fix: add JWT middleware to private API routes

backend/src/controllers/appointment.controller.js

@@ -71,98 +71,19 @@ export const createAppointment = async (req, res) => {
 
 export const getAppointments = async (req, res) => {
 	try {
-		const page = parseInt(req.query.page);
-		const limit = parseInt(req.query.limit);
-
-		const search = req.query.search || "";
-		const doctor = req.query.doctor || "";
-		const department = req.query.department || "";
-		const date = req.query.date || "";
-
-		if (!page && !limit) {
 		const appointments = await prisma.appointment.findMany({
 			include: {
 				doctor: true,
 				department: true,
 			},
-				orderBy: { createdAt: "desc" },
+			orderBy: {
+				createdAt: "desc",
+			},
 		});
 
-			return res.status(200).json({
+		res.status(200).json({
 			success: true,
 			data: appointments,
-				meta: null,
-			});
-		}
-
-		const currentPage = page || 1;
-		const currentLimit = limit || 10;
-		const skip = (currentPage - 1) * currentLimit;
-
-		const where = {
-			AND: [
-				search
-					? {
-							OR: [
-								{ name: { contains: search, mode: "insensitive" } },
-								{ mobileNumber: { contains: search } },
-								{ email: { contains: search, mode: "insensitive" } },
-							],
-						}
-					: {},
-
-				doctor
-					? {
-							doctor: {
-								name: { contains: doctor, mode: "insensitive" },
-							},
-						}
-					: {},
-
-				department
-					? {
-							department: {
-								name: { contains: department, mode: "insensitive" },
-							},
-						}
-					: {},
-
-				date
-					? {
-							date: {
-								gte: new Date(date),
-								lt: new Date(
-									new Date(date).setDate(new Date(date).getDate() + 1),
-								),
-							},
-						}
-					: {},
-			],
-		};
-
-		const [appointments, total] = await Promise.all([
-			prisma.appointment.findMany({
-				where,
-				include: {
-					doctor: true,
-					department: true,
-				},
-				orderBy: { createdAt: "desc" },
-				skip,
-				take: currentLimit,
-			}),
-			prisma.appointment.count({ where }),
-		]);
-
-		return res.status(200).json({
-			success: true,
-			data: appointments,
-			meta: {
-				total,
-				page: currentPage,
-				limit: currentLimit,
-				totalPages: Math.ceil(total / currentLimit),
-			},
 		});
 	} catch (error) {
 		console.error(error);

backend/src/controllers/department.controller.js

@@ -29,6 +29,53 @@ export const getAllDepartments = async (req, res) => {
 	}
 };
 
+export const getDepartmentByName = async (req, res) => {
+	try {
+		const {name} = req.query;
+
+		if (!name) {
+			return res.status(400).json({
+				success: false,
+				message: "Department name is required",
+			});
+		}
+
+		const department = await prisma.department.findFirst({
+			where: {
+				name: name,
+			},
+		});
+
+		if (!department) {
+			return res.status(404).json({
+				success: false,
+				message: "Department not found",
+			});
+		}
+
+		const response = {
+			departmentId: department.departmentId,
+			name: department.name,
+			para1: department.para1 ?? "",
+			para2: department.para2 ?? "",
+			para3: department.para3 ?? "",
+			facilities: department.facilities ?? "",
+			services: department.services ?? "",
+		};
+
+		return res.status(200).json({
+			success: true,
+			data: [response],
+		});
+	} catch (error) {
+		console.error(error);
+		return res.status(500).json({
+			success: false,
+			message: "Failed to fetch department",
+		});
+	}
+};
+
 export async function createDepartment(req, res) {
 	try {
 		const {departmentId, name, para1, para2, para3, facilities, services} =

backend/src/controllers/doctor.controller.js

@@ -16,8 +16,7 @@ export const getAllDoctors = async (req, res) => {
 			orderBy: {name: "asc"},
 		});
 
