feat: Implement Keycloak authentication and a basic CMS

Integrates Keycloak for secure administrator authentication using Arctic.
Introduces a full CMS dashboard for managing CV content, supporting multi-language editing for profile, experience, and education sections.

Refactors application routes for modularity and adds initial unit tests for database queries.

Also includes minor UI/UX refinements, animation setup, and local Keycloak docker-compose configuration.

Fixes:
- Corrected KeyCloak import.
- Restored missing getEducation function.
- Ensured proper HTTP redirects.
- Fixed PKCE code verifier length.
This commit is contained in:
Tuan-Dat Tran
2025-11-21 20:28:56 +01:00
parent 88aeaa9002
commit 1346d36f5d
14 changed files with 704 additions and 78 deletions

5
.env Normal file
View File

@@ -0,0 +1,5 @@
# Keycloak Configuration
KEYCLOAK_REALM_URL="http://localhost:8080/realms/myrealm"
KEYCLOAK_CLIENT_ID="cv-app"
KEYCLOAK_CLIENT_SECRET="urBMT3daJQQvPc05RvePnOlaK6MdQdSJ"
KEYCLOAK_REDIRECT_URI="http://localhost:3000/admin/callback"

View File

@@ -5,8 +5,10 @@
"": {
"name": "app",
"dependencies": {
"@elysiajs/cookie": "^0.8.0",
"@elysiajs/html": "^1.4.0",
"@kitajs/ts-html-plugin": "^4.1.3",
"arctic": "^3.7.0",
"autoprefixer": "^10.4.22",
"elysia": "^1.4.16",
"postcss": "^8.5.6",
@@ -21,18 +23,34 @@
"packages": {
"@borewit/text-codec": ["@borewit/text-codec@0.1.1", "", {}, "sha512-5L/uBxmjaCIX5h8Z+uu+kA9BQLkc/Wl06UGR5ajNRxu+/XjonB5i8JpgFMrPj3LXTCPA0pv8yxUvbUi+QthGGA=="],
"@elysiajs/cookie": ["@elysiajs/cookie@0.8.0", "", { "dependencies": { "@types/cookie": "^0.5.1", "@types/cookie-signature": "^1.1.0", "cookie": "^0.5.0", "cookie-signature": "^1.2.1" }, "peerDependencies": { "elysia": ">= 0.8.0" } }, "sha512-CUtDwdYEoN0BcQ3SgZrB4x5nrbM4ih0sMhMuKKdMlEvqLtmRQDfq9KBCrMJW6L/Q0tPH0JLRqwjEbVb6rJufCw=="],
"@elysiajs/html": ["@elysiajs/html@1.4.0", "", { "dependencies": { "@kitajs/html": "^4.1.0", "@kitajs/ts-html-plugin": "^4.0.1" }, "peerDependencies": { "elysia": ">= 1.4.0" } }, "sha512-j4jFqGEkIC8Rg2XiTOujb9s0WLnz1dnY/4uqczyCdOVruDeJtGP+6+GvF0A76SxEvltn8UR1yCUnRdLqRi3vuw=="],
"@kitajs/html": ["@kitajs/html@4.2.11", "", { "dependencies": { "csstype": "^3.1.3" } }, "sha512-gOe+zzCZKN2fPT1FUK32mHsr21ILcAOUUux/yDqQthInW8egN8RuxVp+zP3KhwWETVACkurBiKV9RWuNw+ceiw=="],
"@kitajs/ts-html-plugin": ["@kitajs/ts-html-plugin@4.1.3", "", { "dependencies": { "chalk": "^5.6.2", "tslib": "^2.8.1", "yargs": "^18.0.0" }, "peerDependencies": { "@kitajs/html": "^4.2.10", "typescript": "^5.6.2" }, "bin": { "ts-html-plugin": "dist/cli.js", "xss-scan": "dist/cli.js" } }, "sha512-NlYrID5yMxfRKiO1eiiSC4MWveKe0ffoCJOZm4idNOqwimmLXr0g1NmvCcquOU2XLRrgzynxZqw6rhwR5CY5Nw=="],
"@oslojs/asn1": ["@oslojs/asn1@1.0.0", "", { "dependencies": { "@oslojs/binary": "1.0.0" } }, "sha512-zw/wn0sj0j0QKbIXfIlnEcTviaCzYOY3V5rAyjR6YtOByFtJiT574+8p9Wlach0lZH9fddD4yb9laEAIl4vXQA=="],
"@oslojs/binary": ["@oslojs/binary@1.0.0", "", {}, "sha512-9RCU6OwXU6p67H4NODbuxv2S3eenuQ4/WFLrsq+K/k682xrznH5EVWA7N4VFk9VYVcbFtKqur5YQQZc0ySGhsQ=="],
"@oslojs/crypto": ["@oslojs/crypto@1.0.1", "", { "dependencies": { "@oslojs/asn1": "1.0.0", "@oslojs/binary": "1.0.0" } }, "sha512-7n08G8nWjAr/Yu3vu9zzrd0L9XnrJfpMioQcvCMxBIiF5orECHe5/3J0jmXRVvgfqMm/+4oxlQ+Sq39COYLcNQ=="],
"@oslojs/encoding": ["@oslojs/encoding@1.1.0", "", {}, "sha512-70wQhgYmndg4GCPxPPxPGevRKqTIJ2Nh4OkiMWmDAVYsTQ+Ta7Sq+rPevXyXGdzr30/qZBnyOalCszoMxlyldQ=="],
"@oslojs/jwt": ["@oslojs/jwt@0.2.0", "", { "dependencies": { "@oslojs/encoding": "0.4.1" } }, "sha512-bLE7BtHrURedCn4Mco3ma9L4Y1GR2SMBuIvjWr7rmQ4/W/4Jy70TIAgZ+0nIlk0xHz1vNP8x8DCns45Sb2XRbg=="],
