-first commit

exthernal-login-api/.env

@@ -0,0 +1,28 @@
+#project
+PJ_NAME=exthernal-mobile-api
+
+# database
+PG_HOST=localhost
+PG_USER=postgres
+PG_PASS=123456
+PG_DB=ttc
+PG_PORT=5432
+
+# EMAIL
+SMTP_USER=lalisakuty@gmail.com
+SMTP_PASS=lurl pckw qugk tzob
+
+# REDIS
+REDIS_HOST=127.0.0.1
+REDIS_PORT=6379
+OTP_TTL_SECONDS=300
+
+# JWT-TOKENS
+JWT_SECRET=5b8273b2f79602e6b3987d3a9b018c66fd15e14848ff73ab1d332942c11eac80
+
+# DEV_HINT
+DEVHINT=true
+DEVHINT_LEVEL=3
+
+#PORT
+PORT=1012

exthernal-login-api/.vscode/launch.json

@@ -0,0 +1,29 @@
+{
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Run API (Nodemon Debug)",
+      "type": "node",
+      "request": "launch",
+      "runtimeExecutable": "nodemon",
+      "program": "${workspaceFolder}/src/app.js",
+      "restart": true,
+      "console": "integratedTerminal",
+      "internalConsoleOptions": "neverOpen",
+      "envFile": "${workspaceFolder}/.env",
+      "cwd": "${workspaceFolder}",
+      "runtimeArgs": ["--inspect=9229"],
+      "skipFiles": ["<node_internals>/**"],
+      // "env": {
+      //   "PJ_NAME": "exthernal-mobile-api",
+      //   "PG_HOST": "localhost",
+      //   "PG_USER": "postgres",
+      //   "PG_PASS": "1234",
+      //   "PG_DB": "postgres",
+      //   "PG_PORT": "5432",
+      //   "JWT_SECRET": "MY_SUPER_SECRET",
+      //   "PORT": "4000"
+      // }
+    }
+  ]
+}

exthernal-login-api/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "exthernal-mobile-api",
+  "version": "1.0.0",
+  "description": "External Mobile API following Nuttakit Controller Pattern vFinal",
+  "type": "module",
+  "main": "src/app.js",
+  "scripts": {
+    "start": "node src/app.js",
+    "dev": "nodemon src/app.js"
+  },  
+  "author": "Nuttakit Pothong",
+  "license": "MIT",
+  "dependencies": {
+    "cors": "^2.8.5",
+    "dotenv": "^16.3.1",
+    "express": "^4.19.2",
+    "pg": "^8.12.0"
+  },
+  "devDependencies": {
+    "nodemon": "^3.1.0"
+  }
+}

exthernal-login-api/src/app.js

@@ -0,0 +1,32 @@
+import express from 'express'
+import cors from 'cors'
+import dotenv from 'dotenv'
+import router from './routes/route.js'
+import { globalResponseHandler } from './middlewares/responseHandler.js'
+
+dotenv.config()
+
+const app = express()
+app.use(cors())
+app.use(express.json({ limit: '10mb' }))
+
+app.use(globalResponseHandler);
+
+app.use((err, req, res, next) => {
+  if (err instanceof SyntaxError && err.status === 400 && 'body' in err) {
+    console.error('🟥 Invalid JSON Received:', err.message)
+    return res.status(400).json({
+      code: "400",
+      message: "Invalid JSON format",
+      message_th: "โครงสร้าง JSON ไม่ถูกต้อง",
+      data: []
+    })
+  }
+  next()
+})
+
+app.use('/api', router)
+
+app.listen(process.env.PORT, () => {
+  console.log(`✅ ${process.env.PJ_NAME} running on port ${process.env.PORT}`)
+})

exthernal-login-api/src/config/db.js

@@ -0,0 +1,13 @@
+import pkg from 'pg'
+import dotenv from 'dotenv'
+
+dotenv.config()
+const { Pool } = pkg
+
+export const connection = new Pool({
+  host: process.env.PG_HOST,
+  user: process.env.PG_USER,
+  password: process.env.PG_PASS,
+  database: process.env.PG_DB,
+  port: process.env.PG_PORT,
+})

exthernal-login-api/src/controllers/biometric/loginController.js

@@ -0,0 +1,85 @@
+// import { LoginService } from '../services/loginservice.js'
+// // import { sendResponse } from '../utils/response.js'
+// // import { OftenError } from '../utils/oftenError.js'
+// import { GeneralService } from '../share/generalservice.js';
+// import { trim_all_array } from '../utils/trim.js'
+// import { verifyToken, generateToken } from '../utils/token.js'
+
+export class loginController {
+
+  // constructor() { // contructor zone
+  //   this.generalService = new GeneralService()
+  //   this.loginService = new LoginService()
+  // }
+
+
+  // ===================================================
+  // 🔹 LOGIN ปกติ
+  // ===================================================
+  async onNavigate(req, res) {
+    // Note: ตามที่ตกลงกันไว้ — ไม่ตรวจ organization ใน controller
+    //       (middleware จะตรวจค่า organization / request format ให้แล้ว)
+    this.generalService.devhint(1, 'logincontroller.js', 'onNavigate() start')
+
+    // อ้างถึง organization จาก body เพื่อใช้ใน onLoginController (ครั้งแรกอาจว่าง)
+    // แต่ไม่ต้อง return error ถ้าไม่มี — เพราะ middleware ทำหน้าที่ตรวจเบื้องต้นแล้ว
+    let organization = req.body.organization
+
+    // เรียก logic controller แบบเดียว (ต้อง return value เท่านั้น)
+    const prommis = await this.onLoginController(req, res, organization)
+    return prommis // ห้ามเปลี่ยนตรงนี้ตาม pattern
+  }
+
+  async onLoginController(req, res, database) {
+    let idx = -1
+    let result = []
+    try {
+      // const { username, password } = request // ห้ามทำแบบนี้อีกเด็ดขาด เราจะทำแบบด้านล่างแทน จดจำเลย
+
+      let username = req.body.request.username;
+      let password = req.body.request.password;
+
+
+      // if (!username || !password)
+      //   return sendResponse(res, 400, 'ข้อมูลไม่ครบ', 'Missing username or password')// เราจะไม่ทำแบบนี้กันอีกแล้ว
+      result = await this.loginService.verifyLogin(database, username, password) // เช็คกับ db กลาง ส่ง jwttoken ออกมา
+      // if (!result)
+      //   return sendResponse(res, 401, 'ชื่อผู้ใช้หรือรหัสผ่านไม่ถูกต้อง', 'Invalid credentials')
+      this.generalService.devhint(1, 'logincontroller.js', 'Login success')
+    } catch (error) {
+      idx = 1
+    } finally { // สำคัญมากต้อง จดจำไม่มีดัดแปลง อัปเดทเลย เรื่อง idx 
+      if(result == 0){ return sendResponse(res, 400, 'ชื่อผู้ใช้หรือรหัสผ่านไม่ถูกต้อง', 'username or password is incorrect') }
+      if(idx == 1){ return sendResponse(res, 400, 'เกิดข้อผิดพลาดไม่คาดคิดเกิดขึ้น', 'Unexpected error') }
+      if(result) { return result }
+      return null
+    }
+  }
+
+  async onBiometricLogin(req, res) {
+    try {
+
+    const result = await this.loginService.loginWithBiometric(organization, biometric_id)
+  } catch (error) {
+    idx = 1
+  } finally { // สำคัญมากต้อง จดจำไม่มีดัดแปลง อัปเดทเลย เรื่อง idx 
+    if(idx == 1){ return sendResponse(res, 400, 'เกิดข้อผิดพลาดไม่คาดคิดเกิดขึ้น', 'Unexpected error') }
+  }
+    return { result, timestamp: new Date().toISOString() }
+  }
+
+  async onBiometricRegister(req, res) {
+    const { organization, request } = req.body || {}
+    const { biometric_id } = request || {}
+    const userId = req.user.id
+
+    const result = await this.loginService.registerBiometric(organization, userId, biometric_id)
+    return { result, timestamp: new Date().toISOString() }
+  }
+
+  async onRenewToken(req, res) {
+    const user = req.user
+    const newToken = generateToken({ id: user.id, name: user.name })
+    return { token: newToken, renewed_at: new Date().toISOString() }
+  }
+}

