feat: split middleware

fix otp and password validation

.env.example

@@ -1,4 +1,8 @@
 PORT=
-DATABASE_URL=
+SURREALDB_URL=
+SURREALDB_USERNAME=
+SURREALDB_PASSWORD=
+SURREALDB_NAMESPACE=
+SURREALDB_DBNAME=
 ACCESS_TOKEN_SECRET=
 REFRESH_TOKEN_SECRET=

.github/workflows/deploy.yml

@@ -0,0 +1,65 @@
+name: Deploy
+
+on:
+  push:
+    branches:
+      - develop
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Set up Rust
+        uses: actions-rs/toolchain@v1
+        with:
+          toolchain: stable
+          override: true
+
+      - name: Build the project
+        run: cargo build --release
+
+      - name: Stop service on VPS before upload
+        uses: appleboy/ssh-action@v0.1.7
+        with:
+          host: ${{ secrets.VPS_IP }}
+          username: ${{ secrets.VPS_USER }}
+          key: ${{ secrets.VPS_SSH_KEY }}
+          port: ${{ secrets.VPS_PORT }}
+          script: |
+            set -e
+            echo "Stopping the service before uploading the binary"
+            sudo systemctl stop imphnen-backend-service
+
+      - name: Upload artifact to VPS
+        uses: appleboy/scp-action@v0.1.7
+        with:
+          host: ${{ secrets.VPS_IP }}
+          username: ${{ secrets.VPS_USER }}
+          key: ${{ secrets.VPS_SSH_KEY }}
+          port: ${{ secrets.VPS_PORT }}
+          source: ./target/release/*
+          target: /opt/imphnen-backend-service/imphnen-backend-service
+          rm: true
+          overwrite: true
+
+      - name: Deploy to server
+        uses: appleboy/ssh-action@v0.1.7
+        with:
+          host: ${{ secrets.VPS_IP }}
+          username: ${{ secrets.VPS_USER }}
+          key: ${{ secrets.VPS_SSH_KEY }}
+          port: ${{ secrets.VPS_PORT }}
+          script: |
+            set -e
+
+            echo "Restarting the service"
+
+            sudo systemctl daemon-reload
+
+            sudo systemctl restart imphnen-backend-service
+
+            echo "Deployment completed successfully"

.github/workflows/test-build.yml

@@ -0,0 +1,19 @@
+name: Rust
+
+on:
+  push:
+    branches: ["develop"]
+  pull_request:
+    branches: ["develop"]
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Build
+        run: cargo build --verbose

.gitignore

@@ -4,6 +4,7 @@
 
 # Nix
 /.direnv
+/Cargo.nix
 
 # Environment
 .envrc

Cargo.toml

@@ -1,21 +1,32 @@
-[package]
-name = "imphnen-cms-be"
-version = "0.1.0"
-edition = "2021"
+[workspace]
+resolver = "2"
+members = [ 
+  "imphnen-*",
+  "tests",
+]
 
-[dependencies]
+[workspace.dependencies]
 axum = { version = "0.8.1", features = ["multipart"] }
 log = "0.4.25"
-sea-orm = { version = "1.1.4", features = ["sqlx-postgres", "macros", "with-json", "with-uuid", "runtime-tokio", "runtime-tokio-native-tls"] }
 serde = { version = "1.0.217", features = ["derive"] }
 serde_json = "1.0.138"
-tokio = { version = "1.43.0", features = ["full"] }
+tokio = { version = "1.43.0" }
 argon2 = { version = "0.5.3", features = ["password-hash"] }
 jsonwebtoken = "9.3.1"
 chrono = "0.4.39"
 utoipa = { version = "5.3.1", features = ["axum_extras"] }
 utoipa-swagger-ui = { version = "9.0.0", features = ["axum"] }
-redis = "0.28.2"
+lettre = { version = "0.11.12", features = ["tokio1-native-tls"] }
+surrealdb = { version = "2.2.1", features = ["kv-mem"] }
+thiserror = "2.0.11"
+anyhow = "1.0.97"
+rand = "0.9.0"
+tower-http = { version = "0.6.2", features = ["cors"] }
+validator = { version = "0.12", features = ["derive"] }
+lazy_static = "1.4.0"
+regex = "1.11.1"
+axum-test = "17.2.0"
+fancy-regex = "0.14.0"
 
 [profile.release]
 lto = "fat"

Dockerfile

@@ -11,12 +11,12 @@ WORKDIR /app
 COPY Cargo.toml Cargo.lock ./
 COPY ./src ./src
 
-RUN cargo build --release && strip /app/target/release/imphnen-cms-api
+RUN cargo build --release && strip /app/target/release/imphnen-backend-service
 
 FROM gcr.io/distroless/cc AS runner
 
 WORKDIR /app
 
-COPY --from=builder /app/target/release/imphnen-cms-api .
+COPY --from=builder /app/target/release/imphnen-backend-service .
 
-CMD ["/app/imphnen-cms-api"]
+CMD ["/app/imphnen-backend-service"]

