@adonis-agora/authkit-server 0.46.0 → 0.48.0

package/build/src/host/controllers/account_orgs_controller.js

@@ -1,9 +1,11 @@
 import '../augmentations.js';
 import { supportsOrganizations } from '../../accounts/account_store.js';
+import { getAccountLoginUrl } from '../account_login_url.js';
+import { accountPath } from '../account_paths.js';
+import { ACTIVE_ORG_COOKIE, ACTIVE_ORG_COOKIE_TTL, encodeActiveOrgCookie, } from '../active_org_cookie.js';
 import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { isRoleInCatalog } from '../runtime_toggles.js';
-import { ACTIVE_ORG_COOKIE, ACTIVE_ORG_COOKIE_TTL, encodeActiveOrgCookie, } from '../active_org_cookie.js';
 /**
  * Console de conta — Organizations. Server-rendered, padrão dos outros controllers
  * de conta (account_tokens_controller, account_security_controller, etc.).
@@ -26,7 +28,7 @@ export default class AccountOrgsController {
         const accountId = session.get(ACCOUNT_SESSION_KEY);
         const account = await store.findById(accountId);
         if (!account)
-            return response.redirect('/account/login');
+            return response.redirect(getAccountLoginUrl());
         const orgs = await store.listOrgsForAccount(accountId);
         const pendingInvitations = await store.listPendingInvitationsForEmail(account.email);
         // Enriquece convites com o nome da org
@@ -51,9 +53,7 @@ export default class AccountOrgsController {
             availableRoles: cfg.organizations.roles,
             messages,
         };
-        return cfg.render
-            ? cfg.render(ctx, 'account/orgs', props)
-            : response.notFound();
+        return cfg.render ? cfg.render(ctx, 'account/orgs', props) : response.notFound();
     }
     /** POST /account/orgs — criar nova org (requer allowSelfCreate). */
     async store(ctx) {
@@ -68,7 +68,7 @@ export default class AccountOrgsController {
         const name = request.input('name', '').trim();
         const slug = request.input('slug', '').trim();
         if (!name || !slug)
-            return response.redirect('/account/orgs');
+            return response.redirect(accountPath('orgs'));
         try {
             await store.createOrg({ name, slug, ownerAccountId: accountId });
             await cfg.audit?.record({ type: 'organization.created', accountId, metadata: { slug } });
@@ -76,7 +76,7 @@ export default class AccountOrgsController {
         catch {
             // slug duplicado ou outro erro — redireciona sem mensagem de erro específica
         }
-        return response.redirect('/account/orgs');
+        return response.redirect(accountPath('orgs'));
     }
     /** POST /account/orgs/:id/activate — define org ativa (valida membership). */
     async activate(ctx) {
@@ -90,12 +90,16 @@ export default class AccountOrgsController {
         const orgId = params.id;
         const membership = await store.getOrgMembership(orgId, accountId);
         if (!membership)
-            return response.redirect('/account/orgs');
+            return response.redirect(accountPath('orgs'));
         const org = await store.findOrgById(orgId);
         if (!org)
-            return response.redirect('/account/orgs');
+            return response.redirect(accountPath('orgs'));
         // Grava cookie de org ativa
-        const cookieValue = encodeActiveOrgCookie({ orgId, orgSlug: org.slug, orgRole: membership.role });
+        const cookieValue = encodeActiveOrgCookie({
+            orgId,
+            orgSlug: org.slug,
+            orgRole: membership.role,
+        });
         ctx.response.cookie(ACTIVE_ORG_COOKIE, cookieValue, {
             httpOnly: true,
             sameSite: 'lax',
@@ -103,8 +107,12 @@ export default class AccountOrgsController {
             secure: ctx.request.secure(),
             path: '/',
         });
-        await cfg.audit?.record({ type: 'organization.switched', accountId, metadata: { orgId, orgSlug: org.slug } });
-        return response.redirect('/account/orgs');
+        await cfg.audit?.record({
+            type: 'organization.switched',
+            accountId,
+            metadata: { orgId, orgSlug: org.slug },
+        });
+        return response.redirect(accountPath('orgs'));
     }
     /** POST /account/orgs/deactivate — remove org ativa. */
     async deactivate(ctx) {
