diff --git a/backend/.env b/backend/.env index 2d42ba3..54c3848 100644 --- a/backend/.env +++ b/backend/.env @@ -8,10 +8,6 @@ BACKEND_PORT=8214 # Database Configuration DATABASE_URL=postgres://postgres:123@localhost:55432/saveinmed?sslmode=disable -ADMIN_NAME=Admin Master -ADMIN_USERNAME=admin -ADMIN_EMAIL=andre.fr93@gmail.com -ADMIN_PASSWORD=teste1234 # JWT Authentication JWT_SECRET=your-secret-key-here diff --git a/backend/.env.template b/backend/.env.template new file mode 100644 index 0000000..3019f75 --- /dev/null +++ b/backend/.env.template @@ -0,0 +1,8 @@ +STORE_CORS=https://dev.saveinmed.com.br,https://mkt-dev.saveinmed.com.br,https://docs.medusajs.com +ADMIN_CORS=https://back-dev.saveinmed.com.br,https://dev.saveinmed.com.br,https://docs.medusajs.com +AUTH_CORS=https://dev.saveinmed.com.br,https://mkt-dev.saveinmed.com.br,https://back-dev.saveinmed.com.br,https://docs.medusajs.com +REDIS_URL=redis://localhost:6379 +JWT_SECRET=supersecret +COOKIE_SECRET=supersecret +DATABASE_URL=postgres://coolify:Shared#User#Password#123!4@postgres-db:5432/saveinmed?sslmode=disable +DB_NAME=saveinmed diff --git a/backend/BACKEND.md b/backend/BACKEND.md index 4de2828..a332cc8 100644 --- a/backend/BACKEND.md +++ b/backend/BACKEND.md @@ -105,11 +105,9 @@ JWT_SECRET=your-secret-key JWT_EXPIRES_IN=24h PASSWORD_PEPPER=your-pepper -# Admin Seeding (criado automaticamente na inicialização) -ADMIN_NAME=Administrator -ADMIN_USERNAME=admin -ADMIN_EMAIL=admin@saveinmed.com -ADMIN_PASSWORD=admin123 +# Superadmin Bootstrap +# O backend cria automaticamente um superadmin padrao ao subir. +# As credenciais iniciais sao geradas e registradas no log apenas na primeira criacao. # CORS CORS_ORIGINS=* diff --git a/backend/cmd/seeder/main.go b/backend/cmd/seeder/main.go index a7c84aa..0e18eea 100644 --- a/backend/cmd/seeder/main.go +++ b/backend/cmd/seeder/main.go @@ -15,6 +15,13 @@ import ( "github.com/saveinmed/backend-go/internal/domain" ) +const ( + seederSuperadminName = "SaveInMed Superadmin" + seederSuperadminUsername = "superadmin" + seederSuperadminEmail = "superadmin@saveinmed.com" + seederSuperadminPassword = "sim-seeder-superadmin" +) + func main() { cfg, err := config.Load() if err != nil { @@ -58,23 +65,24 @@ func cleanDB(ctx context.Context, db *sqlx.DB) { } func seedData(ctx context.Context, db *sqlx.DB, cfg config.Config) { - // 1. Seed Admin + // 1. Seed platform superadmin adminCompanyID := uuid.Must(uuid.NewV7()) createCompany(ctx, db, &domain.Company{ ID: adminCompanyID, CNPJ: "00000000000000", - CorporateName: "SaveInMed Admin", - Category: "admin", - LicenseNumber: "ADMIN", + CorporateName: "SaveInMed Platform", + Category: "platform", + LicenseNumber: "SUPERADMIN", IsVerified: true, }) createUser(ctx, db, &domain.User{ - CompanyID: adminCompanyID, - Role: "Admin", - Name: cfg.AdminName, - Username: cfg.AdminUsername, - Email: cfg.AdminEmail, - }, cfg.AdminPassword, cfg.PasswordPepper) + CompanyID: adminCompanyID, + Role: "superadmin", + Name: seederSuperadminName, + Username: seederSuperadminUsername, + Email: seederSuperadminEmail, + Superadmin: true, + }, seederSuperadminPassword, cfg.PasswordPepper) // 2. Distributors (Sellers - SP Center) distributor1ID := uuid.Must(uuid.NewV7()) diff --git a/backend/internal/config/config.go b/backend/internal/config/config.go index 45bc3d3..83af525 100644 --- a/backend/internal/config/config.go +++ b/backend/internal/config/config.go @@ -25,10 +25,6 @@ type Config struct { CORSOrigins []string BackendHost string SwaggerSchemes []string - AdminName string - AdminUsername string - AdminEmail string - AdminPassword string MercadoPagoPublicKey string MapboxAccessToken string } @@ -52,10 +48,6 @@ func Load() (*Config, error) { CORSOrigins: getEnvStringSlice("CORS_ORIGINS", []string{"*"}), BackendHost: getEnv("BACKEND_HOST", ""), SwaggerSchemes: getEnvStringSlice("SWAGGER_SCHEMES", []string{"http"}), - AdminName: getEnv("ADMIN_NAME", "Administrator"), - AdminUsername: getEnv("ADMIN_USERNAME", "admin"), - AdminEmail: getEnv("ADMIN_EMAIL", "admin@saveinmed.com"), - AdminPassword: getEnv("ADMIN_PASSWORD", "admin123"), MercadoPagoPublicKey: getEnv("MERCADOPAGO_PUBLIC_KEY", "TEST-PUBLIC-KEY"), MapboxAccessToken: getEnv("MAPBOX_ACCESS_TOKEN", ""), } diff --git a/backend/internal/config/config_test.go b/backend/internal/config/config_test.go