README.md

@@ -0,0 +1,107 @@
+# IMPHNEN Backend Service
+
+<p align="center">
+  <img src="docs/logo.svg" alt="IMPHNEN">
+</p>
+
+This repository serves as the **monorepo** for all backend services of IMPHNEN. It encompasses several main services:
+
+1. **Core Service** - Provides fundamental functionalities and shared resources for other services.
+2. **IAM Service** - Handles identity and access management across IMPHNEN applications.
+3. **CMS Service** - Supports the cms services by IMPHNEN [Landing Page website](https://imphnen.dev/).
+4. **Gacha Service** - Supports the gacha services by IMPHNEN [Gacha website](https://gacha.imphnen.dev/).
+5. **Dimentorin Service** - Supports the mentoring services by IMPHNEN [Dimentorin website](https://dimentorin.imphnen.dev/).
+6. **Gateway Service** - Acts as the API gateway, routing requests to appropriate services.
+
+## How to Install
+
+1. **Clone the repository**:
+
+   ```sh
+   git clone https://github.com/IMPHNEN/imphnen-backend-service.git
+   cd imphnen-backend-service
+   ```
+
+2. **Set up the environment**:
+
+   - Copy the example environment files:
+
+     ```sh
+     cp .env.example .env
+     ```
+
+     if you use windows based system
+
+     ```sh
+     ./apply-env.ps1
+     ```
+
+     if you use unix based system
+
+     ```sh
+     sh apply-env.sh
+     ```
+
+   - Modify the `.env` files with your specific configuration settings.
+
+3. **Install dependencies**:
+
+   Ensure you have [Rust](https://www.rust-lang.org/) installed. Then, run:
+
+   ```sh
+   cargo build
+   ```
+
+## How to Run
+
+### Development
+
+To run the services in development mode:
+
+1. **Start the database and other dependencies** using Docker Compose:
+
+   ```sh
+   docker-compose up -d
+   ```
+
+2. **Run the desired service**. For example, to run the Core Service:
+
+   ```sh
+   cargo run -p imphnen-core-service --bin api
+   ```
+
+### Production
+
+For production deployment:
+
+1. **Build the Docker image**:
+
+   ```sh
+   docker build -t imphnen-backend-service .
+   ```
+
+2. **Run the Docker container**:
+
+   ```sh
+   docker run -d --env-file .env -p 8080:8080 imphnen-backend-service
+   ```
+
+   Adjust the port and environment variables as needed.
+
+## How to Contribute
+
+1. **Fork the repository** and clone it locally.
+2. **Create a new branch** for your feature or fix:
+
+   ```sh
+   git checkout -b feat/your-feature-name
+   ```
+
+3. **Make your changes**, commit them, and push to your forked repository.
+4. **Create a pull request** to the `develop` branch of this repository.
+
+If you encounter any issues or have questions, feel free to create a new issue in the repository.
+
+---
+
+_Note: For detailed API documentation, please refer to our [API Docs](https://api.imphnen.dev/docs)._

apply-env.ps1

@@ -0,0 +1,30 @@
+function Set-TempEnvFromDotEnv {
+    param (
+        [string]$envFilePath
+    )
+
+    if (-Not (Test-Path $envFilePath)) {
+        Write-Error "The .env file at path '$envFilePath' does not exist."
+        return
+    }
+
+    $envContent = Get-Content $envFilePath
+
+    foreach ($line in $envContent) {
+        $trimmedLine = $line.Trim()
+
+        if (-Not [string]::IsNullOrWhiteSpace($trimmedLine) -and -Not $trimmedLine.StartsWith("#")) {
+            $keyValue = $trimmedLine -split "=", 2
+            if ($keyValue.Length -eq 2) {
+                $key = $keyValue[0].Trim()
+                $value = $keyValue[1].Trim()
+                [System.Environment]::SetEnvironmentVariable($key, $value, [System.EnvironmentVariableTarget]::Process)
+                Write-Host "Set temporary environment variable: $key=$value"
+            }
+        }
+    }
+
+    Write-Host "All environment variables from '$envFilePath' have been set temporarily."
+}
+
+Set-TempEnvFromDotEnv -envFilePath ".env"

apply-env.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+
+set_temp_env_from_dotenv() {
+    local env_file_path="$1"
+
+    if [[ ! -f "$env_file_path" ]]; then
+        echo "Error: The .env file at path '$env_file_path' does not exist."
+        return 1
+    fi
+
+    while IFS= read -r line || [[ -n "$line" ]]; do
+        trimmed_line=$(echo "$line" | xargs)
+
+        if [[ -n "$trimmed_line" && ! "$trimmed_line" =~ ^# ]]; then
+            key=$(echo "$trimmed_line" | cut -d '=' -f 1 | xargs)
+            value=$(echo "$trimmed_line" | cut -d '=' -f 2- | xargs)
+            export "$key=$value"
+            echo "Set temporary environment variable: $key=$value"
+        fi
+    done < "$env_file_path"
+
+    echo "All environment variables from '$env_file_path' have been set temporarily."
+}
+
+set_temp_env_from_dotenv ".env"

docker-compose.yml

@@ -6,3 +6,11 @@ services:
     ports:
       - "${PORT}:${PORT}"
     env_file: ".env"
+    depends_on:
+      - surrealdb
+
+  surrealdb:
+    image: surrealdb/surrealdb:latest
+    command: start --log trace --user root --pass root
+    ports:
+      - "8000:8000"

flake.lock

@@ -0,0 +1,27 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1739020877,
+        "narHash": "sha256-mIvECo/NNdJJ/bXjNqIh8yeoSjVLAuDuTUzAo7dzs8Y=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "a79cfe0ebd24952b580b1cf08cd906354996d547",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}

flake.nix

@@ -1,24 +1,32 @@
 {
-  description = "IMPHNEN CMS API Nix Flake";
+  description = "IMPHNEN Backend Service Nix Flake";
+
   inputs = {
     nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
   };
+
   outputs = {
     self,
     nixpkgs,
   }: let
     supportedSystems = ["x86_64-linux" "x86_64-darwin" "aarch64-darwin" "aarch64-linux"];
+    pkgsFor = system:
+      import nixpkgs {
+        inherit system;
+        config = {
+          allowUnfree = true;
+        };
+      };
     forAllSystems = nixpkgs.lib.genAttrs supportedSystems;
-    pkgsFor = nixpkgs.legacyPackages;
   in {
     packages = forAllSystems (system: {
-      default = pkgsFor.${system}.callPackage ./default.nix {};
+      default = (pkgsFor system).callPackage ./default.nix {};
     });
     devShells = forAllSystems (system: {
-      default = pkgsFor.${system}.callPackage ./shell.nix {};
+      default = (pkgsFor system).callPackage ./shell.nix {};
     });
     dockerImages = forAllSystems (system: {
-      tryOutApi = pkgsFor.${system}.callPackage ./docker.nix {};
+      tryOutApi = (pkgsFor system).callPackage ./docker.nix {};
     });
   };
 }

