feat(share-links): Build Share Link Management Service #191

[fastcharger2000]

Overview

This PR adds a Share Link Management Service for Codely: secure token generation, configurable expiration, create/list/revoke/validate APIs, and audit logging — without exposing snippet content.

Related Issue

Closes #191

Changes

🔗 Share Link Management

• [ADD] lib/share-link-management.service.ts

  • Cryptographically secure 256-bit hex tokens (crypto.randomBytes).
  • Create links with optional expiresAt and visibility (read-only | read-write).
  • List active links only (expired/revoked excluded).
  • Revoke by id (immediate invalidation).
  • Validate by token with active / expired / revoked status.
  • In-memory audit log + durable logEvent hooks for create/revoke/validate.

• [ADD] app/api/share-links/route.ts

  • POST /api/share-links — create share link.
  • GET /api/share-links?snippetId= — list active links.

• [ADD] app/api/share-links/[id]/route.ts

  • DELETE /api/share-links/:id — revoke link.

• [ADD] app/api/share-links/[id]/validate/route.ts

  • GET /api/share-links/:token/validate — validate active link (metadata only).

• [ADD] lib/share-link-management.service.test.ts

  • Coverage for unique tokens, expiry enforcement, revoke-immediate-invalid, active-only listing, and audit events.

Verification Results

Expected: npx jest lib/share-link-management.service.test.ts
✅ Tokens unique / 64-char hex
✅ Expired links invalidated
✅ Revoked links fail validation immediately
✅ Listing excludes expired/revoked
✅ Responses contain metadata only (no snippet content)

Acceptance Criteria	Status
Tokens are unique and secure	✅ 256-bit hex via crypto.randomBytes
Expiration enforced	✅ Expired links fail validate + excluded from list
APIs return consistent JSON schema	✅ { success, data } across endpoints
Revoked links are immediately invalid	✅ validate returns reason=revoked
Listing shows only active links	✅ expired/revoked filtered out
No sensitive snippet content exposed	✅ metadata/status only

[drips-wave]

@fastcharger2000 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[vercel]

@fastcharger2000 is attempting to deploy a commit to the Sudipta 's projects Team on Vercel.

A member of the Team first needs to authorize it.