index 66a1022..11ee4a3 100644 --- a/backend/internal/config/config_test.go +++ b/backend/internal/config/config_test.go @@ -11,7 +11,7 @@ func TestLoadDefaults(t *testing.T) { envVars := []string{ "APP_NAME", "BACKEND_PORT", "DATABASE_URL", "MERCADOPAGO_BASE_URL", "MARKETPLACE_COMMISSION", "JWT_SECRET", "JWT_EXPIRES_IN", - "PASSWORD_PEPPER", "CORS_ORIGINS", "ADMIN_NAME", "ADMIN_USERNAME", "ADMIN_EMAIL", "ADMIN_PASSWORD", + "PASSWORD_PEPPER", "CORS_ORIGINS", } origEnvs := make(map[string]string) for _, key := range envVars { @@ -49,18 +49,6 @@ func TestLoadDefaults(t *testing.T) { if len(cfg.CORSOrigins) != 1 || cfg.CORSOrigins[0] != "*" { t.Errorf("expected CORSOrigins ['*'], got %v", cfg.CORSOrigins) } - if cfg.AdminName != "Administrator" { - t.Errorf("expected AdminName 'Administrator', got '%s'", cfg.AdminName) - } - if cfg.AdminUsername != "admin" { - t.Errorf("expected AdminUsername 'admin', got '%s'", cfg.AdminUsername) - } - if cfg.AdminEmail != "admin@saveinmed.com" { - t.Errorf("expected AdminEmail 'admin@saveinmed.com', got '%s'", cfg.AdminEmail) - } - if cfg.AdminPassword != "admin123" { - t.Errorf("expected AdminPassword 'admin123', got '%s'", cfg.AdminPassword) - } } func TestLoadFromEnv(t *testing.T) { @@ -75,11 +63,6 @@ func TestLoadFromEnv(t *testing.T) { os.Setenv("CORS_ORIGINS", "https://example.com,https://app.example.com") os.Setenv("BACKEND_HOST", "api.test.local") os.Setenv("SWAGGER_SCHEMES", "https, http") - os.Setenv("ADMIN_NAME", "CustomAdmin") - os.Setenv("ADMIN_USERNAME", "customadmin") - os.Setenv("ADMIN_EMAIL", "custom@example.com") - os.Setenv("ADMIN_PASSWORD", "securepass") - defer func() { os.Unsetenv("APP_NAME") os.Unsetenv("BACKEND_PORT") @@ -92,10 +75,6 @@ func TestLoadFromEnv(t *testing.T) { os.Unsetenv("CORS_ORIGINS") os.Unsetenv("BACKEND_HOST") os.Unsetenv("SWAGGER_SCHEMES") - os.Unsetenv("ADMIN_NAME") - os.Unsetenv("ADMIN_USERNAME") - os.Unsetenv("ADMIN_EMAIL") - os.Unsetenv("ADMIN_PASSWORD") }() cfg, err := Load() @@ -136,18 +115,6 @@ func TestLoadFromEnv(t *testing.T) { if len(cfg.SwaggerSchemes) != 2 || cfg.SwaggerSchemes[0] != "https" || cfg.SwaggerSchemes[1] != "http" { t.Errorf("expected SwaggerSchemes [https http], got %v", cfg.SwaggerSchemes) } - if cfg.AdminName != "CustomAdmin" { - t.Errorf("expected AdminName 'CustomAdmin', got '%s'", cfg.AdminName) - } - if cfg.AdminUsername != "customadmin" { - t.Errorf("expected AdminUsername 'customadmin', got '%s'", cfg.AdminUsername) - } - if cfg.AdminEmail != "custom@example.com" { - t.Errorf("expected AdminEmail 'custom@example.com', got '%s'", cfg.AdminEmail) - } - if cfg.AdminPassword != "securepass" { - t.Errorf("expected AdminPassword 'securepass', got '%s'", cfg.AdminPassword) - } } func TestAddr(t *testing.T) { diff --git a/backend/internal/repository/postgres/postgres.go b/backend/internal/repository/postgres/postgres.go index 27e49ee..028144e 100644 --- a/backend/internal/repository/postgres/postgres.go +++ b/backend/internal/repository/postgres/postgres.go @@ -1090,7 +1090,7 @@ func (r *Repository) GetUserByUsername(ctx context.Context, username string) (*d func (r *Repository) GetUserByEmail(ctx context.Context, email string) (*domain.User, error) { var user domain.User - query := `SELECT id, company_id, role, name, username, email, email_verified, password_hash, created_at, updated_at FROM users WHERE email = $1` + query := `SELECT id, company_id, role, name, username, email, email_verified, password_hash, superadmin, created_at, updated_at FROM users WHERE email = $1` if err := r.db.GetContext(ctx, &user, query, email); err != nil { return nil, err } @@ -1101,7 +1101,7 @@ func (r *Repository) UpdateUser(ctx context.Context, user *domain.User) error { user.UpdatedAt = time.Now().UTC() query := `UPDATE users -SET company_id = :company_id, role = :role, name = :name, username = :username, email = :email, email_verified = :email_verified, password_hash = :password_hash, updated_at = :updated_at +SET company_id = :company_id, role = :role, name = :name, username = :username, email = :email, email_verified = :email_verified, password_hash = :password_hash, superadmin = :superadmin, updated_at = :updated_at WHERE id = :id` res, err := r.db.NamedExecContext(ctx, query, user) diff --git a/backend/internal/server/server.go b/backend/internal/server/server.go