exthernal-login-api/src/controllers/loginController.js

@@ -0,0 +1,67 @@
+import { LoginService } from '../services/loginservice.js'
+import { sendError } from '../utils/response.js'
+// import { OftenError } from '../utils/oftenError.js'
+import { GeneralService } from '../share/generalservice.js';
+import { trim_all_array } from '../utils/trim.js'
+import { verifyToken, generateToken } from '../utils/token.js'
+
+export class loginController {
+
+  constructor() {
+    this.generalService = new GeneralService();
+    this.loginService = new LoginService();
+  }
+
+  async onNavigate(req, res) {
+    this.generalService.devhint(1, 'logincontroller.js', 'onNavigate() start');
+    let organization = req.body.organization;
+    const prommis = await this.onLoginController(req, res, organization);
+    return prommis;
+  }
+
+  async onLoginController(req, res, database) {
+    let idx = -1
+    let result = []
+    try {
+      let username = req.body.request.username;
+      let password = req.body.request.password;
+
+      result = await this.loginService.verifyLogin(database, username, password); // เช็คกับ db กลาง ส่ง jwttoken ออกมา
+      this.generalService.devhint(1, 'logincontroller.js', 'Login success');
+    } catch (error) {
+      idx = 1;
+    } finally { 
+      if (idx === 1) return sendError('เกิดข้อผิดพลาดไม่คาดคิดเกิดขึ้น', 'Unexpected error');
+      if (!result) return sendError('ชื่อผู้ใช้หรือรหัสผ่านไม่ถูกต้อง', 'Invalid credentials');
+      if(result) { return result }
+      return null
+    }
+  }
+
+  // async onBiometricLogin(req, res) {
+  //   try {
+
+  //   const result = await this.loginService.loginWithBiometric(organization, biometric_id)
+  // } catch (error) {
+  //   idx = 1
+  // } finally { // สำคัญมากต้อง จดจำไม่มีดัดแปลง อัปเดทเลย เรื่อง idx 
+  //   if(idx == 1){ return sendResponse(res, 400, 'เกิดข้อผิดพลาดไม่คาดคิดเกิดขึ้น', 'Unexpected error') }
+  // }
+  //   return { result, timestamp: new Date().toISOString() }
+  // }
+
+  // async onBiometricRegister(req, res) {
+  //   const { organization, request } = req.body || {}
+  //   const { biometric_id } = request || {}
+  //   const userId = req.user.id
+
+  //   const result = await this.loginService.registerBiometric(organization, userId, biometric_id)
+  //   return { result, timestamp: new Date().toISOString() }
+  // }
+
+  // async onRenewToken(req, res) {
+  //   const user = req.user
+  //   const newToken = generateToken({ id: user.id, name: user.name })
+  //   return { token: newToken, renewed_at: new Date().toISOString() }
+  // }
+}

exthernal-login-api/src/controllers/otpController/otpVerifycontroller.js

@@ -0,0 +1,24 @@
+import { sendError } from '../../utils/response.js';
+import { OTPVerifyService } from '../../services/otpverifyservice.js';
+import { GeneralService } from '../../share/generalservice.js';
+
+export class OtpVerifyController {
+  constructor() {
+    this.otpVerifyService = new OTPVerifyService();
+    this.generalService = new GeneralService();
+  }
+
+  async onNavigate(req, res) {
+    let idx = -1, result = [];
+    try {
+      const { email, otp } = req.body.request;
+      result = await this.otpVerifyService.verifyOtp(email, otp);
+    } catch (error) {
+      idx = 1;
+      this.generalService.devhint(1, 'otpverifycontroller.js', 'Jumpout', error.message);
+    } finally {
+      if (idx === 1) return sendError('เกิดข้อผิดพลาดในการตรวจสอบ OTP', 'OTP verification error');
+      return result;
+    }
+  }
+}

exthernal-login-api/src/controllers/otpController/otpcontroller.js

@@ -0,0 +1,26 @@
+import { OtpService } from '../../services/otpservice.js'
+import { sendError } from '../../utils/response.js'
+import { GeneralService } from '../../share/generalservice.js'
+
+export class OtpController {
+  constructor() {
+    this.otpService = new OtpService()
+    this.generalService = new GeneralService()
+  }
+
+  async onSendOtp(req, res) {
+    let idx = -1, result = []
+    try {
+      const email  = req.body.request.email
+      result = await this.otpService.sendOtp(email)
+      this.generalService.devhint(1, 'otpcontroller.js', `OTP sent to ${email} OTP: ${result.otp}`)
+    } catch (error) {
+      idx = 1
+      this.generalService.devhint(1, 'otpcontroller.js', 'Jumpout Detected', error.message)
+    } finally {
+      delete result.otp
+      if (idx === 1) return sendError('ไม่สามารถส่ง OTP ได้', 'Send failed')
+      return result
+    }
+  }
+}

