@payez/next-mvp 3.9.1 → 4.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (526) hide show
  1. package/package.json +6 -18
  2. package/src/api/auth-handler.ts +550 -549
  3. package/src/api-handlers/account/change-password.ts +5 -8
  4. package/src/api-handlers/admin/analytics.ts +4 -6
  5. package/src/api-handlers/admin/audit.ts +5 -7
  6. package/src/api-handlers/admin/index.ts +1 -2
  7. package/src/api-handlers/admin/redis-sessions.ts +6 -8
  8. package/src/api-handlers/admin/sessions.ts +5 -7
  9. package/src/api-handlers/admin/site-logs.ts +8 -10
  10. package/src/api-handlers/admin/stats.ts +4 -6
  11. package/src/api-handlers/admin/users.ts +5 -7
  12. package/src/api-handlers/admin/vibe-data.ts +10 -12
  13. package/src/api-handlers/auth/refresh.ts +5 -7
  14. package/src/api-handlers/auth/signout.ts +5 -6
  15. package/src/api-handlers/auth/status.ts +4 -7
  16. package/src/api-handlers/auth/update-session.ts +123 -125
  17. package/src/api-handlers/auth/verify-code.ts +9 -13
  18. package/src/api-handlers/session/viability.ts +10 -47
  19. package/src/api-handlers/test/force-expire.ts +4 -11
  20. package/src/auth/auth-decision.ts +1 -1
  21. package/src/auth/better-auth.ts +138 -141
  22. package/src/auth/route-config.ts +219 -219
  23. package/src/auth/utils/token-utils.ts +0 -1
  24. package/src/client/AuthContext.tsx +6 -2
  25. package/src/client/fetch-with-auth.ts +47 -47
  26. package/src/components/SessionSync.tsx +6 -5
  27. package/src/components/account/MobileNavDrawer.tsx +3 -3
  28. package/src/components/account/UserAvatarMenu.tsx +6 -3
  29. package/src/components/admin/VibeAdminLayout.tsx +4 -2
  30. package/src/config/logger.ts +1 -1
  31. package/src/hooks/useAuth.ts +117 -115
  32. package/src/hooks/useAuthSettings.ts +2 -2
  33. package/src/hooks/useAvailableProviders.ts +9 -5
  34. package/src/hooks/useSessionExpiration.ts +101 -102
  35. package/src/hooks/useViabilitySession.ts +336 -335
  36. package/src/index.ts +60 -63
  37. package/src/lib/api-handler.ts +0 -1
  38. package/src/lib/app-slug.ts +6 -6
  39. package/src/lib/standardized-client-api.ts +901 -895
  40. package/src/lib/startup-init.ts +243 -247
  41. package/src/lib/test-aware-get-token.ts +22 -12
  42. package/src/lib/token-lifecycle.ts +12 -53
  43. package/src/pages/admin-login/page.tsx +9 -17
  44. package/src/pages/client-admin/ClientSiteAdminPage.tsx +4 -2
  45. package/src/pages/login/page.tsx +21 -28
  46. package/src/pages/showcase/ShowcasePage.tsx +4 -2
  47. package/src/pages/test-env/EmergencyLogoutPage.tsx +7 -6
  48. package/src/pages/test-env/JwtInspectPage.tsx +5 -3
  49. package/src/pages/test-env/RefreshTokenPage.tsx +157 -155
  50. package/src/pages/test-env/TestEnvPage.tsx +4 -2
  51. package/src/pages/verify-code/page.tsx +10 -6
  52. package/src/routes/auth/logout.ts +7 -25
  53. package/src/routes/auth/nextauth.ts +45 -71
  54. package/src/routes/auth/session.ts +25 -50
  55. package/src/routes/auth/viability.ts +7 -19
  56. package/src/server/auth.ts +60 -0
  57. package/src/stores/authStore.ts +1899 -1904
  58. package/src/utils/logout.ts +30 -30
  59. package/dist/api/auth-handler.d.ts +0 -67
  60. package/dist/api/auth-handler.js +0 -397
  61. package/dist/api/index.d.ts +0 -10
  62. package/dist/api/index.js +0 -19
  63. package/dist/api-handlers/account/change-password.d.ts +0 -9
  64. package/dist/api-handlers/account/change-password.js +0 -112
  65. package/dist/api-handlers/account/masked-info.d.ts +0 -2
  66. package/dist/api-handlers/account/masked-info.js +0 -41
  67. package/dist/api-handlers/account/profile.d.ts +0 -3
  68. package/dist/api-handlers/account/profile.js +0 -63
  69. package/dist/api-handlers/account/recovery/initiate.d.ts +0 -2
  70. package/dist/api-handlers/account/recovery/initiate.js +0 -26
  71. package/dist/api-handlers/account/recovery/send-code.d.ts +0 -2
  72. package/dist/api-handlers/account/recovery/send-code.js +0 -28
  73. package/dist/api-handlers/account/recovery/verify-code.d.ts +0 -2
  74. package/dist/api-handlers/account/recovery/verify-code.js +0 -28
  75. package/dist/api-handlers/account/reset-password.d.ts +0 -2
  76. package/dist/api-handlers/account/reset-password.js +0 -26
  77. package/dist/api-handlers/account/send-code.d.ts +0 -24
  78. package/dist/api-handlers/account/send-code.js +0 -60
  79. package/dist/api-handlers/account/update-phone.d.ts +0 -27
  80. package/dist/api-handlers/account/update-phone.js +0 -64
  81. package/dist/api-handlers/account/validate-password.d.ts +0 -17
  82. package/dist/api-handlers/account/validate-password.js +0 -81
  83. package/dist/api-handlers/account/verify-email.d.ts +0 -26
  84. package/dist/api-handlers/account/verify-email.js +0 -106
  85. package/dist/api-handlers/account/verify-sms.d.ts +0 -26
  86. package/dist/api-handlers/account/verify-sms.js +0 -106
  87. package/dist/api-handlers/admin/analytics.d.ts +0 -20
  88. package/dist/api-handlers/admin/analytics.js +0 -379
  89. package/dist/api-handlers/admin/audit.d.ts +0 -20
  90. package/dist/api-handlers/admin/audit.js +0 -214
  91. package/dist/api-handlers/admin/index.d.ts +0 -22
  92. package/dist/api-handlers/admin/index.js +0 -43
  93. package/dist/api-handlers/admin/redis-sessions.d.ts +0 -36
  94. package/dist/api-handlers/admin/redis-sessions.js +0 -204
  95. package/dist/api-handlers/admin/sessions.d.ts +0 -21
  96. package/dist/api-handlers/admin/sessions.js +0 -284
  97. package/dist/api-handlers/admin/site-logs.d.ts +0 -46
  98. package/dist/api-handlers/admin/site-logs.js +0 -318
  99. package/dist/api-handlers/admin/stats.d.ts +0 -21
  100. package/dist/api-handlers/admin/stats.js +0 -240
  101. package/dist/api-handlers/admin/users.d.ts +0 -20
  102. package/dist/api-handlers/admin/users.js +0 -222