imphnen-cms-service/Cargo.toml

@@ -0,0 +1,24 @@
+[package]
+name = "imphnen-cms-service"
+version = "0.1.0"
+edition = "2024"
+
+[dependencies]
+imphnen-entities = { version = "0.1.0", path = "../imphnen-entities" }
+imphnen-libs = { version = "0.1.0", path = "../imphnen-libs" }
+imphnen-utils = { version = "0.1.0", path = "../imphnen-utils" }
+axum.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+utoipa.workspace = true
+lazy_static.workspace = true
+regex.workspace = true
+validator.workspace = true
+axum-test.workspace = true
+surrealdb.workspace = true
+rand.workspace = true
+tokio.workspace = true
+chrono.workspace = true
+anyhow.workspace = true
+tower-http.workspace = true
+utoipa-swagger-ui.workspace = true

imphnen-cms-service/src/lib.rs

@@ -0,0 +1,14 @@
+pub fn add(left: u64, right: u64) -> u64 {
+	left + right
+}
+
+#[cfg(test)]
+mod tests {
+	use super::*;
+
+	#[test]
+	fn it_works() {
+		let result = add(2, 2);
+		assert_eq!(result, 4);
+	}
+}

imphnen-core-service/Cargo.toml

@@ -0,0 +1,25 @@
+[package]
+name = "imphnen-backend-service"
+version = "0.1.0"
+edition = "2021"
+
+[dependencies]
+imphnen-libs = { version = "0.1.0", path = "../imphnen-libs" }
+imphnen-utils = { version = "0.1.0", path = "../imphnen-utils" }
+imphnen-entities = { version = "0.1.0", path = "../imphnen-entities" }
+imphnen-gateway-service = { version = "0.1.0", path = "../imphnen-gateway-service" }
+axum.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+utoipa.workspace = true
+lazy_static.workspace = true
+regex.workspace = true
+validator.workspace = true
+axum-test.workspace = true
+surrealdb.workspace = true
+rand.workspace = true
+tokio.workspace = true
+chrono.workspace = true
+anyhow.workspace = true
+tower-http.workspace = true
+utoipa-swagger-ui.workspace = true

imphnen-core-service/src/bin/api.rs

@@ -0,0 +1,10 @@
+use imphnen_gateway_service::gateway_service;
+use imphnen_libs::axum_init;
+
+#[tokio::main]
+async fn main() {
+	axum_init(|surrealdb_ws, surrealdb_mem| async {
+		gateway_service(surrealdb_ws, surrealdb_mem).await
+	})
+	.await;
+}

imphnen-core-service/src/bin/seed_permissions.rs

@@ -0,0 +1,145 @@
+use imphnen_utils::{get_iso_date, Env};
+use serde_json::json;
+use std::error::Error;
+use surrealdb::{engine::remote::ws::Ws, opt::auth::Root, Surreal};
+
+#[tokio::main]
+async fn main() -> Result<(), Box<dyn Error>> {
+	let env = Env::new();
+	let db = Surreal::new::<Ws>(env.surrealdb_url).await?;
+	db.signin(Root {
+		username: &env.surrealdb_username,
+		password: &env.surrealdb_password,
+	})
+	.await?;
+	db.use_ns(env.surrealdb_namespace)
+		.use_db(env.surrealdb_dbname)
+		.await?;
+	let permissions = vec![
+		(
+			"023e2dfe-93c3-4008-94a8-b5dff403f73b",
+			"Create Users",
+			Some("2025-01-29T06:08:23.838311+00"),
+			Some("2025-01-29T06:08:23.838312+00"),
+		),
+		(
+			"0269ed71-0ae0-4c43-ad29-e3d861d8f9a0",
+			"Create Permissions",
+			None,
+			None,
+		),
+		(
+			"299cb4d5-6556-4cc9-b6c1-32e6d31e0f9b",
+			"Update Permissions",
+			Some("2025-01-29T05:11:01.265+00"),
+			Some("2025-01-29T05:11:01.265001+00"),
+		),
+		(
+			"319ee593-ff0a-4f29-bbaf-9feb3174a3a2",
+			"Create Roles",
+			None,
+			None,
+		),
+		(
+			"319ee593-ff0a-4f29-bbaf-9feb3174a3a6",
+			"Read Detail Users",
+			None,
+			None,
+		),
+		(
+			"35b0d992-65c8-4b62-b030-e6e0320e4048",
+			"Delete Roles",
+			None,
+			None,
+		),
+		(
+			"4da8b434-89f9-4d91-85ae-eebd63cdbeda",
+			"Update Activate Users",
+			Some("2025-02-01T12:38:09.741726+00"),
+			Some("2025-02-01T12:38:09.741727+00"),
+		),
+		(
+			"73888d18-b3e9-4f62-95a5-ba2c0d69fccb",
+			"Read Detail Roles",
+			Some("2025-01-29T05:13:06.445925+00"),
+			Some("2025-01-29T10:31:46.408564+00"),
+		),
+		(
+			"7c15e31d-36e2-49f9-97db-138c03fb0cf6",
+			"Read List Users",
+			Some("2025-01-28T15:02:41.772931+00"),
+			Some("2025-01-28T15:02:41.772933+00"),
+		),
+		(
+			"7d4b1379-4960-416a-b045-98cd82c0cac9",
+			"Read Detail Sessions",
+			Some("2025-02-24T16:52:26.886664+00"),
+			Some("2025-02-24T16:52:26.886673+00"),
+		),
+		(
+			"8195eeb8-e64f-4172-aa57-596492c84a72",
+			"Read List Permissions",
+			Some("2025-01-28T15:05:28.6299+00"),
+			Some("2025-01-28T15:05:28.629901+00"),
+		),
+		(
+			"81eba91d-b8ab-44b9-bbfe-4e6da2f98952",
+			"Read List Tests",
+			Some("2025-02-24T16:52:27.179542+00"),
+			Some("2025-02-24T16:52:27.179551+00"),
+		),
+		(
+			"9164ca6e-c7e3-4238-a15f-f36ab9577e7e",
+			"Read List Roles",
+			None,
+			None,
+		),
+		(
+			"96df0689-2ae9-4894-bf00-837c19415e5c",
+			"Delete Users",
+			Some("2025-02-02T06:52:05.195565+00"),
+			Some("2025-02-02T06:52:05.195565+00"),
+		),
+		(
+			"98b3dc4c-0124-461f-afcd-166637c5e6e8",
+			"Update Users",
+			Some("2025-01-29T05:34:40.621554+00"),
+			Some("2025-01-29T05:34:40.621555+00"),
+		),
+		(
+			"a00d5608-4c48-4542-845c-dfe004687022",
+			"Update Roles",
+			None,
+			None,
+		),
+		(
+			"b2dc3928-86ba-4c59-a03d-0b57d5183ebc",
+			"Delete Permissions",
+			Some("2025-01-29T05:14:22.511084+00"),
+			Some("2025-01-29T05:14:22.511085+00"),
+		),
+		(
+			"dad435cf-042c-41bd-a946-cea61ed2ffbc",
+			"Read Detail Permissions",
+			Some("2025-01-28T15:07:10.990214+00"),
+			Some("2025-01-28T15:07:10.990214+00"),
+		),
+	];
+	for (id, name, _created_at, _updated_at) in permissions {
+		db.query("CREATE type::thing('app_permissions', $id) CONTENT $data")
+			.bind(("id", id))
+			.bind((
+				"data",
+				json!({
+						"name": name,
+						"is_deleted": false,
+						"created_at": get_iso_date(),
+						"updated_at": get_iso_date()
+				}),
+			))
+			.await?;
+		println!("✅ Inserted: {}", name);
+	}
+	println!("✅ Semua permissions berhasil disimpan ke SurrealDB!");
+	Ok(())
+}

