merge conflict resolved

app.js

@@ -138,7 +138,8 @@ import LanguageRoute from "./resources/setting/Language/language_routes.js";
 import PurposeRoute from "./resources/setting/Purpose/Purpose_routes.js";
 //SalesCoOrdinator Routes
 import SalesCoOrdinatorRoute from "./resources/SalesCoOrdinators/SalesCoOrdinatorRoute.js";
-
+//TerritoryManager Routes
+import TerritoryManagerRoute from "./resources/TerritoryManagers/TerritoryManagerRoute.js";
 // category Route
 import categoryRoute from "./resources/Category/categoryRoutes.js";
 import RegistrationImageRoute from "./resources/RegistrationImage/RegistrationImageRoute.js";
@@ -198,6 +199,8 @@ app.use("/api/salescoordinator", SalesCoOrdinatorRoute);
 // Kyc Routes
 app.use("/api", KycRoute);
 
+//TerritoryManager Routes
+app.use("/api/territorymanager", TerritoryManagerRoute);
 //Order
 app.use("/api/order", orderRoute);
 //Departure

middlewares/TerritoryManagerAuth.js

@@ -0,0 +1,44 @@
+import jwt from "jsonwebtoken";
+import TerritoryManager from "../resources/TerritoryManagers/TerritoryManagerModel.js";
+
+export const isAuthenticatedTerritoryManager = async (req, res, next) => {
+  try {
+    if (!req.headers.authorization) {
+      return res.status(401).json({
+        success: false,
+        message: "Please login to access this resource",
+      });
+    }
+    const getToken = req.headers.authorization;
+    const token = getToken.slice(7);
+
+    const decoded = jwt.verify(token, process.env.JWT_SECRET);
+    if (!decoded) {
+      return res.status(400).json({
+        success: false,
+        message: "Incorrect token",
+      });
+    }
+    const territorymanager = await TerritoryManager.findById(decoded.id);
+    if (territorymanager) {
+      req.user = territorymanager;
+      req.userType = 'TerritoryManager';
+      return next();
+    } else {
+      return res.status(401).json({
+        success: false,
+        message: "Unauthorized",
+      });
+    }
+  } catch (error) {
+    if (error.name === "TokenExpiredError") {
+      return res.status(401).json({ message: "Token has expired." });
+    } else if (error.name === "JsonWebTokenError") {
+      return res.status(401).json({ message: "Invalid token." });
+    } else {
+      return res.status(500).json({
+        message: "An internal error occurred while verifying the token.",
+      });
+    }
+  }
+};

resources/Attendance/AttandanceRoute.js

@@ -6,7 +6,7 @@ import {
   AdmingetAttendanceByUser,
 } from "./AttendanceController.js";
 import { isAuthenticatedSalesCoOrdinator } from "../../middlewares/SalesCoOrdinatorAuth.js";
-// import { isAuthenticatedTerritoryManager } from "../../middlewares/TerritoryManagerAuth.js";
+import { isAuthenticatedTerritoryManager } from "../../middlewares/TerritoryManagerAuth.js";
 import { authorizeRoles, isAuthenticatedUser } from "../../middlewares/auth.js";
 
 const router = express.Router();
@@ -31,7 +31,7 @@ router.post(
 // Route to mark attendance for Territory Managers
 router.post(
   "/markattendance/territorymanager",
-  // isAuthenticatedTerritoryManager,
+  isAuthenticatedTerritoryManager,
   markAttendance
 );
 
@@ -45,7 +45,7 @@ router.get(
 // Route to get attendance for the logged-in territory manager
 router.get(
   "/attendance/territorymanager",
-  // isAuthenticatedTerritoryManager,
+  isAuthenticatedTerritoryManager,
   getAttendanceByUser
 );
 

resources/Attendance/AttendanceController.js

@@ -227,8 +227,7 @@ export const getTodayAttendance = async (req, res) => {
       date: record.records.date,
       time: record.records.time,
       location: record.records.location,
-      reason: record.records.reason,
+      notes: record.records.notes,
-      leaveType: record.records.leaveType,
     }));
 
