@intranefr/superbackend 1.4.4 → 1.5.1

package/views/admin-users.ejs

@@ -153,6 +153,37 @@
             <option value="trialing">trialing</option>
           </select>
         </div>
+        
+        <!-- Password Section -->
+        <div class="border-t pt-4">
+          <div class="flex items-center justify-between mb-3">
+            <label class="text-sm font-medium text-gray-700">Password Management</label>
+            <input type="checkbox" id="edit-reset-password" class="rounded text-blue-600 focus:ring-blue-500">
+            <label for="edit-reset-password" class="text-sm text-gray-600 ml-2">Reset Password</label>
+          </div>
+          
+          <div id="password-fields" class="space-y-3 hidden">
+            <div>
+              <label class="block text-sm font-medium text-gray-700 mb-1">New Password</label>
+              <div class="relative">
+                <input id="edit-password" type="password" class="w-full border rounded px-3 py-2 pr-10" placeholder="Enter new password" minlength="6">
+                <button type="button" id="toggle-edit-password" class="absolute right-2 top-2 text-gray-500 hover:text-gray-700">
+                  <svg id="edit-eye-icon" class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z"></path>
+                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7-1.274 4.057-5.064 7-9.542 7-4.477 0-8.268-2.943-9.542-7z"></path>
+                  </svg>
+                </button>
+              </div>
+              <div id="password-strength" class="mt-1 text-xs"></div>
+            </div>
+            
+            <div>
+              <label class="block text-sm font-medium text-gray-700 mb-1">Confirm Password</label>
+              <input id="edit-confirm-password" type="password" class="w-full border rounded px-3 py-2" placeholder="Confirm new password">
+              <div id="password-match" class="mt-1 text-xs"></div>
+            </div>
+          </div>
+        </div>
       </div>
       <div class="flex justify-end gap-2 mt-6">
         <button id="btn-modal-cancel" class="bg-gray-100 text-gray-800 px-4 py-2 rounded hover:bg-gray-200">Cancel</button>
@@ -342,10 +373,12 @@
                 <td class="px-4 py-3 text-sm text-gray-700 whitespace-nowrap">
                   <button class="text-blue-600 hover:text-blue-800 mr-2" data-edit="${escapeHtml(u._id)}" data-name="${escapeHtml(u.name || '')}" data-role="${escapeHtml(u.role)}" data-plan="${escapeHtml(u.currentPlan)}" data-subscription="${escapeHtml(u.subscriptionStatus)}">Edit</button>
                   <button class="text-green-600 hover:text-green-800 mr-2" data-notify="${escapeHtml(u._id)}" data-email="${escapeHtml(u.email)}">Notify</button>
+                  <button class="text-purple-600 hover:text-purple-800 mr-2" data-get-jwt="${escapeHtml(u._id)}" data-email="${escapeHtml(u.email)}">Get JWT</button>
                   ${u.disabled
-                    ? `<button class="text-green-600 hover:text-green-800" data-enable="${escapeHtml(u._id)}">Enable</button>`
-                    : `<button class="text-red-600 hover:text-red-800" data-disable="${escapeHtml(u._id)}">Disable</button>`
+                    ? `<button class="text-green-600 hover:text-green-800 mr-2" data-enable="${escapeHtml(u._id)}">Enable</button>`
+                    : `<button class="text-red-600 hover:text-red-800 mr-2" data-disable="${escapeHtml(u._id)}">Disable</button>`
                   }
+                  <button class="text-red-600 hover:text-red-800 font-semibold" data-delete="${escapeHtml(u._id)}" data-email="${escapeHtml(u.email)}">Delete</button>
                 </td>
               </tr>
             `;
@@ -359,6 +392,18 @@
             btn.addEventListener('click', () => openNotifyModal(btn.dataset.notify, btn.dataset.email));
           });
 