imphnen-core-service/src/bin/seed_roles.rs

@@ -0,0 +1,70 @@
+use imphnen_utils::{get_iso_date, Env};
+use serde_json::json;
+use std::error::Error;
+use surrealdb::{engine::remote::ws::Ws, opt::auth::Root, Surreal};
+
+#[tokio::main]
+async fn main() -> Result<(), Box<dyn Error>> {
+	let env = Env::new();
+	let db = Surreal::new::<Ws>(env.surrealdb_url).await?;
+	db.signin(Root {
+		username: &env.surrealdb_username,
+		password: &env.surrealdb_password,
+	})
+	.await?;
+	db.use_ns(env.surrealdb_namespace)
+		.use_db(env.surrealdb_dbname)
+		.await?;
+
+	let roles = vec![
+		(
+			"50133429-f4b1-4249-9f97-7b86e6ee9d86",
+			"Staf",
+			Some("2025-02-24T16:52:27.630453+00"),
+			Some("2025-02-24T16:52:27.630461+00"),
+		),
+		(
+			"5713cb37-dc02-4e87-8048-d7a41d352059",
+			"User",
+			None,
+			Some("2025-02-28T14:53:58.576688+00"),
+		),
+		(
+			"60f1aeb7-dad2-4e06-bcb5-be1ba510c906",
+			"Staff Aktivasi User",
+			Some("2025-02-20T02:47:09.660640+00"),
+			Some("2025-02-20T02:48:30.083283+00"),
+		),
+		(
+			"6d4fea5d-4a08-4b8a-9782-f2ab2183dcf0",
+			"Admin Pembayaran",
+			Some("2025-01-29T05:39:28.562667+00"),
+			Some("2025-03-12T22:56:29.597416+00"),
+		),
+		(
+			"f6b03f25-e416-4893-ac88-caaa690afb07",
+			"Admin",
+			None,
+			Some("2025-02-22T15:38:39.868306+00"),
+		),
+	];
+
+	for (id, name, _created_at, _updated_at) in roles {
+		db.query("CREATE type::thing('app_roles', $id) CONTENT $data")
+			.bind(("id", id))
+			.bind((
+				"data",
+				json!({
+						"name": name,
+						"permissions": [],
+						"is_deleted": false,
+						"created_at": get_iso_date(),
+						"updated_at": get_iso_date(),
+				}),
+			))
+			.await?;
+		println!("✅ Inserted role: {}", name);
+	}
+	println!("✅ Semua role berhasil disimpan ke SurrealDB!");
+	Ok(())
+}

