@payez/next-mvp 4.8.1 → 4.8.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (314) hide show
  1. package/POST-INSTALL.md +408 -408
  2. package/README.md +859 -859
  3. package/dist/api-handlers/admin/audit.js +13 -21
  4. package/dist/api-handlers/admin/sessions.js +59 -45
  5. package/dist/api-handlers/admin/stats.js +1 -1
  6. package/dist/api-handlers/admin/users.js +15 -23
  7. package/dist/api-handlers/admin/vibe-data.d.ts +5 -0
  8. package/dist/api-handlers/admin/vibe-data.js +5 -0
  9. package/dist/components/account/MobileNavDrawer.js +18 -18
  10. package/dist/components/account/UserAvatarMenu.js +1 -1
  11. package/dist/components/admin/AlertSettingsTab.js +40 -40
  12. package/dist/components/admin/LoggingSettingsTab.js +28 -28
  13. package/dist/lib/session-store.js +21 -21
  14. package/dist/lib/startup-init.js +19 -19
  15. package/dist/pages/login/page.js +28 -28
  16. package/dist/pages/settings/EnhancedSettingsPage.js +17 -17
  17. package/dist/vibe/client.d.ts +1 -1
  18. package/dist/vibe/client.js +2 -1
  19. package/dist/vibe/filters.d.ts +36 -0
  20. package/dist/vibe/filters.js +47 -0
  21. package/dist/vibe/generic.js +2 -1
  22. package/dist/vibe/sessions.js +28 -3
  23. package/package.json +2 -2
  24. package/scripts/check-publish-eol.mjs +33 -15
  25. package/src/api/auth-handler.ts +550 -550
  26. package/src/api/index.ts +17 -17
  27. package/src/api-handlers/account/change-password.ts +170 -170
  28. package/src/api-handlers/account/masked-info.ts +46 -46
  29. package/src/api-handlers/account/profile.ts +99 -99
  30. package/src/api-handlers/account/recovery/forward.ts +117 -117
  31. package/src/api-handlers/account/recovery/initiate.ts +59 -59
  32. package/src/api-handlers/account/recovery/send-code.ts +21 -21
  33. package/src/api-handlers/account/recovery/verify-code.ts +20 -20
  34. package/src/api-handlers/account/reset-password.ts +87 -87
  35. package/src/api-handlers/account/send-code.ts +70 -70
  36. package/src/api-handlers/account/update-phone.ts +84 -84
  37. package/src/api-handlers/account/validate-password.ts +139 -139
  38. package/src/api-handlers/account/verify-email.ts +134 -134
  39. package/src/api-handlers/account/verify-sms.ts +134 -134
  40. package/src/api-handlers/admin/analytics.ts +452 -452
  41. package/src/api-handlers/admin/audit.ts +223 -232
  42. package/src/api-handlers/admin/index.ts +63 -63
  43. package/src/api-handlers/admin/redis-sessions.ts +259 -259
  44. package/src/api-handlers/admin/sessions.ts +341 -327
  45. package/src/api-handlers/admin/site-logs.ts +388 -388
  46. package/src/api-handlers/admin/stats.ts +260 -260
  47. package/src/api-handlers/admin/users.ts +240 -251
  48. package/src/api-handlers/admin/vibe-data.ts +338 -333
  49. package/src/api-handlers/anon/preferences.ts +123 -123
  50. package/src/api-handlers/auth/credential-login-email-code.ts +92 -92
  51. package/src/api-handlers/auth/credential-login.ts +948 -948
  52. package/src/api-handlers/auth/jwks.ts +31 -31
  53. package/src/api-handlers/auth/login.ts +252 -252
  54. package/src/api-handlers/auth/passkey-signin.ts +116 -116
  55. package/src/api-handlers/auth/refresh.ts +829 -829
  56. package/src/api-handlers/auth/signout.ts +201 -201
  57. package/src/api-handlers/auth/status.ts +23 -23
  58. package/src/api-handlers/auth/update-session.ts +144 -144
  59. package/src/api-handlers/auth/validate.ts +45 -45
  60. package/src/api-handlers/auth/verify-code.ts +116 -116
  61. package/src/api-handlers/mfa/backup-code-verify.ts +170 -170
  62. package/src/api-handlers/mfa/backup-codes.ts +42 -42
  63. package/src/api-handlers/mfa/methods.ts +47 -47
