@payez/next-mvp 3.9.1 → 4.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (147) hide show
  1. package/dist/api/auth-handler.d.ts +1 -2
  2. package/dist/api/auth-handler.js +9 -9
  3. package/dist/api-handlers/account/change-password.js +110 -112
  4. package/dist/api-handlers/admin/analytics.d.ts +19 -20
  5. package/dist/api-handlers/admin/analytics.js +378 -379
  6. package/dist/api-handlers/admin/audit.d.ts +19 -20
  7. package/dist/api-handlers/admin/audit.js +213 -214
  8. package/dist/api-handlers/admin/index.d.ts +21 -22
  9. package/dist/api-handlers/admin/index.js +42 -43
  10. package/dist/api-handlers/admin/redis-sessions.d.ts +35 -36
  11. package/dist/api-handlers/admin/redis-sessions.js +203 -204
  12. package/dist/api-handlers/admin/sessions.d.ts +20 -21
  13. package/dist/api-handlers/admin/sessions.js +283 -284
  14. package/dist/api-handlers/admin/site-logs.d.ts +45 -46
  15. package/dist/api-handlers/admin/site-logs.js +317 -318
  16. package/dist/api-handlers/admin/stats.d.ts +20 -21
  17. package/dist/api-handlers/admin/stats.js +239 -240
  18. package/dist/api-handlers/admin/users.d.ts +19 -20
  19. package/dist/api-handlers/admin/users.js +221 -222
  20. package/dist/api-handlers/admin/vibe-data.d.ts +79 -80
  21. package/dist/api-handlers/admin/vibe-data.js +267 -268
  22. package/dist/api-handlers/auth/refresh.js +633 -635
  23. package/dist/api-handlers/auth/signout.js +186 -187
  24. package/dist/api-handlers/auth/status.js +4 -7
  25. package/dist/api-handlers/auth/update-session.d.ts +1 -1
  26. package/dist/api-handlers/auth/update-session.js +12 -14
  27. package/dist/api-handlers/auth/verify-code.d.ts +43 -43
  28. package/dist/api-handlers/auth/verify-code.js +90 -94
  29. package/dist/api-handlers/session/viability.js +114 -146
  30. package/dist/api-handlers/test/force-expire.js +59 -65
  31. package/dist/auth/auth-decision.js +182 -182
  32. package/dist/auth/better-auth.d.ts +3 -6
  33. package/dist/auth/better-auth.js +3 -6
  34. package/dist/auth/route-config.js +2 -2
  35. package/dist/auth/utils/token-utils.d.ts +83 -84
  36. package/dist/auth/utils/token-utils.js +218 -219
  37. package/dist/client/AuthContext.js +115 -112
  38. package/dist/client/better-auth-client.d.ts +1020 -1020
  39. package/dist/client/fetch-with-auth.js +2 -2
  40. package/dist/components/SessionSync.js +121 -119
  41. package/dist/components/account/MobileNavDrawer.js +64 -64
  42. package/dist/components/account/UserAvatarMenu.js +91 -88
  43. package/dist/components/admin/VibeAdminLayout.js +71 -69
  44. package/dist/hooks/useAuth.js +9 -7
  45. package/dist/hooks/useAuthSettings.js +93 -93
  46. package/dist/hooks/useAvailableProviders.d.ts +43 -45
  47. package/dist/hooks/useAvailableProviders.js +112 -108
  48. package/dist/hooks/useSessionExpiration.d.ts +2 -3
  49. package/dist/hooks/useSessionExpiration.js +2 -2
  50. package/dist/hooks/useViabilitySession.js +3 -2
  51. package/dist/index.js +4 -6
  52. package/dist/lib/app-slug.d.ts +95 -95
  53. package/dist/lib/app-slug.js +172 -172
  54. package/dist/lib/standardized-client-api.js +10 -5
  55. package/dist/lib/startup-init.js +21 -25
  56. package/dist/lib/test-aware-get-token.js +86 -81
  57. package/dist/lib/token-lifecycle.d.ts +78 -52
  58. package/dist/lib/token-lifecycle.js +360 -398
  59. package/dist/pages/admin-login/page.js +73 -83
  60. package/dist/pages/client-admin/ClientSiteAdminPage.js +179 -177
  61. package/dist/pages/login/page.js +202 -211
  62. package/dist/pages/showcase/ShowcasePage.js +142 -140
  63. package/dist/pages/test-env/EmergencyLogoutPage.js +99 -98
  64. package/dist/pages/test-env/JwtInspectPage.js +116 -114
  65. package/dist/pages/test-env/RefreshTokenPage.js +4 -2
  66. package/dist/pages/test-env/TestEnvPage.js +51 -49
  67. package/dist/pages/verify-code/page.js +412 -408
  68. package/dist/routes/auth/logout.d.ts +31 -31
  69. package/dist/routes/auth/logout.js +98 -113
  70. package/dist/routes/auth/nextauth.d.ts +14 -11
  71. package/dist/routes/auth/nextauth.js +25 -57