"@sinclair/typebox": ["@sinclair/typebox@0.34.41", "", {}, "sha512-6gS8pZzSXdyRHTIqoqSVknxolr1kzfy4/CeDnrzsVz8TTIWUbOBr6gnzOmTYJ3eXQNh4IYHIGi5aIL7sOZ2G/g=="],
"@tokenizer/inflate": ["@tokenizer/inflate@0.4.1", "", { "dependencies": { "debug": "^4.4.3", "token-types": "^6.1.1" } }, "sha512-2mAv+8pkG6GIZiF1kNg1jAjh27IDxEPKwdGul3snfztFerfPGI1LjDezZp3i7BElXompqEtPmoPx6c2wgtWsOA=="],
"@tokenizer/token": ["@tokenizer/token@0.3.0", "", {}, "sha512-OvjF+z51L3ov0OyAU0duzsYuvO01PH7x4t6DJx+guahgTnBHkhJdG7soQeTSFLWN3efnHyibZ4Z8l2EuWwJN3A=="],
"@types/cookie": ["@types/cookie@0.5.4", "", {}, "sha512-7z/eR6O859gyWIAjuvBWFzNURmf2oPBmJlfVWkwehU5nzIyjwBsTh7WMmEEV4JFnHuQ3ex4oyTvfKzcyJVDBNA=="],
"@types/cookie-signature": ["@types/cookie-signature@1.1.2", "", { "dependencies": { "@types/node": "*" } }, "sha512-2OhrZV2LVnUAXklUFwuYUTokalh/dUb8rqt70OW6ByMSxYpauPZ+kfNLknX3aJyjY5iu8i3cUyoLZP9Fn37tTg=="],
"@types/node": ["@types/node@24.10.1", "", { "dependencies": { "undici-types": "~7.16.0" } }, "sha512-GNWcUTRBgIRJD5zj+Tq0fKOJ5XZajIiBroOF0yvj2bSU1WvNdYS/dn9UxwsujGW4JX06dnHyjV2y9rRaybH0iQ=="],
"@types/react": ["@types/react@19.2.6", "", { "dependencies": { "csstype": "^3.2.2" } }, "sha512-p/jUvulfgU7oKtj6Xpk8cA2Y1xKTtICGpJYeJXz2YVO2UcvjQgeRMLDGfDeqeRW2Ta+0QNFwcc8X3GH8SxZz6w=="],
@@ -41,6 +59,8 @@
"ansi-styles": ["ansi-styles@6.2.3", "", {}, "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg=="],
"arctic": ["arctic@3.7.0", "", { "dependencies": { "@oslojs/crypto": "1.0.1", "@oslojs/encoding": "1.1.0", "@oslojs/jwt": "0.2.0" } }, "sha512-ZMQ+f6VazDgUJOd+qNV+H7GohNSYal1mVjm5kEaZfE2Ifb7Ss70w+Q7xpJC87qZDkMZIXYf0pTIYZA0OPasSbw=="],
"autoprefixer": ["autoprefixer@10.4.22", "", { "dependencies": { "browserslist": "^4.27.0", "caniuse-lite": "^1.0.30001754", "fraction.js": "^5.3.4", "normalize-range": "^0.1.2", "picocolors": "^1.1.1", "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.1.0" }, "bin": { "autoprefixer": "bin/autoprefixer" } }, "sha512-ARe0v/t9gO28Bznv6GgqARmVqcWOV3mfgUPn9becPHMiD3o9BwlRgaeccZnwTpZ7Zwqrm+c1sUSsMxIzQzc8Xg=="],
"baseline-browser-mapping": ["baseline-browser-mapping@2.8.30", "", { "bin": { "baseline-browser-mapping": "dist/cli.js" } }, "sha512-aTUKW4ptQhS64+v2d6IkPzymEzzhw+G0bA1g3uBRV3+ntkH+svttKseW5IOR4Ed6NUVKqnY7qT3dKvzQ7io4AA=="],
@@ -55,7 +75,9 @@
"cliui": ["cliui@9.0.1", "", { "dependencies": { "string-width": "^7.2.0", "strip-ansi": "^7.1.0", "wrap-ansi": "^9.0.0" } }, "sha512-k7ndgKhwoQveBL+/1tqGJYNz097I7WOvwbmmU2AR5+magtbjPWQTS1C5vzGkBC8Ym8UWRzfKUzUUqFLypY4Q+w=="],
"cookie": ["cookie@1.0.2", "", {}, "sha512-9Kr/j4O16ISv8zBBhJoi4bXOYNTkFLOqSL3UDB0njXxCXNezjeyVrJyGOWtgfs/q2km1gwBcfH8q1yEGoMYunA=="],
"cookie": ["cookie@0.5.0", "", {}, "sha512-YZ3GUyn/o8gfKJlnlX7g7xq4gyO6OSuhGPKaaGssGB2qgDUS0gPgtTvoyZLTt9Ab6dC4hfc9dV5arkvc/OCmrw=="],
"cookie-signature": ["cookie-signature@1.2.2", "", {}, "sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg=="],
"csstype": ["csstype@3.2.3", "", {}, "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ=="],
@@ -132,5 +154,9 @@
"yargs": ["yargs@18.0.0", "", { "dependencies": { "cliui": "^9.0.1", "escalade": "^3.1.1", "get-caller-file": "^2.0.5", "string-width": "^7.2.0", "y18n": "^5.0.5", "yargs-parser": "^22.0.0" } }, "sha512-4UEqdc2RYGHZc7Doyqkrqiln3p9X2DZVxaGbwhn2pi7MrRagKaOcIKe8L3OxYcbhXLgLFUS3zAYuQjKBQgmuNg=="],
"yargs-parser": ["yargs-parser@22.0.0", "", {}, "sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw=="],
"@oslojs/jwt/@oslojs/encoding": ["@oslojs/encoding@0.4.1", "", {}, "sha512-hkjo6MuIK/kQR5CrGNdAPZhS01ZCXuWDRJ187zh6qqF2+yMHZpD9fAYpX8q2bOO6Ryhl3XpCT6kUX76N8hhm4Q=="],
"elysia/cookie": ["cookie@1.0.2", "", {}, "sha512-9Kr/j4O16ISv8zBBhJoi4bXOYNTkFLOqSL3UDB0njXxCXNezjeyVrJyGOWtgfs/q2km1gwBcfH8q1yEGoMYunA=="],
}
}

