fix: update phone number change instructions in help/support FAQs for clarity and localization

feat: enhance card service and transaction notification for shared ac…

.env.example

@@ -0,0 +1,40 @@
+NODE_ENV=dev
+PORT=5000
+DB_HOST=
+DB_PASS=
+DB_USER=postgres
+DB_PORT=5432
+DB_NAME=
+MIGRATIONS_RUN=true
+SWAGGER_API_DOCS_PATH="/api-docs"
+
+JWT_ACCESS_TOKEN_SECRET=your_access_token_secret
+JWT_ACCESS_TOKEN_EXPIRY=1d
+JWT_REFRESH_TOKEN_SECRET=your_refresh_token_secret
+JWT_REFRESH_TOKEN_EXPIRY=1d
+USE_MOCK=true
+
+
+OCI_TENANCY_ID=
+OCI_USER_ID=
+OCI_FINGERPRINT=
+OCI_PRIVATE_KEY=
+OCI_PASSPHRASE=""
+OCI_NAMESPACE=
+OCI_REGION=
+
+
+MAIL_HOST=smtp.gmail.com
+MAIL_USER=[email protected]
+MAIL_PASSWORD=
+MAIL_PORT=587
+MAIL_FROM=UBA
+
+
+BRANCH_IO_URL=https://api2.branch.io/v1/url
+BRANCH_IO_KEY=
+ZOD_BASE_URL=http://localhost:5001
+ANDROID_PACKAGE_NAME=com.zod
+IOS_PACKAGE_NAME=com.zod
+ANDRIOD_JUNIOR_DEEPLINK_PATH=zodbank://juniors/qr-code/validate
+IOS_JUNIOR_DEEPLINK_PATH=zodbank://juniors/qr-code/validate

.eslintrc.js

@@ -0,0 +1,47 @@
+/** @type {import('eslint').Linter.Config} */
+module.exports = {
+  parser: '@typescript-eslint/parser',
+  parserOptions: {
+    project: 'tsconfig.json',
+    tsconfigRootDir: __dirname,
+    sourceType: 'module',
+  },
+  plugins: ['@typescript-eslint/eslint-plugin'],
+  extends: ['plugin:@typescript-eslint/recommended', 'plugin:prettier/recommended', 'plugin:security/recommended'],
+  root: true,
+  env: {
+    node: true,
+    jest: true,
+  },
+  ignorePatterns: ['.eslintrc.js', 'node_modules', 'dist', 'coverage', 'jest*\\.ts', 'typeorm*\\.ts'],
+  rules: {
+    '@typescript-eslint/interface-name-prefix': 'off',
+    '@typescript-eslint/explicit-function-return-type': 'off',
+    '@typescript-eslint/explicit-module-boundary-types': 'off',
+    '@typescript-eslint/no-explicit-any': 'off',
+    '@typescript-eslint/no-unused-vars': [
+      'warn',
+      { argsIgnorePattern: '^_', varsIgnorePattern: '^_', caughtErrorsIgnorePattern: '^_' },
+    ],
+    '@typescript-eslint/no-inferrable-types': 'off',
+    'func-names': ['error', 'as-needed'],
+    'no-underscore-dangle': ['error'],
+    'require-await': ['error'],
+    'no-console': ['error'],
+    'no-multi-assign': ['error'],
+    'no-magic-numbers': ['error', { ignoreArrayIndexes: true}],
+    'no-multiple-empty-lines': ['error', { max: 1, maxEOF: 1, maxBOF: 0 }],
+    'max-len': [
+      'error',
+      { code: 120, tabWidth: 2, ignoreUrls: true, ignoreStrings: true, ignoreTemplateLiterals: true },
+    ],
+  },
+  overrides: [
+    {
+      files: ['*spec.ts'],
+      rules: {
+        'no-magic-numbers': ['off'],
+      },
+    },
+  ],
+};

.github/workflows/ci-pipeline.yml

@@ -0,0 +1,85 @@
+name: CI Zod
+
+on:
+  pull_request:
+    branches:
+      - '*'
+  push:
+    branches:
+      - dev
+      - main
+
+env:
+  NODE_ENV: development
+  TAG: dev
+
+jobs:
+  install_dependencies:
+    name: Install Dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v3
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: 22.4.1
+
+      - name: Install Dependencies
+        run: npm install
+
+      - name: Cache Node Modules
+        uses: actions/cache@v3
+        with:
+          path: node_modules
+          key: ${{ runner.os }}-node_modules-${{ hashFiles('**/package-lock.json') }}
+          restore-keys: |
+            ${{ runner.os }}-node_modules-
+
+  run_tests:
+    name: Run Tests
+    runs-on: ubuntu-latest
+    needs: install_dependencies
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v3
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: 22.4.1
+
+      - name: Install Dependencies
+        run: npm install
+
+      - name: Run Lint
+        run: npm run lint
+
+      - name: Run Tests with Coverage
+        run: npm run test:cov
+
+  build_app:
+    name: Build Application
+    runs-on: ubuntu-latest
+    needs: run_tests
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v3
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: 22.4.1
+
+      - name: Install Dependencies
+        run: npm install
+
+      - name: Build Application
+        run: npm run build
+
+      - name: Upload Build Artifacts
+        uses: actions/upload-artifact@v3
+        with:
+          name: dist
+          path: dist/

.gitignore

@@ -1,24 +1,57 @@
-/static
-/media
-.idea/
-*.pyc
-media/
-*.name
-*.iml
-*.log
-*.xml
-*.pyo
-.DS_Store
-.idea
-venv/*
-static/*
-*.pem
-*.sqlite3
-/migrations/__pycache__/
-/__pycache__/
-/*.pyc
-*/__pycache__/*.pyc
-__pycache__/
-*.env
-ve/*
+# compiled output
+/dist
+/node_modules
+/build
 
+# Logs
+logs
+*.log
+npm-debug.log*
+pnpm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+
+# OS
+.DS_Store
+
+# Tests
+/coverage
+/.nyc_output
+
+# IDEs and editors
+/.idea
+.project
+.classpath
+.c9/
+*.launch
+.settings/
+*.sublime-workspace
+
+# IDE - VSCode
+.vscode/*
+!.vscode/settings.json
+
+
+# dotenv environment variable files
+.env
+.env.development.local
+.env.test.local
+.env.production.local
+.env.local
+
+# temp directory
+.temp
+.tmp
+
+# Runtime data
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Diagnostic reports (https://nodejs.org/api/report.html)
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+
+
+zod-certs

.prettierrc

@@ -0,0 +1,6 @@
+{
+  "singleQuote": true,
+  "trailingComma": "all",
+  "tabWidth": 2,
+  "printWidth": 120
+}

.vscode/settings.json

@@ -0,0 +1,6 @@
+{
+  "editor.formatOnSave": true,
+  "editor.codeActionsOnSave": {
+    "source.organizeImports": "explicit"
+  }
+}

Dockerfile

@@ -1,11 +0,0 @@
-FROM python:3.9
-ENV PYTHONUNBUFFERED 1  
-RUN mkdir /usr/src/app
-WORKDIR /usr/src/app
-COPY . .
-RUN apt-get update
-RUN apt-get install wkhtmltopdf -y
-RUN apt install -y gdal-bin python3-gdal
-RUN pip install -r requirements.txt  
-WORKDIR /usr/src/app
-

Dockerfile.local

@@ -0,0 +1,33 @@
+# Base image
+FROM node:22.4.1-alpine
+RUN apk update && \
+    apk upgrade && \
+    apk add ca-certificates curl && \
+    update-ca-certificates
+
+#saudi timezone
+ENV TZ=Asia/Riyadh
+
+# Create app directory
+RUN mkdir /app && chown node:node /app
+WORKDIR /app
+
+# finally switch user to node
+USER node
+
+
+# A wildcard is used to ensure both package.json, package-lock.json and package-lock.json are copied
+COPY --chown=node:node package*.json ./
+
+
+
+# Install app dependencies
+RUN npm install --frozen-lockfile
+# Bundle app source
+COPY --chown=node:node . .
+
+# Creates a "dist" folder with the production build
+RUN npm run build
+
+# Start the server using the production build
+CMD [ "node", "dist/main" ]

README.md

@@ -1 +1,99 @@
-# ZODBank-Backend
+<p align="center">
+  <a href="http://nestjs.com/" target="blank"><img src="https://nestjs.com/img/logo-small.svg" width="120" alt="Nest Logo" /></a>
+</p>
+
+[circleci-image]: https://img.shields.io/circleci/build/github/nestjs/nest/master?token=abc123def456
+[circleci-url]: https://circleci.com/gh/nestjs/nest
+
+  <p align="center">A progressive <a href="http://nodejs.org" target="_blank">Node.js</a> framework for building efficient and scalable server-side applications.</p>
+    <p align="center">
+<a href="https://www.npmjs.com/~nestjscore" target="_blank"><img src="https://img.shields.io/npm/v/@nestjs/core.svg" alt="NPM Version" /></a>
+<a href="https://www.npmjs.com/~nestjscore" target="_blank"><img src="https://img.shields.io/npm/l/@nestjs/core.svg" alt="Package License" /></a>
+<a href="https://www.npmjs.com/~nestjscore" target="_blank"><img src="https://img.shields.io/npm/dm/@nestjs/common.svg" alt="NPM Downloads" /></a>
+<a href="https://circleci.com/gh/nestjs/nest" target="_blank"><img src="https://img.shields.io/circleci/build/github/nestjs/nest/master" alt="CircleCI" /></a>
+<a href="https://coveralls.io/github/nestjs/nest?branch=master" target="_blank"><img src="https://coveralls.io/repos/github/nestjs/nest/badge.svg?branch=master#9" alt="Coverage" /></a>
+<a href="https://discord.gg/G7Qnnhy" target="_blank"><img src="https://img.shields.io/badge/discord-online-brightgreen.svg" alt="Discord"/></a>
+<a href="https://opencollective.com/nest#backer" target="_blank"><img src="https://opencollective.com/nest/backers/badge.svg" alt="Backers on Open Collective" /></a>
+<a href="https://opencollective.com/nest#sponsor" target="_blank"><img src="https://opencollective.com/nest/sponsors/badge.svg" alt="Sponsors on Open Collective" /></a>
+  <a href="https://paypal.me/kamilmysliwiec" target="_blank"><img src="https://img.shields.io/badge/Donate-PayPal-ff3f59.svg" alt="Donate us"/></a>
+    <a href="https://opencollective.com/nest#sponsor"  target="_blank"><img src="https://img.shields.io/badge/Support%20us-Open%20Collective-41B883.svg" alt="Support us"></a>
+  <a href="https://twitter.com/nestframework" target="_blank"><img src="https://img.shields.io/twitter/follow/nestframework.svg?style=social&label=Follow" alt="Follow us on Twitter"></a>
+</p>
+  <!--[![Backers on Open Collective](https://opencollective.com/nest/backers/badge.svg)](https://opencollective.com/nest#backer)
+  [![Sponsors on Open Collective](https://opencollective.com/nest/sponsors/badge.svg)](https://opencollective.com/nest#sponsor)-->
+
+## Description
+
+[Nest](https://github.com/nestjs/nest) framework TypeScript starter repository.
+
+## Project setup
+
+```bash
+$ npm install
+```
+
+## Compile and run the project
+
+```bash
+# development
+$ npm run start
+
+# watch mode
+$ npm run start:dev
+
+# production mode
+$ npm run start:prod
+```
+
+## Run tests
+
+```bash
+# unit tests
+$ npm run test
+
+# e2e tests
+$ npm run test:e2e
+
+# test coverage
+$ npm run test:cov
+```
+
+## Deployment
+
+When you're ready to deploy your NestJS application to production, there are some key steps you can take to ensure it runs as efficiently as possible. Check out the [deployment documentation](https://docs.nestjs.com/deployment) for more information.
+
+If you are looking for a cloud-based platform to deploy your NestJS application, check out [Mau](https://mau.nestjs.com), our official platform for deploying NestJS applications on AWS. Mau makes deployment straightforward and fast, requiring just a few simple steps:
+
+```bash
+$ npm install -g mau
+$ mau deploy
+```
+
+With Mau, you can deploy your application in just a few clicks, allowing you to focus on building features rather than managing infrastructure.
+
+## Resources
+
+Check out a few resources that may come in handy when working with NestJS:
+
+- Visit the [NestJS Documentation](https://docs.nestjs.com) to learn more about the framework.
+- For questions and support, please visit our [Discord channel](https://discord.gg/G7Qnnhy).
+- To dive deeper and get more hands-on experience, check out our official video [courses](https://courses.nestjs.com/).
+- Deploy your application to AWS with the help of [NestJS Mau](https://mau.nestjs.com) in just a few clicks.
+- Visualize your application graph and interact with the NestJS application in real-time using [NestJS Devtools](https://devtools.nestjs.com).
+- Need help with your project (part-time to full-time)? Check out our official [enterprise support](https://enterprise.nestjs.com).
+- To stay in the loop and get updates, follow us on [X](https://x.com/nestframework) and [LinkedIn](https://linkedin.com/company/nestjs).
+- Looking for a job, or have a job to offer? Check out our official [Jobs board](https://jobs.nestjs.com).
+
+## Support
+
+Nest is an MIT-licensed open source project. It can grow thanks to the sponsors and support by the amazing backers. If you'd like to join them, please [read more here](https://docs.nestjs.com/support).
+
+## Stay in touch
+
+- Author - [Kamil Myśliwiec](https://twitter.com/kammysliwiec)
+- Website - [https://nestjs.com](https://nestjs.com/)
+- Twitter - [@nestframework](https://twitter.com/nestframework)
+
+## License
+
+Nest is [MIT licensed](https://github.com/nestjs/nest/blob/master/LICENSE).

account/admin.py

@@ -1,31 +0,0 @@
-"""Account admin"""
-from django.contrib import admin
-
-"""Import django app"""
-from .models import UserProfile, UserEmailOtp, UserPhoneOtp
-# Register your models here.
-@admin.register(UserProfile)
-class UserProfileAdmin(admin.ModelAdmin):
-    """User profile admin"""
-    list_display = ['user']
-
-    def __str__(self):
-        return self.user__email
-
-@admin.register(UserEmailOtp)
-class UserEmailOtpAdmin(admin.ModelAdmin):
-    """User Email otp admin"""
-    list_display = ['email']
-
-    def __str__(self):
-        """Return object in email and otp format"""
-        return self.email + '-' + self.otp
-
-@admin.register(UserPhoneOtp)
-class UserPhoneOtpAdmin(admin.ModelAdmin):
-    """User Phone otp admin"""
-    list_display = ['phone']
-
-    def __str__(self):
-        """Return object in phone number and otp format"""
-        return self.phone + '-' + self.otp

account/apps.py

@@ -1,6 +0,0 @@
-from django.apps import AppConfig
-
-
-class AccountConfig(AppConfig):
-    default_auto_field = 'django.db.models.BigAutoField'
-    name = 'account'

account/migrations/0001_initial.py

@@ -1,65 +0,0 @@
-# Generated by Django 4.2.2 on 2023-06-23 12:05
-
-from django.conf import settings
-from django.db import migrations, models
-import django.db.models.deletion
-
-
-class Migration(migrations.Migration):
-
-    initial = True
-
-    dependencies = [
-        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
-    ]
-
-    operations = [
-        migrations.CreateModel(
-            name='UserEmailOtp',
-            fields=[
-                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
-                ('email', models.EmailField(max_length=254)),
-                ('otp', models.CharField(max_length=10)),
-                ('is_verified', models.BooleanField(default=False)),
-                ('created_at', models.DateTimeField(auto_now_add=True)),
-                ('updated_at', models.DateTimeField(auto_now=True)),
-                ('expired_at', models.DateTimeField(blank=True, null=True)),
-                ('is_active', models.BooleanField(default=True)),
-            ],
-            options={
-                'db_table': 'user_email_otp',
-            },
-        ),
-        migrations.CreateModel(
-            name='UserPhoneOtp',
-            fields=[
-                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
-                ('country_code', models.IntegerField()),
-                ('phone', models.CharField(max_length=17)),
-                ('otp', models.CharField(max_length=10)),
-                ('is_verified', models.BooleanField(default=False)),
-                ('created_at', models.DateTimeField(auto_now_add=True)),
-                ('updated_at', models.DateTimeField(auto_now=True)),
-                ('expired_at', models.DateTimeField(blank=True, null=True)),
-                ('is_active', models.BooleanField(default=True)),
-            ],
-            options={
-                'db_table': 'user_phone_otp',
-            },
-        ),
-        migrations.CreateModel(
-            name='UserProfile',
-            fields=[
-                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
-                ('user_type', models.CharField(blank=True, choices=[('1', 'junior'), ('2', 'guardian'), ('3', 'superuser')], default=None, max_length=15, null=True)),
-                ('is_verified', models.BooleanField(default=False)),
-                ('created_at', models.DateTimeField(auto_now_add=True)),
-                ('updated_at', models.DateTimeField(auto_now=True)),
-                ('is_active', models.BooleanField(default=False)),
-                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='user_profile', to=settings.AUTH_USER_MODEL)),
-            ],
-            options={
-                'db_table': 'user_profile',
-            },
-        ),
-    ]

