@objectstack/plugin-auth 6.5.1 → 6.7.0

package/dist/index.mjs

@@ -2,7 +2,6 @@
 import {
   SETUP_APP,
   SystemOverviewDashboard,
-  SecurityOverviewDashboard,
   SetupAppTranslations
 } from "@objectstack/platform-objects/apps";
 
@@ -1335,7 +1334,7 @@ var AuthPlugin = class {
       // (e.g. legacy `users.view` had phone/status/active columns that do
       // not exist on sys_user). Schema-embedded listViews is the single
       // source of truth.
-      dashboards: [SystemOverviewDashboard, SecurityOverviewDashboard]
+      dashboards: [SystemOverviewDashboard]
     });
     ctx.logger.info("Auth Plugin initialized successfully");
   }
@@ -1530,6 +1529,61 @@ var AuthPlugin = class {
         return c.json({ success: false, error: { code: "internal", message: err.message } }, 500);
       }
     });
+    rawApp.post(`${basePath}/admin/oauth2/toggle-disabled`, async (c) => {
+      try {
+        let body = {};
+        try {
+          body = await c.req.json();
+        } catch {
+          body = {};
+        }
+        const clientId = body?.client_id;
+        const disabled = body?.disabled;
+        if (typeof clientId !== "string" || clientId.length === 0) {
+          return c.json({ success: false, error: { code: "invalid_request", message: "client_id is required" } }, 400);
+        }
+        if (typeof disabled !== "boolean") {
+          return c.json({ success: false, error: { code: "invalid_request", message: "disabled must be a boolean" } }, 400);
+        }
+        const authApi = await this.authManager.getApi();
+        const session = await authApi.getSession({ headers: c.req.raw.headers });
+        if (!session?.user?.id) {
+          return c.json({ success: false, error: { code: "unauthorized", message: "Sign in first" } }, 401);
+        }
+        if (session.user.role !== "admin") {
+          return c.json({ success: false, error: { code: "forbidden", message: "Admin role required" } }, 403);
+        }
+        const dataEngine = this.authManager.getDataEngine();
+        if (!dataEngine) {
+          return c.json({ success: false, error: { code: "unavailable", message: "Data engine unavailable" } }, 503);
+        }
+        const existing = await dataEngine.findOne("sys_oauth_application", {
+          where: { client_id: clientId }
+        });
+        if (!existing) {
+          return c.json({ success: false, error: { code: "not_found", message: "OAuth client not found" } }, 404);
+        }
+        const updated = await dataEngine.update("sys_oauth_application", {
+          id: existing.id,
+          disabled,
+          updated_at: new Date(Math.floor(Date.now() / 1e3) * 1e3)
+        });
+        if (!updated) {
+          return c.json({ success: false, error: { code: "internal", message: "Unable to update OAuth client" } }, 500);
+        }
+        return c.json({
+          success: true,
+          data: {
+            client_id: clientId,
+            disabled
+          }
+        });
+      } catch (error) {
+        const err = error instanceof Error ? error : new Error(String(error));
+        ctx.logger.error("[AuthPlugin] toggle-disabled failed", err);
+        return c.json({ success: false, error: { code: "internal", message: err.message } }, 500);
+      }
+    });
     rawApp.all(`${basePath}/*`, async (c) => {
       try {
         const response = await this.authManager.handleRequest(c.req.raw);