🚀 Demo server

import express from 'express';
import cookieParser from 'cookie-parser';
import {
  AuthConfigurator,
  createAdminRouter,
  PasswordService,
  IUserStore,
  BaseUser,
  ISettingsStore,
  AuthSettings,
} from '@nik2208/node-auth';

// ── 1. In-memory user store ───────────────────────────────────────────────────
//  Stores users in a plain Map<string, BaseUser>.
//  All data is lost when the server restarts — do not use in production.

class InMemoryUserStore implements IUserStore {
  private users = new Map<string, BaseUser>();
  private nextId = 1;

  async findByEmail(email: string) {
    return [...this.users.values()].find(u => u.email === email) ?? null;
  }
  async findById(id: string) { return this.users.get(id) ?? null; }

  async create(data: Partial<BaseUser>): Promise<BaseUser> {
    const id = String(this.nextId++);
    const user: BaseUser = { id, email: data.email ?? '', ...data };
    this.users.set(id, user);
    return user;
  }

  async updateRefreshToken(id: string, token: string | null, expiry: Date | null) {
    const u = this.users.get(id);
    if (u) { u.refreshToken = token; u.refreshTokenExpiry = expiry; }
  }
  async updateLastLogin(id: string) {
    const u = this.users.get(id); if (u) u.lastLogin = new Date();
  }
  async updateResetToken(id: string, token: string | null, expiry: Date | null) {
    const u = this.users.get(id);
    if (u) { u.resetToken = token; u.resetTokenExpiry = expiry; }
  }
  async updatePassword(id: string, hashed: string) {
    const u = this.users.get(id); if (u) u.password = hashed;
  }
  async updateTotpSecret(id: string, secret: string | null) {
    const u = this.users.get(id);
    if (u) { u.totpSecret = secret; u.isTotpEnabled = secret !== null; }
  }
  async updateMagicLinkToken(id: string, token: string | null, expiry: Date | null) {
    const u = this.users.get(id);
    if (u) { u.magicLinkToken = token; u.magicLinkTokenExpiry = expiry; }
  }
  async updateSmsCode(id: string, code: string | null, expiry: Date | null) {
    const u = this.users.get(id);
    if (u) { u.smsCode = code; u.smsCodeExpiry = expiry; }
  }

  // Required for the admin panel users table and user deletion:
  async listUsers(limit: number, offset: number) {
    return [...this.users.values()].slice(offset, offset + limit);
  }
  async deleteUser(id: string) { this.users.delete(id); }
}

// ── 2. In-memory settings store ───────────────────────────────────────────────
//  Enables the ⚙️ Control tab in the admin panel (email verification policy,
//  mandatory 2FA toggle, lazy grace-period days, etc.).

class InMemorySettingsStore implements ISettingsStore {
  private settings: AuthSettings = {};
  async getSettings() { return { ...this.settings }; }
  async updateSettings(updates: Partial<AuthSettings>) {
    this.settings = { ...this.settings, ...updates };
  }
}

// ── 3. Wire everything together ───────────────────────────────────────────────

const app = express();
app.use(express.json());
app.use(cookieParser());  // needed to read/write JWT cookies

const userStore     = new InMemoryUserStore();
const settingsStore = new InMemorySettingsStore();
const passwordService = new PasswordService();

const config = {
  accessTokenSecret:    'demo-access-secret-change-in-production',
  refreshTokenSecret:   'demo-refresh-secret-change-in-production',
  accessTokenExpiresIn: '15m',
  refreshTokenExpiresIn: '7d',
  cookieOptions: { secure: false, sameSite: 'lax' as const },
};

const auth = new AuthConfigurator(config, userStore);

// ── 4. Auth routes ────────────────────────────────────────────────────────────
//  POST /auth/register  — create a new account
//  POST /auth/login     — email + password → sets HttpOnly JWT cookies
//  GET  /auth/me        — return the authenticated user's profile
//  POST /auth/logout    — clear JWT cookies
//  POST /auth/refresh   — rotate the access token using the refresh cookie

app.use('/auth', auth.router({
  onRegister: async (data) => {
    const hashed = await passwordService.hash(data.password as string);
    return userStore.create({
      email:    data.email    as string,
      password: hashed,
      role:     'user',
    });
  },
}));

// ── 5. A custom protected route ───────────────────────────────────────────────
//  auth.middleware() verifies the access-token cookie (or Bearer header).
//  req.user contains { sub, email, role, ... } from the JWT payload.

app.get('/profile', auth.middleware(), (req, res) => {
  res.json({ message: 'You are authenticated!', user: req.user });
});

// ── 6. Admin panel ────────────────────────────────────────────────────────────
//  Browse to http://localhost:3000/admin and enter the password below.
//  The built-in UI lets you list/delete users and tweak auth settings.

app.use('/admin', createAdminRouter(userStore, {
  adminSecret: '1234',     // ← change this in production!
  settingsStore,
}));

// ── 7. Start ──────────────────────────────────────────────────────────────────

app.listen(3000, () => {
  console.log('');
  console.log('  Demo running  →  http://localhost:3000');
  console.log('  Admin panel   →  http://localhost:3000/admin   (password: 1234)');
  console.log('');
});