  72. package/dist/routes/auth/session.js +157 -179
  73. package/dist/routes/auth/viability.js +190 -201
  74. package/dist/server/auth.d.ts +50 -0
  75. package/dist/server/auth.js +62 -0
  76. package/dist/stores/authStore.js +19 -23
  77. package/dist/utils/logout.js +5 -5
  78. package/package.json +1 -3
  79. package/src/api/auth-handler.ts +550 -549
  80. package/src/api-handlers/account/change-password.ts +5 -8
  81. package/src/api-handlers/admin/analytics.ts +4 -6
  82. package/src/api-handlers/admin/audit.ts +5 -7
  83. package/src/api-handlers/admin/index.ts +1 -2
  84. package/src/api-handlers/admin/redis-sessions.ts +6 -8
  85. package/src/api-handlers/admin/sessions.ts +5 -7
  86. package/src/api-handlers/admin/site-logs.ts +8 -10
  87. package/src/api-handlers/admin/stats.ts +4 -6
  88. package/src/api-handlers/admin/users.ts +5 -7
  89. package/src/api-handlers/admin/vibe-data.ts +10 -12
  90. package/src/api-handlers/auth/refresh.ts +5 -7
  91. package/src/api-handlers/auth/signout.ts +5 -6
  92. package/src/api-handlers/auth/status.ts +4 -7
  93. package/src/api-handlers/auth/update-session.ts +123 -125
  94. package/src/api-handlers/auth/verify-code.ts +9 -13
  95. package/src/api-handlers/session/viability.ts +10 -47
  96. package/src/api-handlers/test/force-expire.ts +4 -11
  97. package/src/auth/auth-decision.ts +1 -1
  98. package/src/auth/better-auth.ts +138 -141
  99. package/src/auth/route-config.ts +219 -219
  100. package/src/auth/utils/token-utils.ts +0 -1
  101. package/src/client/AuthContext.tsx +6 -2
  102. package/src/client/fetch-with-auth.ts +47 -47
  103. package/src/components/SessionSync.tsx +6 -5
  104. package/src/components/account/MobileNavDrawer.tsx +3 -3
  105. package/src/components/account/UserAvatarMenu.tsx +6 -3
  106. package/src/components/admin/VibeAdminLayout.tsx +4 -2
  107. package/src/config/logger.ts +1 -1
  108. package/src/hooks/useAuth.ts +117 -115
  109. package/src/hooks/useAuthSettings.ts +2 -2
  110. package/src/hooks/useAvailableProviders.ts +9 -5
  111. package/src/hooks/useSessionExpiration.ts +101 -102
  112. package/src/hooks/useViabilitySession.ts +336 -335
  113. package/src/index.ts +60 -63
  114. package/src/lib/api-handler.ts +0 -1
  115. package/src/lib/app-slug.ts +6 -6
  116. package/src/lib/standardized-client-api.ts +901 -895
  117. package/src/lib/startup-init.ts +243 -247
  118. package/src/lib/test-aware-get-token.ts +22 -12
  119. package/src/lib/token-lifecycle.ts +12 -53
  120. package/src/pages/admin-login/page.tsx +9 -17
  121. package/src/pages/client-admin/ClientSiteAdminPage.tsx +4 -2
  122. package/src/pages/login/page.tsx +21 -28
  123. package/src/pages/showcase/ShowcasePage.tsx +4 -2
  124. package/src/pages/test-env/EmergencyLogoutPage.tsx +7 -6
  125. package/src/pages/test-env/JwtInspectPage.tsx +5 -3
  126. package/src/pages/test-env/RefreshTokenPage.tsx +157 -155
  127. package/src/pages/test-env/TestEnvPage.tsx +4 -2
  128. package/src/pages/verify-code/page.tsx +10 -6
  129. package/src/routes/auth/logout.ts +7 -25
  130. package/src/routes/auth/nextauth.ts +45 -71
  131. package/src/routes/auth/session.ts +25 -50
  132. package/src/routes/auth/viability.ts +7 -19
  133. package/src/server/auth.ts +60 -0
  134. package/src/stores/authStore.ts +1899 -1904
  135. package/src/utils/logout.ts +30 -30
  136. package/src/auth/auth-options.ts +0 -237
  137. package/src/auth/callbacks/index.ts +0 -7
  138. package/src/auth/callbacks/jwt.ts +0 -382
  139. package/src/auth/callbacks/session.ts +0 -243
  140. package/src/auth/callbacks/signin.ts +0 -56
  141. package/src/auth/events/index.ts +0 -5
  142. package/src/auth/events/signout.ts +0 -33
  143. package/src/auth/providers/credentials.ts +0 -256
  144. package/src/auth/providers/index.ts +0 -6
  145. package/src/auth/providers/oauth.ts +0 -114
  146. package/src/lib/nextauth-secret.ts +0 -121
  147. package/src/types/next-auth.d.ts +0 -15
@@ -1,20 +1,19 @@
1
- /**
2
- * Admin Audit Logs API Handler
3
- *
4
- * Provides admin-level access to audit logs using service account credentials.