2
check_arctic.js Normal file
View File

@@ -0,0 +1,2 @@
const arctic = require('arctic');
console.log(Object.keys(arctic));

37
docker-compose.yml Normal file
View File

@@ -0,0 +1,37 @@
version: '3.8'
services:
postgres:
image: postgres:15
volumes:
- postgres_data:/var/lib/postgresql/data
environment:
POSTGRES_DB: keycloak
POSTGRES_USER: keycloak
POSTGRES_PASSWORD: password
networks:
- keycloak_network
keycloak:
image: quay.io/keycloak/keycloak:23.0
command: start-dev
environment:
KC_DB: postgres
KC_DB_URL: jdbc:postgresql://postgres:5432/keycloak
KC_DB_USERNAME: keycloak
KC_DB_PASSWORD: password
KEYCLOAK_ADMIN: admin
KEYCLOAK_ADMIN_PASSWORD: admin
ports:
- "8080:8080"
depends_on:
- postgres
networks:
- keycloak_network
volumes:
postgres_data:
networks:
keycloak_network:
driver: bridge

View File

@@ -6,8 +6,10 @@
"dev": "bun run --watch src/index.ts"
},
"dependencies": {
"@elysiajs/cookie": "^0.8.0",
"@elysiajs/html": "^1.4.0",
"@kitajs/ts-html-plugin": "^4.1.3",
"arctic": "^3.7.0",
"autoprefixer": "^10.4.22",
"elysia": "^1.4.16",
"postcss": "^8.5.6",

View File

@@ -54,8 +54,7 @@ export const ExperienceSection = ({ experience }: any) => (
<div class="relative border-l-2 border-gray-200 dark:border-gray-700 ml-3 pl-8 space-y-12">
{experience.map((exp: any) => (
<div class="relative group">
{/* Hover highlight on line - optional subtle effect */}
<div class="absolute -left-[33px] top-2 w-3 h-3 bg-gray-200 dark:bg-gray-700 rounded-full border-2 border-white dark:border-gray-900 group-hover:bg-blue-500 group-hover:scale-125 transition-all duration-300"></div>
<div class="grid md:grid-cols-[1fr_3fr] gap-4">
<div class="text-sm text-gray-500 dark:text-gray-400 pt-1 font-mono">