  103. package/dist/api-handlers/admin/vibe-data.d.ts +0 -80
  104. package/dist/api-handlers/admin/vibe-data.js +0 -268
  105. package/dist/api-handlers/anon/preferences.d.ts +0 -37
  106. package/dist/api-handlers/anon/preferences.js +0 -96
  107. package/dist/api-handlers/auth/jwks.d.ts +0 -2
  108. package/dist/api-handlers/auth/jwks.js +0 -24
  109. package/dist/api-handlers/auth/login.d.ts +0 -42
  110. package/dist/api-handlers/auth/login.js +0 -178
  111. package/dist/api-handlers/auth/refresh.d.ts +0 -74
  112. package/dist/api-handlers/auth/refresh.js +0 -635
  113. package/dist/api-handlers/auth/signout.d.ts +0 -37
  114. package/dist/api-handlers/auth/signout.js +0 -187
  115. package/dist/api-handlers/auth/status.d.ts +0 -8
  116. package/dist/api-handlers/auth/status.js +0 -26
  117. package/dist/api-handlers/auth/update-session.d.ts +0 -37
  118. package/dist/api-handlers/auth/update-session.js +0 -95
  119. package/dist/api-handlers/auth/validate.d.ts +0 -6
  120. package/dist/api-handlers/auth/validate.js +0 -43
  121. package/dist/api-handlers/auth/verify-code.d.ts +0 -43
  122. package/dist/api-handlers/auth/verify-code.js +0 -94
  123. package/dist/api-handlers/session/refresh-viability.d.ts +0 -14
  124. package/dist/api-handlers/session/refresh-viability.js +0 -39
  125. package/dist/api-handlers/session/viability.d.ts +0 -13
  126. package/dist/api-handlers/session/viability.js +0 -146
  127. package/dist/api-handlers/test/force-expire.d.ts +0 -23
  128. package/dist/api-handlers/test/force-expire.js +0 -65
  129. package/dist/auth/auth-decision.d.ts +0 -39
  130. package/dist/auth/auth-decision.js +0 -182
  131. package/dist/auth/auth-options.d.ts +0 -57
  132. package/dist/auth/auth-options.js +0 -213
  133. package/dist/auth/better-auth.d.ts +0 -82
  134. package/dist/auth/better-auth.js +0 -122
  135. package/dist/auth/callbacks/index.d.ts +0 -6
  136. package/dist/auth/callbacks/index.js +0 -12
  137. package/dist/auth/callbacks/jwt.d.ts +0 -45
  138. package/dist/auth/callbacks/jwt.js +0 -305
  139. package/dist/auth/callbacks/session.d.ts +0 -60
  140. package/dist/auth/callbacks/session.js +0 -170
  141. package/dist/auth/callbacks/signin.d.ts +0 -23
  142. package/dist/auth/callbacks/signin.js +0 -44
  143. package/dist/auth/events/index.d.ts +0 -4
  144. package/dist/auth/events/index.js +0 -8
  145. package/dist/auth/events/signout.d.ts +0 -17
  146. package/dist/auth/events/signout.js +0 -32
  147. package/dist/auth/providers/credentials.d.ts +0 -32
  148. package/dist/auth/providers/credentials.js +0 -223
  149. package/dist/auth/providers/index.d.ts +0 -5
  150. package/dist/auth/providers/index.js +0 -21
  151. package/dist/auth/providers/oauth.d.ts +0 -26
  152. package/dist/auth/providers/oauth.js +0 -105
  153. package/dist/auth/route-config.d.ts +0 -66
  154. package/dist/auth/route-config.js +0 -190
  155. package/dist/auth/types/auth-types.d.ts +0 -417
  156. package/dist/auth/types/auth-types.js +0 -53
  157. package/dist/auth/types/index.d.ts +0 -6
  158. package/dist/auth/types/index.js +0 -22
  159. package/dist/auth/unauthenticated-routes.d.ts +0 -1
  160. package/dist/auth/unauthenticated-routes.js +0 -19
  161. package/dist/auth/utils/idp-client.d.ts +0 -94
  162. package/dist/auth/utils/idp-client.js +0 -384
  163. package/dist/auth/utils/index.d.ts +0 -5
  164. package/dist/auth/utils/index.js +0 -21
  165. package/dist/auth/utils/token-utils.d.ts +0 -84
  166. package/dist/auth/utils/token-utils.js +0 -219
  167. package/dist/client/AuthContext.d.ts +0 -19
  168. package/dist/client/AuthContext.js +0 -112
  169. package/dist/client/better-auth-client.d.ts +0 -1020
  170. package/dist/client/better-auth-client.js +0 -68
  171. package/dist/client/fetch-with-auth.d.ts +0 -11
  172. package/dist/client/fetch-with-auth.js +0 -44
  173. package/dist/client/fetchWithSession.d.ts +0 -3
  174. package/dist/client/fetchWithSession.js +0 -24
  175. package/dist/client/index.d.ts +0 -9
  176. package/dist/client/index.js +0 -20
  177. package/dist/client/useAnonSession.d.ts +0 -36
  178. package/dist/client/useAnonSession.js +0 -99
  179. package/dist/components/SessionSync.d.ts +0 -13
  180. package/dist/components/SessionSync.js +0 -119
  181. package/dist/components/SignalRHealthCheck.d.ts +0 -10
  182. package/dist/components/SignalRHealthCheck.js +0 -97
  183. package/dist/components/account/MobileNavDrawer.d.ts +0 -32
  184. package/dist/components/account/MobileNavDrawer.js +0 -81
  185. package/dist/components/account/UserAvatarMenu.d.ts +0 -20
  186. package/dist/components/account/UserAvatarMenu.js +0 -88
  187. package/dist/components/account/index.d.ts +0 -9
  188. package/dist/components/account/index.js +0 -13
  189. package/dist/components/admin/AlertSettingsTab.d.ts +0 -48
  190. package/dist/components/admin/AlertSettingsTab.js +0 -351
  191. package/dist/components/admin/AnalyticsTab.d.ts +0 -22
  192. package/dist/components/admin/AnalyticsTab.js +0 -167
  193. package/dist/components/admin/DataBrowserTab.d.ts +0 -19
  194. package/dist/components/admin/DataBrowserTab.js +0 -252
  195. package/dist/components/admin/LoggingSettingsTab.d.ts +0 -73
  196. package/dist/components/admin/LoggingSettingsTab.js +0 -339
  197. package/dist/components/admin/SessionsTab.d.ts +0 -37
  198. package/dist/components/admin/SessionsTab.js +0 -165
  199. package/dist/components/admin/StatsTab.d.ts +0 -53
  200. package/dist/components/admin/StatsTab.js +0 -161
  201. package/dist/components/admin/VibeAdminContext.d.ts +0 -32
  202. package/dist/components/admin/VibeAdminContext.js +0 -38
  203. package/dist/components/admin/VibeAdminLayout.d.ts +0 -11
  204. package/dist/components/admin/VibeAdminLayout.js +0 -69
  205. package/dist/components/admin/index.d.ts +0 -29
