spree_admin 5.4.0.beta6 → 5.4.0.beta8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1d8f0000fdaf838bef91f05f407dd75593d99af44dd2792da78d63634468432d
-  data.tar.gz: 2e1df4e21ceec6019d796efe210ca08b5ad4d273be9ad49bd5861969760d95eb
+  metadata.gz: 454dbbe0a9053023024e22984b2e9593ed882e0a91ebd77cdf2937de1e770156
+  data.tar.gz: e101e0f64fa6328aebb27441857e5a75e9489aac155e48f5c6d414f164de3255
 SHA512:
-  metadata.gz: 31a8dd9cb7a88265a79058c0cbcc17778408859cf074e36246057bb5b67c539f560014161d51d2aeb7fa2fac7e92998d32d6b64f109a3a17268e7bc0afbb8cb8
-  data.tar.gz: ff3e3a049b0fed5999d81db446f32895b2545e71a0e94316ce078bcc226a09ad35a507416692da4640a18f29bcd14aa0c8521a9b17b61bb5aec97b20140e04b5
+  metadata.gz: 484d4e4f75257c673d102b298bf1b8406640e607a75b5d607d2aff096c46b886e64bc9207be0889e6dfbb00d646c60bf8daeacb2f667294653144100abbe083c
+  data.tar.gz: 0e4cbc1181f745f73a6b98ab9bb1a6f863545cd2dbc550df1a83393879e482ca108e5bd3dca0cc7957836fe7c6befc73252d9a2482500c50e111ae55dd57b500

data/app/controllers/spree/admin/allowed_origins_controller.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+module Spree
+  module Admin
+    class AllowedOriginsController < ResourceController
+      include Spree::Admin::SettingsConcern
+      include Spree::Admin::TableConcern
+
+      private
+
+      def model_class
+        Spree::AllowedOrigin
+      end
+
+      def scope
+        current_store.allowed_origins
+      end
+
+      def object_name
+        'allowed_origin'
+      end
+
+      def permitted_resource_params
+        params.require(:allowed_origin).permit(permitted_allowed_origin_attributes)
+      end
+
+      def location_after_save
+        spree.admin_allowed_origins_path
+      end
+
+      def location_after_destroy
+        spree.admin_allowed_origins_path
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/classifications_controller.rb

@@ -38,7 +38,7 @@ module Spree
                         includes(
                           :taxon,
                           product: {
-                            thumbnail: [attachment_attachment: :blob],
+                            primary_media: [attachment_attachment: :blob],
                             master: [:stock_items, :stock_locations],
                             variants: [:stock_items, :stock_locations]
                           }

data/app/controllers/spree/admin/products_controller.rb

@@ -35,7 +35,7 @@ module Spree
 
         scope = current_store.products.not_archived.accessible_by(current_ability, :index)
         scope = scope.where.not(id: params[:omit_ids].split(',')) if params[:omit_ids].present?
-        @products = scope.includes(:thumbnail).multi_search(query).limit(params[:limit] || 10)
+        @products = scope.includes(:primary_media).multi_search(query).limit(params[:limit] || 10)
 
         respond_to do |format|
           format.turbo_stream do
@@ -223,7 +223,7 @@ module Spree
 
       def collection_includes
         {
-          thumbnail: [attachment_attachment: :blob],
+          primary_media: [attachment_attachment: :blob],
           stock_items: [],
           master: [:prices, :stock_items],
           variants: [:prices, :stock_items]

data/app/views/spree/admin/allowed_origins/_form.html.erb

@@ -0,0 +1,9 @@
+<div class="card mb-6">
+  <div class="card-header">
+    <h5 class="card-title"><%= Spree.t('admin.allowed_origins.origin_settings') %></h5>
+  </div>
+  <div class="card-body">
+    <%= f.spree_text_field :origin, required: true, autofocus: f.object.new_record?, placeholder: 'https://myshop.com' %>
+    <p class="text-sm text-gray-500 mt-1"><%= Spree.t('admin.allowed_origins.origin_help') %></p>
+  </div>
+</div>