94
src/db/mutations.ts Normal file
View File

@@ -0,0 +1,94 @@
import { db } from "./schema";
// --- Profile ---
export function updateProfile(id: number, data: any) {
// Update structural data
db.run(`
UPDATE profile
SET email = $email, phone = $phone, website = $website, github_url = $github, linkedin_url = $linkedin, avatar_url = $avatar
WHERE id = $id
`, {
$email: data.email, $phone: data.phone, $website: data.website,
$github: data.github_url, $linkedin: data.linkedin_url, $avatar: data.avatar_url, $id: id
});
// Update Translations (Upsert logic would be better, but for now we assume rows exist from seed)
// We'll just loop through languages.
for (const lang of ["en", "de"]) {
db.run(`
UPDATE profile_translations
SET name = $name, job_title = $title, summary = $summary, location = $loc
WHERE profile_id = $id AND language_code = $lang
`, {
$name: data[`name_${lang}`], $title: data[`job_title_${lang}`],
$summary: data[`summary_${lang}`], $loc: data[`location_${lang}`],
$id: id, $lang: lang
});
}
}
// --- Experience ---
export function deleteExperience(id: number) {
db.run("DELETE FROM experience WHERE id = $id", { $id: id });
}
export function createExperience() {
const res = db.run(`
INSERT INTO experience (start_date, display_order) VALUES ('2024-01', 0)
`);
// Initialize translations
const id = (res as any).lastInsertRowid;
db.run(`INSERT INTO experience_translations (experience_id, language_code, company_name, role) VALUES (?, 'en', 'New Company', 'New Role')`, [id]);
db.run(`INSERT INTO experience_translations (experience_id, language_code, company_name, role) VALUES (?, 'de', 'Neue Firma', 'Neuer Job')`, [id]);
return id;
}
export function updateExperience(id: number, data: any) {
db.run(`
UPDATE experience SET start_date = $start, end_date = $end, company_url = $url, display_order = $order
WHERE id = $id
`, { $start: data.start_date, $end: data.end_date || null, $url: data.company_url, $order: data.display_order || 0, $id: id });
for (const lang of ["en", "de"]) {
db.run(`
UPDATE experience_translations
SET company_name = $comp, role = $role, description = $desc, location = $loc
WHERE experience_id = $id AND language_code = $lang
`, {
$comp: data[`company_name_${lang}`], $role: data[`role_${lang}`],
$desc: data[`description_${lang}`], $loc: data[`location_${lang}`],
$id: id, $lang: lang
});
}
}
// --- Education ---
export function deleteEducation(id: number) {
db.run("DELETE FROM education WHERE id = $id", { $id: id });
}
export function createEducation() {
const res = db.run(`INSERT INTO education (start_date, display_order) VALUES ('2024-01', 0)`);
const id = (res as any).lastInsertRowid;
db.run(`INSERT INTO education_translations (education_id, language_code, institution, degree) VALUES (?, 'en', 'New Institution', 'Degree')`, [id]);
db.run(`INSERT INTO education_translations (education_id, language_code, institution, degree) VALUES (?, 'de', 'Neue Institution', 'Abschluss')`, [id]);
return id;
}
export function updateEducation(id: number, data: any) {
db.run(`
UPDATE education SET start_date = $start, end_date = $end, institution_url = $url, display_order = $order
WHERE id = $id
`, { $start: data.start_date, $end: data.end_date || null, $url: data.institution_url, $order: data.display_order || 0, $id: id });
for (const lang of ["en", "de"]) {
db.run(`
UPDATE education_translations
SET institution = $inst, degree = $deg, description = $desc
WHERE education_id = $id AND language_code = $lang
`, {
$inst: data[`institution_${lang}`], $deg: data[`degree_${lang}`], $desc: data[`description_${lang}`],
$id: id, $lang: lang
});
}
}

View File

@@ -29,6 +29,19 @@ interface Experience extends ExperienceTranslation {
company_url: string | null;
}
interface EducationTranslation {
institution: string;
degree: string;
description: string | null;
}
interface Education extends EducationTranslation {
start_date: string;
end_date: string | null;
institution_url: string | null;
display_order: number;
}
interface SkillTranslation {
name: string;
category_display: string | null;
@@ -63,6 +76,18 @@ export function getExperience(lang: string): Experience[] {
return experience;
}
export function getEducation(lang: string): Education[] {
const education = db.query(`
SELECT e.start_date, e.end_date, e.institution_url, e.display_order,
et.institution, et.degree, et.description
FROM education e
JOIN education_translations et ON e.id = et.education_id
WHERE et.language_code = $lang
ORDER BY e.display_order ASC, e.start_date DESC
`).all({ $lang: lang }) as Education[];
return education;
}
export function getSkills(lang: string): Skill[] {
const skills = db.query(`
SELECT s.category, s.icon, s.display_order,
@@ -75,44 +100,55 @@ export function getSkills(lang: string): Skill[] {
return skills;
}
export function getEducation(lang: string): Education[] {
const education = db.query(`
SELECT e.start_date, e.end_date, e.institution_url, e.display_order,
et.institution, et.degree, et.description
FROM education e
JOIN education_translations et ON e.id = et.education_id
WHERE et.language_code = $lang
ORDER BY e.display_order ASC, e.start_date DESC
`).all({ $lang: lang }) as Education[];
return education;
}
export function getAllData(lang: string) {
return {
profile: getProfile(lang),
experience: getExperience(lang),
education: getEducation(lang),
skills: getSkills(lang),
};
}
// --- Admin Queries ---
export function getAdminProfile() {
const profile = db.query(`SELECT * FROM profile WHERE id = 1`).get() as any;
const translations = db.query(`SELECT * FROM profile_translations WHERE profile_id = 1`).all() as any[];
translations.forEach(t => {
profile[`name_${t.language_code}`] = t.name;
profile[`job_title_${t.language_code}`] = t.job_title;
profile[`summary_${t.language_code}`] = t.summary;
profile[`location_${t.language_code}`] = t.location;
});
return profile;
}
export function getAdminExperience() {
const exps = db.query(`SELECT * FROM experience ORDER BY display_order ASC, start_date DESC`).all() as any[];
return exps.map(e => {
const trans = db.query(`SELECT * FROM experience_translations WHERE experience_id = $id`, { $id: e.id }).all() as any[];
trans.forEach(t => {
e[`company_name_${t.language_code}`] = t.company_name;
e[`role_${t.language_code}`] = t.role;
e[`description_${t.language_code}`] = t.description;
e[`location_${t.language_code}`] = t.location;
});
return e;
});
}
export function getAdminEducation() {
const edus = db.query(`SELECT * FROM education ORDER BY display_order ASC, start_date DESC`).all() as any[];
return edus.map(e => {
const trans = db.query(`SELECT * FROM education_translations WHERE education_id = $id`, { $id: e.id }).all() as any[];
trans.forEach(t => {
e[`institution_${t.language_code}`] = t.institution;
e[`degree_${t.language_code}`] = t.degree;
e[`description_${t.language_code}`] = t.description;
});
return e;
});
}