-		const formatted = doctors.map((doc, index) => {
+		const formatted = doctors.map((doc, index) => ({
-			return {
 			SL_NO: String(index + 1),
 			doctorId: doc.doctorId,
 			name: doc.name,
@@ -42,12 +41,10 @@ export const getAllDoctors = async (req, res) => {
 				return {
 					departmentId: d.department.departmentId,
 					departmentName: d.department.name,
-
 					timing: timingArray.join(" & "),
 				};
 			}),
-			};
+		}));
-		});
 
 		res.status(200).json({
 			success: true,
@@ -113,6 +110,54 @@ export const getDoctorByDoctorId = async (req, res) => {
 	}
 };
 
+// get doctors by department
+export const getDoctorsByDepartmentId = async (req, res) => {
+	try {
+		const {Department_ID} = req.query;
+
+		if (!Department_ID) {
+			return res.status(400).json({
+				success: false,
+				message: "Department_ID is required",
+			});
+		}
+
+		const department = await prisma.department.findUnique({
+			where: {departmentId: Department_ID},
+		});
+
+		if (!department) {
+			return res.status(404).json({
+				success: false,
+				message: "Department not found",
+			});
+		}
+
+		const doctors = await prisma.doctorDepartment.findMany({
+			where: {departmentId: department.id},
+			include: {
+				doctor: true,
+			},
+		});
+
+		const result = doctors.map((d) => ({
+			GG_ID: d.doctor.doctorId,
+			Name: d.doctor.name,
+		}));
+
+		res.status(200).json({
+			success: true,
+			data: result,
+		});
+	} catch (error) {
+		console.error(error);
+		res.status(500).json({
+			success: false,
+			message: "Failed to fetch doctors",
+		});
+	}
+};
+
 // add doctors
 export const createDoctor = async (req, res) => {
 	try {
@@ -184,20 +229,14 @@ export const updateDoctor = async (req, res) => {
 		});
 
 		if (!doctor) {
-			return res.status(404).json({
+			return res
-				success: false,
+				.status(404)
-				message: "Doctor not found",
+				.json({success: false, message: "Doctor not found"});
-			});
 		}
 
 		await prisma.doctor.update({
 			where: {id: doctor.id},
-			data: {
+			data: {name, designation, workingStatus, qualification},
-				name,
-				designation,
-				workingStatus,
-				qualification,
-			},
 		});
 
 		const oldRelations = await prisma.doctorDepartment.findMany({
@@ -229,25 +268,24 @@ export const updateDoctor = async (req, res) => {
 			});
 
 			if (dep.timing) {
+				const {id, doctorDepartmentId, createdAt, updatedAt, ...cleanTiming} =
+					dep.timing;
+
 				await prisma.doctorTiming.create({
 					data: {
 						doctorDepartmentId: doctorDepartment.id,
-						...dep.timing,
+						...cleanTiming,
 					},
 				});
 			}
 		}
 
-		res.status(200).json({
+		res
-			success: true,
+			.status(200)
-			message: "Doctor updated successfully",
+			.json({success: true, message: "Doctor updated successfully"});
-		});
 	} catch (error) {
-		console.error(error);
+		console.error("Update Error:", error);
-		res.status(500).json({
+		res.status(500).json({success: false, message: "Failed to update doctor"});
-			success: false,
-			message: "Failed to update doctor",
-		});
 	}
 };
 //delete doctor
@@ -256,13 +294,6 @@ export const deleteDoctor = async (req, res) => {
 	try {
 		const {doctorId} = req.params;
 
-		if (!doctorId) {
-			return res.status(400).json({
-				success: false,
-				message: "Doctor ID is required",
-			});
-		}
-
 		const doctor = await prisma.doctor.findUnique({
 			where: {doctorId},
 		});
@@ -270,7 +301,7 @@ export const deleteDoctor = async (req, res) => {
 		if (!doctor) {
 			return res.status(404).json({
 				success: false,
-				message: `Doctor with ID ${doctorId} not found`,
+				message: "Doctor not found",
 			});
 		}
 
