Merge pull request #40 from aoda-zhang/develop

implement cookie-based authentication with refresh token mechanism

Author: aoda-zhang

.gitignore

@@ -128,5 +128,4 @@ tsconfig.tsbuildinfo
 .turbo
 
 # prisma dev runtime
-**/prisma/generated/**
-**/prisma/**/generated/**
+**/prisma/**/client**

README.MD

@@ -1,6 +1,6 @@
-# 🐾 PawHaven - Animal Rescue Platform
+[English](./README.MD) | [中文](./READMECN.MD)
 
-[English](./README.md) | [中文](./READMECN.md)
+# 🐾 PawHaven - Animal Rescue Platform
 
 ![TypeScript](https://img.shields.io/badge/TypeScript-3178C6?logo=typescript&logoColor=white)
 ![React](https://img.shields.io/badge/React-20232a?logo=react&logoColor=61dafb)
@@ -46,14 +46,14 @@ In addition to the application itself, PawHaven also serves as a **practice of m
 
 # 🚀 Tech Stack
 
-| Layer | Technology |
-|------|------------|
-| Frontend | React, TypeScript, React Query, React Hook Form |
-| Backend | NestJS, Node.js |
-| Architecture | Microservices, Monorepo |
-| Package Management | pnpm workspace |
-| Code Quality | ESLint, Prettier, Husky |
-| CI/CD | GitHub Actions |
+| Layer              | Technology                                      |
+| ------------------ | ----------------------------------------------- |
+| Frontend           | React, TypeScript, React Query, React Hook Form |
+| Backend            | NestJS, Node.js                                 |
+| Architecture       | Microservices, Monorepo                         |
+| Package Management | pnpm workspace                                  |
+| Code Quality       | ESLint, Prettier, Husky                         |
+| CI/CD              | GitHub Actions                                  |
 
 ---
 

READMECN.MD

@@ -1,6 +1,4 @@
-# 🐾 PawHaven - 动物救援平台
-
-[English](./README.md) | [中文](./READMECN.md)
+[English](./README.MD) | [中文](./READMECN.MD)
 
 ![TypeScript](https://img.shields.io/badge/TypeScript-3178C6?logo=typescript&logoColor=white)
 ![React](https://img.shields.io/badge/React-20232a?logo=react&logoColor=61dafb)
@@ -46,14 +44,14 @@
 
 # 🚀 技术栈
 
-| 层级 | 技术 |
-|------|------|
-| 前端 | React, TypeScript, React Query, React Hook Form |
-| 后端 | NestJS, Node.js |
-| 架构 | 微服务, Monorepo |
-| 包管理 | pnpm workspace |
-| 代码规范 | ESLint, Prettier, Husky |
-| CI/CD | GitHub Actions |
+| 层级     | 技术                                            |
+| -------- | ----------------------------------------------- |
+| 前端     | React, TypeScript, React Query, React Hook Form |
+| 后端     | NestJS, Node.js                                 |
+| 架构     | 微服务, Monorepo                                |
+| 包管理   | pnpm workspace                                  |
+| 代码规范 | ESLint, Prettier, Husky                         |
+| CI/CD    | GitHub Actions                                  |
 
