Implement orbis forms

backend/prisma/migrations/20251018092621_add_forms_to_orbis/migration.sql

@@ -0,0 +1,98 @@
+-- CreateEnum
+CREATE TYPE "FieldType" AS ENUM ('TEXT', 'NUMBER', 'EMAIL', 'MULTIPLE_CHOICE', 'CHECKBOX', 'SINGLE_CHOICE', 'FILE', 'DATE', 'STAR_RATING', 'DROPDOWN');
+
+-- CreateTable
+CREATE TABLE "Form" (
+    "id" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "description" TEXT,
+    "createdBy" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+    "isActive" BOOLEAN NOT NULL DEFAULT true,
+    "slug" TEXT NOT NULL,
+    "isTemplate" BOOLEAN NOT NULL DEFAULT false,
+
+    CONSTRAINT "Form_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "FormContributor" (
+    "id" TEXT NOT NULL,
+    "formId" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "addedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "FormContributor_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "FormField" (
+    "id" TEXT NOT NULL,
+    "formId" TEXT NOT NULL,
+    "label" TEXT NOT NULL,
+    "fieldType" "FieldType" NOT NULL,
+    "isRequired" BOOLEAN NOT NULL DEFAULT false,
+    "options" JSONB,
+    "position" INTEGER NOT NULL,
+    "placeholder" TEXT,
+    "helpText" TEXT,
+    "validation" JSONB,
+    "conditions" JSONB,
+
+    CONSTRAINT "FormField_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "FormResponse" (
+    "id" TEXT NOT NULL,
+    "formId" TEXT NOT NULL,
+    "submittedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "submittedBy" TEXT,
+    "responderIp" TEXT,
+    "userAgent" TEXT,
+    "metadata" JSONB,
+
+    CONSTRAINT "FormResponse_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "FieldAnswer" (
+    "id" TEXT NOT NULL,
+    "responseId" TEXT NOT NULL,
+    "fieldId" TEXT NOT NULL,
+    "answerValue" TEXT,
+    "answerJson" JSONB,
+
+    CONSTRAINT "FieldAnswer_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Form_slug_key" ON "Form"("slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "FormContributor_formId_userId_key" ON "FormContributor"("formId", "userId");
+
+-- AddForeignKey
+ALTER TABLE "Form" ADD CONSTRAINT "Form_createdBy_fkey" FOREIGN KEY ("createdBy") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FormContributor" ADD CONSTRAINT "FormContributor_formId_fkey" FOREIGN KEY ("formId") REFERENCES "Form"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FormContributor" ADD CONSTRAINT "FormContributor_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FormField" ADD CONSTRAINT "FormField_formId_fkey" FOREIGN KEY ("formId") REFERENCES "Form"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FormResponse" ADD CONSTRAINT "FormResponse_formId_fkey" FOREIGN KEY ("formId") REFERENCES "Form"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FormResponse" ADD CONSTRAINT "FormResponse_submittedBy_fkey" FOREIGN KEY ("submittedBy") REFERENCES "User"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FieldAnswer" ADD CONSTRAINT "FieldAnswer_responseId_fkey" FOREIGN KEY ("responseId") REFERENCES "FormResponse"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FieldAnswer" ADD CONSTRAINT "FieldAnswer_fieldId_fkey" FOREIGN KEY ("fieldId") REFERENCES "FormField"("id") ON DELETE RESTRICT ON UPDATE CASCADE;

backend/prisma/migrations/20251018123047_add_form_url/migration.sql

@@ -0,0 +1,12 @@
+/*
+  Warnings:
+
+  - A unique constraint covering the columns `[formUrl]` on the table `Form` will be added. If there are existing duplicate values, this will fail.
+  - Added the required column `formUrl` to the `Form` table without a default value. This is not possible if the table is not empty.
+
+*/
+-- AlterTable
+ALTER TABLE "Form" ADD COLUMN     "formUrl" TEXT NOT NULL;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Form_formUrl_key" ON "Form"("formUrl");

