@adonis-agora/authkit-server 0.85.0 → 0.85.1

package/build/src/host/admin_console/console_users_controller.d.ts

@@ -74,7 +74,7 @@ export default class ConsoleUsersController {
         roles: string[];
         invited: boolean;
     }>;
-    /** PATCH {prefix}/api/users/:id/roles */
+    /** PATCH {prefix}/api/users/:id/roles — body `{ roles }`. */
     updateRoles(ctx: HttpContext): Promise<void | {
         id: string;
         email: string;
@@ -84,6 +84,22 @@ export default class ConsoleUsersController {
         disabled: boolean;
         roles: string[];
     }>;
+    /**
+     * PATCH {prefix}/api/users/:id — body `{ globalRoles }`, a mesma forma do
+     * `PATCH /users/:id` da Admin API. É o que o `client.admin.users.update` do
+     * authkit-react chama, e o que o botão "Salvar papéis" do console usa: sem
+     * esta rota ele dava 404. Só papéis por aqui; nome e avatar não se editam no
+     * console.
+     */
+    update(ctx: HttpContext): Promise<void | {
+        id: string;
+        email: string;
+        name: string | null;
+        avatarUrl: string | null;
+        globalRoles: string[];
+        disabled: boolean;
+        roles: string[];
+    }>;
     /** POST {prefix}/api/users/:id/disable */
     disable(ctx: HttpContext): Promise<void | {}>;
     /** POST {prefix}/api/users/:id/enable */

package/build/src/host/admin_console/console_users_controller.js

@@ -6,7 +6,7 @@ import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { AdminUsersService } from '../admin_api/admin_users_service.js';
 import { apiError, grantDto, rolesManagedExternallyError, sessionDto, userDtoWithRoles, } from '../admin_api/dto.js';
 import { AdminSessionsService } from '../admin_sessions_service.js';
-import { adminUserCreateValidator, adminUserRolesValidator } from '../admin_validators.js';
+import { adminUserCreateValidator, adminUserRolesValidator, adminUserUpdateValidator, } from '../admin_validators.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { resolveEffectiveRolesCatalog } from '../runtime_toggles.js';
 import { enrichSessionsWithContext } from '../session_context.js';
@@ -125,8 +125,23 @@ export default class ConsoleUsersController {
         ctx.response.status(201);
         return { ...(await userDtoWithRoles(cfg, result.account)), invited: result.invited };
     }
-    /** PATCH {prefix}/api/users/:id/roles */
+    /** PATCH {prefix}/api/users/:id/roles — body `{ roles }`. */
     async updateRoles(ctx) {
+        const { roles } = await ctx.request.validateUsing(adminUserRolesValidator);
+        return this.#setRoles(ctx, roles);
+    }
+    /**
+     * PATCH {prefix}/api/users/:id — body `{ globalRoles }`, a mesma forma do
+     * `PATCH /users/:id` da Admin API. É o que o `client.admin.users.update` do
+     * authkit-react chama, e o que o botão "Salvar papéis" do console usa: sem
+     * esta rota ele dava 404. Só papéis por aqui; nome e avatar não se editam no
+     * console.
+     */
+    async update(ctx) {
+        const { globalRoles } = await ctx.request.validateUsing(adminUserUpdateValidator);
+        return this.#setRoles(ctx, globalRoles);
+    }
+    async #setRoles(ctx, rolesInput) {
         const service = await ctx.containerResolver.make('authkit.server');
         const cfg = service.config;
         const id = ctx.request.param('id');
@@ -139,7 +154,6 @@ export default class ConsoleUsersController {
             return ctx.response.status(409).send(rolesManagedExternallyError());
         }
         const actorId = ctx.session?.get(ACCOUNT_SESSION_KEY) ?? null;
-        const { roles: rolesInput } = await ctx.request.validateUsing(adminUserRolesValidator);
         const roles = Array.from(new Set((rolesInput ?? []).map((r) => r.trim()).filter(Boolean)));
         const users = new AdminUsersService(cfg);
         // Proteções de escalonamento/lockout: último admin + auto-rebaixamento.

package/build/src/host/register_auth_host.js

@@ -867,6 +867,7 @@ export function registerAuthHost(router, opts = {}) {
             router.get(`${ap}/api/users/:id`, [C.consoleUsers, 'show']);
             router.post(`${ap}/api/users`, [C.consoleUsers, 'store']);
             router.patch(`${ap}/api/users/:id/roles`, [C.consoleUsers, 'updateRoles']);
+            router.patch(`${ap}/api/users/:id`, [C.consoleUsers, 'update']);
             router.post(`${ap}/api/users/:id/disable`, [C.consoleUsers, 'disable']);
             router.post(`${ap}/api/users/:id/enable`, [C.consoleUsers, 'enable']);
             router.post(`${ap}/api/users/:id/reset-password`, [C.consoleUsers, 'resetPassword']);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adonis-agora/authkit-server",
-  "version": "0.85.0",
+  "version": "0.85.1",
   "description": "AdonisJS OIDC/OAuth2 provider (Identity Provider) toolkit: ejectable auth server with sessions, rate-limiting, MFA/TOTP, audit log, federated logout and OpenTelemetry metrics.",
   "license": "MIT",
   "author": "dudousxd",