     // Send response

resources/Leaves/LeaveRoute.js

@@ -6,7 +6,7 @@ import {
   AdmingetLeaveByUser,
 } from "./LeaveController.js";
 import { isAuthenticatedSalesCoOrdinator } from "../../middlewares/SalesCoOrdinatorAuth.js";
-// import { isAuthenticatedTerritoryManager } from "../../middlewares/TerritoryManagerAuth.js";
+import { isAuthenticatedTerritoryManager } from "../../middlewares/TerritoryManagerAuth.js";
 import { authorizeRoles, isAuthenticatedUser } from "../../middlewares/auth.js";
 
 const router = express.Router();
@@ -31,7 +31,7 @@ router.post(
 // Route to mark leave for Territory Managers
 router.post(
   "/markleave/territorymanager",
-  // isAuthenticatedTerritoryManager,
+  isAuthenticatedTerritoryManager,
   markLeave
 );
 
@@ -45,7 +45,7 @@ router.get(
 // Route to get leave for the logged-in territory manager
 router.get(
   "/leave/territorymanager",
-  // isAuthenticatedTerritoryManager,
+  isAuthenticatedTerritoryManager,
   getLeaveByUser
 );
 

resources/SalesCoOrdinators/SalesCoOrdinatorController.js

@@ -4,6 +4,7 @@ import SalesCoOrdinator from "./SalesCoOrdinatorModel.js";
 import sendEmail, { sendOtp } from "../../Utils/sendEmail.js";
 import validator from "validator";
 import password from "secure-random-password";
+import catchAsyncErrors from "../../middlewares/catchAsyncErrors.js";
 
 export const register = async (req, res) => {
   let { name, email, countryCode, mobileNumber } = req.body;
@@ -157,7 +158,18 @@ export const loginSalesCoOrdinator = async (req, res) => {
     });
   }
 };
+// Logout User
+export const logout = catchAsyncErrors(async (req, res, next) => {
+  res.cookie("token", null, {
+    expires: new Date(Date.now()),
+    httpOnly: true,
+  });
 
+  res.status(200).json({
+    success: true,
+    message: "Logged Out",
+  });
+});
 //get All salescoordinator
 export const getAllSalesCoOrdinator = async (req, res) => {
   try {
@@ -286,13 +298,14 @@ export const forgotPassword = async (req, res) => {
 //Update mobile Number
 export const updateMobileNumber = async (req, res) => {
   const { id } = req.params;
+  const userId = id || req.user._id;
   let { newCountryCode, newMobileNumber } = req.body;
   newCountryCode = newCountryCode?.trim();
   newMobileNumber = newMobileNumber?.trim();
   const newFullMobileNumber = `${newCountryCode}${newMobileNumber}`;
 
   try {
-    const salescoordinator = await SalesCoOrdinator.findById(id);
+    const salescoordinator = await SalesCoOrdinator.findById(userId);
     if (!salescoordinator) {
       return res.status(400).json({ message: "SalesCoOrdinator not found" });
     }
@@ -441,14 +454,14 @@ export const deleteSalesCoOrdinator = async (req, res) => {
 export const UpdateProfile = async (req, res) => {
   const { name, email } = req.body;
   const { id } = req.params;
-
+  const userId = id || req.user._id;
   // Validate email
   if (!validator.isEmail(email)) {
     return res.status(400).json({ message: "Invalid email address" });
   }
 
   try {
-    const salesCoordinator = await SalesCoOrdinator.findById(id); // Use the ID from params
+    const salesCoordinator = await SalesCoOrdinator.findById(userId); // Use the ID from params
 
     if (!salesCoordinator) {
       return res.status(404).json({ message: "SalesCoOrdinator not found" });
@@ -461,7 +474,7 @@ export const UpdateProfile = async (req, res) => {
     // Check if email is being changed and already exists
     if (email && email !== salesCoordinator.email) {
       const emailExists = await SalesCoOrdinator.findOne({ email });
-      if (emailExists && emailExists._id.toString() !== id) {
+      if (emailExists && emailExists._id.toString() !== userId) {
         return res.status(400).json({
           message:
             "This Email ID is already in use by another SalesCoOrdinator",
@@ -493,7 +506,8 @@ export const UpdateProfile = async (req, res) => {
 export const ChangePassword = async (req, res) => {
   const { id } = req.params; // Retrieve id from req.params
   const { oldPassword, newPassword, confirmPassword } = req.body;
-
+  const userId = id || req.user._id; // Use the ID from the URL or from the authenticated user
+  // console.log(userId);
   if (!oldPassword) {
     return res.status(400).json({ message: "Please Enter Old password" });
   }
@@ -504,15 +518,15 @@ export const ChangePassword = async (req, res) => {
     return res.status(400).json({ message: "Please Enter Confirm Password" });
   }
   try {
-    const salescoordinator = await SalesCoOrdinator.findById(id).select(
+    const Salescoordinator = await SalesCoOrdinator.findById(userId).select(
       "+password"
     );
 