imphnen-core-service/src/bin/seed_roles_permissions.rs

@@ -0,0 +1,59 @@
+use imphnen_utils::{get_iso_date, make_thing, Env};
+use std::error::Error;
+use surrealdb::{engine::remote::ws::Ws, opt::auth::Root, Surreal};
+
+#[tokio::main]
+async fn main() -> Result<(), Box<dyn Error>> {
+	let env = Env::new();
+	let db = Surreal::new::<Ws>(env.surrealdb_url).await?;
+
+	db.signin(Root {
+		username: &env.surrealdb_username,
+		password: &env.surrealdb_password,
+	})
+	.await?;
+
+	db.use_ns(env.surrealdb_namespace)
+		.use_db(env.surrealdb_dbname)
+		.await?;
+
+	let role_permissions = vec![
+		(
+			"50133429-f4b1-4249-9f97-7b86e6ee9d86", // Staf
+			vec![
+				"7c15e31d-36e2-49f9-97db-138c03fb0cf6", // Read List Users
+				"319ee593-ff0a-4f29-bbaf-9feb3174a3a6", // Read Detail Users
+			],
+		),
+		(
+			"f6b03f25-e416-4893-ac88-caaa690afb07", // Admin
+			vec![
+				"023e2dfe-93c3-4008-94a8-b5dff403f73b", // Create Users
+				"96df0689-2ae9-4894-bf00-837c19415e5c", // Delete Users
+				"98b3dc4c-0124-461f-afcd-166637c5e6e8", // Update Users
+				"319ee593-ff0a-4f29-bbaf-9feb3174a3a6", // Read Detail Users
+				"7c15e31d-36e2-49f9-97db-138c03fb0cf6", // Read List Users
+				"9164ca6e-c7e3-4238-a15f-f36ab9577e7e", // Read List Roles
+				"319ee593-ff0a-4f29-bbaf-9feb3174a3a2", // Create Roles
+				"a00d5608-4c48-4542-845c-dfe004687022", // Update Roles
+				"35b0d992-65c8-4b62-b030-e6e0320e4048", // Delete Roles
+			],
+		),
+	];
+	for (role_id, permission_ids) in role_permissions {
+		let permission_refs: Vec<_> = permission_ids
+			.into_iter()
+			.map(|perm_id| make_thing("app_permissions", perm_id))
+			.collect();
+
+		db.query("UPDATE type::thing('app_roles', $role_id) SET permissions = $permissions, updated_at = $updated_at")
+    .bind(("role_id", role_id))
+    .bind(("permissions", permission_refs))
+    .bind(("updated_at", get_iso_date()))
+    .await?;
+		println!("✅ Updated permissions for role ID: {}", role_id);
+	}
+	println!("✅ Semua roles telah diperbarui dengan permissions di SurrealDB!");
+
+	Ok(())
+}

imphnen-core-service/src/bin/seed_users.rs

@@ -0,0 +1,95 @@
+use imphnen_utils::{get_iso_date, hash_password, Env};
+use serde::{Deserialize, Serialize};
+use std::error::Error;
+use surrealdb::{engine::remote::ws::Ws, opt::auth::Root, sql::Thing, Surreal};
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+pub struct UsersSchema {
+	pub id: Thing,
+	pub fullname: String,
+	pub email: String,
+	pub password: String,
+	pub avatar: Option<String>,
+	pub phone_number: String,
+	pub referral_code: Option<String>,
+	pub referred_by: Option<String>,
+	pub identity_number: Option<String>,
+	pub is_active: bool,
+	pub is_deleted: bool,
+	pub student_type: String,
+	pub religion: Option<String>,
+	pub gender: Option<String>,
+	pub birthdate: Option<String>,
+	pub is_profile_completed: bool,
+	pub role: Thing,
+	pub created_at: String,
+	pub updated_at: String,
+}
+
+#[tokio::main]
+async fn main() -> Result<(), Box<dyn Error>> {
+	let env = Env::new();
+	let db = Surreal::new::<Ws>(env.surrealdb_url).await?;
+	db.signin(Root {
+		username: &env.surrealdb_username,
+		password: &env.surrealdb_password,
+	})
+	.await?;
+	db.use_ns(env.surrealdb_namespace)
+		.use_db(env.surrealdb_dbname)
+		.await?;
+
+	let users = vec![
+		(
+			"c3b1d6a8-8d4f-4b36-b789-2e532ec7a7b2",
+			"admin@example.com",
+			"Admin",
+			"f6b03f25-e416-4893-ac88-caaa690afb07",
+		),
+		(
+			"a4d23fb5-9e31-423c-9842-fbd6e75a5298",
+			"staff@example.com",
+			"Staff",
+			"50133429-f4b1-4249-9f97-7b86e6ee9d86",
+		),
+		(
+			"d5e89c12-72af-4b1a-abc3-ff1234567890",
+			"user@example.com",
+			"User",
+			"5713cb37-dc02-4e87-8048-d7a41d352059",
+		),
+	];
+
+	for (id, email, fullname, role_id) in users {
+		let user = UsersSchema {
+			id: Thing::from(("app_users", id)),
+			fullname: fullname.into(),
+			email: email.into(),
+			password: hash_password("password").unwrap(),
+			avatar: None,
+			phone_number: "081234567890".into(),
+			referral_code: None,
+			referred_by: None,
+			identity_number: None,
+			is_active: true,
+			is_deleted: false,
+			student_type: "TNI".into(),
+			religion: None,
+			gender: None,
+			birthdate: None,
+			is_profile_completed: false,
+			role: Thing::from(("app_roles", role_id)),
+			created_at: get_iso_date(),
+			updated_at: get_iso_date(),
+		};
+
+		db.create::<Option<UsersSchema>>(("app_users", id))
+			.content(user)
+			.await?;
+
+		println!("✅ Inserted user: {} ({})", fullname, email);
+	}
+
+	println!("✅ Semua users berhasil disimpan ke SurrealDB!");
+	Ok(())
+}

imphnen-core-service/src/main.rs

@@ -0,0 +1,10 @@
+use imphnen_gateway_service::gateway_service;
+use imphnen_libs::axum_init;
+
+#[tokio::main]
+async fn main() {
+	axum_init(|surrealdb_ws, surrealdb_mem| async {
+		gateway_service(surrealdb_ws, surrealdb_mem).await
+	})
+	.await;
+}

imphnen-dimentorin-service/Cargo.toml

@@ -0,0 +1,24 @@
+[package]
+name = "imphnen-dimentorin-service"
+version = "0.1.0"
+edition = "2024"
+
+[dependencies]
+imphnen-entities = { version = "0.1.0", path = "../imphnen-entities" }
+imphnen-libs = { version = "0.1.0", path = "../imphnen-libs" }
+imphnen-utils = { version = "0.1.0", path = "../imphnen-utils" }
+axum.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+utoipa.workspace = true
+lazy_static.workspace = true
+regex.workspace = true
+validator.workspace = true
+axum-test.workspace = true
+surrealdb.workspace = true
+rand.workspace = true
+tokio.workspace = true
+chrono.workspace = true
+anyhow.workspace = true
+tower-http.workspace = true
+utoipa-swagger-ui.workspace = true