  206. package/dist/components/admin/index.js +0 -44
  207. package/dist/components/auth/FederatedAuthSection.d.ts +0 -8
  208. package/dist/components/auth/FederatedAuthSection.js +0 -45
  209. package/dist/components/auth/ModeAwareLoginPage.d.ts +0 -10
  210. package/dist/components/auth/ModeAwareLoginPage.js +0 -42
  211. package/dist/components/auth/ModeAwareSignupPage.d.ts +0 -9
  212. package/dist/components/auth/ModeAwareSignupPage.js +0 -78
  213. package/dist/components/auth/TraditionalAuthSection.d.ts +0 -14
  214. package/dist/components/auth/TraditionalAuthSection.js +0 -20
  215. package/dist/components/recovery/CompleteStep.d.ts +0 -5
  216. package/dist/components/recovery/CompleteStep.js +0 -8
  217. package/dist/components/recovery/InitiateRecoveryStep.d.ts +0 -8
  218. package/dist/components/recovery/InitiateRecoveryStep.js +0 -20
  219. package/dist/components/recovery/SelectMethodStep.d.ts +0 -8
  220. package/dist/components/recovery/SelectMethodStep.js +0 -8
  221. package/dist/components/recovery/SetPasswordStep.d.ts +0 -6
  222. package/dist/components/recovery/SetPasswordStep.js +0 -20
  223. package/dist/components/recovery/VerifyCodeStep.d.ts +0 -10
  224. package/dist/components/recovery/VerifyCodeStep.js +0 -24
  225. package/dist/components/reserved/ReservedRecoveryWarning.d.ts +0 -38
  226. package/dist/components/reserved/ReservedRecoveryWarning.js +0 -92
  227. package/dist/components/reserved/ReservedStatusBox.d.ts +0 -30
  228. package/dist/components/reserved/ReservedStatusBox.js +0 -71
  229. package/dist/components/ui/BetaBadge.d.ts +0 -29
  230. package/dist/components/ui/BetaBadge.js +0 -38
  231. package/dist/components/ui/Footer.d.ts +0 -37
  232. package/dist/components/ui/Footer.js +0 -41
  233. package/dist/config/env.d.ts +0 -66
  234. package/dist/config/env.js +0 -57
  235. package/dist/config/logger.d.ts +0 -57
  236. package/dist/config/logger.js +0 -73
  237. package/dist/config/logging-config.d.ts +0 -30
  238. package/dist/config/logging-config.js +0 -122
  239. package/dist/config/unauthenticated-routes.d.ts +0 -17
  240. package/dist/config/unauthenticated-routes.js +0 -24
  241. package/dist/config/vibe-log-transport.d.ts +0 -81
  242. package/dist/config/vibe-log-transport.js +0 -212
  243. package/dist/edge/internal-api-url.d.ts +0 -53
  244. package/dist/edge/internal-api-url.js +0 -63
  245. package/dist/edge/middleware.d.ts +0 -14
  246. package/dist/edge/middleware.js +0 -32
  247. package/dist/hooks/useAuth.d.ts +0 -23
  248. package/dist/hooks/useAuth.js +0 -81
  249. package/dist/hooks/useAuthSettings.d.ts +0 -59
  250. package/dist/hooks/useAuthSettings.js +0 -93
  251. package/dist/hooks/useAvailableProviders.d.ts +0 -45
  252. package/dist/hooks/useAvailableProviders.js +0 -108
  253. package/dist/hooks/usePasswordValidation.d.ts +0 -27
  254. package/dist/hooks/usePasswordValidation.js +0 -102
  255. package/dist/hooks/useProfile.d.ts +0 -15
  256. package/dist/hooks/useProfile.js +0 -59
  257. package/dist/hooks/usePublicAuthSettings.d.ts +0 -56
  258. package/dist/hooks/usePublicAuthSettings.js +0 -131
  259. package/dist/hooks/useSessionExpiration.d.ts +0 -57
  260. package/dist/hooks/useSessionExpiration.js +0 -72
  261. package/dist/hooks/useViabilitySession.d.ts +0 -75
  262. package/dist/hooks/useViabilitySession.js +0 -268
  263. package/dist/index.d.ts +0 -12
  264. package/dist/index.js +0 -55
  265. package/dist/lib/anon-session.d.ts +0 -74
  266. package/dist/lib/anon-session.js +0 -169
  267. package/dist/lib/api-handler.d.ts +0 -123
  268. package/dist/lib/api-handler.js +0 -478
  269. package/dist/lib/app-slug.d.ts +0 -95
  270. package/dist/lib/app-slug.js +0 -172
  271. package/dist/lib/demo-mode.d.ts +0 -6
  272. package/dist/lib/demo-mode.js +0 -16
  273. package/dist/lib/geolocation.d.ts +0 -64
  274. package/dist/lib/geolocation.js +0 -235
  275. package/dist/lib/idp-client-config.d.ts +0 -75
  276. package/dist/lib/idp-client-config.js +0 -425
  277. package/dist/lib/idp-fetch.d.ts +0 -14
  278. package/dist/lib/idp-fetch.js +0 -91
  279. package/dist/lib/internal-api.d.ts +0 -87
  280. package/dist/lib/internal-api.js +0 -122
  281. package/dist/lib/jwt-decode-client.d.ts +0 -10
  282. package/dist/lib/jwt-decode-client.js +0 -46
  283. package/dist/lib/jwt-decode.d.ts +0 -48
  284. package/dist/lib/jwt-decode.js +0 -57
  285. package/dist/lib/nextauth-secret.d.ts +0 -10
  286. package/dist/lib/nextauth-secret.js +0 -100
  287. package/dist/lib/rate-limit-service.d.ts +0 -23
  288. package/dist/lib/rate-limit-service.js +0 -6
  289. package/dist/lib/redis.d.ts +0 -5
  290. package/dist/lib/redis.js +0 -28
  291. package/dist/lib/refresh-token-validator.d.ts +0 -13
  292. package/dist/lib/refresh-token-validator.js +0 -117
  293. package/dist/lib/roles.d.ts +0 -145
  294. package/dist/lib/roles.js +0 -168
  295. package/dist/lib/secret-validation.d.ts +0 -4
  296. package/dist/lib/secret-validation.js +0 -14
  297. package/dist/lib/session-store.d.ts +0 -170
  298. package/dist/lib/session-store.js +0 -545
  299. package/dist/lib/session.d.ts +0 -21
  300. package/dist/lib/session.js +0 -26
  301. package/dist/lib/site-logger.d.ts +0 -214
  302. package/dist/lib/site-logger.js +0 -210
  303. package/dist/lib/standardized-client-api.d.ts +0 -161
  304. package/dist/lib/standardized-client-api.js +0 -786
  305. package/dist/lib/startup-init.d.ts +0 -40
  306. package/dist/lib/startup-init.js +0 -261
  307. package/dist/lib/test-aware-get-token.d.ts +0 -2
  308. package/dist/lib/test-aware-get-token.js +0 -81
  309. package/dist/lib/token-expiry.d.ts +0 -14
  310. package/dist/lib/token-expiry.js +0 -39
  311. package/dist/lib/token-lifecycle.d.ts +0 -52
  312. package/dist/lib/token-lifecycle.js +0 -398
  313. package/dist/lib/types/api-responses.d.ts +0 -128