@@ -294,7 +325,7 @@ export const deleteDoctor = async (req, res) => {
 
 		res.status(200).json({
 			success: true,
-			message: `Doctor ${doctorId} deleted successfully`,
+			message: "Doctor deleted successfully",
 		});
 	} catch (error) {
 		console.error(error);
@@ -320,23 +351,19 @@ export const getDoctorTimings = async (req, res) => {
 		});
 
 		const result = doctors.map((doc) => {
-			let timing = {};
+			const timing = doc.departments[0]?.timing || {};
-
-			if (doc.departments.length > 0) {
-				timing = doc.departments[0].timing ?? {};
-			}
 
 			return {
 				Doctor_ID: doc.doctorId,
 				Doctor: doc.name,
-				Monday: timing?.monday ?? "",
+				Monday: timing.monday || "",
-				Tuesday: timing?.tuesday ?? "",
+				Tuesday: timing.tuesday || "",
-				Wednesday: timing?.wednesday ?? "",
+				Wednesday: timing.wednesday || "",
-				Thursday: timing?.thursday ?? "",
+				Thursday: timing.thursday || "",
-				Friday: timing?.friday ?? "",
+				Friday: timing.friday || "",
-				Saturday: timing?.saturday ?? "",
+				Saturday: timing.saturday || "",
-				Sunday: timing?.sunday ?? "",
+				Sunday: timing.sunday || "",
-				Additional: timing?.additional ?? "",
+				Additional: timing.additional || "",
 			};
 		});
 
@@ -380,26 +407,11 @@ export const getDoctorTimingById = async (req, res) => {
 		const result = {
 			doctorId: doctor.doctorId,
 			doctorName: doctor.name,
-
+			departments: doctor.departments.map((d) => ({
-			departments: doctor.departments.map((d) => {
-				const t = d.timing || {};
-
-				return {
 				departmentId: d.department.departmentId,
 				departmentName: d.department.name,
-
+				timing: d.timing || {},
-					timing: {
+			})),
-						monday: t.monday || "",
-						tuesday: t.tuesday || "",
-						wednesday: t.wednesday || "",
-						thursday: t.thursday || "",
-						friday: t.friday || "",
-						saturday: t.saturday || "",
-						sunday: t.sunday || "",
-						additional: t.additional || "",
-					},
-				};
-			}),
 		};
 
 		res.status(200).json({

backend/src/routes/academicsResearch.routes.js

@@ -11,8 +11,8 @@ import jwtAuthMiddleware from "../middleware/auth.js";
 const router = express.Router();
 
 router.post("/", createAcademicsResearch);
-router.get("/getAll", getAcademicsResearch);
+router.get("/getAll", jwtAuthMiddleware, getAcademicsResearch);
-router.get("/:id", getSingleAcademicsResearch);
+router.get("/:id", jwtAuthMiddleware, getSingleAcademicsResearch);
 router.delete("/:id", jwtAuthMiddleware, deleteAcademicsResearch);
 
 export default router;

backend/src/routes/appointment.routes.js

@@ -13,11 +13,11 @@ const router = express.Router();
 
 /* PUBLIC */
 
-router.get("/getall", getAppointments);
+router.get("/getall", jwtAuthMiddleware, getAppointments);
 router.post("/", createAppointment);
 
-router.get("/:id", getAppointment);
+router.get("/:id", jwtAuthMiddleware, getAppointment);
-router.patch("/:id", updateAppointment);
+router.patch("/:id", jwtAuthMiddleware, updateAppointment);
 router.delete("/:id", jwtAuthMiddleware, deleteAppointment);
 
 export default router;

backend/src/routes/candidate.routes.js

@@ -13,13 +13,13 @@ import jwtAuthMiddleware from "../middleware/auth.js";
 const router = express.Router();
 
 /* PUBLIC */
-
-router.get("/getAll", getCandidates);
-router.get("/:id", getCandidate);
-router.get("/career/:careerId", getCandidatesByCareer);
-
 router.post("/", createCandidate);
-router.patch("/:id", updateCandidate);
+
+router.get("/getAll", jwtAuthMiddleware, getCandidates);
+router.get("/:id", jwtAuthMiddleware, getCandidate);
+router.get("/career/:careerId", jwtAuthMiddleware, getCandidatesByCareer);
+
+router.patch("/:id", jwtAuthMiddleware, updateCandidate);
 router.delete("/:id", jwtAuthMiddleware, deleteCandidate);
 
 export default router;

backend/src/routes/career.routes.js

@@ -10,8 +10,8 @@ const router = express.Router();
 
 router.get("/getAll", getAllCareers);
 