imphnen-dimentorin-service/src/lib.rs

@@ -0,0 +1,14 @@
+pub fn add(left: u64, right: u64) -> u64 {
+	left + right
+}
+
+#[cfg(test)]
+mod tests {
+	use super::*;
+
+	#[test]
+	fn it_works() {
+		let result = add(2, 2);
+		assert_eq!(result, 4);
+	}
+}

imphnen-entities/Cargo.toml

@@ -0,0 +1,11 @@
+[package]
+name = "imphnen-entities"
+version = "0.1.0"
+edition = "2024"
+
+[dependencies]
+axum.workspace = true
+serde.workspace = true
+surrealdb = { workspace = true, features = ["kv-mem"] }
+thiserror.workspace = true
+utoipa.workspace = true

imphnen-entities/src/common_dto.rs

@@ -0,0 +1,69 @@
+use serde::{Deserialize, Serialize};
+use surrealdb::{
+	engine::{local::Db, remote::ws::Client},
+	Surreal,
+};
+use utoipa::{IntoParams, ToSchema};
+
+#[derive(Debug, Clone, Serialize, Deserialize, ToSchema)]
+pub struct MessageResponseDto {
+	pub message: String,
+	pub version: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize, ToSchema, IntoParams)]
+pub struct MetaRequestDto {
+	pub page: Option<u64>,
+	pub per_page: Option<u64>,
+	pub search: Option<String>,
+	pub sort_by: Option<String>,
+	pub order: Option<String>,
+	pub filter: Option<String>,
+	pub filter_by: Option<String>,
+}
+
+impl Default for MetaRequestDto {
+	fn default() -> Self {
+		MetaRequestDto {
+			page: Some(1),
+			per_page: Some(10),
+			search: None,
+			sort_by: None,
+			order: None,
+			filter: None,
+			filter_by: None,
+		}
+	}
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize, ToSchema, IntoParams)]
+pub struct MetaResponseDto {
+	pub page: Option<u64>,
+	pub per_page: Option<u64>,
+	pub total: Option<u64>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, ToSchema)]
+pub struct ResponseSuccessDto<T: Serialize> {
+	pub data: T,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, ToSchema)]
+pub struct ResponseListSuccessDto<T: Serialize> {
+	pub data: T,
+	pub meta: Option<MetaResponseDto>,
+}
+
+pub type SurrealWsClient = Surreal<Client>;
+pub type SurrealMemClient = Surreal<Db>;
+
+#[derive(Clone)]
+pub struct AppState {
+	pub surrealdb_ws: SurrealWsClient,
+	pub surrealdb_mem: SurrealMemClient,
+}
+
+#[derive(Debug, serde::Deserialize)]
+pub struct CountResult {
+	pub count: u64,
+}

imphnen-entities/src/error_dto.rs

@@ -0,0 +1,26 @@
+pub mod error {
+	use axum::http::StatusCode;
+	use axum::response::IntoResponse;
+	use axum::response::Response;
+	use axum::Json;
+	use thiserror::Error;
+
+	#[derive(Error, Debug)]
+	pub enum Error {
+		#[error("database error")]
+		Db,
+	}
+
+	impl IntoResponse for Error {
+		fn into_response(self) -> Response {
+			(StatusCode::INTERNAL_SERVER_ERROR, Json(self.to_string())).into_response()
+		}
+	}
+
+	impl From<surrealdb::Error> for Error {
+		fn from(error: surrealdb::Error) -> Self {
+			eprintln!("{error}");
+			Self::Db
+		}
+	}
+}

imphnen-entities/src/lib.rs

@@ -1,3 +1,4 @@
 pub mod common_dto;
-
+pub mod error_dto;
 pub use common_dto::*;
+pub use error_dto::*;

imphnen-gacha-service/Cargo.toml

@@ -0,0 +1,24 @@
+[package]
+name = "imphnen-gacha-service"
+version = "0.1.0"
+edition = "2024"
+
+[dependencies]
+imphnen-entities = { version = "0.1.0", path = "../imphnen-entities" }
+imphnen-libs = { version = "0.1.0", path = "../imphnen-libs" }
+imphnen-utils = { version = "0.1.0", path = "../imphnen-utils" }
+axum.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+utoipa.workspace = true
+lazy_static.workspace = true
+regex.workspace = true
+validator.workspace = true
+axum-test.workspace = true
+surrealdb.workspace = true
+rand.workspace = true
+tokio.workspace = true
+chrono.workspace = true
+anyhow.workspace = true
+tower-http.workspace = true
+utoipa-swagger-ui.workspace = true

imphnen-gacha-service/src/lib.rs

@@ -0,0 +1,9 @@
+use imphnen_entities::*;
+use imphnen_libs::*;
+use imphnen_utils::*;
+
+pub mod v1;
+pub use imphnen_entities::*;
+pub use imphnen_libs::*;
+pub use imphnen_utils::*;
+pub use v1::*;

imphnen-gacha-service/src/v1/gacha_claim/gacha_claim_dto.rs

@@ -0,0 +1,33 @@
+use serde::{Deserialize, Serialize};
+use surrealdb::sql::Thing;
+use utoipa::ToSchema;
+use validator::Validate;
+
+#[derive(Clone, Debug, Serialize, Deserialize, ToSchema, Validate)]
+pub struct GachaClaimRequestDto {
+	#[validate(length(min = 1, message = "User ID must not be empty"))]
+	pub user_id: String,
+
+	#[validate(length(min = 1, message = "Item ID must not be empty"))]
+	pub item_id: String,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, ToSchema)]
+pub struct GachaClaimDto {
+	pub id: String,
+	pub user: String,
+	pub item: String,
+	pub is_deleted: bool,
+	pub created_at: Option<String>,
+	pub updated_at: Option<String>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+pub struct GachaClaimDtoRaw {
+	pub id: Thing,
+	pub user: Thing,
+	pub item: Thing,
+	pub is_deleted: bool,
+	pub created_at: Option<String>,
+	pub updated_at: Option<String>,
+}