5
- *
6
- * @version 1.0
7
- * @requires Admin role (vibe_app_admin or payez_admin)
8
- */
9
- import { NextRequest, NextResponse } from 'next/server';
10
- export interface AdminAuditHandlerConfig {
11
- getAuthOptions: () => Promise<any>;
12
- }
13
- /**
14
- * GET /api/admin/audit - List audit logs
15
- * POST /api/admin/audit - Stats
16
- */
17
- export declare function createAuditHandler(config: AdminAuditHandlerConfig): {
18
- GET(request: NextRequest): Promise<NextResponse<unknown>>;
19
- POST(request: NextRequest): Promise<NextResponse<unknown>>;
20
- };
1
+ /**
2
+ * Admin Audit Logs API Handler
3
+ *
4
+ * Provides admin-level access to audit logs using service account credentials.
5
+ *
6
+ * @version 1.0
7
+ * @requires Admin role (vibe_app_admin or payez_admin)
8
+ */
9
+ import { NextRequest, NextResponse } from 'next/server';
10
+ export interface AdminAuditHandlerConfig {
11
+ }
12
+ /**
13
+ * GET /api/admin/audit - List audit logs
14
+ * POST /api/admin/audit - Stats
15
+ */
16
+ export declare function createAuditHandler(config: AdminAuditHandlerConfig): {
17
+ GET(request: NextRequest): Promise<NextResponse<unknown>>;
18
+ POST(request: NextRequest): Promise<NextResponse<unknown>>;
19
+ };
@@ -1,214 +1,213 @@
1
- "use strict";
2
- /**
3
- * Admin Audit Logs API Handler
4
- *
5
- * Provides admin-level access to audit logs using service account credentials.
6
- *
7
- * @version 1.0
8
- * @requires Admin role (vibe_app_admin or payez_admin)
9
- */
10
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
11
- if (k2 === undefined) k2 = k;
12
- var desc = Object.getOwnPropertyDescriptor(m, k);
13
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
14
- desc = { enumerable: true, get: function() { return m[k]; } };
15
- }
16
- Object.defineProperty(o, k2, desc);
17
- }) : (function(o, m, k, k2) {
18
- if (k2 === undefined) k2 = k;
19
- o[k2] = m[k];
20
- }));
21
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
22
- Object.defineProperty(o, "default", { enumerable: true, value: v });
23
- }) : function(o, v) {
24
- o["default"] = v;
25
- });
26
- var __importStar = (this && this.__importStar) || (function () {
27
- var ownKeys = function(o) {
28
- ownKeys = Object.getOwnPropertyNames || function (o) {
29
- var ar = [];
30
- for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
31
- return ar;
32
- };
33
- return ownKeys(o);
34
- };
35
- return function (mod) {
36
- if (mod && mod.__esModule) return mod;
37
- var result = {};
38
- if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
39
- __setModuleDefault(result, mod);
40
- return result;
41
- };
42
- })();
43
- Object.defineProperty(exports, "__esModule", { value: true });
44
- exports.createAuditHandler = createAuditHandler;
45
- const server_1 = require("next/server");
46
- const next_auth_1 = require("next-auth");
47
- const startup_init_1 = require("../../lib/startup-init");
48
- const roles_1 = require("../../lib/roles");
49
- async function checkAdminRole(getAuthOptions) {
50
- const authOptions = await getAuthOptions();
51
- const session = await (0, next_auth_1.getServerSession)(authOptions);
52
- if (!session?.user) {
53
- return {
54
- isAdmin: false,
55
- error: server_1.NextResponse.json({ success: false, error: 'Please sign in' }, { status: 401 }),
56
- };
57
- }
58
- const userRoles = session.user?.roles || [];
59
- const hasAdminRole = roles_1.ADMIN_ROLES.some(role => userRoles.includes(role));
60
- if (!hasAdminRole) {
61
- return {
62
- isAdmin: false,
63
- error: server_1.NextResponse.json({ success: false, error: 'Admin access required' }, { status: 403 }),
64
- };
65
- }
66
- return { isAdmin: true };
67
- }
68
- async function vibeServiceRequest(endpoint, options) {
69
- const idpUrl = process.env.NEXT_PUBLIC_IDP_URL || process.env.IDP_URL;
70
- const clientId = process.env.VIBE_CLIENT_ID;
71
- const signingKey = process.env.VIBE_HMAC_KEY;
72
- if (!idpUrl || !clientId || !signingKey) {
73
- return { ok: false, status: 500, data: null, error: 'Vibe not configured' };
74
- }
75
- const timestamp = Math.floor(Date.now() / 1000);
76
- const stringToSign = `${timestamp}|${options.method}|${endpoint}`;
77
- const crypto = await Promise.resolve().then(() => __importStar(require('crypto')));
78
- const signature = crypto
79
- .createHmac('sha256', Buffer.from(signingKey, 'base64'))
80
- .update(stringToSign)
81
- .digest('base64');
82
- const proxyUrl = `${idpUrl}/api/vibe/proxy`;
83
- // Get the client slug from startup config for multi-client admin support
84
- const idpConfig = (0, startup_init_1.getStartupIDPConfig)();
85
- const idpClientId = idpConfig?.clientSlug || idpConfig?.clientId;
86
- try {
87
- const res = await fetch(proxyUrl, {
88
- method: 'POST',