exthernal-login-api/src/controllers/otpController/resetpasswordcontroller.js

@@ -0,0 +1,24 @@
+import { ResetPasswordService } from '../../services/resetpasswordservice.js';
+import { sendError } from '../../utils/response.js';
+import { GeneralService } from '../../share/generalservice.js';
+
+export class ResetPasswordController {
+  constructor() {
+    this.resetPasswordService = new ResetPasswordService();
+    this.generalService = new GeneralService();
+  }
+
+  async onNavigate(req, res) {
+    let idx = -1, result = [];
+    try {
+      const { email, token, newPassword } = req.body.request;
+      result = await this.resetPasswordService.resetPassword(email, token, newPassword);
+    } catch (error) {
+      idx = 1;
+      this.generalService.devhint(1, 'resetpasswordcontroller.js', 'Jumpout', error.message);
+    } finally {
+      if (idx === 1) return sendError('ไม่สามารถรีเซ็ตรหัสผ่านได้', 'Password reset error');
+      return result;
+    }
+  }
+}

exthernal-login-api/src/controllers/registercontroller.js

@@ -0,0 +1,26 @@
+import { RegisterService } from '../services/registerservice.js';
+import { sendError } from '../utils/response.js';
+import { GeneralService } from '../share/generalservice.js';
+
+export class RegisterController {
+  constructor() {
+    this.registerService = new RegisterService();
+    this.generalService = new GeneralService();
+  }
+
+  async onNavigate(req, res) {
+    let idx = -1, result = [];
+    try {
+      const { organization, request } = req.body;
+      const { email, fname, lname, password } = request;
+      result = await this.registerService.requestRegistration(organization, email, fname, lname, password);
+    } catch (error) {
+      idx = 1;
+      this.generalService.devhint(1, 'registercontroller.js', 'Jumpout', error.message);
+      result = error; // จะถูก Global Handler จัด format
+    } finally {
+      if (idx === 1) return result;
+      return result;
+    }
+  }
+}

exthernal-login-api/src/controllers/verifyemailcontroller.js

@@ -0,0 +1,46 @@
+import { VerifyEmailService } from '../services/verifyemailservice.js';
+import { sendError } from '../utils/response.js';
+import { GeneralService } from '../share/generalservice.js';
+
+export class VerifyEmailController {
+  constructor() {
+    this.verifyService = new VerifyEmailService();
+    this.generalService = new GeneralService();
+  }
+
+  async onVerifyEmail(req, res) {
+    let idx = -1;
+    let result = null;
+
+    try {
+      // token/email can come from query (link) or body
+      const email = (req.query && req.query.email) || (req.body && req.body.request && req.body.request.email);
+      const token = (req.query && req.query.token) || (req.body && req.body.request && req.body.request.token);
+      const schema = (req.query && req.query.organization) || (req.body && req.body.organization) || 'nuttakit';
+
+      if (!email || !token) {
+        return sendError('Missing token or email', 'Missing token or email', 400);
+      }
+
+      // call service to do Redis + DB work
+      result = await this.verifyService.verifyAndCreate({ email, token, schema });
+
+      // devhint success
+      this.generalService.devhint(1, 'verifyemailcontroller.js', `Verify succeeded for ${email} schema=${schema}`);
+    } catch (error) {
+      idx = 1;
+      // If service threw sendError object, it may be an object not Error
+      const errMsg = (error && error.message) ? error.message : JSON.stringify(error);
+      this.generalService.devhint(1, 'verifyemailcontroller.js', 'Jumpout Detected', errMsg);
+    } finally {
+      if (idx === 1) return sendError('ไม่สามารถยืนยันอีเมลได้', 'Verification failed', 400);
+      // standard success response (globalResponseHandler will wrap it)
+      return {
+        code: '200',
+        message: 'successful',
+        message_th: 'ยืนยันอีเมลสำเร็จ',
+        data: result
+      };
+    }
+  }
+}

exthernal-login-api/src/middlewares/auth.js

@@ -0,0 +1,14 @@
+import { verifyToken } from '../utils/token.js'
+import { sendError } from '../utils/response.js'
+
+export function authMiddleware(req, res, next) {
+  const authHeader = req.headers['authorization']
+  const token = authHeader && authHeader.split(' ')[1]
+  if (!token) return sendError('ไม่พบ Token', 'Missing token', 401)
+
+  const decoded = verifyToken(token)
+  if (!decoded) return sendError('Token ไม่ถูกต้อง', 'Invalid token', 403)
+
+  req.user = decoded
+  next()
+}

exthernal-login-api/src/middlewares/responseHandler.js

@@ -0,0 +1,20 @@
+import { formatSuccessResponse } from '../utils/response.js'
+
+export function globalResponseHandler(req, res, next) {
+  const oldJson = res.json.bind(res)
+
+  res.json = (data) => {
+    if (!data) return oldJson(formatSuccessResponse(null))
+
+    //  ถ้า code ไม่ใช่ 200 → ตั้ง HTTP status ให้ตรงกับ code
+    if (data?.code && String(data.code) !== '200') {
+      res.status(Number(data.code) || 400)
+      return oldJson(data)
+    }
+
+    res.status(200)
+    return oldJson(formatSuccessResponse(data))
+  }
+
+  next()
+}

exthernal-login-api/src/middlewares/validate.js

@@ -0,0 +1,24 @@
+import { sendError } from '../utils/response.js'
+
+/**
+ * ✅ Middleware สำหรับตรวจสอบความถูกต้องของ JSON body
+ * ป้องกัน body-parser crash (SyntaxError)
+ */
+export function validateJsonFormat(err, req, res, next) {
+  if (err instanceof SyntaxError && 'body' in err) {
+    console.error('[Invalid JSON Format]', err.message)
+    return sendError('รูปแบบ บอร์ดี้ ไม่ถูกต้อง', 'Invalid Body format')
+  }
+  next()
+}
+
+// /**
+//  * ✅ ตรวจสอบ body/query/params ว่ามีค่า organization หรือไม่
+//  */
+// export function validateRequest(req, res, next) {
+//   const { organization } = req.body || {}
+//   if (!organization) {
+//     return sendResponse(res, 400, 'ไม่พบค่า organization', 'Missing organization')
+//   }
+//   next()
+// }

