SESSIONS",
|
||||
"UPDATE_SESSIONS",
|
||||
"READ_ACTION_ITEMS",
|
||||
"UPDATE_ACTION_ITEMS",
|
||||
"READ_RESOURCES",
|
||||
"CREATE_RESOURCES",
|
||||
"UPDATE_RESOURCES",
|
||||
"READ_PACKAGES",
|
||||
"READ_PREP_BRIEFS",
|
||||
"READ_INTAKE_LEADS",
|
||||
"UPDATE_INTAKE_LEADS",
|
||||
"READ_COACHING",
|
||||
"CREATE_COACHING",
|
||||
"CREATE_SEARCH",
|
||||
]);
|
||||
|
||||
grant("Client", [
|
||||
"READ_CLIENTS",
|
||||
"READ_SESSIONS",
|
||||
"READ_ACTION_ITEMS",
|
||||
"UPDATE_ACTION_ITEMS",
|
||||
"READ_RESOURCES",
|
||||
"READ_PACKAGES",
|
||||
"READ_COACHING",
|
||||
]);
|
||||
|
||||
grant("Public", ["CREATE_INTAKE_LEADS"]);
|
||||
|
||||
await queryInterface.bulkInsert("rolesPermissionsPermissions", rolePermissions);
|
||||
|
||||
await queryInterface.sequelize.query(
|
||||
`UPDATE users SET "app_roleId" = '${getId("Administrator")}' WHERE email = 'admin@coaching-demo.invalid';`,
|
||||
);
|
||||
await queryInterface.sequelize.query(
|
||||
`UPDATE users SET "app_roleId" = '${getId("Coach")}' WHERE email = 'coach@coaching-demo.invalid';`,
|
||||
);
|
||||
await queryInterface.sequelize.query(
|
||||
`UPDATE users SET "app_roleId" = '${getId("Client")}' WHERE email = 'client@coaching-demo.invalid';`,
|
||||
);
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
await queryInterface.bulkDelete("rolesPermissionsPermissions", null, {});
|
||||
await queryInterface.bulkDelete("permissions", null, {});
|
||||
await queryInterface.bulkDelete("roles", null, {});
|
||||
},
|
||||
};
|
||||
244
backend/src/db/seeders/20231127130745-sample-data.js
Normal file
244
backend/src/db/seeders/20231127130745-sample-data.js
Normal file
@ -0,0 +1,244 @@
|
||||
const coachUserId = "af5a87be-8f9c-4630-902a-37a60b7005ba";
|
||||
const clientUserId = "5bc531ab-611f-41f3-9373-b7cc5d09c93d";
|
||||
|
||||
module.exports = {
|
||||
async up(queryInterface) {
|
||||
const now = new Date();
|
||||
const tomorrow = new Date(Date.now() + 24 * 60 * 60 * 1000);
|
||||
const nextWeek = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000);
|
||||
|
||||
const packageId = "4e529dc6-5c02-4903-9b47-0ab0adac1001";
|
||||
const clientAId = "98405fa4-fec0-4207-98d0-5d2c60ba4001";
|
||||
const clientBId = "98405fa4-fec0-4207-98d0-5d2c60ba4002";
|
||||
const sessionAId = "2263bfd3-3ee9-49f3-9af8-c78ce49f1001";
|
||||
const sessionBId = "2263bfd3-3ee9-49f3-9af8-c78ce49f1002";
|
||||
|
||||
await queryInterface.bulkInsert("packages", [
|
||||
{
|
||||
id: packageId,
|
||||
title: "Executive Momentum",
|
||||
description: "A focused coaching package for founders and operators who need sharper decisions, clearer priorities, and calmer execution.",
|
||||
price: "$2,400",
|
||||
duration: "8 weeks",
|
||||
cta: "Book discovery call",
|
||||
included_sessions: 6,
|
||||
is_active: true,
|
||||
createdById: coachUserId,
|
||||
updatedById: coachUserId,
|
||||
createdAt: now,
|
||||
updatedAt: now,
|
||||
},
|
||||
]);
|
||||
|
||||
await queryInterface.bulkInsert("clients", [
|
||||
{
|
||||
id: clientAId,
|
||||
name: "Demo Client One",
|
||||
email: "demo-client-one@example.invalid",
|
||||
status: "active",
|
||||
goals: "Delegate operational decisions, build a steadier weekly planning rhythm, and prepare for a senior leadership transition.",
|
||||
notes: "Prefers direct feedback and concise written follow-ups. Avoid overloading with frameworks.",
|
||||
company: "Fictional Company One",
|
||||
role_title: "Founder",
|
||||
tags: "founder,leadership,delegation",
|
||||
next_session_at: tomorrow,
|
||||
last_session_at: now,
|
||||
packageId,
|
||||
ownerId: coachUserId,
|
||||
portalUserId: clientUserId,
|
||||
ai_processing_consent_granted: true,
|
||||
ai_processing_consent_at: now,
|
||||
ai_processing_consent_policy_version: "2026-07-22-v1",
|
||||
recording_consent_granted: true,
|
||||
recording_consent_at: now,
|
||||
recording_consent_policy_version: "2026-07-22-v1",
|
||||
consent_updated_by_id: coachUserId,
|
||||
createdById: coachUserId,
|
||||
updatedById: coachUserId,
|
||||
createdAt: now,
|
||||
updatedAt: now,
|
||||
},
|
||||
{
|
||||
id: clientBId,
|
||||
name: "Demo Client Two",
|
||||
email: "demo-client-two@example.invalid",
|
||||
status: "active",
|
||||
goals: "Move from reactive management to repeatable team rituals and stronger feedback conversations.",
|
||||
notes: "Responds well to experiments with clear success criteria.",
|
||||
company: "Fictional Company Two",
|
||||
role_title: "Head of Product",
|
||||
tags: "product,management,feedback",
|
||||
next_session_at: nextWeek,
|
||||
last_session_at: now,
|
||||
packageId,
|
||||
ownerId: coachUserId,
|
||||
ai_processing_consent_granted: true,
|
||||
ai_processing_consent_at: now,
|
||||
ai_processing_consent_policy_version: "2026-07-22-v1",
|
||||
recording_consent_granted: true,
|
||||
recording_consent_at: now,
|
||||
recording_consent_policy_version: "2026-07-22-v1",
|
||||
consent_updated_by_id: coachUserId,
|
||||
createdById: coachUserId,
|
||||
updatedById: coachUserId,
|
||||
createdAt: now,
|
||||
updatedAt: now,
|
||||
},
|
||||
]);
|
||||
|
||||
await queryInterface.bulkInsert("sessions", [
|
||||
{
|
||||
id: sessionAId,
|
||||
clientId: clientAId,
|
||||
title: "Delegation and decision boundaries",
|
||||
session_at: now,
|
||||
status: "shared",
|
||||
transcript_notes: "[FICTIONAL DEMO TRANSCRIPT] Demo Client One noticed they still review every hiring decision. We mapped which decisions need founder review and which can be delegated.",
|
||||
ai_summary: "Demo Client One is ready to test a decision-rights matrix for hiring and customer escalations. The central theme was trusting senior leads without disappearing from critical calls.",
|
||||
key_topics: "delegation,decision rights,hiring,leadership transition",
|
||||
goals_discussed: "Reduce founder bottlenecks; create a weekly leadership decision review.",
|
||||
blockers: "Fear that delegated decisions will lower quality; unclear escalation rules.",
|
||||
commitments: "Draft decision-rights matrix before Friday and review with COO.",
|
||||
homework: "Write three examples of decisions the client will stop approving personally.",
|
||||
emotional_themes: "Cautious optimism, control, trust",
|
||||
important_quotes: "\"I know I am the bottleneck, but I do not know what good letting go looks like.\"",
|
||||
follow_up_email: "Thanks for today. Your next step is to draft the decision-rights matrix and identify three decisions you will stop approving personally.",
|
||||
next_session_prep: "Ask what happened when the client shared the matrix with the COO.",
|
||||
private_coach_notes: "Watch for over-correcting into vague oversight. She needs specific operating agreements.",
|
||||
shared_client_notes: "This week is about making delegation concrete through visible decision boundaries.",
|
||||
createdById: coachUserId,
|
||||
updatedById: coachUserId,
|
||||
createdAt: now,
|
||||
updatedAt: now,
|
||||
},
|
||||
{
|
||||
id: sessionBId,
|
||||
clientId: clientBId,
|
||||
title: "Feedback rituals",
|
||||
session_at: now,
|
||||
status: "shared",
|
||||
transcript_notes: "[FICTIONAL DEMO TRANSCRIPT] Demo Client Two wants weekly 1:1s to feel less like status updates. We designed a three-question feedback pattern.",
|
||||
ai_summary: "Demo Client Two will pilot a simple 1:1 structure that separates status, friction, and feedback. They want the team to surface blockers earlier.",
|
||||
key_topics: "1:1s,feedback,team rituals,management",
|
||||
goals_discussed: "Improve team feedback cadence; reduce late surprises.",
|
||||
blockers: "The client worries direct questions may feel too intense for newer team members.",
|
||||
commitments: "Pilot the 1:1 structure with two team members this week.",
|
||||
homework: "Ask each team member: What is stuck? What needs a decision? What feedback do you have for me?",
|
||||
emotional_themes: "Curiosity, hesitation, responsibility",
|
||||
important_quotes: "\"I want fewer surprises without becoming the person everyone fears updating.\"",
|
||||
follow_up_email: "Your experiment this week is two 1:1s with the new three-question structure. Keep notes on what changed.",
|
||||
next_session_prep: "Review what surfaced earlier and whether the questions need softening.",
|
||||
private_coach_notes: "He benefits from practical scripts more than theory.",
|
||||
shared_client_notes: "Use structure to make feedback safer and more routine.",
|
||||
createdById: coachUserId,
|
||||
updatedById: coachUserId,
|
||||
createdAt: now,
|
||||
updatedAt: now,
|
||||
},
|
||||
]);
|
||||
|
||||
await queryInterface.bulkInsert("action_items", [
|
||||
{
|
||||
id: "5c58d06d-15f2-4f6d-9a61-6d495c5d5001",
|
||||
clientId: clientAId,
|
||||
sessionId: sessionAId,
|
||||
title: "Draft decision-rights matrix",
|
||||
due_at: tomorrow,
|
||||
status: "in_progress",
|
||||
notes: "Start with hiring, customer escalations, and roadmap tradeoffs.",
|
||||
createdById: coachUserId,
|
||||
updatedById: coachUserId,
|
||||
createdAt: now,
|
||||
updatedAt: now,
|
||||
},
|
||||
{
|
||||
id: "5c58d06d-15f2-4f6d-9a61-6d495c5d5002",
|
||||
clientId: clientBId,
|
||||
sessionId: sessionBId,
|
||||
title: "Pilot new 1:1 structure",
|
||||
due_at: nextWeek,
|
||||
status: "not_started",
|
||||
notes: "Run with two team members and capture what surfaced earlier.",
|
||||
createdById: coachUserId,
|
||||
updatedById: coachUserId,
|
||||
createdAt: now,
|
||||
updatedAt: now,
|
||||
},
|
||||
]);
|
||||
|
||||
await queryInterface.bulkInsert("resources", [
|
||||
{
|
||||
id: "2d913f0b-3277-4244-9c8d-102f57cd7001",
|
||||
clientId: clientAId,
|
||||
packageId,
|
||||
title: "Decision Rights Worksheet",
|
||||
description: "A worksheet for separating owner-only decisions from team-owned decisions.",
|
||||
url: "/how-it-works/",
|
||||
resource_type: "worksheet",
|
||||
is_shared: true,
|
||||
createdById: coachUserId,
|
||||
updatedById: coachUserId,
|
||||
createdAt: now,
|
||||
updatedAt: now,
|
||||
},
|
||||
{
|
||||
id: "2d913f0b-3277-4244-9c8d-102f57cd7002",
|
||||
clientId: clientBId,
|
||||
packageId,
|
||||
title: "1:1 Feedback Script",
|
||||
description: "A lightweight script for making feedback and blockers part of every 1:1.",
|
||||
url: "/how-it-works/",
|
||||
resource_type: "worksheet",
|
||||
is_shared: true,
|
||||
createdById: coachUserId,
|
||||
updatedById: coachUserId,
|
||||
createdAt: now,
|
||||
updatedAt: now,
|
||||
},
|
||||
]);
|
||||
|
||||
await queryInterface.bulkInsert("testimonials", [
|
||||
{
|
||||
id: "f9476bc0-5c2a-406a-a329-dbcd1b4a9001",
|
||||
name: "Demo Testimonial",
|
||||
role_company: "Fictional sample — not a customer claim",
|
||||
quote: "The sessions turned scattered leadership pressure into a simple operating rhythm we could actually keep.",
|
||||
visible_on_site: true,
|
||||
createdById: coachUserId,
|
||||
updatedById: coachUserId,
|
||||
createdAt: now,
|
||||
updatedAt: now,
|
||||
},
|
||||
]);
|
||||
|
||||
await queryInterface.bulkInsert("prep_briefs", [
|
||||
{
|
||||
id: "f5e25961-6fd7-4038-870c-12db120d3001",
|
||||
clientId: clientAId,
|
||||
sessionId: sessionAId,
|
||||
next_session_at: tomorrow,
|
||||
previous_summary: "Demo Client One committed to drafting decision boundaries and testing them with their COO.",
|
||||
open_commitments: "Decision-rights matrix; three decisions no longer requiring founder approval.",
|
||||
suggested_questions: "What felt risky to delegate? Where did the team ask for more clarity? What decision still needs your direct voice?",
|
||||
sensitive_topics: "Founder control and trust in senior leadership.",
|
||||
client_reflection: "I shared the decision-rights draft with the COO. The hardest part was naming which decisions I no longer need to approve.",
|
||||
client_reflection_at: now,
|
||||
status: "ready",
|
||||
createdById: coachUserId,
|
||||
updatedById: coachUserId,
|
||||
createdAt: now,
|
||||
updatedAt: now,
|
||||
},
|
||||
]);
|
||||
},
|
||||
|
||||
async down(queryInterface) {
|
||||
await queryInterface.bulkDelete("prep_briefs", null, {});
|
||||
await queryInterface.bulkDelete("testimonials", null, {});
|
||||
await queryInterface.bulkDelete("resources", null, {});
|
||||
await queryInterface.bulkDelete("action_items", null, {});
|
||||
await queryInterface.bulkDelete("sessions", null, {});
|
||||
await queryInterface.bulkDelete("clients", null, {});
|
||||
await queryInterface.bulkDelete("packages", null, {});
|
||||
},
|
||||
};
|
||||
27
backend/src/db/utils.js
Normal file
27
backend/src/db/utils.js
Normal file
@ -0,0 +1,27 @@
|
||||
const validator = require('validator');
|
||||
const { v4: uuid } = require('uuid');
|
||||
const Sequelize = require('./models').Sequelize;
|
||||
|
||||
module.exports = class Utils {
|
||||
static uuid(value) {
|
||||
let id = value;
|
||||
|
||||
if (!validator.isUUID(id)) {
|
||||
id = uuid();
|
||||
}
|
||||
|
||||
return id;
|
||||
}
|
||||
|
||||
static ilike(model, column, value) {
|
||||
return Sequelize.where(
|
||||
Sequelize.fn(
|
||||
'lower',
|
||||
Sequelize.col(`${model}.${column}`),
|
||||
),
|
||||
{
|
||||
[Sequelize.Op.like]: `%${value}%`.toLowerCase(),
|
||||
},
|
||||
);
|
||||
}
|
||||
};
|
||||
33
backend/src/helpers.js
Normal file
33
backend/src/helpers.js
Normal file
@ -0,0 +1,33 @@
|
||||
const jwt = require('jsonwebtoken');
|
||||
const crypto = require('crypto');
|
||||
const config = require('./config');
|
||||
const { captureError } = require('./security/monitoring');
|
||||
|
||||
module.exports = class Helpers {
|
||||