  64. package/src/api-handlers/mfa/totp-confirm.ts +43 -43
  65. package/src/api-handlers/mfa/totp-enroll.ts +43 -43
  66. package/src/api-handlers/mfa/totp-verify.ts +172 -172
  67. package/src/api-handlers/oauth/resume.ts +182 -182
  68. package/src/api-handlers/onboarding/send-email-code.ts +18 -18
  69. package/src/api-handlers/onboarding/set-password.ts +21 -21
  70. package/src/api-handlers/onboarding/verify-code.ts +20 -20
  71. package/src/api-handlers/onboarding/verify-welcome-email.ts +17 -17
  72. package/src/api-handlers/passkeys/list.ts +32 -32
  73. package/src/api-handlers/passkeys/manage.ts +55 -55
  74. package/src/api-handlers/passkeys/register-options.ts +43 -43
  75. package/src/api-handlers/passkeys/register-verify.ts +42 -42
  76. package/src/api-handlers/session/refresh-viability.ts +56 -56
  77. package/src/api-handlers/session/viability.ts +238 -238
  78. package/src/api-handlers/test/force-expire.ts +167 -167
  79. package/src/auth/auth-decision.ts +292 -292
  80. package/src/auth/better-auth.ts +1688 -1688
  81. package/src/auth/idp-oauth.ts +310 -310
  82. package/src/auth/password-reset-bridge.ts +98 -98
  83. package/src/auth/revocation-fields.ts +16 -16
  84. package/src/auth/route-config.ts +236 -236
  85. package/src/auth/safe-callback.ts +199 -199
  86. package/src/auth/session-cookie-clear.ts +30 -30
  87. package/src/auth/session-reset-link.ts +159 -159
  88. package/src/auth/session-response-sanitizer.ts +151 -151
  89. package/src/auth/types/auth-types.ts +555 -555
  90. package/src/auth/types/index.ts +7 -7
  91. package/src/auth/unauthenticated-routes.ts +2 -2
  92. package/src/auth/utils/idp-client.ts +364 -364
  93. package/src/auth/utils/index.ts +6 -6
  94. package/src/auth/utils/token-utils.ts +243 -243
  95. package/src/client/AuthContext.tsx +192 -192
  96. package/src/client/better-auth-client.ts +70 -70
  97. package/src/client/fetch-with-auth.ts +47 -47
  98. package/src/client/fetchWithSession.ts +21 -21
  99. package/src/client/index.ts +13 -13
  100. package/src/client/useAnonSession.ts +131 -131
  101. package/src/components/SessionSync.tsx +138 -138
  102. package/src/components/SignalRHealthCheck.tsx +131 -131
  103. package/src/components/account/MobileNavDrawer.tsx +305 -305
  104. package/src/components/account/UserAvatarMenu.tsx +277 -277
  105. package/src/components/account/index.ts +13 -13
  106. package/src/components/admin/AlertSettingsTab.tsx +728 -728
  107. package/src/components/admin/AnalyticsTab.tsx +703 -703
  108. package/src/components/admin/DataBrowserTab.tsx +508 -508
  109. package/src/components/admin/LoggingSettingsTab.tsx +665 -665
  110. package/src/components/admin/SessionsTab.tsx +421 -421
  111. package/src/components/admin/StatsTab.tsx +379 -379
  112. package/src/components/admin/VibeAdminContext.tsx +87 -87
  113. package/src/components/admin/VibeAdminLayout.tsx +187 -187
  114. package/src/components/admin/index.ts +59 -59
  115. package/src/components/auth/CredentialSignInForm.tsx +240 -240
  116. package/src/components/auth/FederatedAuthSection.tsx +129 -129
  117. package/src/components/auth/ModeAwareLoginPage.tsx +146 -146
  118. package/src/components/auth/ModeAwareSignupPage.tsx +200 -200
  119. package/src/components/auth/PasswordResetBridge.tsx +30 -30
  120. package/src/components/auth/TraditionalAuthSection.tsx +103 -103
  121. package/src/components/recovery/CompleteStep.tsx +36 -36
  122. package/src/components/recovery/InitiateRecoveryStep.tsx +68 -68
  123. package/src/components/recovery/RequestedStep.tsx +30 -30
  124. package/src/components/recovery/SelectMethodStep.tsx +73 -73
