@abhi1693/medusa-rbac 0.0.0-stage → 0.0.2

package/.medusa/server/public/admin-access.mjs

@@ -0,0 +1,111 @@
+// src/admin/lib/access.ts
+import Medusa from "@medusajs/js-sdk";
+import { useEffect, useRef } from "react";
+import { useQuery, useQueryClient } from "@tanstack/react-query";
+var sdk = new Medusa({
+  baseUrl: typeof __BACKEND_URL__ === "string" ? __BACKEND_URL__ : window.location.origin,
+  auth: {
+    type: typeof __AUTH_TYPE__ === "string" ? __AUTH_TYPE__ : "session",
+    jwtTokenStorageKey: typeof __JWT_TOKEN_STORAGE_KEY__ === "string" ? __JWT_TOKEN_STORAGE_KEY__ : void 0
+  }
+});
+var root = "/admin/access";
+var accessApi = {
+  profile: () => sdk.client.fetch("/admin/users/me"),
+  staffUser: (id) => sdk.client.fetch(`${root}/staff/${id}`),
+  me: () => sdk.client.fetch(`${root}/me`),
+  roles: () => sdk.client.fetch(`${root}/roles`),
+  role: (id, offset = 0) => sdk.client.fetch(`${root}/roles/${id}`, { query: { offset, limit: 25 } }),
+  actors: (actorType, query = {}) => sdk.client.fetch(`${root}/actors/${encodeURIComponent(actorType)}`, { query }),
+  evaluate: (body) => sdk.client.fetch(`${root}/evaluate`, {
+    method: "POST",
+    body
+  }),
+  invitations: (offset, q = "") => sdk.client.fetch(
+    `${root}/invites`,
+    {
+      query: { offset, limit: 25, ...q ? { q } : {} }
+    }
+  ),
+  createInvitation: (body) => sdk.client.fetch(`${root}/invites`, {
+    method: "POST",
+    body
+  }),
+  deleteInvitation: (id) => sdk.client.fetch(`${root}/invites/${id}`, { method: "DELETE" }),
+  resendInvitation: (id) => sdk.admin.invite.resend(id),
+  deleteUser: (id) => sdk.client.fetch(`${root}/staff/${id}`, { method: "DELETE" }),
+  permissions: () => sdk.client.fetch(`${root}/permissions`),
+  staff: (offset, q = "") => sdk.client.fetch(`${root}/staff`, {
+    query: { offset, limit: 25, ...q ? { q } : {} }
+  }),
+  audit: (offset) => sdk.client.fetch(`${root}/audit`, { query: { offset, limit: 25 } }),
+  saveRole: (role) => {
+    const { id, ...body } = role;
+    return sdk.client.fetch(`${root}/roles${id ? `/${id}` : ""}`, {
+      method: "POST",
+      body
+    });
+  },
+  deleteRole: (role) => sdk.client.fetch(`${root}/roles/${role.id}`, {
+    method: "DELETE",
+    body: { version: role.version }
+  }),
+  saveStaff: (staff, role_ids) => sdk.client.fetch(`${root}/staff/${staff.id}`, {
+    method: "POST",
+    body: {
+      role_ids,
+      active: role_ids.length > 0,
+      version: staff.access.version
+    }
+  })
+};
+function useAccess() {
+  const client = useQueryClient();
+  const previous = useRef();
+  const result = useQuery({
+    queryKey: ["medusa-rbac", "me"],
+    queryFn: accessApi.me,
+    retry: false,
+    staleTime: 0,
+    refetchInterval: 5e3,
+    refetchOnWindowFocus: "always"
+  });
+  const fingerprint = result.data?.access && accessFingerprint(result.data.access);
+  useEffect(() => {
+    if (!result.isFetchedAfterMount || !fingerprint) return;
+    if (previous.current && previous.current !== fingerprint) {
+      void client.invalidateQueries(
+        { predicate: (query) => query.queryKey[0] !== "medusa-rbac" },
+        { cancelRefetch: false }
+      );
+    }
+    previous.current = fingerprint;
+  }, [client, fingerprint, result.isFetchedAfterMount]);
+  return result;
+}
+function accessFingerprint(access) {
+  return JSON.stringify([
+    access.actor_id,
+    access.actor_type,
+    access.active,
+    access.is_superuser,
+    [...access.role_ids].sort(),
+    [...access.permissions].sort(),
+    access.rules || []
+  ]);
+}
+function useRefreshAccess() {
+  const client = useQueryClient();
+  return () => client.invalidateQueries({ queryKey: ["medusa-rbac"] });
+}
+function errorMessage(error) {
+  return error instanceof Error ? error.message : "The request failed. Reload and try again.";
+}
+export {
+  accessApi,
+  accessFingerprint,
+  errorMessage,
+  sdk,
+  useAccess,
+  useRefreshAccess
+};

package/.medusa/server/public/client.mjs

@@ -0,0 +1,12 @@
+// src/client.ts
+function createAccessClient(sdk) {
+  return {
+    me: (actorType, headers) => sdk.client.fetch(
+      `/access/actors/${encodeURIComponent(actorType)}/me`,
+      { headers }
+    )
+  };
+}
+export {
+  createAccessClient
+};