Initial scaffold: unified customer/insurance/utilities platform

Next.js + NestJS + Prisma (MySQL) monorepo replacing the legacy PHP internal app. Includes a session-based auth module with Argon2 password hashing and global input validation (replacing the old app's SQL injection and plaintext password comparison), the full target Prisma schema for customers/insurance/utilities/shared ledger/bank register, Docker Compose + Dockerfiles, and an Access-to-staging migration pipeline (migration/) already run against the real source databases. See PLAN.md and RESUME.md for the full architecture and session history.
2026-07-22 01:29:56 -07:00
commit 27118f0df2
39 changed files with 10341 additions and 0 deletions
@@ -0,0 +1,38 @@
+import { Controller, Get, HttpCode, Post, Req, Res, UseGuards } from "@nestjs/common";
+import { Request, Response } from "express";
+import { LocalAuthGuard } from "./local-auth.guard";
+import { AuthenticatedGuard } from "./authenticated.guard";
+import { LoginDto } from "./login.dto";
+
+@Controller("auth")
+export class AuthController {
+  // LoginDto is only used for request-shape documentation/validation here —
+  // the actual credential check happens inside LocalStrategy via Passport,
+  // which populates req.user before this handler runs.
+  @UseGuards(LocalAuthGuard)
+  @Post("login")
+  @HttpCode(200)
+  login(@Req() req: Request, @Res({ passthrough: true }) _res: Response, _body?: LoginDto) {
+    return req.user;
+  }
+
+  @UseGuards(AuthenticatedGuard)
+  @Get("me")
+  me(@Req() req: Request) {
+    return req.user;
+  }
+
+  @Post("logout")
+  @HttpCode(200)
+  logout(@Req() req: Request) {
+    return new Promise((resolve, reject) => {
+      req.logout((err) => {
+        if (err) {
+          reject(err);
+          return;
+        }
+        resolve({ success: true });
+      });
+    });
+  }
+}