${settings?.brandName || 'MICROTEC'}FLIX
Recuperação de Senha
Você solicitou a recuperação da sua senha. Clique no botão abaixo para redefini-la (válido por 1 hora).
Redefinir Senha
Se você não solicitou, apenas ignore este e-mail.
`
});
}
res.json({ success: true, message: 'Link de recuperação enviado com sucesso.' });
} catch (error: any) {
console.error('Forgot password error:', error);
res.status(500).json({ error: error.message || 'Erro ao enviar link de recuperação.' });
}
});
// 2.6 Auth: Reset Password
app.post('/api/auth/reset-password', async (req: Request, res: Response) => {
const { token, newPassword } = req.body;
if (!token || !newPassword) {
res.status(400).json({ error: 'Token e nova senha são obrigatórios.' });
return;
}
try {
const user = await prisma.user.findFirst({
where: {
resetPasswordToken: token,
resetPasswordExpires: { gte: new Date() }
}
});
if (!user) {
res.status(400).json({ error: 'Token inválido ou expirado.' });
return;
}
const hashedPassword = bcrypt.hashSync(newPassword, 10);
await prisma.user.update({
where: { id: user.id },
data: {
password: hashedPassword,
resetPasswordToken: null,
resetPasswordExpires: null
}
});
res.json({ success: true, message: 'Senha redefinida com sucesso!' });
} catch (error) {
console.error('Reset password error:', error);
res.status(500).json({ error: 'Erro ao redefinir senha.' });
}
});
// 3. Auth: Me
app.get('/api/auth/me', authenticateToken, async (req: AuthenticatedRequest, res: Response) => {
if (!req.user) {
res.status(401).json({ error: 'Não autorizado' });
return;
}
try {
const user = await prisma.user.findUnique({
where: { id: req.user.id }
});
if (!user) {
res.status(404).json({ error: 'Usuário não encontrado' });
return;
}
res.json(user);
} catch(err) {
res.status(500).json({ error: 'Erro no servidor' });
}
});
// 3.1. Profile: Update Data
app.put('/api/users/profile', authenticateToken, async (req: AuthenticatedRequest, res: Response) => {
const { name, whatsapp, birthDate, cpf } = req.body;
const userId = req.user!.id;
try {
const user = await prisma.user.update({
where: { id: userId },
data: {
...(name !== undefined && { name }),
...(whatsapp !== undefined && { whatsapp }),
...(birthDate !== undefined && { birthDate }),
...(cpf !== undefined && { cpf })
}
});
res.json({ success: true, user });
} catch (error) {
res.status(404).json({ error: 'Usuário não encontrado' });
}
});
// 3.2. Profile: Avatar Upload
app.post('/api/users/avatar', authenticateToken, upload.single('avatar'), async (req: AuthenticatedRequest, res: Response) => {
const userId = req.user!.id;
if (!req.file) {
res.status(400).json({ error: 'Nenhum arquivo enviado' });
return;
}
const ext = req.file.originalname.split('.').pop();
const filename = `avatars/${userId}_${Date.now()}.${ext}`;
try {
await s3.send(new PutObjectCommand({
Bucket: 'microtecflix',
Key: filename,
Body: req.file.buffer,
ContentType: req.file.mimetype
}));
// URL Pública configurada via Traefik
const avatarUrl = `https://s3-estudo.microtecinformaticacurso.com.br/microtecflix/${filename}`;
await prisma.user.update({
where: { id: userId },
data: { avatarUrl }
});
res.json({ success: true, avatarUrl });
} catch (err: any) {
console.error('Erro no upload da foto:', err);
res.status(500).json({ error: 'Erro ao salvar foto no MinIO' });
}
});
// Admin Image/File Upload directly to MinIO S3
app.post('/api/admin/upload', authenticateToken, upload.single('file'), async (req: AuthenticatedRequest, res: Response) => {
if (!req.file) {
res.status(400).json({ error: 'Nenhum arquivo enviado' });
return;
}
const ext = req.file.originalname.split('.').pop();
const filename = `uploads/${Date.now()}_${Math.random().toString(36).substring(2, 8)}.${ext}`;
try {