89
- headers: {
90
- 'Content-Type': 'application/json',
91
- 'X-Vibe-Client-Id': clientId,
92
- 'X-Vibe-Timestamp': String(timestamp),
93
- 'X-Vibe-Signature': signature,
94
- ...(idpClientId && { 'X-Client-Id': idpClientId }),
95
- },
96
- body: JSON.stringify({
97
- endpoint,
98
- method: options.method,
99
- data: options.body ?? null,
100
- }),
101
- cache: 'no-store',
102
- });
103
- if (res.status === 204)
104
- return { ok: true, status: 204, data: null };
105
- if (!res.ok) {
106
- const errorText = await res.text();
107
- return { ok: false, status: res.status, data: null, error: errorText };
108
- }
109
- const body = await res.json();
110
- return { ok: true, status: res.status, data: body };
111
- }
112
- catch (error) {
113
- return { ok: false, status: 0, data: null, error: String(error) };
114
- }
115
- }
116
- /**
117
- * GET /api/admin/audit - List audit logs
118
- * POST /api/admin/audit - Stats
119
- */
120
- function createAuditHandler(config) {
121
- return {
122
- async GET(request) {
123
- const adminCheck = await checkAdminRole(config.getAuthOptions);
124
- if (adminCheck.error)
125
- return adminCheck.error;
126
- const { searchParams } = new URL(request.url);
127
- const action = searchParams.get('action');
128
- const userId = searchParams.get('userId');
129
- const startDate = searchParams.get('startDate');
130
- const endDate = searchParams.get('endDate');
131
- const page = parseInt(searchParams.get('page') || '1');
132
- const pageSize = parseInt(searchParams.get('pageSize') || '50');
133
- const queryBody = {
134
- page,
135
- pageSize,
136
- orderBy: 'created_at',
137
- orderDirection: 'desc',
138
- };
139
- const conditions = [];
140
- if (action) {
141
- conditions.push({ field: 'action', operator: 'eq', value: action });
142
- }
143
- if (userId) {
144
- conditions.push({ field: 'user_id', operator: 'eq', value: userId });
145
- }
146
- if (startDate) {
147
- conditions.push({ field: 'created_at', operator: 'gte', value: startDate });
148
- }
149
- if (endDate) {
150
- conditions.push({ field: 'created_at', operator: 'lte', value: endDate });
151
- }
152
- if (conditions.length === 1) {
153
- queryBody.filter = conditions[0];
154
- }
155
- else if (conditions.length > 1) {
156
- queryBody.filter = { operator: 'and', conditions };
157
- }
158
- const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: queryBody });
159
- if (!result.ok) {
160
- return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
161
- }
162
- const rawLogs = result.data?.data || result.data?.documents || [];
163
- const logs = rawLogs.map((log) => ({
164
- id: log.id || log.document_id,
165
- user_id: log.user_id || log.idp_user_id,
166
- email: log.email,
167
- action: log.action,
168
- resource_type: log.resource_type,
169
- resource_id: log.resource_id,
170
- details: log.details,
171
- ip_address: log.ip_address,
172
- user_agent: log.user_agent,
173
- created_at: log.created_at,
174
- }));
175
- return server_1.NextResponse.json({
176
- logs,
177
- meta: result.data?.meta || { total: logs.length, page, pageSize },
178
- });
179
- },
180
- async POST(request) {
181
- const adminCheck = await checkAdminRole(config.getAuthOptions);
182
- if (adminCheck.error)
183
- return adminCheck.error;
184
- const body = await request.json();
185
- const { action } = body;
186
- if (action === 'stats') {
187
- const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: { page: 1, pageSize: 10000 } });
188
- if (!result.ok) {
189
- return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
190
- }
191
- const logs = result.data?.data || result.data?.documents || [];
192
- const now = new Date();
193
- const oneDayAgo = new Date(now.getTime() - 24 * 60 * 60 * 1000);
194
- const oneWeekAgo = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000);
195
- const stats = {
196
- total: logs.length,
197
- today: logs.filter((l) => new Date(l.created_at) > oneDayAgo).length,
198
- thisWeek: logs.filter((l) => new Date(l.created_at) > oneWeekAgo).length,
199
- uniqueUsers: new Set(logs.map((l) => l.user_id || l.idp_user_id)).size,
200
- byAction: {},
201
- byResourceType: {},
202
- };
203
- logs.forEach((l) => {
204
- const act = l.action || 'unknown';
205
- stats.byAction[act] = (stats.byAction[act] || 0) + 1;
206
- const rt = l.resource_type || 'unknown';
207
- stats.byResourceType[rt] = (stats.byResourceType[rt] || 0) + 1;
208
- });
209
- return server_1.NextResponse.json({ stats });
210
- }
211
- return server_1.NextResponse.json({ error: 'Invalid action' }, { status: 400 });
212
- },
213
- };
214
- }
1
+ "use strict";
2
+ /**
3
+ * Admin Audit Logs API Handler
4
+ *
5
+ * Provides admin-level access to audit logs using service account credentials.