  314. package/dist/lib/types/api-responses.js +0 -171
  315. package/dist/lib/user-agent-parser.d.ts +0 -50
  316. package/dist/lib/user-agent-parser.js +0 -220
  317. package/dist/logging/api/admin-analytics.d.ts +0 -3
  318. package/dist/logging/api/admin-analytics.js +0 -45
  319. package/dist/logging/api/audit-log.d.ts +0 -3
  320. package/dist/logging/api/audit-log.js +0 -52
  321. package/dist/logging/components/AdminAnalyticsLayout.d.ts +0 -10
  322. package/dist/logging/components/AdminAnalyticsLayout.js +0 -11
  323. package/dist/logging/components/AuditLogViewer.d.ts +0 -7
  324. package/dist/logging/components/AuditLogViewer.js +0 -51
  325. package/dist/logging/components/ErrorMetricsCard.d.ts +0 -7
  326. package/dist/logging/components/ErrorMetricsCard.js +0 -16
  327. package/dist/logging/components/HealthMetricsCard.d.ts +0 -7
  328. package/dist/logging/components/HealthMetricsCard.js +0 -19
  329. package/dist/logging/hooks/useAdminAnalytics.d.ts +0 -24
  330. package/dist/logging/hooks/useAdminAnalytics.js +0 -22
  331. package/dist/logging/hooks/useAuditLog.d.ts +0 -6
  332. package/dist/logging/hooks/useAuditLog.js +0 -25
  333. package/dist/logging/hooks/useErrorMetrics.d.ts +0 -6
  334. package/dist/logging/hooks/useErrorMetrics.js +0 -38
  335. package/dist/logging/hooks/useHealthMetrics.d.ts +0 -6
  336. package/dist/logging/hooks/useHealthMetrics.js +0 -41
  337. package/dist/logging/index.d.ts +0 -11
  338. package/dist/logging/index.js +0 -40
  339. package/dist/logging/types/analytics.d.ts +0 -68
  340. package/dist/logging/types/analytics.js +0 -3
  341. package/dist/logging/types/audit.d.ts +0 -29
  342. package/dist/logging/types/audit.js +0 -2
  343. package/dist/logging/types/index.d.ts +0 -2
  344. package/dist/logging/types/index.js +0 -19
  345. package/dist/middleware/auth-decision.d.ts +0 -33
  346. package/dist/middleware/auth-decision.js +0 -65
  347. package/dist/middleware/create-middleware.d.ts +0 -102
  348. package/dist/middleware/create-middleware.js +0 -469
  349. package/dist/middleware/rbac-check.d.ts +0 -51
  350. package/dist/middleware/rbac-check.js +0 -219
  351. package/dist/middleware/twofa-presets.d.ts +0 -134
  352. package/dist/middleware/twofa-presets.js +0 -175
  353. package/dist/models/DecodedAccessToken.d.ts +0 -17
  354. package/dist/models/DecodedAccessToken.js +0 -2
  355. package/dist/models/SessionModel.d.ts +0 -122
  356. package/dist/models/SessionModel.js +0 -136
  357. package/dist/pages/admin-login/page.d.ts +0 -31
  358. package/dist/pages/admin-login/page.js +0 -83
  359. package/dist/pages/admin-page-permissions/PagePermissionsAdminPage.d.ts +0 -18
  360. package/dist/pages/admin-page-permissions/PagePermissionsAdminPage.js +0 -276
  361. package/dist/pages/admin-page-permissions/index.d.ts +0 -6
  362. package/dist/pages/admin-page-permissions/index.js +0 -13
  363. package/dist/pages/admin-roles/RolesAdminPage.d.ts +0 -16
  364. package/dist/pages/admin-roles/RolesAdminPage.js +0 -261
  365. package/dist/pages/admin-roles/index.d.ts +0 -8
  366. package/dist/pages/admin-roles/index.js +0 -15
  367. package/dist/pages/admin-roles/modals.d.ts +0 -72
  368. package/dist/pages/admin-roles/modals.js +0 -154
  369. package/dist/pages/client-admin/ClientSiteAdminPage.d.ts +0 -79
  370. package/dist/pages/client-admin/ClientSiteAdminPage.js +0 -177
  371. package/dist/pages/client-admin/index.d.ts +0 -32
  372. package/dist/pages/client-admin/index.js +0 -37
  373. package/dist/pages/coming-soon/page.d.ts +0 -8
  374. package/dist/pages/coming-soon/page.js +0 -28
  375. package/dist/pages/login/page.d.ts +0 -22
  376. package/dist/pages/login/page.js +0 -239
  377. package/dist/pages/profile/EnhancedProfilePage.d.ts +0 -13
  378. package/dist/pages/profile/EnhancedProfilePage.js +0 -150
  379. package/dist/pages/profile/index.d.ts +0 -8
  380. package/dist/pages/profile/index.js +0 -16
  381. package/dist/pages/profile/page.d.ts +0 -19
  382. package/dist/pages/profile/page.js +0 -47
  383. package/dist/pages/profile/profile-patch.d.ts +0 -1
  384. package/dist/pages/profile/profile-patch.js +0 -281
  385. package/dist/pages/recovery/page.d.ts +0 -1
  386. package/dist/pages/recovery/page.js +0 -142
  387. package/dist/pages/roles/MyRolesPage.d.ts +0 -24
  388. package/dist/pages/roles/MyRolesPage.js +0 -71
  389. package/dist/pages/roles/components.d.ts +0 -63
  390. package/dist/pages/roles/components.js +0 -108
  391. package/dist/pages/roles/index.d.ts +0 -8
  392. package/dist/pages/roles/index.js +0 -19
  393. package/dist/pages/security/EnhancedSecurityPage.d.ts +0 -14
  394. package/dist/pages/security/EnhancedSecurityPage.js +0 -248
  395. package/dist/pages/security/index.d.ts +0 -8
  396. package/dist/pages/security/index.js +0 -16
  397. package/dist/pages/security/page.d.ts +0 -21
  398. package/dist/pages/security/page.js +0 -212
  399. package/dist/pages/security/security-patch.d.ts +0 -1
  400. package/dist/pages/security/security-patch.js +0 -302
  401. package/dist/pages/settings/EnhancedSettingsPage.d.ts +0 -46
  402. package/dist/pages/settings/EnhancedSettingsPage.js +0 -231
  403. package/dist/pages/settings/index.d.ts +0 -8
  404. package/dist/pages/settings/index.js +0 -16
  405. package/dist/pages/settings/page.d.ts +0 -7
  406. package/dist/pages/settings/page.js +0 -26
  407. package/dist/pages/showcase/ShowcasePage.d.ts +0 -13
  408. package/dist/pages/showcase/ShowcasePage.js +0 -140
  409. package/dist/pages/showcase/index.d.ts +0 -12
  410. package/dist/pages/showcase/index.js +0 -17
  411. package/dist/pages/test-env/EmergencyLogoutPage.d.ts +0 -14
  412. package/dist/pages/test-env/EmergencyLogoutPage.js +0 -98
  413. package/dist/pages/test-env/JwtInspectPage.d.ts +0 -14
