Compare commits

..

8 Commits

Author SHA1 Message Date
47c99c878a mqtt connection using env 2026-01-12 11:12:08 +07:00
436ea1cf89 replace created at in notif error 2026-01-09 14:30:07 +07:00
8e0dc4bb88 fixing token redirect 2026-01-09 11:06:05 +07:00
b680a249d5 connect mqtt ws colo 2026-01-08 15:07:47 +07:00
b1cf4ff624 optional solution error code 2026-01-08 14:32:43 +07:00
747a96ac30 fixing verify token redirect 2026-01-08 14:17:11 +07:00
026a88a9a9 remove validation at least 1 solution 2026-01-08 13:16:13 +07:00
4d2c18edfb fixing verify access 2026-01-08 12:16:16 +07:00
14 changed files with 70 additions and 53 deletions

View File

@@ -45,4 +45,18 @@ IMAGEKIT_PRIVATE_KEY=private_vhO/jXHnEoaVYptOHIuZDPMbxIA=
# CLIENT_SECRET=xxxxxxxxxxxxxxxxxxxxxxxx # CLIENT_SECRET=xxxxxxxxxxxxxxxxxxxxxxxx
# REFRESH_TOKEN=1//XXXXXXXX # REFRESH_TOKEN=1//XXXXXXXX
ENDPOINT_WHATSAPP=https://117.102.231.130:9531/send
# ENDPOINT_WHATSAPP=http://localhost:9529/send
# ENDPOINT_FE=http://localhost:8592
# ENDPOINT_FE=http://203.153.114.226:8466
ENDPOINT_FE=https://117.102.231.130:9529
# MQTT Connection
MQTT_HOST=ws://117.102.231.130:7001
MQTT_USERNAME=morekmorekmorek
MQTT_PASSWORD=morek888
TOPIC_COD=PIU_COD/ERROR_CODE
VITE_KEY_SESSION=PetekRombonganPetekMorekMorakMarek VITE_KEY_SESSION=PetekRombonganPetekMorekMorakMarek

1
.gitignore vendored
View File

@@ -4,4 +4,3 @@ node_modules
request.http request.http
*.rest *.rest
package-lock.json package-lock.json
*.log

View File

@@ -292,11 +292,11 @@ const mqttOptions = {
clientId: 'express_mqtt_client_' + Math.random().toString(16).substr(2, 8), clientId: 'express_mqtt_client_' + Math.random().toString(16).substr(2, 8),
clean: true, clean: true,
connectTimeout: 4000, connectTimeout: 4000,
username: '', // jika ada username: process.env.MQTT_USERNAME ?? 'morekmorekmorek', // jika ada
password: '', // jika ada password: process.env.MQTT_PASSWORD ?? 'morek888', // jika ada
}; };
const mqttUrl = 'ws://localhost:1884'; // Ganti dengan broker kamu const mqttUrl = process.env.MQTT_HOST; // Ganti dengan broker kamu
const topic = process.env.TOPIC_COD ?? 'morek'; const topic = process.env.TOPIC_COD ?? 'morek';
const mqttClient = mqtt.connect(mqttUrl, mqttOptions); const mqttClient = mqtt.connect(mqttUrl, mqttOptions);

View File

@@ -104,6 +104,8 @@ class AuthController {
const bytes = CryptoJS.AES.decrypt(tokenRedirect, process.env.VITE_KEY_SESSION); const bytes = CryptoJS.AES.decrypt(tokenRedirect, process.env.VITE_KEY_SESSION);
const decrypted = JSON.parse(bytes.toString(CryptoJS.enc.Utf8)); const decrypted = JSON.parse(bytes.toString(CryptoJS.enc.Utf8));
console.log("decrypted: ", decrypted);
const userPhone = decrypted?.user_phone const userPhone = decrypted?.user_phone
const userName = decrypted?.user_name const userName = decrypted?.user_name
const idData = decrypted?.id const idData = decrypted?.id