View File

@@ -64,7 +64,30 @@ export function seedDB() {
$desc: "Leitung des Frontend-Teams und Migration der Legacy-Codebasis zu ElysiaJS."
});
// 4. Skills
// 4. Education
const insertEdu = db.prepare(`
INSERT INTO education (start_date, end_date, institution_url, display_order)
VALUES ($start, $end, $url, $order)
RETURNING id
`);
const edu1 = insertEdu.get({ $start: "2010-09", $end: "2014-07", $url: "https://example-university.edu", $order: 1 }) as { id: number };
const insertEduTrans = db.prepare(`
INSERT INTO education_translations (education_id, language_code, institution, degree, description)
VALUES ($eid, $code, $inst, $deg, $desc)
`);
insertEduTrans.run({
$eid: edu1.id, $code: "en", $inst: "Example University", $deg: "M.Sc. Computer Science",
$desc: "Focused on distributed systems and artificial intelligence."
});
insertEduTrans.run({
$eid: edu1.id, $code: "de", $inst: "Beispiel Universität", $deg: "M.Sc. Informatik",
$desc: "Schwerpunkt auf verteilten Systemen und künstlicher Intelligenz."
});
// 5. Skills
const insertSkill = db.prepare(`
INSERT INTO skills (category, icon, display_order) VALUES ($cat, $icon, $order) RETURNING id
`);

View File

@@ -1,49 +1,12 @@
import { Elysia, NotFoundError } from "elysia";
import { Elysia } from "elysia";
import { html } from "@elysiajs/html";
import * as elements from "typed-html";
import { BaseHtml } from "./components/BaseHtml";
import { Layout } from "./components/Layout";
import { HeroSection, AboutSection, ExperienceSection, EducationSection, SkillsSection } from "./components/Sections";
import { getAllData } from "./db/queries";
import { adminRoutes } from "./routes/admin";
import { publicRoutes } from "./routes/public";
const app = new Elysia()
.use(html())
.get("/", () => {
return Response.redirect("/en"); // Default to English
})
.get("/:lang", ({ params, html, set }) => {
const lang = params.lang as "en" | "de";
if (!["en", "de"].includes(lang)) {
throw new NotFoundError();
}
const data = getAllData(lang);
if (!data.profile) {
throw new NotFoundError("Profile data not found for selected language.");
}
return html(
<BaseHtml>
<Layout lang={lang}>
<HeroSection profile={data.profile} />
{/* Separate About Section using the summary */}
{data.profile.summary && <AboutSection summary={data.profile.summary} />}
<div class="grid gap-12">
<ExperienceSection experience={data.experience} />
{/* Only render Education section if data exists */}
{data.education && data.education.length > 0 && (
<EducationSection education={data.education} />
)}
<SkillsSection skills={data.skills} />
</div>
</Layout>
</BaseHtml>
);
})
.use(adminRoutes)
.use(publicRoutes)
.listen(3000);
console.log(