+          tbody.querySelectorAll('[data-get-jwt]').forEach(btn => {
+            btn.addEventListener('click', async () => {
+              await getJwtForUser(btn.dataset.getJwt, btn.dataset.email);
+            });
+          });
+
+          tbody.querySelectorAll('[data-delete]').forEach(btn => {
+            btn.addEventListener('click', async () => {
+              await deleteUser(btn.dataset.delete, btn.dataset.email);
+            });
+          });
+
           tbody.querySelectorAll('[data-disable]').forEach(btn => {
             btn.addEventListener('click', async () => {
               if (!confirm('Disable this user?')) return;
@@ -394,6 +439,15 @@
       document.getElementById('edit-role').value = role || 'user';
       document.getElementById('edit-plan').value = plan || 'free';
       document.getElementById('edit-subscription').value = subscription || 'none';
+      
+      // Reset password fields
+      document.getElementById('edit-reset-password').checked = false;
+      document.getElementById('password-fields').classList.add('hidden');
+      document.getElementById('edit-password').value = '';
+      document.getElementById('edit-confirm-password').value = '';
+      document.getElementById('password-strength').textContent = '';
+      document.getElementById('password-match').textContent = '';
+      
       document.getElementById('modal-edit').classList.remove('hidden');
     }
 
@@ -401,22 +455,135 @@
       document.getElementById('modal-edit').classList.add('hidden');
     }
 
+    async function getJwtForUser(userId, email) {
+      try {
+        // Show loading state
+        showToast('Generating JWT...', 'success');
+        
+        const res = await fetch(`${API_BASE}/api/admin/generate-token`, {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ userId }),
+        });
+        
+        const data = await res.json();
+        
+        if (!res.ok) { 
+          showToast(data?.error || 'Failed to generate JWT', 'error'); 
+          return; 
+        }
+        
+        // Copy JWT to clipboard
+        try {
+          await navigator.clipboard.writeText(data.token);
+          showToast(`JWT for ${email} copied to clipboard!`, 'success');
+        } catch (clipboardError) {
+          // Fallback for browsers that don't support clipboard API
+          const textArea = document.createElement('textarea');
+          textArea.value = data.token;
+          textArea.style.position = 'fixed';
+          textArea.style.opacity = '0';
+          document.body.appendChild(textArea);
+          textArea.select();
+          document.execCommand('copy');
+          document.body.removeChild(textArea);
+          showToast(`JWT for ${email} copied to clipboard!`, 'success');
+        }
+        
+        // Also log the token for debugging (in production, you might want to remove this)
+        console.log(`Generated JWT for ${email}:`, data.token);
+        
+      } catch (e) { 
+        showToast(e.message || 'Failed to generate JWT', 'error'); 
+      }
+    }
+
+    async function deleteUser(userId, email) {
+      // Double confirmation with clear warnings
+      const confirm1 = confirm(`Are you sure you want to delete user ${email}?`);
+      if (!confirm1) return;
+      
+      const confirm2 = confirm(
+        'WARNING: This will permanently delete the user and ALL their data including:\n' +
+        '• Organizations they own (if no other members)\n' +
+        '• All their assets and files\n' +
+        '• Organization memberships\n' +
+        '• Notifications and invites\n' +
+        '• Email logs and form submissions\n\n' +
+        'Activity logs and audit events will be preserved.\n' +
+        'This action cannot be undone. Continue?'
+      );
+      if (!confirm2) return;
+      
+      try {
+        showToast('Deleting user and cleaning up data...', 'success');
+        
+        const res = await fetch(`${API_BASE}/api/admin/users/${encodeURIComponent(userId)}`, {
+          method: 'DELETE'
+        });
+        
+        const data = await res.json();
+        
+        if (!res.ok) {
+          showToast(data?.error || 'Failed to delete user', 'error');
+          return;
+        }
+        
+        showToast(`User ${email} deleted permanently`, 'success');
+        await Promise.all([loadUsers(), loadStats()]);
+      } catch (e) {
+        showToast(e.message || 'Failed to delete user', 'error');
+      }
+    }
+
     async function saveUser() {
       const userId = document.getElementById('edit-user-id').value;
       const name = document.getElementById('edit-name').value.trim();
       const role = document.getElementById('edit-role').value;
       const currentPlan = document.getElementById('edit-plan').value;
       const subscriptionStatus = document.getElementById('edit-subscription').value;
+      
+      // Password handling
+      const resetPassword = document.getElementById('edit-reset-password').checked;
+      const password = document.getElementById('edit-password').value;
+      const confirmPassword = document.getElementById('edit-confirm-password').value;
+      
+      // Validate password fields if reset is checked
+      if (resetPassword) {
+        if (!password) {
+          showToast('Password is required when reset is enabled', 'error');
+          return;
+        }
+        
+        if (password.length < 6) {
+          showToast('Password must be at least 6 characters', 'error');
+          return;
+        }
+        
+        if (password !== confirmPassword) {
+          showToast('Passwords do not match', 'error');
+          return;
+        }
+      }
 