View File

@@ -95,7 +95,8 @@ const getAllNotificationDb = async (searchParams = {}) => {
], ],
queryParams queryParams
); );
if (whereParamAnd) queryParams = whereParamAnd;
queryParams = whereParamAnd ? whereParamAnd : queryParams;
const queryText = ` const queryText = `
SELECT SELECT
@@ -108,12 +109,12 @@ const getAllNotificationDb = async (searchParams = {}) => {
a.is_delivered, a.is_delivered,
a.is_read, a.is_read,
a.is_active, a.is_active,
a.created_at,
b.error_code, b.error_code,
b.error_code_name, b.error_code_name,
b.error_code_color, b.error_code_color,
b.path_icon, b.path_icon,
b.created_at,
c.solution_name, c.solution_name,
c.type_solution, c.type_solution,

View File

@@ -32,11 +32,15 @@ const getNotificationErrorLogByIdDb = async (id) => {
const getNotificationErrorLogByNotificationErrorIdDb = async (notificationErrorId) => { const getNotificationErrorLogByNotificationErrorIdDb = async (notificationErrorId) => {
const queryText = ` const queryText = `
SELECT SELECT
a.*, a.notification_error_log_description,
b.contact_name, a.created_at,
b.contact_type b.contact_type,
c.user_fullname as created_by_name,
case when a.created_by is not null then c.user_fullname else b.contact_name end as contact_name,
case when a.created_by is not null then c.user_phone else a.contact_phone end as contact_phone
FROM notification_error_log a FROM notification_error_log a
LEFT JOIN contact b ON a.contact_phone = b.contact_phone LEFT JOIN contact b ON a.contact_phone = b.contact_phone
LEFT JOIN m_users c ON a.created_by = c.user_id
WHERE a.notification_error_id = $1 AND a.deleted_at IS NULL WHERE a.notification_error_id = $1 AND a.deleted_at IS NULL
ORDER BY a.created_at DESC ORDER BY a.created_at DESC
`; `;

View File

@@ -1,7 +1,7 @@
module.exports = { module.exports = {
apps: [ apps: [
{ {
name: "cod-api", name: "bengkel-api",
script: "./index.js", // Path to your entry file script: "./index.js", // Path to your entry file
env: { env: {
NODE_ENV: "development", NODE_ENV: "development",
@@ -9,14 +9,6 @@ module.exports = {
env_production: { env_production: {
NODE_ENV: "production", NODE_ENV: "production",
}, },
// Logging configuration
// error_file: "C:\IDETAMA\pm2-log\cod-api\cod-api-error.log",
// out_file: "C:\IDETAMA\pm2-log\cod-api\cod-api-out.log",
// log_file: "C:\IDETAMA\pm2-log\cod-api\cod-api-combined.log", // optional combined file
error_file: "cod-api-error.log",
out_file: "cod-api-out.log",
log_file: "cod-api-combined.log", // optional combined file
time: true, // adds timestamps to logs
}, },
], ],
}; };

View File

@@ -1,6 +1,10 @@
const { ErrorHandler } = require("../helpers/error"); const { ErrorHandler } = require("../helpers/error");
const { getUserByIdDb } = require("../db/user.db"); const { getUserByIdDb } = require("../db/user.db");
function isPhoneNumberID(phone) {
return /^(?:\+62|62|0)8[1-9][0-9]{6,10}$/.test(phone);
}
const verifyAccess = (minLevel = 1, allowUnapprovedReadOnly = false) => { const verifyAccess = (minLevel = 1, allowUnapprovedReadOnly = false) => {
return async (req, res, next) => { return async (req, res, next) => {
try { try {
@@ -11,21 +15,31 @@ const verifyAccess = (minLevel = 1, allowUnapprovedReadOnly = false) => {
// Super Admin bypass semua // Super Admin bypass semua
if (user.is_sa) return next(); if (user.is_sa) return next();
const fullUser = await getUserByIdDb(user.user_id);
if (!fullUser) throw new ErrorHandler(403, "Forbidden: User not found");
if (!fullUser.is_approve) { if (!isPhoneNumberID(user.user_id) && user.user_id) {
if (req.method !== "GET") { const fullUser = await getUserByIdDb(user.user_id);
throw new ErrorHandler(403, "Account not approved — read-only access"); if (!fullUser) throw new ErrorHandler(403, "Forbidden: User not found");
if (!fullUser.is_approve) {
if (req.method !== "GET") {
throw new ErrorHandler(403, "Account not approved — read-only access");
}
if (allowUnapprovedReadOnly) return next();
throw new ErrorHandler(403, "Account not approved");
} }
if (allowUnapprovedReadOnly) return next(); if (!fullUser.role_level || fullUser.role_level < minLevel) {
throw new ErrorHandler(403, "Forbidden: Insufficient role level");
}
} else {
if (req.method !== 'GET' && req.baseUrl !== '/api/notification-log') {
if (req.baseUrl !== '/api/notification') {
throw new ErrorHandler(403, "Forbidden: Insufficient Access");
}
}
throw new ErrorHandler(403, "Account not approved");
}
if (!fullUser.role_level || fullUser.role_level < minLevel) {
throw new ErrorHandler(403, "Forbidden: Insufficient role level");
} }
next(); next();