exthernal-login-api/src/middlewares/verifyEmailHandler.js

@@ -0,0 +1,37 @@
+import Redis from 'ioredis';
+import { GeneralService } from '../share/generalservice.js';
+// import { sendError } from './response.js';
+
+export async function verifyEmailHandler(req, res) {
+  const redis = new Redis();
+  const generalService = new GeneralService();
+
+  try {
+    const { email, token } = req.query;
+    const schema = req.body?.organization || 'nuttakit'; // 🧩 ใช้ schema ตาม org
+    const storedData = await redis.get(`verify:${email}`);
+
+    if (!storedData) {
+      return res.status(400).send('ลิงก์หมดอายุหรือไม่ถูกต้อง');
+    }
+
+    const { fname, lname, hashedPwd, token: storedToken } = JSON.parse(storedData);
+    if (token !== storedToken) {
+      return res.status(400).send('Token ไม่ถูกต้อง');
+    }
+
+    let sql = `
+      INSERT INTO ${schema}.usrmst (usrnam, usrthinam, usrthilstnam, usrpwd, usrrol)
+      VALUES ($1, $2, $3, $4, 'U')
+    `;
+    let param = [email, fname, lname, hashedPwd];
+    await generalService.executeQueryParam(sql, param);
+
+    await redis.del(`verify:${email}`);
+
+    res.send(`<h2>✅ ยืนยันอีเมลสำเร็จ บัญชีของคุณถูกสร้างแล้ว (${schema})</h2>`);
+  } catch (error) {
+    console.error('❌ [Verify Email Error]', error);
+    res.status(500).send('เกิดข้อผิดพลาดในระบบ');
+  }
+}

exthernal-login-api/src/routes/route.js

@@ -0,0 +1,52 @@
+import express from 'express'
+import { loginController } from '../controllers/loginController.js'
+import { authMiddleware } from '../middlewares/auth.js'
+import { OtpController } from '../../src/controllers/otpController/otpcontroller.js'
+import { OtpVerifyController } from '../../src/controllers/otpController/otpVerifycontroller.js'
+import { RegisterController } from '../controllers/registercontroller.js';
+import { VerifyEmailController } from '../controllers/verifyemailcontroller.js';
+import { ResetPasswordController } from '../controllers/otpController/resetpasswordcontroller.js';
+
+// 🧱 Controller Instances
+const registerController = new RegisterController();
+const verifyEmailController = new VerifyEmailController();
+const resetPasswordController = new ResetPasswordController();;
+
+const router = express.Router()
+
+const controller_login_post = new loginController()
+const otpController = new OtpController()
+const otpVerifyController = new OtpVerifyController()
+
+router.post('/login/login', async (req, res) => {const result = await controller_login_post.onNavigate(req, res); return res.json(result)})
+
+router.post('/login/otp/send', async (req, res) => {
+  const result = await otpController.onSendOtp(req, res)
+  if (result) return res.json(result)
+})
+router.post('/login/register', async (req, res) => {
+  const result = await registerController.onNavigate(req, res);
+  if (result) return res.json(result);
+});
+
+router.get('/login/verify-email', async (req, res) => {
+  const result = await verifyEmailController.onVerifyEmail(req, res);
+  if (result?.code && result.code !== '200') return res.status(400).send(result.message_th);
+  // ถ้า controller ส่ง HTML string กลับมา → render ตรง ๆ
+  if (typeof result === 'string') return res.send(result);
+  return res.json(result);
+});
+
+
+router.post('/login/reset-password', async (req, res) => {
+  const result = await resetPasswordController.onNavigate(req, res);
+  if (result) return res.json(result);
+});
+
+
+router.post('/login/otp/verify', async (req, res) => {
+  const result = await otpVerifyController.onNavigate(req, res)
+  if (result) return res.json(result)
+})
+
+export default router

exthernal-login-api/src/services/loginservice.js

@@ -0,0 +1,106 @@
+import bcrypt from 'bcrypt'
+import { GeneralService } from '../share/generalservice.js'
+import { generateToken } from '../utils/token.js'
+
+export class LoginService {
+  constructor() {
+    this.generalService = new GeneralService()
+  }
+  async verifyLogin(database, username, password) {
+    this.generalService.devhint(2, 'loginservice.js', `verifyLogin() start for username=${username}`)
+
+    let user = null
+    let token = null
+
+    let sql = `
+      SELECT usrseq, usrnam, usrorg, usrrol, usrpwd, usrthinam, usrthilstnam
+      FROM nuttakit.usrmst
+      WHERE usrnam = $1
+    `
+    let params = [username]
+    const rows = await this.generalService.executeQueryParam(database, sql, params)
+    this.generalService.devhint(3, 'loginservice.js', `query done, found=${rows.length}`)
+
+    if (rows.length === 0) {
+      this.generalService.devhint(2, 'loginservice.js', 'no user found')
+      return null
+    }
+
+    user = rows[0]
+    const match = await bcrypt.compare(password, user.usrpwd)
+    if (match === false) {
+      this.generalService.devhint(2, 'loginservice.js', 'password mismatch')
+      return null
+    }
+
+    token = generateToken({
+      id: user.usrseq,
+      name: user.usrnam,
+      realname: user.usrthinam,
+      lastname: user.usrthilstnam,
+      role: user.usrrol,
+      organization: user.usrorg
+    })
+    this.generalService.devhint(2, 'loginservice.js', 'token generated successfully')
+
+
+    delete user.usrseq  
+    delete user.usrnam  
+    delete user.usrrol  
+    delete user.usrpwd
+    delete user.usrorg
+    return {
+      token,
+      ...user
+    }
+  }
+
+  async loginWithBiometric(database, biometric_id) {
+    this.generalService.devhint(2, 'loginservice.js', `loginWithBiometric() start for biometric_id=${biometric_id}`)
+
+    let sql = ''
+    let params = []
+
+    sql = `
+      SELECT usrid, usrnam, usrrol
+      FROM ${database}.usrmst
+      WHERE biometric_id = $1
+    `
+    params = [biometric_id]
+    const rows = await this.generalService.executeQueryParam(database, sql, params)
+    if (rows.length === 0) {
+      this.generalService.devhint(2, 'loginservice.js', 'no biometric found')
+      return null
+    }
+
+    const user = rows[0]
+    const token = generateToken({
+      id: user.usrid,
+      name: user.usrnam,
+      role: user.usrrol,
+      organization: database
+    })
+
+    this.generalService.devhint(2, 'loginservice.js', 'biometric token generated')
+    return { token, user }
+  }
+
+  async registerBiometric(database, usrid, biometric_id) {
+    this.generalService.devhint(2, 'loginservice.js', `registerBiometric() start user=${usrid}`)
+
+
+    let sql = ''
+    let params = []
+
+    sql = `
+      UPDATE ${database}.usrmst
+      SET biometric_id = $1
+      WHERE usrid = $2
+    `
+    params = [biometric_id, usrid]
+    await this.generalService.executeQueryParam(database, sql, params)
+
+    this.generalService.devhint(2, 'loginservice.js', 'biometric registered')
+    return { message: 'Biometric registered successfully' }
+  }
+}