  414. package/dist/pages/test-env/JwtInspectPage.js +0 -114
  415. package/dist/pages/test-env/RefreshTokenPage.d.ts +0 -15
  416. package/dist/pages/test-env/RefreshTokenPage.js +0 -91
  417. package/dist/pages/test-env/TestEnvPage.d.ts +0 -13
  418. package/dist/pages/test-env/TestEnvPage.js +0 -49
  419. package/dist/pages/test-env/index.d.ts +0 -24
  420. package/dist/pages/test-env/index.js +0 -32
  421. package/dist/pages/verify-code/page.d.ts +0 -30
  422. package/dist/pages/verify-code/page.js +0 -408
  423. package/dist/routes/account/index.d.ts +0 -28
  424. package/dist/routes/account/index.js +0 -71
  425. package/dist/routes/account/masked-info.d.ts +0 -33
  426. package/dist/routes/account/masked-info.js +0 -39
  427. package/dist/routes/account/send-code.d.ts +0 -37
  428. package/dist/routes/account/send-code.js +0 -42
  429. package/dist/routes/account/update-phone.d.ts +0 -13
  430. package/dist/routes/account/update-phone.js +0 -17
  431. package/dist/routes/account/verify-email.d.ts +0 -38
  432. package/dist/routes/account/verify-email.js +0 -43
  433. package/dist/routes/account/verify-sms.d.ts +0 -38
  434. package/dist/routes/account/verify-sms.js +0 -43
  435. package/dist/routes/auth/index.d.ts +0 -19
  436. package/dist/routes/auth/index.js +0 -64
  437. package/dist/routes/auth/logout.d.ts +0 -31
  438. package/dist/routes/auth/logout.js +0 -113
  439. package/dist/routes/auth/nextauth.d.ts +0 -19
  440. package/dist/routes/auth/nextauth.js +0 -72
  441. package/dist/routes/auth/refresh.d.ts +0 -30
  442. package/dist/routes/auth/refresh.js +0 -51
  443. package/dist/routes/auth/session.d.ts +0 -43
  444. package/dist/routes/auth/session.js +0 -179
  445. package/dist/routes/auth/settings.d.ts +0 -25
  446. package/dist/routes/auth/settings.js +0 -55
  447. package/dist/routes/auth/viability.d.ts +0 -52
  448. package/dist/routes/auth/viability.js +0 -201
  449. package/dist/routes/index.d.ts +0 -12
  450. package/dist/routes/index.js +0 -54
  451. package/dist/routes/session/index.d.ts +0 -6
  452. package/dist/routes/session/index.js +0 -10
  453. package/dist/routes/session/refresh-viability.d.ts +0 -16
  454. package/dist/routes/session/refresh-viability.js +0 -20
  455. package/dist/server/auth-guard.d.ts +0 -46
  456. package/dist/server/auth-guard.js +0 -128
  457. package/dist/server/decode-session.d.ts +0 -30
  458. package/dist/server/decode-session.js +0 -78
  459. package/dist/server/slim-middleware.d.ts +0 -23
  460. package/dist/server/slim-middleware.js +0 -89
  461. package/dist/server/with-auth.d.ts +0 -33
  462. package/dist/server/with-auth.js +0 -59
  463. package/dist/services/signalrActivityService.d.ts +0 -44
  464. package/dist/services/signalrActivityService.js +0 -257
  465. package/dist/stores/authStore.d.ts +0 -154
  466. package/dist/stores/authStore.js +0 -1531
  467. package/dist/theme/ThemeProvider.d.ts +0 -14
  468. package/dist/theme/ThemeProvider.js +0 -28
  469. package/dist/theme/default.d.ts +0 -8
  470. package/dist/theme/default.js +0 -33
  471. package/dist/theme/index.d.ts +0 -15
  472. package/dist/theme/index.js +0 -25
  473. package/dist/theme/types.d.ts +0 -56
  474. package/dist/theme/types.js +0 -8
  475. package/dist/theme/useTheme.d.ts +0 -60
  476. package/dist/theme/useTheme.js +0 -63
  477. package/dist/theme/utils.d.ts +0 -13
  478. package/dist/theme/utils.js +0 -39
  479. package/dist/types/api.d.ts +0 -134
  480. package/dist/types/api.js +0 -44
  481. package/dist/types/auth.d.ts +0 -19
  482. package/dist/types/auth.js +0 -2
  483. package/dist/types/logging.d.ts +0 -42
  484. package/dist/types/logging.js +0 -2
  485. package/dist/types/recovery.d.ts +0 -48
  486. package/dist/types/recovery.js +0 -2
  487. package/dist/types/security.d.ts +0 -1
  488. package/dist/types/security.js +0 -2
  489. package/dist/utils/api.d.ts +0 -85
  490. package/dist/utils/api.js +0 -287
  491. package/dist/utils/circuitBreaker.d.ts +0 -43
  492. package/dist/utils/circuitBreaker.js +0 -91
  493. package/dist/utils/error-message.d.ts +0 -1
  494. package/dist/utils/error-message.js +0 -103
  495. package/dist/utils/layout/reservedSpace.d.ts +0 -59
  496. package/dist/utils/layout/reservedSpace.js +0 -102
  497. package/dist/utils/logout.d.ts +0 -14
  498. package/dist/utils/logout.js +0 -32
  499. package/dist/vibe/client.d.ts +0 -261
  500. package/dist/vibe/client.js +0 -445
  501. package/dist/vibe/enterprise-auth.d.ts +0 -106
  502. package/dist/vibe/enterprise-auth.js +0 -173
  503. package/dist/vibe/errors.d.ts +0 -83
  504. package/dist/vibe/errors.js +0 -146
  505. package/dist/vibe/generic.d.ts +0 -234
  506. package/dist/vibe/generic.js +0 -369
  507. package/dist/vibe/hooks/index.d.ts +0 -169
  508. package/dist/vibe/hooks/index.js +0 -252
  509. package/dist/vibe/index.d.ts +0 -25
  510. package/dist/vibe/index.js +0 -72
  511. package/dist/vibe/sessions.d.ts +0 -161
  512. package/dist/vibe/sessions.js +0 -391
  513. package/dist/vibe/types.d.ts +0 -353
  514. package/dist/vibe/types.js +0 -315
  515. package/src/auth/auth-options.ts +0 -237
  516. package/src/auth/callbacks/index.ts +0 -7
  517. package/src/auth/callbacks/jwt.ts +0 -382
  518. package/src/auth/callbacks/session.ts +0 -243
  519. package/src/auth/callbacks/signin.ts +0 -56
  520. package/src/auth/events/index.ts +0 -5
  521. package/src/auth/events/signout.ts +0 -33
  522. package/src/auth/providers/credentials.ts +0 -256
  523. package/src/auth/providers/index.ts +0 -6
  524. package/src/auth/providers/oauth.ts +0 -114
  525. package/src/lib/nextauth-secret.ts +0 -121
  526. package/src/types/next-auth.d.ts +0 -15
@@ -1,214 +0,0 @@
1
- "use strict";
2
- /**
3
- * Admin Audit Logs API Handler
4
- *
5
- * Provides admin-level access to audit logs using service account credentials.