static wrapAsync(fn) {
|
||||
return function (req, res, next) {
|
||||
fn(req, res, next).catch(next);
|
||||
};
|
||||
}
|
||||
|
||||
static commonErrorHandler(error, req, res, next) {
|
||||
if (res.headersSent) {
|
||||
return next(error);
|
||||
}
|
||||
|
||||
if ([400, 401, 403, 404, 409, 413, 415, 422, 429].includes(error.code)) {
|
||||
return res.status(error.code).send(error.message);
|
||||
}
|
||||
|
||||
console.error(error);
|
||||
captureError(error, req.requestId);
|
||||
return res.status(500).send({ error: 'internal_server_error', request_id: req.requestId });
|
||||
}
|
||||
|
||||
static jwtSign(data) {
|
||||
return jwt.sign(data, config.secret_key, {
|
||||
expiresIn: '30m',
|
||||
jwtid: crypto.randomUUID(),
|
||||
});
|
||||
}
|
||||
};
|
||||
197
backend/src/index.js
Normal file
197
backend/src/index.js
Normal file
@ -0,0 +1,197 @@
|
||||
|
||||
const express = require('express');
|
||||
const cors = require('cors');
|
||||
const app = express();
|
||||
const passport = require('passport');
|
||||
const path = require('path');
|
||||
const fs = require('fs');
|
||||
const bodyParser = require('body-parser');
|
||||
const helmet = require('helmet');
|
||||
const config = require('./config');
|
||||
|
||||
const authRoutes = require('./routes/auth');
|
||||
const fileRoutes = require('./routes/file');
|
||||
const searchRoutes = require('./routes/search');
|
||||
const pexelsRoutes = require('./routes/pexels');
|
||||
|
||||
const openaiRoutes = require('./routes/openai');
|
||||
const coachingRoutes = require('./routes/coaching');
|
||||
const coachingPublicRoutes = require('./routes/coachingPublic');
|
||||
const { requireStaff } = require('./security/coachingAuthorization');
|
||||
const { enforceReadOnlyDemo } = require('./security/readOnlyDemo');
|
||||
const { createRateLimit } = require('./security/rateLimit');
|
||||
const { protectCookieMutations } = require('./security/cookieAuth');
|
||||
const { startCoachingScheduler } = require('./jobs/coachingScheduler');
|
||||
const { initMonitoring } = require('./security/monitoring');
|
||||
const crypto = require('crypto');
|
||||
initMonitoring();
|
||||
|
||||
|
||||
const usersRoutes = require('./routes/users');
|
||||
|
||||
const rolesRoutes = require('./routes/roles');
|
||||
|
||||
const permissionsRoutes = require('./routes/permissions');
|
||||
|
||||
const getBaseUrl = (url) => {
|
||||
if (!url) return '';
|
||||
return url.endsWith('/api') ? url.slice(0, -4) : url;
|
||||
};
|
||||
|
||||
const options = {
|
||||
definition: {
|
||||
openapi: "3.0.0",
|
||||
info: {
|
||||
version: "1.0.0",
|
||||
title: "Coaching SaaS Workspace",
|
||||
description: "Coaching SaaS Workspace REST API for clients, session memory, resources, and coach operations.",
|
||||
},
|
||||
servers: [
|
||||
{
|
||||
url: getBaseUrl(process.env.NEXT_PUBLIC_BACK_API) || config.swaggerUrl,
|
||||
description: "Development server",
|
||||
}
|
||||
],
|
||||
components: {
|
||||
securitySchemes: {
|
||||
bearerAuth: {
|
||||
type: 'http',
|
||||
scheme: 'bearer',
|
||||
bearerFormat: 'JWT',
|
||||
}
|
||||
},
|
||||
responses: {
|
||||
UnauthorizedError: {
|
||||
description: "Access token is missing or invalid"
|
||||
}
|
||||
}
|
||||
},
|
||||
security: [{
|
||||
bearerAuth: []
|
||||
}]
|
||||
},
|
||||
apis: ["./src/routes/*.js"],
|
||||
};
|
||||
|
||||
if (process.env.NODE_ENV !== 'production') {
|
||||
const swaggerUI = require('swagger-ui-express');
|
||||
const swaggerJsDoc = require('swagger-jsdoc');
|
||||
const specs = swaggerJsDoc(options);
|
||||
app.use('/api-docs', function (req, res, next) {
|
||||
swaggerUI.host = getBaseUrl(process.env.NEXT_PUBLIC_BACK_API) || req.get('host');
|
||||
next()
|
||||
}, swaggerUI.serve, swaggerUI.setup(specs));
|
||||
}
|
||||
|
||||
app.disable('x-powered-by');
|
||||
app.use((req, res, next) => {
|
||||
req.requestId = req.get('x-request-id') || crypto.randomUUID();
|
||||
res.setHeader('X-Request-ID', req.requestId);
|
||||
next();
|
||||
});
|
||||
app.use(helmet({
|
||||
contentSecurityPolicy: {
|
||||
directives: {
|
||||
defaultSrc: ["'none'"],
|
||||
frameAncestors: ["'none'"],
|
||||
},
|
||||
},
|
||||
referrerPolicy: { policy: 'no-referrer' },
|
||||
}));
|
||||
app.use((req, res, next) => {
|
||||
const protocol = String(req.get('x-forwarded-proto') || req.protocol).split(',')[0].trim();
|
||||
const host = String(req.get('x-forwarded-host') || req.get('host')).split(',')[0].trim();
|
||||
const expectedOrigin = `${protocol}://${host}`;
|
||||
cors({
|
||||
credentials: true,
|
||||
origin(origin, callback) {
|
||||
if (!origin || origin === expectedOrigin) {
|
||||
callback(null, true);
|
||||
return;
|
||||
}
|
||||
|
||||
const error = new Error('cors_origin_denied');
|
||||
error.code = 403;
|
||||
callback(error);
|
||||
},
|
||||
})(req, res, next);
|
||||
});
|
||||
require('./auth/auth');
|
||||
|
||||
app.use(bodyParser.json());
|
||||
app.use(enforceReadOnlyDemo);
|
||||
app.use(protectCookieMutations);
|
||||
|
||||
const authRateLimit = createRateLimit({ windowMs: 15 * 60 * 1000, max: 30, error: 'auth_rate_limit' });
|
||||
const intakeRateLimit = createRateLimit({ windowMs: 60 * 60 * 1000, max: 10, error: 'intake_rate_limit' });
|
||||
const costlyRateLimit = createRateLimit({ windowMs: 60 * 60 * 1000, max: 20, error: 'processing_rate_limit' });
|
||||
const uploadRateLimit = createRateLimit({ windowMs: 60 * 60 * 1000, max: 30, error: 'upload_rate_limit' });
|
||||
|
||||
app.post('/api/auth/signin/local', authRateLimit);
|
||||
app.post('/api/auth/signin/demo', authRateLimit);
|
||||
app.post('/api/auth/send-password-reset-email', authRateLimit);
|
||||
app.put('/api/auth/password-reset', authRateLimit);
|
||||
app.use('/api/auth', authRoutes);
|
||||
app.post('/api/file/upload/:table/:field', uploadRateLimit);
|
||||
app.use('/api/file', fileRoutes);
|
||||
app.use('/api/pexels', passport.authenticate('jwt', {session: false}), requireStaff, pexelsRoutes);
|
||||
app.post('/api/coaching-public/intake', intakeRateLimit);
|
||||
app.use('/api/coaching-public', coachingPublicRoutes);
|
||||
app.enable('trust proxy');
|
||||
|
||||
|
||||
app.use('/api/users', passport.authenticate('jwt', {session: false}), usersRoutes);
|
||||
|
||||
app.use('/api/roles', passport.authenticate('jwt', {session: false}), rolesRoutes);
|
||||
|
||||
app.use('/api/permissions', passport.authenticate('jwt', {session: false}), permissionsRoutes);
|
||||
|
||||
app.post('/api/coaching/session-memory/transcribe', costlyRateLimit);
|
||||
app.post('/api/coaching/session-memory/generate', costlyRateLimit);
|
||||
app.use('/api/coaching', passport.authenticate('jwt', {session: false}), coachingRoutes);
|
||||
app.use(
|
||||
'/api/openai',
|
||||
passport.authenticate('jwt', { session: false }),
|
||||
requireStaff,
|
||||
openaiRoutes,
|
||||
);
|
||||
app.use(
|
||||
'/api/ai',
|
||||
passport.authenticate('jwt', { session: false }),
|
||||
requireStaff,
|
||||
openaiRoutes,
|
||||
);
|
||||
|
||||
app.use(
|
||||
'/api/search',
|
||||
passport.authenticate('jwt', { session: false }),
|
||||
searchRoutes);
|
||||
|
||||
app.use(require('./helpers').commonErrorHandler);
|
||||
|
||||
const publicDir = path.join(
|
||||
__dirname,
|
||||
'../public',
|
||||
);
|
||||
|
||||
if (fs.existsSync(publicDir)) {
|
||||
app.use('/', express.static(publicDir));
|
||||
|
||||
app.get('*', function(request, response) {
|
||||
response.sendFile(
|
||||
path.resolve(publicDir, 'index.html'),
|
||||
);
|
||||
});
|
||||
}
|
||||
|
||||
const PORT = Number(process.env.PORT || config.port || 3000);
|
||||
if (!Number.isInteger(PORT) || PORT < 1 || PORT > 65535) {
|
||||
throw new Error(`Invalid backend port: ${process.env.PORT}`);
|
||||
}
|
||||
|
||||
app.listen(PORT, () => {
|
||||
console.log(`Listening on port ${PORT}`);
|
||||
startCoachingScheduler();
|
||||
});
|
||||
|
||||
module.exports = app;
|
||||
33
backend/src/jobs/coachingScheduler.js
Normal file
33
backend/src/jobs/coachingScheduler.js
Normal file
@ -0,0 +1,33 @@
|
||||
const { runRetention } = require("./enforceCoachingRetention");
|
||||
const { runReminderSchedule } = require("./scheduleCoachingReminders");
|
||||
|
||||
const reminderIntervalMs = 60 * 1000;
|
||||
const retentionIntervalMs = 24 * 60 * 60 * 1000;
|
||||
|
||||
function runScheduledJob(name, job) {
|
||||
job().catch((error) => {
|
||||
console.error(`${name} failed`, error);
|
||||
});
|
||||
}
|
||||
|
||||
function startCoachingScheduler() {
|
||||
if (process.env.DEMO_MODE === "true") {
|
||||
console.log("Coaching scheduler disabled in read-only demo mode");
|
||||
return;
|
||||
}
|
||||
|
||||
runScheduledJob("Coaching reminder scheduling", runReminderSchedule);
|
||||
runScheduledJob("Coaching retention", runRetention);
|
||||
|
||||
const reminderTimer = setInterval(() => {
|
||||
runScheduledJob("Coaching reminder scheduling", runReminderSchedule);
|
||||
}, reminderIntervalMs);
|
||||
reminderTimer.unref();
|
||||
|
||||
const retentionTimer = setInterval(() => {
|
||||
runScheduledJob("Coaching retention", runRetention);
|
||||
}, retentionIntervalMs);
|
||||
retentionTimer.unref();
|
||||
}
|
||||
|
||||
module.exports = { startCoachingScheduler };
|
||||
112
backend/src/jobs/enforceCoachingRetention.js
Normal file
112
backend/src/jobs/enforceCoachingRetention.js
Normal file
@ -0,0 +1,112 @@
|
||||
const fs = require("fs");
|
||||
const path = require("path");
|
||||
const db = require("../db/models");
|
||||
const { retentionPolicy, cutoffDate } = require("../security/dataLifecycle");
|
||||
|
||||
const audioDir = process.env.COACHING_AUDIO_DIR || path.join(__dirname, "../../private/coaching-sessions");
|
||||
|
||||
function audioFilePath(audioUrl) {
|
||||
if (!String(audioUrl || "").startsWith("/private-coaching-audio/")) {
|
||||
return null;
|
||||
}
|
||||
|
||||
return path.join(audioDir, path.basename(audioUrl));
|
||||
}
|
||||
|
||||
async function removeAudio(session) {
|
||||
const filePath = audioFilePath(session.audio_url);
|
||||
|
||||
if (filePath) {
|
||||
await fs.promises.rm(filePath, { force: true });
|
||||
}
|
||||
|
||||
await session.update({
|
||||
audio_url: null,
|
||||
audio_filename: null,
|
||||
audio_mime_type: null,
|
||||
audio_size: null,
|
||||
});
|
||||
}
|
||||
|
||||
async function runRetention() {
|
||||
const policy = retentionPolicy();
|
||||
const audioSessions = await db.sessions.findAll({
|
||||
where: {
|
||||
audio_url: { [db.Sequelize.Op.ne]: null },
|
||||
session_at: { [db.Sequelize.Op.lt]: cutoffDate(policy.raw_audio_days) },
|
||||
},
|
||||
});
|
||||
|
||||
for (const session of audioSessions) {
|
||||
await removeAudio(session);
|
||||
}
|
||||
|
||||
const [transcriptsCleared] = await db.sessions.update(
|
||||
{ transcript_notes: null },
|
||||
{
|
||||
where: {
|
||||
transcript_notes: { [db.Sequelize.Op.ne]: null },
|
||||
session_at: { [db.Sequelize.Op.lt]: cutoffDate(policy.transcript_days) },
|
||||
},
|
||||
},
|
||||
);
|
||||
|
||||
const expiredSessions = await db.sessions.findAll({
|
||||
where: {
|
||||
session_at: { [db.Sequelize.Op.lt]: cutoffDate(policy.session_memory_days) },
|
||||
},
|
||||
});
|
||||
|
||||
for (const session of expiredSessions) {
|
||||
const transaction = await db.sequelize.transaction();
|
||||
try {
|
||||
await removeAudio(session);
|
||||
await db.action_items.destroy({ where: { sessionId: session.id }, force: true, transaction });
|
||||
await db.prep_briefs.destroy({ where: { sessionId: session.id }, force: true, transaction });
|
||||
await session.destroy({ force: true, transaction });
|
||||
await transaction.commit();
|
||||
} catch (error) {
|
||||
await transaction.rollback();
|
||||
throw error;
|
||||
}
|
||||
}
|
||||
|
||||
const backupDir = process.env.COACHING_BACKUP_DIR || path.join(__dirname, "../../private/backups");
|
||||
let backupsRemoved = 0;
|
||||
if (fs.existsSync(backupDir)) {
|
||||
const backupCutoff = cutoffDate(policy.backup_expiry_days).getTime();
|
||||
const backupEntries = await fs.promises.readdir(backupDir, { withFileTypes: true });
|
||||
for (const entry of backupEntries) {
|
||||
if (!entry.isFile()) {
|
||||
continue;
|
||||
}
|
||||
|
||||
const backupPath = path.join(backupDir, entry.name);
|
||||
const stat = await fs.promises.stat(backupPath);
|
||||
if (stat.mtimeMs < backupCutoff) {
|
||||
await fs.promises.rm(backupPath);
|
||||
backupsRemoved += 1;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
console.log(JSON.stringify({
|
||||
event: "coaching_retention_complete",
|
||||
audio_removed: audioSessions.length,
|
||||
transcripts_cleared: transcriptsCleared,
|
||||
session_memories_removed: expiredSessions.length,
|
||||
backups_removed: backupsRemoved,
|
||||
}));
|
||||
}
|
||||
|
||||
if (require.main === module) {
|
||||
runRetention()
|
||||
.then(() => db.sequelize.close())
|
||||
.catch(async (error) => {
|
||||
console.error("Coaching retention failed", error);
|
||||
await db.sequelize.close();
|
||||
process.exitCode = 1;
|
||||
});
|
||||
}
|
||||
|
||||
module.exports = { runRetention };
|
||||
70
backend/src/jobs/scheduleCoachingReminders.js
Normal file
70
backend/src/jobs/scheduleCoachingReminders.js
Normal file
@ -0,0 +1,70 @@
|
||||
const db = require("../db/models");
|
||||
const { reminderMinutes, scheduledReminderAt } = require("../security/reminders");
|
||||
|
||||
async function runReminderSchedule() {
|
||||
const settings = await db.workspace_settings.findByPk("default");
|
||||
|
||||