account/models.py

@@ -1,75 +0,0 @@
-from django.db import models
-import random
-from django.contrib.auth.models import User
-from base.constants import USER_TYPE
-# Create your models here.
-
-class UserProfile(models.Model):
-    """
-        User details
-        """
-    user = models.ForeignKey(User, on_delete=models.CASCADE, related_name='user_profile')
-    user_type = models.CharField(max_length=15, choices=USER_TYPE, null=True, blank=True, default=None)
-    is_verified = models.BooleanField(default=False)
-
-    # OTP validity
-    created_at = models.DateTimeField(auto_now_add=True)
-    updated_at = models.DateTimeField(auto_now=True)
-    is_active = models.BooleanField(default=False)
-
-    class Meta(object):
-        """ Meta information """
-        db_table = 'user_profile'
-
-    def __str__(self):
-        """return phone as an object"""
-        return f'{self.user}'
-
-class UserPhoneOtp(models.Model):
-    """
-        This class is used to verify user email and their contact no.
-        """
-    """user details"""
-    country_code = models.IntegerField()
-    phone = models.CharField(max_length=17)
-    """otp details"""
-    otp = models.CharField(max_length=10)
-    is_verified = models.BooleanField(default=False)
-
-    # OTP validity
-    created_at = models.DateTimeField(auto_now_add=True)
-    updated_at = models.DateTimeField(auto_now=True)
-    expired_at = models.DateTimeField(blank=True, null=True)
-    is_active = models.BooleanField(default=True)
-
-    class Meta(object):
-        """ Meta information """
-        db_table = 'user_phone_otp'
-
-    def __str__(self):
-        """return phone as an object"""
-        return self.phone
-
-class UserEmailOtp(models.Model):
-    """
-        This class is used to verify user email and their contact no.
-        """
-    """user details"""
-    email = models.EmailField()
-    """otp details"""
-    otp = models.CharField(max_length=10)
-    is_verified = models.BooleanField(default=False)
-
-    # OTP validity
-    created_at = models.DateTimeField(auto_now_add=True)
-    updated_at = models.DateTimeField(auto_now=True)
-    expired_at = models.DateTimeField(blank=True, null=True)
-    is_active = models.BooleanField(default=True)
-
-    class Meta(object):
-        """ Meta information """
-        db_table = 'user_email_otp'
-
-    def __str__(self):
-        """return phone as an object"""
-        return self.email

account/serializers.py

@@ -1,178 +0,0 @@
-from rest_framework import serializers
-from django.contrib.auth.models import User
-from guardian.models import Guardian
-from junior.models import Junior
-from account.models import UserProfile, UserEmailOtp, UserPhoneOtp
-from base.constants import GUARDIAN, JUNIOR, SUPERUSER
-from django.db import transaction
-from base.messages import ERROR_CODE_REQUIRED, ERROR_CODE, SUCCESS_CODE, STATUS_CODE_ERROR
-from django.core.exceptions import ObjectDoesNotExist
-from django.contrib.auth import authenticate
-from rest_framework import viewsets, status
-from rest_framework.decorators import action
-from django.contrib.auth import authenticate, login
-from rest_framework_simplejwt.tokens import RefreshToken
-
-class GoogleSignInSerializer(serializers.Serializer):
-    """Google login Serializer"""
-    email = serializers.EmailField()
-
-    def create(self, validated_data):
-        """Create or update user model"""
-        with transaction.atomic():
-            print("validated_data====>",validated_data)
-            if User.objects.filter(email__iexact=self.validated_data['email']).exists():
-                return User.objects.get(email__iexact=self.validated_data['email'])
-
-            if not User.objects.filter(email__iexact=self.validated_data['email']).exists():
-                instance = User.objects.create(username=self.validated_data['email'],
-                                               email=self.validated_data['email'])
-            return instance
-
-
-class ResetPasswordSerializer(serializers.Serializer):
-    """Reset Password after verification"""
-    verification_code = serializers.CharField(max_length=10)
-    password = serializers.CharField(required=True)
-    class Meta(object):
-        """Meta info"""
-        model = User
-
-    def create(self, validated_data):
-        verification_code = validated_data.pop('verification_code')
-        password = validated_data.pop('password')
-        print("verification_code===>",verification_code)
-        print("password===>", password)
-        user_opt_details = UserEmailOtp.objects.filter(otp=verification_code, is_verified=True).last()
-        print("user_opt_details===>",user_opt_details)
-        if user_opt_details:
-            print("qqqqqqqqqq")
-            user_details = User.objects.filter(email=user_opt_details.email).last()
-            if user_details:
-                print("333333333==>",user_details.password)
-                user_details.set_password(password)
-                user_details.save()
-                return {'password':password}
-            return user_opt_details
-        return ''
-
-class ChangePasswordSerializer(serializers.Serializer):
-    """Update Password after verification"""
-    current_password = serializers.CharField(max_length=100)
-    new_password = serializers.CharField(required=True)
-    class Meta(object):
-        """Meta info"""
-        model = User
-
-    def validate_current_password(self, value):
-        user = self.context
-        if self.context.password not in ('', None):
-            if user.check_password(value):
-                return value
-        raise serializers.ValidationError({"error":"Invalid Current password"})
-    def create(self, validated_data):
-        new_password = validated_data.pop('new_password')
-        user_details = User.objects.filter(email=self.context).last()
-        print("user_details==>", user_details)
-        if user_details:
-            print("333333333==>",user_details.password)
-            user_details.set_password(new_password)
-            user_details.save()
-            return {'password':new_password}
-        return ''
-
-
-
-class ForgotPasswordSerializer(serializers.Serializer):
-    """Forget password serializer"""
-    email = serializers.EmailField()
-
-class SuperUserSerializer(serializers.ModelSerializer):
-    user_type = serializers.SerializerMethodField('get_user_type')
-
-    def get_user_type(self, obj):
-        """user type"""
-        return SUPERUSER
-
-    class Meta(object):
-        """Meta info"""
-        model = User
-        fields = ['id', 'username', 'email', 'first_name', 'last_name', 'is_active', 'user_type']
-
-
-class GuardianSerializer(serializers.ModelSerializer):
-    """guardian serializer"""
-    user_type = serializers.SerializerMethodField('get_user_type')
-    email = serializers.SerializerMethodField('get_auth')
-    first_name = serializers.SerializerMethodField('get_first_name')
-    last_name = serializers.SerializerMethodField('get_last_name')
-    auth_token = serializers.SerializerMethodField('get_auth_token')
-
-    def get_auth_token(self, obj):
-        refresh = RefreshToken.for_user(obj.user)
-        access_token = str(refresh.access_token)
-        return access_token
-
-    def get_user_type(self, obj):
-        """user type"""
-        return GUARDIAN
-
-    def get_auth(self, obj):
-        """user email address"""
-        return obj.user.username
-
-    def get_first_name(self, obj):
-        """user first name"""
-        return obj.user.first_name
-
-    def get_last_name(self, obj):
-        """user last name"""
-        return obj.user.last_name
-
-    class Meta(object):
-        """Meta info"""
-        model = Guardian
-        fields = ['auth_token', 'email', 'first_name', 'last_name', 'country_code', 'phone', 'family_name', 'gender', 'dob',
-                  'referral_code', 'is_active', 'is_complete_profile', 'passcode',
-                  'created_at', 'updated_at', 'user_type']
-
-
-class JuniorSerializer(serializers.ModelSerializer):
-    """junior serializer"""
-    user_type = serializers.SerializerMethodField('get_user_type')
-    email = serializers.SerializerMethodField('get_auth')
-    first_name = serializers.SerializerMethodField('get_first_name')
-    last_name = serializers.SerializerMethodField('get_last_name')
-    auth_token = serializers.SerializerMethodField('get_auth_token')
-
-    def get_auth_token(self, obj):
-        refresh = RefreshToken.for_user(obj.auth)
-        access_token = str(refresh.access_token)
-        return access_token
-
-    def get_user_type(self, obj):
-        return JUNIOR
-
-    def get_auth(self, obj):
-        return obj.auth.username
-
-    def get_first_name(self, obj):
-        return obj.auth.first_name
-
-    def get_last_name(self, obj):
-        return obj.auth.last_name
-
-    class Meta(object):
-        """Meta info"""
-        model = Junior
-        fields = ['auth_token', 'email', 'first_name', 'last_name', 'country_code', 'phone', 'gender', 'dob',
-                  'guardian_code', 'referral_code','is_active', 'is_complete_profile', 'created_at',
-                  'updated_at', 'user_type']
-
-class EmailVerificationSerializer(serializers.ModelSerializer):
-    """Email verification serializer"""
-    class Meta(object):
-        """Meta info"""
-        model = UserEmailOtp
-        fields = '__all__'
-

account/templates/templated_email/email_base.email

@@ -1,54 +0,0 @@
-<!DOCTYPE HTML>
-{% block subject %}DinDin{% endblock %}
-{% load static %}
-
-{% block html %}
-<html lang="en" style="height: 100%;">
-    <head>
-        <meta http-equiv="Content-Type"
-              content="text/html; charset=UTF-8">
-        <meta name="viewport"
-              content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0">
-        <title>Zod Bank | OTP</title>
-        <style type="text/css">
-            @media all and (max-width: 599px) {
-                .block {
-                    display: block !important;
-                    width: 100%;
-                }
-                .top-space {
-                    padding: 15px 0 0 !important;
-                }
-            }
-        </style>
-    </head>
-
-    <body style="margin: 0; padding: 0; background: #f7f8f9; height: 100%;">
-    <!-- begin template body -->
-        <table style="background:#f7f8f9; border: 0; border-collapse: separate; border-spacing: 0px; margin: auto; width: 100%; font-family: Arial, Helvetica, sans-serif; height: 100%;" aria-describedby="email-data-wrapper">
-            <tr>
-                <td style="padding: 0;">
-                    <table style="background-color: white; border-collapse: separate; border-spacing: 0px; border: 1px solid #e4e8eb; width: 100%; max-width: 600px; margin-right:auto; margin-left: auto;
-                font-family: Arial, Helvetica, sans-serif;" aria-describedby="email-data-wrapper">
-                        <tr>
-                            <td style="padding: 41px 30px 40px; height: 39px; background: url({% static 'images/backgrounds/email_template.png' %}) left center no-repeat; background-size: cover;">
-                            </td>
-                        </tr>
-                        {% block plain %}
-                        {% endblock %}
-                        <tr>
-                            <td style="padding: 0 27px;">
-                                <p style="margin: 0; font-size: 14px; line-height: 20px; color: #505050; font-weight: 400;">-</p>
-                                <p style="margin: 0; font-size: 14px; line-height: 20px; color: #505050; font-weight: 400;">Cheers!</p>
-                                <p style="margin: 0 0 30px; font-size: 14px; line-height: 20px; color: #505050; font-weight: 700;">Zod Bank Team</p>
-                            </td>
-                        </tr>
-                    </table>
-                </td>
-            </tr>
-            </tbody>
-        </table>
-    <!-- end template body -->
-    </body>
-</html>
-{% endblock %}

account/templates/templated_email/email_otp_verification.email

@@ -1,23 +0,0 @@
-{% extends "templated_email/email_base.email" %}
-
-{% block subject %}
-    OTP Verification
-{% endblock %}
-
-{% block plain %}
-    <tr>
-        <td style="padding: 0 27px 15px;">
-            <p style="margin: 0; font-size: 16px; line-height: 20px; padding: 36px 0 0; font-weight: 500; color: #1f2532;">
-                Hi User,
-            </p>
-        </td>
-    </tr>
-    <tr>
-        <td style="padding: 0 27px 22px;">
-            <p style="margin: 0;font-size: 14px; font-weight: 400; line-height: 21px; color: #1f2532;">
-                You are receiving this email for email verification. Please use <b>{{ otp }} </b>as the verification code for your email address & username.
-
-            </p>
-        </td>
-    </tr>
-{% endblock %}

account/templates/templated_email/email_reset_verification.email

@@ -1,23 +0,0 @@
-{% extends "templated_email/email_base.email" %}
-
-{% block subject %}
-    Password Reset Verification Code
-{% endblock %}
-
-{% block plain %}
-    <tr>
-        <td style="padding: 0 27px 15px;">
-            <p style="margin: 0; font-size: 16px; line-height: 20px; padding: 36px 0 0; font-weight: 500; color: #1f2532;">
-                Hi User,
-            </p>
-        </td>
-    </tr>
-    <tr>
-        <td style="padding: 0 27px 22px;">
-            <p style="margin: 0;font-size: 14px; font-weight: 400; line-height: 21px; color: #1f2532;">
-                You are receiving this email for reset password verification. Please use <b>{{ verification_code }} </b>as the verification code.
-
-            </p>
-        </td>
-    </tr>
-{% endblock %}

account/tests.py

@@ -1,3 +0,0 @@
-from django.test import TestCase
-
-# Create your tests here.

account/urls.py

@@ -1,26 +0,0 @@
-""" Urls files"""
-"""Django import"""
-from django.urls import path, include
-from rest_framework.decorators import api_view
-"""Third party import"""
-from rest_framework import routers
-from .views import (UserLogin, SendPhoneOtp, UserPhoneVerification, UserEmailVerification, ReSendEmailOtp,
-                    ForgotPasswordAPIView, ResetPasswordAPIView, ChangePasswordAPIView)
-"""Router"""
-router = routers.SimpleRouter()
-
-"""API End points with router"""
-router.register('user', UserLogin, basename='user')
-router.register('admin', UserLogin, basename='admin')
-# router.register('google-login', GoogleLoginAPIViewset, basename='admin')
-router.register('send-phone-otp', SendPhoneOtp, basename='send-phone-otp')
-router.register('user-phone-verification', UserPhoneVerification, basename='user-phone-verification')
-router.register('user-email-verification', UserEmailVerification, basename='user-email-verification')
-router.register('resend-email-otp', ReSendEmailOtp, basename='resend-email-otp')
-
-urlpatterns = [
-    path('api/v1/', include(router.urls)),
-    path('api/v1/forgot-password/', ForgotPasswordAPIView.as_view()),
-    path('api/v1/reset-password/', ResetPasswordAPIView.as_view()),
-    path('api/v1/change-password/', ChangePasswordAPIView.as_view())
-]

account/utils.py

@@ -1,38 +0,0 @@
-"""Account utils"""
-"""Third party Django app"""
-from django.conf import settings
-from rest_framework import viewsets, status
-from rest_framework.response import Response
-
-from templated_email import send_templated_mail
-def send_otp_email(recipient_email, otp):
-    from_email = settings.EMAIL_HOST_USER
-    recipient_list = [recipient_email]
-    send_templated_mail(
-        template_name='email_otp_verification.email',
-        from_email=from_email,
-        recipient_list=recipient_list,
-        context={
-            'otp': otp
-        }
-    )
-    return otp
-
-def custom_response(detail, data=None, response_status=status.HTTP_200_OK):
-    """Custom response code"""
-    if not data:
-        data = None
-
-    return Response({"data": data, "message": detail, "status": "success", "code": response_status})
-
-
-def custom_error_response(detail, response_status):
-    """
-    function is used for getting same global error response for all
-    :param detail: error message .
-    :param response_status: http status.
-    :return: Json response
-    """
-    if not detail:
-        detail = {}
-    return Response({"error": detail, "status": "failed", "code": response_status})