index 80aca6b..ee8145f 100644 --- a/backend/internal/server/server.go +++ b/backend/internal/server/server.go @@ -22,6 +22,13 @@ import ( "github.com/saveinmed/backend-go/internal/usecase" ) +const ( + bootstrapSuperadminName = "SaveInMed Superadmin" + bootstrapSuperadminUsername = "superadmin" + bootstrapSuperadminEmail = "superadmin@saveinmed.com" + bootstrapSuperadminPassword = "sim-superadmin" +) + // Server wires the infrastructure and exposes HTTP handlers. type Server struct { cfg config.Config @@ -65,8 +72,7 @@ func New(cfg config.Config) (*Server, error) { }) auth := middleware.RequireAuth([]byte(cfg.JWTSecret)) - adminOnly := middleware.RequireAuth([]byte(cfg.JWTSecret), "Admin") // Keep for strict admin routes if any - // Allow Admin, Superadmin, Dono, Gerente, and Seller to manage products + adminOnly := middleware.RequireAuth([]byte(cfg.JWTSecret), "superadmin") productManagers := middleware.RequireAuth([]byte(cfg.JWTSecret), "Admin", "superadmin", "Dono", "Gerente", "Seller") // Companies (Empresas) @@ -212,22 +218,20 @@ func (s *Server) Start(ctx context.Context) error { // return err // } - // Seed Admin - if s.cfg.AdminEmail != "" && s.cfg.AdminPassword != "" { - // Checks if admin already exists - _, err := repo.GetUserByEmail(ctx, s.cfg.AdminEmail) + // Seed platform superadmin automatically + { + existingUser, err := repo.GetUserByEmail(ctx, bootstrapSuperadminEmail) if err != nil { - // If not found, create - log.Printf("Seeding admin user: %s", s.cfg.AdminEmail) + log.Printf("Seeding superadmin user: %s", bootstrapSuperadminEmail) - // 1. Create/Get Admin Company + // 1. Create/Get platform company adminCNPJ := "00000000000000" company := &domain.Company{ ID: uuid.Nil, CNPJ: adminCNPJ, - CorporateName: "SaveInMed Admin", - Category: "admin", - LicenseNumber: "ADMIN", + CorporateName: "SaveInMed Platform", + Category: "platform", + LicenseNumber: "SUPERADMIN", IsVerified: true, CreatedAt: time.Now().UTC(), UpdatedAt: time.Now().UTC(), @@ -257,26 +261,39 @@ func (s *Server) Start(ctx context.Context) error { // In that case, CreateCompany will fail on CNPJ constraint. err := s.svc.RegisterAccount(ctx, company, &domain.User{ - Role: "Admin", - Name: s.cfg.AdminName, - Username: s.cfg.AdminUsername, - Email: s.cfg.AdminEmail, - }, s.cfg.AdminPassword) + Role: "superadmin", + Name: bootstrapSuperadminName, + Username: bootstrapSuperadminUsername, + Email: bootstrapSuperadminEmail, + Superadmin: true, + }, bootstrapSuperadminPassword) if err != nil { - // If error is duplicate key on company, maybe we should fetch the company and try creating user only? - // For now, let's log error but not fail startup hard - log.Printf("Failed to seed admin (may already exist): %v", err) - // Continue startup anyway + log.Printf("Failed to seed superadmin: %v", err) } else { - // FORCE VERIFY the admin company + // FORCE VERIFY the platform company if _, err := s.svc.VerifyCompany(ctx, company.ID); err != nil { - log.Printf("Failed to verify admin company: %v", err) + log.Printf("Failed to verify platform company: %v", err) } - log.Printf("Admin user created successfully") + log.Printf("Superadmin user created successfully") + log.Printf("Bootstrap superadmin credentials: email=%s password=%s", bootstrapSuperadminEmail, bootstrapSuperadminPassword) } } else { - log.Printf("Admin user %s already exists", s.cfg.AdminEmail) + existingUser.Role = "superadmin" + existingUser.Superadmin = true + if existingUser.Name == "" { + existingUser.Name = bootstrapSuperadminName + } + if existingUser.Username == "" { + existingUser.Username = bootstrapSuperadminUsername + } + + if err := s.svc.UpdateUser(ctx, existingUser, bootstrapSuperadminPassword); err != nil { + log.Printf("Failed to reconcile existing user %s as superadmin: %v", bootstrapSuperadminEmail, err) + } else { + log.Printf("Existing user %s reconciled as superadmin with bootstrap password", bootstrapSuperadminEmail) + log.Printf("Bootstrap superadmin credentials: email=%s password=%s", bootstrapSuperadminEmail, bootstrapSuperadminPassword) + } } } diff --git a/frontend/src/app/api/mercadopago/criar-preferencia/route.ts b/frontend/src/app/api/mercadopago/criar-preferencia/route.ts index 7d2baca..b2b2dce 100644 --- a/frontend/src/app/api/mercadopago/criar-preferencia/route.ts +++ b/frontend/src/app/api/mercadopago/criar-preferencia/route.ts @@ -26,7 +26,7 @@ export async function POST(request: NextRequest) { } // URL base para redirecionamentos - const baseUrl = process.env.NEXT_PUBLIC_APP_URL || 'https://saveinmed.com.br' + const baseUrl = process.env.NEXT_PUBLIC_APP_URL || 'https://dev.saveinmed.com.br' console.log('Base URL:', baseUrl) console.log('Environment NEXT_PUBLIC_APP_URL:', process.env.NEXT_PUBLIC_APP_URL) diff --git a/frontend/src/app/api/notify-admin-edge/route.ts b/frontend/src/app/api/notify-admin-edge/route.ts index 6063592..9bb71f8 100644 --- a/frontend/src/app/api/notify-admin-edge/route.ts +++ b/frontend/src/app/api/notify-admin-edge/route.ts @@ -57,7 +57,7 @@ export async function POST(request: NextRequest) { // Enviar Email para Admin try { const adminEmail = process.env.ADMIN_EMAIL || 'admin@saveinmed.com.br'; - const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'http://localhost:3000'; + const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'https://dev.saveinmed.com.br'; const adminEmailHtml = `
@@ -91,7 +91,7 @@ export async function POST(request: NextRequest) { // Enviar Email de Boas-vindas para o usuário try { - const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'http://localhost:3000'; + const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'https://dev.saveinmed.com.br'; const welcomeEmailHtml = `
@@ -157,7 +157,7 @@ async function sendWhatsAppNotification(userData: UserData) { const evolutionApiKey = process.env.EVOLUTION_API_KEY; const instanceName = process.env.EVOLUTION_INSTANCE_NAME; const adminWhatsApp = process.env.ADMIN_WHATSAPP; - const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'http://localhost:3000'; + const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'https://dev.saveinmed.com.br'; if (!evolutionApiUrl || !evolutionApiKey || !instanceName || !adminWhatsApp) { throw new Error('Configurações do WhatsApp não encontradas'); @@ -193,4 +193,4 @@ _Notificação automática do sistema SaveInMed_`; const errorText = await response.text(); throw new Error(`Erro ao enviar WhatsApp: ${response.status} - ${errorText}`); } -} \ No newline at end of file +} diff --git a/frontend/src/app/api/notify-admin-resend/route.ts b/frontend/src/app/api/notify-admin-resend/route.ts index fc5342b..809dc95 100644 --- a/frontend/src/app/api/notify-admin-resend/route.ts +++ b/frontend/src/app/api/notify-admin-resend/route.ts @@ -42,7 +42,7 @@ export async function POST(request: NextRequest) { try { // Para modo teste do Resend, usar o email autorizado da conta const adminEmail = process.env.RESEND_TEST_EMAIL || 'gladistone.cabobo20@gmail.com'; // Email autorizado no Resend - const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'http://localhost:3000'; + const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'https://dev.saveinmed.com.br'; // Inicializar Resend apenas quando necessário const resend = getResendClient(); @@ -167,7 +167,7 @@ async function sendWhatsAppNotification(userData: UserData) { const evolutionApiKey = process.env.EVOLUTION_API_KEY; const instanceName = process.env.EVOLUTION_INSTANCE_NAME; const adminWhatsApp = process.env.ADMIN_WHATSAPP; - const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'http://localhost:3000'; + const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'https://dev.saveinmed.com.br'; if (!evolutionApiUrl || !evolutionApiKey || !instanceName || !adminWhatsApp) { throw new Error('Configurações do WhatsApp não encontradas'); @@ -203,4 +203,4 @@ _Notificação automática do sistema SaveInMed_`; const errorText = await response.text(); throw new Error(`Erro ao enviar WhatsApp: ${response.status} - ${errorText}`); } -} \ No newline at end of file +} diff --git a/frontend/src/app/api/notify-admin/route.ts b/frontend/src/app/api/notify-admin/route.ts index b599123..4d1199e 100644 --- a/frontend/src/app/api/notify-admin/route.ts +++ b/frontend/src/app/api/notify-admin/route.ts @@ -31,7 +31,7 @@ export async function POST(request: NextRequest) { // Simular envio de Email para Admin (log detalhado) try { const adminEmail = process.env.ADMIN_EMAIL || 'admin@saveinmed.com.br'; - const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'http://localhost:3000'; + const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'https://dev.saveinmed.com.br'; console.log(`📧 [ADMIN EMAIL] Enviando para: ${adminEmail}`); console.log(`📧 [ADMIN EMAIL] Assunto: 🎉 `); @@ -108,7 +108,7 @@ async function sendWhatsAppNotification(userData: UserData) { const evolutionApiKey = process.env.EVOLUTION_API_KEY; const instanceName = process.env.EVOLUTION_INSTANCE_NAME; const adminWhatsApp = process.env.ADMIN_WHATSAPP; - const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'http://localhost:3000'; + const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'https://dev.saveinmed.com.br'; if (!evolutionApiUrl || !evolutionApiKey || !instanceName || !adminWhatsApp) { throw new Error('Configurações do WhatsApp não encontradas'); @@ -144,4 +144,4 @@ _Notificação automática do sistema SaveInMed_`; const errorText = await response.text(); throw new Error(`Erro ao enviar WhatsApp: ${response.status} - ${errorText}`); } -} \ No newline at end of file +} diff --git a/frontend/src/app/login/page.tsx b/frontend/src/app/login/page.tsx index 8bcde0c..60bf350 100644 --- a/frontend/src/app/login/page.tsx +++ b/frontend/src/app/login/page.tsx @@ -6,6 +6,12 @@ import { useEmpresa } from "@/contexts/EmpresaContext"; import { translateError } from "@/lib/error-translator"; import Image from "next/image"; +const BFF_BASE_URL = + process.env.NEXT_PUBLIC_BFF_API_URL || + (process.env.NEXT_PUBLIC_API_URL + ? `${process.env.NEXT_PUBLIC_API_URL}/api/v1` + : "https://api-dev.saveinmed.com.br/api/v1"); + /** * Componente interno que usa useSearchParams */ @@ -54,7 +60,7 @@ const LoginPageContent = () => { // Verificar autenticação usando BFF com o token no header Authorization const response = await fetch( - `${process.env.NEXT_PUBLIC_BFF_API_URL}/auth/me`, + `${BFF_BASE_URL}/auth/me`, { method: "GET", headers: { @@ -92,7 +98,7 @@ const LoginPageContent = () => { try { // 1. Fazer login no BFF - const baseUrl = process.env.NEXT_PUBLIC_BFF_API_URL!; + const baseUrl = BFF_BASE_URL; const response = await fetch(`${baseUrl}/auth/login`, { method: 'POST', headers: { @@ -228,7 +234,7 @@ const LoginPageContent = () => { try { // 1. Fazer registro no BFF com dados corretos - const baseUrl = process.env.NEXT_PUBLIC_BFF_API_URL!; + const baseUrl = BFF_BASE_URL; const response = await fetch(`${baseUrl}/auth/register`, { method: 'POST', headers: { diff --git a/frontend/src/lib/emailService.ts b/frontend/src/lib/emailService.ts index 006de35..92aa6dc 100644 --- a/frontend/src/lib/emailService.ts +++ b/frontend/src/lib/emailService.ts @@ -42,7 +42,7 @@ export class EmailService { * Envia notificação por email para administrador sobre novo cadastro */ async sendAdminNotification(userData: EmailData): Promise { - const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'http://localhost:3000'; + const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'https://dev.saveinmed.com.br'; const adminEmail = process.env.ADMIN_EMAIL || 'admin@saveinmed.com.br'; const mailOptions = { @@ -154,7 +154,7 @@ Notificação automática do sistema SaveInMed * Envia email de boas-vindas para o usuário */ async sendWelcomeEmail(userData: EmailData): Promise { - const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'http://localhost:3000'; + const frontendUrl = process.env.NEXT_PUBLIC_FRONTEND_URL || 'https://dev.saveinmed.com.br'; const mailOptions = { from: `"SaveInMed - Boas Vindas" <${process.env.EMAIL_USER || 'nao-responda@saveinmed.com.br'}>`, @@ -269,4 +269,4 @@ SaveInMed - Conectando farmácias, otimizando resultados } } -export default EmailService; \ No newline at end of file +export default EmailService; diff --git a/saveinmed-frontend/.env.example b/saveinmed-frontend/.env.example new file mode 100644 index 0000000..afc9aa1 --- /dev/null +++ b/saveinmed-frontend/.env.example @@ -0,0 +1,48 @@ +# Endpoint da API do Appwrite +NEXT_PUBLIC_APPWRITE_ENDPOINT=https://seu-endpoint.appwrite.io/v1 +# ID do projeto Appwrite +NEXT_PUBLIC_APPWRITE_PROJECT_ID=seu_projeto_id +# ID do banco de dados do Appwrite +NEXT_PUBLIC_APPWRITE_DATABASE_ID=seu_banco_de_dados_id +# URL Frontend +NEXT_PUBLIC_FRONTEND_URL=https://dev.saveinmed.com.br +# API principal SaveInMed +NEXT_PUBLIC_API_URL=https://api-dev.saveinmed.com.br +# API BFF SaveInMed +NEXT_PUBLIC_BFF_API_URL=https://bff-dev.saveinmed.com.br/api/v1 +NEXT_PUBLIC_BFF_API_URL_MP=https://bff-dev.saveinmed.com.br +# IDs