if (settings && !settings.reminders_enabled) {
|
||||
console.log(JSON.stringify({ event: "coaching_reminders_disabled" }));
|
||||
return;
|
||||
}
|
||||
|
||||
const now = new Date();
|
||||
const readyReminders = await db.coaching_reminder_deliveries.findAll({
|
||||
where: { status: "ready" },
|
||||
include: [{ model: db.clients, as: "client", required: true }],
|
||||
});
|
||||
|
||||
let stale = 0;
|
||||
for (const reminder of readyReminders) {
|
||||
const currentSession = reminder.client.next_session_at;
|
||||
const sessionChanged = !currentSession || new Date(currentSession).getTime() !== new Date(reminder.session_at).getTime();
|
||||
if (!reminder.client.reminders_enabled || sessionChanged || new Date(reminder.session_at) <= now) {
|
||||
await reminder.destroy();
|
||||
stale += 1;
|
||||
}
|
||||
}
|
||||
|
||||
const nextDay = new Date(now.getTime() + 25 * 60 * 60 * 1000);
|
||||
const clients = await db.clients.findAll({
|
||||
where: {
|
||||
reminders_enabled: true,
|
||||
next_session_at: { [db.Sequelize.Op.gt]: now, [db.Sequelize.Op.lt]: nextDay },
|
||||
},
|
||||
});
|
||||
let ready = 0;
|
||||
|
||||
for (const client of clients) {
|
||||
const minutes = reminderMinutes(client.reminder_minutes, settings?.default_reminder_minutes || 60);
|
||||
const scheduledFor = scheduledReminderAt(client.next_session_at, minutes);
|
||||
|
||||
if (scheduledFor > now) {
|
||||
continue;
|
||||
}
|
||||
|
||||
const [, created] = await db.coaching_reminder_deliveries.findOrCreate({
|
||||
where: {
|
||||
clientId: client.id,
|
||||
session_at: client.next_session_at,
|
||||
scheduled_for: scheduledFor,
|
||||
},
|
||||
defaults: { status: "ready" },
|
||||
});
|
||||
|
||||
if (created) ready += 1;
|
||||
}
|
||||
|
||||
console.log(JSON.stringify({ event: "coaching_reminders_scheduled", ready, stale_removed: stale }));
|
||||
}
|
||||
|
||||
if (require.main === module) {
|
||||
runReminderSchedule()
|
||||
.then(() => db.sequelize.close())
|
||||
.catch(async (error) => {
|
||||
console.error("Coaching reminder scheduling failed", error);
|
||||
await db.sequelize.close();
|
||||
process.exitCode = 1;
|
||||
});
|
||||
}
|
||||
|
||||
module.exports = { runReminderSchedule };
|
||||
149
backend/src/middlewares/check-permissions.js
Normal file
149
backend/src/middlewares/check-permissions.js
Normal file
@ -0,0 +1,149 @@
|
||||
|
||||
const ValidationError = require('../services/notifications/errors/validation');
|
||||
const RolesDBApi = require('../db/api/roles');
|
||||
|
||||
// Cache for the 'Public' role object
|
||||
let publicRoleCache = null;
|
||||
|
||||
// Function to asynchronously fetch and cache the 'Public' role
|
||||
async function fetchAndCachePublicRole() {
|
||||
try {
|
||||
// Use RolesDBApi to find the role by name 'Public'
|
||||
publicRoleCache = await RolesDBApi.findBy({ name: 'Public' });
|
||||
|
||||
if (!publicRoleCache) {
|
||||
console.error("WARNING: Role 'Public' not found in database during middleware startup. Check your migrations.");
|
||||
// The system might not function correctly without this role. May need to throw an error or use a fallback stub.
|
||||
} else {
|
||||
console.log("'Public' role successfully loaded and cached.");
|
||||
}
|
||||
} catch (error) {
|
||||
console.error("Error fetching 'Public' role during middleware startup:", error);
|
||||
// Handle the error during startup fetch
|
||||
throw error; // Important to know if the app can proceed without the Public role
|
||||
}
|
||||
}
|
||||
|
||||
// Trigger the role fetching when the check-permissions.js module is imported/loaded
|
||||
// This should happen during application startup when routes are being configured.
|
||||
fetchAndCachePublicRole().catch(error => {
|
||||
// Handle the case where the fetchAndCachePublicRole promise is rejected
|
||||
console.error("Critical error during permissions middleware initialization:", error);
|
||||
// Decide here if the process should exit if the Public role is essential.
|
||||
// process.exit(1);
|
||||
});
|
||||
|
||||
/**
|
||||
* Middleware creator to check if the current user (or Public role) has a specific permission.
|
||||
* @param {string} permission - The name of the required permission.
|
||||
* @return {import("express").RequestHandler} Express middleware function.
|
||||
*/
|
||||
function checkPermissions(permission) {
|
||||
return async (req, res, next) => {
|
||||
const { currentUser } = req;
|
||||
|
||||
// 1. Check self-access bypass (only if the user is authenticated)
|
||||
if (currentUser && (currentUser.id === req.params.id || currentUser.id === req.body.id)) {
|
||||
return next(); // User has access to their own resource
|
||||
}
|
||||
|
||||
// 2. Check Custom Permissions (only if the user is authenticated)
|
||||
if (currentUser) {
|
||||
// Ensure custom_permissions is an array before using find
|
||||
const customPermissions = Array.isArray(currentUser.custom_permissions)
|
||||
? currentUser.custom_permissions
|
||||
: [];
|
||||
const userPermission = customPermissions.find(
|
||||
(cp) => cp.name === permission,
|
||||
);
|
||||
if (userPermission) {
|
||||
return next(); // User has a custom permission
|
||||
}
|
||||
}
|
||||
|
||||
// 3. Determine the "effective" role for permission check
|
||||
let effectiveRole = null;
|
||||
try {
|
||||
if (currentUser && currentUser.app_role) {
|
||||
// User is authenticated and has an assigned role
|
||||
effectiveRole = currentUser.app_role;
|
||||
} else {
|
||||
// User is NOT authenticated OR is authenticated but has no role
|
||||
// Use the cached 'Public' role
|
||||
if (!publicRoleCache) {
|
||||
// If the cache is unexpectedly empty (e.g., startup error caught),
|
||||
// we can try fetching the role again synchronously (less ideal) or just deny access.
|
||||
console.error("Public role cache is empty. Attempting synchronous fetch...");
|
||||
// Less efficient fallback option:
|
||||
effectiveRole = await RolesDBApi.findBy({ name: 'Public' }); // Could be slow
|
||||
if (!effectiveRole) {
|
||||
// If even the synchronous attempt failed
|
||||
return next(new Error("Internal Server Error: Public role missing and cannot be fetched."));
|
||||
}
|
||||
} else {
|
||||
effectiveRole = publicRoleCache; // Use the cached object
|
||||
}
|
||||
}
|
||||
|
||||
// Check if we got a valid role object
|
||||
if (!effectiveRole) {
|
||||
return next(new Error("Internal Server Error: Could not determine effective role."));
|
||||
}
|
||||
|
||||
// 4. Check Permissions on the "effective" role
|
||||
// Assume the effectiveRole object (from app_role or RolesDBApi) has a getPermissions() method
|
||||
// or a 'permissions' property (if permissions are eagerly loaded).
|
||||
let rolePermissions = [];
|
||||
if (typeof effectiveRole.getPermissions === 'function') {
|
||||
rolePermissions = await effectiveRole.getPermissions(); // Get permissions asynchronously if the method exists
|
||||
} else if (Array.isArray(effectiveRole.permissions)) {
|
||||
rolePermissions = effectiveRole.permissions; // Or take from property if permissions are pre-loaded
|
||||
} else {
|
||||
console.error("Role object lacks getPermissions() method or permissions property:", effectiveRole);
|
||||
return next(new Error("Internal Server Error: Invalid role object format."));
|
||||
}
|
||||
|
||||
|
||||
if (rolePermissions.find((p) => p.name === permission)) {
|
||||
next(); // The "effective" role has the required permission
|
||||
} else {
|
||||
// The "effective" role does not have the required permission
|
||||
const roleName = effectiveRole.name || 'unknown role';
|
||||
next(new ValidationError('auth.forbidden', `Role '${roleName}' denied access to '${permission}'.`));
|
||||
}
|
||||
|
||||
} catch (e) {
|
||||
// Handle errors during role or permission fetching
|
||||
console.error("Error during permission check:", e);
|
||||
next(e); // Pass the error to the next middleware
|
||||
}
|
||||
};
|
||||
}
|
||||
|
||||
const METHOD_MAP = {
|
||||
POST: 'CREATE',
|
||||
GET: 'READ',
|
||||
PUT: 'UPDATE',
|
||||
PATCH: 'UPDATE',
|
||||
DELETE: 'DELETE',
|
||||
};
|
||||
|
||||
/**
|
||||
* Middleware creator to check standard CRUD permissions based on HTTP method and entity name.
|
||||
* @param {string} name - The name of the entity.
|
||||
* @return {import("express").RequestHandler} Express middleware function.
|
||||
*/
|
||||
function checkCrudPermissions(name) {
|
||||
return (req, res, next) => {
|
||||
// Dynamically determine the permission name (e.g., 'READ_USERS')
|
||||
const permissionName = `${METHOD_MAP[req.method]}_${name.toUpperCase()}`;
|
||||
// Call the checkPermissions middleware with the determined permission
|
||||
checkPermissions(permissionName)(req, res, next);
|
||||
};
|
||||
}
|
||||
|
||||
module.exports = {
|
||||
checkPermissions,
|
||||
checkCrudPermissions,
|
||||
};
|
||||
|
||||
11
backend/src/middlewares/upload.js
Normal file
11
backend/src/middlewares/upload.js
Normal file
@ -0,0 +1,11 @@
|
||||
const util = require('util');
|
||||
const Multer = require('multer');
|
||||
const maxSize = 10 * 1024 * 1024;
|
||||
|
||||
const processFile = Multer({
|
||||
storage: Multer.memoryStorage(),
|
||||
limits: { fileSize: maxSize },
|
||||
}).single("file");
|
||||
|
||||
const processFileMiddleware = util.promisify(processFile);
|
||||
module.exports = processFileMiddleware;
|
||||
272
backend/src/routes/auth.js
Normal file
272
backend/src/routes/auth.js
Normal file
@ -0,0 +1,272 @@
|
||||
const express = require('express');
|
||||
const passport = require('passport');
|
||||
|
||||
const config = require('../config');
|
||||
const AuthService = require('../services/auth');
|
||||
const ForbiddenError = require('../services/notifications/errors/forbidden');
|
||||
const EmailSender = require('../services/email');
|
||||
const wrapAsync = require('../helpers').wrapAsync;
|
||||
const { setSessionCookie, clearSessionCookie } = require('../security/cookieAuth');
|
||||
const { revokeToken } = require('../security/tokenRevocation');
|
||||
const jwt = require('jsonwebtoken');
|
||||
const { publicAppUrl } = require('../security/publicAppUrl');
|
||||
const UsersDBApi = require('../db/api/users');
|
||||
const helpers = require('../helpers');
|
||||
const db = require('../db/models');
|
||||
|
||||
const router = express.Router();
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* components:
|
||||
* schemas:
|
||||
* Auth:
|
||||
* type: object
|
||||
* required:
|
||||
* - email
|
||||
* - password
|
||||
* properties:
|
||||
* email:
|
||||
* type: string
|
||||
* example: coach@example.invalid
|
||||
* description: User email
|
||||
* password:
|
||||
* type: string
|
||||
* default: password
|
||||
* description: User password
|
||||
*/
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* tags:
|
||||
* name: Auth
|
||||
* description: Authorization operations
|
||||
*/
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/auth/signin/local:
|
||||
* post:
|
||||
* tags: [Auth]
|
||||
* summary: Logs user into the system
|
||||
* description: Logs user into the system
|
||||
* requestBody:
|
||||
* description: Set valid user email and password
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Auth"
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Successful login
|
||||
* 400:
|
||||
* description: Invalid username/password supplied
|
||||
* x-codegen-request-body-name: body
|
||||
*/
|
||||
|
||||
router.post('/signin/local', wrapAsync(async (req, res) => {
|
||||
const payload = await AuthService.signin(req.body.email, req.body.password, req,);
|
||||
setSessionCookie(req, res, payload);
|
||||
res.status(200).send({ authenticated: true });
|
||||
}));
|
||||
|
||||
router.post('/signin/demo', wrapAsync(async (req, res) => {
|
||||
if (process.env.DEMO_MODE !== 'true') {
|
||||
res.status(404).send({ error: 'not_found' });
|
||||
return;
|
||||
}
|
||||
|
||||
const demoEmails = {
|
||||
admin: 'admin@coaching-demo.invalid',
|
||||
coach: 'coach@coaching-demo.invalid',
|
||||
client: 'client@coaching-demo.invalid',
|
||||
};
|
||||
const email = demoEmails[req.body.role];
|
||||
|
||||
if (!email) {
|
||||
res.status(400).send({ error: 'invalid_demo_role' });
|
||||
return;
|
||||
}
|
||||
|
||||
const user = await UsersDBApi.findBy({ email });
|
||||
if (!user || user.disabled) {
|
||||
throw new Error(`Synthetic demo account is unavailable for role ${req.body.role}`);
|
||||
}
|
||||
|
||||
const token = helpers.jwtSign({ user: { id: user.id, email: user.email } });
|
||||
setSessionCookie(req, res, token);
|
||||
res.status(200).send({ authenticated: true });
|
||||
}));
|
||||
|
||||
router.post('/logout', passport.authenticate('jwt', {session: false}), wrapAsync(async (req, res) => {
|
||||
const cookieHeader = req.headers.cookie || '';
|
||||
const sessionCookie = cookieHeader
|
||||
.split(';')
|
||||
.map((part) => part.trim())
|
||||
.find((part) => part.startsWith('coaching_session='));
|
||||
|
||||
if (sessionCookie) {
|
||||
const token = decodeURIComponent(sessionCookie.slice('coaching_session='.length));
|
||||
const payload = jwt.verify(token, config.secret_key);
|
||||
revokeToken(payload);
|
||||
}
|
||||
|
||||
await db.users.update(
|
||||
{ sessionInvalidatedAt: new Date() },
|
||||
{ where: { id: req.currentUser.id } },
|
||||
);
|
||||
|
||||
clearSessionCookie(req, res);
|
||||
res.status(200).send({ authenticated: false });
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/auth/me:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Auth]