account/views.py

@@ -1,220 +0,0 @@
-from rest_framework import viewsets, status, views
-from rest_framework.decorators import action
-import random
-import logging
-from django.contrib.auth import authenticate, login
-from guardian.models import Guardian
-from junior.models import Junior
-from account.models import UserProfile, UserPhoneOtp, UserEmailOtp
-from django.contrib.auth.models import User
-from .serializers import (SuperUserSerializer, GuardianSerializer, JuniorSerializer, EmailVerificationSerializer,
-                          ForgotPasswordSerializer, ResetPasswordSerializer, ChangePasswordSerializer,
-                          GoogleSignInSerializer)
-from rest_framework_simplejwt.tokens import RefreshToken
-from base.messages import ERROR_CODE, SUCCESS_CODE
-from guardian.tasks import generate_otp
-from django.conf import settings
-from account.utils import send_otp_email
-from account.utils import custom_response, custom_error_response
-from django.core.mail import EmailMessage
-from django.core.mail import send_mail
-from rest_framework.response import Response
-from rest_framework.permissions import IsAuthenticated
-from templated_email import send_templated_mail
-
-# class GoogleLoginAPIViewset(viewsets.ModelViewSet):
-#     """Google Login"""
-#     serializer_class = GoogleSignInSerializer
-#
-#     def create(self, request, *args, **kwargs):
-#         """
-#         Override default behaviour of create method
-#         """
-#         provider_type = []
-#         serializer = self.get_serializer(data=request.data)
-#         if serializer.is_valid(raise_exception=True):
-#             # provider = self.get_provider_view(request.data.get('provider'))
-#             # if User is not authenticated then send error message
-#             # if not provider.is_authenticated(request):
-#             #     return custom_error_response({}, status.HTTP_400_BAD_REQUEST)
-#
-#             user = serializer.save()
-#             if User.objects.filter(email__iexact=user.email).exists():
-#                 print("ppppppppppppp")
-#                 return custom_response(SUCCESS_CODE["3003"], response_status=status.HTTP_200_OK)
-#             return custom_response(ERROR_CODE["2002"], response_status=status.HTTP_400_BAD_REQUEST)
-
-
-
-class ChangePasswordAPIView(views.APIView):
-    permission_classes = [IsAuthenticated]
-    def post(self, request):
-        serializer = ChangePasswordSerializer(context=request.user, data=request.data)
-        if serializer.is_valid():
-            serializer.save()
-            return custom_response(SUCCESS_CODE['3007'], response_status=status.HTTP_200_OK)
-        return custom_error_response(serializer.errors, response_status=status.HTTP_400_BAD_REQUEST)
-
-class ResetPasswordAPIView(views.APIView):
-    def post(self, request):
-        serializer = ResetPasswordSerializer(data=request.data)
-        if serializer.is_valid():
-            serializer.save()
-            return custom_response(SUCCESS_CODE['3006'], response_status=status.HTTP_200_OK)
-        return custom_error_response(serializer.errors, response_status=status.HTTP_400_BAD_REQUEST)
-
-class ForgotPasswordAPIView(views.APIView):
-    def post(self, request):
-        serializer = ForgotPasswordSerializer(data=request.data)
-        if serializer.is_valid():
-            email = serializer.validated_data['email']
-            try:
-                User.objects.get(email=email)
-            except User.DoesNotExist:
-                return custom_error_response(ERROR_CODE['2004'], response_status=status.HTTP_404_NOT_FOUND)
-            verification_code = ''.join([str(random.randrange(9)) for _ in range(6)])
-            # Send the verification code to the user's email
-            from_email = settings.EMAIL_HOST_USER
-            recipient_list = [email]
-            send_templated_mail(
-                template_name='email_reset_verification.email',
-                from_email=from_email,
-                recipient_list=recipient_list,
-                context={
-                    'verification_code': verification_code
-                }
-            )
-            user_data, created = UserEmailOtp.objects.get_or_create(email=email)
-            if user_data:
-                user_data.otp = verification_code
-                user_data.save()
-            return custom_response(SUCCESS_CODE['3015'],
-                                   response_status=status.HTTP_200_OK)
-        return custom_error_response(serializer.errors, response_status=status.HTTP_400_BAD_REQUEST)
-
-class SendPhoneOtp(viewsets.ModelViewSet):
-    """Send otp on phone"""
-    def create(self, request, *args, **kwargs):
-        otp = generate_otp()
-        phone_number = self.request.data['phone']
-        if phone_number.isdigit() and len(phone_number) == 10:
-            phone_otp, created = UserPhoneOtp.objects.get_or_create(country_code=self.request.data['country_code'],
-                                                                    phone=self.request.data['phone'])
-            if phone_otp:
-                phone_otp.otp = otp
-                phone_otp.save()
-            return custom_response(None, {'phone_otp':otp}, response_status=status.HTTP_200_OK)
-        return custom_error_response(ERROR_CODE['2020'], response_status=status.HTTP_400_BAD_REQUEST)
-
-
-class UserPhoneVerification(viewsets.ModelViewSet):
-    """Send otp on phone"""
-    def list(self, request, *args, **kwargs):
-        try:
-            phone_data = UserPhoneOtp.objects.filter(phone=self.request.GET.get('phone'),
-                                                     otp=self.request.GET.get('otp')).last()
-            if phone_data:
-                phone_data.is_verified = True
-                phone_data.save()
-                return custom_response(SUCCESS_CODE['3012'], response_status=status.HTTP_200_OK)
-            else:
-                return custom_error_response(ERROR_CODE["2008"], response_status=status.HTTP_400_BAD_REQUEST)
-        except Exception:
-            return custom_error_response(ERROR_CODE["2008"], response_status=status.HTTP_400_BAD_REQUEST)
-
-
-
-class UserLogin(viewsets.ViewSet):
-    @action(methods=['post'], detail=False)
-    def login(self, request):
-        username = request.data.get('username')
-        password = request.data.get('password')
-        user = authenticate(request, username=username, password=password)
-        try:
-            if user is not None:
-                login(request, user)
-                guardian_data = Guardian.objects.filter(user__username=username, is_complete_profile=True).last()
-                if guardian_data:
-                    serializer = GuardianSerializer(guardian_data)
-                junior_data = Junior.objects.filter(auth__username=username, is_complete_profile=True).last()
-                if junior_data:
-                    serializer = JuniorSerializer(junior_data)
-                return custom_response(SUCCESS_CODE['3003'], serializer.data, response_status=status.HTTP_200_OK)
-            else:
-                return custom_error_response(ERROR_CODE["2002"], response_status=status.HTTP_401_UNAUTHORIZED)
-        except Exception as e:
-            logging.error(e)
-            user_profile_data = UserProfile.objects.filter(user__username=username).last()
-            email_verified = UserEmailOtp.objects.filter(email=username).last()
-            refresh = RefreshToken.for_user(user)
-            access_token = str(refresh.access_token)
-            data = {"auth_token":access_token, "is_profile_complete": False,
-                    "user_role": user_profile_data.user_type,
-                    }
-            is_verified = False
-            if email_verified:
-                is_verified = email_verified.is_verified
-            if not is_verified:
-                otp = generate_otp()
-                email_verified.otp = otp
-                email_verified.save()
-                data.update({"email_otp":otp})
-                return custom_response(ERROR_CODE['2024'], {"email_otp": otp, "is_email_verified": is_verified},
-                                       response_status=status.HTTP_200_OK)
-            data.update({"is_email_verified": is_verified})
-            return custom_response(None, data, response_status=status.HTTP_200_OK)
-
-    @action(methods=['post'], detail=False)
-    def admin_login(self, request):
-        username = request.data.get('username')
-        password = request.data.get('password')
-        user = authenticate(request, username=username, password=password)
-        try:
-            if user is not None:
-                login(request, user)
-                if user.is_superuser:
-                    serializer = SuperUserSerializer(user)
-                return custom_response(SUCCESS_CODE['3003'], serializer.data, response_status=status.HTTP_200_OK)
-            else:
-                return custom_error_response(ERROR_CODE["2002"], response_status=status.HTTP_401_UNAUTHORIZED)
-        except Exception as e:
-            logging.error(e)
-            refresh = RefreshToken.for_user(user)
-            access_token = str(refresh.access_token)
-            data = {"auth_token": access_token, "user_role": '3'}
-            return custom_response(None, data, response_status=status.HTTP_200_OK)
-
-class UserEmailVerification(viewsets.ModelViewSet):
-    """User Email verification"""
-    serializer_class = EmailVerificationSerializer
-
-    def list(self, request, *args, **kwargs):
-        try:
-            user_obj = User.objects.filter(username=self.request.GET.get('email')).last()
-            email_data = UserEmailOtp.objects.filter(email=self.request.GET.get('email'),
-                                                     otp=self.request.GET.get('otp')).last()
-            if email_data:
-                email_data.is_verified = True
-                email_data.save()
-                refresh = RefreshToken.for_user(user_obj)
-                access_token = str(refresh.access_token)
-                return custom_response(SUCCESS_CODE['3011'], {"auth_token":access_token}, response_status=status.HTTP_200_OK)
-            else:
-                return custom_error_response(ERROR_CODE["2008"], response_status=status.HTTP_400_BAD_REQUEST)
-        except Exception as e:
-            logging.error(e)
-            return custom_error_response(ERROR_CODE["2008"], response_status=status.HTTP_400_BAD_REQUEST)
-
-class ReSendEmailOtp(viewsets.ModelViewSet):
-    """Send otp on phone"""
-    def create(self, request, *args, **kwargs):
-        otp = generate_otp()
-        if User.objects.filter(email=request.data['email']):
-            email_data, created = UserEmailOtp.objects.get_or_create(email=request.data['email'])
-            if email_data:
-                email_data.otp = otp
-                email_data.save()
-                send_otp_email(request.data['email'], otp)
-            return custom_response(SUCCESS_CODE['3016'], response_status=status.HTTP_200_OK)
-        else:
-            return custom_error_response(ERROR_CODE["2023"], response_status=status.HTTP_400_BAD_REQUEST)

base/__init__.py

@@ -1,3 +0,0 @@
-"""
-This is init module of the Project Zod Bank
-"""

base/common_email.py

@@ -1,30 +0,0 @@
-"""
-Common send_mail function
-"""
-import logging
-
-from django.core.mail import EmailMultiAlternatives
-
-
-def send_mail(subject, message, from_email, recipient_list, html_message=None, cc=None,
-              fail_silently=False):
-    """
-    Send Email
-    :param subject:
-    :param message:
-    :param from_email:
-    :param recipient_list:
-    :param html_message:
-    :param cc:
-    :param fail_silently:
-    :return:
-    """
-    try:
-        mail = EmailMultiAlternatives(subject, message, from_email, recipient_list, cc)
-        if html_message:
-            mail.attach_alternative(html_message, 'text/html')
-
-        return mail.send(fail_silently)
-    except Exception as e:
-        logging.error(e)
-    return False

base/constants.py

@@ -1,51 +0,0 @@
-"""
-This module contains constants used throughout the project
-"""
-import os
-
-# GOOGLE_URL used for interact with google server to verify user existence.
-#GOOGLE_URL = "https://www.googleapis.com/plus/v1/"
-
-
-# Super Admin string constant for 'role'
-SUPER_ADMIN = "Super Admin"
-
-# Define jwt_token_expiration time in minutes for now token will expire after 3 days
-JWT_TOKEN_EXPIRATION = 3 * 24 * 60
-
-# Define common file extention
-FILE_EXTENSION = ("gif", "jpeg", "jpg", "png", "svg")
-
-# Define file size in bytes(5MB =  5 * 1024 * 1024)
-FILE_SIZE = 5 * 1024 * 1024
-
-# String constant for configurable date for allocation lock period
-ALLOCATION_LOCK_DATE = 1
-
-sort_dict = {
-    '1': 'name',
-    '2': '-name'
-}
-USER_TYPE = (
-    ('1', 'junior'),
-    ('2', 'guardian'),
-    ('3', 'superuser')
-)
-GENDERS = (
-    ('1', 'Male'),
-    ('2', 'Female')
-)
-# duplicate name used defined in constant PROJECT_NAME
-PROJECT_NAME = 'Zod Bank'
-GUARDIAN = 'guardian'
-JUNIOR = 'junior'
-SUPERUSER = 'superuser'
-# numbers used as a constant
-
-# Define the byte into kb
-BYTE_IMAGE_SIZE = 1024
-
-# validate file size
-MAX_FILE_SIZE = 1024 * 1024 * 5
-
-

base/image_constants.py

@@ -1,16 +0,0 @@
-"""
-This module contains constants used throughout the project
-"""
-from zod_bank.settings import BUCKET_NAME
-
-# Define S3 folder url
-S3_FOLDER_DIR = {
-    'user_image': 'user_image/',
-}
-
-# S3 bucket url
-S3_URL = "https://"+BUCKET_NAME+".s3.amazonaws.com/"
-
-S3_FOLDER_URL = {
-    'user_image_file': S3_URL+S3_FOLDER_DIR['user_image'],
-}

base/messages.py

@@ -1,94 +0,0 @@
-"""
-This module contains all the messages used all across the project
-"""
-
-ERROR_CODE_REQUIRED = {
-    # Error code for email address
-    "1000": ["Required email address not found."],
-    # Error code for password
-    "1001": ["Required password not found."],
-    # Error code for Required Post parameters
-    "1002": ["Required POST parameters not found."],
-    # Error code for Required Get parameters
-    "1003": ["Required GET parameters not found."],
-    # Error code for Required Headers
-    "1004": ["Required headers were not found."],
-    # Error code for Required Put parameters
-    "1005": ["Required PUT parameters not found."],
-    # Error code for Required query parameters
-    "1006": ["Required query parameters is not valid."],
-    # Error code for Required Head parameters
-    "1008": ["Required HEAD parameters not found."]
-}
-
-# Error code
-ERROR_CODE = {
-    "2000": "Email not found.",
-    "2001": "Your account has not been verified. Please check your email and verify it.",
-    "2002": "Invalid login credentials.",
-    "2003": "An account already exists with this email address.",
-    "2004": "User not found.",
-    "2005": "Your account has been activated.",
-    "2006": "Your account is not activated.",
-    "2007": "Your account already activated.",
-    "2008": "Invalid OTP.",
-    "2009": "The user provided cannot be found or the reset password token has become invalid/timed out.",
-    "2010": "Invalid Link.",
-    "2011": "Your profile has not been completed yet.",
-    "2012": "Password and Confirm password should be same.",
-    "2013": "Invalid token.",
-    "2014": "Your old password doesn't match.",
-    "2015": "Invalid old password.",
-    "2016": "Invalid search.",
-    "2017": "{model} object with {pk} does not exist",
-    "2018": "Attached File not found",
-    "2019": "Either File extension or File size doesn't meet the requirements",
-    "2020": "Enter valid mobile number",
-    "2021": "Already register",
-    "2022":"Invalid Guardian code",
-    "2023":"Invalid user",
-    "2024":"Email not verified"
-}
-SUCCESS_CODE = {
-    # Success code for password
-    "3001": "Sign up successfully",
-    # Success code for Thank you
-    "3002": "Thank you for contacting us! Our Consumer Experience Team will reach out to you shortly.",
-    # Success code for account activation
-    "3003": "Log in successfully",
-    # Success code for password reset
-    "3004": "Password reset link has been sent to your email address",
-    # Success code for link verified
-    "3005": "Your link has been verified, it's valid",
-    # Success code for password reset
-    "3006": "Your password has been reset successfully.",
-    # Success code for password update
-    "3007": "Your password has been changed successfully.",
-    # Success code for valid link
-    "3008": "You have a valid link.",
-    # Success code for logged out
-    "3009": "You have successfully logged out!",
-    # Success code for check all fields
-    "3010": "All fields are valid",
-    "3011": "Email OTP Verified successfully",
-    "3012": "Phone OTP Verified successfully",
-    "3013": "Valid Guardian code",
-    "3014": "Password has been updated successfully.",
-    "3015": "Verification code sent on your email.",
-    "3016": "Send otp on your Email successfully"
-}
-
-STATUS_CODE_ERROR = {
-    # Status code for Invalid Input
-    "4001": ["Invalid input."],
-    # Status code for Authentication credentials
-    "4002": ["Authentication credentials were not provided."],
-    # Status code for Permission
-    "4003": ["You do not have permission to perform this action."],
-    # Status code for not found
-    "4004": ["Not found."],
-    # Status code for method not allowed
-    "4005": ["Method not allowed."]
-}
-
-

base/routers.py

@@ -1,17 +0,0 @@
-"""
-Custom routers for job sourcing .
-"""
-# third party imports
-from rest_framework.routers import DefaultRouter
-
-
-class OptionalSlashRouter(DefaultRouter):
-    """
-    optional slash router class
-    """
-    def __init__(self):
-        """
-            explicitly appending '/' in urls if '/' doesn't exists for making common url patterns .
-        """
-        super(OptionalSlashRouter, self).__init__()
-        self.trailing_slash = '/?'

base/upload_file.py

@@ -1,177 +0,0 @@
-"""
-This file used for file uploaded
-"""
-import datetime
-# python imports
-import logging
-import mimetypes
-import os
-
-import boto3
-from django.core.files.storage import FileSystemStorage
-# django imports
-from django.utils.crypto import get_random_string
-from rest_framework.status import HTTP_400_BAD_REQUEST, HTTP_200_OK
-
-from base import constants
-from base.constants import NUMBER
-# local import
-from zod_bank.settings import base_settings as settings
-from zod_bank.settings.base_settings import BASE_DIR
-
-
-def image_upload(folder, file_name, data):
-    """
-    Function to upload files
-    :param folder:folder location string
-    :param file_name:file_name without ext string
-    :param data:data file obj
-    :return:Dictionary
-    """
-    status = HTTP_400_BAD_REQUEST
-    img_name = None
-    error = None
-    try:
-        s3_client = boto3.client('s3',
-                                 aws_access_key_id=settings.AWS_ACCESS_KEY,
-                                 aws_secret_access_key=settings.AWS_SECRET_ACCESS_KEY,
-                                 region_name=settings.AWS_DEFAULT_REGION
-                                 )
-
-        bucket_name = settings.BUCKET_NAME
-        MEDIA_ROOT = os.path.join(BASE_DIR, 'media/tmp')
-        fss = FileSystemStorage()
-        file = fss.save('tmp/' + str(file_name), data)
-        fss.url(file)
-        tmp_file = os.path.join(MEDIA_ROOT, str(file_name))
-        s3_client.upload_file(
-            tmp_file, bucket_name, folder + str(file_name),
-            ExtraArgs={'ACL': 'public-read', 'ContentType': data.content_type}
-        )
-        os.unlink(tmp_file)
-        img_name = file_name
-        status = HTTP_200_OK
-    except Exception as e:
-        error = e
-        logging.error(e)
-    return status, error, img_name
-
-
-def file_delete(folder, file_name):
-    """
-    To delete common file
-    :param folder: folder name str
-    :param file_name:  file_name string type
-    """
-    status = HTTP_400_BAD_REQUEST
-    error = None
-    try:
-        s3_client = boto3.client('s3',
-                                 aws_access_key_id=settings.AWS_ACCESS_KEY,
-                                 aws_secret_access_key=settings.AWS_SECRET_ACCESS_KEY,
-                                 region_name=settings.AWS_DEFAULT_REGION
-                                 )
-
-        s3_client.delete_object(Bucket=settings.BUCKET_NAME, Key=str(folder) + str(file_name))
-        status = HTTP_200_OK
-    except Exception as e:
-        error = e
-    return status, error
-
-
-def get_aws_obj(folder, file_name):
-    """
-    To get aws file obj
-    :param folder:  folder string type
-    :param file_name:  file_name string type
-    """
-    status = HTTP_400_BAD_REQUEST
-    obj = None
-    try:
-        s3_client = boto3.client('s3',
-                                 aws_access_key_id=settings.AWS_ACCESS_KEY,
-                                 aws_secret_access_key=settings.AWS_SECRET_ACCESS_KEY,
-                                 region_name=settings.AWS_DEFAULT_REGION
-                                 )
-        file_name = folder + file_name
-        obj = s3_client.get_object(Bucket=settings.BUCKET_NAME, Key=file_name)
-        status = HTTP_200_OK
-    except Exception as e:
-        logging.error(e)
-    return status, obj
-
-
-def upload_image(post_data, folder):
-    """
-    :param post_data:
-    :param folder: string type
-    :return:
-    """
-    upload_obj = None
-    # Check Post data
-    if post_data:
-        date_now = datetime.datetime.now()
-        file_extension = os.path.splitext(str(post_data.name))
-        file_extension = file_extension[constants.NUMBER['one']].split(".")[constants.NUMBER['one']].lower()
-        rand = get_random_string(NUMBER['twelve'])
-        image_name = str(rand) + date_now.strftime("%s") + "." + file_extension
-        upload_obj = image_upload(folder, image_name, post_data)
-    return upload_obj
-
-
-def upload_voice_kit_image(post_data, folder, image_dir):
-    """
-    :param post_data:
-    :param folder: string type
-    :param image_dir: image_dir
-    :return:
-    """
-    upload_obj = None
-    # Check Post data
-    if post_data:
-        date_now = datetime.datetime.now()
-        file_extension = os.path.splitext(str(post_data))
-        file_extension = file_extension[constants.NUMBER['one']].split(".")[constants.NUMBER['one']].lower()
-        rand = get_random_string(NUMBER['twelve'])
-        image_name = str(rand) + date_now.strftime("%s") + "." + file_extension
-        upload_obj = voice_kit_image_upload(folder, image_name, post_data, image_dir)
-    return upload_obj
-
-
-def voice_kit_image_upload(folder, file_name, data, image_dir):
-    """
-    Function to upload files
-    :param folder:folder location string
-    :param file_name:file_name without ext string
-    :param data:data file obj
-    :return:Dictionary
-    """
-    status = HTTP_400_BAD_REQUEST
-    img_name = None
-    error = None
-    try:
-        s3_client = boto3.client('s3',
-                                 aws_access_key_id=settings.AWS_ACCESS_KEY,
-                                 aws_secret_access_key=settings.AWS_SECRET_ACCESS_KEY,
-                                 region_name=settings.AWS_DEFAULT_REGION
-                                 )
-
-        bucket_name = settings.BUCKET_NAME
-        MEDIA_ROOT = os.path.join(BASE_DIR, 'media/tmp')
-        fss = FileSystemStorage()
-        with open(image_dir+data, 'rb') as f:
-            file = fss.save('tmp/' + str(file_name), f)
-        fss.url(file)
-        tmp_file = os.path.join(MEDIA_ROOT, str(file_name))
-        s3_client.upload_file(
-            tmp_file, bucket_name, folder + str(file_name),
-            ExtraArgs={'ACL': 'public-read', 'ContentType': mimetypes.guess_type(file_name)[0]}
-        )
-        os.unlink(tmp_file)
-        img_name = file_name
-        status = HTTP_200_OK
-    except Exception as e:
-        error = e
-        logging.error(e)
-    return status, error, img_name
-