exthernal-login-api/src/services/otpservice.js

@@ -0,0 +1,17 @@
+import { generateOTP } from '../utils/otp.js'
+import { sendMockOtpMail } from '../utils/mailer.js'
+import { saveOtp, verifyOtp, removeOtp } from '../utils/redis.js'
+import { sendError } from '../utils/response.js'
+
+export class OtpService {
+  async sendOtp(email) {
+    try {
+      const otp = generateOTP()
+      await saveOtp(email, otp)
+      await sendMockOtpMail(email, otp)
+      return { email, otp}
+    } catch (error) {
+      return sendError('ไม่สามารถส่ง OTP ได้', 'Failed to send OTP')
+    }
+  }
+}

exthernal-login-api/src/services/otpverifyservice.js

@@ -0,0 +1,29 @@
+import Redis from 'ioredis';
+import crypto from 'crypto';
+import { sendError } from '../utils/response.js';
+import { GeneralService } from '../share/generalservice.js';
+
+export class OTPVerifyService {
+  constructor() {
+    this.redis = new Redis();
+    this.generalService = new GeneralService();
+  }
+
+  async verifyOtp(email, otp) {
+    const storedOtp = await this.redis.get(`otp:${email}`);
+    if (!storedOtp || storedOtp !== otp) {
+      throw sendError('รหัส OTP ไม่ถูกต้องหรือหมดอายุ', 'Invalid OTP');
+    }
+
+    await this.redis.del(`otp:${email}`);
+
+    const resetToken = crypto.randomBytes(32).toString('hex');
+    await this.redis.set(`reset:${email}`, resetToken, 'EX', 600); // TTL 10 นาที
+
+    this.generalService.devhint(1, 'otpverifyservice.js', `OTP Verified → Reset Token issued (${email})`);
+
+    return {
+        resetToken:resetToken
+    };
+  }
+}

exthernal-login-api/src/services/registerservice.js

@@ -0,0 +1,88 @@
+import Redis from 'ioredis';
+import bcrypt from 'bcrypt';
+import crypto from 'crypto';
+import nodemailer from 'nodemailer';
+import { GeneralService } from '../share/generalservice.js';
+import { sendError } from '../utils/response.js';
+
+export class RegisterService {
+
+  constructor() {
+    this.redis = new Redis();
+    this.generalService = new GeneralService();
+  }
+
+  async requestRegistration(database, email, fname, lname, password) {
+    let result = [];
+    try {
+      let sql = `
+        SELECT usrseq FROM ${database}.usrmst WHERE usrnam = $1
+      `;
+      let param = [email];
+      const userCheck = await this.generalService.executeQueryParam(database, sql, param);
+
+      if (userCheck.length > 0) {
+        this.generalService.devhint(1, 'registerservice.js', `❌ Duplicate email (${email})`);
+        throw sendError('อีเมลนี้ถูกใช้แล้ว', 'Email already registered');
+      }
+
+      const hashedPwd = await bcrypt.hash(password, 10);
+      const token = crypto.randomBytes(32).toString('hex');
+
+
+      const payload = JSON.stringify({ fname, lname, hashedPwd, token, database });
+      await this.redis.set(`verify:${email}`, payload, 'EX', 86400); // 24h
+
+
+      const verifyUrl = `http://49.231.182.24:1012/api/verify-email?token=${token}&email=${encodeURIComponent(email)}&organization=${database}`;
+      await this.sendVerifyEmail(email, verifyUrl);
+
+      this.generalService.devhint(2, 'registerservice.js', `✅ Verify link sent to ${email}`);
+
+      result = {
+        code: '200',
+        message_th: 'ส่งลิงก์ยืนยันอีเมลแล้ว',
+        data: {}
+      };
+    } catch (error) {
+      this.generalService.devhint(1, 'registerservice.js', '❌ Registration Error', error.message);
+      throw error;
+    }
+    return result;
+  }
+
+  async sendVerifyEmail(email, verifyUrl) {
+    try {
+      const transporter = nodemailer.createTransport({
+        service: 'gmail',
+        auth: {
+          user: process.env.SMTP_USER,
+          pass: process.env.SMTP_PASS,
+        },
+      });
+
+      const html = `
+        <div style="font-family: sans-serif;">
+          <h2>ยืนยันการสมัครสมาชิก</h2>
+          <p>กรุณากดยืนยันภายใน 24 ชั่วโมง เพื่อเปิดใช้งานบัญชีของคุณ</p>
+          <a href="${verifyUrl}"
+             style="display:inline-block;background:#0078d4;color:white;
+             padding:10px 20px;text-decoration:none;border-radius:5px;">ยืนยันอีเมล</a>
+          <p style="margin-top:16px;font-size:13px;color:#555;">หากคุณไม่ได้สมัคร โปรดละเว้นอีเมลนี้</p>
+        </div>
+      `;
+
+      await transporter.sendMail({
+        from: `"System" <${process.env.SMTP_USER}>`,
+        to: email,
+        subject: '📩 ยืนยันอีเมลสำหรับสมัครสมาชิก',
+        html,
+      });
+
+      this.generalService.devhint(2, 'registerservice.js', `📤 Verification email sent (${email})`);
+    } catch (error) {
+      this.generalService.devhint(1, 'registerservice.js', '❌ Email Send Failed', error.message);
+      throw sendError('ไม่สามารถส่งอีเมลได้', 'Email send failed');
+    }
+  }
+}