6
- *
7
- * @version 1.0
8
- * @requires Admin role (vibe_app_admin or payez_admin)
9
- */
10
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
11
- if (k2 === undefined) k2 = k;
12
- var desc = Object.getOwnPropertyDescriptor(m, k);
13
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
14
- desc = { enumerable: true, get: function() { return m[k]; } };
15
- }
16
- Object.defineProperty(o, k2, desc);
17
- }) : (function(o, m, k, k2) {
18
- if (k2 === undefined) k2 = k;
19
- o[k2] = m[k];
20
- }));
21
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
22
- Object.defineProperty(o, "default", { enumerable: true, value: v });
23
- }) : function(o, v) {
24
- o["default"] = v;
25
- });
26
- var __importStar = (this && this.__importStar) || (function () {
27
- var ownKeys = function(o) {
28
- ownKeys = Object.getOwnPropertyNames || function (o) {
29
- var ar = [];
30
- for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
31
- return ar;
32
- };
33
- return ownKeys(o);
34
- };
35
- return function (mod) {
36
- if (mod && mod.__esModule) return mod;
37
- var result = {};
38
- if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
39
- __setModuleDefault(result, mod);
40
- return result;
41
- };
42
- })();
43
- Object.defineProperty(exports, "__esModule", { value: true });
44
- exports.createAuditHandler = createAuditHandler;
45
- const server_1 = require("next/server");
46
- const next_auth_1 = require("next-auth");
47
- const startup_init_1 = require("../../lib/startup-init");
48
- const roles_1 = require("../../lib/roles");
49
- async function checkAdminRole(getAuthOptions) {
50
- const authOptions = await getAuthOptions();
51
- const session = await (0, next_auth_1.getServerSession)(authOptions);
52
- if (!session?.user) {
53
- return {
54
- isAdmin: false,
55
- error: server_1.NextResponse.json({ success: false, error: 'Please sign in' }, { status: 401 }),
56
- };
57
- }
58
- const userRoles = session.user?.roles || [];
59
- const hasAdminRole = roles_1.ADMIN_ROLES.some(role => userRoles.includes(role));
60
- if (!hasAdminRole) {
61
- return {
62
- isAdmin: false,
63
- error: server_1.NextResponse.json({ success: false, error: 'Admin access required' }, { status: 403 }),
64
- };
65
- }
66
- return { isAdmin: true };
67
- }
68
- async function vibeServiceRequest(endpoint, options) {
69
- const idpUrl = process.env.NEXT_PUBLIC_IDP_URL || process.env.IDP_URL;
70
- const clientId = process.env.VIBE_CLIENT_ID;
71
- const signingKey = process.env.VIBE_HMAC_KEY;
72
- if (!idpUrl || !clientId || !signingKey) {
73
- return { ok: false, status: 500, data: null, error: 'Vibe not configured' };
74
- }
75
- const timestamp = Math.floor(Date.now() / 1000);
76
- const stringToSign = `${timestamp}|${options.method}|${endpoint}`;
77
- const crypto = await Promise.resolve().then(() => __importStar(require('crypto')));
78
- const signature = crypto
79
- .createHmac('sha256', Buffer.from(signingKey, 'base64'))
80
- .update(stringToSign)
81
- .digest('base64');
82
- const proxyUrl = `${idpUrl}/api/vibe/proxy`;
83
- // Get the client slug from startup config for multi-client admin support
84
- const idpConfig = (0, startup_init_1.getStartupIDPConfig)();
85
- const idpClientId = idpConfig?.clientSlug || idpConfig?.clientId;
86
- try {
87
- const res = await fetch(proxyUrl, {
88
- method: 'POST',
89
- headers: {
90
- 'Content-Type': 'application/json',
91
- 'X-Vibe-Client-Id': clientId,
92
- 'X-Vibe-Timestamp': String(timestamp),
93
- 'X-Vibe-Signature': signature,
94
- ...(idpClientId && { 'X-Client-Id': idpClientId }),
95
- },
96
- body: JSON.stringify({
97
- endpoint,
98
- method: options.method,
99
- data: options.body ?? null,
100
- }),
101
- cache: 'no-store',
102
- });
103
- if (res.status === 204)
104
- return { ok: true, status: 204, data: null };
105
- if (!res.ok) {
106
- const errorText = await res.text();
107
- return { ok: false, status: res.status, data: null, error: errorText };
108
- }
109
- const body = await res.json();
110
- return { ok: true, status: res.status, data: body };
111
- }
112
- catch (error) {
113
- return { ok: false, status: 0, data: null, error: String(error) };
114
- }
115
- }
116
- /**
117
- * GET /api/admin/audit - List audit logs
118
- * POST /api/admin/audit - Stats
119
- */
120
- function createAuditHandler(config) {
121
- return {
122
- async GET(request) {
123
- const adminCheck = await checkAdminRole(config.getAuthOptions);
124
- if (adminCheck.error)
125
- return adminCheck.error;
126
- const { searchParams } = new URL(request.url);
127
- const action = searchParams.get('action');
128
- const userId = searchParams.get('userId');
129
- const startDate = searchParams.get('startDate');
130
- const endDate = searchParams.get('endDate');
131
- const page = parseInt(searchParams.get('page') || '1');
132
- const pageSize = parseInt(searchParams.get('pageSize') || '50');
133
- const queryBody = {
134
- page,
135
- pageSize,
136
- orderBy: 'created_at',
137
- orderDirection: 'desc',
138
- };
139
- const conditions = [];
140
- if (action) {
141
- conditions.push({ field: 'action', operator: 'eq', value: action });
142
- }
143
- if (userId) {
144
- conditions.push({ field: 'user_id', operator: 'eq', value: userId });
145
- }
146
- if (startDate) {
147
- conditions.push({ field: 'created_at', operator: 'gte', value: startDate });
148
- }
149
- if (endDate) {
150
- conditions.push({ field: 'created_at', operator: 'lte', value: endDate });
151
- }
152
- if (conditions.length === 1) {
153
- queryBody.filter = conditions[0];
154
- }
155
- else if (conditions.length > 1) {
156
- queryBody.filter = { operator: 'and', conditions };
157
- }
158
- const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: queryBody });
159
- if (!result.ok) {
160
- return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
161
- }
162
- const rawLogs = result.data?.data || result.data?.documents || [];
163
- const logs = rawLogs.map((log) => ({
164
- id: log.id || log.document_id,
165
- user_id: log.user_id || log.idp_user_id,
166
- email: log.email,
167
- action: log.action,
168
- resource_type: log.resource_type,
169
- resource_id: log.resource_id,
170
- details: log.details,
171
- ip_address: log.ip_address,
172
- user_agent: log.user_agent,
173
- created_at: log.created_at,
174
- }));
175
- return server_1.NextResponse.json({
176
- logs,
177
- meta: result.data?.meta || { total: logs.length, page, pageSize },
178
- });
179
- },
180
- async POST(request) {
181
- const adminCheck = await checkAdminRole(config.getAuthOptions);
182
- if (adminCheck.error)
183
- return adminCheck.error;
184
- const body = await request.json();
185
- const { action } = body;
186
- if (action === 'stats') {
187
- const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: { page: 1, pageSize: 10000 } });
188
- if (!result.ok) {
189
- return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
190
- }
191
- const logs = result.data?.data || result.data?.documents || [];
192
- const now = new Date();
193
- const oneDayAgo = new Date(now.getTime() - 24 * 60 * 60 * 1000);
194
- const oneWeekAgo = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000);
195
- const stats = {
196
- total: logs.length,
197
- today: logs.filter((l) => new Date(l.created_at) > oneDayAgo).length,
198
- thisWeek: logs.filter((l) => new Date(l.created_at) > oneWeekAgo).length,
199
- uniqueUsers: new Set(logs.map((l) => l.user_id || l.idp_user_id)).size,
200
- byAction: {},
201
- byResourceType: {},
202
- };
203
- logs.forEach((l) => {
204
- const act = l.action || 'unknown';
205
- stats.byAction[act] = (stats.byAction[act] || 0) + 1;
206
- const rt = l.resource_type || 'unknown';
207
- stats.byResourceType[rt] = (stats.byResourceType[rt] || 0) + 1;
208
- });
209
- return server_1.NextResponse.json({ stats });
210
- }
211
- return server_1.NextResponse.json({ error: 'Invalid action' }, { status: 400 });
212
- },
213
- };
214
- }
@@ -1,22 +0,0 @@
1
- /**
2
- * Admin API Handlers
3
- *
4
- * Provides admin-level API handlers for Vibe data access.
5
- * These handlers use service account credentials to bypass user filtering.
6
- *
7
- * Usage:
8
- * ------
9
- * // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
10
- * import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
11
- * import { getAuthOptions } from '@payez/next-mvp/auth/auth-options';
12
- *
13
- * export const GET = createGetTableDataHandler({ getAuthOptions });
14
- */
15
- export { createGetCollectionsHandler, createGetTablesHandler, createGetTableDataHandler, createGetRecordHandler, createUpdateRecordHandler, createDeleteRecordHandler, createQueryHandler, type AdminVibeHandlerConfig, } from './vibe-data';
16
- export { createSessionsHandler, type AdminSessionsHandlerConfig, } from './sessions';
17
- export { createUsersHandler, type AdminUsersHandlerConfig, } from './users';
18
- export { createAuditHandler, type AdminAuditHandlerConfig, } from './audit';
19
- export { createAnalyticsHandler, type AdminAnalyticsHandlerConfig, } from './analytics';
20
- export { createSiteLogsHandler, createSiteLogsStatsHandler, createSiteLogsDrainHandler, createSiteLogsQueueHandler, type SiteLogsHandlerConfig, } from './site-logs';
21
- export { createRedisSessionsHandler, createRedisSessionRevokeHandler, type RedisSessionsHandlerConfig, } from './redis-sessions';
22
- export { createStatsHandler, type AdminStatsHandlerConfig, } from './stats';
@@ -1,43 +0,0 @@
1
- "use strict";
2
- /**
3
- * Admin API Handlers
4
- *
5
- * Provides admin-level API handlers for Vibe data access.