6
+ *
7
+ * @version 1.0
8
+ * @requires Admin role (vibe_app_admin or payez_admin)
9
+ */
10
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
11
+ if (k2 === undefined) k2 = k;
12
+ var desc = Object.getOwnPropertyDescriptor(m, k);
13
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
14
+ desc = { enumerable: true, get: function() { return m[k]; } };
15
+ }
16
+ Object.defineProperty(o, k2, desc);
17
+ }) : (function(o, m, k, k2) {
18
+ if (k2 === undefined) k2 = k;
19
+ o[k2] = m[k];
20
+ }));
21
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
22
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
23
+ }) : function(o, v) {
24
+ o["default"] = v;
25
+ });
26
+ var __importStar = (this && this.__importStar) || (function () {
27
+ var ownKeys = function(o) {
28
+ ownKeys = Object.getOwnPropertyNames || function (o) {
29
+ var ar = [];
30
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
31
+ return ar;
32
+ };
33
+ return ownKeys(o);
34
+ };
35
+ return function (mod) {
36
+ if (mod && mod.__esModule) return mod;
37
+ var result = {};
38
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
39
+ __setModuleDefault(result, mod);
40
+ return result;
41
+ };
42
+ })();
43
+ Object.defineProperty(exports, "__esModule", { value: true });
44
+ exports.createAuditHandler = createAuditHandler;
45
+ const server_1 = require("next/server");
46
+ const auth_1 = require("../../server/auth");
47
+ const startup_init_1 = require("../../lib/startup-init");
48
+ const roles_1 = require("../../lib/roles");
49
+ async function checkAdminRole(request) {
50
+ const session = await (0, auth_1.getSession)(request);
51
+ if (!session?.user) {
52
+ return {
53
+ isAdmin: false,
54
+ error: server_1.NextResponse.json({ success: false, error: 'Please sign in' }, { status: 401 }),
55
+ };
56
+ }
57
+ const userRoles = session.user?.roles || [];
58
+ const hasAdminRole = roles_1.ADMIN_ROLES.some(role => userRoles.includes(role));
59
+ if (!hasAdminRole) {
60
+ return {
61
+ isAdmin: false,
62
+ error: server_1.NextResponse.json({ success: false, error: 'Admin access required' }, { status: 403 }),
63
+ };
64
+ }
65
+ return { isAdmin: true };
66
+ }
67
+ async function vibeServiceRequest(endpoint, options) {
68
+ const idpUrl = process.env.NEXT_PUBLIC_IDP_URL || process.env.IDP_URL;
69
+ const clientId = process.env.VIBE_CLIENT_ID;
70
+ const signingKey = process.env.VIBE_HMAC_KEY;
71
+ if (!idpUrl || !clientId || !signingKey) {
72
+ return { ok: false, status: 500, data: null, error: 'Vibe not configured' };
73
+ }
74
+ const timestamp = Math.floor(Date.now() / 1000);
75
+ const stringToSign = `${timestamp}|${options.method}|${endpoint}`;
76
+ const crypto = await Promise.resolve().then(() => __importStar(require('crypto')));
77
+ const signature = crypto
78
+ .createHmac('sha256', Buffer.from(signingKey, 'base64'))
79
+ .update(stringToSign)
80
+ .digest('base64');
81
+ const proxyUrl = `${idpUrl}/api/vibe/proxy`;
82
+ // Get the client slug from startup config for multi-client admin support
83
+ const idpConfig = (0, startup_init_1.getStartupIDPConfig)();
84
+ const idpClientId = idpConfig?.clientSlug || idpConfig?.clientId;
85
+ try {
86
+ const res = await fetch(proxyUrl, {
87
+ method: 'POST',
88
+ headers: {
89
+ 'Content-Type': 'application/json',
90
+ 'X-Vibe-Client-Id': clientId,
91
+ 'X-Vibe-Timestamp': String(timestamp),
92
+ 'X-Vibe-Signature': signature,
93
+ ...(idpClientId && { 'X-Client-Id': idpClientId }),
94
+ },
95
+ body: JSON.stringify({
96
+ endpoint,
97
+ method: options.method,
98
+ data: options.body ?? null,
99
+ }),
100
+ cache: 'no-store',
101
+ });
102
+ if (res.status === 204)
103
+ return { ok: true, status: 204, data: null };
104
+ if (!res.ok) {
105
+ const errorText = await res.text();
106
+ return { ok: false, status: res.status, data: null, error: errorText };
107
+ }
108
+ const body = await res.json();
109
+ return { ok: true, status: res.status, data: body };
110
+ }
111
+ catch (error) {
112