await s3.send(new PutObjectCommand({
Bucket: 'microtecflix',
Key: filename,
Body: req.file.buffer,
ContentType: req.file.mimetype
}));
const url = `https://s3-estudo.microtecinformaticacurso.com.br/microtecflix/${filename}`;
res.json({ success: true, url });
} catch (err: any) {
console.error('Erro no upload para S3:', err);
res.status(500).json({ error: 'Erro ao salvar arquivo no S3' });
}
});
// 4. Courses List (With Progress)
app.get('/api/courses', authenticateToken, async (req: AuthenticatedRequest, res: Response) => {
const userId = req.user!.id;
const user = await prisma.user.findUnique({
where: { id: userId }
});
const unlockedCourses = user?.unlockedCourses || [];
const isAdmin = user?.role === 'admin';
const courses = await prisma.course.findMany({
include: {
modules: {
include: {
lessons: true
}
}
}
});
const userProgress = await prisma.progress.findMany({
where: { userId, completed: true }
});
const userProgressLessonIds = userProgress.map(p => p.lessonId);
const coursesWithProgress = courses.map(course => {
const sortedModules = [...course.modules].sort((a, b) => a.order - b.order);
const courseLessons = sortedModules.flatMap(m => {
const sortedLessons = [...m.lessons].sort((a, b) => a.order - b.order);
return sortedLessons.map(l => ({
id: l.id,
title: l.title,
thumbnailUrl: l.thumbnailUrl,
order: l.order,
moduleId: m.id
}));
});
const totalLessons = courseLessons.length;
let completedLessons = 0;
if (totalLessons > 0) {
completedLessons = courseLessons.filter(l => userProgressLessonIds.includes(l.id)).length;
}
const progressPercentage = totalLessons > 0 ? Math.round((completedLessons / totalLessons) * 100) : 0;
return {
id: course.id,
title: course.title,
description: course.description,
thumbnail: course.thumbnail,
isLocked: course.isLocked,
price: course.price,
category: course.category,
totalLessons,
completedLessons,
progress: progressPercentage,
isUnlocked: !course.isLocked || unlockedCourses.includes(course.id) || isAdmin,
lessons: courseLessons
};
});
res.json(coursesWithProgress);
});
// 5. Course Details (with Modules, Lessons, Progress & Notes)
app.get('/api/courses/:id', authenticateToken, async (req: AuthenticatedRequest, res: Response) => {
const userId = req.user!.id;
const courseId = req.params.id;
const course = await prisma.course.findUnique({
where: { id: courseId },
include: {
modules: {
orderBy: { order: 'asc' },
include: {
lessons: {
orderBy: { order: 'asc' }
}
}
}
}
});
if (!course) {
res.status(404).json({ error: 'Curso não encontrado' });
return;
}
const user = await prisma.user.findUnique({
where: { id: userId }
});
const unlockedCourses = user?.unlockedCourses || [];
const isAdmin = user?.role === 'admin';
const isUnlocked = !course.isLocked || unlockedCourses.includes(course.id) || isAdmin;
const progressRecords = await prisma.progress.findMany({
where: { userId, lesson: { moduleId: { in: course.modules.map(m => m.id) } } }
});
const noteRecords = await prisma.note.findMany({
where: { userId, lesson: { moduleId: { in: course.modules.map(m => m.id) } } }
});
const modulesWithLessons = course.modules.map(mod => {
const lessons = mod.lessons.map(lesson => {
const prog = progressRecords.find(p => p.lessonId === lesson.id);
const note = noteRecords.find(n => n.lessonId === lesson.id);
return {
...lesson,
progress: prog ? {
watchedPercentage: prog.watchedPercentage,
completed: prog.completed
} : { watchedPercentage: 0, completed: false },
note: note ? note.content : ''
};
});
return {
...mod,
lessons
};
});
const { modules, ...courseData } = course;
res.json({
course: {
...courseData,
isUnlocked
},
modules: modulesWithLessons
});
});
// Rate limiting protection for payment checkout endpoints
const checkoutRateLimitMap = new Map