-    if (!salescoordinator) {
+    if (!Salescoordinator) {
       return res.status(404).json({ message: "SalesCoOrdinator not found" });
     }
 
-    const isPasswordMatched = await salescoordinator.comparePassword(
+    const isPasswordMatched = await Salescoordinator.comparePassword(
       oldPassword
     );
 
@@ -523,11 +537,11 @@ export const ChangePassword = async (req, res) => {
     if (newPassword !== confirmPassword) {
       return res
         .status(400)
-        .json({ message: "New password and confirm Password does not match" });
+        .json({ message: "New password and confirm Password do not match" });
     }
 
-    salescoordinator.password = newPassword;
+    Salescoordinator.password = newPassword;
-    await salescoordinator.save();
+    await Salescoordinator.save();
 
     return res
       .status(200)

resources/SalesCoOrdinators/SalesCoOrdinatorRoute.js

@@ -15,6 +15,7 @@ import {
   getmyProfile,
   ChangePassword,
   getOneSalesCoOrdinator,
+  logout,
 } from "./SalesCoOrdinatorController.js";
 import { isAuthenticatedSalesCoOrdinator } from "../../middlewares/SalesCoOrdinatorAuth.js";
 import { authorizeRoles, isAuthenticatedUser } from "../../middlewares/auth.js";
@@ -22,7 +23,7 @@ import { authorizeRoles, isAuthenticatedUser } from "../../middlewares/auth.js";
 router.post("/register", register);
 router.post("/verify-otp", verifyOtp);
 router.post("/login", loginSalesCoOrdinator);
-
+router.route("/logout").get(logout);
 //admin
 router.get(
   "/getAll",
@@ -46,7 +47,7 @@ router.post(
   updateMobileNumber
 );
 router.post(
-  "/update-mobile-number/:id",
+  "/update-mobile-number",
   isAuthenticatedSalesCoOrdinator,
   updateMobileNumber
 );
@@ -69,7 +70,7 @@ router.patch(
   UpdateProfile
 );
 router.patch(
-  "/profile/update/:id",
+  "/profile/update",
   isAuthenticatedSalesCoOrdinator,
   UpdateProfile
 );
@@ -80,7 +81,7 @@ router.put(
   authorizeRoles("admin"),
   ChangePassword
 );
-router.put("/password/update/:id", isAuthenticatedSalesCoOrdinator, ChangePassword);
+router.put("/password/update", isAuthenticatedSalesCoOrdinator, ChangePassword);
 //delete SalesCoOrdinator
 router.delete(
   "/delete/:id",

