feat(auth): implement JWT and OTP utilities for authentication; add password hashing functions; enhance observability with metrics and logging middleware

Author: muneebhashone

packages/create-tbk-app/src/constants/dependencies.ts

@@ -15,6 +15,12 @@ export const CORE_DEPENDENCIES = {
   validator: '^13.12.0',
   'express-async-handler': '^1.2.0',
   formidable: '^3.5.4',
+  // Logger dependencies (logger plugin is always included)
+  pino: '^9.1.0',
+  'pino-http': '^10.1.0',
+  'pino-pretty': '^11.1.0',
+  // Basic observability dependencies (requestId middleware)
+  nanoid: '^3.3.7',
 };
 
 export const CORE_DEV_DEPENDENCIES = {
@@ -71,12 +77,9 @@ export const FEATURE_DEPENDENCIES = {
   },
   observabilityFull: {
     dependencies: {
-      pino: '^9.1.0',
-      'pino-http': '^10.1.0',
-      'pino-pretty': '^11.1.0',
+      // pino, pino-http, pino-pretty, and nanoid are now in CORE_DEPENDENCIES
       'prom-client': '^15.1.3',
       morgan: '^1.10.0',
-      nanoid: '^3.3.7',
     },
     devDependencies: {
       '@types/morgan': '^1.9.4',

packages/create-tbk-app/templates/base/src/utils/jwt.utils.ts renamed to packages/create-tbk-app/templates/auth/src/utils/jwt.utils.ts

@@ -1,5 +1,6 @@
 import pino from 'pino';
 import pinoHttp from 'pino-http';
+import type { Request } from 'express';
 import type { RequestExtended } from '@/types';
 import { ServerResponse as ResponseHTTP } from 'node:http';
 import type { ToolkitPlugin, PluginFactory } from '@/plugins/types';
@@ -60,7 +61,7 @@ function createLogger(options: LoggerOptions = {}) {
         }
       : undefined,
     formatters: {
-      level: (label) => {
+      level: (label: string) => {
         return { level: label.toUpperCase() };
       },
     },
@@ -82,7 +83,7 @@ export const logger = createLogger();
  */
 export const httpLogger = pinoHttp({
   logger,
-  customLogLevel: (_req, res, err) => {
+  customLogLevel: (_req: Request, res: ResponseHTTP, err?: Error) => {
     if (res.statusCode >= 500 || err) {
       return 'error';
     }
@@ -91,10 +92,10 @@ export const httpLogger = pinoHttp({
     }
     return 'info';
   },
-  customSuccessMessage: (req, res) => {
+  customSuccessMessage: (req: Request, res: ResponseHTTP) => {
     return `${req.method} ${req.url} ${res.statusCode}`;
   },
-  customErrorMessage: (req, res, err) => {
+  customErrorMessage: (req: Request, res: ResponseHTTP, err: Error) => {
     return `${req.method} ${req.url} ${res.statusCode} - ${err.message}`;
   },
   customAttributeKeys: {
@@ -104,7 +105,7 @@ export const httpLogger = pinoHttp({
     responseTime: 'duration',
   },
   serializers: {
-    req: (req) => {
+    req: (req: Request) => {
       const extended = req as RequestExtended;
       return {
         id: extended.id,
@@ -116,8 +117,8 @@ export const httpLogger = pinoHttp({
           'user-agent': req.headers['user-agent'],
           'x-request-id': req.headers['x-request-id'],
         },
-        remoteAddress: req.remoteAddress,
-        remotePort: req.remotePort,
+        remoteAddress: req.socket?.remoteAddress,
+        remotePort: req.socket?.remotePort,
       };
     },
     res: (res: unknown) => ({

packages/create-tbk-app/templates/base/src/utils/otp.utils.ts renamed to packages/create-tbk-app/templates/auth/src/utils/otp.utils.ts

@@ -1,3 +1,4 @@
+{{#if OBSERVABILITY_FULL}}
 import {
   Registry,
   Counter,
@@ -95,3 +96,44 @@ export class MetricsCollector {
 export const metricsCollector = new MetricsCollector();
 
 export default metricsCollector;
+{{else}}
+// Stub implementation for basic observability (no metrics collection)
+export class MetricsCollector {
+  public readonly register = {
+    contentType: 'text/plain',
+  };
+
+  recordRequest(
+    _method: string,
+    _route: string,
+    _statusCode: number,
+    _duration: number,
+  ): void {
+    // No-op
+  }
+
+  startRequest(_method: string, _route: string): void {
+    // No-op
+  }
+
+  endRequest(_method: string, _route: string): void {
+    // No-op
+  }
+
+  incrementCacheHits(_key: string): void {
+    // No-op
+  }
+
+  incrementCacheMisses(_key: string): void {
+    // No-op
+  }
+
+  async getMetrics(): Promise<string> {
+    return '';
+  }
+}
+
+export const metricsCollector = new MetricsCollector();
+
+export default metricsCollector;
+{{/if}}