|
||||
* summary: Get current authorized user info
|
||||
* description: Get current authorized user info
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Successful retrieval of current authorized user data
|
||||
* 400:
|
||||
* description: Invalid username/password supplied
|
||||
* x-codegen-request-body-name: body
|
||||
*/
|
||||
|
||||
router.get('/me', passport.authenticate('jwt', {session: false}), (req, res) => {
|
||||
if (!req.currentUser || !req.currentUser.id) {
|
||||
throw new ForbiddenError();
|
||||
}
|
||||
|
||||
const payload = JSON.parse(JSON.stringify(req.currentUser));
|
||||
delete payload.password;
|
||||
delete payload.emailVerificationToken;
|
||||
delete payload.passwordResetToken;
|
||||
delete payload.emailVerificationTokenExpiresAt;
|
||||
delete payload.passwordResetTokenExpiresAt;
|
||||
res.status(200).send(payload);
|
||||
});
|
||||
|
||||
router.put('/password-reset', wrapAsync(async (req, res) => {
|
||||
const payload = await AuthService.passwordReset(req.body.token, req.body.password, req,);
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
router.put('/password-update', passport.authenticate('jwt', {session: false}), wrapAsync(async (req, res) => {
|
||||
const payload = await AuthService.passwordUpdate(req.body.currentPassword, req.body.newPassword, req);
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
router.post('/send-email-address-verification-email', passport.authenticate('jwt', {session: false}), wrapAsync(async (req, res) => {
|
||||
if (!req.currentUser) {
|
||||
throw new ForbiddenError();
|
||||
}
|
||||
|
||||
await AuthService.sendEmailAddressVerificationEmail(req.currentUser.email);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
router.post('/send-password-reset-email', wrapAsync(async (req, res) => {
|
||||
await AuthService.sendPasswordResetEmail(req.body.email, 'register', publicAppUrl());
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/auth/signup:
|
||||
* post:
|
||||
* tags: [Auth]
|
||||
* summary: Register new user into the system
|
||||
* description: Register new user into the system
|
||||
* requestBody:
|
||||
* description: Set valid user email and password
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Auth"
|
||||
* responses:
|
||||
* 200:
|
||||
* description: New user successfully signed up
|
||||
* 400:
|
||||
* description: Invalid username/password supplied
|
||||
* 500:
|
||||
* description: Some server error
|
||||
* x-codegen-request-body-name: body
|
||||
*/
|
||||
|
||||
router.post('/signup', wrapAsync(async (req, res) => {
|
||||
if (process.env.ALLOW_PUBLIC_SIGNUP !== 'true') {
|
||||
res.status(403).send({ error: 'invitation_required' });
|
||||
return;
|
||||
}
|
||||
|
||||
const payload = await AuthService.signup(
|
||||
req.body.email,
|
||||
req.body.password,
|
||||
|
||||
req,
|
||||
publicAppUrl(),
|
||||
)
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
router.put('/profile', passport.authenticate('jwt', {session: false}), wrapAsync(async (req, res) => {
|
||||
if (!req.currentUser || !req.currentUser.id) {
|
||||
throw new ForbiddenError();
|
||||
}
|
||||
|
||||
await AuthService.updateProfile(req.body.profile, req.currentUser);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
router.put('/verify-email', wrapAsync(async (req, res) => {
|
||||
const payload = await AuthService.verifyEmail(req.body.token, req, req.headers.referer)
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
router.get('/email-configured', (req, res) => {
|
||||
const payload = EmailSender.isConfigured;
|
||||
res.status(200).send(payload);
|
||||
});
|
||||
|
||||
router.get('/signin/google', (req, res, next) => {
|
||||
passport.authenticate("google", {scope: ["profile", "email"], state: req.query.app})(req, res, next);
|
||||
});
|
||||
|
||||
router.get('/signin/google/callback', passport.authenticate("google", {failureRedirect: "/login", session: false}),
|
||||
|
||||
function (req, res) {
|
||||
socialRedirect(res, req.query.state, req.user.token, config);
|
||||
}
|
||||
);
|
||||
|
||||
router.get('/signin/microsoft', (req, res, next) => {
|
||||
passport.authenticate("microsoft", {
|
||||
scope: ["https://graph.microsoft.com/user.read openid"],
|
||||
state: req.query.app
|
||||
})(req, res, next);
|
||||
});
|
||||
|
||||
router.get('/signin/microsoft/callback', passport.authenticate("microsoft", {
|
||||
failureRedirect: "/login",
|
||||
session: false
|
||||
}),
|
||||
function (req, res) {
|
||||
socialRedirect(res, req.query.state, req.user.token, config);
|
||||
}
|
||||
);
|
||||
|
||||
router.use('/', require('../helpers').commonErrorHandler);
|
||||
|
||||
function socialRedirect(res, state, token, config) {
|
||||
res.redirect(config.uiUrl + "/login?token=" + token);
|
||||
}
|
||||
|
||||
module.exports = router;
|
||||
1972
backend/src/routes/coaching.js
Normal file
1972
backend/src/routes/coaching.js
Normal file
File diff suppressed because it is too large
Load Diff
56
backend/src/routes/coachingPublic.js
Normal file
56
backend/src/routes/coachingPublic.js
Normal file
@ -0,0 +1,56 @@
|
||||
const express = require("express");
|
||||
const db = require("../db/models");
|
||||
const wrapAsync = require("../helpers").wrapAsync;
|
||||
const { publicWorkspaceSettings } = require("../security/workspaceSettings");
|
||||
|
||||
const router = express.Router();
|
||||
const CONSENT_POLICY_VERSION = "2026-07-22-v1";
|
||||
|
||||
router.get(
|
||||
"/site",
|
||||
wrapAsync(async (req, res) => {
|
||||
const settings = await db.workspace_settings.findByPk("default");
|
||||
res.status(200).send(publicWorkspaceSettings(settings || {}));
|
||||
}),
|
||||
);
|
||||
|
||||
router.post(
|
||||
"/intake",
|
||||
wrapAsync(async (req, res) => {
|
||||
const data = req.body || {};
|
||||
const name = String(data.name || "").trim();
|
||||
const email = String(data.email || "").trim();
|
||||
|
||||
if (!name) {
|
||||
res.status(400).send({ error: "name_required" });
|
||||
return;
|
||||
}
|
||||
|
||||
if (!email) {
|
||||
res.status(400).send({ error: "email_required" });
|
||||
return;
|
||||
}
|
||||
|
||||
const consentAiNotes = Boolean(data.consent_ai_notes);
|
||||
const lead = await db.intake_leads.create({
|
||||
name,
|
||||
email,
|
||||
company: data.company,
|
||||
role_title: data.role_title,
|
||||
package_name: data.package_name,
|
||||
preferred_time: data.preferred_time,
|
||||
goal: data.goal,
|
||||
challenge: data.challenge,
|
||||
desired_outcome: data.desired_outcome,
|
||||
source: data.source || "website",
|
||||
consent_ai_notes: consentAiNotes,
|
||||
consent_ai_notes_at: consentAiNotes ? new Date() : null,
|
||||
consent_policy_version: consentAiNotes ? CONSENT_POLICY_VERSION : null,
|
||||
status: "new",
|
||||
});
|
||||
|
||||
res.status(200).send(lead);
|
||||
}),
|
||||
);
|
||||
|
||||
module.exports = router;
|
||||
0
backend/src/routes/contactForm.js
Normal file
0
backend/src/routes/contactForm.js
Normal file
22
backend/src/routes/file.js
Normal file
22
backend/src/routes/file.js
Normal file
@ -0,0 +1,22 @@
|
||||
const express = require('express');
|
||||
const passport = require('passport');
|
||||
const services = require('../services/file');
|
||||
const { requireStaff } = require('../security/coachingAuthorization');
|
||||
const router = express.Router();
|
||||
const authenticate = passport.authenticate('jwt', {session: false});
|
||||
|
||||
router.get('/download', authenticate, requireStaff, (req, res) => {
|
||||
services.downloadLocal(req, res);
|
||||
});
|
||||
|
||||
router.post('/upload/:table/:field', authenticate, requireStaff, (req, res, next) => {
|
||||
const fileName = `${req.params.table}/${req.params.field}`;
|
||||
|
||||
return services.uploadLocal(fileName, {
|
||||
entity: null,
|
||||
maxFileSize: 10 * 1024 * 1024,
|
||||
folderIncludesAuthenticationUid: false,
|
||||
})(req, res, next);
|
||||
});
|
||||
|
||||
module.exports = router;
|
||||
328
backend/src/routes/openai.js
Normal file
328
backend/src/routes/openai.js
Normal file
@ -0,0 +1,328 @@
|
||||
const express = require('express');
|
||||
const db = require('../db/models');
|
||||
const wrapAsync = require('../helpers').wrapAsync;
|
||||
const router = express.Router();
|
||||
const sjs = require('sequelize-json-schema');
|
||||
const { getWidget, askGpt } = require('../services/openai');
|
||||
const { LocalAIApi } = require('../ai/LocalAIApi');
|
||||
|
||||
const loadRolesModules = () => {
|
||||
try {
|
||||
return {
|
||||
RolesService: require('../services/roles'),
|
||||
RolesDBApi: require('../db/api/roles'),
|
||||
};
|
||||
} catch (error) {
|
||||
console.error('Roles modules are missing. Advanced roles are required for this endpoint.', error);
|
||||
const err = new Error('Roles modules are missing. Advanced roles are required for this endpoint.');
|
||||
err.originalError = error;
|
||||
throw err;
|
||||
}
|
||||
};
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/roles/roles-info/{infoId}:
|
||||
* delete:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Roles]
|
||||
* summary: Remove role information by ID
|
||||
* description: Remove specific role information by ID
|
||||
* parameters:
|
||||
* - in: path
|
||||
* name: infoId
|
||||
* description: ID of role information to remove
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* - in: query
|
||||
* name: userId
|
||||
* description: ID of the user
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* - in: query
|
||||
* name: key
|
||||
* description: Key of the role information to remove
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Role information successfully removed
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: object
|
||||
* properties:
|
||||
* user:
|
||||
* type: string
|
||||
* description: The user information
|
||||
* 400:
|
||||
* description: Invalid ID or key supplied
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Role not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
|
||||
router.delete(
|
||||
'/roles-info/:infoId',
|
||||
wrapAsync(async (req, res) => {
|
||||
const { RolesService } = loadRolesModules();
|
||||
const role = await RolesService.removeRoleInfoById(
|
||||
req.query.infoId,
|
||||
req.query.roleId,
|
||||
req.query.key,
|
||||
req.currentUser,
|
||||
);
|
||||
|
||||
res.status(200).send(role);
|
||||
}),
|
||||
);
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/roles/role-info/{roleId}:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Roles]
|
||||
* summary: Get role information by key
|
||||
* description: Get specific role information by key
|
||||
* parameters:
|
||||
* - in: path
|
||||
* name: roleId
|
||||
* description: ID of role to get information for
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* - in: query
|
||||
* name: key
|
||||
* description: Key of the role information to retrieve
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Role information successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: object
|
||||
* properties:
|
||||
* info:
|
||||
* type: string
|
||||
* description: The role information
|
||||
* 400:
|
||||
* description: Invalid ID or key supplied
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Role not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
|
||||
router.get(
|
||||
'/info-by-key',
|
||||
wrapAsync(async (req, res) => {
|
||||
const { RolesService, RolesDBApi } = loadRolesModules();
|
||||
const roleId = req.query.roleId;
|
||||
const key = req.query.key;
|
||||
const currentUser = req.currentUser;
|
||||
let info = await RolesService.getRoleInfoByKey(
|
||||
key,
|
||||
roleId,
|
||||
currentUser,
|
||||
);
|
||||
const role = await RolesDBApi.findBy({ id: roleId });
|
||||
if (!role?.role_customization) {
|
||||
await Promise.all(["pie", "bar"].map(async (e) => {
|
||||
const schema = await sjs.getSequelizeSchema(db.sequelize, {});
|
||||
const payload = {
|
||||
description: `Create some cool ${e} chart`,
|
||||
modelDefinition: schema.definitions,
|
||||
};
|
||||
const widgetId = await getWidget(payload, currentUser?.id, roleId);
|
||||
if (widgetId) {
|
||||
await RolesService.addRoleInfo(
|
||||
roleId,
|
||||
currentUser?.id,
|
||||
'widgets',
|
||||
widgetId,
|
||||
req.currentUser,
|
||||
);
|
||||
}
|
||||
}))
|
||||
info = await RolesService.getRoleInfoByKey(
|
||||
key,
|
||||
roleId,
|
||||
currentUser,
|
||||
);
|
||||
}
|
||||
res.status(200).send(info);
|
||||
}),
|
||||
);
|
||||
|
||||
router.post(
|
||||
'/create_widget',
|
||||
wrapAsync(async (req, res) => {
|
||||
const { RolesService } = loadRolesModules();
|
||||
const { description, userId, roleId } = req.body;
|
||||
|
||||
const currentUser = req.currentUser;
|
||||
const schema = await sjs.getSequelizeSchema(db.sequelize, {});
|
||||
const payload = {
|
||||
description,
|
||||
modelDefinition: schema.definitions,
|
||||
};
|
||||
|
||||
const widgetId = await getWidget(payload, userId, roleId);
|
||||
|
||||
if (widgetId) {
|
||||
await RolesService.addRoleInfo(
|
||||
roleId,
|
||||
userId,
|
||||
'widgets',
|
||||
widgetId,
|
||||
currentUser,
|
||||
);
|
||||
|
||||
return res.status(200).send(widgetId);
|
||||
} else {
|
||||
return res.status(400).send(widgetId);
|
||||
}
|
||||
}),
|
||||
);
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/openai/response:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [OpenAI]
|
||||
* summary: Proxy a Responses API request
|
||||
* description: Sends the payload to the Flatlogic AI proxy and returns the response.