resources/TerritoryManagers/TerritoryManagerController.js

@@ -0,0 +1,590 @@
+// import hashPassword from '../utils/hashPassword';
+import crypto from "crypto";
+import TerritoryManager from "./TerritoryManagerModel.js";
+import sendEmail, { sendOtp } from "../../Utils/sendEmail.js";
+import validator from "validator";
+import password from "secure-random-password";
+import catchAsyncErrors from "../../middlewares/catchAsyncErrors.js";
+
+export const register = async (req, res) => {
+  let { name, email, countryCode, mobileNumber } = req.body;
+  countryCode = countryCode?.trim();
+  mobileNumber = mobileNumber?.trim();
+  const fullMobileNumber = `${countryCode}${mobileNumber}`;
+
+  try {
+    let territoryManager = await TerritoryManager.findOne({
+      mobileNumber: fullMobileNumber,
+    });
+
+    if (territoryManager && territoryManager.isVerified) {
+      return res.status(400).json({
+        message:
+          "TerritoryManager already registered and verified for this mobile number.",
+      });
+    }
+    // const otp = crypto.randomInt(100000, 1000000).toString();
+    const otp = "123456";
+    const otpExpires = Date.now() + 1 * 60 * 1000;
+
+    if (territoryManager) {
+      territoryManager.otp = otp;
+      territoryManager.otpExpires = otpExpires;
+    } else {
+      territoryManager = new TerritoryManager({
+        name,
+        email,
+        mobileNumber: fullMobileNumber,
+        otp,
+        otpExpires,
+      });
+    }
+    // Generate uniqueId if not already present
+    if (!territoryManager.uniqueId) {
+      const currentYear = new Date().getFullYear().toString().slice(-2);
+      const randomChars = crypto.randomBytes(4).toString("hex").toUpperCase();
+      territoryManager.uniqueId = `${currentYear}-${randomChars}`;
+    }
+    await territoryManager.save();
+    // await sendOtp(
+    //   fullMobileNumber,
+    //   Your Cheminova verification OTP is: ${otp}
+    // );
+    return res.status(200).json({
+      message: `OTP sent to your mobile number ${fullMobileNumber} successfully`,
+    });
+  } catch (error) {
+    res.status(500).json({
+      message: error.message ? error.message : "Server error!",
+    });
+  }
+};
+
+export const verifyOtp = async (req, res) => {
+  const { fullMobileNumber, otp } = req.body;
+
+  try {
+    let mobileNmr = fullMobileNumber?.trim();
+    const territoryManager = await TerritoryManager.findOne({
+      mobileNumber: mobileNmr,
+    });
+
+    if (!territoryManager) {
+      return res.status(400).json({ message: "Invalid mobile number or OTP" });
+    }
+
+    if (
+      territoryManager.otp !== otp ||
+      territoryManager.otpExpires < Date.now()
+    ) {
+      return res.status(400).json({ message: "Invalid or expired OTP" });
+    }
+    const name = territoryManager.name;
+    const mobile = territoryManager.mobileNumber;
+    territoryManager.isVerified = true;
+    territoryManager.otp = undefined;
+    territoryManager.otpExpires = undefined;
+
+    // Generate a random password
+    const newPassword = password.randomPassword({
+      length: 12,
+      characters: [
+        { characters: password.upper, exactly: 1 },
+        { characters: password.symbols, exactly: 1 },
+        password.lower,
+        password.digits,
+      ],
+    });
+
+    // Save the new password (hashed)
+    territoryManager.password = newPassword;
+    await territoryManager.save();
+
+    // Send email with the new password
+    await sendEmail({
+      to: `${territoryManager?.email}`, // Change to your recipient
+      from: `${process.env.SEND_EMAIL_FROM}`, // Change to your verified sender
+      subject: `Cheminova Account Created`,
+      html: `Your Territory Manager Account is created successfully.
+      <br/>name is: <strong>${name}</strong><br/>
+      <br/>MobileNumber is: <strong>${mobile}</strong><br/>
+      <br/>password is: <strong>${newPassword}</strong><br/><br/>If you have not requested this email, please ignore it.`,
+    });
+
+    const token = territoryManager.getJWTToken();
+    res.status(200).json({
+      success: true,
+      token,
+      message: "Mobile number verified and new password sent successfully",
+    });
+  } catch (error) {
+    res.status(500).json({
+      message: error.message ? error.message : "Server error!",
+    });
+  }
+};
+// Login TerritoryManager
+export const loginTerritoryManager = async (req, res) => {
+  const { email, password } = req.body;
+  // console.log(email, password);
+  try {
+    if (!email || !password) {
+      return res.status(400).json({ message: "Please Enter Email & Password" });
+    }
+
+    const territoryManager = await TerritoryManager.findOne({ email }).select(