docker-compose.yml

@@ -1,18 +0,0 @@
-version: '3'  
-services:  
-  nginx:
-    image: nginx:latest
-    container_name: nginx
-    ports:
-      - "8000:8000"
-    volumes:
-      - ./nginx:/etc/nginx/conf.d
-      - .:/usr/src/app
-    depends_on:
-      - web
-  web:
-    build: .
-    container_name: django
-    command: bash -c "pip install -r requirements.txt && python manage.py collectstatic --noinput && python manage.py migrate && gunicorn zod_bank.wsgi -b 0.0.0.0:8000 -t 300 --log-level=info"
-    volumes:
-      - .:/usr/src/app

guardian/admin.py

@@ -1,14 +0,0 @@
-"""Guardian admin"""
-"""Third party Django app"""
-from django.contrib import admin
-"""Import Django app"""
-from .models import Guardian
-# Register your models here.
-@admin.register(Guardian)
-class GuardianAdmin(admin.ModelAdmin):
-    """Junior Admin"""
-    list_display = ['user', 'family_name']
-
-    def __str__(self):
-        """Return email id"""
-        return self.user__email

guardian/apps.py

@@ -1,9 +0,0 @@
-"""Guardian app file"""
-"""Third party Django app"""
-from django.apps import AppConfig
-
-
-class CustodianConfig(AppConfig):
-    """Guardian config"""
-    default_auto_field = 'django.db.models.BigAutoField'
-    name = 'guardian'

guardian/migrations/0001_initial.py

@@ -1,43 +0,0 @@
-# Generated by Django 4.2.2 on 2023-06-23 12:05
-
-from django.conf import settings
-import django.contrib.postgres.fields
-from django.db import migrations, models
-import django.db.models.deletion
-
-
-class Migration(migrations.Migration):
-
-    initial = True
-
-    dependencies = [
-        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
-    ]
-
-    operations = [
-        migrations.CreateModel(
-            name='Guardian',
-            fields=[
-                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
-                ('country_code', models.IntegerField(blank=True, null=True)),
-                ('phone', models.CharField(blank=True, default=None, max_length=31, null=True)),
-                ('family_name', models.CharField(blank=True, default=None, max_length=50, null=True)),
-                ('gender', models.CharField(blank=True, choices=[('1', 'Male'), ('2', 'Female')], default=None, max_length=15, null=True)),
-                ('dob', models.DateField(blank=True, default=None, max_length=15, null=True)),
-                ('guardian_code', models.CharField(blank=True, default=None, max_length=10, null=True)),
-                ('junior_code', django.contrib.postgres.fields.ArrayField(base_field=models.CharField(blank=True, default=None, max_length=10, null=True), null=True, size=None)),
-                ('referral_code', models.CharField(blank=True, default=None, max_length=10, null=True)),
-                ('referral_code_used', models.CharField(blank=True, default=None, max_length=10, null=True)),
-                ('is_active', models.BooleanField(default=True)),
-                ('is_complete_profile', models.BooleanField(default=False)),
-                ('passcode', models.IntegerField(blank=True, default=None, null=True)),
-                ('created_at', models.DateTimeField(auto_now_add=True)),
-                ('updated_at', models.DateTimeField(auto_now=True)),
-                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='guardian_profile', to=settings.AUTH_USER_MODEL, verbose_name='Email')),
-            ],
-            options={
-                'verbose_name': 'Guardian',
-                'db_table': 'guardians',
-            },
-        ),
-    ]

guardian/migrations/0002_remove_guardian_junior_code.py

@@ -1,17 +0,0 @@
-# Generated by Django 4.2.2 on 2023-06-27 06:15
-
-from django.db import migrations
-
-
-class Migration(migrations.Migration):
-
-    dependencies = [
-        ('guardian', '0001_initial'),
-    ]
-
-    operations = [
-        migrations.RemoveField(
-            model_name='guardian',
-            name='junior_code',
-        ),
-    ]

guardian/migrations/0003_guardian_country_name.py

@@ -1,18 +0,0 @@
-# Generated by Django 4.2.2 on 2023-06-27 13:59
-
-from django.db import migrations, models
-
-
-class Migration(migrations.Migration):
-
-    dependencies = [
-        ('guardian', '0002_remove_guardian_junior_code'),
-    ]
-
-    operations = [
-        migrations.AddField(
-            model_name='guardian',
-            name='country_name',
-            field=models.CharField(blank=True, default=None, max_length=30, null=True),
-        ),
-    ]

guardian/models.py

@@ -1,40 +0,0 @@
-"""Guardian model file"""
-"""Third party Django app"""
-from django.db import models
-from django.contrib.auth import get_user_model
-"""Import Django app"""
-from base.constants import GENDERS
-User = get_user_model()
-# Create your models here.
-
-class Guardian(models.Model):
-    """Guardian model"""
-    user = models.ForeignKey(User, on_delete=models.CASCADE, related_name='guardian_profile', verbose_name='Email')
-    """Contact details"""
-    country_code = models.IntegerField(blank=True, null=True)
-    phone = models.CharField(max_length=31, null=True, blank=True, default=None)
-    country_name = models.CharField(max_length=30, null=True, blank=True, default=None)
-    """Personal info"""
-    family_name = models.CharField(max_length=50, null=True, blank=True, default=None)
-    gender = models.CharField(choices=GENDERS, max_length=15, null=True, blank=True, default=None)
-    dob = models.DateField(max_length=15, null=True, blank=True, default=None)
-    """Codes"""
-    guardian_code = models.CharField(max_length=10, null=True, blank=True, default=None)
-    referral_code = models.CharField(max_length=10, null=True, blank=True, default=None)
-    referral_code_used = models.CharField(max_length=10, null=True, blank=True, default=None)
-    """Profile activity"""
-    is_active = models.BooleanField(default=True)
-    is_complete_profile = models.BooleanField(default=False)
-    passcode = models.IntegerField(null=True, blank=True, default=None)
-    """Profile created and updated time"""
-    created_at = models.DateTimeField(auto_now_add=True)
-    updated_at = models.DateTimeField(auto_now=True)
-
-    class Meta(object):
-        """ Meta class """
-        db_table = 'guardians'
-        verbose_name = 'Guardian'
-
-    def __str__(self):
-        """Return email id"""
-        return f'{self.user}'

guardian/serializers.py

@@ -1,117 +0,0 @@
-"""Serializer of Guardian"""
-"""Third party Django app"""
-import logging
-import random
-from rest_framework import serializers
-from rest_framework_simplejwt.tokens import RefreshToken
-from django.db import transaction
-from django.contrib.auth.models import User
-"""Import Django app"""
-from .models import Guardian
-from account.models import UserProfile
-from base.messages import ERROR_CODE, SUCCESS_CODE
-class UserSerializer(serializers.ModelSerializer):
-    """User serializer"""
-    auth_token = serializers.SerializerMethodField('get_auth_token')
-
-    class Meta(object):
-        """Meta info"""
-        model = User
-        fields = ['email', 'password', 'auth_token']
-
-    def get_auth_token(self, obj):
-        """generate auth token"""
-        refresh = RefreshToken.for_user(obj)
-        access_token = str(refresh.access_token)
-        return access_token
-    def create(self, validated_data):
-        """fetch data"""
-        email = validated_data.get('email')
-        user_type = self.context
-        password = validated_data.get('password')
-        try:
-            """Create user profile"""
-            user = User.objects.create_user(username=email, email=email, password=password)
-            UserProfile.objects.create(user=user, user_type=user_type)
-            return user
-        except Exception as e:
-            """Error handling"""
-            logging.error(e)
-            raise serializers.ValidationError({"details":ERROR_CODE['2021']})
-
-    def save(self, **kwargs):
-        """save the data"""
-        with transaction.atomic():
-            instance = super().save(**kwargs)
-            return instance
-
-class CreateGuardianSerializer(serializers.ModelSerializer):
-    """Create guardian serializer"""
-    """Basic info"""
-    first_name = serializers.SerializerMethodField('get_first_name')
-    last_name = serializers.SerializerMethodField('get_last_name')
-    email = serializers.SerializerMethodField('get_email')
-    """Contact details"""
-    phone = serializers.CharField(max_length=20, required=False)
-    country_code = serializers.IntegerField(required=False)
-    family_name = serializers.CharField(max_length=100, required=False)
-    dob = serializers.DateField(required=False)
-    referral_code = serializers.CharField(max_length=100, required=False)
-
-    class Meta(object):
-        """Meta info"""
-        model = Guardian
-        fields = ['first_name', 'last_name', 'email', 'phone', 'family_name', 'gender', 'country_code',
-                  'dob', 'referral_code', 'passcode', 'is_complete_profile']
-
-    def get_first_name(self,obj):
-        """first name of guardian"""
-        return obj.user.first_name
-
-    def get_last_name(self,obj):
-        """last name of guardian"""
-        return obj.user.last_name
-
-    def get_email(self,obj):
-        """emailof guardian"""
-        return obj.user.email
-
-    def create(self, validated_data):
-        """Create guardian profile"""
-        user = User.objects.filter(username=self.context['user']).last()
-        if user:
-            """Save first and last name of guardian"""
-            user.first_name = self.context.get('first_name', user.first_name)
-            user.last_name = self.context.get('last_name', user.last_name)
-            user.save()
-        """Create guardian data"""
-        guardian, created = Guardian.objects.get_or_create(user=self.context['user'])
-        if created:
-            """Create referral code and guardian code"""
-            guardian.referral_code = ''.join([str(random.randrange(9)) for _ in range(4)])
-            guardian.guardian_code = ''.join([str(random.randrange(9)) for _ in range(4)])
-        if guardian:
-            """update details according to the data get from request"""
-            guardian.gender = validated_data.get('gender',guardian.gender)
-            guardian.family_name = validated_data.get('family_name', guardian.family_name)
-            guardian.dob = validated_data.get('dob',guardian.dob)
-            """Update country code and phone number"""
-            guardian.phone = validated_data.get('phone', guardian.phone)
-            guardian.country_code = validated_data.get('country_code', guardian.country_code)
-            guardian.passcode = validated_data.get('passcode', guardian.passcode)
-            guardian.country_name = validated_data.get('country_name', guardian.country_name)
-            guardian.referral_code_used = validated_data.get('referral_code_used', guardian.referral_code_used)
-            """Complete profile of the junior if below all data are filled"""
-            complete_profile_field = all([guardian.phone, guardian.gender, guardian.family_name,
-                                          guardian.dob, guardian.country_code, user.first_name, user.last_name])
-            guardian.is_complete_profile = False
-            if complete_profile_field:
-                guardian.is_complete_profile = True
-            guardian.save()
-        return guardian
-
-    def save(self, **kwargs):
-        """Save the data into junior table"""
-        with transaction.atomic():
-            instance = super().save(**kwargs)
-            return instance

guardian/tasks.py

@@ -1,6 +0,0 @@
-"""task files"""
-"""Django import"""
-import random
-def generate_otp():
-    """generate random otp"""
-    return ''.join([str(random.randrange(9)) for _ in range(6)])

guardian/tests.py

@@ -1,5 +0,0 @@
-"""Test file of Guardian"""
-"""Third party Django app"""
-from django.test import TestCase
-
-# Create your tests here.

guardian/urls.py

@@ -1,19 +0,0 @@
-""" Urls files"""
-"""Django import"""
-from django.urls import path, include
-from .views import SignupViewset, UpdateGuardianProfile
-"""Third party import"""
-from rest_framework import routers
-
-"""Define Router"""
-router = routers.SimpleRouter()
-
-"""API End points with router"""
-"""Sign up API"""
-router.register('sign-up', SignupViewset, basename='sign-up')
-"""Create guardian profile API"""
-router.register('create-guardian-profile', UpdateGuardianProfile, basename='update-guardian-profile')
-"""Define Url pattern"""
-urlpatterns = [
-    path('api/v1/', include(router.urls)),
-]

guardian/views.py

@@ -1,47 +0,0 @@
-"""Views of Guardian"""
-"""Third party Django app"""
-from rest_framework.permissions import IsAuthenticated
-from rest_framework import viewsets, status
-"""Import Django app"""
-from .serializers import UserSerializer
-from .serializers import CreateGuardianSerializer
-from account.models import UserEmailOtp
-from .tasks import generate_otp
-from account.utils import send_otp_email
-from account.utils import custom_response, custom_error_response
-from base.messages import ERROR_CODE, SUCCESS_CODE
-# Create your views here.
-class SignupViewset(viewsets.ModelViewSet):
-    """Signup view set"""
-    serializer_class = UserSerializer
-
-    def create(self, request, *args, **kwargs):
-        """Create user profile"""
-        serializer = UserSerializer(context=request.data['user_type'], data=request.data)
-        if serializer.is_valid():
-            serializer.save()
-            """Generate otp"""
-            otp = generate_otp()
-            UserEmailOtp.objects.create(email=request.data['email'], otp=otp)
-            """Send email to the register user"""
-            send_otp_email(request.data['email'], otp)
-            return custom_response(SUCCESS_CODE['3001'], {"email_otp": otp},
-                                   response_status=status.HTTP_200_OK)
-        return custom_error_response(serializer.errors, response_status=status.HTTP_400_BAD_REQUEST)
-
-class UpdateGuardianProfile(viewsets.ViewSet):
-    """Update guardian profile"""
-    serializer_class = CreateGuardianSerializer
-    permission_classes = [IsAuthenticated]
-
-    def create(self, request, *args, **kwargs):
-        """Create guardian profile"""
-        serializer = CreateGuardianSerializer(context={"user":request.user,
-                                                       "first_name":request.data.get('first_name', ''),
-                                                       "last_name": request.data.get('last_name',' ')},
-                                              data=request.data)
-        if serializer.is_valid():
-            """save serializer"""
-            serializer.save()
-            return custom_response(None, serializer.data,response_status=status.HTTP_200_OK)
-        return custom_error_response(serializer.errors, response_status=status.HTTP_400_BAD_REQUEST)

jest.base.config.ts

@@ -0,0 +1,35 @@
+import type { Config as JestConfig } from 'jest';
+import { pathsToModuleNameMapper } from 'ts-jest';
+import { compilerOptions as tsConfigCompilerOptions } from './tsconfig.json';
+
+type ArrayElement<A> = A extends readonly (infer T)[] ? T : never;
+type JestProjectConfig = Exclude<ArrayElement<JestConfig['projects']>, string>;
+
+const baseJestConfig: JestConfig = {
+  // ...
+};
+const baseJestProjectConfig: JestProjectConfig = {
+  testEnvironment: 'node',
+  transform: {
+    '^.+\\.(t|j)s$': 'ts-jest',
+  },
+  moduleNameMapper: pathsToModuleNameMapper(tsConfigCompilerOptions.paths, { prefix: '<rootDir>' }),
+  globalSetup: '<rootDir>/test/global-setup.ts',
+};
+const projects: { name?: string; rootDir: string }[] = [{ rootDir: '.' }];
+
+export function buildJestConfig(config?: {
+  jestConfigs?: JestConfig;
+  jestProjectConfigs?: JestProjectConfig;
+}): JestConfig {
+  return {
+    ...baseJestConfig,
+    ...config?.jestConfigs,
+    projects: projects.map(({ name, rootDir }) => ({
+      ...baseJestProjectConfig,
+      ...config?.jestProjectConfigs,
+      ...(name && { displayName: name }),
+      rootDir,
+    })),
+  };
+}

jest.config.ts

@@ -0,0 +1,16 @@
+import type { Config } from 'jest';
+import { buildJestConfig } from './jest.base.config';
+
+const config: Config = buildJestConfig({
+  jestProjectConfigs: {
+    testRegex: '.*\\.spec\\.ts$',
+    coveragePathIgnorePatterns: ['__testing__', 'entities', '<rootDir>/src/db', 'index.ts'],
+  },
+  jestConfigs: {
+    coverageDirectory: 'coverage',
+    collectCoverageFrom: ['<rootDir>/src/**/*.(t|j)s'],
+    coverageReporters: ['clover', 'json', 'lcov', 'text', 'text-summary', 'cobertura'],
+  },
+});
+
+export default config;

junior/admin.py

@@ -1,14 +0,0 @@
-"""Junior admin"""
-"""Third party Django app"""
-from django.contrib import admin
-"""Import Django app"""
-from .models import Junior
-# Register your models here.
-@admin.register(Junior)
-class JuniorAdmin(admin.ModelAdmin):
-    """Junior Admin"""
-    list_display = ['auth']
-
-    def __str__(self):
-        """Return email id"""
-        return self.auth__email

junior/apps.py

@@ -1,8 +0,0 @@
-"""App file"""
-"""Import AppConfig"""
-from django.apps import AppConfig
-
-class JuniorConfig(AppConfig):
-    """Junior config"""
-    default_auto_field = 'django.db.models.BigAutoField'
-    name = 'junior'

