Add email verification and SMTP configuration

- Updated .env.example to include SMTP settings and email verification parameters.
- Modified docker-compose.yml to add MailHog service for email testing and configured environment variables for the auth service.
- Implemented MailService for sending verification emails in auth service.
- Added EmailVerification model to Prisma schema and corresponding migration.
- Updated auth controller and service to handle email verification logic.
- Adjusted CORS settings across services to use the production frontend URL.
- Cleaned up unused OAuth guards and strategies in the auth service.

Author: root

.env.example

@@ -12,4 +12,21 @@ AUTH_PORT=
 
 AUTH_SERVICE_URL=
 
-PROFILES_SERVICE_URL=
+PROFILES_SERVICE_URL=
+
+SMTP_HOST=
+SMTP_PORT=
+SMTP_SECURE=
+SMTP_USER=
+SMTP_PASS=
+SMTP_FROM=
+EMAIL_VERIFY_URL_BASE=
+EMAIL_VERIFY_TTL_HOURS=
+EMAIL_VERIFY_AUTO=
+MAILHOG_UI_USER=
+MAILHOG_UI_PASS=
+SEED_EMAIL=
+SEED_PASSWORD=
+SEED_FIRST_NAME=
+SEED_LAST_NAME=
+SEED_DEMO=

backend/devops/backend-services/security/modsecurity/default.conf

@@ -49,14 +49,6 @@ upstream planner_upstream {
 	server planner:7000;
 }
 
-upstream swagger_upstream {
-	server swagger:8080;
-}
-
-upstream netdata_upstream {
-	server netdata:19999;
-}
-
 server {
 	listen 443 ssl;
 	server_name auth.localhost;
@@ -78,34 +70,9 @@ server {
 	}
 }
 
-server {
-	listen 443 ssl;
-	server_name netdata.localhost;
-
-	access_log /dev/stdout gateway_log;
-	error_log /dev/stderr warn;
-
-	ssl_protocols TLSv1.2 TLSv1.3;
-	ssl_certificate /etc/nginx/conf/server.crt;
-	ssl_certificate_key /etc/nginx/conf/server.key;
-
-	proxy_set_header Host $host;
-	proxy_set_header X-Real-IP $remote_addr;
-	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-	proxy_set_header X-Forwarded-Proto $scheme;
-
-	location / {
-		proxy_http_version 1.1;
-		proxy_set_header Upgrade $http_upgrade;
-		proxy_set_header Connection $connection_upgrade;
-		proxy_pass http://netdata_upstream;
-	}
-}
-
-
 server {
 	listen 443 ssl default_server;
-	server_name _ localhost;
+	server_name  137.184.159.183;
 
 	access_log /dev/stdout gateway_log;
 	error_log /dev/stderr warn;
@@ -213,19 +180,6 @@ server {
 		proxy_set_header Connection $connection_upgrade;
 		proxy_pass http://friends_ws_upstream;
 	}
-
-	location /docs/ {
-		proxy_pass http://swagger_upstream/;
-	}
-
-	location = /netdata {
-		return 308 https://netdata.localhost:8080/;
-	}
-
-	location /netdata/ {
-		return 308 https://netdata.localhost:8080/$is_args$args;
-	}
-
 	location / {
 		proxy_pass http://frontend_upstream;
 	}

backend/devops/frontend-services/mailhog/auth

@@ -0,0 +1 @@
+mailhog:$apr1$TVIdd.rw$yib.BVXoOFmA2CYeEqxQC/

backend/src/ai-places-service/src/server.js

@@ -14,7 +14,7 @@ const app = express();
 const PORT = process.env.PORT || 4000;
 
 app.use(cors({
-  origin: process.env.FRONTEND_URL || 'https://localhost',
+  origin: process.env.FRONTEND_URL || 'https://rihla.tech',
   credentials: true,
 }));
 app.use(express.json());

backend/src/auth-service/Dockerfile

@@ -14,6 +14,12 @@ COPY tsconfig*.json nest-cli.json ./
 COPY src ./src
 
 RUN npx nest build
+ 
+# make seed scripts available in build stage
+COPY scripts ./scripts
+
+# Compile seed scripts to CommonJS so they can be run with plain Node
+RUN npx tsc scripts/seed-faker.ts --outDir scripts-compiled --module commonjs --target es2020 --esModuleInterop
 
 FROM node:20-alpine
 
@@ -29,6 +35,10 @@ COPY --from=build /app/package.json ./package.json
 
 COPY prisma ./prisma
 
+# Ensure runtime has access to TypeScript seed scripts used by the entrypoint
+COPY scripts ./scripts
+COPY --from=build /app/scripts-compiled ./scripts-compiled
+
 COPY --chmod=700 entrypoint.sh /usr/local/bin/entrypoint.sh
 
 EXPOSE 3001

backend/src/auth-service/entrypoint.sh

@@ -40,5 +40,23 @@ rm -f /tmp/db_data /tmp/auth_data
 echo "[auth-service] Running Prisma migrations..."
 npx prisma migrate deploy
 
+echo "[auth-service] Generating Prisma client..."
+npx prisma generate
+
+if [ "${SEED_DEMO:-}" = "true" ]; then
+  echo "[auth-service] Seeding demo user..."
+  # Prefer compiled JS seed if available (use absolute paths)
+  if [ -f /app/scripts-compiled/seed-faker.js ]; then
+    node /app/scripts-compiled/seed-faker.js
+  else
+    # Try ESM-aware ts-node first, fall back to regular ts-node
+    if npx ts-node-esm /app/scripts/seed-faker.ts 2>/dev/null; then
+      :
+    else
+      npx ts-node /app/scripts/seed-faker.ts
+    fi
+  fi
+fi
+
 echo "[auth-service] Starting server on port ${AUTH_PORT:-3001}..."
 exec node dist/main

backend/src/auth-service/package-lock.json

@@ -30,6 +30,7 @@
     "class-validator": "^0.14.3",
     "cookie-parser": "^1.4.7",
     "dotenv": "^17.3.1",
+    "nodemailer": "^6.10.1",
     "passport": "^0.7.0",
     "passport-google-oauth20": "^2.0.0",
     "passport-jwt": "^4.0.1",

backend/src/auth-service/package.json

@@ -0,0 +1,19 @@
+-- CreateTable
+CREATE TABLE "EmailVerification" (
+	"id" TEXT NOT NULL,
+	"userId" TEXT NOT NULL,
+	"tokenHash" TEXT NOT NULL,
+	"expiresAt" TIMESTAMP(3) NOT NULL,
+	"createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+	CONSTRAINT "EmailVerification_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "EmailVerification_userId_tokenHash_key" ON "EmailVerification"("userId", "tokenHash");
+
+-- CreateIndex
+CREATE INDEX "EmailVerification_userId_idx" ON "EmailVerification"("userId");
+
+-- AddForeignKey
+ALTER TABLE "EmailVerification" ADD CONSTRAINT "EmailVerification_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;

backend/src/auth-service/prisma/migrations/20260413090000_add_email_verification_token_fields/migration.sql

@@ -16,6 +16,7 @@ model User {
   updatedAt       DateTime  @updatedAt
 
   accounts        Account[]
+  emailVerifications EmailVerification[]
   profile         Profile?
 }
 
@@ -48,3 +49,16 @@ model Profile {
 
   user        User     @relation(fields: [userId], references: [id], onDelete: Cascade)
 }
+
+model EmailVerification {
+  id        String   @id @default(cuid())
+  userId    String
+  tokenHash String
+  expiresAt DateTime
+  createdAt DateTime @default(now())
+
+  user      User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@unique([userId, tokenHash])
+}