+ return { ok: false, status: 0, data: null, error: String(error) };
113
+ }
114
+ }
115
+ /**
116
+ * GET /api/admin/audit - List audit logs
117
+ * POST /api/admin/audit - Stats
118
+ */
119
+ function createAuditHandler(config) {
120
+ return {
121
+ async GET(request) {
122
+ const adminCheck = await checkAdminRole(request);
123
+ if (adminCheck.error)
124
+ return adminCheck.error;
125
+ const { searchParams } = new URL(request.url);
126
+ const action = searchParams.get('action');
127
+ const userId = searchParams.get('userId');
128
+ const startDate = searchParams.get('startDate');
129
+ const endDate = searchParams.get('endDate');
130
+ const page = parseInt(searchParams.get('page') || '1');
131
+ const pageSize = parseInt(searchParams.get('pageSize') || '50');
132
+ const queryBody = {
133
+ page,
134
+ pageSize,
135
+ orderBy: 'created_at',
136
+ orderDirection: 'desc',
137
+ };
138
+ const conditions = [];
139
+ if (action) {
140
+ conditions.push({ field: 'action', operator: 'eq', value: action });
141
+ }
142
+ if (userId) {
143
+ conditions.push({ field: 'user_id', operator: 'eq', value: userId });
144
+ }
145
+ if (startDate) {
146
+ conditions.push({ field: 'created_at', operator: 'gte', value: startDate });
147
+ }
148
+ if (endDate) {
149
+ conditions.push({ field: 'created_at', operator: 'lte', value: endDate });
150
+ }
151
+ if (conditions.length === 1) {
152
+ queryBody.filter = conditions[0];
153
+ }
154
+ else if (conditions.length > 1) {
155
+ queryBody.filter = { operator: 'and', conditions };
156
+ }
157
+ const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: queryBody });
158
+ if (!result.ok) {
159
+ return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
160
+ }
161
+ const rawLogs = result.data?.data || result.data?.documents || [];
162
+ const logs = rawLogs.map((log) => ({
163
+ id: log.id || log.document_id,
164
+ user_id: log.user_id || log.idp_user_id,
165
+ email: log.email,
166
+ action: log.action,
167
+ resource_type: log.resource_type,
168
+ resource_id: log.resource_id,
169
+ details: log.details,
170
+ ip_address: log.ip_address,
171
+ user_agent: log.user_agent,
172
+ created_at: log.created_at,
173
+ }));
174
+ return server_1.NextResponse.json({
175
+ logs,
176
+ meta: result.data?.meta || { total: logs.length, page, pageSize },
177
+ });
178
+ },
179
+ async POST(request) {
180
+ const adminCheck = await checkAdminRole(request);
181
+ if (adminCheck.error)
182
+ return adminCheck.error;
183
+ const body = await request.json();
184
+ const { action } = body;
185
+ if (action === 'stats') {
186
+ const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: { page: 1, pageSize: 10000 } });
187
+ if (!result.ok) {
188
+ return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
189
+ }
190
+ const logs = result.data?.data || result.data?.documents || [];
191
+ const now = new Date();
192
+ const oneDayAgo = new Date(now.getTime() - 24 * 60 * 60 * 1000);
193
+ const oneWeekAgo = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000);
194
+ const stats = {
195
+ total: logs.length,
196
+ today: logs.filter((l) => new Date(l.created_at) > oneDayAgo).length,
197
+ thisWeek: logs.filter((l) => new Date(l.created_at) > oneWeekAgo).length,
198
+ uniqueUsers: new Set(logs.map((l) => l.user_id || l.idp_user_id)).size,
199
+ byAction: {},
200
+ byResourceType: {},
201
+ };
202
+ logs.forEach((l) => {
203
+ const act = l.action || 'unknown';
204
+ stats.byAction[act] = (stats.byAction[act] || 0) + 1;
205
+ const rt = l.resource_type || 'unknown';
206
+ stats.byResourceType[rt] = (stats.byResourceType[rt] || 0) + 1;
207
+ });
208
+ return server_1.NextResponse.json({ stats });
209
+ }
210
+ return server_1.NextResponse.json({ error: 'Invalid action' }, { status: 400 });
211
+ },
212
+ };
213
+ }
@@ -1,22 +1,21 @@
1
- /**
2
- * Admin API Handlers
3
- *
4
- * Provides admin-level API handlers for Vibe data access.
5
- * These handlers use service account credentials to bypass user filtering.
