Refactor

apps/backend/jest.setup.ts → apps/api/jest.setup.ts

@@ -3,7 +3,7 @@ import { drizzle } from "drizzle-orm/pglite";
 import { jest, afterEach, beforeAll, afterAll } from "@jest/globals";
 import * as schema from "@repo/database/schema";
 import { db, dbPush, dbReset } from "@repo/database";
-import redis from "@repo/backend/redis";
+import redis from "@repo/api/redis";
 
 jest.mock("@repo/database", () => {
   const originalModule =
@@ -18,12 +18,12 @@ jest.mock("@repo/database", () => {
   };
 });
 
-jest.mock("@repo/backend/middlewares/rate-limit", () => {
+jest.mock("@repo/api/middlewares/rate-limit", () => {
   const originalModule = jest.requireActual<
-    typeof import("@repo/backend/middlewares/rate-limit")
-  >("@repo/backend/middlewares/rate-limit");
+    typeof import("@repo/api/middlewares/rate-limit")
+  >("@repo/api/middlewares/rate-limit");
 
-  const rateLimitHandler = jest
+  const rateLimitMiddleware = jest
     .fn()
     .mockReturnValue((_: Request, __: Response, next: NextFunction) => {
       next();
@@ -32,7 +32,7 @@ jest.mock("@repo/backend/middlewares/rate-limit", () => {
   return {
     ...originalModule,
     __esModule: true,
-    rateLimitHandler,
+    rateLimitMiddleware,
   };
 });
 

apps/backend/package.json → apps/api/package.json

@@ -1,8 +1,13 @@
 {
-  "name": "backend",
+  "name": "@repo/api",
   "version": "0.0.0",
   "type": "module",
   "private": true,
+  "exports": {
+    "./router": {
+      "types": "./dist/modules/index.d.ts"
+    }
+  },
   "scripts": {
     "start": "node dist/index.js",
     "predev": "docker compose -f ../../docker-compose.yml --profile redis up -d",
@@ -16,7 +21,7 @@
   "jest": {
     "preset": "@repo/jest-presets/node",
     "moduleNameMapper": {
-      "^@repo/backend/(.*)$": "<rootDir>/src/$1"
+      "^@repo/api/(.*)$": "<rootDir>/src/$1"
     },
     "setupFilesAfterEnv": [
       "<rootDir>/jest.setup.ts"
@@ -25,13 +30,13 @@
   "dependencies": {
     "@electric-sql/pglite": "^0.2.17",
     "@repo/database": "*",
+    "@repo/typiserver": "*",
     "argon2": "^0.41.1",
     "cookie-parser": "^1.4.7",
     "cors": "^2.8.5",
     "drizzle-orm": "^0.40.0",
     "drizzle-zod": "^0.7.0",
     "express": "^5.0.1",
-    "http-status-codes": "^2.3.0",
     "ioredis": "^5.6.0",
     "jsonwebtoken": "^9.0.2",
     "morgan": "^1.10.0",

apps/backend/src/env/index.ts → apps/api/src/env/index.ts

@@ -1,4 +1,4 @@
-import { z, ZodError } from "zod";
+import { z } from "zod";
 
 const timeSpanType = z
   .string()
@@ -9,7 +9,7 @@ const envSchema = z.object({
   // Node Environment
   NODE_ENV: z.enum(["development", "test", "production"]),
 
-  RESET_DB: z.coerce.boolean(),
+  RESET_DB: z.coerce.string().default("false"),
 