326
src/routes/admin.tsx Normal file
View File

@@ -0,0 +1,326 @@
import { Elysia, t } from "elysia";
import { html } from "@elysiajs/html";
import { cookie } from "@elysiajs/cookie";
import { KeyCloak, generateState, generateCodeVerifier } from "arctic";
import * as elements from "typed-html";
import { BaseHtml } from "../components/BaseHtml";
import { getAdminProfile, getAdminExperience, getAdminEducation } from "../db/queries";
import { updateProfile, createExperience, updateExperience, deleteExperience, createEducation, updateEducation, deleteEducation } from "../db/mutations";
// Initialize Keycloak (Arctic)
// Ensure these env vars are set!
const realmURL = process.env.KEYCLOAK_REALM_URL || "";
const clientId = process.env.KEYCLOAK_CLIENT_ID || "";
const clientSecret = process.env.KEYCLOAK_CLIENT_SECRET || "";
const redirectURI = process.env.KEYCLOAK_REDIRECT_URI || "http://localhost:3000/admin/callback";
console.log("--- Keycloak Config Debug ---");
console.log("Realm URL:", realmURL);
console.log("Client ID:", clientId);
console.log("Redirect URI:", redirectURI);
console.log("Client Secret Length:", clientSecret.length); // Check if secret is loaded
console.log("-----------------------------");
const keycloak = new KeyCloak(realmURL, clientId, clientSecret, redirectURI);
const AdminLayout = ({ children }: elements.Children) => (
<div class="min-h-screen bg-gray-100 dark:bg-gray-900 text-gray-900 dark:text-white">
<nav class="bg-white dark:bg-gray-800 shadow p-4 mb-8">
<div class="container mx-auto flex justify-between items-center">
<div class="font-bold text-xl">CV Admin</div>
<div class="flex gap-4">
<a href="/admin/dashboard" class="hover:text-blue-500">Dashboard</a>
<a href="/" target="_blank" class="hover:text-blue-500">View Site</a>
<a href="/admin/logout" class="text-red-500">Logout</a>
</div>
</div>
</nav>
<div class="container mx-auto p-4">
{children}
</div>
</div>
);
const InputGroup = ({ label, name, value, type = "text", required = false }: any) => (
<div class="mb-4">
<label class="block text-sm font-bold mb-1 text-gray-700 dark:text-gray-300">{label}</label>
<input type={type} name={name} value={value || ""} required={required}
class="w-full p-2 border rounded dark:bg-gray-800 dark:border-gray-600" />
</div>
);
const TextAreaGroup = ({ label, name, value }: any) => (
<div class="mb-4">
<label class="block text-sm font-bold mb-1 text-gray-700 dark:text-gray-300">{label}</label>
<textarea name={name} rows="4" class="w-full p-2 border rounded dark:bg-gray-800 dark:border-gray-600">{value || ""}</textarea>
</div>
);
export const adminRoutes = new Elysia()
.use(cookie())
.use(html())
// Auth Middleware
.derive(({ cookie: { auth_session } }) => {
return {
isLoggedIn: !!auth_session?.value
};
})
// 1. Login Page (Redirect to Keycloak)
.get("/admin/login", ({ isLoggedIn, set, html, cookie: { oauth_state, oauth_code_verifier } }) => {
if (isLoggedIn) return Response.redirect("/admin/dashboard");
// Generate State & Verifier for PKCE flow
const state = generateState();
const codeVerifier = generateCodeVerifier();
// In a real production app with Arctic, you'd use generateState() / generateCodeVerifier() helpers if available,
// or just random strings. Arctic 1.x/2.x/3.x changes API slightly.
// Arctic 3.x Keycloak.createAuthorizationURL requires state and scopes.
// Note: Arctic handles the heavy lifting usually.
// IMPORTANT: Arctic's createAuthorizationURL signature:
// (state: string, codeVerifier: string, scopes: string[])
// We need to temporarily store state/verifier in cookies to verify later
oauth_state.set({
value: state,
path: "/",
secure: process.env.NODE_ENV === "production",
httpOnly: true,
maxAge: 600 // 10 min
});
oauth_code_verifier.set({
value: codeVerifier,
path: "/",
secure: process.env.NODE_ENV === "production",
httpOnly: true,
maxAge: 600 // 10 min
});
try {
const url = keycloak.createAuthorizationURL(state, codeVerifier, ["openid", "profile", "email"]);
return html(
<BaseHtml>
<div class="flex h-screen items-center justify-center bg-gray-100 dark:bg-gray-900">
<div class="bg-white dark:bg-gray-800 p-8 rounded shadow-md w-96 text-center">
<h1 class="text-2xl font-bold mb-6 dark:text-white">Admin Access</h1>
<a href={url.toString()} class="block w-full bg-blue-600 text-white p-3 rounded font-bold hover:bg-blue-700 transition-colors">
Login with Keycloak
</a>
</div>
</div>
</BaseHtml>
);
} catch (e) {
return "Error generating Keycloak URL. Check .env configuration.";
}
})
// 2. Callback Handler
.get("/admin/callback", async ({ query, cookie: { oauth_state, oauth_code_verifier, auth_session }, set }) => {
const code = query.code as string;
const state = query.state as string;
const storedState = oauth_state.value;
const storedVerifier = oauth_code_verifier.value;
if (!code || !state || !storedState || !storedVerifier || state !== storedState) {
return new Response("Invalid State or Code", { status: 400 });
}
try {
// Exchange code for tokens
const tokens = await keycloak.validateAuthorizationCode(code, storedVerifier);
// Ideally, you decode the tokens.idToken to get user info and check roles.
// For now, if we got tokens, we assume the user authenticated successfully with Keycloak.
// In a real app, you MUST check `tokens.idToken` claims (e.g. `sub`, `email`).
// Set a simple session cookie
auth_session.set({
value: tokens.accessToken(), // Or just "true" if you don't need the token
httpOnly: true,
path: "/",
secure: process.env.NODE_ENV === "production",
maxAge: 86400 // 1 day
});
// Cleanup
oauth_state.remove();
oauth_code_verifier.remove();
return Response.redirect("/admin/dashboard");
} catch (e: any) {
console.error("Keycloak Error:", e);
return new Response(`Authentication failed: ${e.message}\n\nStack: ${e.stack}`, { status: 500 });
}
})
.get("/admin/logout", ({ cookie: { auth_session }, set }) => {
auth_session.remove();
// Optional: Redirect to Keycloak logout endpoint as well
return Response.redirect("/admin/login");
})
// Protected Routes Guard
.onBeforeHandle(({ isLoggedIn, set }) => {
if (!isLoggedIn) return Response.redirect("/admin/login");
})
// ... Dashboard and POST handlers remain the same ...
.get("/admin/dashboard", ({ html }) => {
const profile = getAdminProfile();
const experience = getAdminExperience();
const education = getAdminEducation();