+      "+password"
+    );
+
+    if (!territoryManager) {
+      return res.status(400).json({ message: "Invalid Email or Password" });
+    }
+
+    const isPasswordMatched = await territoryManager.comparePassword(password);
+
+    if (!isPasswordMatched) {
+      return res.status(400).json({ message: "Invalid Email or Password" });
+    }
+    const token = territoryManager.getJWTToken();
+
+    return res.status(200).json({
+      success: true,
+      token,
+      message: "Login Successfully",
+    });
+  } catch (error) {
+    return res.status(500).json({
+      message: error.message ? error.message : "Something went wrong!",
+    });
+  }
+};
+// Logout User
+export const logout = catchAsyncErrors(async (req, res, next) => {
+  res.cookie("token", null, {
+    expires: new Date(Date.now()),
+    httpOnly: true,
+  });
+
+  res.status(200).json({
+    success: true,
+    message: "Logged Out",
+  });
+});
+//get All territorymanager
+export const getAllTerritoryManager = async (req, res) => {
+  try {
+    const PAGE_SIZE = parseInt(req.query?.show || "10");
+    const page = parseInt(req.query?.page || "1") - 1;
+    let filter = {};
+    if (req.query?.name) {
+      filter.name = {
+        $regex: new RegExp(req.query.name, "i"),
+      };
+    }
+    if (req.query?.mobileNumber) {
+      filter.mobileNumber = {
+        $regex: new RegExp(req.query.mobileNumber, "i"),
+      };
+    }
+    if (req.query?.isVerified) {
+      filter.isVerified = req.query.isVerified === "true";
+    }
+
+    const total = await TerritoryManager.countDocuments(filter);
+    const salesCoOrinators = await TerritoryManager.find(filter)
+      .limit(PAGE_SIZE)
+      .skip(PAGE_SIZE * page)
+      .sort({ createdAt: -1 });
+
+    return res.status(200).json({
+      success: true,
+      total_data: total,
+      total_pages: Math.ceil(total / PAGE_SIZE),
+      salesCoOrinators,
+    });
+  } catch (error) {
+    res.status(500).json({
+      success: false,
+      message: error.message ? error.message : "Something went wrong!",
+    });
+  }
+};
+
+export const getOneTerritoryManager = async (req, res) => {
+  try {
+    if (!req.params.id) {
+      return res
+        .status(400)
+        .json({ message: "Please provide sales coordinator ID" });
+    }
+    const territoryManager = await TerritoryManager.findById(req.params.id);
+    if (territoryManager) {
+      return res.status(200).json({
+        success: true,
+        message: "Fetched successfully",
+        data: territoryManager,
+      });
+    } else {
+      return res.status(404).json({
+        success: false,
+        message: "Sales coordinator not found",
+      });
+    }
+  } catch (error) {
+    return res.status(500).json({
+      success: false,
+      message: error.message ? error.message : "Something went wrong!",
+    });
+  }
+};
+
+// 4.Forgot Password
+
+export const forgotPassword = async (req, res) => {
+  const territorymanager = await TerritoryManager.findOne({
+    email: req.body.email,
+  });
+  if (!req.body.email) {
+    return res.status(400).json({ message: "please Enter Email!" });
+  }
+  if (!territorymanager) {
+    return res.status(404).json({ message: "TerritoryManager not found" });
+  }
+  // Get ResetPassword Token
+  // const resetToken = territorymanager.getResetPasswordToken(); //call function
+
+  //save database reset token
+  // await territorymanager.save({ validateBeforeSave: false });
+
+  const passwords = password.randomPassword({
+    length: 12,
+    characters: [
+      { characters: password.upper, exactly: 1 },
+      { characters: password.symbols, exactly: 1 },
+      password.lower,
+      password.digits,
+    ],
+  });
+  // console.log(passwords);
+  territorymanager.password = passwords;
+  await territorymanager.save();
+  // const message = `Your password reset token are :- \n\n ${resetPasswordUrl} \n\nyour new password is:${password}\n\nIf you have not requested this email then, please ignore it.`;
+  try {
+    await sendEmail({
+      to: `${territorymanager?.email}`, // Change to your recipient
+
+      from: `${process.env.SEND_EMAIL_FROM}`, // Change to your verified sender
+
+      subject: `Cheminova Password Recovery`,
+      html: `your new password is: <br/> <strong> ${passwords}</strong><br/><br/>If you have not requested this email then, please ignore it.`,
+    });
+
+    res.status(200).json({
+      success: true,
+      message: `Email sent to ${territorymanager?.email} successfully`,
+    });
+  } catch (error) {
+    territorymanager.resetPasswordToken = undefined;
+    territorymanager.resetPasswordExpire = undefined;
+
+    await territorymanager.save({ validateBeforeSave: false });