       try {
+        const updateData = { name, role, currentPlan, subscriptionStatus };
+        
+        // Only include password if reset is checked
+        if (resetPassword && password) {
+          updateData.passwordHash = password;
+        }
+        
         const res = await fetch(`${API_BASE}/api/admin/users/${encodeURIComponent(userId)}`, {
           method: 'PATCH',
           headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify({ name, role, currentPlan, subscriptionStatus }),
+          body: JSON.stringify(updateData),
         });
         const data = await res.json();
         if (!res.ok) { showToast(data?.error || 'Failed to update user', 'error'); return; }
-        showToast('User updated', 'success');
+        
+        const message = resetPassword ? 'User and password updated' : 'User updated';
+        showToast(message, 'success');
         closeEditModal();
         await Promise.all([loadUsers(), loadStats()]);
       } catch (e) { showToast(e.message, 'error'); }
@@ -584,6 +751,78 @@
       return window.location.origin + endpoint;
     }
 
+    // Password validation functions
+    function checkPasswordStrength(password) {
+      if (!password) return '';
+      
+      let strength = 0;
+      const feedback = [];
+      
+      if (password.length >= 6) strength++;
+      else feedback.push('at least 6 characters');
+      
+      if (password.length >= 10) strength++;
+      if (/[a-z]/.test(password) && /[A-Z]/.test(password)) strength++;
+      if (/\d/.test(password)) strength++;
+      if (/[^a-zA-Z\d]/.test(password)) strength++;
+      
+      const strengthText = ['Very Weak', 'Weak', 'Fair', 'Good', 'Strong'][strength] || 'Very Weak';
+      const strengthColor = ['text-red-500', 'text-orange-500', 'text-yellow-500', 'text-blue-500', 'text-green-500'][strength] || 'text-red-500';
+      
+      return { strength, strengthText, strengthColor, feedback };
+    }
+
+    function updatePasswordStrength() {
+      const password = document.getElementById('edit-password').value;
+      const strengthDiv = document.getElementById('password-strength');
+      
+      if (!password) {
+        strengthDiv.textContent = '';
+        return;
+      }
+      
+      const { strengthText, strengthColor } = checkPasswordStrength(password);
+      strengthDiv.textContent = `Strength: ${strengthText}`;
+      strengthDiv.className = `mt-1 text-xs ${strengthColor}`;
+    }
+
+    function updatePasswordMatch() {
+      const password = document.getElementById('edit-password').value;
+      const confirmPassword = document.getElementById('edit-confirm-password').value;
+      const matchDiv = document.getElementById('password-match');
+      
+      if (!confirmPassword) {
+        matchDiv.textContent = '';
+        return;
+      }
+      
+      if (password === confirmPassword) {
+        matchDiv.textContent = '✓ Passwords match';
+        matchDiv.className = 'mt-1 text-xs text-green-500';
+      } else {
+        matchDiv.textContent = '✗ Passwords do not match';
+        matchDiv.className = 'mt-1 text-xs text-red-500';
+      }
+    }
+
+    function toggleEditPasswordVisibility() {
+      const passwordInput = document.getElementById('edit-password');
+      const eyeIcon = document.getElementById('edit-eye-icon');
+      
+      if (passwordInput.type === 'password') {
+        passwordInput.type = 'text';
+        eyeIcon.innerHTML = `
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13.875 18.825A10.05 10.05 0 0112 19c-4.478 0-8.268-2.943-9.543-7a9.97 9.97 0 011.563-3.029m5.858.908a3 3 0 114.243 4.243M9.878 9.878l4.242 4.242M9.88 9.88l-3.29-3.29m7.532 7.532l3.29 3.29M3 3l3.59 3.59m0 0A9.953 9.953 0 0112 5c4.478 0 8.268 2.943 9.543 7a10.025 10.025 0 01-4.132 5.411m0 0L21 21"></path>
+        `;
+      } else {
+        passwordInput.type = 'password';
+        eyeIcon.innerHTML = `
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z"></path>
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7-1.274 4.057-5.064 7-9.542 7-4.477 0-8.268-2.943-9.542-7z"></path>
+        `;
+      }
+    }
+
     function bindEvents() {
       document.getElementById('btn-refresh').onclick = () => Promise.all([loadUsers(), loadStats()]);
       document.getElementById('btn-apply').onclick = () => { state.offset = 0; loadUsers(); };
@@ -603,6 +842,24 @@
       document.getElementById('btn-notify-cancel').onclick = closeNotifyModal;
       document.getElementById('btn-notify-send').onclick = sendNotification;
       