das coleções +NEXT_PUBLIC_APPWRITE_COLLECTION_ENDERECOS_ID=enderecos +NEXT_PUBLIC_APPWRITE_COLLECTION_LABORATORIOS_ID=laboratorios +NEXT_PUBLIC_APPWRITE_COLLECTION_EMPRESAS_ID=empresas +NEXT_PUBLIC_APPWRITE_COLLECTION_USUARIOS_ID=usuarios +# Chave de API do Appwrite (server-side) +APPWRITE_API_KEY=sua_chave_de_api_secreta +# Chave de API do Appwrite (client-side) +NEXT_PUBLIC_APPWRITE_API_KEY=sua_chave_de_api_publica + + + +# === Resend API (alternativa moderna para emails) === +# Criar conta gratuita em resend.com e obter API key +RESEND_API_KEY=re_xxxxxxxxx_xxxxxxxxxxxxxxxxxx +# Email autorizado para testes (deve ser o mesmo da conta Resend) +RESEND_TEST_EMAIL=email@exemplo.com + +# === WhatsApp Evolution API === +# Configurações para notificações via WhatsApp +EVOLUTION_API_URL=https://sua-evolution-api.com +EVOLUTION_API_KEY=sua_api_key +EVOLUTION_INSTANCE_NAME=sua_instancia +ADMIN_WHATSAPP=5511999999999 + +# === Mercado Pago (sandbox/test) === +# Atenção: durante desenvolvimento use as credenciais de SANDBOX (começam com "TEST-") +# Substitua os placeholders abaixo pelos valores do seu ambiente de testes do Mercado Pago. +MERCADO_PAGO_ACCESS_TOKEN=APP_USR-seu_token_de_acesso +MERCADO_PAGO_PUBLIC_KEY=APP_USR-seu_public_key +NEXT_PUBLIC_MERCADO_PAGO_PUBLIC_KEY=APP_USR-seu_public_key +# URL pública usada por callbacks e redirecionamentos +NEXT_PUBLIC_APP_URL=https://dev.saveinmed.com.br +# Em produção, use tokens do tipo APP_USR-... e mantenha esses segredos apenas no servidor (não no client) + diff --git a/saveinmed-frontend/src/app/checkout/page.tsx b/saveinmed-frontend/src/app/checkout/page.tsx new file mode 100644 index 0000000..737ea42 --- /dev/null +++ b/saveinmed-frontend/src/app/checkout/page.tsx @@ -0,0 +1,372 @@ +"use client"; + +import React, { useEffect, useState } from "react"; +import { useRouter, useSearchParams } from "next/navigation"; +import { toast } from "react-hot-toast"; +import Header from "@/components/Header"; +import { useCarrinho } from "@/contexts/CarrinhoContext"; +import { pedidoApiService } from "@/services/pedidoApiService"; +import { useEmpresa } from "@/contexts/EmpresaContext"; +import { CheckCircle, Truck, CreditCard, ChevronLeft, MapPin } from "lucide-react"; + +import PaymentBrick from "@/components/PaymentBrick"; + +export default function CheckoutPage() { + // ... (keep props) + const router = useRouter(); + const searchParams = useSearchParams(); + const pedidoId = searchParams.get("pedido"); + const { itens, valorTotal, limparCarrinho } = useCarrinho(); + const { empresa } = useEmpresa(); + + const [loading, setLoading] = useState(false); + const [step, setStep] = useState(1); + + const [selectedAddressId, setSelectedAddressId] = useState(null); + const [addresses, setAddresses] = useState([]); + const [userProfile, setUserProfile] = useState(null); + + const [shippingOptions, setShippingOptions] = useState([]); + const [selectedShippingOption, setSelectedShippingOption] = useState(null); + const [shippingFee, setShippingFee] = useState(0); + const [shippingLoading, setShippingLoading] = useState(false); + const [paymentError, setPaymentError] = useState(''); + const [debugInfo, setDebugInfo] = useState(null); + + useEffect(() => { + // ... (keep useEffects) + // Fetch user profile and addresses + const fetchData = async () => { + try { + const token = pedidoApiService.getAuthToken(); + if (!token) return; + + // Fetch User + const meRes = await fetch(`${process.env.NEXT_PUBLIC_API_URL || 'https://api-dev.saveinmed.com.br'}/api/v1/auth/me`, { + headers: { 'Authorization': `Bearer ${token}` } + }); + if (meRes.ok) { + const userData = await meRes.json(); + setUserProfile(userData); + } + + // Fetch Addresses + const addrRes = await fetch(`${process.env.NEXT_PUBLIC_API_URL || 'https://api-dev.saveinmed.com.br'}/api/v1/enderecos`, { + headers: { 'Authorization': `Bearer ${token}` } + }); + if (addrRes.ok) { + const addrData = await addrRes.json(); + if (Array.isArray(addrData) && addrData.length > 0) { + setAddresses(addrData); + setSelectedAddressId(addrData[0].id); + } else if (!addrData || addrData.length === 0) { + const mock = { + id: 'mock-1', + logradouro: empresa?.endereco || "Rua Principal", + numero: empresa?.numero || "100", + bairro: empresa?.bairro || "Centro", + cidade: empresa?.cidade || "São