@@ -114,7 +122,7 @@ export default class AccountOrgsController {
         const accountId = session.get(ACCOUNT_SESSION_KEY);
         ctx.response.clearCookie(ACTIVE_ORG_COOKIE, { path: '/' });
         await cfg.audit?.record({ type: 'organization.deactivated', accountId });
-        return response.redirect('/account/orgs');
+        return response.redirect(accountPath('orgs'));
     }
     /** POST /account/orgs/:id/leave — sai da org (verifica last_owner). */
     async leave(ctx) {
@@ -127,9 +135,13 @@ export default class AccountOrgsController {
             return response.forbidden();
         const result = await store.removeOrgMember(params.id, accountId);
         if (result.ok) {
-            await cfg.audit?.record({ type: 'organization.member_removed', accountId, metadata: { orgId: params.id, self: true } });
+            await cfg.audit?.record({
+                type: 'organization.member_removed',
+                accountId,
+                metadata: { orgId: params.id, self: true },
+            });
         }
-        return response.redirect('/account/orgs');
+        return response.redirect(accountPath('orgs'));
     }
     /** POST /account/orgs/:id/invite — convida membro por e-mail. */
     async invite(ctx) {
@@ -148,7 +160,7 @@ export default class AccountOrgsController {
         const email = request.input('email', '').trim();
         const role = request.input('role', 'member').trim();
         if (!email)
-            return response.redirect('/account/orgs');
+            return response.redirect(accountPath('orgs'));
         // H4: valida o role contra o catálogo efetivo de roles da org (runtime →
         // config → defaults). Role fora do catálogo é rejeitada (não cria convite).
         // Usa o helper PURO `isRoleInCatalog` (mesmo ponto de verdade do caminho admin).
@@ -159,7 +171,9 @@ export default class AccountOrgsController {
             invitationTtlHours: cfg.organizations.invitationTtlHours,
         }, params.id);
         if (!roleValid) {
-            return response.unprocessableEntity({ error: { code: 'invalid_role', message: 'Role inválida.' } });
+            return response.unprocessableEntity({
+                error: { code: 'invalid_role', message: 'Role inválida.' },
+            });
         }
         // H4: no fluxo member-facing, só um OWNER pode conceder a role `owner`.
         // Um admin (não-owner) tentando convidar como `owner` é escalonamento.
@@ -176,7 +190,7 @@ export default class AccountOrgsController {
         // Dispara e-mail via mail hook (best-effort)
         if (cfg.mail?.onOrgInvitation) {
             const org = await store.findOrgById(params.id);
-            const acceptUrl = `${ctx.request.protocol()}://${ctx.request.host()}/account/orgs/invitations/${token}/accept`;
+            const acceptUrl = `${ctx.request.protocol()}://${ctx.request.host()}${accountPath('orgs')}/invitations/${token}/accept`;
             try {
                 await cfg.mail.onOrgInvitation({
                     email,
@@ -197,7 +211,7 @@ export default class AccountOrgsController {
             accountId,
             metadata: { orgId: params.id, email, role },
         });
-        return response.redirect('/account/orgs');
+        return response.redirect(accountPath('orgs'));
     }
     /** GET /account/orgs/invitations/:token/accept — mostra tela de aceite. */
     async showAcceptInvitation(ctx) {
@@ -210,9 +224,11 @@ export default class AccountOrgsController {
             return response.notFound();
         const accountId = session.get(ACCOUNT_SESSION_KEY);
         if (!accountId) {
-            // Não logado: redireciona para login com return URL
-            const returnTo = encodeURIComponent(`/account/orgs/invitations/${params.token}/accept`);
-            return response.redirect(`/account/login?returnTo=${returnTo}`);
+            // Não logado: redireciona para login (configurável) com return URL
+            const loginUrl = getAccountLoginUrl();
+            const returnTo = encodeURIComponent(`${accountPath('orgs')}/invitations/${params.token}/accept`);
+            const sep = loginUrl.includes('?') ? '&' : '?';
+            return response.redirect(`${loginUrl}${sep}returnTo=${returnTo}`);
         }
         const tokenHash = createHash('sha256').update(params.token).digest('hex');