+
+    return res.status(500).json({
+      message: error.message ? error.message : "Something went wrong!",
+    });
+  }
+};
+
+//Update mobile Number
+export const updateMobileNumber = async (req, res) => {
+  const { id } = req.params;
+  const userId = id || req.user._id;
+  let { newCountryCode, newMobileNumber } = req.body;
+  newCountryCode = newCountryCode?.trim();
+  newMobileNumber = newMobileNumber?.trim();
+  const newFullMobileNumber = `${newCountryCode}${newMobileNumber}`;
+
+  try {
+    const territorymanager = await TerritoryManager.findById(userId);
+    if (!territorymanager) {
+      return res.status(400).json({ message: "TerritoryManager not found" });
+    }
+    if (territorymanager.mobileNumber === newFullMobileNumber) {
+      return res.status(400).json({
+        message:
+          "New mobile number cannot be the same as the old mobile number",
+      });
+    }
+    // Check if the new mobile number already exists in another document
+    const existingTerritoryManager = await TerritoryManager.findOne({
+      mobileNumber: newFullMobileNumber,
+    });
+
+    if (existingTerritoryManager) {
+      return res.status(400).json({
+        message: "Mobile number already registered and verified by someone",
+      });
+    }
+    // const otp = crypto.randomInt(100000, 1000000).toString();
+    const otp = "123456";
+    const otpExpires = Date.now() + 3 * 60 * 1000; // 3 minutes
+
+    territorymanager.newMobileNumber = newFullMobileNumber;
+    territorymanager.otp = otp;
+    territorymanager.otpExpires = otpExpires;
+
+    await territorymanager.save();
+    await sendOtp(
+      newFullMobileNumber,
+      `Your Cheminova verification OTP is: ${otp}`
+    );
+
+    return res.status(200).json({
+      message: `OTP sent to your new mobile number ${newFullMobileNumber} successfully`,
+    });
+  } catch (error) {
+    console.error("Error updating mobile number:", error);
+    return res.status(500).json({
+      message: error.message ? error.message : "Server error!",
+    });
+  }
+};
+
+//verify Updated Number OTP
+export const verifyUpdatedMobileOtp = async (req, res) => {
+  const { newMobileNumber, otp } = req.body;
+  // console.log(newMobileNumber, otp);
+  try {
+    let mobileNmr = newMobileNumber?.trim();
+    const territoryManager = await TerritoryManager.findOne({
+      newMobileNumber: mobileNmr,
+    });
+
+    if (!territoryManager) {
+      return res.status(400).json({ message: "Invalid mobile number or OTP" });
+    }
+
+    if (
+      territoryManager.otp !== otp ||
+      territoryManager.otpExpires < Date.now()
+    ) {
+      return res.status(400).json({ message: "Invalid or expired OTP" });
+    }
+
+    // Update sales coordinator's mobile number and verification status
+    territoryManager.mobileNumber = territoryManager.newMobileNumber;
+    territoryManager.newMobileNumber = undefined;
+    territoryManager.isVerified = true;
+    territoryManager.otp = undefined;
+    territoryManager.otpExpires = undefined;
+
+    // Save changes to the database
+    await territoryManager.save();
+
+    const token = territoryManager.getJWTToken();
+    return res.status(200).json({
+      success: true,
+      token,
+      message: "Mobile number updated and verified successfully",
+    });
+  } catch (error) {
+    console.error("Error verifying mobile OTP:", error);
+    return res.status(500).json({
+      message: error.message ? error.message : "Server error!",
+    });
+  }
+};
+
+//getmyProfile
+export const getmyProfile = async (req, res) => {
+  try {
+    const myData = await TerritoryManager.findById(req.user?._id);
+    if (myData) {
+      return res.status(200).json({
+        success: true,
+        message: "feched!",
+        myData,
+      });
+    }
+  } catch (error) {
+    return res.status(500).json({
+      success: false,
+      message: error.message ? error.message : "Something went wrong!",
+    });
+  }
+};
+
+//
+export const deleteTerritoryManager = async (req, res) => {
+  try {
+    if (!req.params.id) {
+      return res.status(400).json({
+        success: false,
+        message: "Please Provide TerritoryManager ID!",
+      });
+    }
+    const getTerritoryManager = await TerritoryManager.findById(req.params.id);
+    if (!getTerritoryManager) {
+      return res.status(404).json({
+        success: false,
+        message: "territorymanager not Found!",
+      });
+    }
+
+    //-------------------------//
+    const territorymanager = await TerritoryManager.findByIdAndDelete(
+      req.params.id
+    );
+    if (!territorymanager) {
+      return res.status(404).json({ message: "territorymanager Not Found" });