exthernal-login-api/src/services/resetpasswordservice.js

@@ -0,0 +1,38 @@
+import Redis from 'ioredis';
+import bcrypt from 'bcrypt';
+import { sendError } from '../utils/response.js';
+import { GeneralService } from '../share/generalservice.js';
+
+export class ResetPasswordService {
+  constructor() {
+    this.redis = new Redis();
+    this.generalService = new GeneralService();
+  }
+
+  async resetPassword(email, token, newPassword) {
+    let database = '';
+
+    const storedToken = await this.redis.get(`reset:${email}`);
+    if (!storedToken || storedToken !== token) {
+      throw sendError('Token ไม่ถูกต้องหรือหมดอายุ', 'Invalid or expired token');
+    }
+
+    await this.redis.del(`reset:${email}`);
+
+    // อัปเดตรหัสผ่านในฐานข้อมูลจริง
+    const hashedPwd = await bcrypt.hash(newPassword, 10);
+    let sql = `
+    UPDATE usrmst SET usrpwd = $1 WHERE usrnam = $2
+    `
+    let param = [hashedPwd, email];
+    await this.generalService.executeQueryParam(database, sql, param);
+
+    this.generalService.devhint(1, 'resetpasswordservice.js', `Password reset successful (${email})`);
+
+    return {
+      code: '200',
+      message: 'successful',
+      message_th: 'รีเซ็ตรหัสผ่านสำเร็จ'
+    };
+  }
+}

exthernal-login-api/src/services/userservice.js

@@ -0,0 +1,13 @@
+import { executeQueryParam } from '../share/generalservice.js'
+
+export const userService = {
+  async createUser(database, usrnam, usreml) {
+    const sql = `
+      SELECT * FROM ${database}.usrmst
+      WHERE usrnam = $1 OR usreml = $2
+    `
+    const params = [usrnam, usreml]
+    const result = await executeQueryParam(sql, database, params)
+    return result
+  },
+}

exthernal-login-api/src/services/verifyemailservice.js

@@ -0,0 +1,66 @@
+import Redis from 'ioredis';
+import { GeneralService } from '../share/generalservice.js';
+import { sendError } from '../utils/response.js';
+
+export class VerifyEmailService {
+  constructor() {
+    this.redis = new Redis();
+    this.generalService = new GeneralService();
+  }
+
+  async verifyAndCreate({ email, token, schema = 'nuttakit' }) {
+    // ✅ STEP 1: โหลด payload จาก Redis
+    const key = `verify:${email}`;
+    const stored = await this.redis.get(key);
+    if (!stored) {
+      throw sendError('ลิงก์หมดอายุหรือไม่ถูกต้อง', 'Verification link expired or invalid', 400);
+    }
+
+    let parsed;
+    try {
+      parsed = JSON.parse(stored);
+    } catch (ex) {
+      await this.redis.del(key).catch(() => {});
+      throw sendError('ข้อมูลการยืนยันไม่ถูกต้อง', 'Invalid verify payload', 400);
+    }
+
+    // ✅ STEP 2: ตรวจสอบ token
+    if (parsed.token !== token) {
+      throw sendError('Token ไม่ถูกต้อง', 'Invalid token', 400);
+    }
+
+    // ✅ STEP 3: ตรวจสอบว่าอีเมลนี้เคยถูกสร้างใน schema แล้วหรือยัง
+    const checkSql = `
+      SELECT usrseq FROM \${database}.usrmst WHERE usrnam = $1
+    `;
+    const checkResult = await this.generalService.executeQueryParam(schema, checkSql, [email]);
+
+    if (checkResult && checkResult.length > 0) {
+      await this.redis.del(key).catch(() => {});
+      throw sendError('อีเมลนี้ถูกใช้แล้วในองค์กรนี้', 'Email already registered in this organization', 400);
+    }
+
+    // ✅ STEP 4: Insert ข้อมูลลงในตารางจริง
+    const insertSql = `
+      INSERT INTO ${database}.usrmst (usrnam, usrthinam, usrthilstnam, usrpwd, usrrol)
+      VALUES ($1, $2, $3, $4, 'U')
+    `;
+    const params = [email, parsed.fname, parsed.lname, parsed.hashedPwd];
+    await this.generalService.executeQueryParam(schema, insertSql, params);
+
+    // ✅ STEP 5: ลบ Redis Key (เคลียร์ payload)
+    await this.redis.del(key).catch(() => {});
+
+    this.generalService.devhint(2, 'verifyemailservice.js', `✅ Account verified (${email})`);
+
+    // ✅ STEP 6: ส่งผลลัพธ์กลับ
+    return {
+      code: '200',
+      message_th: 'ยืนยันอีเมลสำเร็จ บัญชีถูกสร้างแล้ว',
+      data: {
+        email,
+        schema,
+      },
+    };
+  }
+}