View File

@@ -26,7 +26,7 @@ router
.get(verifyToken.verifyAccessToken, NotificationErrorController.getById) .get(verifyToken.verifyAccessToken, NotificationErrorController.getById)
.put( .put(
verifyToken.verifyAccessToken, verifyToken.verifyAccessToken,
// verifyAccess(), verifyAccess(),
NotificationErrorController.update NotificationErrorController.update
); );

View File

@@ -9,7 +9,7 @@ router.route("/")
.get(verifyToken.verifyAccessToken, NotificationErrorLogController.getAll) .get(verifyToken.verifyAccessToken, NotificationErrorLogController.getAll)
.post( .post(
verifyToken.verifyAccessToken, verifyToken.verifyAccessToken,
// verifyAccess(), verifyAccess(),
NotificationErrorLogController.create); NotificationErrorLogController.create);
router.route("/:id") router.route("/:id")

View File

@@ -119,17 +119,6 @@ class ErrorCodeService {
try { try {
if (!data || typeof data !== "object") data = {}; if (!data || typeof data !== "object") data = {};
if (
!data.solution ||
!Array.isArray(data.solution) ||
data.solution.length === 0
) {
throw new ErrorHandler(
400,
"Error code must have at least 1 solution"
);
}
const errorId = await createErrorCodeDb(brandId, { const errorId = await createErrorCodeDb(brandId, {
error_code: data.error_code, error_code: data.error_code,
error_code_name: data.error_code_name, error_code_name: data.error_code_name,

View File

@@ -173,8 +173,7 @@ class NotificationService {
static async resendNotification(id) { static async resendNotification(id) {
const deviceNotification = await getNotificationByIdDb(id); const deviceNotification = await getNotificationByIdDb(id);
if (!deviceNotification) if (!deviceNotification) throw new ErrorHandler(404, "Data not found");
throw new ErrorHandler(404, "Notification Data not found");
const errorCode = await getErrorCodeByIdDb( const errorCode = await getErrorCodeByIdDb(
deviceNotification.error_code_id deviceNotification.error_code_id

View File

@@ -67,9 +67,9 @@ class NotifikasiWaService {
for (const dataUser of dataUsers) { for (const dataUser of dataUsers) {
if (dataUser.is_active) { if (dataUser.is_active) {
const tokenRedirect = await generateTokenRedirect( const tokenRedirect = await generateTokenRedirect(
dataUser.userPhone, dataUser.contact_phone,
dataUser.userName, dataUser.contact_name,
dataUser.idData resultNotificationError.notification_error_id
); );
const encodedToken = encodeURIComponent(tokenRedirect); const encodedToken = encodeURIComponent(tokenRedirect);
@@ -105,6 +105,8 @@ class NotifikasiWaService {
param.bodyMessage param.bodyMessage
); );
console.log("resultSend: ", resultSend);
await updateNotificationErrorUserDb( await updateNotificationErrorUserDb(
resultNotificationErrorUser[0].notification_error_user_id, resultNotificationErrorUser[0].notification_error_user_id,
{ {

View File

@@ -31,11 +31,12 @@ const insertErrorCodeSchema = Joi.object({
is_active: Joi.boolean().default(true), is_active: Joi.boolean().default(true),
solution: Joi.array() solution: Joi.array()
.items(solutionSchema) .items(solutionSchema)
.min(1) .optional(),
.required() // .min(1)
.messages({ // .required()
"array.min": "Error code must have at least 1 solution", // .messages({
}), // "array.min": "Error code must have at least 1 solution",
// }),
spareparts: Joi.array() spareparts: Joi.array()
.items(Joi.number().integer()) .items(Joi.number().integer())
.optional(), .optional(),