feat: Implement Phase 2 cross-cutting services with email and notification enhancements

- Refactor email verification and password reset utilities to use new email service.
- Introduce email delivery queue and notification delivery model for better tracking.
- Enhance file validation and storage services for improved security and ownership management.
- Add cron job for cleaning inactive notifications with retention policy.
- Update document worker to handle document generation and storage more efficiently.
- Implement logging improvements in activity and log workers.
- Create comprehensive documentation for new API endpoints and services.
- Add unit tests for file validation and notification policies to ensure robustness.

app/controllers/profile.controller.js

@@ -28,20 +28,21 @@ const { log } = require("../utils/consoleLog.utill");
 // Get Profile avatar by user ID
 exports.getProfileAvatar = async (req, res) => {
   try {
-    const userId = req.params.userId;
+    const userId = req.params.userId || req.user.id;
     const profile = await Profile.findOne({ where: { user_id: userId } });
     if (!profile) {
       return res.status(404).json({ error: "Profile not found" });
     }
 
     const uploadRecord = await Upload.findByPk(profile.profilePicture_id);
+    if (!uploadRecord || uploadRecord.status !== "AVAILABLE" || (uploadRecord.visibility !== "PUBLIC" && uploadRecord.owner_id !== userId)) return res.status(404).json({ success: false, message: "Profile image not found" });
 
     const fileUrl = await getSignedFileUrl(uploadRecord.file_path);
 
     res.json({
       success: true,
       data: {
-        userId: profile.userId,
+        userId: profile.user_id,
         profilePictureUrl: fileUrl,
       },
     });
@@ -58,7 +59,7 @@ exports.getProfileAvatar = async (req, res) => {
 // Get profile background image by user ID
 exports.getProfileBackgroundImage = async (req, res) => {
   try {
-    const userId = req.params.userId;
+    const userId = req.params.userId || req.user.id;
     const profile = await Profile.findOne({ where: { user_id: userId } });
     if (!profile) {
       return res
@@ -67,13 +68,14 @@ exports.getProfileBackgroundImage = async (req, res) => {
     }
 
     const uploadRecord = await Upload.findByPk(profile.backgroundImage_id);
+    if (!uploadRecord || uploadRecord.status !== "AVAILABLE" || (uploadRecord.visibility !== "PUBLIC" && uploadRecord.owner_id !== userId)) return res.status(404).json({ success: false, message: "Profile background not found" });
 
     const fileUrl = await getSignedFileUrl(uploadRecord.file_path);
 
     res.json({
       success: true,
       data: {
-        userId: profile.userId,
+        userId: profile.user_id,
         backgroundImageUrl: fileUrl,
       },
     });