+      // Edit modal password events
+      document.getElementById('edit-reset-password').onchange = function() {
+        const passwordFields = document.getElementById('password-fields');
+        if (this.checked) {
+          passwordFields.classList.remove('hidden');
+        } else {
+          passwordFields.classList.add('hidden');
+          document.getElementById('edit-password').value = '';
+          document.getElementById('edit-confirm-password').value = '';
+          document.getElementById('password-strength').textContent = '';
+          document.getElementById('password-match').textContent = '';
+        }
+      };
+      
+      document.getElementById('toggle-edit-password').onclick = toggleEditPasswordVisibility;
+      document.getElementById('edit-password').oninput = updatePasswordStrength;
+      document.getElementById('edit-confirm-password').oninput = updatePasswordMatch;
+      
       // Registration modal events
       document.getElementById('btn-register-user').onclick = openRegisterModal;
       document.getElementById('btn-register-cancel').onclick = closeRegisterModal;

package/views/admin-workflows.ejs

@@ -220,11 +220,11 @@
             this.loadWorkflows().then(() => {
               if (workflowIdFromUrl !== 'new' && workflowIdFromUrl.length > 5) {
                 const wf = this.workflows.find(w => w._id === workflowIdFromUrl);
-                if (wf) this.editWorkflow(wf); else fetch(`/saas/api/workflows/${workflowIdFromUrl}`).then(res => res.ok && res.json().then(data => this.editWorkflow(data)));
+                if (wf) this.editWorkflow(wf); else fetch(`/saas/api/admin/workflows/${workflowIdFromUrl}`).then(res => res.ok && res.json().then(data => this.editWorkflow(data)));
               } else if (workflowIdFromUrl === 'new') this.createNew();
             });
           },
-          async loadWorkflows() { const res = await fetch('/saas/api/workflows'); this.workflows = await res.json(); },
+          async loadWorkflows() { const res = await fetch('/saas/api/admin/workflows'); this.workflows = await res.json(); },
           createNew() { this.workflow = { name: 'New Workflow', status: 'inactive', entrypoint: { awaitResponse: false, allowedMethods: ['POST', 'GET'], auth: { type: 'none' } }, testDataset: { method: 'POST', body: { message: 'Hello' }, query: {}, headers: {} }, nodes: [] }; this.view = 'editor'; },
           editWorkflow(wf) {
             const currentView = this.view; this.workflow = JSON.parse(JSON.stringify(wf)); this.showRuns = false; this.runs = []; this.inspectedRun = null;
@@ -233,7 +233,7 @@
             this.view = (currentView === 'list') ? 'editor' : currentView;
           },
           toggleMethod(m) { this.workflow.entrypoint.allowedMethods = this.workflow.entrypoint.allowedMethods || []; const idx = this.workflow.entrypoint.allowedMethods.indexOf(m); if (idx > -1) this.workflow.entrypoint.allowedMethods.splice(idx, 1); else this.workflow.entrypoint.allowedMethods.push(m); },
-          async deleteWorkflow(id) { if (confirm('Are you sure?')) { await fetch(`/saas/api/workflows/${id}`, { method: 'DELETE' }); await this.loadWorkflows(); } },
+          async deleteWorkflow(id) { if (confirm('Are you sure?')) { await fetch(`/saas/api/admin/workflows/${id}`, { method: 'DELETE' }); await this.loadWorkflows(); } },
           getWebhookUrl() { return window.location.origin + '/saas/w/' + (this.workflow._id || 'NEW'); },
           copyWebhookUrl() { navigator.clipboard.writeText(this.getWebhookUrl()); this.showToast('Copied!'); },