 ---
 

apps/backend/auth-service/package.json

@@ -19,10 +19,6 @@
     "@nestjs/axios": "^4.0.1",
     "@nestjs/common": "^11.1.6",
     "@nestjs/config": "^4.0.2",
-    "@pawhaven/eslint-config": "workspace:*",
-    "@pawhaven/backend-core": "workspace:*",
-    "@pawhaven/tsconfig": "workspace:*",
-    "@pawhaven/shared": "workspace:*",
     "@nestjs/core": "^11.1.6",
     "@nestjs/jwt": "^11.0.1",
     "@nestjs/microservices": "^11.1.6",
@@ -31,6 +27,11 @@
     "@nestjs/platform-express": "^11.1.6",
     "@nestjs/terminus": "^11.0.0",
     "@nestjs/throttler": "^6.4.0",
+    "@pawhaven/backend-core": "workspace:*",
+    "@pawhaven/eslint-config": "workspace:*",
+    "@pawhaven/shared": "workspace:*",
+    "@pawhaven/tsconfig": "workspace:*",
+    "@prisma/client": "^6.19.1",
     "@types/bcrypt": "^6.0.0",
     "@types/express": "^5.0.3",
     "@types/passport-jwt": "^4.0.1",
@@ -45,28 +46,28 @@
     "dotenv": "^17.2.3",
     "helmet": "^8.1.0",
     "mongoose": "^8.19.1",
+    "nestjs-zod": "^5.1.1",
     "passport": "^0.7.0",
     "passport-jwt": "^4.0.1",
     "passport-local": "^1.0.0",
     "reflect-metadata": "^0.2.2",
-    "@prisma/client": "^6.19.1",
     "rxjs": "^7.8.2",
     "uuid": "^13.0.0",
-    "zod": "^4.3.6",
-    "nestjs-zod": "^5.1.1"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@nestjs/cli": "^11.0.10",
     "@nestjs/schematics": "^11.0.9",
     "@nestjs/testing": "^11.1.6",
+    "@types/cookie-parser": "^1.4.10",
     "@types/crypto-js": "^4.2.2",
     "@types/jest": "^30.0.0",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^24.7.1",
     "@types/passport-local": "^1.0.38",
     "@types/supertest": "^6.0.3",
-    "source-map-support": "^0.5.21",
     "prisma": "^6.19.1",
+    "source-map-support": "^0.5.21",
     "supertest": "^7.1.4",
     "ts-loader": "^9.5.4",
     "ts-node": "^10.9.2",

apps/backend/auth-service/src/app.module.ts

@@ -2,12 +2,12 @@ import { join } from 'path';
 
 import { AuthModule } from '@modules/Auth/auth.module';
 import { Module } from '@nestjs/common';
-import { PrismaClient as MongoPrismaClient } from '@prisma/client';
 import { SharedModule, SharedModuleFeatures } from '@pawhaven/backend-core';
 import {
   databaseEngines,
   microServiceNames,
 } from '@pawhaven/backend-core/constants';
+import { PrismaClient } from '@prismaClient';
 
 @Module({
   imports: [
@@ -22,7 +22,7 @@ import {
           module: SharedModuleFeatures.PrismaModule,
           options: {
             databaseEngine: databaseEngines.mongodb,
-            Client: MongoPrismaClient,
+            Client: PrismaClient,
           },
         },
         {

apps/backend/auth-service/src/config/dev/env/index.yaml

@@ -40,4 +40,5 @@ cors:
     - OPTIONS
 auth:
   jwtSecret: ${JWT_SECRET}
-  jwtExpiresIn: 3600
+  jwtExpiresIn: 1800
+  refreshTokenExpiresIn: 604800

apps/backend/auth-service/src/config/prod/env/index.yaml

@@ -41,4 +41,5 @@ cors:
 
 auth:
   jwtSecret: ${JWT_SECRET}
-  jwtExpiresIn: 3600
+  jwtExpiresIn: 1800
+  refreshTokenExpiresIn: 604800

apps/backend/auth-service/src/config/test/env/index.yaml

@@ -41,4 +41,5 @@ cors:
 
 auth:
   jwtSecret: ${JWT_SECRET}
-  jwtExpiresIn: 3600
+  jwtExpiresIn: 1800
+  refreshTokenExpiresIn: 604800

apps/backend/auth-service/src/config/uat/env/index.yaml

@@ -41,4 +41,5 @@ cors:
 
 auth:
   jwtSecret: ${JWT_SECRET}
-  jwtExpiresIn: 3600
+  jwtExpiresIn: 1800
+  refreshTokenExpiresIn: 604800

apps/backend/auth-service/src/main.ts

@@ -2,6 +2,7 @@ import type { NestExpressApplication } from '@nestjs/platform-express';
 import { NestFactory } from '@nestjs/core';
 import { ConfigService } from '@nestjs/config';
 import { Logger } from '@nestjs/common';
+import cookieParser from 'cookie-parser';
 
 import { AppModule } from './app.module';
 
@@ -11,6 +12,7 @@ async function bootstrap(): Promise<void> {
     bufferLogs: true,
   });
   const configService = app.get(ConfigService) as ConfigService;
+  app.use(cookieParser());
   app.setGlobalPrefix(configService.get('http.prefix')!);
   const port = configService.get('http.port');