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: object
|
||||
* properties:
|
||||
* input:
|
||||
* type: array
|
||||
* description: List of messages with roles and content.
|
||||
* items:
|
||||
* type: object
|
||||
* properties:
|
||||
* role:
|
||||
* type: string
|
||||
* content:
|
||||
* type: string
|
||||
* options:
|
||||
* type: object
|
||||
* description: Optional polling controls.
|
||||
* properties:
|
||||
* poll_interval:
|
||||
* type: number
|
||||
* poll_timeout:
|
||||
* type: number
|
||||
* responses:
|
||||
* 200:
|
||||
* description: AI response received
|
||||
* 400:
|
||||
* description: Invalid request
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 502:
|
||||
* description: Proxy error
|
||||
*/
|
||||
router.post(
|
||||
'/response',
|
||||
wrapAsync(async (req, res) => {
|
||||
const body = req.body || {};
|
||||
const options = body.options || {};
|
||||
const payload = { ...body };
|
||||
delete payload.options;
|
||||
|
||||
const response = await LocalAIApi.createResponse(payload, options);
|
||||
|
||||
if (response.success) {
|
||||
return res.status(200).send(response);
|
||||
}
|
||||
|
||||
console.error('AI proxy error:', response);
|
||||
const status = response.error === 'input_missing' ? 400 : 502;
|
||||
return res.status(status).send(response);
|
||||
}),
|
||||
);
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/openai/ask:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [OpenAI]
|
||||
* summary: Ask a question to ChatGPT
|
||||
* description: Send a question through the Flatlogic AI proxy and get a response
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: object
|
||||
* properties:
|
||||
* prompt:
|
||||
* type: string
|
||||
* description: The question to ask ChatGPT
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Question successfully answered
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: object
|
||||
* properties:
|
||||
* success:
|
||||
* type: boolean
|
||||
* description: Whether the request was successful
|
||||
* data:
|
||||
* type: string
|
||||
* description: The answer from ChatGPT
|
||||
* 400:
|
||||
* description: Invalid request
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.post(
|
||||
'/ask-gpt',
|
||||
wrapAsync(async (req, res) => {
|
||||
const { prompt } = req.body;
|
||||
if (!prompt) {
|
||||
return res.status(400).send({
|
||||
success: false,
|
||||
error: 'Prompt is required',
|
||||
});
|
||||
}
|
||||
|
||||
const response = await askGpt(prompt);
|
||||
|
||||
if (response.success) {
|
||||
return res.status(200).send(response);
|
||||
} else {
|
||||
return res.status(500).send(response);
|
||||
}
|
||||
}),
|
||||
);
|
||||
|
||||
|
||||
module.exports = router;
|
||||
2
backend/src/routes/organizationLogin.js
Normal file
2
backend/src/routes/organizationLogin.js
Normal file
@ -0,0 +1,2 @@
|
||||
|
||||
|
||||
430
backend/src/routes/permissions.js
Normal file
430
backend/src/routes/permissions.js
Normal file
@ -0,0 +1,430 @@
|
||||
|
||||
const express = require('express');
|
||||
|
||||
const PermissionsService = require('../services/permissions');
|
||||
const PermissionsDBApi = require('../db/api/permissions');
|
||||
const wrapAsync = require('../helpers').wrapAsync;
|
||||
|
||||
|
||||
const router = express.Router();
|
||||
|
||||
const { parse } = require('json2csv');
|
||||
|
||||
|
||||
const {
|
||||
checkCrudPermissions,
|
||||
} = require('../middlewares/check-permissions');
|
||||
|
||||
router.use(checkCrudPermissions('permissions'));
|
||||
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* components:
|
||||
* schemas:
|
||||
* Permissions:
|
||||
* type: object
|
||||
* properties:
|
||||
|
||||
* name:
|
||||
* type: string
|
||||
* default: name
|
||||
|
||||
|
||||
|
||||
*/
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* tags:
|
||||
* name: Permissions
|
||||
* description: The Permissions managing API
|
||||
*/
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/permissions:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Permissions]
|
||||
* summary: Add new item
|
||||
* description: Add new item
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* data:
|
||||
* description: Data of the updated item
|
||||
* type: object
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The item was successfully added
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 405:
|
||||
* description: Invalid input data
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.post('/', wrapAsync(async (req, res) => {
|
||||
const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
|
||||
const link = new URL(referer);
|
||||
await PermissionsService.create(req.body.data, req.currentUser, true, link.host);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/budgets/bulk-import:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Permissions]
|
||||
* summary: Bulk import items
|
||||
* description: Bulk import items
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* data:
|
||||
* description: Data of the updated items
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The items were successfully imported
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 405:
|
||||
* description: Invalid input data
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*
|
||||
*/
|
||||
router.post('/bulk-import', wrapAsync(async (req, res) => {
|
||||
const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
|
||||
const link = new URL(referer);
|
||||
await PermissionsService.bulkImport(req, res, true, link.host);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/permissions/{id}:
|
||||
* put:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Permissions]
|
||||
* summary: Update the data of the selected item
|
||||
* description: Update the data of the selected item
|
||||
* parameters:
|
||||
* - in: path
|
||||
* name: id
|
||||
* description: Item ID to update
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* requestBody:
|
||||
* description: Set new item data
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* id:
|
||||
* description: ID of the updated item
|
||||
* type: string
|
||||
* data:
|
||||
* description: Data of the updated item
|
||||
* type: object
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* required:
|
||||
* - id
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The item data was successfully updated
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* 400:
|
||||
* description: Invalid ID supplied
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Item not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.put('/:id', wrapAsync(async (req, res) => {
|
||||
await PermissionsService.update(req.body.data, req.body.id, req.currentUser);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/permissions/{id}:
|
||||
* delete:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Permissions]
|
||||
* summary: Delete the selected item
|
||||
* description: Delete the selected item
|
||||
* parameters:
|
||||
* - in: path
|
||||
* name: id
|
||||
* description: Item ID to delete
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The item was successfully deleted
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* 400:
|
||||
* description: Invalid ID supplied
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Item not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.delete('/:id', wrapAsync(async (req, res) => {
|
||||
await PermissionsService.remove(req.params.id, req.currentUser);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/permissions/deleteByIds:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Permissions]
|
||||
* summary: Delete the selected item list
|
||||
* description: Delete the selected item list
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* ids:
|
||||
* description: IDs of the updated items
|
||||
* type: array
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The items was successfully deleted
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Items not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.post('/deleteByIds', wrapAsync(async (req, res) => {
|
||||
await PermissionsService.deleteByIds(req.body.data, req.currentUser);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/permissions:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Permissions]
|
||||
* summary: Get all permissions
|
||||
* description: Get all permissions
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Permissions list successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Data not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/', wrapAsync(async (req, res) => {
|
||||
const filetype = req.query.filetype
|
||||
|
||||
const currentUser = req.currentUser;
|
||||
const payload = await PermissionsDBApi.findAll(
|
||||
req.query, { currentUser }
|
||||
);
|
||||
if (filetype && filetype === 'csv') {
|
||||
const fields = ['id','name',
|
||||
|
||||
|
||||
|
||||
];
|
||||
const opts = { fields };
|
||||
try {
|
||||
const csv = parse(payload.rows, opts);
|
||||
res.status(200).attachment(csv);
|
||||
res.send(csv)
|
||||
|
||||
} catch (err) {
|
||||
console.error(err);
|
||||
throw err;
|
||||
}
|
||||
} else {
|
||||
res.status(200).send(payload);
|
||||
}
|
||||
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/permissions/count:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Permissions]
|
||||
* summary: Count all permissions
|
||||
* description: Count all permissions
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Permissions count successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Data not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/count', wrapAsync(async (req, res) => {
|
||||
|
||||
const currentUser = req.currentUser;
|
||||
const payload = await PermissionsDBApi.findAll(
|
||||
req.query,
|
||||
null,
|
||||
{ countOnly: true, currentUser }
|
||||
);
|
||||
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/permissions/autocomplete:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Permissions]
|
||||
* summary: Find all permissions that match search criteria
|
||||
* description: Find all permissions that match search criteria
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Permissions list successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Data not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/autocomplete', async (req, res) => {
|
||||
|
||||
const payload = await PermissionsDBApi.findAllAutocomplete(
|
||||
req.query.query,
|
||||
req.query.limit,
|
||||
req.query.offset,
|
||||
|
||||
);
|
||||
|
||||
res.status(200).send(payload);
|
||||
});
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/permissions/{id}:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Permissions]
|
||||
* summary: Get selected item
|
||||
* description: Get selected item
|
||||
* parameters:
|
||||
* - in: path
|
||||
* name: id
|
||||
* description: ID of item to get
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Selected item successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Permissions"
|
||||
* 400:
|
||||
* description: Invalid ID supplied
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Item not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/:id', wrapAsync(async (req, res) => {
|
||||
const payload = await PermissionsDBApi.findBy(
|
||||
{ id: req.params.id },
|
||||
);
|
||||
|
||||
|
||||
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
router.use('/', require('../helpers').commonErrorHandler);
|
||||
|
||||
module.exports = router;
|
||||
103
backend/src/routes/pexels.js
Normal file
103
backend/src/routes/pexels.js
Normal file
@ -0,0 +1,103 @@
|
||||
const express = require('express');
|
||||
const router = express.Router();
|
||||
const { pexelsKey, pexelsQuery } = require('../config');
|
||||
|
||||
const KEY = pexelsKey;
|
||||
|
||||
router.get('/image', async (req, res) => {
|
||||
const headers = {
|
||||
Authorization: `${KEY}`,
|
||||
};
|
||||
const query = pexelsQuery || 'nature';
|
||||
const orientation = 'portrait';
|
||||
const perPage = 1;
|
||||
const url = `https://api.pexels.com/v1/search?query=${query}&orientation=${orientation}&per_page=${perPage}&page=1`;
|
||||
|
||||
try {
|
||||
const response = await fetch(url, { headers });
|
||||
const data = await response.json();
|
||||
res.status(200).json(data.photos[0]);
|
||||
} catch (error) {
|
||||
res.status(200).json({ error: 'Failed to fetch image' });
|
||||
}
|
||||
});
|
||||
|
||||
router.get('/video', async (req, res) => {
|
||||
const headers = {
|
||||
Authorization: `${KEY}`,
|
||||
};
|
||||
const query = pexelsQuery || 'nature';
|
||||
const orientation = 'portrait';
|
||||
const perPage = 1;
|
||||
const url = `https://api.pexels.com/videos/search?query=${query}&orientation=${orientation}&per_page=${perPage}&page=1`;
|
||||
|
||||
try {
|
||||
const response = await fetch(url, { headers });
|
||||
const data = await response.json();
|
||||
res.status(200).json(data.videos[0]);
|
||||
} catch (error) {
|
||||
res.status(200).json({ error: 'Failed to fetch video' });
|
||||
}
|
||||
});
|
||||
|
||||
router.get('/multiple-images', async (req, res) => {
|
||||
const headers = {
|
||||
Authorization: `${KEY}`,
|
||||
};
|
||||
|
||||
const queries = req.query.queries
|
||||
? req.query.queries.split(',')
|
||||
: ['home', 'apple', 'pizza', 'mountains', 'cat'];
|
||||
const orientation = 'square';
|
||||
const perPage = 1;
|
||||
|
||||
const fallbackImage = {
|
||||
src: 'https://images.pexels.com/photos/8199252/pexels-photo-8199252.jpeg',
|
||||
photographer: 'Yan Krukau',
|
||||
photographer_url: 'https://www.pexels.com/@yankrukov',
|
||||
};
|
||||
const fetchFallbackImage = async () => {
|
||||
try {
|
||||
const response = await fetch('https://picsum.photos/600');
|
||||
return {
|
||||
src: response.url,
|
||||
photographer: 'Random Picsum',
|
||||
photographer_url: 'https://picsum.photos/',
|
||||
};
|
||||
} catch (error) {
|
||||
return fallbackImage;
|
||||
}
|
||||
};
|
||||
const fetchImage = async (query) => {
|
||||
const url = `https://api.pexels.com/v1/search?query=${query}&orientation=${orientation}&per_page=${perPage}&page=1`;
|
||||
const response = await fetch(url, { headers });
|
||||
const data = await response.json();
|
||||
return data.photos[0] || null;
|
||||
};
|
||||
|
||||
const imagePromises = queries.map((query) => fetchImage(query));
|
||||
const imagesResults = await Promise.allSettled(imagePromises);
|
||||
|
||||
const formattedImages = await Promise.all(imagesResults.map(async (result) => {
|
||||
if (result.status === 'fulfilled' && result.value) {
|
||||
const image = result.value;
|
||||
return {
|
||||
src: image.src?.original || fallbackImage.src,
|
||||
photographer: image.photographer || fallbackImage.photographer,
|
||||
photographer_url: image.photographer_url || fallbackImage.photographer_url,
|
||||
};
|
||||
} else {
|
||||
const fallback = await fetchFallbackImage();
|
||||
return {
|
||||
src: fallback.src || '',
|
||||
photographer: fallback.photographer || 'Unknown',
|
||||
photographer_url: fallback.photographer_url || '',
|
||||
};
|
||||
}
|
||||
}));
|
||||
|
||||
|
||||
res.json(formattedImages);
|
||||
});
|
||||
|
||||
module.exports = router;
|
||||
430
backend/src/routes/roles.js
Normal file
430
backend/src/routes/roles.js
Normal file
@ -0,0 +1,430 @@
|
||||
|
||||
const express = require('express');
|
||||
|
||||
const RolesService = require('../services/roles');
|
||||
const RolesDBApi = require('../db/api/roles');
|
||||
const wrapAsync = require('../helpers').wrapAsync;
|
||||
|
||||
|
||||
const router = express.Router();
|
||||
|
||||
const { parse } = require('json2csv');
|
||||
|
||||
|
||||
const {
|
||||
checkCrudPermissions,
|
||||
} = require('../middlewares/check-permissions');
|
||||
|
||||
router.use(checkCrudPermissions('roles'));
|
||||
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* components:
|
||||
* schemas:
|
||||
* Roles:
|
||||
* type: object
|
||||
* properties:
|
||||
|
||||
* name:
|
||||
* type: string
|
||||
* default: name
|
||||
|
||||
|
||||
|
||||
*/
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* tags:
|
||||
* name: Roles
|
||||
* description: The Roles managing API
|
||||
*/
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/roles:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Roles]
|
||||
* summary: Add new item
|
||||
* description: Add new item
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* data:
|
||||
* description: Data of the updated item
|
||||
* type: object
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The item was successfully added
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 405:
|
||||
* description: Invalid input data
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.post('/', wrapAsync(async (req, res) => {
|
||||
const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
|
||||
const link = new URL(referer);
|
||||
await RolesService.create(req.body.data, req.currentUser, true, link.host);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/budgets/bulk-import:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Roles]
|
||||
* summary: Bulk import items
|
||||
* description: Bulk import items
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* data:
|
||||
* description: Data of the updated items
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The items were successfully imported
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 405:
|
||||
* description: Invalid input data
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*
|
||||
*/
|
||||
router.post('/bulk-import', wrapAsync(async (req, res) => {
|
||||
const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
|
||||
const link = new URL(referer);
|
||||
await RolesService.bulkImport(req, res, true, link.host);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/roles/{id}:
|
||||
* put:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Roles]
|
||||
* summary: Update the data of the selected item
|
||||
* description: Update the data of the selected item
|
||||
* parameters:
|
||||
* - in: path
|
||||
* name: id
|
||||
* description: Item ID to update
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* requestBody:
|
||||
* description: Set new item data
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* id:
|
||||
* description: ID of the updated item
|
||||
* type: string
|
||||
* data:
|
||||
* description: Data of the updated item
|
||||
* type: object
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* required:
|
||||
* - id
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The item data was successfully updated
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* 400:
|
||||
* description: Invalid ID supplied
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Item not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.put('/:id', wrapAsync(async (req, res) => {
|
||||
await RolesService.update(req.body.data, req.body.id, req.currentUser);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/roles/{id}:
|
||||
* delete:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Roles]
|
||||
* summary: Delete the selected item
|
||||
* description: Delete the selected item
|
||||
* parameters:
|
||||
* - in: path
|
||||
* name: id
|
||||
* description: Item ID to delete
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The item was successfully deleted
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* 400:
|
||||
* description: Invalid ID supplied
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Item not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.delete('/:id', wrapAsync(async (req, res) => {
|
||||
await RolesService.remove(req.params.id, req.currentUser);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/roles/deleteByIds:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Roles]
|
||||
* summary: Delete the selected item list
|
||||
* description: Delete the selected item list
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* ids:
|
||||
* description: IDs of the updated items
|
||||
* type: array
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The items was successfully deleted
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Items not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.post('/deleteByIds', wrapAsync(async (req, res) => {
|
||||
await RolesService.deleteByIds(req.body.data, req.currentUser);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/roles:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Roles]
|
||||
* summary: Get all roles
|
||||
* description: Get all roles
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Roles list successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Data not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/', wrapAsync(async (req, res) => {
|
||||
const filetype = req.query.filetype
|
||||
|
||||
const currentUser = req.currentUser;
|
||||
const payload = await RolesDBApi.findAll(
|
||||
req.query, { currentUser }
|
||||
);
|
||||
if (filetype && filetype === 'csv') {
|
||||
const fields = ['id','name',
|
||||
|
||||
|
||||
|
||||
];
|
||||
const opts = { fields };
|
||||
try {
|
||||
const csv = parse(payload.rows, opts);
|
||||
res.status(200).attachment(csv);
|
||||
res.send(csv)
|
||||
|
||||
} catch (err) {
|
||||
console.error(err);
|
||||
throw err;
|
||||
}
|
||||
} else {
|
||||
res.status(200).send(payload);
|
||||
}
|
||||
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/roles/count:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Roles]
|
||||
* summary: Count all roles
|
||||
* description: Count all roles
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Roles count successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Data not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/count', wrapAsync(async (req, res) => {
|
||||
|
||||
const currentUser = req.currentUser;
|
||||
const payload = await RolesDBApi.findAll(
|
||||
req.query,
|
||||
null,
|
||||
{ countOnly: true, currentUser }
|
||||
);
|
||||
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/roles/autocomplete:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Roles]
|
||||
* summary: Find all roles that match search criteria
|
||||
* description: Find all roles that match search criteria
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Roles list successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Data not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/autocomplete', async (req, res) => {
|
||||
|
||||
const payload = await RolesDBApi.findAllAutocomplete(
|
||||
req.query.query,
|
||||
req.query.limit,
|
||||
req.query.offset,
|
||||
|
||||
);
|
||||
|
||||
res.status(200).send(payload);
|
||||
});
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/roles/{id}:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Roles]
|
||||
* summary: Get selected item
|
||||
* description: Get selected item
|
||||
* parameters:
|
||||
* - in: path
|
||||
* name: id
|
||||
* description: ID of item to get
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Selected item successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Roles"
|
||||
* 400:
|
||||
* description: Invalid ID supplied
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Item not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/:id', wrapAsync(async (req, res) => {
|
||||
const payload = await RolesDBApi.findBy(
|
||||
{ id: req.params.id },
|
||||
);
|
||||
|
||||
|
||||
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
router.use('/', require('../helpers').commonErrorHandler);
|
||||
|
||||
module.exports = router;
|
||||
52
backend/src/routes/search.js
Normal file
52
backend/src/routes/search.js
Normal file
@ -0,0 +1,52 @@
|
||||
const express = require('express');
|
||||
const SearchService = require('../services/search');
|
||||
|
||||
|
||||
const router = express.Router();
|
||||
|
||||
const { checkCrudPermissions } = require('../middlewares/check-permissions');
|
||||
router.use(checkCrudPermissions('search'));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* path:
|
||||
* /api/search:
|
||||
* post:
|
||||
* summary: Search
|
||||
* description: Search results across multiple tables
|
||||
* requestBody:
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: object
|
||||
* properties:
|
||||
* searchQuery:
|
||||
* type: string
|
||||
* required:
|
||||
* - searchQuery
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Successful request
|
||||
* 400:
|
||||
* description: Invalid request
|
||||
* 500:
|
||||
* description: Internal server error
|
||||
*/
|
||||
|
||||
router.post('/', async (req, res) => {
|
||||
const { searchQuery } = req.body;
|
||||
|
||||
if (!searchQuery) {
|
||||
return res.status(400).json({ error: 'Please enter a search query' });
|
||||
}
|
||||
|
||||
try {
|
||||
const foundMatches = await SearchService.search(searchQuery, req.currentUser );
|
||||
res.json(foundMatches);
|
||||
} catch (error) {
|
||||
console.error('Internal Server Error', error);
|
||||
res.status(500).json({ error: 'Internal Server Error' });
|
||||
}
|
||||
});
|
||||
|
||||
module.exports = router;
|
||||
61
backend/src/routes/sql.js
Normal file
61
backend/src/routes/sql.js
Normal file
@ -0,0 +1,61 @@
|
||||
const express = require('express');
|
||||
const db = require('../db/models');
|
||||
const wrapAsync = require('../helpers').wrapAsync;
|
||||
|
||||
const router = express.Router();
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/sql:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* summary: Execute a SELECT-only SQL query
|
||||
* description: Executes a read-only SQL query and returns rows.