6
- *
7
- * Usage:
8
- * ------
9
- * // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
10
- * import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
11
- * import { getAuthOptions } from '@payez/next-mvp/auth/auth-options';
12
- *
13
- * export const GET = createGetTableDataHandler({ getAuthOptions });
14
- */
15
- export { createGetCollectionsHandler, createGetTablesHandler, createGetTableDataHandler, createGetRecordHandler, createUpdateRecordHandler, createDeleteRecordHandler, createQueryHandler, type AdminVibeHandlerConfig, } from './vibe-data';
16
- export { createSessionsHandler, type AdminSessionsHandlerConfig, } from './sessions';
17
- export { createUsersHandler, type AdminUsersHandlerConfig, } from './users';
18
- export { createAuditHandler, type AdminAuditHandlerConfig, } from './audit';
19
- export { createAnalyticsHandler, type AdminAnalyticsHandlerConfig, } from './analytics';
20
- export { createSiteLogsHandler, createSiteLogsStatsHandler, createSiteLogsDrainHandler, createSiteLogsQueueHandler, type SiteLogsHandlerConfig, } from './site-logs';
21
- export { createRedisSessionsHandler, createRedisSessionRevokeHandler, type RedisSessionsHandlerConfig, } from './redis-sessions';
22
- export { createStatsHandler, type AdminStatsHandlerConfig, } from './stats';
1
+ /**
2
+ * Admin API Handlers
3
+ *
4
+ * Provides admin-level API handlers for Vibe data access.
5
+ * These handlers use service account credentials to bypass user filtering.
6
+ *
7
+ * Usage:
8
+ * ------
9
+ * // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
10
+ * import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
11
+ *
12
+ * export const GET = createGetTableDataHandler({ ... });
13
+ */
14
+ export { createGetCollectionsHandler, createGetTablesHandler, createGetTableDataHandler, createGetRecordHandler, createUpdateRecordHandler, createDeleteRecordHandler, createQueryHandler, type AdminVibeHandlerConfig, } from './vibe-data';
15
+ export { createSessionsHandler, type AdminSessionsHandlerConfig, } from './sessions';
16
+ export { createUsersHandler, type AdminUsersHandlerConfig, } from './users';
17
+ export { createAuditHandler, type AdminAuditHandlerConfig, } from './audit';
18
+ export { createAnalyticsHandler, type AdminAnalyticsHandlerConfig, } from './analytics';
19
+ export { createSiteLogsHandler, createSiteLogsStatsHandler, createSiteLogsDrainHandler, createSiteLogsQueueHandler, type SiteLogsHandlerConfig, } from './site-logs';
20
+ export { createRedisSessionsHandler, createRedisSessionRevokeHandler, type RedisSessionsHandlerConfig, } from './redis-sessions';
21
+ export { createStatsHandler, type AdminStatsHandlerConfig, } from './stats';
@@ -1,43 +1,42 @@
1
- "use strict";
2
- /**
3
- * Admin API Handlers
4
- *
5
- * Provides admin-level API handlers for Vibe data access.
6
- * These handlers use service account credentials to bypass user filtering.
7
- *
8
- * Usage:
9
- * ------
10
- * // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
11
- * import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
12
- * import { getAuthOptions } from '@payez/next-mvp/auth/auth-options';
13
- *
14
- * export const GET = createGetTableDataHandler({ getAuthOptions });
15
- */
16
- Object.defineProperty(exports, "__esModule", { value: true });
17
- exports.createStatsHandler = exports.createRedisSessionRevokeHandler = exports.createRedisSessionsHandler = exports.createSiteLogsQueueHandler = exports.createSiteLogsDrainHandler = exports.createSiteLogsStatsHandler = exports.createSiteLogsHandler = exports.createAnalyticsHandler = exports.createAuditHandler = exports.createUsersHandler = exports.createSessionsHandler = exports.createQueryHandler = exports.createDeleteRecordHandler = exports.createUpdateRecordHandler = exports.createGetRecordHandler = exports.createGetTableDataHandler = exports.createGetTablesHandler = exports.createGetCollectionsHandler = void 0;
18
- var vibe_data_1 = require("./vibe-data");
19
- Object.defineProperty(exports, "createGetCollectionsHandler", { enumerable: true, get: function () { return vibe_data_1.createGetCollectionsHandler; } });
20
- Object.defineProperty(exports, "createGetTablesHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTablesHandler; } });
21
- Object.defineProperty(exports, "createGetTableDataHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTableDataHandler; } });
22
- Object.defineProperty(exports, "createGetRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createGetRecordHandler; } });
23
- Object.defineProperty(exports, "createUpdateRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createUpdateRecordHandler; } });
24
- Object.defineProperty(exports, "createDeleteRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createDeleteRecordHandler; } });
25
- Object.defineProperty(exports, "createQueryHandler", { enumerable: true, get: function () { return vibe_data_1.createQueryHandler; } });
26
- var sessions_1 = require("./sessions");
27
- Object.defineProperty(exports, "createSessionsHandler", { enumerable: true, get: function () { return sessions_1.createSessionsHandler; } });
28
- var users_1 = require("./users");
29
- Object.defineProperty(exports, "createUsersHandler", { enumerable: true, get: function () { return users_1.createUsersHandler; } });
30
- var audit_1 = require("./audit");
31
- Object.defineProperty(exports, "createAuditHandler", { enumerable: true, get: function () { return audit_1.createAuditHandler; } });
32
- var analytics_1 = require("./analytics");
33
- Object.defineProperty(exports, "createAnalyticsHandler", { enumerable: true, get: function () { return analytics_1.createAnalyticsHandler; } });
34
- var site_logs_1 = require("./site-logs");
35
- Object.defineProperty(exports, "createSiteLogsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsHandler; } });
36
- Object.defineProperty(exports, "createSiteLogsStatsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsStatsHandler; } });
37
- Object.defineProperty(exports, "createSiteLogsDrainHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsDrainHandler; } });
38
- Object.defineProperty(exports, "createSiteLogsQueueHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsQueueHandler; } });
39
- var redis_sessions_1 = require("./redis-sessions");
40
- Object.defineProperty(exports, "createRedisSessionsHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionsHandler; } });
41
- Object.defineProperty(exports, "createRedisSessionRevokeHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionRevokeHandler; } });
42
- var stats_1 = require("./stats");
43
- Object.defineProperty(exports, "createStatsHandler", { enumerable: true, get: function () { return stats_1.createStatsHandler; } });
1
+ "use strict";
2
+ /**
3
+ * Admin API Handlers
4
+ *
5
+ * Provides admin-level API handlers for Vibe data access.