  125. package/src/components/recovery/SetPasswordStep.tsx +118 -118
  126. package/src/components/recovery/VerifyCodeStep.tsx +90 -90
  127. package/src/components/reserved/ReservedRecoveryWarning.tsx +160 -160
  128. package/src/components/reserved/ReservedStatusBox.tsx +118 -118
  129. package/src/components/ui/BetaBadge.tsx +58 -58
  130. package/src/components/ui/Footer.tsx +93 -93
  131. package/src/config/env.ts +55 -55
  132. package/src/config/logger.ts +62 -62
  133. package/src/config/logging-config.ts +82 -82
  134. package/src/config/unauthenticated-routes.ts +19 -19
  135. package/src/config/vibe-log-transport.ts +264 -264
  136. package/src/edge/internal-api-url.ts +65 -65
  137. package/src/edge/middleware.ts +42 -42
  138. package/src/hooks/useAuth.ts +117 -117
  139. package/src/hooks/useAuthSettings.ts +109 -109
  140. package/src/hooks/useAvailableProviders.ts +143 -143
  141. package/src/hooks/usePasswordValidation.ts +127 -127
  142. package/src/hooks/useProfile.ts +82 -82
  143. package/src/hooks/usePublicAuthSettings.ts +171 -171
  144. package/src/hooks/useSessionExpiration.ts +101 -101
  145. package/src/hooks/useViabilitySession.ts +337 -337
  146. package/src/index.ts +64 -64
  147. package/src/lib/anon-session.ts +213 -213
  148. package/src/lib/api-handler.ts +643 -643
  149. package/src/lib/app-slug.ts +228 -228
  150. package/src/lib/authorize-resume.ts +172 -172
  151. package/src/lib/bearer-fetch.ts +31 -31
  152. package/src/lib/client-key.ts +88 -88
  153. package/src/lib/code-step-copy.ts +83 -83
  154. package/src/lib/credential-sign-in-client.ts +101 -101
  155. package/src/lib/demo-mode.ts +18 -18
  156. package/src/lib/device-id.ts +67 -67
  157. package/src/lib/ensure-fresh-access-token.ts +509 -509
  158. package/src/lib/geolocation.ts +265 -265
  159. package/src/lib/idp-client-config.ts +1005 -1005
  160. package/src/lib/idp-fetch.ts +169 -169
  161. package/src/lib/idp-url-guard.ts +37 -37
  162. package/src/lib/internal-api.ts +171 -171
  163. package/src/lib/jwt-decode-client.ts +45 -45
  164. package/src/lib/jwt-decode.ts +82 -82
  165. package/src/lib/lock-window.ts +49 -49
  166. package/src/lib/login-error-message.ts +41 -41
  167. package/src/lib/never-in-response.ts +64 -64
  168. package/src/lib/nextauth-secret.ts +168 -168
  169. package/src/lib/onboarding-proxy.ts +57 -57
  170. package/src/lib/password-rules.ts +50 -50
  171. package/src/lib/rate-limit-service.ts +9 -9
  172. package/src/lib/redis.ts +105 -105
  173. package/src/lib/refresh-token-validator.ts +64 -64
  174. package/src/lib/roles.ts +177 -177
  175. package/src/lib/safe-error-response.ts +149 -149
  176. package/src/lib/secret-validation.ts +8 -8
  177. package/src/lib/session-cookie-shape.ts +185 -185
  178. package/src/lib/session-store.ts +1092 -1092
  179. package/src/lib/session.ts +34 -34
  180. package/src/lib/single-flight.ts +64 -64
  181. package/src/lib/site-logger.ts +245 -245
  182. package/src/lib/standardized-client-api.ts +901 -901
  183. package/src/lib/startup-init.ts +276 -276
  184. package/src/lib/test-aware-get-token.ts +41 -41
  185. package/src/lib/token-expiry.ts +40 -40
  186. package/src/lib/token-lifecycle.ts +546 -546
  187. package/src/lib/token-log-id.ts +69 -69
  188. package/src/lib/twofa-rejection.ts +91 -91
  189. package/src/lib/types/api-responses.ts +336 -336
  190. package/src/lib/user-agent-parser.ts +252 -252
  191. package/src/logging/api/admin-analytics.ts +51 -51
  192. package/src/logging/api/audit-log.ts +53 -53
  193. package/src/logging/components/AdminAnalyticsLayout.tsx +49 -49
  194. package/src/logging/components/AuditLogViewer.tsx +125 -125