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: object
|
||||
* properties:
|
||||
* sql:
|
||||
* type: string
|
||||
* required:
|
||||
* - sql
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Query result
|
||||
* 400:
|
||||
* description: Invalid SQL
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 500:
|
||||
* description: Internal server error
|
||||
*/
|
||||
router.post(
|
||||
'/',
|
||||
wrapAsync(async (req, res) => {
|
||||
const { sql } = req.body;
|
||||
if (typeof sql !== 'string' || !sql.trim()) {
|
||||
return res.status(400).json({ error: 'SQL is required' });
|
||||
}
|
||||
|
||||
const normalized = sql.trim().replace(/;+\s*$/, '');
|
||||
if (!/^select\b/i.test(normalized)) {
|
||||
return res.status(400).json({ error: 'Only SELECT statements are allowed' });
|
||||
}
|
||||
|
||||
if (normalized.includes(';')) {
|
||||
return res.status(400).json({ error: 'Only a single SELECT statement is allowed' });
|
||||
}
|
||||
|
||||
const rows = await db.sequelize.query(normalized, {
|
||||
type: db.Sequelize.QueryTypes.SELECT,
|
||||
});
|
||||
|
||||
return res.status(200).json({ rows });
|
||||
}),
|
||||
);
|
||||
|
||||
module.exports = router;
|
||||
441
backend/src/routes/users.js
Normal file
441
backend/src/routes/users.js
Normal file
@ -0,0 +1,441 @@
|
||||
|
||||
const express = require('express');
|
||||
|
||||
const UsersService = require('../services/users');
|
||||
const UsersDBApi = require('../db/api/users');
|
||||
const wrapAsync = require('../helpers').wrapAsync;
|
||||
|
||||
|
||||
const router = express.Router();
|
||||
|
||||
const { parse } = require('json2csv');
|
||||
|
||||
|
||||
const {
|
||||
checkCrudPermissions,
|
||||
} = require('../middlewares/check-permissions');
|
||||
|
||||
router.use(checkCrudPermissions('users'));
|
||||
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* components:
|
||||
* schemas:
|
||||
* Users:
|
||||
* type: object
|
||||
* properties:
|
||||
|
||||
* firstName:
|
||||
* type: string
|
||||
* default: firstName
|
||||
* lastName:
|
||||
* type: string
|
||||
* default: lastName
|
||||
* phoneNumber:
|
||||
* type: string
|
||||
* default: phoneNumber
|
||||
* email:
|
||||
* type: string
|
||||
* default: email
|
||||
|
||||
|
||||
|
||||
*/
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* tags:
|
||||
* name: Users
|
||||
* description: The Users managing API
|
||||
*/
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/users:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Users]
|
||||
* summary: Add new item
|
||||
* description: Add new item
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* data:
|
||||
* description: Data of the updated item
|
||||
* type: object
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The item was successfully added
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 405:
|
||||
* description: Invalid input data
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.post('/', wrapAsync(async (req, res) => {
|
||||
const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
|
||||
const link = new URL(referer);
|
||||
await UsersService.create(req.body.data, req.currentUser, true, link.host);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/budgets/bulk-import:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Users]
|
||||
* summary: Bulk import items
|
||||
* description: Bulk import items
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* data:
|
||||
* description: Data of the updated items
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The items were successfully imported
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 405:
|
||||
* description: Invalid input data
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*
|
||||
*/
|
||||
router.post('/bulk-import', wrapAsync(async (req, res) => {
|
||||
const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`;
|
||||
const link = new URL(referer);
|
||||
await UsersService.bulkImport(req, res, true, link.host);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/users/{id}:
|
||||
* put:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Users]
|
||||
* summary: Update the data of the selected item
|
||||
* description: Update the data of the selected item
|
||||
* parameters:
|
||||
* - in: path
|
||||
* name: id
|
||||
* description: Item ID to update
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* requestBody:
|
||||
* description: Set new item data
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* id:
|
||||
* description: ID of the updated item
|
||||
* type: string
|
||||
* data:
|
||||
* description: Data of the updated item
|
||||
* type: object
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* required:
|
||||
* - id
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The item data was successfully updated
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* 400:
|
||||
* description: Invalid ID supplied
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Item not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.put('/:id', wrapAsync(async (req, res) => {
|
||||
await UsersService.update(req.body.data, req.body.id, req.currentUser);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/users/{id}:
|
||||
* delete:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Users]
|
||||
* summary: Delete the selected item
|
||||
* description: Delete the selected item
|
||||
* parameters:
|
||||
* - in: path
|
||||
* name: id
|
||||
* description: Item ID to delete
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The item was successfully deleted
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* 400:
|
||||
* description: Invalid ID supplied
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Item not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.delete('/:id', wrapAsync(async (req, res) => {
|
||||
await UsersService.remove(req.params.id, req.currentUser);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/users/deleteByIds:
|
||||
* post:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Users]
|
||||
* summary: Delete the selected item list
|
||||
* description: Delete the selected item list
|
||||
* requestBody:
|
||||
* required: true
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* properties:
|
||||
* ids:
|
||||
* description: IDs of the updated items
|
||||
* type: array
|
||||
* responses:
|
||||
* 200:
|
||||
* description: The items was successfully deleted
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Items not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.post('/deleteByIds', wrapAsync(async (req, res) => {
|
||||
await UsersService.deleteByIds(req.body.data, req.currentUser);
|
||||
const payload = true;
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/users:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Users]
|
||||
* summary: Get all users
|
||||
* description: Get all users
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Users list successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Data not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/', wrapAsync(async (req, res) => {
|
||||
const filetype = req.query.filetype
|
||||
|
||||
const currentUser = req.currentUser;
|
||||
const payload = await UsersDBApi.findAll(
|
||||
req.query, { currentUser }
|
||||
);
|
||||
if (filetype && filetype === 'csv') {
|
||||
const fields = ['id','firstName','lastName','phoneNumber','email',
|
||||
|
||||
|
||||
|
||||
];
|
||||
const opts = { fields };
|
||||
try {
|
||||
const csv = parse(payload.rows, opts);
|
||||
res.status(200).attachment(csv);
|
||||
res.send(csv)
|
||||
|
||||
} catch (err) {
|
||||
console.error(err);
|
||||
throw err;
|
||||
}
|
||||
} else {
|
||||
res.status(200).send(payload);
|
||||
}
|
||||
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/users/count:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Users]
|
||||
* summary: Count all users
|
||||
* description: Count all users
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Users count successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Data not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/count', wrapAsync(async (req, res) => {
|
||||
|
||||
const currentUser = req.currentUser;
|
||||
const payload = await UsersDBApi.findAll(
|
||||
req.query,
|
||||
null,
|
||||
{ countOnly: true, currentUser }
|
||||
);
|
||||
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/users/autocomplete:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Users]
|
||||
* summary: Find all users that match search criteria
|
||||
* description: Find all users that match search criteria
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Users list successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* type: array
|
||||
* items:
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Data not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/autocomplete', async (req, res) => {
|
||||
|
||||
const payload = await UsersDBApi.findAllAutocomplete(
|
||||
req.query.query,
|
||||
req.query.limit,
|
||||
req.query.offset,
|
||||
|
||||
);
|
||||
|
||||
res.status(200).send(payload);
|
||||
});
|
||||
|
||||
/**
|
||||
* @swagger
|
||||
* /api/users/{id}:
|
||||
* get:
|
||||
* security:
|
||||
* - bearerAuth: []
|
||||
* tags: [Users]
|
||||
* summary: Get selected item
|
||||
* description: Get selected item
|
||||
* parameters:
|
||||
* - in: path
|
||||
* name: id
|
||||
* description: ID of item to get
|
||||
* required: true
|
||||
* schema:
|
||||
* type: string
|
||||
* responses:
|
||||
* 200:
|
||||
* description: Selected item successfully received
|
||||
* content:
|
||||
* application/json:
|
||||
* schema:
|
||||
* $ref: "#/components/schemas/Users"
|
||||
* 400:
|
||||
* description: Invalid ID supplied
|
||||
* 401:
|
||||
* $ref: "#/components/responses/UnauthorizedError"
|
||||
* 404:
|
||||
* description: Item not found
|
||||
* 500:
|
||||
* description: Some server error
|
||||
*/
|
||||
router.get('/:id', wrapAsync(async (req, res) => {
|
||||
const payload = await UsersDBApi.findBy(
|
||||
{ id: req.params.id },
|
||||
);
|
||||
|
||||
|
||||
delete payload.password;
|
||||
|
||||
|
||||
res.status(200).send(payload);
|
||||
}));
|
||||
|
||||
router.use('/', require('../helpers').commonErrorHandler);
|
||||
|
||||
module.exports = router;
|
||||
33
backend/src/security/activationEvents.js
Normal file
33
backend/src/security/activationEvents.js
Normal file
@ -0,0 +1,33 @@
|
||||
const db = require('../db/models');
|
||||
|
||||
async function recordFirstActivationEvent(eventType, actorId) {
|
||||
const existing = await db.coaching_audit_events.findOne({
|
||||
where: { event_type: eventType, actorId },
|
||||
attributes: ['id'],
|
||||
});
|
||||
|
||||
if (existing) {
|
||||
return false;
|
||||
}
|
||||
|
||||
await db.coaching_audit_events.create({
|
||||
event_type: eventType,
|
||||
actorId,
|
||||
target_type: 'workspace',
|
||||
target_id: null,
|
||||
metadata: {},
|
||||
});
|
||||
return true;
|
||||
}
|
||||
|
||||
async function recordLoginActivation(user) {
|
||||
const accountAgeMs = Date.now() - new Date(user.createdAt).getTime();
|
||||
if (accountAgeMs >= 7 * 24 * 60 * 60 * 1000) {
|
||||
await recordFirstActivationEvent('week_1_active', user.id);
|
||||
}
|
||||
if (accountAgeMs >= 28 * 24 * 60 * 60 * 1000) {
|
||||
await recordFirstActivationEvent('week_4_active', user.id);
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = { recordFirstActivationEvent, recordLoginActivation };
|
||||
53
backend/src/security/audioUpload.js
Normal file
53
backend/src/security/audioUpload.js
Normal file
@ -0,0 +1,53 @@
|
||||
const path = require("path");
|
||||
const childProcess = require("child_process");
|
||||
const util = require("util");
|
||||
|
||||
const execFile = util.promisify(childProcess.execFile);
|
||||
|
||||
const directAudioUploadLimitBytes = 24 * 1024 * 1024;
|
||||
const allowedAudioMimeTypes = new Set(["audio/mpeg", "audio/mp4", "audio/wav", "audio/x-wav", "audio/webm"]);
|
||||
const allowedAudioExtensions = new Set([".mp3", ".m4a", ".mp4", ".wav", ".webm"]);
|
||||
|
||||
function validateAudioUpload(audioFile) {
|
||||
const fileName = audioFile.originalFilename || audioFile.name || "";
|
||||
const mimeType = String(audioFile.mimetype || audioFile.type || "").toLowerCase();
|
||||
const extension = path.extname(fileName).toLowerCase();
|
||||
const size = Number(audioFile.size || 0);
|
||||
|
||||
if (!allowedAudioMimeTypes.has(mimeType) || !allowedAudioExtensions.has(extension)) {
|
||||
const error = new Error("Unsupported audio file type");
|
||||
error.code = 415;
|
||||
throw error;
|
||||
}
|
||||
|
||||
if (size <= 0 || size > directAudioUploadLimitBytes) {