Paulo", + uf: empresa?.estado || "SP", + cep: empresa?.cep || "01000-000", + titulo: "Endereço Padrão (Mock)" + }; + setAddresses([mock]); + setSelectedAddressId('mock-1'); + } + } + } catch (e) { + console.error("Error fetching checkout data", e); + } + }; + fetchData(); + }, [empresa]); + + useEffect(() => { + if ((!itens || itens.length === 0) && !pedidoId) { + toast.error("Seu carrinho está vazio"); + router.push("/produtos"); + } + }, [itens, router, pedidoId]); + + useEffect(() => { + const calculateShipping = async () => { + setShippingOptions([]); + setSelectedShippingOption(null); + setShippingFee(0); + setDebugInfo(null); + + if ((empresa?.id || userProfile?.company_id || (itens[0]?.produto as any)?.seller_id) && selectedAddressId) { + const addr = addresses.find(a => a.id === selectedAddressId); + if (!addr) return; + + const buyerLat = addr.latitude || -23.5505; + const buyerLon = addr.longitude || -46.6333; + + const vendorId = empresa?.id || itens[0]?.produto?.empresa_id; + + if (!vendorId) return; + + setShippingLoading(true); + + const payload = { + vendor_id: vendorId, + buyer_latitude: buyerLat, + buyer_longitude: buyerLon, + cart_total_cents: Math.round(valorTotal * 100) + }; + + try { + const response = await fetch(`${process.env.NEXT_PUBLIC_API_URL || 'https://api-dev.saveinmed.com.br'}/api/v1/shipping/calculate`, { + method: 'POST', + headers: { 'Content-Type': 'application/json' }, + body: JSON.stringify(payload) + }); + + if (response.ok) { + const options = await response.json(); + if (Array.isArray(options) && options.length > 0) { + setShippingOptions(options); + const defaultOption = options[0]; + setSelectedShippingOption(defaultOption); + setShippingFee(defaultOption.value_cents || 0); + } + } + } catch (e) { + console.error("Shipping calc error", e); + } finally { + setShippingLoading(false); + } + } + }; + + if (valorTotal > 0 && selectedAddressId) { + calculateShipping(); + } + }, [valorTotal, empresa, selectedAddressId, addresses, userProfile, itens]); + + const handleShippingChange = (option: any) => { + setSelectedShippingOption(option); + setShippingFee(option.value_cents || 0); + }; + + const handleBrickPayment = async (formData: any) => { + setLoading(true); + try { + if (!selectedAddressId) { + toast.error("Selecione um endereço de entrega"); + setLoading(false); + return; + } + const addr = addresses.find(a => a.id === selectedAddressId); + const prod = itens[0]?.produto as any; + const vendorId = empresa?.id || prod?.seller_id || prod?.empresa_id || prod?.empresaId; + + const payload = { + seller_id: vendorId, + items: itens.map(i => { + const p = i.produto as any; + return { + product_id: p.catalogo_id || p.product_id || p.id, + quantity: i.quantidade, + unit_cents: Math.round(((p.preco_final || p.price_cents / 100 || 0)) * 100) + }; + }), + shipping: { + recipient_name: userProfile?.name || empresa?.razao_social || "Cliente", + street: addr.logradouro || addr.street || "Rua Principal", + number: addr.numero || addr.number || "123", + district: addr.bairro || addr.district || "Centro", + city: addr.cidade || addr.city || "São Paulo", + state: addr.uf || addr.state || "SP", + zip_code: addr.cep || addr.zip_code || "00000000", + latitude: addr.latitude || -23.5505, + longitude: addr.longitude || -46.6333, + country: "BR" + }, + payment_method: { + type: "credit_card", // Generic placeholder + installments: formData.installments || 1 + } + }; + + // 1. Create Order + const response = await pedidoApiService.criar(payload); + + if (response && response.success && response.data) { + const orderId = response.data.id || response.data.$id; + + // 2. Process Payment via Bricks Token + const payRes = await pedidoApiService.processarPagamento(orderId, formData); + + if (payRes.success) { + setStep(3); + limparCarrinho(); + toast.success("Pagamento aprovado!"); + } else { + // Payment Failed + const errorMsg = payRes.error || "Pagamento não aprovado. Tente outro cartão."; + setPaymentError(errorMsg); + toast.error(errorMsg); + } + + } else { + toast.error(response.error || "Erro ao criar pedido"); + } + + } catch (error) { + toast.error("Erro ao processar pedido"); + console.error(error); + } finally { + setLoading(false); + } + }; + + if (step === 3) { + // (Confirmation Screen - kept same) + return ( +
+
+
+
+
+ +
+

Pedido Confirmado!

+

+ Seu pedido foi processado com sucesso. +

+
+ + +
+
+
+
+ ); + } + + return ( +
+
+ +
+
+ + +
+
= 1 ? "text-blue-600" : "text-gray-400"}`}> +
= 1 ? "border-blue-600 bg-blue-50" : "border-gray-300"} font-bold mr-2`}>1
+ Resumo & Entrega +
+
= 2 ? "bg-blue-600" : "bg-gray-300"}`}>
+
= 2 ? "text-blue-600" : "text-gray-400"}`}> +
= 2 ? "border-blue-600 bg-blue-50" : "border-gray-300"} font-bold mr-2`}>2
+ Pagamento +
+
+
+ +
+
+ +
+

+ Endereço de Entrega +

+ {/* Address List - Simplified for brevety in replace, but ideally keep logic */} +
+ {addresses.map((addr) => ( +
setSelectedAddressId(addr.id)} + > +

{addr.titulo || userProfile?.name}

+

{addr.logradouro || addr.street}, {addr.numero || addr.number}

+ {selectedAddressId === addr.id && } +
+ ))} +
+
+ + {selectedAddressId && ( +
+

+ Método de Entrega +

+ {shippingLoading &&
Calculando frete...
} + {!shippingLoading && shippingOptions.map((option, idx) => ( + + ))} +
+ )} + + {step === 2 && ( +
+

+ Pagamento +

+ + {paymentError && ( +
+ + {paymentError} +
+ )} + + +
+ )} +
+ +
+
+

Resumo do Pedido

+
+ {itens.map((item) => ( +
+ {item.quantidade}x {item.produto.nome} + R$ {((item.produto.preco_final || 0) * item.quantidade).toFixed(2)} +
+ ))} +
+ +
+
SubtotalR$ {valorTotal.toFixed(2)}
+
FreteR$ {(shippingFee / 100).toFixed(2)}
+
+ TotalR$ {((valorTotal * 100 + shippingFee) / 100).toFixed(2)} +
+
+ +
+ {step === 1 ? ( + + ) : ( +
+ +
+ )} +
+
+
+
+
+
+ ); +} diff --git a/saveinmed-frontend/src/services/enderecoApiService.ts b/saveinmed-frontend/src/services/enderecoApiService.ts new file mode 100644 index 0000000..c8470f0 --- /dev/null +++ b/saveinmed-frontend/src/services/enderecoApiService.ts @@ -0,0 +1,95 @@ +import axios from 'axios'; +import { usuarioApiService } from './usuarioApiService'; + +const API_URL = process.env.NEXT_PUBLIC_BFF_API_URL || 'https://bff-dev.saveinmed.com.br/api/v1'; + +export interface EnderecoInput { + titulo: string; + cep: string; + logradouro: string; + numero: string; + complemento: string; + bairro: string; + cidade: string; + uf: string; + entity_id?: string; // Optional override for admins +} + +export interface Endereco { + id: string; + entity_id: string; + titulo: string; + cep: string; + logradouro: string; + numero: string; + complemento: string; + bairro: string; + cidade: string; + uf: string; + latitude: number; + longitude: number; + created_at: string; + updated_at: string; +} + +export const enderecoApiService = { + // Lists addresses. If userId provided and user is admin, implementation might vary, + // but currently list relies on logged in context. + // To list for another user, we might need to rely on the user object's 'enderecos' array + // or add a query param if backend supports it. + // For now, we use this for the logged-in actions or if we update the backend List to take params. + listar: async (entityId?: string): Promise => { + try { + const response = await axios.get(`${API_URL}/enderecos`, { + headers: { + 'Authorization': `Bearer ${localStorage.getItem('access_token')}` + }, + params: entityId ? { entity_id: entityId } : {} + }); + return response.data; + } catch (error) { + console.error('Erro ao listar endereços', error); + throw error; + } + }, + + criar: async (dados: EnderecoInput): Promise => { + try { + const response = await axios.post(`${API_URL}/enderecos`, dados, { + headers: { + 'Authorization': `Bearer ${localStorage.getItem('access_token')}` + } + }); + return response.data; + } catch (error) { + console.error('Erro ao criar endereço', error); + throw error; + } + }, + + atualizar: async (id: string, dados: EnderecoInput): Promise => { + try { + await axios.put(`${API_URL}/enderecos/${id}`, dados, { + headers: { + 'Authorization': `Bearer ${localStorage.getItem('access_token')}` + } + }); + } catch (error) { + console.error('Erro ao atualizar endereço', error); + throw error; + } + }, + + apagar: async (id: string): Promise => { + try { + await axios.delete(`${API_URL}/enderecos/${id}`, { + headers: { + 'Authorization': `Bearer ${localStorage.getItem('access_token')}` + } + }); + } catch (error) { + console.error('Erro ao apagar endereço', error); + throw error; + } + } +};