  195. package/src/logging/components/ErrorMetricsCard.tsx +98 -98
  196. package/src/logging/components/HealthMetricsCard.tsx +70 -70
  197. package/src/logging/hooks/useAdminAnalytics.ts +22 -22
  198. package/src/logging/hooks/useAuditLog.ts +24 -24
  199. package/src/logging/hooks/useErrorMetrics.ts +40 -40
  200. package/src/logging/hooks/useHealthMetrics.ts +44 -44
  201. package/src/logging/index.ts +18 -18
  202. package/src/logging/types/analytics.ts +81 -81
  203. package/src/logging/types/audit.ts +31 -31
  204. package/src/logging/types/index.ts +3 -3
  205. package/src/middleware/create-middleware.ts +1141 -1141
  206. package/src/middleware/rbac-check.ts +279 -279
  207. package/src/middleware/twofa-presets.ts +224 -224
  208. package/src/models/DecodedAccessToken.ts +16 -16
  209. package/src/models/SessionModel.ts +331 -331
  210. package/src/pages/admin-login/page.tsx +111 -111
  211. package/src/pages/admin-page-permissions/PagePermissionsAdminPage.tsx +527 -527
  212. package/src/pages/admin-page-permissions/index.ts +7 -7
  213. package/src/pages/admin-roles/RolesAdminPage.tsx +533 -533
  214. package/src/pages/admin-roles/index.ts +9 -9
  215. package/src/pages/admin-roles/modals.tsx +469 -469
  216. package/src/pages/client-admin/ClientSiteAdminPage.tsx +382 -382
  217. package/src/pages/client-admin/index.ts +33 -33
  218. package/src/pages/coming-soon/page.tsx +83 -83
  219. package/src/pages/login/page.tsx +338 -338
  220. package/src/pages/onboarding/index.ts +11 -11
  221. package/src/pages/onboarding/page.tsx +212 -212
  222. package/src/pages/profile/EnhancedProfilePage.tsx +514 -514
  223. package/src/pages/profile/index.ts +9 -9
  224. package/src/pages/profile/page.tsx +166 -166
  225. package/src/pages/recovery/page.tsx +267 -267
  226. package/src/pages/roles/MyRolesPage.tsx +211 -211
  227. package/src/pages/roles/components.tsx +294 -294
  228. package/src/pages/roles/index.ts +17 -17
  229. package/src/pages/security/EnhancedSecurityPage.tsx +660 -660
  230. package/src/pages/security/index.ts +12 -12
  231. package/src/pages/security/page.tsx +507 -507
  232. package/src/pages/service-unavailable/page.tsx +63 -63
  233. package/src/pages/settings/EnhancedSettingsPage.tsx +642 -642
  234. package/src/pages/settings/index.ts +9 -9
  235. package/src/pages/settings/page.tsx +47 -47
  236. package/src/pages/showcase/ShowcasePage.tsx +532 -532
  237. package/src/pages/showcase/index.ts +13 -13
  238. package/src/pages/test-env/EmergencyLogoutPage.tsx +192 -192
  239. package/src/pages/test-env/JwtInspectPage.tsx +449 -449
  240. package/src/pages/test-env/RefreshTokenPage.tsx +178 -178
  241. package/src/pages/test-env/TestEnvPage.tsx +130 -130
  242. package/src/pages/test-env/guarded.tsx +81 -81
  243. package/src/pages/test-env/index.ts +77 -77
  244. package/src/pages/test-env/redact-credentials.ts +96 -96
  245. package/src/pages/verify-code/page.tsx +746 -746
  246. package/src/routes/account/index.ts +31 -31
  247. package/src/routes/account/masked-info.ts +36 -36
  248. package/src/routes/account/send-code.ts +39 -39
  249. package/src/routes/account/update-phone.ts +13 -13
  250. package/src/routes/account/verify-email.ts +40 -40
  251. package/src/routes/account/verify-sms.ts +40 -40
  252. package/src/routes/auth/credential-login-email-code.ts +6 -6
  253. package/src/routes/auth/credential-login.ts +6 -6
  254. package/src/routes/auth/index.ts +22 -22
  255. package/src/routes/auth/logout.ts +111 -111
  256. package/src/routes/auth/nextauth.ts +45 -45
  257. package/src/routes/auth/passkey-signin.ts +13 -13