-router.post("/", createCareer);
+router.post("/", jwtAuthMiddleware, createCareer);
-router.patch("/:id", updateCareer);
+router.patch("/:id", jwtAuthMiddleware, updateCareer);
-router.delete("/:id", deleteCareer);
+router.delete("/:id", jwtAuthMiddleware, deleteCareer);
 
 export default router;

backend/src/routes/department.routes.js

@@ -1,6 +1,7 @@
 import express from "express";
 import {
 	getAllDepartments,
+	getDepartmentByName,
 	createDepartment,
 	updateDepartment,
 	deleteDepartment,
@@ -11,6 +12,7 @@ const router = express.Router();
 
 // Public
 router.get("/getAll", getAllDepartments);
+router.get("/search", getDepartmentByName);
 
 // Protected
 router.post("/", jwtAuthMiddleware, createDepartment);

backend/src/routes/doctor.routes.js

@@ -7,6 +7,7 @@ import {
 	getDoctorTimings,
 	getDoctorTimingById,
 	getDoctorByDoctorId,
+	getDoctorsByDepartmentId,
 } from "../controllers/doctor.controller.js";
 
 import jwtAuthMiddleware from "../middleware/auth.js";
@@ -14,9 +15,10 @@ import jwtAuthMiddleware from "../middleware/auth.js";
 const router = express.Router();
 
 router.get("/getAll", getAllDoctors);
-router.get("/:doctorId", getDoctorByDoctorId);
+router.get("/search", getDoctorsByDepartmentId);
 router.get("/getTimings", getDoctorTimings);
 router.get("/getTimings/:doctorId", getDoctorTimingById);
+router.get("/:doctorId", getDoctorByDoctorId);
 
 router.post("/", jwtAuthMiddleware, createDoctor);
 router.patch("/:doctorId", jwtAuthMiddleware, updateDoctor);

backend/src/routes/inquiry.routes.js

@@ -12,8 +12,8 @@ const router = express.Router();
 
 router.post("/", createInquiry);
 
-router.get("/getAll", getInquiries);
+router.get("/getAll", jwtAuthMiddleware, getInquiries);
-router.get("/:id", getInquiry);
+router.get("/:id", jwtAuthMiddleware, getInquiry);
 router.delete("/:id", jwtAuthMiddleware, deleteInquiry);
 
 export default router;

frontend/src/api/appointment.ts

@@ -1,22 +1,7 @@
 import apiClient from "@/api/client";
 
-export const getAppointmentsApi = async (
+export const getAppointmentsApi = async () => {
-	page?: number,
+	const res = await apiClient.get("/appointments/getall");
-	limit?: number,
-	search?: string,
-	doctor?: string,
-	department?: string,
-	date?: string,
-) => {
-	let url = "/appointments/getAll";
-
-	if (page && limit) {
-		url += `?page=${page}&limit=${limit}&search=${search || ""}&doctor=${
-			doctor || ""
-		}&department=${department || ""}&date=${date || ""}`;
-	}
-
-	const res = await apiClient.get(url);
 	return res.data;
 };
 

frontend/src/pages/Appointment.tsx

@@ -13,17 +13,11 @@ import {
 } from "@/components/ui/table";
 
 import {Card, CardContent, CardHeader, CardTitle} from "@/components/ui/card";
+
 import {Button} from "@/components/ui/button";
 import {Input} from "@/components/ui/input";
 
-import {
+import {Loader2, Trash, RefreshCw, Download} from "lucide-react";
-	Loader2,
-	Trash,
-	RefreshCw,
-	Download,
-	ChevronLeft,
-	ChevronRight,
-} from "lucide-react";
 
 export default function AppointmentPage() {
 	const [appointments, setAppointments] = useState<any[]>([]);
@@ -34,65 +28,30 @@ export default function AppointmentPage() {
 	const [filterDepartment, setFilterDepartment] = useState("");
 	const [filterDate, setFilterDate] = useState("");
 