backend/prisma/migrations/20251018152641_add_permissions_to_forms/migration.sql

@@ -0,0 +1,68 @@
+/*
+  Warnings:
+
+  - The primary key for the `FieldAnswer` table will be changed. If it partially fails, the table could be left without primary key constraint.
+  - The `id` column on the `FieldAnswer` table would be dropped and recreated. This will lead to data loss if there is data in the column.
+  - You are about to drop the column `isTemplate` on the `Form` table. All the data in the column will be lost.
+  - You are about to drop the column `slug` on the `Form` table. All the data in the column will be lost.
+  - The primary key for the `FormContributor` table will be changed. If it partially fails, the table could be left without primary key constraint.
+  - The `id` column on the `FormContributor` table would be dropped and recreated. This will lead to data loss if there is data in the column.
+  - The primary key for the `FormField` table will be changed. If it partially fails, the table could be left without primary key constraint.
+  - The `id` column on the `FormField` table would be dropped and recreated. This will lead to data loss if there is data in the column.
+  - The primary key for the `FormResponse` table will be changed. If it partially fails, the table could be left without primary key constraint.
+  - The `id` column on the `FormResponse` table would be dropped and recreated. This will lead to data loss if there is data in the column.
+  - Changed the type of `responseId` on the `FieldAnswer` table. No cast exists, the column would be dropped and recreated, which cannot be done if there is data, since the column is required.
+  - Changed the type of `fieldId` on the `FieldAnswer` table. No cast exists, the column would be dropped and recreated, which cannot be done if there is data, since the column is required.
+
+*/
+-- CreateEnum
+CREATE TYPE "PermissionLevel" AS ENUM ('VIEW', 'EDIT');
+
+-- DropForeignKey
+ALTER TABLE "FieldAnswer" DROP CONSTRAINT "FieldAnswer_fieldId_fkey";
+
+-- DropForeignKey
+ALTER TABLE "FieldAnswer" DROP CONSTRAINT "FieldAnswer_responseId_fkey";
+
+-- DropIndex
+DROP INDEX "Form_slug_key";
+
+-- AlterTable
+ALTER TABLE "FieldAnswer" DROP CONSTRAINT "FieldAnswer_pkey",
+DROP COLUMN "id",
+ADD COLUMN     "id" SERIAL NOT NULL,
+DROP COLUMN "responseId",
+ADD COLUMN     "responseId" INTEGER NOT NULL,
+DROP COLUMN "fieldId",
+ADD COLUMN     "fieldId" INTEGER NOT NULL,
+ADD CONSTRAINT "FieldAnswer_pkey" PRIMARY KEY ("id");
+
+-- AlterTable
+ALTER TABLE "Form" DROP COLUMN "isTemplate",
+DROP COLUMN "slug",
+ADD COLUMN     "isEditable" BOOLEAN NOT NULL DEFAULT false;
+
+-- AlterTable
+ALTER TABLE "FormContributor" DROP CONSTRAINT "FormContributor_pkey",
+ADD COLUMN     "permission" "PermissionLevel" NOT NULL DEFAULT 'VIEW',
+DROP COLUMN "id",
+ADD COLUMN     "id" SERIAL NOT NULL,
+ADD CONSTRAINT "FormContributor_pkey" PRIMARY KEY ("id");
+
+-- AlterTable
+ALTER TABLE "FormField" DROP CONSTRAINT "FormField_pkey",
+DROP COLUMN "id",
+ADD COLUMN     "id" SERIAL NOT NULL,
+ADD CONSTRAINT "FormField_pkey" PRIMARY KEY ("id");
+
+-- AlterTable
+ALTER TABLE "FormResponse" DROP CONSTRAINT "FormResponse_pkey",
+DROP COLUMN "id",
+ADD COLUMN     "id" SERIAL NOT NULL,
+ADD CONSTRAINT "FormResponse_pkey" PRIMARY KEY ("id");
+
+-- AddForeignKey
+ALTER TABLE "FieldAnswer" ADD CONSTRAINT "FieldAnswer_responseId_fkey" FOREIGN KEY ("responseId") REFERENCES "FormResponse"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FieldAnswer" ADD CONSTRAINT "FieldAnswer_fieldId_fkey" FOREIGN KEY ("fieldId") REFERENCES "FormField"("id") ON DELETE RESTRICT ON UPDATE CASCADE;

backend/prisma/migrations/20251019021225_form_response_model_changes/migration.sql