data/app/views/spree/admin/allowed_origins/edit.html.erb

@@ -0,0 +1 @@
+<%= render 'spree/admin/shared/edit_resource' %>

data/app/views/spree/admin/allowed_origins/index.html.erb

@@ -0,0 +1,9 @@
+<%= render 'spree/admin/shared/developers_nav' %>
+
+<%= content_for(:title, Spree.t(:allowed_origins)) %>
+
+<% content_for :page_actions do %>
+  <%= link_to_with_icon 'plus', Spree.t(:new_allowed_origin), new_object_url, class: "btn btn-primary" if can? :create, Spree::AllowedOrigin %>
+<% end %>
+
+<%= render_table @collection, :allowed_origins %>

data/app/views/spree/admin/allowed_origins/new.html.erb

@@ -0,0 +1 @@
+<%= render 'spree/admin/shared/new_resource' %>

data/app/views/spree/admin/orders/_payments.html.erb

@@ -21,7 +21,7 @@
             <%= link_to_with_icon 'send', Spree.t('admin.send_payment_link'), spree.admin_order_payment_links_path(@order), data: { turbo_method: :post }, class: 'btn btn-light', title: Spree.t(:send_payment_link_title) %>
 
             <div data-controller="clipboard" data-clipboard-success-content-value="<%= Spree.t('admin.copied') %>">
-              <input type="hidden" value="<%= spree.checkout_state_url(@order.token, :payment, host: current_store.url_or_custom_domain) %>" readonly data-clipboard-target="source">
+              <input type="hidden" value="<%= spree.checkout_state_url(@order.token, :payment, host: current_store.storefront_url) %>" readonly data-clipboard-target="source">
               <button class="btn btn-light" type="button" data-clipboard-target="button" data-action="click->clipboard#copy">
                 <%= icon('copy') %>
                 <%= Spree.t('admin.copy_payment_link') %>

data/app/views/spree/admin/shared/_product_image.html.erb

@@ -1,7 +1,7 @@
 <% width ||= 50 %>
 <% height ||= 50 %>
 <% variant ||= :mini %>
-<% image ||= object.default_image %>
+<% image ||= object.primary_media %>
 
 <% if image.present? && image.attached? && image.variable? %>
   <% alt ||= image.alt || object.name %>

data/app/views/spree/admin/shared/_seo.html.erb

@@ -9,7 +9,7 @@
         <%= meta_title.presence || title %>
       </div>
       <div class="seo__preview__link">
-        <%= current_store.formatted_url_or_custom_domain %>/<%= slug_path %>/<span data-seo-form-target="slugPreview"><%= slug %></span>
+        <%= current_store.storefront_url %>/<%= slug_path %>/<span data-seo-form-target="slugPreview"><%= slug %></span>
       </div>
       <div class="seo__preview__description break-words" data-seo-form-target="descriptionPreview"></div>
     </div>

data/app/views/spree/admin/shared/sidebar/_store_dropdown.html.erb

@@ -7,7 +7,7 @@
       </span>
     <% end %>
     <%= dropdown_menu do %>
-      <%= link_to current_store.formatted_url_or_custom_domain, class: 'dropdown-item', target: '_blank' do %>
+      <%= link_to current_store.storefront_url, class: 'dropdown-item', target: '_blank' do %>
         <%= icon 'eye' %>
         <%= Spree.t(:view_store) %>
       <% end %>

data/config/initializers/spree_admin_navigation.rb

@@ -334,7 +334,7 @@ Rails.application.config.after_initialize do
           url: :admin_api_keys_path,
           icon: 'terminal',
           position: 150,
-          active: -> { %w[oauth_applications api_keys webhooks_subscribers webhook_endpoints webhook_deliveries].include?(controller_name) },
+          active: -> { %w[oauth_applications api_keys webhooks_subscribers webhook_endpoints webhook_deliveries allowed_origins].include?(controller_name) },
           if: -> { can?(:manage, Spree::ApiKey) }
 
   # Edit Profile
@@ -456,6 +456,13 @@ Rails.application.config.after_initialize do
           active: -> { %w[webhook_endpoints webhook_deliveries].include?(controller_name) },
           if: -> { can?(:manage, Spree::WebhookEndpoint) }
 
+  developers_tabs_nav.add :allowed_origins,
+          label: :allowed_origins,
+          url: :admin_allowed_origins_path,
+          position: 30,
+          active: -> { controller_name == 'allowed_origins' },
+          if: -> { can?(:manage, Spree::AllowedOrigin) }
+
   # Audit Tab Navigation
   audit_tabs_nav = Spree.admin.navigation.audit_tabs
 

data/config/initializers/spree_admin_tables.rb

@@ -1865,7 +1865,7 @@ Rails.application.config.after_initialize do
   # ==========================================
   # Register Taxonomies table
   # ==========================================
-  Spree.admin.tables.register(:taxonomies, model_class: Spree::Taxonomy, search_param: :name_cont)
+  Spree.admin.tables.register(:taxonomies, model_class: Spree::Taxonomy, search_param: :name_cont, link_to_action: :show)
 