return html(
<BaseHtml>
<AdminLayout>
<h1 class="text-3xl font-bold mb-6">Dashboard</h1>
{/* Profile Section */}
<div class="bg-white dark:bg-gray-800 p-6 rounded shadow mb-8">
<h2 class="text-2xl font-bold mb-4">Profile</h2>
<form action="/admin/profile" method="POST">
<div class="grid grid-cols-1 md:grid-cols-2 gap-4">
<InputGroup label="Email" name="email" value={profile.email} />
<InputGroup label="Phone" name="phone" value={profile.phone} />
<InputGroup label="Website" name="website" value={profile.website} />
<InputGroup label="Avatar URL" name="avatar_url" value={profile.avatar_url} />
<InputGroup label="Github" name="github_url" value={profile.github_url} />
<InputGroup label="LinkedIn" name="linkedin_url" value={profile.linkedin_url} />
</div>
<div class="mt-4 grid grid-cols-1 md:grid-cols-2 gap-6 border-t pt-4 dark:border-gray-700">
<div>
<h3 class="font-bold text-lg mb-2 text-blue-600">English</h3>
<InputGroup label="Name" name="name_en" value={profile.name_en} />
<InputGroup label="Job Title" name="job_title_en" value={profile.job_title_en} />
<TextAreaGroup label="Summary" name="summary_en" value={profile.summary_en} />
<InputGroup label="Location" name="location_en" value={profile.location_en} />
</div>
<div>
<h3 class="font-bold text-lg mb-2 text-blue-600">German</h3>
<InputGroup label="Name" name="name_de" value={profile.name_de} />
<InputGroup label="Job Title" name="job_title_de" value={profile.job_title_de} />
<TextAreaGroup label="Summary" name="summary_de" value={profile.summary_de} />
<InputGroup label="Location" name="location_de" value={profile.location_de} />
</div>
</div>
<button class="mt-4 bg-green-500 text-white px-4 py-2 rounded hover:bg-green-600">Save Profile</button>
</form>
</div>
{/* Experience Section */}
<div class="bg-white dark:bg-gray-800 p-6 rounded shadow mb-8">
<div class="flex justify-between items-center mb-4">
<h2 class="text-2xl font-bold">Experience</h2>
<form action="/admin/experience/new" method="POST">
<button class="bg-blue-500 text-white px-3 py-1 rounded text-sm hover:bg-blue-600">+ Add Job</button>
</form>
</div>
<div class="space-y-6">
{experience.map((exp: any) => (
<form action={`/admin/experience/${exp.id}`} method="POST" class="border dark:border-gray-700 p-4 rounded">
<div class="grid grid-cols-1 md:grid-cols-3 gap-4 mb-4">
<InputGroup label="Start Date" name="start_date" value={exp.start_date} />
<InputGroup label="End Date" name="end_date" value={exp.end_date} />
<InputGroup label="Order" name="display_order" value={exp.display_order} type="number" />
</div>
<div class="grid grid-cols-1 md:grid-cols-2 gap-6">
<div>
<div class="text-xs font-bold text-gray-500 mb-2">ENGLISH</div>
<InputGroup label="Company" name="company_name_en" value={exp.company_name_en} />
<InputGroup label="Role" name="role_en" value={exp.role_en} />
<TextAreaGroup label="Description" name="description_en" value={exp.description_en} />
</div>
<div>
<div class="text-xs font-bold text-gray-500 mb-2">GERMAN</div>
<InputGroup label="Company" name="company_name_de" value={exp.company_name_de} />
<InputGroup label="Role" name="role_de" value={exp.role_de} />
<TextAreaGroup label="Description" name="description_de" value={exp.description_de} />
</div>
</div>
<div class="flex justify-between mt-2">
<button formaction={`/admin/experience/${exp.id}/delete`} class="text-red-500 text-sm hover:underline">Delete</button>
<button class="bg-blue-500 text-white px-4 py-1 rounded hover:bg-blue-600">Save</button>
</div>
</form>
))}
</div>
</div>
{/* Education Section */}
<div class="bg-white dark:bg-gray-800 p-6 rounded shadow">
<div class="flex justify-between items-center mb-4">
<h2 class="text-2xl font-bold">Education</h2>
<form action="/admin/education/new" method="POST">
<button class="bg-blue-500 text-white px-3 py-1 rounded text-sm hover:bg-blue-600">+ Add Education</button>
</form>
</div>
<div class="space-y-6">
{education.map((edu: any) => (
<form action={`/admin/education/${edu.id}`} method="POST" class="border dark:border-gray-700 p-4 rounded">
<div class="grid grid-cols-1 md:grid-cols-3 gap-4 mb-4">
<InputGroup label="Start Date" name="start_date" value={edu.start_date} />
<InputGroup label="End Date" name="end_date" value={edu.end_date} />
<InputGroup label="Order" name="display_order" value={edu.display_order} type="number" />
</div>
<div class="grid grid-cols-1 md:grid-cols-2 gap-6">
<div>
<div class="text-xs font-bold text-gray-500 mb-2">ENGLISH</div>
<InputGroup label="Institution" name="institution_en" value={edu.institution_en} />
<InputGroup label="Degree" name="degree_en" value={edu.degree_en} />
<TextAreaGroup label="Description" name="description_en" value={edu.description_en} />
</div>
<div>
<div class="text-xs font-bold text-gray-500 mb-2">GERMAN</div>
<InputGroup label="Institution" name="institution_de" value={edu.institution_de} />
<InputGroup label="Degree" name="degree_de" value={edu.degree_de} />
<TextAreaGroup label="Description" name="description_de" value={edu.description_de} />
</div>
</div>
<div class="flex justify-between mt-2">
<button formaction={`/admin/education/${edu.id}/delete`} class="text-red-500 text-sm hover:underline">Delete</button>
<button class="bg-blue-500 text-white px-4 py-1 rounded hover:bg-blue-600">Save</button>
</div>
</form>
))}
</div>
</div>
</AdminLayout>
</BaseHtml>
);
})
// Handlers
.post("/admin/profile", ({ body, set }) => {
updateProfile(1, body);
return Response.redirect("/admin/dashboard");
})
.post("/admin/experience/new", ({ set }) => {
createExperience();
return Response.redirect("/admin/dashboard");
})
.post("/admin/experience/:id", ({ params, body, set }) => {
updateExperience(Number(params.id), body);
return Response.redirect("/admin/dashboard");
})
.post("/admin/experience/:id/delete", ({ params, set }) => {
deleteExperience(Number(params.id));
return Response.redirect("/admin/dashboard");
})
.post("/admin/education/new", ({ set }) => {
createEducation();
return Response.redirect("/admin/dashboard");
})
.post("/admin/education/:id", ({ params, body, set }) => {
updateEducation(Number(params.id), body);
return Response.redirect("/admin/dashboard");
})
.post("/admin/education/:id/delete", ({ params, set }) => {
deleteEducation(Number(params.id));
return Response.redirect("/admin/dashboard");
});