         const invitation = await store.findInvitationByTokenHash(tokenHash);
@@ -236,11 +252,11 @@ export default class AccountOrgsController {
             return response.notFound();
         const accountId = session.get(ACCOUNT_SESSION_KEY);
         if (!accountId)
-            return response.redirect('/account/login');
+            return response.redirect(getAccountLoginUrl());
         const tokenHash = createHash('sha256').update(params.token).digest('hex');
         const invitation = await store.findInvitationByTokenHash(tokenHash);
         if (!invitation)
-            return response.redirect('/account/orgs');
+            return response.redirect(accountPath('orgs'));
         const result = await store.acceptInvitation(invitation.id, accountId);
         if (result.ok) {
             await cfg.audit?.record({
@@ -249,7 +265,7 @@ export default class AccountOrgsController {
                 metadata: { orgId: invitation.organizationId, invitationId: invitation.id },
             });
         }
-        return response.redirect('/account/orgs');
+        return response.redirect(accountPath('orgs'));
     }
     /** POST /account/orgs/:id/members/:accountId/remove */
     async removeMember(ctx) {
@@ -261,7 +277,8 @@ export default class AccountOrgsController {
         if (!supportsOrganizations(store))
             return response.forbidden();
         const actorMembership = await store.getOrgMembership(params.id, actorId);
-        if (!actorMembership || (actorMembership.role !== 'owner' && actorMembership.role !== 'admin')) {
+        if (!actorMembership ||
+            (actorMembership.role !== 'owner' && actorMembership.role !== 'admin')) {
             return response.forbidden();
         }
         const result = await store.removeOrgMember(params.id, params.accountId);
@@ -272,7 +289,7 @@ export default class AccountOrgsController {
                 metadata: { orgId: params.id, targetAccountId: params.accountId },
             });
         }
-        return response.redirect('/account/orgs');
+        return response.redirect(accountPath('orgs'));
     }
     /** POST /account/orgs/:id/invitations/:invId/revoke */
     async revokeInvitation(ctx) {
@@ -284,7 +301,8 @@ export default class AccountOrgsController {
         if (!supportsOrganizations(store))
             return response.forbidden();
         const actorMembership = await store.getOrgMembership(params.id, actorId);
-        if (!actorMembership || (actorMembership.role !== 'owner' && actorMembership.role !== 'admin')) {
+        if (!actorMembership ||
+            (actorMembership.role !== 'owner' && actorMembership.role !== 'admin')) {
             return response.forbidden();
         }
         // Escopado por org (params.id já validado acima): impede IDOR cross-org.
@@ -294,7 +312,7 @@ export default class AccountOrgsController {
             actorId,
             metadata: { orgId: params.id, invitationId: params.invId },
         });
-        return response.redirect('/account/orgs');
+        return response.redirect(accountPath('orgs'));
     }
     // ──────────────────────────────────────────────────────────────────────────
     // JSON endpoints — consumed by @adonis-agora/authkit-react hooks.
@@ -353,7 +371,12 @@ export default class AccountOrgsController {
         const members = canManage ? await store.listOrgMembers(params.id) : [];
         const enrichedMembers = await Promise.all(members.map(async (m) => {
             const account = await store.findById(m.accountId);
-            return { accountId: m.accountId, email: account?.email ?? null, role: m.role, joinedAt: m.joinedAt };
+            return {
+                accountId: m.accountId,
+                email: account?.email ?? null,
+                role: m.role,
+                joinedAt: m.joinedAt,
+            };
         }));
         return {
             id: org.id,

package/build/src/host/controllers/account_security_controller.d.ts

@@ -1,5 +1,5 @@
-import "../augmentations.js";
-import type { HttpContext } from "@adonisjs/core/http";
+import '../augmentations.js';
+import type { HttpContext } from '@adonisjs/core/http';
 /**
  * Self-service de segurança da conta (console de conta): trocar a senha e o
  * e-mail. A troca de senha exige a senha ATUAL (verifyCredentials). A troca de