junior/migrations/0001_initial.py

@@ -1,42 +0,0 @@
-# Generated by Django 4.2.2 on 2023-06-23 12:05
-
-from django.conf import settings
-import django.contrib.postgres.fields
-from django.db import migrations, models
-import django.db.models.deletion
-
-
-class Migration(migrations.Migration):
-
-    initial = True
-
-    dependencies = [
-        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
-    ]
-
-    operations = [
-        migrations.CreateModel(
-            name='Junior',
-            fields=[
-                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
-                ('phone', models.CharField(blank=True, default=None, max_length=31, null=True)),
-                ('country_code', models.IntegerField(blank=True, null=True)),
-                ('gender', models.CharField(blank=True, choices=[('1', 'Male'), ('2', 'Female')], default=None, max_length=10, null=True)),
-                ('dob', models.DateField(blank=True, default=None, max_length=15, null=True)),
-                ('junior_code', models.CharField(blank=True, default=None, max_length=10, null=True)),
-                ('guardian_code', django.contrib.postgres.fields.ArrayField(base_field=models.CharField(blank=True, default=None, max_length=10, null=True), null=True, size=None)),
-                ('referral_code', models.CharField(blank=True, default=None, max_length=10, null=True)),
-                ('referral_code_used', models.CharField(blank=True, default=None, max_length=10, null=True)),
-                ('is_active', models.BooleanField(default=True)),
-                ('is_complete_profile', models.BooleanField(default=False)),
-                ('passcode', models.IntegerField(blank=True, default=None, null=True)),
-                ('created_at', models.DateTimeField(auto_now_add=True)),
-                ('updated_at', models.DateTimeField(auto_now=True)),
-                ('auth', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='junior_profile', to=settings.AUTH_USER_MODEL, verbose_name='Email')),
-            ],
-            options={
-                'verbose_name': 'Junior',
-                'db_table': 'junior',
-            },
-        ),
-    ]

junior/migrations/0002_junior_country_name.py

@@ -1,18 +0,0 @@
-# Generated by Django 4.2.2 on 2023-06-27 13:59
-
-from django.db import migrations, models
-
-
-class Migration(migrations.Migration):
-
-    dependencies = [
-        ('junior', '0001_initial'),
-    ]
-
-    operations = [
-        migrations.AddField(
-            model_name='junior',
-            name='country_name',
-            field=models.CharField(blank=True, default=None, max_length=30, null=True),
-        ),
-    ]

junior/models.py

@@ -1,42 +0,0 @@
-"""Junior model """
-"""Import django"""
-from django.db import models
-from django.contrib.auth import get_user_model
-from django.contrib.postgres.fields import ArrayField
-"""Import django app"""
-from base.constants import GENDERS
-User = get_user_model()
-# Create your models here.
-
-class Junior(models.Model):
-    """Junior model"""
-    auth = models.ForeignKey(User, on_delete=models.CASCADE, related_name='junior_profile', verbose_name='Email')
-    """Contact details"""
-    phone = models.CharField(max_length=31, null=True, blank=True, default=None)
-    country_code = models.IntegerField(blank=True, null=True)
-    country_name = models.CharField(max_length=30, null=True, blank=True, default=None)
-    """Personal info"""
-    gender = models.CharField(max_length=10, choices=GENDERS, null=True, blank=True, default=None)
-    dob = models.DateField(max_length=15, null=True, blank=True, default=None)
-    # image = models.ImageField(upload_to='images/')
-    """Codes"""
-    junior_code = models.CharField(max_length=10, null=True, blank=True, default=None)
-    guardian_code = ArrayField(models.CharField(max_length=10, null=True, blank=True, default=None),null=True)
-    referral_code = models.CharField(max_length=10, null=True, blank=True, default=None)
-    referral_code_used = models.CharField(max_length=10, null=True, blank=True, default=None)
-    """Profile activity"""
-    is_active = models.BooleanField(default=True)
-    is_complete_profile = models.BooleanField(default=False)
-    passcode = models.IntegerField(null=True, blank=True, default=None)
-    """Profile created and updated time"""
-    created_at = models.DateTimeField(auto_now_add=True)
-    updated_at = models.DateTimeField(auto_now=True)
-
-    class Meta(object):
-        """ Meta class """
-        db_table = 'junior'
-        verbose_name = 'Junior'
-
-    def __str__(self):
-        """Return email id"""
-        return f'{self.auth}'

junior/serializers.py

@@ -1,93 +0,0 @@
-"""Serializer file for junior"""
-"""Import Django 3rd party app"""
-from rest_framework import serializers
-from django.contrib.auth.models import User
-from django.db import transaction
-import random
-"""Import django app"""
-from junior.models import Junior
-
-class ListCharField(serializers.ListField):
-    """Serializer for Array field"""
-    child = serializers.CharField()
-
-    def to_representation(self, data):
-        """to represent the data"""
-        return data
-
-    def to_internal_value(self, data):
-        """internal value"""
-        if isinstance(data, list):
-            return data
-        raise serializers.ValidationError({"details":"Invalid input. Expected a list of strings."})
-
-
-class CreateJuniorSerializer(serializers.ModelSerializer):
-    """Create junior serializer"""
-    first_name = serializers.SerializerMethodField('get_first_name')
-    last_name = serializers.SerializerMethodField('get_last_name')
-    email = serializers.SerializerMethodField('get_email')
-    phone = serializers.CharField(max_length=20, required=False)
-    country_code = serializers.IntegerField(required=False)
-    dob = serializers.DateField(required=False)
-    referral_code = serializers.CharField(max_length=100, required=False)
-    guardian_code = ListCharField(required=False)
-
-    class Meta(object):
-        """Meta info"""
-        model = Junior
-        fields = ['first_name', 'last_name', 'email', 'phone', 'gender', 'country_code', 'dob', 'referral_code',
-                  'passcode', 'is_complete_profile', 'guardian_code']
-
-    def get_first_name(self,obj):
-        """first name of junior"""
-        return obj.auth.first_name
-
-    def get_last_name(self,obj):
-        """last name of junior"""
-        return obj.auth.last_name
-
-    def get_email(self,obj):
-        """email of junior"""
-        return obj.auth.email
-
-    def create(self, validated_data):
-        """Create junior profile"""
-        user = User.objects.filter(username=self.context['user']).last()
-        if user:
-            """Save first and last name of junior"""
-            user.first_name = self.context.get('first_name', user.first_name)
-            user.last_name = self.context.get('last_name', user.last_name)
-            user.save()
-        """Create junior data"""
-        junior, created = Junior.objects.get_or_create(auth=self.context['user'])
-        if created:
-            """Create referral code and junior code"""
-            junior.referral_code = ''.join([str(random.randrange(9)) for _ in range(4)])
-            junior.junior_code = ''.join([str(random.randrange(9)) for _ in range(4)])
-        if junior:
-            """update details according to the data get from request"""
-            junior.gender = validated_data.get('gender',junior.gender)
-            """Update guardian code"""
-            junior.guardian_code = validated_data.get('guardian_code', junior.guardian_code)
-            junior.dob = validated_data.get('dob',junior.dob)
-            junior.passcode = validated_data.get('passcode', junior.passcode)
-            junior.country_name = validated_data.get('country_name', junior.country_name)
-            """Update country code and phone number"""
-            junior.phone = validated_data.get('phone', junior.phone)
-            junior.country_code = validated_data.get('country_code', junior.country_code)
-            junior.referral_code_used = validated_data.get('referral_code_used', junior.referral_code_used)
-            """Complete profile of the junior if below all data are filled"""
-            complete_profile_field = all([junior.phone, junior.gender, junior.family_name,
-                                          junior.dob, junior.country_code, user.first_name, user.last_name])
-            junior.is_complete_profile = False
-            if complete_profile_field:
-                junior.is_complete_profile = True
-            junior.save()
-        return junior
-
-    def save(self, **kwargs):
-        """Save the data into junior table"""
-        with transaction.atomic():
-            instance = super().save(**kwargs)
-            return instance

junior/tests.py

@@ -1,5 +0,0 @@
-"""Junior test file"""
-"""Import TestCase"""
-from django.test import TestCase
-
-# Create your tests here.

junior/urls.py

@@ -1,19 +0,0 @@
-""" Urls files"""
-"""Django import"""
-from django.urls import path, include
-from .views import UpdateJuniorProfile, ValidateGuardianCode
-"""Third party import"""
-from rest_framework import routers
-
-"""Router"""
-router = routers.SimpleRouter()
-
-"""API End points with router"""
-"""Create junior profile API"""
-router.register('create-junior-profile', UpdateJuniorProfile, basename='profile-update')
-"""validate guardian code API"""
-router.register('validate-guardian-code', ValidateGuardianCode, basename='validate-guardian-code')
-"""Define url pattern"""
-urlpatterns = [
-    path('api/v1/', include(router.urls)),
-]

junior/views.py

@@ -1,40 +0,0 @@
-"""Junior view file"""
-from rest_framework import viewsets, status
-from rest_framework.permissions import IsAuthenticated
-"""Django app import"""
-from junior.models import Junior
-from .serializers import CreateJuniorSerializer
-from guardian.models import Guardian
-from base.messages import ERROR_CODE, SUCCESS_CODE
-from account.utils import custom_response, custom_error_response
-# Create your views here.
-class UpdateJuniorProfile(viewsets.ViewSet):
-    """Update junior profile"""
-    serializer_class = CreateJuniorSerializer
-    permission_classes = [IsAuthenticated]
-
-    def create(self, request, *args, **kwargs):
-        """Use CreateJuniorSerializer"""
-        serializer = CreateJuniorSerializer(context={"user":request.user,
-                                                     "first_name":request.data.get('first_name', ''),
-                                                     "last_name": request.data.get('last_name',' ')},
-                                            data=request.data)
-        if serializer.is_valid():
-            """save serializer"""
-            serializer.save()
-            return custom_response(None, serializer.data, response_status=status.HTTP_200_OK)
-        return custom_error_response(serializer.errors, response_status=status.HTTP_400_BAD_REQUEST)
-
-class ValidateGuardianCode(viewsets.ViewSet):
-    """Check guardian code exist or not"""
-    permission_classes = [IsAuthenticated]
-
-    def list(self, request, *args, **kwargs):
-        """check guardian code"""
-        guardian_code = self.request.GET.get('guardian_code').split(',')
-        for code in guardian_code:
-            guardian_data = Guardian.objects.filter(guardian_code=code).exists()
-            if guardian_data:
-                return custom_response(SUCCESS_CODE['3013'], response_status=status.HTTP_200_OK)
-            else:
-                return custom_error_response(ERROR_CODE["2022"], response_status=status.HTTP_400_BAD_REQUEST)

manage.py

@@ -1,25 +0,0 @@
-#!/usr/bin/env python
-"""Django's command-line utility for administrative tasks."""
-"""Django import"""
-import os
-import sys
-
-
-def main():
-    """Main function"""
-    os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'zod_bank.settings')
-    try:
-        """Import execute from command line function"""
-        from django.core.management import execute_from_command_line
-    except ImportError as exc:
-        """Show Exception error"""
-        raise ImportError(
-            "Couldn't import Django. Are you sure it's installed and "
-            "available on your PYTHONPATH environment variable? Did you "
-            "forget to activate a virtual environment?"
-        ) from exc
-    execute_from_command_line(sys.argv)
-
-
-if __name__ == '__main__':
-    main()

nest-cli.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://json.schemastore.org/nest-cli",
+  "collection": "@nestjs/schematics",
+  "sourceRoot": "src",
+  "compilerOptions": {
+    "deleteOutDir": true,
+    "watchAssets": true,
+    "assets": [
+      {
+        "include": "config",
+        "exclude": "**/*.md"
+      },
+      { "include": "common/modules/**/templates/**/*", "watchAssets": true },
+      { "include": "common/modules/neoleap/zod-certs" },
+      "i18n",
+      "files"
+    ]
+  }
+}

nginx/django.conf

@@ -1,24 +0,0 @@
-upstream web {
-   ip_hash;
-   server web:8000;
- }
-
- # portal
- server {
-   location / {
-         proxy_pass http://web/;
-         proxy_set_header Host $http_host;
-     }
-   listen 8000;
-   client_max_body_size 512M;
-   server_name localhost;
-   proxy_read_timeout 900;
-   proxy_connect_timeout 900;
-   proxy_send_timeout 900;
-   #proxy_set_header Host $http_host;
-
-   location /static {
-     autoindex on;
-     alias /usr/src/app/zod_bank/static/;
-   }
- }

package.json

@@ -0,0 +1,124 @@
+{
+  "name": "test",
+  "version": "0.0.1",
+  "description": "",
+  "author": "",
+  "private": true,
+  "license": "UNLICENSED",
+  "scripts": {
+    "build": "nest build",
+    "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
+    "start": "nest start",
+    "start:dev": "nest start --watch",
+    "start:debug": "nest start --debug --watch",
+    "start:prod": "node dist/main",
+    "lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",
+    "test": "jest",
+    "test:watch": "jest --watch",
+    "test:cov": "jest --coverage",
+    "test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand",
+    "test:e2e": "jest --config ./test/jest-e2e.json",
+    "typeorm:cli": "./node_modules/.bin/ts-node -r tsconfig-paths/register ./node_modules/.bin/typeorm",
+    "typeorm:cli-d": "ts-node -r tsconfig-paths/register ./node_modules/.bin/typeorm -d typeorm.cli.ts",
+    "migration:generate": "npm run typeorm:cli-d migration:generate",
+    "migration:create": "npm run typeorm:cli migration:create",
+    "migration:up": "npm run typeorm:cli-d migration:run",
+    "migration:down": "npm run typeorm:cli-d migration:revert",
+    "seed": "TS_NODE_PROJECT=tsconfig.json ts-node -r tsconfig-paths/register src/scripts/seed.ts"
+  },
+  "dependencies": {
+    "@abdalhamid/hello": "^2.0.0",
+    "@hamid/hello": "file:../libraries/test-package",
+    "@keyv/redis": "^4.0.2",
+    "@nestjs-modules/mailer": "^2.0.2",
+    "@nestjs/axios": "^3.1.2",
+    "@nestjs/common": "^10.0.0",
+    "@nestjs/config": "^3.3.0",
+    "@nestjs/core": "^10.0.0",
+    "@nestjs/event-emitter": "^2.1.1",
+    "@nestjs/jwt": "^10.2.0",
+    "@nestjs/microservices": "^10.4.7",
+    "@nestjs/passport": "^10.0.3",
+    "@nestjs/platform-express": "^10.4.8",
+    "@nestjs/schedule": "^4.1.2",
+    "@nestjs/swagger": "^8.0.5",
+    "@nestjs/terminus": "^10.2.3",
+    "@nestjs/throttler": "^6.2.1",
+    "@nestjs/typeorm": "^10.0.2",
+    "amqp-connection-manager": "^4.1.14",
+    "amqplib": "^0.10.4",
+    "bcrypt": "^5.1.1",
+    "cacheable": "^1.8.5",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.14.1",
+    "decimal.js": "^10.6.0",
+    "firebase-admin": "^13.0.2",
+    "google-libphonenumber": "^3.2.39",
+    "handlebars": "^4.7.8",
+    "handlebars-layouts": "^3.1.4",
+    "jwk-to-pem": "^2.0.7",
+    "lodash": "^4.17.21",
+    "moment": "^2.30.1",
+    "nestjs-i18n": "^10.4.9",
+    "nestjs-pino": "^4.1.0",
+    "nestjs-twilio": "^4.4.0",
+    "nodemailer": "^6.9.16",
+    "oci-common": "^2.99.0",
+    "oci-sdk": "^2.99.0",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.1",
+    "pg": "^8.13.1",
+    "pino-http": "^10.3.0",
+    "pino-pretty": "^13.0.0",
+    "qrcode": "^1.5.4",
+    "reflect-metadata": "^0.2.2",
+    "rxjs": "^7.8.1",
+    "typeorm": "^0.3.20",
+    "typeorm-transactional": "^0.5.0"
+  },
+  "devDependencies": {
+    "@golevelup/ts-jest": "^0.6.0",
+    "@nestjs/cli": "^10.0.0",
+    "@nestjs/schematics": "^10.0.0",
+    "@nestjs/testing": "^10.0.0",
+    "@types/bcrypt": "^5.0.2",
+    "@types/express": "^5.0.0",
+    "@types/google-libphonenumber": "^7.4.30",
+    "@types/jest": "^29.5.2",
+    "@types/jwk-to-pem": "^2.0.3",
+    "@types/lodash": "^4.17.13",
+    "@types/multer": "^1.4.12",
+    "@types/node": "^20.3.1",
+    "@types/nodemailer": "^6.4.16",
+    "@types/passport-jwt": "^4.0.1",
+    "@types/qrcode": "^1.5.5",
+    "@types/supertest": "^6.0.0",
+    "@types/uuid": "^10.0.0",
+    "@typescript-eslint/eslint-plugin": "^5.59.2",
+    "@typescript-eslint/parser": "^5.59.2",
+    "eslint": "^8.39.0",
+    "eslint-config-prettier": "^8.8.0",
+    "eslint-plugin-prettier": "^4.0.0",
+    "eslint-plugin-security": "^1.7.1",
+    "i": "^0.3.7",
+    "jest": "^29.5.0",
+    "lint-staged": "^13.2.2",
+    "npm": "^10.9.2",
+    "prettier": "^2.8.8",
+    "source-map-support": "^0.5.21",
+    "supertest": "^7.0.0",
+    "ts-jest": "^29.1.0",
+    "ts-loader": "^9.4.3",
+    "ts-node": "^10.9.1",
+    "tsconfig-paths": "^4.2.0",
+    "typescript": "^5.1.3"
+  },
+  "lint-staged": {
+    "*.{js,ts}": [
+      "eslint --fix"
+    ],
+    "*.{js,ts,json,md}": [
+      "prettier --write"
+    ]
+  }
+}

requirements.txt

@@ -1,61 +0,0 @@
-aliyun-python-sdk-core==2.13.36
-aliyun-python-sdk-dysmsapi==2.1.2
-amqp==5.1.1
-asgiref==3.7.2
-async-timeout==4.0.2
-billiard==4.1.0
-boto3==1.26.157
-botocore==1.29.157
-celery==5.3.1
-cffi==1.15.1
-channels==4.0.0
-channels-redis==4.1.0
-click==8.1.3
-click-didyoumean==0.3.0
-click-plugins==1.1.1
-click-repl==0.3.0
-cron-descriptor==1.4.0
-cryptography==41.0.1
-decouple==0.0.7
-Django==4.2.2
-django-celery-beat==2.5.0
-django-celery-results==2.5.1
-django-cors-headers==4.1.0
-django-dotenv==1.4.2
-django-extensions==3.2.3
-django-phonenumber-field==7.1.0
-django-render-block==0.9.2
-django-ses==3.5.0
-django-smtp-ssl==1.0
-django-storages==1.13.2
-django-templated-email==3.0.1
-django-timezone-field==5.1
-djangorestframework==3.14.0
-djangorestframework-simplejwt==5.2.2
-drf-yasg==1.21.6
-gunicorn==20.1.0
-inflection==0.5.1
-jmespath==0.10.0
-kombu==5.3.1
-msgpack==1.0.5
-packaging==23.1
-phonenumbers==8.13.15
-prompt-toolkit==3.0.38
-psycopg==3.1.9
-pycparser==2.21
-PyJWT==2.7.0
-python-crontab==2.7.1
-python-dateutil==2.8.2
-python-dotenv==1.0.0
-pytz==2023.3
-PyYAML==6.0
-redis==4.5.5
-s3transfer==0.6.1
-six==1.16.0
-sqlparse==0.4.4
-typing_extensions==4.6.3
-tzdata==2023.3
-uritemplate==4.1.1
-urllib3==1.26.16
-vine==5.0.0
-wcwidth==0.2.6

src/app.module.ts

@@ -0,0 +1,97 @@
+import { MiddlewareConsumer, Module } from '@nestjs/common';
+import { ConfigModule, ConfigService } from '@nestjs/config';
+import { APP_FILTER, APP_PIPE } from '@nestjs/core';
+import { EventEmitterModule } from '@nestjs/event-emitter';
+import { ScheduleModule } from '@nestjs/schedule';
+import { TypeOrmModule } from '@nestjs/typeorm';
+import { I18nMiddleware, I18nModule } from 'nestjs-i18n';
+import { LoggerModule } from 'nestjs-pino';
+import { DataSource } from 'typeorm';
+import { addTransactionalDataSource } from 'typeorm-transactional';
+import { AuthModule } from './auth/auth.module';
+import { CardModule } from './card/card.module';
+import { CacheModule } from './common/modules/cache/cache.module';
+import { LookupModule } from './common/modules/lookup/lookup.module';
+import { NeoLeapModule } from './common/modules/neoleap/neoleap.module';
+import { NotificationModule } from './common/modules/notification/notification.module';
+import { OtpModule } from './common/modules/otp/otp.module';
+import { AllExceptionsFilter, buildI18nValidationExceptionFilter } from './core/filters';
+import { buildConfigOptions, buildLoggerOptions, buildTypeormOptions } from './core/module-options';
+import { buildI18nOptions } from './core/module-options/i18n-options';
+import { buildValidationPipe } from './core/pipes';
+import { CronModule } from './cron/cron.module';
+import { CustomerModule } from './customer/customer.module';
+import { migrations } from './db';
+import { DocumentModule } from './document/document.module';
+import { GuardianModule } from './guardian/guardian.module';
+import { HealthModule } from './health/health.module';
+import { JuniorModule } from './junior/junior.module';
+import { UserModule } from './user/user.module';
+import { WebhookModule } from './webhook/webhook.module';
+import { MoneyRequestModule } from './money-request/money-request.module';
+
+@Module({
+  controllers: [],
+  imports: [
+    ConfigModule.forRoot(buildConfigOptions()),
+    TypeOrmModule.forRootAsync({
+      imports: [],
+      inject: [ConfigService],
+      useFactory: (config: ConfigService) => {
+        return buildTypeormOptions(config, migrations);
+      },
+      async dataSourceFactory(options) {
+        if (!options) {
+          throw new Error('Invalid options passed');
+        }
+
+        return addTransactionalDataSource(new DataSource(options));
+      },
+    }),
+    LoggerModule.forRootAsync({
+      useFactory: (config: ConfigService) => buildLoggerOptions(config),
+      inject: [ConfigService],
+    }),
+    I18nModule.forRoot(buildI18nOptions()),
+    CacheModule,
+    EventEmitterModule.forRoot(),
+    ScheduleModule.forRoot(),
+    // App modules
+    AuthModule,
+    UserModule,
+
+    CustomerModule,
+    JuniorModule,
+    GuardianModule,
+    CardModule,
+
+    NotificationModule,
+    OtpModule,
+    DocumentModule,
+    LookupModule,
+
+    HealthModule,
+
+    CronModule,
+    NeoLeapModule,
+    WebhookModule,
+    MoneyRequestModule,
+  ],
+  providers: [
+    // Global Pipes
+    {
+      inject: [ConfigService],
+      provide: APP_PIPE,
+      useFactory: (config: ConfigService) => buildValidationPipe(config),
+    },
+
+    // Global Filters (order matters)
+    { provide: APP_FILTER, useClass: AllExceptionsFilter },
+    { provide: APP_FILTER, useValue: buildI18nValidationExceptionFilter() },
+  ],
+})
+export class AppModule {
+  configure(consumer: MiddlewareConsumer) {
+    consumer.apply(I18nMiddleware).forRoutes('*');
+  }
+}

src/auth/auth.module.ts

@@ -0,0 +1,16 @@
+import { HttpModule } from '@nestjs/axios';
+import { Module } from '@nestjs/common';
+import { JwtModule } from '@nestjs/jwt';
+import { JuniorModule } from '~/junior/junior.module';
+import { UserModule } from '~/user/user.module';
+import { AuthController } from './controllers';
+import { AuthService } from './services';
+import { AccessTokenStrategy } from './strategies';
+
+@Module({
+  imports: [JwtModule.register({}), UserModule, JuniorModule, HttpModule],
+  providers: [AuthService, AccessTokenStrategy],
+  controllers: [AuthController],
+  exports: [],
+})
+export class AuthModule {}

src/auth/constants/country-code-regex.constant..ts

@@ -0,0 +1 @@
+export const COUNTRY_CODE_REGEX = /^\+\d{1,3}$/;

src/auth/constants/index.ts

@@ -0,0 +1,3 @@
+export * from './country-code-regex.constant.';
+export * from './passcode-regext.constant';
+export * from './password-regex.constant';

src/auth/constants/passcode-regext.constant.ts

@@ -0,0 +1 @@
+export const PASSCODE_REGEX = /^\d{6}$/;

src/auth/constants/password-regex.constant.ts

@@ -0,0 +1 @@
+export const PASSWORD_REGEX = /^(?=.*[A-Z])(?=.*[a-z])(?=.*\d)(?=.*[@$!%*?&#\-_])[A-Za-z\d@$!%*?&#\-_]{8,}$/;

src/auth/controllers/auth.controller.ts

@@ -0,0 +1,107 @@
+import { Body, Controller, HttpCode, HttpStatus, Post, Req, UseGuards } from '@nestjs/common';
+import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
+import { Request } from 'express';
+import { AuthenticatedUser, Public } from '~/common/decorators';
+import { AccessTokenGuard } from '~/common/guards';
+import { ApiDataResponse, ApiLangRequestHeader } from '~/core/decorators';
+import { ResponseFactory } from '~/core/utils';
+import {
+  ChangePasswordRequestDto,
+  CreateUnverifiedUserRequestDto,
+  ForgetPasswordRequestDto,
+  JuniorLoginRequestDto,
+  LoginRequestDto,
+  RefreshTokenRequestDto,
+  SendForgetPasswordOtpRequestDto,
+  setJuniorPasswordRequestDto,
+  VerifyForgetPasswordOtpRequestDto,
+  VerifyUserRequestDto,
+} from '../dtos/request';
+import { SendForgetPasswordOtpResponseDto, SendRegisterOtpResponseDto } from '../dtos/response';
+import { LoginResponseDto } from '../dtos/response/login.response.dto';
+import { VerifyForgetPasswordOtpResponseDto } from '../dtos/response/verify-forget-password-otp.response.dto';
+import { IJwtPayload } from '../interfaces';
+import { AuthService } from '../services';
+
+@Controller('auth')
+@ApiTags('Auth')
+@ApiBearerAuth()
+@ApiLangRequestHeader()
+export class AuthController {
+  constructor(private readonly authService: AuthService) {}
+  @Post('register/otp')
+  async register(@Body() createUnverifiedUserDto: CreateUnverifiedUserRequestDto) {
+    const phoneNumber = await this.authService.sendRegisterOtp(createUnverifiedUserDto);
+    return ResponseFactory.data(new SendRegisterOtpResponseDto(phoneNumber));
+  }
+
+  @Post('register/verify')
+  async verifyUser(@Body() verifyUserDto: VerifyUserRequestDto) {
+    const [res, user] = await this.authService.verifyUser(verifyUserDto);
+    return ResponseFactory.data(new LoginResponseDto(res, user));
+  }
+
+  @Post('login')
+  async login(@Body() verifyUserDto: LoginRequestDto) {
+    const [res, user] = await this.authService.loginWithPassword(verifyUserDto);
+    return ResponseFactory.data(new LoginResponseDto(res, user));
+  }
+
+  @Post('forget-password/otp')
+  async forgetPassword(@Body() sendForgetPasswordOtpDto: SendForgetPasswordOtpRequestDto) {
+    const maskedNumber = await this.authService.sendForgetPasswordOtp(sendForgetPasswordOtpDto);
+    return ResponseFactory.data(new SendForgetPasswordOtpResponseDto(maskedNumber));
+  }
+
+  @Post('forget-password/verify')
+  @HttpCode(HttpStatus.OK)
+  @ApiDataResponse(VerifyForgetPasswordOtpResponseDto)
+  async verifyForgetPasswordOtp(@Body() forgetPasswordDto: VerifyForgetPasswordOtpRequestDto) {
+    const { token, user } = await this.authService.verifyForgetPasswordOtp(forgetPasswordDto);
+
+    return ResponseFactory.data(new VerifyForgetPasswordOtpResponseDto(token, user));
+  }
+
+  @Post('forget-password/reset')
+  @HttpCode(HttpStatus.NO_CONTENT)
+  resetPassword(@Body() forgetPasswordDto: ForgetPasswordRequestDto) {
+    return this.authService.resetPassword(forgetPasswordDto);
+  }
+
+  @Post('change-password')
+  @HttpCode(HttpStatus.NO_CONTENT)
+  @UseGuards(AccessTokenGuard)
+  changePassword(@AuthenticatedUser() { sub }: IJwtPayload, @Body() forgetPasswordDto: ChangePasswordRequestDto) {
+    return this.authService.changePassword(sub, forgetPasswordDto);
+  }
+
+  @Post('junior/set-password')
+  @HttpCode(HttpStatus.NO_CONTENT)
+  @Public()
+  setJuniorPasscode(@Body() setPassworddto: setJuniorPasswordRequestDto) {
+    return this.authService.setJuniorPassword(setPassworddto);
+  }
+
+  @Post('junior/login')
+  @HttpCode(HttpStatus.OK)
+  @ApiDataResponse(LoginResponseDto)
+  async juniorLogin(@Body() juniorLoginDto: JuniorLoginRequestDto) {
+    const [res, user] = await this.authService.juniorLogin(juniorLoginDto);
+
+    return ResponseFactory.data(new LoginResponseDto(res, user));
+  }
+
+  @Post('refresh-token')
+  @Public()
+  async refreshToken(@Body() { refreshToken }: RefreshTokenRequestDto) {
+    const [res, user] = await this.authService.refreshToken(refreshToken);
+    return ResponseFactory.data(new LoginResponseDto(res, user));
+  }
+
+  @Post('logout')
+  @HttpCode(HttpStatus.NO_CONTENT)
+  @UseGuards(AccessTokenGuard)
+  async logout(@Req() request: Request) {
+    await this.authService.logout(request);
+  }
+}

src/auth/controllers/index.ts

@@ -0,0 +1 @@
+export * from './auth.controller';

src/auth/dtos/request/change-password.request.dto.ts

@@ -0,0 +1,23 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsNotEmpty, IsString, Matches } from 'class-validator';
+import { i18nValidationMessage as i18n } from 'nestjs-i18n';
+import { PASSWORD_REGEX } from '~/auth/constants';
+
+export class ChangePasswordRequestDto {
+  @ApiProperty({ example: 'currentPassword@123' })
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.currentPassword' }) })
+  @IsNotEmpty({ message: i18n('validation.IsNotEmpty', { path: 'general', property: 'auth.currentPassword' }) })
+  currentPassword!: string;
+
+  @ApiProperty({ example: 'Abcd1234@' })
+  @Matches(PASSWORD_REGEX, {
+    message: i18n('validation.Matches', { path: 'general', property: 'auth.newPassword' }),
+  })
+  newPassword!: string;
+
+  @ApiProperty({ example: 'Abcd1234@' })
+  @Matches(PASSWORD_REGEX, {
+    message: i18n('validation.Matches', { path: 'general', property: 'auth.confirmNewPassword' }),
+  })
+  confirmNewPassword!: string;
+}

src/auth/dtos/request/create-unverified-user.request.dto.ts

@@ -0,0 +1,4 @@
+import { OmitType } from '@nestjs/swagger';
+import { VerifyUserRequestDto } from './verify-user.request.dto';
+
+export class CreateUnverifiedUserRequestDto extends OmitType(VerifyUserRequestDto, ['otp']) {}

src/auth/dtos/request/forget-password.request.dto.ts

@@ -0,0 +1,34 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsString, Matches } from 'class-validator';
+import { i18nValidationMessage as i18n } from 'nestjs-i18n';
+import { COUNTRY_CODE_REGEX, PASSWORD_REGEX } from '~/auth/constants';
+import { IsValidPhoneNumber } from '~/core/decorators/validations';
+export class ForgetPasswordRequestDto {
+  @ApiProperty({ example: '+962' })
+  @Matches(COUNTRY_CODE_REGEX, {
+    message: i18n('validation.Matches', { path: 'general', property: 'auth.countryCode' }),
+  })
+  countryCode!: string;
+
+  @ApiProperty({ example: '787259134' })
+  @IsValidPhoneNumber({
+    message: i18n('validation.IsValidPhoneNumber', { path: 'general', property: 'auth.phoneNumber' }),
+  })
+  phoneNumber!: string;
+
+  @ApiProperty({ example: 'Abcd1234@' })
+  @Matches(PASSWORD_REGEX, {
+    message: i18n('validation.Matches', { path: 'general', property: 'auth.password' }),
+  })
+  password!: string;
+
+  @ApiProperty({ example: 'Abcd1234@' })
+  @Matches(PASSWORD_REGEX, {
+    message: i18n('validation.Matches', { path: 'general', property: 'auth.confirmPassword' }),
+  })
+  confirmPassword!: string;
+
+  @ApiProperty({ example: 'reset-token-32423123' })
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.resetPasswordToken' }) })
+  resetPasswordToken!: string;
+}

src/auth/dtos/request/index.ts

@@ -0,0 +1,11 @@
+export * from './change-password.request.dto';
+export * from './create-unverified-user.request.dto';
+export * from './forget-password.request.dto';
+export * from './junior-login.request.dto';
+export * from './login.request.dto';
+export * from './refresh-token.request.dto';
+export * from './send-forget-password-otp.request.dto';
+export * from './set-junior-password.request.dto';
+export * from './verify-forget-password-otp.request.dto';
+export * from './verify-otp.request.dto';
+export * from './verify-user.request.dto';

src/auth/dtos/request/junior-login.request.dto.ts

@@ -0,0 +1,35 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsEmail, IsOptional, IsString } from 'class-validator';
+import { i18nValidationMessage as i18n } from 'nestjs-i18n';
+export class JuniorLoginRequestDto {
+  @ApiProperty({ example: '[email protected]' })
+  @IsEmail({}, { message: i18n('validation.IsEmail', { path: 'general', property: 'auth.email' }) })
+  email!: string;
+
+  @ApiProperty({ example: 'Abcd1234@' })
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.password' }) })
+  password!: string;
+
+  @ApiProperty({ example: 'device-123', description: 'Unique device identifier', required: false })
+  @IsOptional()
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.deviceId' }) })
+  deviceId?: string;
+
+  @ApiProperty({
+    example: 'cXYzABC:APA91bHunvwY7rKpn8N7y6vDxS0qmQ5RZx2C8K...',
+    description: 'Firebase Cloud Messaging token for push notifications',
+    required: false,
+  })
+  @IsOptional()
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.fcmToken' }) })
+  fcmToken?: string;
+
+  @ApiProperty({
+    example: 'Asia/Riyadh',
+    description: 'Device timezone (auto-detected from device OS)',
+    required: false,
+  })
+  @IsOptional()
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.timezone' }) })
+  timezone?: string;
+}

src/auth/dtos/request/login.request.dto.ts

@@ -0,0 +1,47 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsEmail, IsEnum, IsNotEmpty, IsOptional, IsString, Matches, ValidateIf } from 'class-validator';
+import { i18nValidationMessage as i18n } from 'nestjs-i18n';
+import { COUNTRY_CODE_REGEX } from '~/auth/constants';
+import { GrantType } from '~/auth/enums';
+import { IsValidPhoneNumber } from '~/core/decorators/validations';
+export class LoginRequestDto {
+  @ApiProperty({ example: '+962' })
+  @Matches(COUNTRY_CODE_REGEX, {
+    message: i18n('validation.Matches', { path: 'general', property: 'auth.countryCode' }),
+  })
+  countryCode!: string;
+
+  @ApiProperty({ example: '787259134' })
+  @IsValidPhoneNumber({
+    message: i18n('validation.IsValidPhoneNumber', { path: 'general', property: 'auth.phoneNumber' }),
+  })
+  phoneNumber!: string;
+
+  @ApiProperty({ example: 'Abcd1234@' })
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.password' }) })
+  @ValidateIf((o) => o.grantType === GrantType.PASSWORD)
+  password!: string;
+
+  @ApiProperty({ example: 'device-123', description: 'Unique device identifier', required: false })
+  @IsOptional()
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.deviceId' }) })
+  deviceId?: string;
+
+  @ApiProperty({
+    example: 'cXYzABC:APA91bHunvwY7rKpn8N7y6vDxS0qmQ5RZx2C8K...',
+    description: 'Firebase Cloud Messaging token for push notifications',
+    required: false,
+  })
+  @IsOptional()
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.fcmToken' }) })
+  fcmToken?: string;
+
+  @ApiProperty({
+    example: 'Asia/Riyadh',
+    description: 'Device timezone (auto-detected from device OS)',
+    required: false,
+  })
+  @IsOptional()
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.timezone' }) })
+  timezone?: string;
+}

src/auth/dtos/request/refresh-token.request.dto.ts

@@ -0,0 +1,9 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsNotEmpty, IsString } from 'class-validator';
+import { i18nValidationMessage as i18n } from 'nestjs-i18n';
+export class RefreshTokenRequestDto {
+  @ApiProperty()
+  @IsString({ message: i18n('validation.isString', { path: 'general', property: 'auth.refreshToken' }) })
+  @IsNotEmpty({ message: i18n('validation.required', { path: 'general', property: 'auth.refreshToken' }) })
+  refreshToken!: string;
+}

src/auth/dtos/request/send-forget-password-otp.request.dto.ts

@@ -0,0 +1,4 @@
+import { PickType } from '@nestjs/swagger';
+import { LoginRequestDto } from './login.request.dto';
+
+export class SendForgetPasswordOtpRequestDto extends PickType(LoginRequestDto, ['countryCode', 'phoneNumber']) {}

src/auth/dtos/request/set-junior-password.request.dto.ts

@@ -0,0 +1,13 @@
+import { ApiProperty, PickType } from '@nestjs/swagger';
+import { IsNotEmpty, IsString } from 'class-validator';
+import { i18nValidationMessage as i18n } from 'nestjs-i18n';
+import { ChangePasswordRequestDto } from './change-password.request.dto';
+export class setJuniorPasswordRequestDto extends PickType(ChangePasswordRequestDto, [
+  'newPassword',
+  'confirmNewPassword',
+]) {
+  @ApiProperty()
+  @IsString({ message: i18n('validation.IsNumberString', { path: 'general', property: 'auth.qrToken' }) })
+  @IsNotEmpty({ message: i18n('validation.IsNotEmpty', { path: 'general', property: 'auth.qrToken' }) })
+  qrToken!: string;
+}

src/auth/dtos/request/verify-forget-password-otp.request.dto.ts

@@ -0,0 +1,23 @@
+import { ApiProperty, PickType } from '@nestjs/swagger';
+import { IsNumberString, MaxLength, MinLength } from 'class-validator';
+import { i18nValidationMessage as i18n } from 'nestjs-i18n';
+import { DEFAULT_OTP_LENGTH } from '~/common/modules/otp/constants';
+import { ForgetPasswordRequestDto } from './forget-password.request.dto';
+
+export class VerifyForgetPasswordOtpRequestDto extends PickType(ForgetPasswordRequestDto, [
+  'countryCode',
+  'phoneNumber',
+]) {
+  @ApiProperty({ example: '111111' })
+  @IsNumberString(
+    { no_symbols: true },
+    { message: i18n('validation.IsNumberString', { path: 'general', property: 'auth.otp' }) },
+  )
+  @MaxLength(DEFAULT_OTP_LENGTH, {
+    message: i18n('validation.MaxLength', { path: 'general', property: 'auth.otp', length: DEFAULT_OTP_LENGTH }),
+  })
+  @MinLength(DEFAULT_OTP_LENGTH, {
+    message: i18n('validation.MinLength', { path: 'general', property: 'auth.otp', length: DEFAULT_OTP_LENGTH }),
+  })
+  otp!: string;
+}

src/auth/dtos/request/verify-otp.request.dto.ts

@@ -0,0 +1,19 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsNumberString, MaxLength, MinLength } from 'class-validator';
+import { i18nValidationMessage as i18n } from 'nestjs-i18n';
+import { DEFAULT_OTP_LENGTH } from '~/common/modules/otp/constants';
+
+export class VerifyOtpRequestDto {
+  @ApiProperty({ example: '111111' })
+  @IsNumberString(
+    { no_symbols: true },
+    { message: i18n('validation.IsNumberString', { path: 'general', property: 'auth.otp' }) },
+  )
+  @MaxLength(DEFAULT_OTP_LENGTH, {
+    message: i18n('validation.MaxLength', { path: 'general', property: 'auth.otp', length: DEFAULT_OTP_LENGTH }),
+  })
+  @MinLength(DEFAULT_OTP_LENGTH, {
+    message: i18n('validation.MinLength', { path: 'general', property: 'auth.otp', length: DEFAULT_OTP_LENGTH }),
+  })
+  otp!: string;
+}

src/auth/dtos/request/verify-user.request.dto.ts

@@ -0,0 +1,127 @@
+import { ApiProperty } from '@nestjs/swagger';
+import {
+  IsEnum,
+  IsNotEmpty,
+  IsNumberString,
+  IsOptional,
+  IsString,
+  Matches,
+  MaxLength,
+  MinLength,
+} from 'class-validator';
+import { i18nValidationMessage as i18n } from 'nestjs-i18n';
+import { COUNTRY_CODE_REGEX, PASSWORD_REGEX } from '~/auth/constants';
+import { CountryIso } from '~/common/enums';
+import { DEFAULT_OTP_LENGTH } from '~/common/modules/otp/constants';
+import { IsValidPhoneNumber } from '~/core/decorators/validations';
+
+export class VerifyUserRequestDto {
+  @ApiProperty({ example: '+962' })
+  @Matches(COUNTRY_CODE_REGEX, {
+    message: i18n('validation.Matches', { path: 'general', property: 'auth.countryCode' }),
+  })
+  countryCode!: string;
+
+  @ApiProperty({ example: '787259134' })
+  @IsValidPhoneNumber({
+    message: i18n('validation.IsValidPhoneNumber', { path: 'general', property: 'auth.phoneNumber' }),
+  })
+  phoneNumber!: string;
+  @ApiProperty({ example: 'John' })
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'customer.firstName' }) })
+  @IsNotEmpty({ message: i18n('validation.IsNotEmpty', { path: 'general', property: 'customer.firstName' }) })
+  firstName!: string;
+
+  @ApiProperty({ example: 'Doe' })
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'customer.lastName' }) })
+  @IsNotEmpty({ message: i18n('validation.IsNotEmpty', { path: 'general', property: 'customer.lastName' }) })
+  lastName!: string;
+
+  @ApiProperty({ example: 'JO' })
+  @IsEnum(CountryIso, {
+    message: i18n('validation.IsEnum', { path: 'general', property: 'customer.countryOfResidence' }),
+  })
+  @IsOptional()
+  countryOfResidence: CountryIso = CountryIso.SAUDI_ARABIA;
+
+  // Address fields (optional during registration, required for card creation)
+  @ApiProperty({ example: 'SA', description: 'Country code', required: false })
+  @IsEnum(CountryIso, {
+    message: i18n('validation.IsEnum', { path: 'general', property: 'customer.country' }),
+  })
+  @IsOptional()
+  country?: CountryIso;
+
+  @ApiProperty({ example: 'Riyadh', description: 'Region/Province', required: false })
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'customer.region' }) })
+  @IsOptional()
+  region?: string;
+
+  @ApiProperty({ example: 'Riyadh', description: 'City', required: false })
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'customer.city' }) })
+  @IsOptional()
+  city?: string;
+
+  @ApiProperty({ example: 'Al Olaya', description: 'Neighborhood/District', required: false })
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'customer.neighborhood' }) })
+  @IsOptional()
+  neighborhood?: string;
+
+  @ApiProperty({ example: 'King Fahd Road', description: 'Street name', required: false })
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'customer.street' }) })
+  @IsOptional()
+  street?: string;
+
+  @ApiProperty({ example: '123', description: 'Building number', required: false })
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'customer.building' }) })
+  @IsOptional()
+  building?: string;
+
+  @ApiProperty({ example: 'Abcd1234@' })
+  @Matches(PASSWORD_REGEX, {
+    message: i18n('validation.Matches', { path: 'general', property: 'auth.password' }),
+  })
+  password!: string;
+
+  @ApiProperty({ example: 'Abcd1234@' })
+  @Matches(PASSWORD_REGEX, {
+    message: i18n('validation.Matches', { path: 'general', property: 'auth.confirmPassword' }),
+  })
+  confirmPassword!: string;
+
+  @ApiProperty({ example: '111111' })
+  @IsNumberString(
+    { no_symbols: true },
+    { message: i18n('validation.IsNumberString', { path: 'general', property: 'auth.otp' }) },
+  )
+  @MaxLength(DEFAULT_OTP_LENGTH, {
+    message: i18n('validation.MaxLength', { path: 'general', property: 'auth.otp', length: DEFAULT_OTP_LENGTH }),
+  })
+  @MinLength(DEFAULT_OTP_LENGTH, {
+    message: i18n('validation.MinLength', { path: 'general', property: 'auth.otp', length: DEFAULT_OTP_LENGTH }),
+  })
+  otp!: string;
+
+  @ApiProperty({ example: 'device-123', description: 'Unique device identifier', required: false })
+  @IsOptional()
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.deviceId' }) })
+  deviceId?: string;
+
+  @ApiProperty({
+    example: 'cXYzABC:APA91bHunvwY7rKpn8N7y6vDxS0qmQ5RZx2C8K...',
+    description: 'Firebase Cloud Messaging token for push notifications',
+    required: false,
+  })
+  @IsOptional()
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.fcmToken' }) })
+  fcmToken?: string;
+
+  @ApiProperty({
+    example: 'Asia/Riyadh',
+    description: 'Device timezone (auto-detected from device OS)',
+    required: false,
+  })
+  @IsOptional()
+  @IsString({ message: i18n('validation.IsString', { path: 'general', property: 'auth.timezone' }) })
+  timezone?: string;
+}

src/auth/dtos/response/index.ts

@@ -0,0 +1,4 @@
+export * from './send-forget-password.response.dto';
+export * from './send-register-otp.response.dto';
+export * from './user.response.dto';
+export * from './verify-user.response.dto';

src/auth/dtos/response/login.response.dto.ts

@@ -0,0 +1,30 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { ILoginResponse } from '~/auth/interfaces';
+import { CustomerResponseDto } from '~/customer/dtos/response';
+import { User } from '~/user/entities';
+import { UserResponseDto } from './user.response.dto';
+
+export class LoginResponseDto {
+  @ApiProperty()
+  accessToken!: string;
+
+  @ApiProperty()
+  refreshToken!: string;
+
+  @ApiProperty()
+  expiresAt!: Date;
+
+  @ApiProperty({ example: UserResponseDto })
+  user!: UserResponseDto;
+
+  @ApiProperty({ type: CustomerResponseDto })
+  customer!: CustomerResponseDto | null;
+
+  constructor(IVerifyUserResponse: ILoginResponse, user: User) {
+    this.user = new UserResponseDto(user);
+    this.customer = user.customer ? new CustomerResponseDto(user.customer) : null;
+    this.accessToken = IVerifyUserResponse.accessToken;
+    this.refreshToken = IVerifyUserResponse.refreshToken;
+    this.expiresAt = IVerifyUserResponse.expiresAt;
+  }
+}

src/auth/dtos/response/send-forget-password.response.dto.ts

@@ -0,0 +1,7 @@
+export class SendForgetPasswordOtpResponseDto {
+  maskedNumber!: string;
+
+  constructor(maskedNumber: string) {
+    this.maskedNumber = maskedNumber;
+  }
+}

src/auth/dtos/response/send-register-otp.response.dto.ts

@@ -0,0 +1,10 @@
+import { ApiProperty } from '@nestjs/swagger';
+
+export class SendRegisterOtpResponseDto {
+  @ApiProperty()
+  maskedNumber!: string;
+
+  constructor(maskedNumber: string) {
+    this.maskedNumber = maskedNumber;
+  }
+}

src/auth/dtos/response/send-register-otp.v2.response.dto.ts

@@ -0,0 +1,10 @@
+import { ApiProperty } from '@nestjs/swagger';
+
+export class SendRegisterOtpV2ResponseDto {
+  @ApiProperty()
+  maskedNumber!: string;
+
+  constructor(maskedNumber: string) {
+    this.maskedNumber = maskedNumber;
+  }
+}

src/auth/dtos/response/user.response.dto.ts

@@ -0,0 +1,54 @@
+import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
+import { Gender } from '~/customer/enums';
+import { DocumentMetaResponseDto } from '~/document/dtos/response';
+import { User } from '~/user/entities';
+
+export class UserResponseDto {
+  @ApiProperty()
+  id!: string;
+
+  @ApiProperty()
+  countryCode!: string;
+
+  @ApiProperty()
+  phoneNumber!: string;
+
+  @ApiProperty()
+  email!: string;
+
+  @ApiProperty()
+  firstName!: string;
+
+  @ApiProperty()
+  lastName!: string;
+
+  @ApiProperty()
+  dateOfBirth!: Date;
+
+  @ApiPropertyOptional({ type: DocumentMetaResponseDto, nullable: true })
+  profilePicture!: DocumentMetaResponseDto | null;
+
+  @ApiProperty()
+  isPhoneVerified!: boolean;
+
+  @ApiProperty()
+  isEmailVerified!: boolean;
+
+  @ApiPropertyOptional({ enum: Gender, nullable: true })
+  gender!: Gender | null;
+
+
+  constructor(user: User) {
+    this.id = user.id;
+    this.countryCode = user.countryCode;
+    this.phoneNumber = user.phoneNumber;
+    this.dateOfBirth = user.customer?.dateOfBirth;
+    this.email = user.email;
+    this.firstName = user.firstName;
+    this.lastName = user.lastName;
+    this.profilePicture = user.profilePicture ? new DocumentMetaResponseDto(user.profilePicture) : null;
+    this.isEmailVerified = user.isEmailVerified;
+    this.isPhoneVerified = user.isPhoneVerified;
+    this.gender = (user.customer?.gender as Gender) || null;
+  }
+}

src/auth/dtos/response/verify-forget-password-otp.response.dto.ts

@@ -0,0 +1,19 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { User } from '~/user/entities';
+
+export class VerifyForgetPasswordOtpResponseDto {
+  @ApiProperty()
+  phoneNumber!: string;
+
+  @ApiProperty()
+  countryCode!: string;
+
+  @ApiProperty()
+  resetPasswordToken!: string;
+
+  constructor(token: string, user: User) {
+    this.phoneNumber = user.phoneNumber;
+    this.countryCode = user.countryCode;
+    this.resetPasswordToken = token;
+  }
+}

src/auth/dtos/response/verify-user.response.dto.ts

@@ -0,0 +1,24 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { ILoginResponse } from '~/auth/interfaces';
+import { User } from '~/user/entities';
+
+export class VerifyUserResponseDto {
+  @ApiProperty()
+  accessToken!: string;
+
+  @ApiProperty()
+  refreshToken!: string;
+
+  @ApiProperty()
+  expiresAt!: Date;
+
+  @ApiProperty()
+  user!: User;
+
+  constructor(data: ILoginResponse, user: User) {
+    this.accessToken = data.accessToken;
+    this.refreshToken = data.refreshToken;
+    this.expiresAt = data.expiresAt;
+    this.user = user;
+  }
+}

src/auth/enums/grant-type.enum.ts

@@ -0,0 +1,4 @@
+export enum GrantType {
+  PASSWORD = 'PASSWORD',
+  BIOMETRIC = 'BIOMETRIC',
+}

src/auth/enums/index.ts

@@ -0,0 +1,2 @@
+export * from './grant-type.enum';
+export * from './roles.enum';

src/auth/enums/roles.enum.ts

@@ -0,0 +1,6 @@
+export enum Roles {
+  JUNIOR = 'JUNIOR',
+  GUARDIAN = 'GUARDIAN',
+  CHECKER = 'CHECKER',
+  SUPER_ADMIN = 'SUPER_ADMIN',
+}

src/auth/interfaces/index.ts

@@ -0,0 +1,2 @@
+export * from './jwt-payload.interface';
+export * from './login-response.interface';

src/auth/interfaces/jwt-payload.interface.ts

@@ -0,0 +1,6 @@
+import { Roles } from '../enums';
+
+export interface IJwtPayload {
+  sub: string;
+  roles: Roles[];
+}

src/auth/interfaces/login-response.interface.ts

@@ -0,0 +1,5 @@
+export interface ILoginResponse {
+  accessToken: string;
+  refreshToken: string;
+  expiresAt: Date;
+}