|
||||
const error = new Error("Audio file must be between 1 byte and 24 MB");
|
||||
error.code = 413;
|
||||
throw error;
|
||||
}
|
||||
}
|
||||
|
||||
async function validateAudioContent(filePath, probe = execFile) {
|
||||
try {
|
||||
const { stdout } = await probe("ffprobe", [
|
||||
"-v", "error", "-select_streams", "a:0", "-show_entries", "stream=codec_type",
|
||||
"-of", "default=noprint_wrappers=1:nokey=1", filePath,
|
||||
]);
|
||||
|
||||
if (!String(stdout).trim().includes("audio")) {
|
||||
const error = new Error("Uploaded file does not contain a readable audio stream");
|
||||
error.code = 415;
|
||||
throw error;
|
||||
}
|
||||
} catch (error) {
|
||||
if (error.code === 415) {
|
||||
throw error;
|
||||
}
|
||||
|
||||
const invalidAudio = new Error("Uploaded file is not valid audio");
|
||||
invalidAudio.code = 415;
|
||||
throw invalidAudio;
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = { directAudioUploadLimitBytes, validateAudioUpload, validateAudioContent };
|
||||
58
backend/src/security/coachingAuthorization.js
Normal file
58
backend/src/security/coachingAuthorization.js
Normal file
@ -0,0 +1,58 @@
|
||||
const ADMIN_ROLE_NAMES = new Set(["Administrator", "Workspace Owner"]);
|
||||
const STAFF_ROLE_NAMES = new Set(["Administrator", "Workspace Owner", "Coach", "Assistant"]);
|
||||
|
||||
function roleName(user) {
|
||||
return user?.app_role?.name || "";
|
||||
}
|
||||
|
||||
function isAdministratorUser(user) {
|
||||
return ADMIN_ROLE_NAMES.has(roleName(user));
|
||||
}
|
||||
|
||||
function isClientUser(user) {
|
||||
return roleName(user) === "Client";
|
||||
}
|
||||
|
||||
function isStaffUser(user) {
|
||||
return STAFF_ROLE_NAMES.has(roleName(user));
|
||||
}
|
||||
|
||||
function clientAccessWhere(user) {
|
||||
if (isAdministratorUser(user)) {
|
||||
return {};
|
||||
}
|
||||
|
||||
if (isStaffUser(user)) {
|
||||
return { ownerId: user.id };
|
||||
}
|
||||
|
||||
return { id: null };
|
||||
}
|
||||
|
||||
function requireStaff(req, res, next) {
|
||||
if (!isStaffUser(req.currentUser)) {
|
||||
res.status(403).send({ error: "coach_only" });
|
||||
return;
|
||||
}
|
||||
|
||||
next();
|
||||
}
|
||||
|
||||
function authorizeCoachingRoute(req, res, next) {
|
||||
if (req.path === "/client-portal/me" || req.path.startsWith("/client-portal/")) {
|
||||
next();
|
||||
return;
|
||||
}
|
||||
|
||||
requireStaff(req, res, next);
|
||||
}
|
||||
|
||||
module.exports = {
|
||||
authorizeCoachingRoute,
|
||||
clientAccessWhere,
|
||||
isAdministratorUser,
|
||||
isClientUser,
|
||||
isStaffUser,
|
||||
requireStaff,
|
||||
roleName,
|
||||
};
|
||||
15
backend/src/security/consent.js
Normal file
15
backend/src/security/consent.js
Normal file
@ -0,0 +1,15 @@
|
||||
function consentChanges({ aiGranted, recordingGranted, policyVersion, actorId, now = new Date() }) {
|
||||
return {
|
||||
ai_processing_consent_granted: aiGranted,
|
||||
ai_processing_consent_at: aiGranted ? now : null,
|
||||
ai_processing_consent_policy_version: aiGranted ? policyVersion : null,
|
||||
recording_consent_granted: recordingGranted,
|
||||
recording_consent_at: recordingGranted ? now : null,
|
||||
recording_consent_policy_version: recordingGranted ? policyVersion : null,
|
||||
consent_withdrawn_at: !aiGranted || !recordingGranted ? now : null,
|
||||
consent_updated_by_id: actorId,
|
||||
updatedById: actorId,
|
||||
};
|
||||
}
|
||||
|
||||
module.exports = { consentChanges };
|
||||
78
backend/src/security/cookieAuth.js
Normal file
78
backend/src/security/cookieAuth.js
Normal file
@ -0,0 +1,78 @@
|
||||
const SESSION_COOKIE = "coaching_session";
|
||||
|
||||
function parseCookieHeader(header) {
|
||||
const cookies = {};
|
||||
|
||||
for (const part of String(header || "").split(";")) {
|
||||
const separator = part.indexOf("=");
|
||||
if (separator === -1) continue;
|
||||
const name = part.slice(0, separator).trim();
|
||||
const value = part.slice(separator + 1).trim();
|
||||
if (name) cookies[name] = decodeURIComponent(value);
|
||||
}
|
||||
|
||||
return cookies;
|
||||
}
|
||||
|
||||
function sessionTokenFromRequest(req) {
|
||||
return parseCookieHeader(req.headers?.cookie)[SESSION_COOKIE] || null;
|
||||
}
|
||||
|
||||
function cookieOptions() {
|
||||
return {
|
||||
httpOnly: true,
|
||||
secure: process.env.NODE_ENV === "production" || process.env.NODE_ENV === "dev_stage",
|
||||
sameSite: "lax",
|
||||
path: "/",
|
||||
};
|
||||
}
|
||||
|
||||
function setSessionCookie(req, res, token) {
|
||||
res.cookie(SESSION_COOKIE, token, { ...cookieOptions(), maxAge: 30 * 60 * 1000 });
|
||||
}
|
||||
|
||||
function clearSessionCookie(req, res) {
|
||||
res.clearCookie(SESSION_COOKIE, cookieOptions());
|
||||
}
|
||||
|
||||
function requestOrigin(req) {
|
||||
const origin = req.get("origin");
|
||||
if (origin) return origin;
|
||||
const referer = req.get("referer");
|
||||
return referer ? new URL(referer).origin : null;
|
||||
}
|
||||
|
||||
function expectedOrigin(req) {
|
||||
const protocol = req.get("x-forwarded-proto") || req.protocol;
|
||||
const host = req.get("x-forwarded-host") || req.get("host");
|
||||
return `${protocol}://${host}`;
|
||||
}
|
||||
|
||||
function protectCookieMutations(req, res, next) {
|
||||
if (["GET", "HEAD", "OPTIONS"].includes(req.method)) {
|
||||
next();
|
||||
return;
|
||||
}
|
||||
|
||||
if (req.get("authorization") || !sessionTokenFromRequest(req)) {
|
||||
next();
|
||||
return;
|
||||
}
|
||||
|
||||
let origin;
|
||||
try {
|
||||
origin = requestOrigin(req);
|
||||
} catch {
|
||||
res.status(403).send({ error: "csrf_origin_invalid" });
|
||||
return;
|
||||
}
|
||||
|
||||
if (!origin || origin !== expectedOrigin(req)) {
|
||||
res.status(403).send({ error: "csrf_origin_invalid" });
|
||||
return;
|
||||
}
|
||||
|
||||
next();
|
||||
}
|
||||
|
||||
module.exports = { SESSION_COOKIE, parseCookieHeader, sessionTokenFromRequest, setSessionCookie, clearSessionCookie, protectCookieMutations };
|
||||
24
backend/src/security/dataLifecycle.js
Normal file
24
backend/src/security/dataLifecycle.js
Normal file
@ -0,0 +1,24 @@
|
||||
function positiveDays(value, fallback) {
|
||||
const days = Number(value);
|
||||
|
||||
if (!Number.isInteger(days) || days <= 0) {
|
||||
return fallback;
|
||||
}
|
||||
|
||||
return days;
|
||||
}
|
||||
|
||||
function retentionPolicy(env = process.env) {
|
||||
return {
|
||||
raw_audio_days: positiveDays(env.COACHING_AUDIO_RETENTION_DAYS, 30),
|
||||
transcript_days: positiveDays(env.COACHING_TRANSCRIPT_RETENTION_DAYS, 365),
|
||||
session_memory_days: positiveDays(env.COACHING_MEMORY_RETENTION_DAYS, 730),
|
||||
backup_expiry_days: positiveDays(env.COACHING_BACKUP_EXPIRY_DAYS, 30),
|
||||
};
|
||||
}
|
||||
|
||||
function cutoffDate(days, now = new Date()) {
|
||||
return new Date(now.getTime() - days * 24 * 60 * 60 * 1000);
|
||||
}
|
||||
|
||||
module.exports = { retentionPolicy, cutoffDate };
|
||||
43
backend/src/security/fileUpload.js
Normal file
43
backend/src/security/fileUpload.js
Normal file
@ -0,0 +1,43 @@
|
||||
const path = require('path');
|
||||
|
||||
const allowedTypes = new Map([
|
||||
['image/jpeg', new Set(['.jpg', '.jpeg'])],
|
||||
['image/png', new Set(['.png'])],
|
||||
['image/webp', new Set(['.webp'])],
|
||||
['application/pdf', new Set(['.pdf'])],
|
||||
['text/plain', new Set(['.txt'])],
|
||||
]);
|
||||
|
||||
function contentMatches(mimeType, buffer) {
|
||||
if (mimeType === 'image/jpeg') {
|
||||
return buffer.length >= 3 && buffer[0] === 0xff && buffer[1] === 0xd8 && buffer[2] === 0xff;
|
||||
}
|
||||
if (mimeType === 'image/png') {
|
||||
return buffer.subarray(0, 8).equals(Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]));
|
||||
}
|
||||
if (mimeType === 'image/webp') {
|
||||
return buffer.subarray(0, 4).toString('ascii') === 'RIFF' && buffer.subarray(8, 12).toString('ascii') === 'WEBP';
|
||||
}
|
||||
if (mimeType === 'application/pdf') {
|
||||
return buffer.subarray(0, 5).toString('ascii') === '%PDF-';
|
||||
}
|
||||
if (mimeType === 'text/plain') {
|
||||
return !buffer.includes(0);
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
function validateFileUpload(file, filename) {
|
||||
const mimeType = String(file.mimetype || '').toLowerCase();
|
||||
const extension = path.extname(filename).toLowerCase();
|
||||
const extensions = allowedTypes.get(mimeType);
|
||||
|
||||
if (!extensions || !extensions.has(extension) || !contentMatches(mimeType, file.buffer)) {
|
||||
const error = new Error('unsupported_file_type');
|
||||
error.code = 415;
|
||||
throw error;
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = { validateFileUpload };
|
||||
30
backend/src/security/malwareScan.js
Normal file
30
backend/src/security/malwareScan.js
Normal file
@ -0,0 +1,30 @@
|
||||
const { execFile } = require('child_process');
|
||||
const fs = require('fs/promises');
|
||||
const os = require('os');
|
||||
const path = require('path');
|
||||
const { promisify } = require('util');
|
||||
const crypto = require('crypto');
|
||||
|
||||
const execFileAsync = promisify(execFile);
|
||||
|
||||
async function scanFile(filePath) {
|
||||
try {
|
||||
await execFileAsync('clamscan', ['--no-summary', filePath]);
|
||||
} catch (error) {
|
||||
console.error('Malware scan failed', { code: error.code, signal: error.signal });
|
||||
throw new Error('file_scan_failed');
|
||||
}
|
||||
}
|
||||
|
||||
async function scanBuffer(buffer) {
|
||||
const scanPath = path.join(os.tmpdir(), `coaching-upload-${crypto.randomUUID()}`);
|
||||
await fs.writeFile(scanPath, buffer, { mode: 0o600 });
|
||||
|
||||
try {
|
||||
await scanFile(scanPath);
|
||||
} finally {
|
||||
await fs.unlink(scanPath);
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = { scanBuffer, scanFile };
|
||||
18
backend/src/security/monitoring.js
Normal file
18
backend/src/security/monitoring.js
Normal file
@ -0,0 +1,18 @@
|
||||
const Sentry = require('@sentry/node');
|
||||
|
||||
function initMonitoring() {
|
||||
Sentry.init({
|
||||
dsn: process.env.SENTRY_DSN,
|
||||
environment: process.env.NODE_ENV || 'development',
|
||||
sendDefaultPii: false,
|
||||
});
|
||||
}
|
||||
|
||||
function captureError(error, requestId) {
|
||||
Sentry.withScope((scope) => {
|
||||
scope.setTag('request_id', requestId || 'unknown');
|
||||
Sentry.captureException(error);
|
||||
});
|
||||
}
|
||||
|
||||
module.exports = { captureError, initMonitoring };
|
||||
18
backend/src/security/oneTimeTokens.js
Normal file
18
backend/src/security/oneTimeTokens.js
Normal file
@ -0,0 +1,18 @@
|
||||
const crypto = require("crypto");
|
||||
|
||||
const TOKEN_TTL_MS = 10 * 60 * 1000;
|
||||
|
||||
function generateOneTimeToken(now = Date.now()) {
|
||||
const token = crypto.randomBytes(32).toString("hex");
|
||||
return {
|
||||
token,
|
||||
digest: digestOneTimeToken(token),
|
||||
expiresAt: new Date(now + TOKEN_TTL_MS),
|
||||
};
|
||||
}
|
||||
|
||||
function digestOneTimeToken(token) {
|
||||
return crypto.createHash("sha256").update(String(token)).digest("hex");
|
||||
}
|
||||
|
||||
module.exports = { TOKEN_TTL_MS, generateOneTimeToken, digestOneTimeToken };
|
||||
18
backend/src/security/passwords.js
Normal file
18
backend/src/security/passwords.js
Normal file
@ -0,0 +1,18 @@
|
||||
const MINIMUM_PASSWORD_LENGTH = 12;
|
||||
|
||||
function validatePassword(password) {
|
||||
if (typeof password !== "string" || password.length < MINIMUM_PASSWORD_LENGTH) {
|
||||
return "auth.passwordTooShort";
|
||||
}
|
||||
|
||||
return null;
|
||||
}
|
||||
|
||||
function requireValidPassword(password, ValidationError) {
|
||||
const error = validatePassword(password);
|
||||
if (error) {
|
||||
throw new ValidationError(error);
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = { MINIMUM_PASSWORD_LENGTH, requireValidPassword, validatePassword };
|
||||
19
backend/src/security/publicAppUrl.js
Normal file
19
backend/src/security/publicAppUrl.js
Normal file
@ -0,0 +1,19 @@
|
||||
function publicAppUrl(env = process.env) {
|
||||
const configured = String(env.PUBLIC_APP_URL || '').trim();
|
||||
const domain = String(env.FULL_DOMAIN || '').trim();
|
||||
const value = configured || (domain ? `https://${domain}` : '');
|
||||
|
||||
if (!value) {
|
||||
throw new Error('PUBLIC_APP_URL or FULL_DOMAIN is required for email links');
|
||||
}
|
||||
|
||||
const url = new URL(value);
|
||||
const localDevelopment = env.NODE_ENV !== 'production' && ['localhost', '127.0.0.1'].includes(url.hostname);
|
||||
if (url.protocol !== 'https:' && !localDevelopment) {
|
||||
throw new Error('Public application URL must use HTTPS');
|
||||
}
|
||||
|
||||
return url.origin;
|
||||
}
|
||||
|
||||