@@ -0,0 +1,16 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `metadata` on the `FormResponse` table. All the data in the column will be lost.
+  - You are about to drop the column `responderIp` on the `FormResponse` table. All the data in the column will be lost.
+  - You are about to drop the column `userAgent` on the `FormResponse` table. All the data in the column will be lost.
+
+*/
+-- AlterTable
+ALTER TABLE "FormField" ADD COLUMN     "allowMultiple" BOOLEAN NOT NULL DEFAULT false;
+
+-- AlterTable
+ALTER TABLE "FormResponse" DROP COLUMN "metadata",
+DROP COLUMN "responderIp",
+DROP COLUMN "userAgent",
+ADD COLUMN     "anonymousId" TEXT;

backend/prisma/schema.prisma

@@ -24,6 +24,9 @@ model User {
   applications   Application[]
   createdEvents  Event[]
   teamMembers    TeamMember[]
+  formsCreated   Form[]           @relation("UserForms")
+  contributions  FormContributor[]
+  formResponses  FormResponse[]   @relation("UserFormResponses")
 }
 
 model UserProfile {
@@ -320,3 +323,87 @@ enum TeamMemberRole {
   LEADER
   MEMBER
 }
+
+model Form {
+  id            String            @id @default(cuid())
+  title         String
+  description   String?
+  createdBy     String
+  formUrl       String            @unique
+  createdAt     DateTime          @default(now())
+  updatedAt     DateTime          @updatedAt
+  isActive      Boolean           @default(true)
+  isEditable     Boolean           @default(false)
+  creator       User              @relation("UserForms", fields: [createdBy], references: [id])
+  contributors  FormContributor[]
+  fields        FormField[]
+  responses     FormResponse[]
+}
+
+enum PermissionLevel {
+  VIEW
+  EDIT
+}
+
+model FormContributor {
+  id        Int   @id @default(autoincrement())
+  formId    String
+  userId    String
+  addedAt   DateTime @default(now())
+  permission PermissionLevel @default(VIEW)
+  form      Form     @relation(fields: [formId], references: [id])
+  user      User     @relation(fields: [userId], references: [id])
+  @@unique([formId, userId])
+}
+
+model FormField {
+  id            Int      @id @default(autoincrement())
+  formId        String
+  label         String
+  fieldType     FieldType
+  isRequired    Boolean  @default(false)
+  allowMultiple Boolean  @default(false)
+  options       Json?  
+  position      Int
+  placeholder   String?
+  helpText      String?
+  validation    Json?    
+  conditions    Json?    
+  form          Form     @relation(fields: [formId], references: [id])
+  answers       FieldAnswer[] 
+}
+
+enum FieldType {
+  TEXT
+  NUMBER
+  EMAIL
+  MULTIPLE_CHOICE
+  CHECKBOX
+  SINGLE_CHOICE
+  FILE
+  DATE
+  STAR_RATING
+  DROPDOWN
+}
+
+
+model FormResponse {
+  id            Int       @id @default(autoincrement())
+  formId        String
+  submittedAt   DateTime  @default(now())
+  submittedBy   String?
+  anonymousId   String? 
+  form          Form       @relation(fields: [formId], references: [id])
+  user          User?      @relation("UserFormResponses", fields: [submittedBy], references: [id])
+  answers       FieldAnswer[]
+}
+
+model FieldAnswer {
+  id           Int       @id @default(autoincrement())
+  responseId   Int
+  fieldId      Int
+  answerValue  String?    
+  answerJson   Json? 
+  response     FormResponse @relation(fields: [responseId], references: [id])
+  field        FormField    @relation(fields: [fieldId], references: [id])
+}

backend/server.js

@@ -12,6 +12,7 @@ import eventRoutes from './src/routes/events.js';
 import teamRoutes from './src/routes/teams.js';
 import projectRoutes from './src/routes/projects.js';
 import profileRoutes from './src/routes/profiles.js';
+import formRoutes from './src/routes/form.js';
 
 const app = express();
 const PORT = process.env.PORT || 4000;
@@ -26,18 +27,19 @@ app.use(cors({
 app.use(express.json());
 app.use(cookieParser());
 
-// Mount routes
+// Mount routes - IMPORTANT: Mount specific routes BEFORE generic ones
 app.use('/api/auth', authRoutes);
-app.use('/api/events', eventRoutes); // Remove checkJwt from public routes
+app.use('/api/events', eventRoutes); // Public routes
+app.use('/api/forms', formRoutes); // Form routes - mix of public and protected routes (MUST be before /api)
 app.use('/api/teams', checkJwt, teamRoutes);
 app.use('/api/projects', checkJwt, projectRoutes);
-app.use('/api', checkJwt, profileRoutes); // Changed from '/api/profiles' to '/api' to match frontend calls
+app.use('/api', checkJwt, profileRoutes); // Generic /api route with auth (MUST be last)
 
 // Error handling
 app.use(errorHandler);
 
 // Start server
-app.listen(PORT, () => {
+const server = app.listen(PORT, () => {
   console.log(`Server running on port ${PORT}`);
   console.log(`- Local: http://localhost:${PORT}`);
   if (process.env.SERVER_URL) {