imphnen-gacha-service/src/v1/gacha_claim/gacha_claim_repository.rs

@@ -0,0 +1,42 @@
+use super::GachaClaimSchema;
+use crate::{AppState, ResourceEnum};
+use anyhow::{Result, bail};
+
+pub struct GachaClaimRepository<'a> {
+	state: &'a AppState,
+}
+
+impl<'a> GachaClaimRepository<'a> {
+	pub fn new(state: &'a AppState) -> Self {
+		Self { state }
+	}
+
+	pub async fn query_gacha_claim_by_id(
+		&self,
+		id: String,
+	) -> Result<GachaClaimSchema> {
+		let db = &self.state.surrealdb_ws;
+		let result: Option<GachaClaimSchema> = db
+			.select((ResourceEnum::GachaClaims.to_string(), id.clone()))
+			.await?;
+		match result {
+			Some(claim) if !claim.is_deleted => Ok(claim),
+			_ => bail!("Gacha Claim not found"),
+		}
+	}
+
+	pub async fn query_create_gacha_claim(
+		&self,
+		data: GachaClaimSchema,
+	) -> Result<String> {
+		let db = &self.state.surrealdb_ws;
+		let record: Option<GachaClaimSchema> = db
+			.create(ResourceEnum::GachaClaims.to_string())
+			.content(data)
+			.await?;
+		match record {
+			Some(_) => Ok("Success create Gacha Claim".into()),
+			None => bail!("Failed to create Gacha Claim"),
+		}
+	}
+}

imphnen-gacha-service/src/v1/gacha_claim/gacha_claim_schema.rs

@@ -0,0 +1,35 @@
+use crate::{ResourceEnum, make_thing};
+use serde::{Deserialize, Serialize};
+use surrealdb::{Uuid, sql::Thing};
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+pub struct GachaClaimSchema {
+	pub id: Thing,
+	pub user: Thing,
+	pub item: Thing,
+	pub is_deleted: bool,
+	pub created_at: Option<String>,
+	pub updated_at: Option<String>,
+}
+
+impl Default for GachaClaimSchema {
+	fn default() -> Self {
+		GachaClaimSchema {
+			id: make_thing(
+				&ResourceEnum::GachaClaims.to_string(),
+				&Uuid::new_v4().to_string(),
+			),
+			user: make_thing(
+				&ResourceEnum::Users.to_string(),
+				&Uuid::new_v4().to_string(),
+			),
+			item: make_thing(
+				&ResourceEnum::GachaItems.to_string(),
+				&Uuid::new_v4().to_string(),
+			),
+			is_deleted: false,
+			created_at: None,
+			updated_at: None,
+		}
+	}
+}

imphnen-gacha-service/src/v1/gacha_claim/mod.rs

@@ -0,0 +1,7 @@
+pub mod gacha_claim_dto;
+pub mod gacha_claim_repository;
+pub mod gacha_claim_schema;
+
+pub use gacha_claim_dto::*;
+pub use gacha_claim_repository::*;
+pub use gacha_claim_schema::*;

imphnen-gacha-service/src/v1/gacha_item/gacha_item_dto.rs

@@ -0,0 +1,30 @@
+use serde::{Deserialize, Serialize};
+use surrealdb::sql::Thing;
+use utoipa::ToSchema;
+use validator::Validate;
+
+#[derive(Clone, Debug, Serialize, Deserialize, ToSchema, Validate)]
+pub struct GachaItemRequestDto {
+	#[validate(length(min = 1, message = "Item name must not be empty"))]
+	pub name: String,
+	#[validate(length(min = 1, message = "Image URL must not be empty"))]
+	pub image_url: String,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, ToSchema)]
+pub struct GachaItemDto {
+	pub id: String,
+	pub name: String,
+	pub is_deleted: bool,
+	pub created_at: Option<String>,
+	pub updated_at: Option<String>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+pub struct GachaItemDtoRaw {
+	pub id: Thing,
+	pub name: String,
+	pub is_deleted: bool,
+	pub created_at: Option<String>,
+	pub updated_at: Option<String>,
+}