exthernal-login-api/src/share/generalservice.js

@@ -0,0 +1,177 @@
+import { connection } from '../config/db.js'
+import dotenv from 'dotenv'
+import { sendError } from '../utils/response.js'
+dotenv.config()
+
+export class GeneralService {
+  devhint(level, location, message, extra = null) {
+    const isEnabled = process.env.DEVHINT === 'true'
+    const currentLevel = parseInt(process.env.DEVHINT_LEVEL || '1', 10)
+    if (!isEnabled || level > currentLevel) return
+
+    const timestamp = new Date().toISOString()
+    const prefix = `🧩 [DEVHINT:${location}]`
+    const formatted = `${prefix} → ${message} (${timestamp})`
+
+    // 🔹 highlight jumpout
+    if (message.includes('Jumpout')) {
+      console.log('\x1b[31m%s\x1b[0m', formatted) // แดง = jumpout
+    } else if (message.includes('Error')) {
+      console.log('\x1b[33m%s\x1b[0m', formatted) // เหลือง = error
+    } else {
+      console.log(formatted)
+    }
+
+    if (extra) console.log(extra)
+  }
+
+  // ===================================================
+  // ✅ executeQueryParam() — เจ๊งจริง แล้ว controller catch ได้จริง
+  // ===================================================
+  async executeQueryParam(database, sql, params = []) {
+    const formattedSQL = sql.replace(/\${database}/g, database)
+    try {
+      this.devhint(2, 'executeQueryParam', `📤 Executing Query`, `sql = ${formattedSQL}`)
+      const result = await connection.query(formattedSQL, params)
+      this.devhint(2, 'executeQueryParam', `✅ Query Success (${result.rowCount} rows)`)
+      return result.rows
+    } catch (err) {
+      this.devhint(1, 'executeQueryParam', `❌ SQL Error`, err.message)
+      console.error('🧨 SQL Error:', err.message)
+      throw new Error(`SQL_EXECUTION_FAILED::${err.message}`) // ✅ “เจ๊ง” แล้วโยนขึ้น controller จริง
+    }
+  }
+
+  // ===================================================
+  // ✅ executeQueryConditions() — เหมือนกัน
+  // ===================================================
+  async executeQueryConditions(database, baseQuery, conditions = {}) {
+    this.devhint(2, 'GeneralService', 'executeQueryConditions() start')
+
+    let whereClauses = []
+    let params = []
+    let idx = 1
+
+    for (const [key, value] of Object.entries(conditions)) {
+      if (value === undefined || value === null || value === '') continue
+      const match = String(value).match(/^(ILIKE|LIKE)\s+(.+)$/i)
+      if (match) {
+        const operator = match[1].toUpperCase()
+        const pattern = match[2].trim()
+        whereClauses.push(`${key} ${operator} $${idx}`)
+        params.push(pattern)
+      } else {
+        whereClauses.push(`${key} = $${idx}`)
+        params.push(value)
+      }
+      idx++
+    }
+
+    let finalQuery = baseQuery
+    if (whereClauses.length > 0) finalQuery += ' AND ' + whereClauses.join(' AND ')
+    const formattedSQL = finalQuery.replace(/\${database}/g, database)
+
+    try {
+      this.devhint(2, 'executeQueryConditions', `📤 Executing Query`, {
+        database,
+        sql: formattedSQL,
+        params
+      })
+      const result = await connection.query(formattedSQL, params)
+      this.devhint(2, 'executeQueryConditions', `✅ Query Success (${result.rowCount} rows)`)
+      return result.rows
+    } catch (err) {
+      this.devhint(1, 'executeQueryConditions', `❌ SQL Error`, err.message)
+      console.error('🧨 SQL Error:', err.message)
+      throw new Error(`SQL_EXECUTION_FAILED::${err.message}`) // ✅ “เจ๊งจริง” ส่งถึง controller แน่นอน
+    }
+  }
+}
+// ===================================================
+// Export สำหรับ controller หรืออื่นๆ เรียกใช้ได้ด้วย
+// ===================================================
+
+
+
+
+// /**
+//  * ✅ executeQueryParam (ของเดิม)
+//  * ใช้กับ SQL + database schema + params
+//  */
+// export async function executeQueryParam(sql, database, params = []) {
+//   try {
+//     if (!database) throw new Error('Database is not defined')
+
+//     const formattedSQL = sql.replace(/\${database}/g, database)
+//     console.log(`[DB:${database}] → ${formattedSQL}`)
+//     const result = await connection.query(formattedSQL, params)
+//     return result.rows
+//   } catch (err) {
+//     console.error('[executeQueryParam Error]', err.message)
+//     throw err
+//   }
+// }
+
+/**
+ * ✅ executeQueryConditions (ใหม่)
+ * ใช้สร้าง WHERE อัตโนมัติจาก object เงื่อนไข
+ * ตัวที่ไม่มีค่า (null, undefined, '') จะไม่ถูกนำมาสร้างใน WHERE
+ */
+// export async function executeQueryConditions(database, baseQuery, conditions = {}) {
+//   try {
+//     if (!database) throw new Error('Database is not defined')
+
+//     let whereClauses = []
+//     let params = []
+//     let idx = 1
+
+//     for (const [key, value] of Object.entries(conditions)) {
+//       if (value === undefined || value === null || value === '') continue
+
+//       // ✅ ตรวจว่า value มีคำว่า LIKE หรือ ILIKE ไหม
+//       const match = String(value).match(/^(ILIKE|LIKE)\s+(.+)$/i)
+//       if (match) {
+//         const operator = match[1].toUpperCase()
+//         const pattern = match[2].trim()
+//         whereClauses.push(`${key} ${operator} $${idx}`)
+//         params.push(pattern)
+//       } else {
+//         whereClauses.push(`${key} = $${idx}`)
+//         params.push(value)
+//       }
+
+//       idx++
+//     }
+
+//     let finalQuery = baseQuery
+//     if (whereClauses.length > 0) {
+//       finalQuery += ' AND ' + whereClauses.join(' AND ')
+//     }
+
+//     const formattedSQL = finalQuery.replace(/\${database}/g, database)
+//     console.log(`[DB:${database}] → ${formattedSQL}`)
+
+//     const result = await connection.query(formattedSQL, params)
+//     return result.rows
+//   } catch (err) {
+//     console.error('[executeQueryConditions Error]', err.message)
+//     throw err
+//   }
+// }
+
+
+// /**
+//  * 🧩 devhint — Debug tracer ที่เปิดปิดได้จาก .env
+//  * @param {string} fileName - ชื่อไฟล์หรือโมดูล (เช่น 'usercontroller.js')
+//  * @param {string} message - ข้อความหรือจุดใน flow (เช่น 'onNavigate')
+//  * @param {object|string} [extra] - ข้อมูลเพิ่มเติม (optional)
+//  */
+// export function devhint(fileName, message, extra = null) {
+//   if (process.env.DEVHINT === 'true') {
+//     const timestamp = new Date().toISOString()
+//     const prefix = `🧩 [DEVHINT:${fileName}]`
+//     const formatted = `${prefix} → ${message} (${timestamp})`
+//     if (extra) console.log(formatted, '\n', extra)
+//     else console.log(formatted)
+//   }
+// }

exthernal-login-api/src/utils/errorList.js

@@ -0,0 +1,40 @@
+// utils/errorList.js
+
+export function manualError(key) {
+  switch (key) {
+    case "invalid_input":
+      return {
+        code: 400,
+        messageTh: "ข้อมูลที่ส่งมาไม่ถูกต้อง",
+        messageEn: "Invalid input data"
+      };
+
+    case "not_found":
+      return {
+        code: 404,
+        messageTh: "ไม่พบข้อมูลที่ร้องขอ",
+        messageEn: "Resource not found"
+      };
+
+    case "unauthorized":
+      return {
+        code: 401,
+        messageTh: "คุณไม่มีสิทธิ์เข้าถึงข้อมูลนี้",
+        messageEn: "Unauthorized access"
+      };
+
+    case "server_error":
+      return {
+        code: 500,
+        messageTh: "เกิดข้อผิดพลาดภายในระบบ",
+        messageEn: "Internal server error"
+      };
+
+    default:
+      return {
+        code: 500,
+        messageTh: "ข้อผิดพลาดที่ไม่ทราบสาเหตุ",
+        messageEn: "Unknown error occurred"
+      };
+  }
+}

