[WIP] [SL-256] Add User Auth Module Backend + Frontend

src/backend/.env.example

@@ -9,6 +9,21 @@ DATABASE_URL=postgresql://postgres:postgres@localhost:5434/macsync_db
 PORT=3000
 NODE_ENV=development
 
+# Auth Configuration
+JWT_SECRET=change-me
+JWT_EXPIRES_IN=60m
+VERIFICATION_CODE_EXPIRY_MIN=10
+VERIFICATION_CODE_SECRET=change-me
+# Optional password settings
+BCRYPT_SALT_ROUNDS=10
+
+# Email (SMTP)
+SMTP_HOST=
+SMTP_PORT=
+SMTP_USER=
+SMTP_PASS=
+EMAIL_FROM=no-reply@mcmaster.ca
+
 # Optional: run seed on startup if DB is empty (idempotent)
 # RUN_SEED=true
 

src/backend/package.json

@@ -32,8 +32,11 @@
     "@nestjs/core": "^11.0.1",
     "@nestjs/platform-express": "^11.0.1",
     "@nestjs/platform-fastify": "^11.1.12",
+    "bcryptjs": "^3.0.2",
     "dotenv": "^17.2.3",
     "drizzle-orm": "^0.45.1",
+    "jsonwebtoken": "^9.0.3",
+    "nodemailer": "^8.0.1",
     "pg": "^8.18.0",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.8.1",
@@ -47,7 +50,9 @@
     "@nestjs/testing": "^11.0.1",
     "@types/express": "^5.0.0",
     "@types/jest": "^30.0.0",
+    "@types/jsonwebtoken": "^9.0.10",
     "@types/node": "^22.10.7",
+    "@types/nodemailer": "^7.0.9",
     "@types/pg": "^8.16.0",
     "@types/supertest": "^6.0.2",
     "drizzle-kit": "^0.31.8",

src/backend/src/app.module.ts

@@ -4,6 +4,7 @@ import { AppService } from './app.service';
 import { DatabaseModule } from './database/database.module';
 import { UsersModule } from './users/users.module';
 import { EventsModule } from './events/events.module';
+import { AuthModule } from './auth/auth.module';
 import { WebhooksModule } from './webhooks/webhooks.module';
 import { PaymentsModule } from './payments/payments.module';
 import { StatsModule } from './stats/stats.module';
@@ -15,6 +16,7 @@ import { StatsModule } from './stats/stats.module';
     EventsModule,
     WebhooksModule,
     PaymentsModule,
+    AuthModule,
     StatsModule,
   ],
   controllers: [AppController],

src/backend/src/auth/auth.controller.ts

@@ -0,0 +1,75 @@
+import {
+  Body,
+  Controller,
+  Get,
+  Post,
+  Req,
+  UseGuards,
+} from '@nestjs/common';
+import { AuthService } from './auth.service';
+import { JwtAuthGuard } from './jwt-auth.guard';
+import { OnboardingGuard } from './onboarding.guard';
+
+@Controller('auth')
+export class AuthController {
+  constructor(private readonly authService: AuthService) {}
+
+  @Post('request-code')
+  requestCode(@Body('email') email: string) {
+    return this.authService.requestVerificationCode(email);
+  }
+
+  @Post('check-email')
+  checkEmail(@Body('email') email: string) {
+    return this.authService.checkEmail(email);
+  }
+
+  @Post('login')
+  login(@Body() body: { email: string; password: string }) {
+    return this.authService.loginWithPassword(body.email, body.password);
+  }
+
+  @Post('request-otp')
+  requestOtp(@Body('email') email: string) {
+    return this.authService.requestOtp(email);
+  }
+
+  @Post('verify-code')
+  verifyCode(@Body() body: { email: string; code: string }) {
+    return this.authService.verifyCode(body.email, body.code);
+  }
+
+  @Post('verify-otp')
+  verifyOtp(@Body() body: { email: string; code: string }) {
+    return this.authService.verifyOtp(body.email, body.code);
+  }
+
+  @Post('register')
+  @UseGuards(OnboardingGuard)
+  register(
+    @Body()
+    body: {
+      firstName: string;
+      lastName: string;
+      phone: string;
+      program: string;
+      password: string;
+      confirmPassword?: string;
+    },
+    @Req() req: any,
+  ) {
+    return this.authService.registerUser(req.onboardingEmail, body);
+  }
+
+  @Get('me')
+  @UseGuards(JwtAuthGuard)
+  me(@Req() req: any) {
+    return this.authService.getUserInfo(req.user.sub);
+  }
+
+  @Post('logout')
+  @UseGuards(JwtAuthGuard)
+  logout() {
+    return { success: true };
+  }
+}

src/backend/src/auth/auth.module.ts

@@ -0,0 +1,13 @@
+import { Module } from '@nestjs/common';
+import { AuthService } from './auth.service';
+import { AuthController } from './auth.controller';
+import { DatabaseModule } from '../database/database.module';
+import { UsersModule } from '../users/users.module';
+
+@Module({
+  imports: [DatabaseModule, UsersModule],
+  controllers: [AuthController],
+  providers: [AuthService],
+  exports: [AuthService],
+})
+export class AuthModule {}