imphnen-gacha-service/src/v1/gacha_item/gacha_item_repository.rs

@@ -0,0 +1,100 @@
+use super::GachaItemSchema;
+use crate::{
+	AppState, MetaRequestDto, ResourceEnum, ResponseListSuccessDto, get_id,
+	make_thing, query_list_with_meta,
+};
+use anyhow::{Result, bail};
+
+pub struct GachaItemRepository<'a> {
+	state: &'a AppState,
+}
+
+impl<'a> GachaItemRepository<'a> {
+	pub fn new(state: &'a AppState) -> Self {
+		Self { state }
+	}
+
+	pub async fn query_gacha_item_list(
+		&self,
+		meta: MetaRequestDto,
+	) -> Result<ResponseListSuccessDto<Vec<GachaItemSchema>>> {
+		let mut conditions = vec!["is_deleted = false".into()];
+		if meta.search.is_some() {
+			conditions.push("string::contains(name, $search)".into());
+		}
+		query_list_with_meta(
+			&self.state.surrealdb_ws,
+			&ResourceEnum::GachaItems.to_string(),
+			&meta,
+			conditions,
+			None,
+		)
+		.await
+	}
+
+	pub async fn query_gacha_item_by_id(&self, id: String) -> Result<GachaItemSchema> {
+		let db = &self.state.surrealdb_ws;
+		let result: Option<GachaItemSchema> = db
+			.select((ResourceEnum::GachaItems.to_string(), id.clone()))
+			.await?;
+		match result {
+			Some(item) if !item.is_deleted => Ok(item),
+			_ => bail!("Gacha Item not found"),
+		}
+	}
+
+	pub async fn query_create_gacha_item(
+		&self,
+		data: GachaItemSchema,
+	) -> Result<String> {
+		let db = &self.state.surrealdb_ws;
+		let record: Option<GachaItemSchema> = db
+			.create(ResourceEnum::GachaItems.to_string())
+			.content(data)
+			.await?;
+		match record {
+			Some(_) => Ok("Success create Gacha Item".into()),
+			None => bail!("Failed to create Gacha Item"),
+		}
+	}
+
+	pub async fn query_update_gacha_item(
+		&self,
+		data: GachaItemSchema,
+	) -> Result<String> {
+		let db = &self.state.surrealdb_ws;
+		let record_key = get_id(&data.id)?;
+		let existing = self.query_gacha_item_by_id(data.id.id.to_raw()).await?;
+		if existing.is_deleted {
+			bail!("Gacha Item already deleted");
+		}
+		let merged = GachaItemSchema {
+			created_at: existing.created_at,
+			..data.clone()
+		};
+		let record: Option<GachaItemSchema> =
+			db.update(record_key).merge(merged).await?;
+		match record {
+			Some(_) => Ok("Success update Gacha Item".into()),
+			None => bail!("Failed to update Gacha Item"),
+		}
+	}
+
+	pub async fn query_delete_gacha_item(&self, id: String) -> Result<String> {
+		let db = &self.state.surrealdb_ws;
+		let item_id = make_thing(&ResourceEnum::GachaItems.to_string(), &id);
+		let item = self.query_gacha_item_by_id(item_id.id.to_raw()).await?;
+		if item.is_deleted {
+			bail!("Gacha Item already deleted");
+		}
+		let record_key = get_id(&item.id)?;
+		let record: Option<GachaItemSchema> = db
+			.update(record_key)
+			.merge(serde_json::json!({ "is_deleted": true }))
+			.await?;
+		match record {
+			Some(_) => Ok("Success delete Gacha Item".into()),
+			None => bail!("Failed to delete Gacha Item"),
+		}
+	}
+}

imphnen-gacha-service/src/v1/gacha_item/gacha_item_schema.rs

@@ -0,0 +1,29 @@
+use crate::{ResourceEnum, make_thing};
+use serde::{Deserialize, Serialize};
+use surrealdb::{Uuid, sql::Thing};
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+pub struct GachaItemSchema {
+	pub id: Thing,
+	pub name: String,
+	pub image_url: String,
+	pub is_deleted: bool,
+	pub created_at: Option<String>,
+	pub updated_at: Option<String>,
+}
+
+impl Default for GachaItemSchema {
+	fn default() -> Self {
+		GachaItemSchema {
+			id: make_thing(
+				&ResourceEnum::GachaItems.to_string(),
+				&Uuid::new_v4().to_string(),
+			),
+			name: String::new(),
+			image_url: String::new(),
+			is_deleted: false,
+			created_at: None,
+			updated_at: None,
+		}
+	}
+}

imphnen-gacha-service/src/v1/gacha_item/mod.rs

@@ -0,0 +1,7 @@
+pub mod gacha_item_dto;
+pub mod gacha_item_repository;
+pub mod gacha_item_schema;
+
+pub use gacha_item_dto::*;
+pub use gacha_item_repository::*;
+pub use gacha_item_schema::*;

imphnen-gacha-service/src/v1/gacha_roll/gacha_roll_dto.rs

@@ -0,0 +1,38 @@
+use serde::{Deserialize, Serialize};
+use surrealdb::sql::Thing;
+use utoipa::ToSchema;
+use validator::Validate;
+
+#[derive(Clone, Debug, Serialize, Deserialize, ToSchema, Validate)]
+pub struct GachaRollRequestDto {
+	#[validate(length(min = 1, message = "Item ID must not be empty"))]
+	pub item_id: String,
+
+	#[validate(range(min = 1, message = "Weight must be greater than zero"))]
+	pub weight: f32,
+
+	#[validate(range(min = 1, message = "Quantity must be at least 1"))]
+	pub quantity: i32,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, ToSchema)]
+pub struct GachaRollDto {
+	pub id: String,
+	pub item: String,
+	pub weight: String,
+	pub quantity: i32,
+	pub is_deleted: bool,
+	pub created_at: Option<String>,
+	pub updated_at: Option<String>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+pub struct GachaRollDtoRaw {
+	pub id: Thing,
+	pub item: Thing,
+	pub weight: String,
+	pub quantity: i32,
+	pub is_deleted: bool,
+	pub created_at: Option<String>,
+	pub updated_at: Option<String>,
+}

imphnen-gacha-service/src/v1/gacha_roll/gacha_roll_repository.rs

@@ -0,0 +1,39 @@
+use super::GachaRollSchema;
+use crate::{AppState, ResourceEnum};
+use anyhow::{Result, bail};
+
+pub struct GachaRollRepository<'a> {
+	state: &'a AppState,
+}
+
+impl<'a> GachaRollRepository<'a> {
+	pub fn new(state: &'a AppState) -> Self {
+		Self { state }
+	}
+
+	pub async fn query_gacha_roll_by_id(&self, id: String) -> Result<GachaRollSchema> {
+		let db = &self.state.surrealdb_ws;
+		let result: Option<GachaRollSchema> = db
+			.select((ResourceEnum::GachaRolls.to_string(), id.clone()))
+			.await?;
+		match result {
+			Some(roll) if !roll.is_deleted => Ok(roll),
+			_ => bail!("Gacha Roll not found"),
+		}
+	}
+
+	pub async fn query_create_gacha_roll(
+		&self,
+		data: GachaRollSchema,
+	) -> Result<String> {
+		let db = &self.state.surrealdb_ws;
+		let record: Option<GachaRollSchema> = db
+			.create(ResourceEnum::GachaRolls.to_string())
+			.content(data)
+			.await?;
+		match record {
+			Some(_) => Ok("Success create Gacha Roll".into()),
+			None => bail!("Failed to create Gacha Roll"),
+		}
+	}
+}