6
+ * These handlers use service account credentials to bypass user filtering.
7
+ *
8
+ * Usage:
9
+ * ------
10
+ * // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
11
+ * import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
12
+ *
13
+ * export const GET = createGetTableDataHandler({ ... });
14
+ */
15
+ Object.defineProperty(exports, "__esModule", { value: true });
16
+ exports.createStatsHandler = exports.createRedisSessionRevokeHandler = exports.createRedisSessionsHandler = exports.createSiteLogsQueueHandler = exports.createSiteLogsDrainHandler = exports.createSiteLogsStatsHandler = exports.createSiteLogsHandler = exports.createAnalyticsHandler = exports.createAuditHandler = exports.createUsersHandler = exports.createSessionsHandler = exports.createQueryHandler = exports.createDeleteRecordHandler = exports.createUpdateRecordHandler = exports.createGetRecordHandler = exports.createGetTableDataHandler = exports.createGetTablesHandler = exports.createGetCollectionsHandler = void 0;
17
+ var vibe_data_1 = require("./vibe-data");
18
+ Object.defineProperty(exports, "createGetCollectionsHandler", { enumerable: true, get: function () { return vibe_data_1.createGetCollectionsHandler; } });
19
+ Object.defineProperty(exports, "createGetTablesHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTablesHandler; } });
20
+ Object.defineProperty(exports, "createGetTableDataHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTableDataHandler; } });
21
+ Object.defineProperty(exports, "createGetRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createGetRecordHandler; } });
22
+ Object.defineProperty(exports, "createUpdateRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createUpdateRecordHandler; } });
23
+ Object.defineProperty(exports, "createDeleteRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createDeleteRecordHandler; } });
24
+ Object.defineProperty(exports, "createQueryHandler", { enumerable: true, get: function () { return vibe_data_1.createQueryHandler; } });
25
+ var sessions_1 = require("./sessions");
26
+ Object.defineProperty(exports, "createSessionsHandler", { enumerable: true, get: function () { return sessions_1.createSessionsHandler; } });
27
+ var users_1 = require("./users");
28
+ Object.defineProperty(exports, "createUsersHandler", { enumerable: true, get: function () { return users_1.createUsersHandler; } });
29
+ var audit_1 = require("./audit");
30
+ Object.defineProperty(exports, "createAuditHandler", { enumerable: true, get: function () { return audit_1.createAuditHandler; } });
31
+ var analytics_1 = require("./analytics");
32
+ Object.defineProperty(exports, "createAnalyticsHandler", { enumerable: true, get: function () { return analytics_1.createAnalyticsHandler; } });
33
+ var site_logs_1 = require("./site-logs");
34
+ Object.defineProperty(exports, "createSiteLogsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsHandler; } });
35
+ Object.defineProperty(exports, "createSiteLogsStatsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsStatsHandler; } });
36
+ Object.defineProperty(exports, "createSiteLogsDrainHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsDrainHandler; } });
37
+ Object.defineProperty(exports, "createSiteLogsQueueHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsQueueHandler; } });
38
+ var redis_sessions_1 = require("./redis-sessions");
39
+ Object.defineProperty(exports, "createRedisSessionsHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionsHandler; } });
40
+ Object.defineProperty(exports, "createRedisSessionRevokeHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionRevokeHandler; } });
41
+ var stats_1 = require("./stats");
42
+ Object.defineProperty(exports, "createStatsHandler", { enumerable: true, get: function () { return stats_1.createStatsHandler; } });