final:fixed

Author: doTryCatch

.env

@@ -1,19 +1,7 @@
 
-# Environment variables declared in this file are automatically made available to Prisma.
-# See the documentation for more detail: https://pris.ly/d/prisma-schema#accessing-environment-variables-from-the-schema
-
-# Prisma supports the native connection string format for PostgreSQL, MySQL, SQLite, SQL Server, MongoDB and CockroachDB.
-# See the documentation for all the connection string options: https://pris.ly/d/connection-strings
-
-# The following `prisma+postgres` URL is similar to the URL produced by running a local Prisma Postgres 
-# server with the `prisma dev` CLI command, when not choosing any non-default ports or settings. The API key, unlike the 
-# one found in a remote Prisma Postgres URL, does not contain any sensitive information.
-
 # add you own url and secret key
 # DATABASE_URL="postgresql://username:password@host:port/database"
 # JWT_SECRET="your-secret-key"
 
-# DATABASE_URL="postgresql://postgres.uycuryvjjhznvsfumxre:[email protected]:5432/postgres"
-# JWT_SECRET="roshanishacker"
 DATABASE_URL="postgresql://postgres.uycuryvjjhznvsfumxre:[email protected]:5432/postgres"
 JWT_SECRET="roshanishacker"

Dockerfile

@@ -18,7 +18,6 @@ FROM node:20-alpine
 WORKDIR /app
 RUN npm install -g pnpm
 
-# Set production environment
 ENV NODE_ENV=production
 
 COPY package.json pnpm-lock.yaml ./
@@ -28,7 +27,6 @@ COPY --from=builder /app/dist ./dist
 COPY --from=builder /app/node_modules ./node_modules
 COPY prisma ./prisma
 
-# Generate Prisma client for production
 RUN pnpm exec prisma generate
 
 EXPOSE 4000

src/controllers/authController.ts

@@ -5,7 +5,6 @@ import { RegisterInput, LoginInput } from "../dto/auth.dto";
 class AuthController {
   private service = new AuthService();
 
-  // Register user
   register = async (req: Request, res: Response) => {
     try {
       const body = req.body as RegisterInput;
@@ -26,18 +25,16 @@ class AuthController {
     }
   };
 
-  // Login user
   login = async (req: Request, res: Response) => {
     try {
       const body = req.body as LoginInput;
       const result = await this.service.login(body.email, body.password);
 
-      // Set JWT token as HTTP-only cookie
       res.cookie("token", result.token, {
         httpOnly: true,
         secure: process.env.NODE_ENV === "production",
         sameSite: process.env.NODE_ENV === "production" ? "none" : "lax",
-        maxAge: 24 * 60 * 60 * 1000, // 1 day
+        maxAge: 24 * 60 * 60 * 1000,
         domain: process.env.COOKIE_DOMAIN || undefined,
         path: "/",
       });
@@ -57,7 +54,6 @@ class AuthController {
     }
   };
 
-  // Logout user
   logout = async (req: Request, res: Response) => {
     res.clearCookie("token", {
       httpOnly: true,

src/server.ts

@@ -5,34 +5,31 @@ import router from "./routes/router";
 import cookieParser from "cookie-parser";
 import cors from "cors";
 
-// Load environment variables
 dotenv.config();
 const PORT = Number(process.env.PORT) || 4000;
 const app = express();
 app.use(express.json());
 
 app.use(cookieParser());
 
-// CORS options
 const corsOptions = {
   origin:
     process.env.NODE_ENV === "production"
       ? [
           "https://blog-content-management-demo.vercel.app",
           "https://blogcontentmanagement.netlify.app",
-          ...(process.env.FRONTEND_URL ? [process.env.FRONTEND_URL] : []), // Add custom frontend URL if provided
+          ...(process.env.FRONTEND_URL ? [process.env.FRONTEND_URL] : []),
         ]
-      : true, // Allow all origins in development
-  credentials: true, // allow cookies to be sent
-  methods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"], // Explicitly allow methods
-  allowedHeaders: ["Content-Type", "Authorization", "Cookie"], // Allow headers including cookies
-  optionsSuccessStatus: 200, // For legacy browser support
+      : true,
+  credentials: true,
+  methods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
+  allowedHeaders: ["Content-Type", "Authorization", "Cookie"],
+  optionsSuccessStatus: 200,
 };
 
 app.use(cors(corsOptions));
 app.use(morgan("combined"));
 
-// Health check endpoint
 app.get("/health", (req, res) => {
   res.status(200).json({
     status: "OK",
@@ -45,8 +42,8 @@ app.get("/health", (req, res) => {
 app.use("/api", router);
 
 app.listen(PORT, "0.0.0.0", () => {
-  console.log(`🚀 App is running and listening on port: ${PORT}`);
-  console.log(`🌍 Environment: ${process.env.NODE_ENV || "development"}`);
-  console.log(`🍪 Cookie domain: ${process.env.COOKIE_DOMAIN || "not set"}`);
-  console.log(`🔗 Frontend URL: ${process.env.FRONTEND_URL || "not set"}`);
+  console.log(`App is running and listening on port: ${PORT}`);
+  console.log(`Environment: ${process.env.NODE_ENV || "development"}`);
+  console.log(`Cookie domain: ${process.env.COOKIE_DOMAIN || "not set"}`);
+  console.log(`Frontend URL: ${process.env.FRONTEND_URL || "not set"}`);
 });

src/services/authServices.ts

@@ -4,23 +4,19 @@ import { generateToken } from "../utils/generateTokenJWT";
 import { Response } from "express";
 
 export class AuthService {
-  // Register a new user
   async register(
     email: string,
     password: string,
     name?: string,
     role?: "USER" | "ADMIN",
   ) {
-    //  Check if user already exists
     const existingUser = await prisma.user.findUnique({ where: { email } });
     if (existingUser) {
       throw new Error("A user with this email already exists");
     }
 
-    //Hash the password
     const hashedPassword = await bcrypt.hash(password, 12);
 
-    //Create new user
     const user = await prisma.user.create({
       data: {
         email,
@@ -30,7 +26,6 @@ export class AuthService {
       },
     });
 
-    //  Generate JWT token
     const token = generateToken({
       id: user.id,
       email: user.email,
@@ -41,17 +36,13 @@ export class AuthService {
     return { user, token };
   }
 
-  //  Login existing user
   async login(email: string, password: string) {
-    //  Find user by email
     const user = await prisma.user.findUnique({ where: { email } });
     if (!user) throw new Error("User not found");
 
-    //  Compare password
     const isMatch = await bcrypt.compare(password, user.password);
     if (!isMatch) throw new Error("Invalid credentials");
 
-    //  Generate token
     const token = generateToken({
       id: user.id,
       email: user.email,
@@ -62,7 +53,6 @@ export class AuthService {
     return { user, token };
   }
 
-  // Logout user (clear JWT cookie)
   async logout(res: Response) {
     try {
       res.clearCookie("token", {