   Spree.admin.tables.taxonomies.add :name,
                                     label: :name,
@@ -1998,4 +1998,23 @@ Rails.application.config.after_initialize do
                                           default: true,
                                           position: 60,
                                           method: ->(sm) { sm.display_on.presence || 'both' }
+
+  # Register Allowed Origins table
+  Spree.admin.tables.register(:allowed_origins, model_class: Spree::AllowedOrigin, search_param: :origin_cont)
+
+  Spree.admin.tables.allowed_origins.add :origin,
+                                         label: :origin,
+                                         type: :string,
+                                         sortable: true,
+                                         filterable: true,
+                                         default: true,
+                                         position: 10
+
+  Spree.admin.tables.allowed_origins.add :created_at,
+                                         label: :created_at,
+                                         type: :datetime,
+                                         sortable: true,
+                                         filterable: true,
+                                         default: true,
+                                         position: 20
 end

data/config/locales/en.yml

@@ -5,6 +5,9 @@ en:
       not_found: Can't embed a video using the provided URL
   spree:
     admin:
+      allowed_origins:
+        origin_help: Enter the full origin URL of your storefront (e.g. https://myshop.com). Do not include paths or query strings.
+        origin_settings: Origin Settings
       amount_spent: Amount spent
       api_keys:
         example_request: Example Request

data/config/routes.rb

@@ -258,6 +258,7 @@ Spree::Core::Engine.add_routes do
     resources :webhook_endpoints do
       resources :webhook_deliveries, only: [:index, :show]
     end
+    resources :allowed_origins, except: :show
 
     # errors
     get '/forbidden', to: 'errors#show', code: 403, as: :forbidden

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spree_admin
 version: !ruby/object:Gem::Version
-  version: 5.4.0.beta6
+  version: 5.4.0.beta8
 platform: ruby
 authors:
 - Vendo Connect Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-03-11 00:00:00.000000000 Z
+date: 2026-03-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: spree
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 5.4.0.beta6
+        version: 5.4.0.beta8
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 5.4.0.beta6
+        version: 5.4.0.beta8
 - !ruby/object:Gem::Dependency
   name: active_link_to
   requirement: !ruby/object:Gem::Requirement
@@ -310,6 +310,7 @@ files:
 - app/controllers/spree/admin/action_text/video_embeds_controller.rb
 - app/controllers/spree/admin/addresses_controller.rb
 - app/controllers/spree/admin/admin_users_controller.rb
+- app/controllers/spree/admin/allowed_origins_controller.rb
 - app/controllers/spree/admin/api_keys_controller.rb
 - app/controllers/spree/admin/assets_controller.rb
 - app/controllers/spree/admin/base_controller.rb
@@ -534,6 +535,10 @@ files:
 - app/views/spree/admin/admin_users/index.html.erb
 - app/views/spree/admin/admin_users/new.html.erb
 - app/views/spree/admin/admin_users/show.html.erb
+- app/views/spree/admin/allowed_origins/_form.html.erb
+- app/views/spree/admin/allowed_origins/edit.html.erb
+- app/views/spree/admin/allowed_origins/index.html.erb
+- app/views/spree/admin/allowed_origins/new.html.erb
 - app/views/spree/admin/api_keys/_details.html.erb
 - app/views/spree/admin/api_keys/_form.html.erb
 - app/views/spree/admin/api_keys/_token_card.html.erb
@@ -1164,9 +1169,9 @@ licenses:
 - BSD-3-Clause
 metadata:
   bug_tracker_uri: https://github.com/spree/spree/issues
-  changelog_uri: https://github.com/spree/spree/releases/tag/v5.4.0.beta6
+  changelog_uri: https://github.com/spree/spree/releases/tag/v5.4.0.beta8
   documentation_uri: https://docs.spreecommerce.org/
-  source_code_uri: https://github.com/spree/spree/tree/v5.4.0.beta6
+  source_code_uri: https://github.com/spree/spree/tree/v5.4.0.beta8
 post_install_message:
 rdoc_options: []
 require_paths: