feat(account, order, plan, profile, redis): enhance functionality and security

- Updated CORS settings for frontend compatibility.
- Integrated Redis URL configuration.
- Improved login response structure in account service.
- Added role-based authorization for order and plan management.
- Enhanced error handling and logging in profile and plan services.
- Updated Swagger documentation for clarity on order statuses.
- Configured Redis connection for better performance.
This commit is contained in:
abumahid
2026-04-26 19:14:37 +06:00
parent 2d54031c33
commit 61fd639faf
12 changed files with 54 additions and 19 deletions
+4 -3
View File
@@ -1,11 +1,12 @@
import { Router } from "express";
import auth from "../../middlewares/auth.js";
import RequestValidator from "../../middlewares/request_validator.js";
import { plan_controller } from "./plan.controller.js";
import { plan_validations } from "./plan.validation.js";
const router = Router();
router.get("/", plan_controller.get_all_plan);
router.post("/", RequestValidator(plan_validations.create_plan), plan_controller.create_plan);
router.post("/", RequestValidator(plan_validations.create_plan), auth("ADMIN"), plan_controller.create_plan);
router.get("/:id", plan_controller.get_single_plan);
router.patch("/:id", RequestValidator(plan_validations.update_plan), plan_controller.update_plan);
router.delete("/:id", plan_controller.delete_plan);
router.patch("/:id", RequestValidator(plan_validations.update_plan), auth("ADMIN"), plan_controller.update_plan);
router.delete("/:id", auth("ADMIN"), plan_controller.delete_plan);
export default router;
+1 -1
View File
@@ -17,7 +17,7 @@ const get_single_plan_from_db = async (req) => {
};
const create_plan_into_db = async (req) => {
// define your own login here
const user = req.user;
const user = req?.user;
if (user?.role !== "ADMIN") {
throw new AppError("You dont have permission to create plan information.!!!", 401);
}