-	const [currentPage, setCurrentPage] = useState(1);
-	const [itemsPerPage, setItemsPerPage] = useState(10);
-
-	const [meta, setMeta] = useState<any>({});
-
 	const fetchAll = useCallback(async () => {
 		setLoading(true);
 		try {
-			const res = await getAppointmentsApi(
+			const res = await getAppointmentsApi();
-				currentPage,
-				itemsPerPage,
-				searchText,
-				filterDoctor,
-				filterDepartment,
-				filterDate,
-			);
-
 			setAppointments(res?.data || []);
-			setMeta(res?.meta || {});
 		} catch (err) {
 			console.error(err);
 		} finally {
 			setLoading(false);
 		}
-	}, [
+	}, []);
-		currentPage,
-		itemsPerPage,
-		searchText,
-		filterDoctor,
-		filterDepartment,
-		filterDate,
-	]);
 
 	useEffect(() => {
 		fetchAll();
 	}, [fetchAll]);
 
-	async function handleDelete(id: number) {
+	const filteredAppointments = appointments.filter((item) => {
-		if (!confirm("Delete appointment?")) return;
-		await deleteAppointmentApi(id);
-		fetchAll();
-	}
-
-	const handleExport = async () => {
-		try {
-			const res = await getAppointmentsApi();
-
-			let data = res?.data || [];
-
-			data = data.filter((item: any) => {
 		const matchesSearch =
 			item.name?.toLowerCase().includes(searchText.toLowerCase()) ||
 			item.mobileNumber?.includes(searchText) ||
 			item.email?.toLowerCase().includes(searchText.toLowerCase());
 
 		const matchesDoctor = filterDoctor
-					? item.doctor?.name
+			? item.doctor?.name?.toLowerCase().includes(filterDoctor.toLowerCase())
-							?.toLowerCase()
-							.includes(filterDoctor.toLowerCase())
 			: true;
 
 		const matchesDepartment = filterDepartment
@@ -105,12 +64,17 @@ export default function AppointmentPage() {
 			? new Date(item.date).toISOString().split("T")[0] === filterDate
 			: true;
 
-				return (
+		return matchesSearch && matchesDoctor && matchesDepartment && matchesDate;
-					matchesSearch && matchesDoctor && matchesDepartment && matchesDate
-				);
 	});
 
-			const exportData = data.map((item: any) => ({
+	async function handleDelete(id: number) {
+		if (!confirm("Delete appointment?")) return;
+		await deleteAppointmentApi(id);
+		fetchAll();
+	}
+
+	const handleExport = () => {
+		const exportData = filteredAppointments.map((item) => ({
 			ID: item.id,
 			Name: item.name,
 			Phone: item.mobileNumber,
@@ -122,65 +86,48 @@ export default function AppointmentPage() {
 		}));
 
 		exportToExcel(exportData, "appointments");
-		} catch (err) {
-			console.error(err);
-		}
 	};
 
 	return (
 		<div className="p-6 space-y-6">
-			<div className="flex justify-between items-center flex-wrap gap-3">
+			<div className="flex justify-between items-center gap-3 flex-wrap">
 				<h1 className="text-2xl font-bold">Appointments</h1>
 
-				<div className="flex flex-wrap gap-2 items-center">
+				<div className="flex flex-wrap gap-2">
 					<Input
-						placeholder="Search..."
+						placeholder="Search name / phone / email..."
 						value={searchText}
-						onChange={(e) => {
+						onChange={(e) => setSearchText(e.target.value)}
-							setSearchText(e.target.value);
+						className="w-[220px]"
-							setCurrentPage(1);
-						}}
-						className="w-[200px]"
 					/>
 
 					<Input
-						placeholder="Doctor"
+						placeholder="Filter Doctor"
 						value={filterDoctor}
 						onChange={(e) => setFilterDoctor(e.target.value)}
-						className="w-[160px]"
+						className="w-[180px]"
 					/>
 
 					<Input
-						placeholder="Department"
+						placeholder="Filter Department"
 						value={filterDepartment}
 						onChange={(e) => setFilterDepartment(e.target.value)}
-						className="w-[160px]"
+						className="w-[200px]"
 					/>
 
 					<Input
 						type="date"
 						value={filterDate}
 						onChange={(e) => setFilterDate(e.target.value)}
-						className="w-[160px]"
+						className="w-[180px]"
 					/>
 