+    }
+    await territorymanager.remove();
+    res.status(200).json({
+      success: true,
+      message: "territorymanager Deleted Successfully!!",
+    });
+  } catch (error) {
+    res.status(500).json({
+      success: false,
+      message: error.message ? error.message : "Something went wrong!",
+    });
+  }
+};
+
+export const UpdateProfile = async (req, res) => {
+  const { name, email } = req.body;
+  const { id } = req.params;
+  // console.log(name, email);
+  const userId = id || req.user._id;
+  // console.log(userId);
+  // Validate email
+  if (!validator.isEmail(email)) {
+    return res.status(400).json({ message: "Invalid email address" });
+  }
+
+  try {
+    const territoryManager = await TerritoryManager.findById(userId); // Use the ID from params
+
+    if (!territoryManager) {
+      return res.status(404).json({ message: "TerritoryManager not found" });
+    }
+
+    if (!territoryManager.isVerified) {
+      return res.status(400).json({ message: "TerritoryManager not verified" });
+    }
+
+    // Check if email is being changed and already exists
+    if (email && email !== territoryManager.email) {
+      const emailExists = await TerritoryManager.findOne({ email });
+      if (emailExists && emailExists._id.toString() !== userId) {
+        return res.status(400).json({
+          message:
+            "This Email ID is already in use by another TerritoryManager",
+        });
+      }
+      territoryManager.email = email;
+    }
+
+    // Update name if provided
+    if (name) {
+      territoryManager.name = name;
+    }
+
+    // Save the updated territoryManager
+    await territoryManager.save();
+
+    return res.status(200).json({
+      territoryManager,
+      message: "Profile updated successfully",
+    });
+  } catch (error) {
+    res.status(500).json({
+      message: error.message ? error.message : "Server error!",
+    });
+  }
+};
+
+//change TerritoryManager password
+export const ChangePassword = async (req, res) => {
+  const { id } = req.params; // Retrieve id from req.params
+  const { oldPassword, newPassword, confirmPassword } = req.body;
+  const userId = id || req.user._id; // Use the ID from the URL or from the authenticated user
+
+  if (!oldPassword) {
+    return res.status(400).json({ message: "Please Enter Old password" });
+  }
+  if (!newPassword) {
+    return res.status(400).json({ message: "Please Enter New Password " });
+  }
+  if (!confirmPassword) {
+    return res.status(400).json({ message: "Please Enter Confirm Password" });
+  }
+  try {
+    const territorymanager = await TerritoryManager.findById(userId).select(
+      "+password"
+    );
+
+    if (!territorymanager) {
+      return res.status(404).json({ message: "TerritoryManager not found" });
+    }
+
+    const isPasswordMatched = await territorymanager.comparePassword(
+      oldPassword
+    );
+
+    if (!isPasswordMatched) {
+      return res.status(400).json({ message: "Old password is incorrect" });
+    }
+
+    if (newPassword !== confirmPassword) {
+      return res
+        .status(400)
+        .json({ message: "New password and confirm Password do not match" });
+    }
+
+    territorymanager.password = newPassword;
+    await territorymanager.save();
+
+    return res
+      .status(200)
+      .json({ success: true, message: "Password updated successfully" });
+  } catch (error) {
+    console.error("Error updating password:", error);
+    return res.status(500).json({
+      message: error.message ? error.message : "Server error!",
+    });
+  }
+};
+
+export const Otp = async (req, res) => {
+  // const { name, mobileNumber } = req.body;
+  try {
+    // let territorymanager = await TerritoryManager.findOne({ mobileNumber });
+
+    // if (territorymanager && territorymanager.isVerified) {
+    //   return res.status(400).json({ message: 'TerritoryManager already registered and verified for This Mobile No.' });
+    // }
+
+    //      const otp = crypto.randomInt(100000, 1000000).toString();
+
+    //     // const otp ="123456";
+
+    // const otpExpires = Date.now() + 10 * 60 * 1000; // 10 minutes
+
+    // if (territorymanager) {
+    //   territorymanager.otp = otp;
+    //   territorymanager.otpExpires = otpExpires;
+    // } else {
+    //   territorymanager = new TerritoryManager({ name, mobileNumber, otp, otpExpires });
+    // }
+
+    // await territorymanager.save();
+    await sendOtp();
+
+    // res.status(200).json({territorymanager, message: `OTP  ${otp} sent to your  mobile number successfully` });
+  } catch (error) {
+    res.status(500).json({
+      message: error.message ? error.message : "Server error!",
+    });
+  }
+};