src/auth/services/auth.service.ts

@@ -0,0 +1,398 @@
+import { BadRequestException, Injectable, Logger, UnauthorizedException } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { JwtService } from '@nestjs/jwt';
+import * as bcrypt from 'bcrypt';
+import { Request } from 'express';
+import moment from 'moment';
+import { CacheService } from '~/common/modules/cache/services';
+import { OtpScope, OtpType } from '~/common/modules/otp/enums';
+import { OtpService } from '~/common/modules/otp/services';
+import { UserType } from '~/user/enums';
+import { DeviceService, UserService, UserTokenService } from '~/user/services';
+import { User } from '../../user/entities';
+import {
+  ChangePasswordRequestDto,
+  CreateUnverifiedUserRequestDto,
+  ForgetPasswordRequestDto,
+  JuniorLoginRequestDto,
+  LoginRequestDto,
+  SendForgetPasswordOtpRequestDto,
+  setJuniorPasswordRequestDto,
+  VerifyForgetPasswordOtpRequestDto,
+  VerifyUserRequestDto,
+} from '../dtos/request';
+import { Roles } from '../enums';
+import { IJwtPayload, ILoginResponse } from '../interfaces';
+
+const ONE_THOUSAND = 1000;
+const SALT_ROUNDS = 10;
+@Injectable()
+export class AuthService {
+  private readonly logger = new Logger(AuthService.name);
+
+  constructor(
+    private readonly otpService: OtpService,
+    private readonly jwtService: JwtService,
+    private readonly configService: ConfigService,
+    private readonly userService: UserService,
+    private readonly deviceService: DeviceService,
+    private readonly userTokenService: UserTokenService,
+    private readonly cacheService: CacheService,
+  ) {}
+
+  async sendRegisterOtp(body: CreateUnverifiedUserRequestDto) {
+    if (body.password !== body.confirmPassword) {
+      this.logger.error('Password and confirm password do not match');
+      throw new BadRequestException('AUTH.PASSWORD_MISMATCH');
+    }
+
+    this.logger.log(`Sending OTP to ${body.countryCode + body.phoneNumber}`);
+    const user = await this.userService.findOrCreateUser(body);
+    return this.otpService.generateAndSendOtp({
+      userId: user.id,
+      recipient: user.fullPhoneNumber,
+      scope: OtpScope.VERIFY_PHONE,
+      otpType: OtpType.SMS,
+    });
+  }
+
+  async verifyUser(verifyUserDto: VerifyUserRequestDto): Promise<[ILoginResponse, User]> {
+    this.logger.log(`Verifying user with phone number ${verifyUserDto.countryCode + verifyUserDto.phoneNumber}`);
+    const user = await this.userService.findUserOrThrow({
+      phoneNumber: verifyUserDto.phoneNumber,
+      countryCode: verifyUserDto.countryCode,
+    });
+
+    if (user.isPhoneVerified) {
+      this.logger.error(`User with phone number ${user.fullPhoneNumber} already verified`);
+      throw new BadRequestException('USER.PHONE_NUMBER_ALREADY_VERIFIED');
+    }
+
+    const isOtpValid = await this.otpService.verifyOtp({
+      userId: user.id,
+      scope: OtpScope.VERIFY_PHONE,
+      otpType: OtpType.SMS,
+      value: verifyUserDto.otp,
+    });
+
+    if (!isOtpValid) {
+      this.logger.error(`Invalid OTP for user with phone number ${user.fullPhoneNumber}`);
+      throw new BadRequestException('OTP.INVALID_OTP');
+    }
+
+    await this.userService.verifyUser(user.id, verifyUserDto);
+
+    await user.reload();
+
+    const tokens = await this.generateAuthToken(user);
+    this.logger.log(`User with phone number ${user.fullPhoneNumber} verified successfully`);
+
+    // Register/update device with FCM token and timezone if provided
+    if (verifyUserDto.fcmToken && verifyUserDto.deviceId) {
+      await this.registerDeviceToken(user.id, verifyUserDto.deviceId, verifyUserDto.fcmToken, verifyUserDto.timezone);
+    }
+
+    return [tokens, user];
+  }
+
+  async sendForgetPasswordOtp({ countryCode, phoneNumber }: SendForgetPasswordOtpRequestDto) {
+    this.logger.log(`Sending forget password OTP to ${countryCode + phoneNumber}`);
+    const user = await this.userService.findUserOrThrow({ countryCode, phoneNumber });
+
+    return this.otpService.generateAndSendOtp({
+      userId: user.id,
+      recipient: user.fullPhoneNumber,
+      scope: OtpScope.FORGET_PASSWORD,
+      otpType: OtpType.SMS,
+    });
+  }
+
+  async verifyForgetPasswordOtp({ countryCode, phoneNumber, otp }: VerifyForgetPasswordOtpRequestDto) {
+    const user = await this.userService.findUserOrThrow({ countryCode, phoneNumber });
+
+    const isOtpValid = await this.otpService.verifyOtp({
+      userId: user.id,
+      scope: OtpScope.FORGET_PASSWORD,
+      otpType: OtpType.SMS,
+      value: otp,
+    });
+
+    if (!isOtpValid) {
+      this.logger.error(`Invalid OTP for user with phone number ${user.fullPhoneNumber}`);
+      throw new BadRequestException('OTP.INVALID_OTP');
+    }
+
+    // generate a token for the user to reset password
+    const token = await this.userTokenService.generateToken(user.id, moment().add(5, 'minutes').toDate());
+
+    return { token, user };
+  }
+
+  async resetPassword({
+    countryCode,
+    phoneNumber,
+    resetPasswordToken,
+    password,
+    confirmPassword,
+  }: ForgetPasswordRequestDto) {
+    this.logger.log(`Verifying forget password OTP for ${countryCode + phoneNumber}`);
+    const user = await this.userService.findUserOrThrow({ countryCode, phoneNumber });
+    await this.userTokenService.validateToken(
+      resetPasswordToken,
+      user.roles.includes(Roles.GUARDIAN) ? UserType.GUARDIAN : UserType.JUNIOR,
+    );
+
+    if (password !== confirmPassword) {
+      this.logger.error('Password and confirm password do not match');
+      throw new BadRequestException('AUTH.PASSWORD_MISMATCH');
+    }
+
+    const isOldPassword = bcrypt.compareSync(password, user.password);
+
+    if (isOldPassword) {
+      this.logger.error(
+        `New password cannot be the same as the current password for user with phone number ${user.fullPhoneNumber}`,
+      );
+      throw new BadRequestException('AUTH.PASSWORD_SAME_AS_CURRENT');
+    }
+
+    const hashedPassword = bcrypt.hashSync(password, user.salt);
+
+    await this.userService.setPassword(user.id, hashedPassword, user.salt);
+    await this.userTokenService.invalidateToken(resetPasswordToken);
+    this.logger.log(`Passcode updated successfully for user with phone number ${user.fullPhoneNumber}`);
+  }
+
+  async changePassword(userId: string, { currentPassword, newPassword, confirmNewPassword }: ChangePasswordRequestDto) {
+    const user = await this.userService.findUserOrThrow({ id: userId });
+
+    if (!user.isPasswordSet) {
+      this.logger.error(`Password not set for user with id ${userId}`);
+      throw new BadRequestException('AUTH.PASSWORD_NOT_SET');
+    }
+
+    if (currentPassword === newPassword) {
+      this.logger.error('New password cannot be the same as current password');
+      throw new BadRequestException('AUTH.PASSWORD_SAME_AS_CURRENT');
+    }
+
+    if (newPassword !== confirmNewPassword) {
+      this.logger.error('New password and confirm new password do not match');
+      throw new BadRequestException('AUTH.PASSWORD_MISMATCH');
+    }
+
+    this.logger.log(`Validating current password for user with id ${userId}`);
+    const isCurrentPasswordValid = bcrypt.compareSync(currentPassword, user.password);
+
+    if (!isCurrentPasswordValid) {
+      this.logger.error(`Invalid current password for user with id ${userId}`);
+      throw new UnauthorizedException('AUTH.INVALID_CURRENT_PASSWORD');
+    }
+
+    const salt = bcrypt.genSaltSync(SALT_ROUNDS);
+    const hashedNewPassword = bcrypt.hashSync(newPassword, salt);
+    await this.userService.setPassword(user.id, hashedNewPassword, salt);
+    this.logger.log(`Password changed successfully for user with id ${userId}`);
+  }
+
+  async setJuniorPassword(body: setJuniorPasswordRequestDto) {
+    this.logger.log(`Setting passcode for junior with qrToken ${body.qrToken}`);
+    if (body.newPassword != body.confirmNewPassword) {
+      throw new BadRequestException('AUTH.PASSWORD_MISMATCH');
+    }
+    const juniorId = await this.userTokenService.validateToken(body.qrToken, UserType.JUNIOR);
+    const salt = bcrypt.genSaltSync(SALT_ROUNDS);
+    const hashedPasscode = bcrypt.hashSync(body.newPassword, salt);
+    await this.userService.setPassword(juniorId!, hashedPasscode, salt);
+    await this.userTokenService.invalidateToken(body.qrToken);
+    this.logger.log(`Passcode set successfully for junior with id ${juniorId}`);
+  }
+
+  async refreshToken(refreshToken: string): Promise<[ILoginResponse, User]> {
+    this.logger.log('Refreshing token');
+
+    const isBlackListed = await this.cacheService.get(refreshToken);
+
+    if (isBlackListed) {
+      this.logger.error('Refresh token is blacklisted');
+      throw new BadRequestException('AUTH.INVALID_REFRESH_TOKEN');
+    }
+
+    try {
+      const isValid = await this.jwtService.verifyAsync<IJwtPayload>(refreshToken, {
+        secret: this.configService.getOrThrow('JWT_REFRESH_TOKEN_SECRET'),
+      });
+
+      this.logger.log(`Refreshing token for user with id ${isValid.sub}`);
+
+      const user = await this.userService.findUserOrThrow({ id: isValid.sub });
+
+      const tokens = await this.generateAuthToken(user);
+
+      this.logger.log(`Blacklisting old tokens for user with id ${isValid.sub}`);
+
+      const refreshTokenExpiry = this.jwtService.decode(refreshToken).exp - Date.now() / ONE_THOUSAND;
+
+      await this.cacheService.set(refreshToken, 'BLACKLISTED', refreshTokenExpiry);
+
+      this.logger.log(`Token refreshed successfully for user with id ${isValid.sub}`);
+
+      return [tokens, user];
+    } catch (error) {
+      this.logger.error('Invalid refresh token');
+      throw new BadRequestException('AUTH.INVALID_REFRESH_TOKEN');
+    }
+  }
+
+  logout(req: Request) {
+    this.logger.log('Logging out');
+    const accessToken = req.headers.authorization?.split(' ')[1] as string;
+    const expiryInTtl = this.jwtService.decode(accessToken).exp - Date.now() / ONE_THOUSAND;
+    return this.cacheService.set(accessToken, 'BLACKLISTED', expiryInTtl);
+  }
+
+  async loginWithPassword(loginDto: LoginRequestDto): Promise<[ILoginResponse, User]> {
+    const user = await this.userService.findUser({
+      countryCode: loginDto.countryCode,
+      phoneNumber: loginDto.phoneNumber,
+    });
+
+    if (!user) {
+      this.logger.error(`User not found with phone number ${loginDto.countryCode + loginDto.phoneNumber}`);
+      throw new UnauthorizedException('AUTH.INVALID_CREDENTIALS');
+    }
+
+    if (!user.password) {
+      this.logger.error(`Password not set for user with phone number ${loginDto.countryCode + loginDto.phoneNumber}`);
+      throw new UnauthorizedException('AUTH.PHONE_NUMBER_NOT_VERIFIED');
+    }
+
+    this.logger.log(`validating password for user with phone ${loginDto.countryCode + loginDto.phoneNumber}`);
+    const isPasswordValid = bcrypt.compareSync(loginDto.password, user.password);
+
+    if (!isPasswordValid) {
+      this.logger.error(`Invalid password for user with phone ${loginDto.countryCode + loginDto.phoneNumber}`);
+      throw new UnauthorizedException('AUTH.INVALID_CREDENTIALS');
+    }
+
+    const tokens = await this.generateAuthToken(user);
+    this.logger.log(`Password validated successfully for user`);
+
+    // Register/update device with FCM token and timezone if provided
+    if (loginDto.fcmToken && loginDto.deviceId) {
+      await this.registerDeviceToken(user.id, loginDto.deviceId, loginDto.fcmToken, loginDto.timezone);
+    }
+
+    return [tokens, user];
+  }
+
+  async juniorLogin(juniorLoginDto: JuniorLoginRequestDto): Promise<[ILoginResponse, User]> {
+    const user = await this.userService.findUser({ email: juniorLoginDto.email });
+
+    if (!user || !user.roles.includes(Roles.JUNIOR)) {
+      throw new UnauthorizedException('AUTH.INVALID_CREDENTIALS');
+    }
+
+    this.logger.log(`validating password for user with email ${juniorLoginDto.email}`);
+    const isPasswordValid = bcrypt.compareSync(juniorLoginDto.password, user.password);
+
+    if (!isPasswordValid) {
+      this.logger.error(`Invalid password for user with email ${juniorLoginDto.email}`);
+      throw new UnauthorizedException('AUTH.INVALID_CREDENTIALS');
+    }
+
+    const tokens = await this.generateAuthToken(user);
+    this.logger.log(`Password validated successfully for user`);
+
+    // Register/update device with FCM token and timezone if provided
+    if (juniorLoginDto.fcmToken && juniorLoginDto.deviceId) {
+      await this.registerDeviceToken(user.id, juniorLoginDto.deviceId, juniorLoginDto.fcmToken, juniorLoginDto.timezone);
+    }
+
+    return [tokens, user];
+  }
+
+  /**
+   * Register or update device with FCM token and timezone
+   * This method handles:
+   * 1. Device already exists for this user → Update FCM token and timezone
+   * 2. Device exists for different user → Transfer device to new user
+   * 3. Device doesn't exist → Create new device
+   */
+  private async registerDeviceToken(userId: string, deviceId: string, fcmToken: string, timezone?: string): Promise<void> {
+    try {
+      this.logger.log(`Registering/updating device ${deviceId} with FCM token for user ${userId}`);
+
+      // Step 1: Check if device already exists for this user
+      const existingDeviceForUser = await this.deviceService.findUserDeviceById(deviceId, userId);
+
+      if (existingDeviceForUser) {
+        // Device exists for this user → Update FCM token, timezone, and last access time
+        await this.deviceService.updateDevice(deviceId, {
+          fcmToken,
+          userId,
+          timezone, // Update timezone if provided
+          lastAccessOn: new Date(),
+        });
+        this.logger.log(`Device ${deviceId} updated with new FCM token and timezone for user ${userId}`);
+        return;
+      }
+
+      // Step 2: Check if device exists for any user (different user scenario)
+      const existingDevice = await this.deviceService.findByDeviceId(deviceId);
+
+      if (existingDevice) {
+        // Device exists for different user → Transfer device to new user
+        this.logger.log(
+          `Device ${deviceId} exists for user ${existingDevice.userId}, transferring to user ${userId}`
+        );
+        await this.deviceService.updateDevice(deviceId, {
+          userId,
+          fcmToken,
+          timezone, // Update timezone if provided
+          lastAccessOn: new Date(),
+        });
+        this.logger.log(`Device ${deviceId} transferred from user ${existingDevice.userId} to user ${userId}`);
+        return;
+      }
+
+      // Step 3: Device doesn't exist → Create new device
+      await this.deviceService.createDevice({
+        deviceId,
+        userId,
+        fcmToken,
+        timezone, // Store timezone if provided
+        lastAccessOn: new Date(),
+      });
+      this.logger.log(`New device ${deviceId} registered with FCM token for user ${userId}`);
+    } catch (error) {
+      // Log error but don't fail the login/signup process
+      const errorMessage = error instanceof Error ? error.message : String(error);
+      const errorStack = error instanceof Error ? error.stack : undefined;
+      this.logger.error(`Failed to register device token for user ${userId}: ${errorMessage}`, errorStack);
+    }
+  }
+
+  private async generateAuthToken(user: User) {
+    this.logger.log(`Generating auth token for user with id ${user.id}`);
+    const [accessToken, refreshToken] = await Promise.all([
+      this.jwtService.sign(
+        { sub: user.id, roles: user.roles },
+        {
+          expiresIn: this.configService.getOrThrow('JWT_ACCESS_TOKEN_EXPIRY'),
+          secret: this.configService.getOrThrow('JWT_ACCESS_TOKEN_SECRET'),
+        },
+      ),
+      this.jwtService.sign(
+        { sub: user.id, roles: user.roles },
+        {
+          expiresIn: this.configService.getOrThrow('JWT_REFRESH_TOKEN_EXPIRY'),
+          secret: this.configService.getOrThrow('JWT_REFRESH_TOKEN_SECRET'),
+        },
+      ),
+    ]);
+
+    this.logger.log(`Auth token generated successfully for user with id ${user.id}`);
+    return { accessToken, refreshToken, expiresAt: new Date(this.jwtService.decode(accessToken).exp * ONE_THOUSAND) };
+  }
+}

src/auth/services/index.ts

@@ -0,0 +1 @@
+export * from './auth.service';

src/auth/strategies/access-token.strategy.ts

@@ -0,0 +1,27 @@
+import { Injectable, UnauthorizedException } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { PassportStrategy } from '@nestjs/passport';
+import { ExtractJwt, Strategy } from 'passport-jwt';
+import { UserService } from '~/user/services';
+import { IJwtPayload } from '../interfaces';
+
+@Injectable()
+export class AccessTokenStrategy extends PassportStrategy(Strategy, 'access-token') {
+  constructor(configService: ConfigService, private userService: UserService) {
+    super({
+      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+      ignoreExpiration: false,
+      secretOrKey: configService.get<string>('JWT_ACCESS_TOKEN_SECRET'),
+    });
+  }
+
+  async validate(payload: IJwtPayload) {
+    const user = await this.userService.findUser({ id: payload.sub });
+
+    if (!user) {
+      throw new UnauthorizedException();
+    }
+
+    return payload;
+  }
+}

src/auth/strategies/index.ts

@@ -0,0 +1 @@
+export * from './access-token.strategy';

src/auth/utils/crypt.ts

@@ -0,0 +1,26 @@
+import * as crypto from 'crypto';
+
+export function verifySignature(
+  publicKeyBase64: string,
+  signatureBase64: string,
+  message: string,
+  algorithm: 'SHA1' | 'SHA384',
+) {
+  const signatureBuffer = Buffer.from(signatureBase64, 'base64');
+
+  const publicKeyPEM = '-----BEGIN PUBLIC KEY-----\n' + publicKeyBase64 + '\n-----END PUBLIC KEY-----';
+  const verifier = crypto.createVerify(algorithm);
+  verifier.update(message, 'utf8');
+  return verifier.verify(
+    {
+      key: publicKeyPEM,
+      padding: crypto.constants.RSA_PKCS1_PADDING,
+    },
+    signatureBuffer,
+  );
+}
+
+export function removePadding(originalSignature: string) {
+  const buffer = Buffer.from(originalSignature, 'base64');
+  return buffer.toString('base64');
+}

src/auth/utils/index.ts

@@ -0,0 +1 @@
+export * from './crypt';