           addNode(type) { this.workflow.nodes.push({ id: 'node_' + Date.now(), type, name: 'node_' + (this.workflow.nodes.length + 1) }); },
@@ -247,7 +247,7 @@
           getNodeIcon(type) { return { llm: 'ti-brain', if: 'ti-git-branch', http: 'ti-world', exit: 'ti-door-exit', parallel: 'ti-git-merge' }[type] || 'ti-circle'; },
           getNodeColor(type) { return { llm: 'bg-indigo-500', if: 'bg-yellow-500', http: 'bg-blue-500', exit: 'bg-red-500', parallel: 'bg-purple-500' }[type]; },
           async saveWorkflow(silent = false) {
-            const res = await fetch(this.workflow._id ? `/saas/api/workflows/${this.workflow._id}` : '/saas/api/workflows', { method: this.workflow._id ? 'PUT' : 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(this.workflow) });
+            const res = await fetch(this.workflow._id ? `/saas/api/admin/workflows/${this.workflow._id}` : '/saas/api/admin/workflows', { method: this.workflow._id ? 'PUT' : 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(this.workflow) });
             if (res.ok) { const saved = await res.json(); if (!silent) this.showToast('Saved!'); await this.loadWorkflows(); this.editWorkflow(saved); }
           },
           async runFullTest(entrypointOnly = false) {
@@ -255,7 +255,7 @@
             try {
               const payload = { method: this.testConfig.method, body: JSON.parse(this.testConfig.body), query: JSON.parse(this.testConfig.query), headers: JSON.parse(this.testConfig.headers) };
               if (entrypointOnly) { this.workflow.testDataset = payload; await this.saveWorkflow(true); return this.showToast('Dataset set.'); }
-              this.testing = true; const res = await fetch(`/saas/api/workflows/${this.workflow._id}/test`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(payload) });
+              this.testing = true; const res = await fetch(`/saas/api/admin/workflows/${this.workflow._id}/test`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(payload) });
               this.testResult = await res.json(); if (this.showRuns) this.loadRuns(); this.showToast('Ran.');
             } catch (e) { this.showToast('Failed', 'error'); } finally { this.testing = false; }
           },
@@ -263,11 +263,11 @@
           async testIsolatedNode(node) {
             const context = { entrypoint: this.workflow.testDataset, payload: this.workflow.testDataset, lastNode: this.workflow.testDataset };
             try {
-              const res = await fetch(`/saas/api/workflows/${this.workflow._id}/nodes/${node.id}/test`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ context, node }) });
+              const res = await fetch(`/saas/api/admin/workflows/${this.workflow._id}/nodes/${node.id}/test`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ context, node }) });
               const data = await res.json(); node.testOutput = data.result; node.testResult = data.result; this.showToast('Tested');
             } catch (e) { this.showToast('Failed', 'error'); }
           },
-          async loadRuns() { if (!this.workflow._id) return; const res = await fetch(`/saas/api/workflows/${this.workflow._id}/runs`); this.runs = await res.json(); },
+          async loadRuns() { if (!this.workflow._id) return; const res = await fetch(`/saas/api/admin/workflows/${this.workflow._id}/runs`); this.runs = await res.json(); },
           inspectRun(run) { this.inspectedRun = run; }, testWorkflow() { this.showTestPanel = true; },
           showToast(message, type = 'success') {
             const id = Date.now(); this.toasts.push({ id, message, type, show: true });