exthernal-login-api/src/utils/mailer.js

@@ -0,0 +1,62 @@
+import nodemailer from 'nodemailer'
+import dotenv from 'dotenv'
+dotenv.config()
+
+export async function sendMockOtpMail(to, otp) {
+  const transporter = nodemailer.createTransport({
+    service: 'gmail',
+    auth: {
+      user: process.env.SMTP_USER,
+      pass: process.env.SMTP_PASS
+    }
+  })
+
+const html = `
+<div style="
+    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, sans-serif;
+    background: linear-gradient(135deg, #f6f9fc 0%, #ecf3f9 100%);
+    padding: 48px 24px;
+    text-align: center;
+    color: #1a1f36;
+">
+    <div style="
+        max-width: 480px;
+        max-height: auto;
+        margin: 0 auto;
+        background-color: white;
+        border-radius: 16px;
+        padding: 40px;
+        box-shadow: 0 4px 24px rgba(0,0,0,0.08);
+    ">
+        <img src="https://cdn.discordapp.com/attachments/1416337856988971152/1431895137595822152/TTCLOGO-Photoroom.png?ex=68ff13c4&is=68fdc244&hm=5af0596e08b3b8a97dcdcca3d6a00d68a1081e6d642c033a4a1cbf8d03e660a6&" alt="Logo" style="height: 80px; margin-bottom: 24px;">
+        <h2 style="
+            color: #1a1f36;
+            font-size: 24px;
+            font-weight: 600;
+            margin-bottom: 16px;
+        ">รหัส OTP สำหรับเปลี่ยนรหัสผ่าน</h2>
+        <p style="color: #4f566b; font-size: 16px; line-height: 1.5;">กรุณาใส่รหัสยืนยันด้านล่างนี้</p>
+        <div style="
+            font-size: 32px;
+            letter-spacing: 8px;
+            background: linear-gradient(135deg, #fa0000ff 0%, #ff5100ff 100%);
+            color: white;
+            padding: 16px 32px;
+            margin: 24px 0;
+            border-radius: 12px;
+            font-weight: 600;
+        ">${otp}</div>
+        <p style="color: #4f566b; font-size: 14px; margin: 24px 0;">รหัสนี้จะหมดอายุใน 5 นาที</p>
+        <hr style="border: none; border-top: 1px solid #e6e8eb; margin: 24px 0;">
+        <p style="color: #697386; font-size: 13px;">หากคุณไม่ได้ร้องขอการเปลี่ยนรหัสผ่าน กรุณาละเว้นอีเมลนี้</p>
+    </div>
+</div>
+`
+
+  await transporter.sendMail({
+    from: `"Support" <${process.env.SMTP_USER}>`,
+    to,
+    subject: 'OTP สำหรับเปลี่ยนรหัสผ่าน',
+    html
+  })
+}

exthernal-login-api/src/utils/oftenError.js

@@ -0,0 +1,41 @@
+// utils/oftenError.js
+import { manualError } from "./errorList.js";
+
+export class OftenError extends Error {
+  /**
+   * ใช้ได้ 2 แบบ:
+   * 1. throw new OftenError("not_found")
+   * 2. throw new OftenError(400, "ไทย", "English")
+   */
+  constructor(arg1, arg2, arg3) {
+    // แบบ lookup จาก key
+    if (typeof arg1 === "string" && !arg2 && !arg3) {
+      const found = manualError(arg1);
+      super(found.messageEn);
+      this.statusCode = found.code;
+      this.messageTh = found.messageTh;
+      this.messageEn = found.messageEn;
+      this.key = arg1;
+    }
+
+    // แบบ manual
+    else if (typeof arg1 === "number" && arg2 && arg3) {
+      super(arg3);
+      this.statusCode = arg1;
+      this.messageTh = arg2;
+      this.messageEn = arg3;
+      this.key = "manual";
+    }
+
+    // fallback
+    else {
+      super("Invalid error format");
+      this.statusCode = 500;
+      this.messageTh = "รูปแบบการสร้าง error ไม่ถูกต้อง";
+      this.messageEn = "Invalid error constructor format";
+      this.key = "invalid_format";
+    }
+
+    this.name = "OftenError";
+  }
+}

exthernal-login-api/src/utils/otp.js

@@ -0,0 +1,3 @@
+export function generateOTP(length = 6) {
+  return Math.floor(100000 + Math.random() * 900000).toString()
+}

exthernal-login-api/src/utils/redis.js

@@ -0,0 +1,28 @@
+import Redis from 'ioredis'
+import dotenv from 'dotenv'
+dotenv.config()
+
+const redis = new Redis({
+  host: process.env.REDIS_HOST,
+  port: process.env.REDIS_PORT
+})
+
+export async function saveOtp(email, otp) {
+  const key = `otp:${email}`
+  const ttl = parseInt(process.env.OTP_TTL_SECONDS || '300')
+  await redis.setex(key, ttl, otp)
+}
+
+export async function verifyOtp(email, otp) {
+  const key = `otp:${email}`
+  const stored = await redis.get(key)
+  if (!stored) return false
+  return stored === otp
+}
+
+export async function removeOtp(email) {
+  const key = `otp:${email}`
+  await redis.del(key)
+}
+
+export default redis

exthernal-login-api/src/utils/response.js

@@ -0,0 +1,24 @@
+// ===================================================
+// ⚙️ Nuttakit Response Layer vFinal++++++
+// ===================================================
+
+export function sendError(thMsg = 'เกิดข้อผิดพลาดไม่คาดคิดเกิดขึ้น', enMsg = 'Unexpected error', code = 400) {
+  return {
+    code: String(code),
+    message: enMsg,
+    message_th: thMsg,
+    data: []
+  }
+}
+
+// ===================================================
+// 🔹 Auto Success Response (ใช้โดย Global Handler เท่านั้น)
+// ===================================================
+export function formatSuccessResponse(data) {
+  return {
+    code: "200",
+    message: "successful",
+    message_th: "ดำเนินการสำเร็จ",
+    data: data || null
+  }
+}

exthernal-login-api/src/utils/token.js

@@ -0,0 +1,15 @@
+import jwt from 'jsonwebtoken'
+import dotenv from 'dotenv'
+dotenv.config()
+
+export function generateToken(payload) {
+  return jwt.sign(payload, process.env.JWT_SECRET, { expiresIn: '24h' })
+}
+
+export function verifyToken(token) {
+  try {
+    return jwt.verify(token, process.env.JWT_SECRET)
+  } catch {
+    return null
+  }
+}

exthernal-login-api/src/utils/trim.js

@@ -0,0 +1,11 @@
+export function trim_all_array(data) {
+  if (!Array.isArray(data)) return data
+  for (let row of data) {
+    for (let key in row) {
+      if (typeof row[key] === 'string') {
+        row[key] = row[key].trim()
+      }
+    }
+  }
+  return data
+}