module.exports = { publicAppUrl };
|
||||
28
backend/src/security/rateLimit.js
Normal file
28
backend/src/security/rateLimit.js
Normal file
@ -0,0 +1,28 @@
|
||||
function createRateLimit({ windowMs, max, error }) {
|
||||
const requests = new Map();
|
||||
|
||||
return function rateLimit(req, res, next) {
|
||||
const now = Date.now();
|
||||
const key = `${req.ip}:${req.baseUrl}${req.path}`;
|
||||
const current = requests.get(key);
|
||||
|
||||
if (!current || current.resetAt <= now) {
|
||||
requests.set(key, { count: 1, resetAt: now + windowMs });
|
||||
next();
|
||||
return;
|
||||
}
|
||||
|
||||
current.count += 1;
|
||||
|
||||
if (current.count > max) {
|
||||
const retryAfter = Math.ceil((current.resetAt - now) / 1000);
|
||||
res.set("Retry-After", String(retryAfter));
|
||||
res.status(429).send({ error });
|
||||
return;
|
||||
}
|
||||
|
||||
next();
|
||||
};
|
||||
}
|
||||
|
||||
module.exports = { createRateLimit };
|
||||
28
backend/src/security/readOnlyDemo.js
Normal file
28
backend/src/security/readOnlyDemo.js
Normal file
@ -0,0 +1,28 @@
|
||||
const SAFE_METHODS = new Set(["GET", "HEAD", "OPTIONS"]);
|
||||
const DEMO_WRITE_ALLOWLIST = new Set(["/api/auth/signin/local", "/api/auth/signin/demo", "/api/auth/logout"]);
|
||||
|
||||
function demoModeEnabled() {
|
||||
return process.env.DEMO_MODE === "true";
|
||||
}
|
||||
|
||||
function enforceReadOnlyDemo(req, res, next) {
|
||||
if (!demoModeEnabled()) {
|
||||
next();
|
||||
return;
|
||||
}
|
||||
|
||||
if (SAFE_METHODS.has(req.method) || DEMO_WRITE_ALLOWLIST.has(req.path)) {
|
||||
next();
|
||||
return;
|
||||
}
|
||||
|
||||
res.status(403).send({
|
||||
error: "demo_read_only",
|
||||
message: "This public demo uses fictional data and does not save changes.",
|
||||
});
|
||||
}
|
||||
|
||||
module.exports = {
|
||||
demoModeEnabled,
|
||||
enforceReadOnlyDemo,
|
||||
};
|
||||
18
backend/src/security/reminders.js
Normal file
18
backend/src/security/reminders.js
Normal file
@ -0,0 +1,18 @@
|
||||
const allowedReminderMinutes = [10, 60, 1440];
|
||||
|
||||
function reminderMinutes(value, fallback = 60) {
|
||||
const minutes = Number(value);
|
||||
return allowedReminderMinutes.includes(minutes) ? minutes : fallback;
|
||||
}
|
||||
|
||||
function scheduledReminderAt(sessionAt, minutes) {
|
||||
const session = new Date(sessionAt);
|
||||
|
||||
if (Number.isNaN(session.getTime())) {
|
||||
throw new Error("Session time is invalid");
|
||||
}
|
||||
|
||||
return new Date(session.getTime() - reminderMinutes(minutes) * 60 * 1000);
|
||||
}
|
||||
|
||||
module.exports = { allowedReminderMinutes, reminderMinutes, scheduledReminderAt };
|
||||
91
backend/src/security/sessionLifecycle.js
Normal file
91
backend/src/security/sessionLifecycle.js
Normal file
@ -0,0 +1,91 @@
|
||||
const editableSessionFields = [
|
||||
"title",
|
||||
"session_at",
|
||||
"transcript_notes",
|
||||
"ai_summary",
|
||||
"key_topics",
|
||||
"goals_discussed",
|
||||
"blockers",
|
||||
"commitments",
|
||||
"homework",
|
||||
"emotional_themes",
|
||||
"important_quotes",
|
||||
"follow_up_email",
|
||||
"next_session_prep",
|
||||
"private_coach_notes",
|
||||
"shared_client_notes",
|
||||
];
|
||||
|
||||
function editableSessionPayload(data) {
|
||||
const payload = {};
|
||||
|
||||
for (const field of editableSessionFields) {
|
||||
if (Object.prototype.hasOwnProperty.call(data, field)) {
|
||||
payload[field] = data[field];
|
||||
}
|
||||
}
|
||||
|
||||
return payload;
|
||||
}
|
||||
|
||||
function draftChanges(session, data, userId) {
|
||||
return {
|
||||
...editableSessionPayload(data),
|
||||
status: "draft",
|
||||
revision: Number(session.revision || 1) + 1,
|
||||
approved_at: null,
|
||||
approved_by_id: null,
|
||||
shared_at: null,
|
||||
shared_by_id: null,
|
||||
updatedById: userId,
|
||||
};
|
||||
}
|
||||
|
||||
function approvalChanges(session, userId, now = new Date()) {
|
||||
if (!String(session.shared_client_notes || "").trim()) {
|
||||
const error = new Error("Shared client notes are required before approval");
|
||||
error.code = 400;
|
||||
throw error;
|
||||
}
|
||||
|
||||
return {
|
||||
status: "approved",
|
||||
approved_at: now,
|
||||
approved_by_id: userId,
|
||||
updatedById: userId,
|
||||
};
|
||||
}
|
||||
|
||||
function shareChanges(session, userId, now = new Date()) {
|
||||
if (session.status !== "approved") {
|
||||
const error = new Error("Session must be approved before sharing");
|
||||
error.code = 409;
|
||||
throw error;
|
||||
}
|
||||
|
||||
return {
|
||||
status: "shared",
|
||||
shared_at: now,
|
||||
shared_by_id: userId,
|
||||
unshared_at: null,
|
||||
unshared_by_id: null,
|
||||
updatedById: userId,
|
||||
};
|
||||
}
|
||||
|
||||
function unshareChanges(userId, now = new Date()) {
|
||||
return {
|
||||
status: "unshared",
|
||||
unshared_at: now,
|
||||
unshared_by_id: userId,
|
||||
updatedById: userId,
|
||||
};
|
||||
}
|
||||
|
||||
module.exports = {
|
||||
editableSessionPayload,
|
||||
draftChanges,
|
||||
approvalChanges,
|
||||
shareChanges,
|
||||
unshareChanges,
|
||||
};
|
||||
24
backend/src/security/tokenRevocation.js
Normal file
24
backend/src/security/tokenRevocation.js
Normal file
@ -0,0 +1,24 @@
|
||||
const revokedTokens = new Map();
|
||||
|
||||
function removeExpiredTokens(nowSeconds) {
|
||||
for (const [tokenId, expiresAt] of revokedTokens.entries()) {
|
||||
if (expiresAt <= nowSeconds) {
|
||||
revokedTokens.delete(tokenId);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
function revokeToken(payload) {
|
||||
if (!payload || !payload.jti || !payload.exp) {
|
||||
return;
|
||||
}
|
||||
|
||||
revokedTokens.set(payload.jti, payload.exp);
|
||||
}
|
||||
|
||||
function isTokenRevoked(payload, nowSeconds = Math.floor(Date.now() / 1000)) {
|
||||
removeExpiredTokens(nowSeconds);
|
||||
return Boolean(payload && payload.jti && revokedTokens.has(payload.jti));
|
||||
}
|
||||
|
||||
module.exports = { isTokenRevoked, revokeToken };
|
||||
169
backend/src/security/workspaceSettings.js
Normal file
169
backend/src/security/workspaceSettings.js
Normal file
@ -0,0 +1,169 @@
|
||||
const allowedBrandColors = ["teal", "navy", "indigo", "forest", "clay"];
|
||||
const reservedHost = /(^|\.)(example\.(com|org|net)|test|invalid|localhost)$/i;
|
||||
|
||||
function validPublishedUrl(value) {
|
||||
if (!value) {
|
||||
return false;
|
||||
}
|
||||
|
||||
try {
|
||||
const url = new URL(value);
|
||||
return url.protocol === "https:" && !reservedHost.test(url.hostname) && !/your-coach/i.test(url.href);
|
||||
} catch {
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
function validCustomDomain(value) {
|
||||
if (!value) {
|
||||
return true;
|
||||
}
|
||||
|
||||
const hostname = String(value).trim().toLowerCase().replace(/^https?:\/\//, "").split('/')[0];
|
||||
return /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/.test(hostname) && !reservedHost.test(hostname);
|
||||
}
|
||||
|
||||
function validateWorkspaceSettings(data) {
|
||||
const errors = [];
|
||||
|
||||
if (data.brand_color && !allowedBrandColors.includes(data.brand_color)) {
|
||||
errors.push("brand_color_invalid");
|
||||
}
|
||||
|
||||
if (data.default_booking_url && !validPublishedUrl(data.default_booking_url)) {
|
||||
errors.push("booking_url_invalid");
|
||||
}
|
||||
|
||||
if (data.logo_url && !validPublishedUrl(data.logo_url)) {
|
||||
errors.push("logo_url_invalid");
|
||||
}
|
||||
|
||||
if (data.coach_photo_url && !validPublishedUrl(data.coach_photo_url)) {
|
||||
errors.push("coach_photo_url_invalid");
|
||||
}
|
||||
|
||||
if (!validCustomDomain(data.custom_domain)) {
|
||||
errors.push("custom_domain_invalid");
|
||||
}
|
||||
|
||||
if (data.default_reminder_minutes && ![10, 60, 1440].includes(Number(data.default_reminder_minutes))) {
|
||||
errors.push("default_reminder_minutes_invalid");
|
||||
}
|
||||
|
||||
if (!Array.isArray(data.social_links)) {
|
||||
errors.push("social_links_invalid");
|
||||
} else if (data.social_links.some((link) => !link || !String(link.label || "").trim() || !validPublishedUrl(link.href))) {
|
||||
errors.push("social_links_invalid");
|
||||
}
|
||||
|
||||
if (!Array.isArray(data.packages)) {
|
||||
errors.push("packages_invalid");
|
||||
} else if (data.packages.some((item) => {
|
||||
if (!item || !String(item.name || "").trim()) {
|
||||
return true;
|
||||
}
|
||||
|
||||
return Boolean(item.booking_url) && !validPublishedUrl(item.booking_url);
|
||||
})) {
|
||||
errors.push("packages_invalid");
|
||||
}
|
||||
|
||||
if (!Array.isArray(data.testimonials)) {
|
||||
errors.push("testimonials_invalid");
|
||||
}
|
||||
|
||||
if (data.published) {
|
||||
const practiceName = String(data.practice_name || "").trim();
|
||||
const coachName = String(data.coach_name || "").trim();
|
||||
const contactEmail = String(data.contact_email || "").trim();
|
||||
const coachBio = String(data.coach_bio || "").trim();
|
||||
|
||||
if (!practiceName) {
|
||||
errors.push("practice_name_required");
|
||||
} else if (/^(demo coaching practice|sample coaching practice|your practice)$/i.test(practiceName)) {
|
||||
errors.push("practice_name_placeholder");
|
||||
}
|
||||
|
||||
if (!coachName) {
|
||||
errors.push("coach_name_required");
|
||||
} else if (/^(demo coach|sample coach|your coach)$/i.test(coachName)) {
|
||||
errors.push("coach_name_placeholder");
|
||||
}
|
||||
|
||||
if (!/^\S+@\S+\.\S+$/.test(contactEmail) || /@example\.(com|org|net)$|\.invalid$/i.test(contactEmail)) {
|
||||
errors.push("contact_email_invalid");
|
||||
}
|
||||
|
||||
if (coachBio.length < 40) {
|
||||
errors.push("coach_bio_required");
|
||||
}
|
||||
|
||||
if (!validPublishedUrl(data.default_booking_url)) {
|
||||
errors.push("booking_url_required");
|
||||
}
|
||||
|
||||
if (!Array.isArray(data.packages) || data.packages.length === 0) {
|
||||
errors.push("published_package_required");
|
||||
}
|
||||
|
||||
if (!String(data.legal_entity_name || "").trim()) {
|
||||
errors.push("legal_entity_name_required");
|
||||
}
|
||||
|
||||
if (!/^\S+@\S+\.\S+$/.test(String(data.legal_contact_email || "")) || /@example\.(com|org|net)$|\.invalid$/i.test(String(data.legal_contact_email || ""))) {
|
||||
errors.push("legal_contact_email_invalid");
|
||||
}
|
||||
|
||||
if (!/^\d{4}-\d{2}-\d{2}$/.test(String(data.legal_terms_effective_date || ""))) {
|
||||
errors.push("legal_terms_effective_date_required");
|
||||
}
|
||||
|
||||
if (data.legal_review_confirmed !== true) {
|
||||
errors.push("legal_review_required");
|
||||
}
|
||||
}
|
||||
|
||||
return errors;
|
||||
}
|
||||
|
||||
function publicWorkspaceSettings(settings) {
|
||||
if (!settings.published) {
|
||||
return { published: false };
|
||||
}
|
||||
|
||||
const socialLinks = Array.isArray(settings.social_links) ? settings.social_links : [];
|
||||
const packages = Array.isArray(settings.packages) ? settings.packages : [];
|
||||
const testimonials = Array.isArray(settings.testimonials) ? settings.testimonials : [];
|
||||
|
||||
return {
|
||||
practice_name: settings.practice_name,
|
||||
logo_url: validPublishedUrl(settings.logo_url) ? settings.logo_url : null,
|
||||
coach_name: settings.coach_name,
|
||||
coach_photo_url: validPublishedUrl(settings.coach_photo_url) ? settings.coach_photo_url : null,
|
||||
coach_bio: settings.coach_bio,
|
||||
coach_credentials: settings.coach_credentials,
|
||||
coach_niche: settings.coach_niche,
|
||||
brand_color: settings.brand_color,
|
||||
default_booking_url: validPublishedUrl(settings.default_booking_url) ? settings.default_booking_url : null,
|
||||
contact_email: settings.contact_email,
|
||||
social_links: socialLinks
|
||||
.filter((link) => link && String(link.label || "").trim() && validPublishedUrl(link.href))
|
||||
.map((link) => ({ label: String(link.label).trim(), href: link.href })),
|
||||
packages: packages.map((item) => ({
|
||||
slug: item.slug,
|
||||
name: item.name,
|
||||
description: item.description,
|
||||
duration: item.duration,
|
||||
price: item.price,
|
||||
cta_label: item.cta_label,
|
||||
booking_url: validPublishedUrl(item.booking_url) ? item.booking_url : null,
|
||||
items: Array.isArray(item.items) ? item.items.map(String) : [],
|
||||
})),
|
||||
testimonials: testimonials
|
||||
.filter((item) => item && (item.verified === true || item.permission_granted === true))
|
||||
.map((item) => ({ quote: item.quote, name: item.name, role: item.role })),
|
||||
published: true,
|
||||
};
|
||||
}
|
||||
|
||||
module.exports = { allowedBrandColors, validCustomDomain, validPublishedUrl, validateWorkspaceSettings, publicWorkspaceSettings };
|
||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
x
Reference in New Issue
Block a user