chore: auth.controller corrected

Author: NiranjanaNS

backend/package.json

@@ -9,22 +9,29 @@
   },
   "dependencies": {
     "@aws-sdk/client-s3": "^3.962.0",
+    "bcrypt": "^6.0.0",
+    "cors": "^2.8.5",
     "dotenv": "^17.2.3",
     "express": "^5.2.1",
     "form-data": "^4.0.5",
+    "jsonwebtoken": "^9.0.3",
     "mailgun.js": "^12.4.1",
     "multer": "^2.0.2",
     "pg": "^8.16.3",
     "pino": "^10.1.0",
     "pino-http": "^11.0.0",
     "reflect-metadata": "^0.2.2",
+    "twilio": "^5.11.1",
     "typeorm": "^0.3.28"
   },
   "devDependencies": {
     "@commitlint/cli": "^20.2.0",
     "@commitlint/config-conventional": "^20.2.0",
     "@eslint/js": "^9.39.2",
+    "@types/bcrypt": "^6.0.0",
+    "@types/cors": "^2.8.19",
     "@types/express": "^5.0.6",
+    "@types/jsonwebtoken": "^9.0.10",
     "@types/multer": "^2.0.0",
     "@types/node": "^25.0.3",
     "@types/pg": "^8.16.0",

backend/src/Services/authToken.ts

@@ -0,0 +1,28 @@
+import { appDataSouce } from '../data-source';
+import { RefreshTokenEntity } from '../entities/refreshToken';
+import { User } from '../entities/User';
+import { generateRefreshToken, hashRefreshToken } from './refreshToken';
+const REFRESH_TOKEN_DAYS = 30;
+
+export const createRefreshTokenSession = async (user: User) => {
+  const refreshToken = generateRefreshToken();
+  console.log('Raw refresh token generated');
+
+  const tokenHash = hashRefreshToken(refreshToken);
+  console.log('Token hashed');
+
+  const expiresAt = new Date();
+
+  expiresAt.setDate(expiresAt.getDate() + REFRESH_TOKEN_DAYS);
+
+  const repo = appDataSouce.getRepository(RefreshTokenEntity);
+  console.log('Got refresh token repository');
+
+  await repo.save({
+    tokenHash,
+    user,
+    expiresAt,
+  });
+  console.log('Refresh token saved');
+  return refreshToken;
+};

backend/src/Services/jwt.service.ts

@@ -0,0 +1,10 @@
+import jwt from 'jsonwebtoken';
+
+export const signAccessToken = (payload: { userId: string }) => {
+  return jwt.sign(payload, process.env.ACCESS_TOKEN_SECRET!, {
+    expiresIn: '15m',
+  });
+};
+export const verifyAccessToken = (token: string) => {
+  return jwt.verify(token, process.env.ACCESS_TOKEN_SECRET!);
+};

backend/src/Services/refreshToken.ts

@@ -0,0 +1,7 @@
+import crypto from 'crypto';
+export const generateRefreshToken = (): string => {
+  return crypto.randomBytes(64).toString();
+};
+export const hashRefreshToken = (token: string) => {
+  return crypto.createHash('sha256').update(token).digest('hex');
+};

backend/src/Services/sms.service.ts

@@ -0,0 +1,18 @@
+import Twilio from 'twilio';
+import { logger } from '../utils/logger';
+const accountSid = process.env.TWILIO_ACCOUNT_SID!;
+const authToken = process.env.TWILIO_AUTH_TOKEN!;
+const fromNumber = process.env.TWILIO_FROM_NUMBER!;
+const client = Twilio(accountSid, authToken);
+export const sendOtpSms = async (phoneNumber: string, otp: string) => {
+  try {
+    await client.messages.create({
+      body: `otp is ${otp}`,
+      from: fromNumber,
+      to: phoneNumber,
+    });
+  } catch (err) {
+    logger.error({ err }, 'failed to send otp');
+    throw new Error('failed to send');
+  }
+};

backend/src/app.ts

@@ -1,4 +1,5 @@
 import express from 'express';
+import cors from 'cors';
 import { pinoHttp } from 'pino-http';
 import { logger } from './utils/logger';
 import { notFound } from './middleware/notFound';
@@ -8,6 +9,7 @@ import authRouter from './modules/auth/auth.routes';
 import userRouter from './modules/user/user.routes';
 
 const app = express();
+app.use(cors());
 app.use(express.json());
 app.use(
   pinoHttp({ logger, autoLogging: { ignore: (req) => req.url === 'health' } }),

backend/src/data-source.ts

@@ -2,6 +2,7 @@ import 'dotenv/config';
 import { DataSource } from 'typeorm';
 import { User } from './entities/User';
 import { Otp } from './entities/opt';
+import { RefreshTokenEntity } from './entities/refreshToken';
 if (!process.env.DATABASE_URL) {
   throw new Error('DATABASE_URL is not defined');
 }
@@ -11,6 +12,6 @@ export const appDataSource = new DataSource({
   ssl: {
     rejectUnauthorized: false,
   },
-  entities: [User, Otp],
+  entities: [User, Otp, RefreshTokenEntity],
   synchronize: true,
 });

backend/src/entities/User.ts

@@ -10,9 +10,12 @@ export class User {
   @PrimaryGeneratedColumn('uuid')
   id!: string;
 
-  @Column({ unique: true })
+  @Column({ unique: true, nullable: true })
   email!: string;
 
+  @Column({ unique: true, nullable: true })
+  phoneNumber!: string;
+
   @Column()
   name!: string;
 
@@ -28,6 +31,12 @@ export class User {
   @Column({ nullable: true })
   profileImageUrl?: string;
 
+  @Column({ nullable: true })
+  passwordHash?: string;
+
+  @Column({ default: false })
+  isPhoneVerified!: boolean;
+
   @CreateDateColumn()
   createdAt!: Date;
 }

backend/src/entities/opt.ts

@@ -10,7 +10,7 @@ export class Otp {
   @PrimaryGeneratedColumn('uuid')
   id!: string;
   @Column()
-  email!: string;
+  phoneNumber!: string;
   @Column()
   otp!: string;
   @Column({ type: 'timestamp' })

backend/src/entities/refreshToken.ts

@@ -0,0 +1,28 @@
+import {
+  Entity,
+  PrimaryGeneratedColumn,
+  Column,
+  CreateDateColumn,
+  ManyToOne,
+} from 'typeorm';
+import { User } from './User';
+@Entity()
+export class RefreshTokenEntity {
+  @PrimaryGeneratedColumn('uuid')
+  id!: string;
+
+  @Column()
+  tokenHash!: string;
+
+  @Column()
+  expiresAt!: Date;
+
+  @Column({ default: false })
+  revoked!: boolean;
+
+  @ManyToOne(() => User, { onDelete: 'CASCADE' })
+  user!: User;
+
+  @CreateDateColumn()
+  createdAt!: Date;
+}