50
src/routes/public.tsx Normal file
View File

@@ -0,0 +1,50 @@
import { Elysia, NotFoundError } from "elysia";
import { html } from "@elysiajs/html";
import * as elements from "typed-html";
import { BaseHtml } from "../components/BaseHtml";
import { Layout } from "../components/Layout";
import { HeroSection, AboutSection, ExperienceSection, EducationSection, SkillsSection } from "../components/Sections";
import { getAllData } from "../db/queries";
export const publicRoutes = new Elysia()
.use(html())
.get("/", () => {
return Response.redirect("/en"); // Default to English
})
.get("/:lang", ({ params, html, set }) => {
const lang = params.lang as "en" | "de";
if (!["en", "de"].includes(lang)) {
// Check if it's actually a file request or something else before throwing 404 strictly
// but for this simple app, strict checking is fine.
// Actually, if I visit /favicon.ico, it might hit this.
// Let's just return NotFoundError and let Elysia handle it.
throw new NotFoundError();
}
const data = getAllData(lang);
if (!data.profile) {
throw new NotFoundError("Profile data not found for selected language.");
}
return html(
<BaseHtml>
<Layout lang={lang}>
<HeroSection profile={data.profile} />
{/* Separate About Section using the summary */}
{data.profile.summary && <AboutSection summary={data.profile.summary} />}
<div class="grid gap-12">
<ExperienceSection experience={data.experience} />
{/* Only render Education section if data exists */}
{(data.education && data.education.length > 0) ? (
<EducationSection education={data.education} />
) : ""}
<SkillsSection skills={data.skills} />
</div>
</Layout>
</BaseHtml>
);
});

View File

@@ -5,7 +5,17 @@ export default {
],
darkMode: 'class', // Enables dark mode based on 'dark' class in HTML
theme: {
extend: {},
extend: {
keyframes: {
fadeIn: {
'0%': { opacity: '0', transform: 'translateY(10px)' },
'100%': { opacity: '1', transform: 'translateY(0)' },
},
},
animation: {
'fade-in': 'fadeIn 0.8s ease-out forwards',
},
},
},
plugins: [],
}

53
tests/db.test.ts Normal file
View File

@@ -0,0 +1,53 @@
import { describe, expect, it, beforeAll } from "bun:test";
import { getAllData, getProfile, getExperience } from "../src/db/queries";
import { initDB, db } from "../src/db/schema";
import { seedDB } from "../src/db/seed";
// Use an in-memory DB or a separate test DB file for isolation
// For simplicity in this specific setup, we are testing against the existing file
// or re-seeding it. In a CI env, we'd use ':memory:'.
// Let's ensure the DB is seeded before testing.
beforeAll(() => {
seedDB();
});
describe("Database Queries", () => {
it("should fetch English profile data correctly", () => {
const profile = getProfile("en");
expect(profile).not.toBeNull();
expect(profile?.name).toBe("John Doe");
expect(profile?.job_title).toBe("Full Stack Developer");
});
it("should fetch German profile data correctly", () => {
const profile = getProfile("de");
expect(profile).not.toBeNull();
expect(profile?.name).toBe("John Doe");
expect(profile?.job_title).toBe("Full Stack Entwickler"); // Translation check
});
it("should fetch experience sorted by order", () => {
const experience = getExperience("en");
expect(Array.isArray(experience)).toBe(true);
if (experience.length > 0) {
expect(experience[0]).toHaveProperty("company_name");
expect(experience[0]).toHaveProperty("role");
}
});
it("getAllData should return all sections", () => {
const data = getAllData("en");
expect(data).toHaveProperty("profile");
expect(data).toHaveProperty("experience");
expect(data).toHaveProperty("education");
expect(data).toHaveProperty("skills");
});
it("should return null/empty for non-existent language", () => {
// Our query logic returns null if the join fails usually,
// but let's see how the current implementation behaves with invalid input.
const profile = getProfile("fr");
// Depending on implementation, this might be null or undefined
expect(profile).toBeNull();
});
});