   PORT: z.coerce.number().positive().int().default(5000),
 
@@ -75,10 +75,9 @@ const envSchema = z.object({
 });
 
 const envValidate = () => {
-  try {
-    envSchema.parse(process.env);
-  } catch (error) {
-    if (error instanceof ZodError) console.error(error.errors);
+  const { error } = envSchema.safeParse(process.env);
+  if (error) {
+    console.error(error.errors);
     process.exit(1);
   }
 };
@@ -87,7 +86,7 @@ declare global {
   // eslint-disable-next-line @typescript-eslint/no-namespace
   namespace NodeJS {
     // eslint-disable-next-line @typescript-eslint/no-empty-object-type
-    interface ProcessEnv extends z.infer<typeof environmentVariableSchema> {}
+    interface ProcessEnv extends z.infer<typeof envSchema> {}
   }
 }
 

apps/backend/src/index.ts → apps/api/src/index.ts

@@ -1,11 +1,16 @@
-import { createServer } from "@repo/backend/server";
-import envValidate from "@repo/backend/env";
-import { dbPush, dbReset, dbSeed, dbWaitForConnection } from "@repo/database";
+import { createServer } from "@repo/api/server";
+import envValidate from "@repo/api/env";
+import {
+  dbPush,
+  dbReset,
+  dbSeed,
+  dbWaitForConnection,
+} from "@repo/database/scripts";
 
 envValidate();
 await dbWaitForConnection();
 
-if (process.env.NODE_ENV === "development" && process.env.RESET_DB === true) {
+if (process.env.NODE_ENV === "development" && process.env.RESET_DB === "true") {
   await dbPush();
   await dbReset();
   await dbSeed();

apps/api/src/middlewares/auth.ts

@@ -0,0 +1,27 @@
+import { Request } from "express";
+import { jwtVerifyAccessToken } from "@repo/api/utils/jwt";
+import { attempt } from "@repo/api/utils";
+import { RouteHandlerContext } from "@repo/typiserver";
+
+export interface AuthenticatedRequest extends Request {
+  userId: number;
+}
+
+const authMiddleware = async (ctx: RouteHandlerContext) => {
+  // const { authorization } = req.headers;
+  // if (!authorization) return ctx.error("UNAUTHORIZED", Authorization header not found.");
+
+  // const token = authorization.split(" ")[1];
+  // if (!token) return ctx.error("UNAUTHORIZED", "No token provided.");
+
+  const token = ctx.request.cookies[process.env.JWT_ACCESS_TOKEN_COOKIE_KEY];
+
+  const [error, data] = await attempt(() => jwtVerifyAccessToken(token));
+  if (error) return ctx.error("UNAUTHORIZED", error.message);
+
+  return ctx.success({
+    userId: data.userId,
+  });
+};
+
+export default authMiddleware;

apps/api/src/middlewares/error.ts

@@ -0,0 +1,21 @@
+import { getStatus } from "@repo/typiserver/http";
+import { Request, Response, ErrorRequestHandler, NextFunction } from "express";
+
+const errorHandler: ErrorRequestHandler = (
+  error: unknown,
+  req: Request,
+  res: Response,
+  next: NextFunction
+) => {
+  const status = getStatus("INTERNAL_SERVER_ERROR");
+
+  res.status(status.code).json({
+    key: status.key,
+    code: status.code,
+    label: status.label,
+    message:
+      error instanceof Error ? error.message : "An unexpected error occurred",
+  });
+};
+
+export default errorHandler;

apps/api/src/middlewares/rate-limit.ts

@@ -0,0 +1,35 @@
+import redis from "@repo/api/redis";
+import { parseTimeSpan, type TimeSpan } from "@repo/api/utils/time";
+import { RouteHandlerContext } from "@repo/typiserver";
+
+const rateLimitMiddleware = ({
+  endpoint = "global",
+  timeSpan,
+  limit,
+  message,
+}: {
+  timeSpan: TimeSpan;
+  limit: number;
+  endpoint?: string;
+  message?: string;
+}) => {
+  return async (ctx: RouteHandlerContext) => {
+    const { ip } = ctx.request;
+    const redisId = `rate-limit:${endpoint}/${ip}`;
+
+    const requests = await redis.incr(redisId);
+    if (requests === 1) await redis.expire(redisId, parseTimeSpan(timeSpan));
+
+    limit = process.env.NODE_ENV === "development" ? Infinity : limit;
+    if (requests > limit) {
+      return ctx.error(
+        "TOO_MANY_REQUESTS",
+        message ?? "Too many requests, please try again later"
+      );
+    }
+
+    return ctx.success();
+  };
+};
+
+export default rateLimitMiddleware;