6
- * These handlers use service account credentials to bypass user filtering.
7
- *
8
- * Usage:
9
- * ------
10
- * // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
11
- * import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
12
- * import { getAuthOptions } from '@payez/next-mvp/auth/auth-options';
13
- *
14
- * export const GET = createGetTableDataHandler({ getAuthOptions });
15
- */
16
- Object.defineProperty(exports, "__esModule", { value: true });
17
- exports.createStatsHandler = exports.createRedisSessionRevokeHandler = exports.createRedisSessionsHandler = exports.createSiteLogsQueueHandler = exports.createSiteLogsDrainHandler = exports.createSiteLogsStatsHandler = exports.createSiteLogsHandler = exports.createAnalyticsHandler = exports.createAuditHandler = exports.createUsersHandler = exports.createSessionsHandler = exports.createQueryHandler = exports.createDeleteRecordHandler = exports.createUpdateRecordHandler = exports.createGetRecordHandler = exports.createGetTableDataHandler = exports.createGetTablesHandler = exports.createGetCollectionsHandler = void 0;
18
- var vibe_data_1 = require("./vibe-data");
19
- Object.defineProperty(exports, "createGetCollectionsHandler", { enumerable: true, get: function () { return vibe_data_1.createGetCollectionsHandler; } });
20
- Object.defineProperty(exports, "createGetTablesHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTablesHandler; } });
21
- Object.defineProperty(exports, "createGetTableDataHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTableDataHandler; } });
22
- Object.defineProperty(exports, "createGetRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createGetRecordHandler; } });
23
- Object.defineProperty(exports, "createUpdateRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createUpdateRecordHandler; } });
24
- Object.defineProperty(exports, "createDeleteRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createDeleteRecordHandler; } });
25
- Object.defineProperty(exports, "createQueryHandler", { enumerable: true, get: function () { return vibe_data_1.createQueryHandler; } });
26
- var sessions_1 = require("./sessions");
27
- Object.defineProperty(exports, "createSessionsHandler", { enumerable: true, get: function () { return sessions_1.createSessionsHandler; } });
28
- var users_1 = require("./users");
29
- Object.defineProperty(exports, "createUsersHandler", { enumerable: true, get: function () { return users_1.createUsersHandler; } });
30
- var audit_1 = require("./audit");
31
- Object.defineProperty(exports, "createAuditHandler", { enumerable: true, get: function () { return audit_1.createAuditHandler; } });
32
- var analytics_1 = require("./analytics");
33
- Object.defineProperty(exports, "createAnalyticsHandler", { enumerable: true, get: function () { return analytics_1.createAnalyticsHandler; } });
34
- var site_logs_1 = require("./site-logs");
35
- Object.defineProperty(exports, "createSiteLogsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsHandler; } });
36
- Object.defineProperty(exports, "createSiteLogsStatsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsStatsHandler; } });
37
- Object.defineProperty(exports, "createSiteLogsDrainHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsDrainHandler; } });
38
- Object.defineProperty(exports, "createSiteLogsQueueHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsQueueHandler; } });
39
- var redis_sessions_1 = require("./redis-sessions");
40
- Object.defineProperty(exports, "createRedisSessionsHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionsHandler; } });
41
- Object.defineProperty(exports, "createRedisSessionRevokeHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionRevokeHandler; } });
42
- var stats_1 = require("./stats");
43
- Object.defineProperty(exports, "createStatsHandler", { enumerable: true, get: function () { return stats_1.createStatsHandler; } });
@@ -1,36 +0,0 @@
1
- /**
2
- * Admin Redis Sessions API Handler
3
- *
4
- * Provides admin-level access to active sessions stored in Redis.
5
- * Reads directly from Redis {APP_SLUG}:sess:* pattern.
6
- *
7
- * Note: This is different from sessions.ts which queries Vibe login_sessions table.
8
- * This handler shows real-time active sessions in Redis.
9
- *
10
- * @version 1.0
11
- * @requires Admin role (vibe_app_admin or payez_admin)
12
- */
13
- import { NextRequest, NextResponse } from 'next/server';
14
- export interface RedisSessionsHandlerConfig {
15
- getAuthOptions: () => Promise<any>;
16
- appSlug?: string;
17
- }
18
- /**
19
- * Create Redis sessions handler
20
- * GET /api/admin/redis-sessions - List all active sessions from Redis
21
- */
22
- export declare function createRedisSessionsHandler(config: RedisSessionsHandlerConfig): {
23
- GET(request: NextRequest): Promise<NextResponse<unknown>>;
24
- DELETE(request: NextRequest): Promise<NextResponse<unknown>>;
25
- };
26
- /**
27
- * Create Redis session revoke handler for specific session
28
- * POST /api/admin/redis-sessions/[sessionId]/revoke
29
- */
30
- export declare function createRedisSessionRevokeHandler(config: RedisSessionsHandlerConfig): {
31
- POST(request: NextRequest, { params }: {
32
- params: {
33
- sessionId: string;
34
- };
35
- }): Promise<NextResponse<unknown>>;
36
- };
@@ -1,204 +0,0 @@
1
- "use strict";
2
- /**
3
- * Admin Redis Sessions API Handler
4
- *
5
- * Provides admin-level access to active sessions stored in Redis.
6
- * Reads directly from Redis {APP_SLUG}:sess:* pattern.
7
- *
8
- * Note: This is different from sessions.ts which queries Vibe login_sessions table.
9
- * This handler shows real-time active sessions in Redis.