resources/TerritoryManagers/TerritoryManagerModel.js

@@ -0,0 +1,100 @@
+import dotenv from "dotenv";
+dotenv.config();
+import mongoose from "mongoose";
+import validator from "validator";
+import bcrypt from "bcryptjs";
+import jwt from "jsonwebtoken";
+import crypto from "crypto";
+
+const territorymanagerSchema = new mongoose.Schema(
+  {
+    name: {
+      type: String,
+      required: true,
+    },
+    mobileNumber: {
+      type: String,
+      required: true,
+      unique: true,
+    },
+    otp: {
+      type: String,
+      required: false,
+    },
+    otpExpires: {
+      type: Date,
+    },
+    isVerified: {
+      type: Boolean,
+      default: false,
+    },
+    email: {
+      type: String,
+      required: false,
+      unique: true,
+      validate: [validator.isEmail, "Please enter a valid Email"],
+    },
+    password: {
+      type: String,
+      minLength: [6, "Password should be greater than 6 characters"],
+      select: false,
+    },
+    newMobileNumber: { type: String },
+    resetPasswordToken: String,
+    resetPasswordExpire: Date,
+    uniqueId: {
+      type: String,
+      unique: true,
+      required: true,
+    },
+  },
+  { timestamps: true }
+);
+
+territorymanagerSchema.pre("save", async function (next) {
+  if (!this.isModified("password")) {
+    next();
+  }
+
+  this.password = await bcrypt.hash(this.password, 10);
+});
+
+territorymanagerSchema.pre("save", function (next) {
+  if (!this.uniqueId) {
+    const currentYear = new Date().getFullYear().toString().slice(-2);
+    const randomChars = crypto.randomBytes(4).toString("hex").toUpperCase();
+    this.uniqueId = `${currentYear}-${randomChars}`;
+  }
+  next();
+});
+
+// JWT TOKEN
+territorymanagerSchema.methods.getJWTToken = function () {
+  return jwt.sign({ id: this._id }, process.env.JWT_SECRET);
+};
+
+// Compare Password
+territorymanagerSchema.methods.comparePassword = async function (password) {
+  return await bcrypt.compare(password, this.password);
+};
+
+// Generating Reset Token
+territorymanagerSchema.methods.getResetPasswordToken = function () {
+  const resetToken = crypto.randomBytes(20).toString("hex");
+
+  this.resetPasswordToken = crypto
+    .createHash("sha256")
+    .update(resetToken)
+    .digest("hex");
+
+  this.resetPasswordExpire = Date.now() + 15 * 60 * 1000; // 15 minutes
+
+  return resetToken;
+};
+
+const TerritoryManager = mongoose.model(
+  "TerritoryManager",
+  territorymanagerSchema
+);
+
+export default TerritoryManager;

resources/TerritoryManagers/TerritoryManagerRoute.js

@@ -0,0 +1,100 @@
+import express from "express";
+
+const router = express.Router();
+import {
+  Otp,
+  deleteTerritoryManager,
+  forgotPassword,
+  getAllTerritoryManager,
+  loginTerritoryManager,
+  register,
+  updateMobileNumber,
+  verifyUpdatedMobileOtp,
+  verifyOtp,
+  UpdateProfile,
+  getmyProfile,
+  ChangePassword,
+  getOneTerritoryManager,
+  logout,
+} from "./TerritoryManagerController.js";
+import { isAuthenticatedTerritoryManager } from "../../middlewares/TerritoryManagerAuth.js";
+import { authorizeRoles, isAuthenticatedUser } from "../../middlewares/auth.js";
+
+router.post("/register", register);
+router.post("/verify-otp", verifyOtp);
+router.post("/login", loginTerritoryManager);
+router.route("/logout").get(logout);
+//admin
+router.get(
+  "/getAll",
+  isAuthenticatedUser,
+  authorizeRoles("admin"),
+  getAllTerritoryManager
+);
+router.get(
+  "/getOne/:id",
+  isAuthenticatedUser,
+  authorizeRoles("admin"),
+  getOneTerritoryManager
+);
+router.get("/my-profile", isAuthenticatedTerritoryManager, getmyProfile);
+
+//Update Mobile Number
+router.post(
+  "/update-mobile-number/:id",
+  isAuthenticatedUser,
+  authorizeRoles("admin"),
+  updateMobileNumber
+);
+router.post(
+  "/update-mobile-number",
+  isAuthenticatedTerritoryManager,
+  updateMobileNumber
+);
+router.post(
+  "/verify-updated-mobile-otp",
+  isAuthenticatedUser,
+  authorizeRoles("admin"),
+  verifyUpdatedMobileOtp
+);
+router.post(
+  "/verify-updated-mobilenumber-otp",
+  isAuthenticatedTerritoryManager,
+  verifyUpdatedMobileOtp
+);
+router.post("/forgot-password", forgotPassword);
+router.patch(
+  "/profile/update/:id",
+  isAuthenticatedUser,
+  authorizeRoles("admin"),
+  UpdateProfile
+);
+router.patch(
+  "/profile/update",
+  isAuthenticatedTerritoryManager,
+  UpdateProfile
+);
+//change password
+router.put(
+  "/password/update/:id",
+  isAuthenticatedUser,
+  authorizeRoles("admin"),
+  ChangePassword
+);
+
+router.put(
+  "/password/update",
+  isAuthenticatedTerritoryManager,
+  ChangePassword
+);
+//delete TerritoryManager
+router.delete(
+  "/delete/:id",
+  isAuthenticatedUser,
+  authorizeRoles("admin"),
+  deleteTerritoryManager
+);
+
+router.get("/otp", Otp);
+
+export default router;