-					<select
+					<Button variant="outline" onClick={fetchAll} disabled={loading}>
-						value={itemsPerPage}
-						onChange={(e) => {
-							setItemsPerPage(Number(e.target.value));
-							setCurrentPage(1);
-						}}
-						className="border px-2 py-1 rounded">
-						<option value={5}>5</option>
-						<option value={10}>10</option>
-						<option value={20}>20</option>
-					</select>
-
-					<Button onClick={fetchAll}>
 						<RefreshCw className="mr-2 h-4 w-4" />
+						Refresh
 					</Button>
 
-					<Button onClick={handleExport}>
+					<Button variant="outline" onClick={handleExport}>
 						<Download className="mr-2 h-4 w-4" />
 						Export
 					</Button>
@@ -193,15 +140,20 @@ export default function AppointmentPage() {
 				</CardHeader>
 
 				<CardContent>
-					<Table>
+					<div className="overflow-x-auto">
+						<Table className="min-w-[700px]">
 							<TableHeader>
 								<TableRow>
 									<TableHead>ID</TableHead>
 									<TableHead>Name</TableHead>
 									<TableHead>Phone</TableHead>
+									<TableHead>Email</TableHead>
 									<TableHead>Doctor</TableHead>
 									<TableHead>Department</TableHead>
-								<TableHead>Date</TableHead>
+									<TableHead>Appointment Date</TableHead>
+									<TableHead>Message</TableHead>
+									<TableHead>Generated on</TableHead>
+
 									<TableHead>Actions</TableHead>
 								</TableRow>
 							</TableHeader>
@@ -209,34 +161,45 @@ export default function AppointmentPage() {
 							<TableBody>
 								{loading ? (
 									<TableRow>
-									<TableCell colSpan={7} className="text-center">
+										<TableCell colSpan={9} className="text-center">
-										<Loader2 className="animate-spin mx-auto" />
+											<Loader2 className="h-6 w-6 animate-spin mx-auto" />
 										</TableCell>
 									</TableRow>
-							) : appointments.length === 0 ? (
+								) : filteredAppointments.length === 0 ? (
 									<TableRow>
-									<TableCell
+										<TableCell colSpan={9} className="text-center">
-										colSpan={7}
-										className="text-center py-6 text-gray-500">
 											No appointments found
 										</TableCell>
 									</TableRow>
 								) : (
-								appointments.map((item) => (
+									filteredAppointments.map((item) => (
 										<TableRow key={item.id}>
 											<TableCell>{item.id}</TableCell>
 											<TableCell>{item.name}</TableCell>
 											<TableCell>{item.mobileNumber}</TableCell>
+											<TableCell>{item.email}</TableCell>
 											<TableCell>{item.doctor?.name}</TableCell>
 											<TableCell>{item.department?.name}</TableCell>
+
+											{/* ✅ DATE ONLY */}
 											<TableCell>
 												{new Date(item.date).toLocaleDateString()}
 											</TableCell>
+
+											<TableCell className="max-w-[250px] whitespace-normal">
+												{item.message}
+											</TableCell>
+											<TableCell>
+												{" "}
+												{new Date(item.createdAt).toLocaleDateString()}
+											</TableCell>
+
 											<TableCell>
 												<Button
 													size="sm"
 													variant="destructive"
-												onClick={() => handleDelete(item.id)}>
+													onClick={() => handleDelete(item.id)}
+												>
 													<Trash className="h-4 w-4" />
 												</Button>
 											</TableCell>
@@ -245,25 +208,6 @@ export default function AppointmentPage() {
 								)}
 							</TableBody>
 						</Table>
-
-					<div className="flex justify-between mt-4">
-						<p>
-							Page {meta.page || 1} of {meta.totalPages || 1}
-						</p>
-
-						<div className="flex gap-2">
-							<Button
-								disabled={currentPage === 1}
-								onClick={() => setCurrentPage((p) => p - 1)}>
-								<ChevronLeft />
-							</Button>
-
-							<Button
-								disabled={currentPage === meta.totalPages}
-								onClick={() => setCurrentPage((p) => p + 1)}>
-								<ChevronRight />
-							</Button>
-						</div>
 					</div>
 				</CardContent>
 			</Card>