10
- *
11
- * @version 1.0
12
- * @requires Admin role (vibe_app_admin or payez_admin)
13
- */
14
- Object.defineProperty(exports, "__esModule", { value: true });
15
- exports.createRedisSessionsHandler = createRedisSessionsHandler;
16
- exports.createRedisSessionRevokeHandler = createRedisSessionRevokeHandler;
17
- const server_1 = require("next/server");
18
- const next_auth_1 = require("next-auth");
19
- const redis_1 = require("../../lib/redis");
20
- const roles_1 = require("../../lib/roles");
21
- /**
22
- * Check if the current user has admin role
23
- */
24
- async function checkAdminRole(getAuthOptions) {
25
- const authOptions = await getAuthOptions();
26
- const session = await (0, next_auth_1.getServerSession)(authOptions);
27
- if (!session?.user) {
28
- return {
29
- isAdmin: false,
30
- error: server_1.NextResponse.json({ success: false, error: 'Please sign in' }, { status: 401 }),
31
- };
32
- }
33
- const userRoles = session.user?.roles || [];
34
- const hasAdminRole = roles_1.ADMIN_ROLES.some(role => userRoles.includes(role));
35
- if (!hasAdminRole) {
36
- return {
37
- isAdmin: false,
38
- error: server_1.NextResponse.json({ success: false, error: 'Admin access required' }, { status: 403 }),
39
- };
40
- }
41
- return { isAdmin: true, userId: session.user?.id };
42
- }
43
- /**
44
- * Create Redis sessions handler
45
- * GET /api/admin/redis-sessions - List all active sessions from Redis
46
- */
47
- function createRedisSessionsHandler(config) {
48
- const getSessionPrefix = () => {
49
- const appSlug = config.appSlug || process.env.APP_SLUG || process.env.CLIENT_ID || 'app';
50
- return `${appSlug}:sess:`;
51
- };
52
- return {
53
- async GET(request) {
54
- const adminCheck = await checkAdminRole(config.getAuthOptions);
55
- if (adminCheck.error)
56
- return adminCheck.error;
57
- try {
58
- const redis = (0, redis_1.getRedis)();
59
- const sessionPrefix = getSessionPrefix();
60
- // Scan Redis for all session keys (exclude version keys)
61
- const sessionKeys = [];
62
- let cursor = '0';
63
- do {
64
- const [newCursor, keys] = await redis.scan(cursor, 'MATCH', `${sessionPrefix}*`, 'COUNT', 100);
65
- cursor = newCursor;
66
- // Filter out version keys (ver:) - only want actual session keys
67
- sessionKeys.push(...keys.filter((k) => !k.includes(':ver:')));
68
- } while (cursor !== '0');
69
- // Fetch all session data
70
- const sessions = [];
71
- for (const key of sessionKeys) {
72
- const sessionJson = await redis.get(key);
73
- if (!sessionJson)
74
- continue;
75
- try {
76
- const sessionData = JSON.parse(sessionJson);
77
- const sessionToken = key.replace(sessionPrefix, '');
78
- sessions.push({
79
- id: sessionToken.substring(0, 16), // Truncated for display
80
- session_token: sessionToken.substring(0, 8) + '...', // Masked
81
- user_id: sessionData.userId,
82
- user_name: sessionData.name,
83
- user_email: sessionData.email,
84
- status: 'active', // Sessions in Redis are active
85
- created_at: sessionData.createdAt,
86
- mfa_verified: sessionData.mfaVerified || sessionData.twoFactorComplete || false,
87
- access_token_expires: sessionData.idpAccessTokenExpires
88
- ? new Date(sessionData.idpAccessTokenExpires).toISOString()
89
- : null,
90
- });
91
- }
92
- catch (parseError) {
93
- console.error('[admin/redis-sessions] Failed to parse session:', key, parseError);
94
- }
95
- }
96
- // Sort by most recent first (if created_at available)
97
- sessions.sort((a, b) => {
98
- if (!a.created_at || !b.created_at)
99
- return 0;
100
- return new Date(b.created_at).getTime() - new Date(a.created_at).getTime();
101
- });
102
- // Calculate stats
103
- const uniqueUsers = new Set(sessions.map(s => s.user_email).filter(Boolean)).size;
104
- return server_1.NextResponse.json({
105
- sessions,
106
- total: sessions.length,
107
- stats: {
108
- total_active: sessions.length,
109
- total_revoked: 0, // Revoked sessions are deleted from Redis
110
- unique_users: uniqueUsers,
111
- },
112
- redis_prefix: sessionPrefix,
113
- });
114
- }
115
- catch (error) {
116
- console.error('[admin/redis-sessions] Error:', error);
117
- return server_1.NextResponse.json({ error: error.message || 'Internal error' }, { status: 500 });
118
- }
119
- },
120
- async DELETE(request) {
121
- const adminCheck = await checkAdminRole(config.getAuthOptions);
122
- if (adminCheck.error)
123
- return adminCheck.error;
124
- try {
125
- const { searchParams } = new URL(request.url);
126
- const sessionToken = searchParams.get('session_token');
127
- if (!sessionToken) {
128
- return server_1.NextResponse.json({ error: 'session_token parameter required' }, { status: 400 });
129
- }
130
- const redis = (0, redis_1.getRedis)();
131
- const sessionPrefix = getSessionPrefix();
132
- const sessionKey = `${sessionPrefix}${sessionToken}`;
133
- // Delete the session
134
- const deleted = await redis.del(sessionKey);
135
- if (deleted === 0) {
136
- return server_1.NextResponse.json({ error: 'Session not found or already deleted' }, { status: 404 });
137
- }
138
- return server_1.NextResponse.json({
139
- success: true,
140
- message: 'Session revoked',
141
- session_token: sessionToken.substring(0, 8) + '...',
142
- });
143
- }
144
- catch (error) {
145
- console.error('[admin/redis-sessions] DELETE Error:', error);
146
- return server_1.NextResponse.json({ error: error.message || 'Internal error' }, { status: 500 });
147
- }
148
- },
149
- };
150
- }
151
- /**
152
- * Create Redis session revoke handler for specific session
153
- * POST /api/admin/redis-sessions/[sessionId]/revoke
154
- */
155
- function createRedisSessionRevokeHandler(config) {
156
- const getSessionPrefix = () => {
157
- const appSlug = config.appSlug || process.env.APP_SLUG || process.env.CLIENT_ID || 'app';
158
- return `${appSlug}:sess:`;
159
- };
160
- return {
161
- async POST(request, { params }) {
162
- const adminCheck = await checkAdminRole(config.getAuthOptions);
163
- if (adminCheck.error)
164
- return adminCheck.error;
165
- try {
166
- const sessionId = params.sessionId;
167
- if (!sessionId) {
168
- return server_1.NextResponse.json({ error: 'Session ID required' }, { status: 400 });
169
- }
170
- const redis = (0, redis_1.getRedis)();
171
- const sessionPrefix = getSessionPrefix();
172
- // Find session key that starts with the sessionId
173
- let targetKey = null;
174
- let cursor = '0';
175
- do {
176
- const [newCursor, keys] = await redis.scan(cursor, 'MATCH', `${sessionPrefix}*`, 'COUNT', 100);
177
- cursor = newCursor;
178
- for (const key of keys) {
179
- const token = key.replace(sessionPrefix, '');
180
- if (token.startsWith(sessionId) || token.substring(0, 16) === sessionId) {
181
- targetKey = key;
182
- break;
183
- }
184
- }
185
- if (targetKey)
186
- break;
187
- } while (cursor !== '0');
188
- if (!targetKey) {
189
- return server_1.NextResponse.json({ error: 'Session not found' }, { status: 404 });
190
- }
191
- // Delete the session
192
- await redis.del(targetKey);
193
- return server_1.NextResponse.json({
194
- success: true,
195
- message: 'Session revoked',
196
- });
197
- }
198
- catch (error) {
199
- console.error('[admin/redis-sessions/revoke] Error:', error);
200
- return server_1.NextResponse.json({ error: error.message || 'Internal error' }, { status: 500 });
201
- }
202
- },
203
- };
204
- }
@@ -1,21 +0,0 @@
1
- /**
2
- * Admin Sessions API Handler
3
- *
4
- * Provides admin-level access to login sessions using service account credentials.
5
- * Used by SessionsTab component.
6
- *
7
- * @version 1.0
8
- * @requires Admin role (vibe_app_admin or payez_admin)
9
- */
10
- import { NextRequest, NextResponse } from 'next/server';
11
- export interface AdminSessionsHandlerConfig {
12
- getAuthOptions: () => Promise<any>;
13
- }
14
- /**
15
- * GET /api/admin/sessions - List sessions
16
- * POST /api/admin/sessions - Stats, revoke actions
17
- */
18
- export declare function createSessionsHandler(config: AdminSessionsHandlerConfig): {
19
- GET(request: NextRequest): Promise<NextResponse<unknown>>;
20
- POST(request: NextRequest): Promise<NextResponse<unknown>>;
21
- };