  258. package/src/routes/auth/refresh.ts +77 -77
  259. package/src/routes/auth/session-reset.ts +37 -37
  260. package/src/routes/auth/session.ts +261 -261
  261. package/src/routes/auth/settings.ts +181 -181
  262. package/src/routes/auth/viability.ts +519 -519
  263. package/src/routes/index.ts +17 -17
  264. package/src/routes/mfa/backup-code-verify.ts +1 -1
  265. package/src/routes/mfa/backup-codes.ts +10 -10
  266. package/src/routes/mfa/methods.ts +22 -22
  267. package/src/routes/mfa/totp-confirm.ts +10 -10
  268. package/src/routes/mfa/totp-enroll.ts +10 -10
  269. package/src/routes/mfa/totp-verify.ts +14 -14
  270. package/src/routes/onboarding/index.ts +15 -15
  271. package/src/routes/onboarding/send-email-code.ts +2 -2
  272. package/src/routes/onboarding/set-password.ts +2 -2
  273. package/src/routes/onboarding/verify-code.ts +2 -2
  274. package/src/routes/onboarding/verify-welcome-email.ts +2 -2
  275. package/src/routes/passkeys/list.ts +10 -10
  276. package/src/routes/passkeys/manage.ts +23 -23
  277. package/src/routes/passkeys/register-options.ts +10 -10
  278. package/src/routes/passkeys/register-verify.ts +10 -10
  279. package/src/routes/session/index.ts +7 -7
  280. package/src/routes/session/refresh-viability.ts +17 -17
  281. package/src/server/auth-guard.ts +203 -203
  282. package/src/server/auth.ts +486 -486
  283. package/src/server/decode-session.ts +309 -309
  284. package/src/server/slim-middleware.ts +117 -117
  285. package/src/server/verified-session-token.ts +103 -103
  286. package/src/server/with-auth.ts +93 -93
  287. package/src/services/signalrActivityService.ts +258 -258
  288. package/src/stores/authStore.ts +1900 -1900
  289. package/src/templates/instrumentation.ts +60 -60
  290. package/src/theme/ThemeProvider.tsx +39 -39
  291. package/src/theme/default.ts +33 -33
  292. package/src/theme/index.ts +31 -31
  293. package/src/theme/types.ts +69 -69
  294. package/src/theme/useTheme.ts +57 -57
  295. package/src/theme/utils.ts +40 -40
  296. package/src/types/api.ts +12 -12
  297. package/src/types/auth.d.ts +23 -23
  298. package/src/types/auth.ts +48 -48
  299. package/src/types/logging.ts +11 -11
  300. package/src/types/recovery.ts +54 -54
  301. package/src/utils/api.ts +401 -401
  302. package/src/utils/circuitBreaker.ts +40 -40
  303. package/src/utils/error-message.ts +108 -108
  304. package/src/utils/layout/reservedSpace.ts +124 -124
  305. package/src/utils/logout.ts +30 -30
  306. package/src/vibe/client.ts +878 -877
  307. package/src/vibe/enterprise-auth.ts +208 -208
  308. package/src/vibe/errors.ts +209 -209
  309. package/src/vibe/filters.ts +52 -0
  310. package/src/vibe/generic.ts +340 -339
  311. package/src/vibe/hooks/index.ts +367 -367
  312. package/src/vibe/index.ts +133 -133
  313. package/src/vibe/sessions.ts +925 -899
  314. package/src/vibe/types.ts +577 -577
@@ -1,294 +1,294 @@
1
- /**
2
- * Shared Role Components for @payez/next-mvp
3
- *
4
- * Components for displaying roles and permissions:
5
- * - RoleBadge: Small badge showing role name and source
6
- * - RoleCard: Expandable card showing role details and permissions
7
- * - PermissionsList: Grouped list of permissions
8
- *
9
- * @see docs/specs/ROLES_MANAGEMENT_SPEC.md
10
- */
11
-
12
- 'use client';
13
-
14
- import React, { useState } from 'react';
15
-
16
- // Types
17
- export interface Permission {
18
- type: 'page' | 'feature';
19
- pattern?: string;
20
- name?: string;
21
- display: string;
22
- }
23
-
24
- export interface Role {
25
- role_name: string;
26
- display_name?: string;
27
- description?: string;
28
- assigned_at?: string;
29
- status?: 'active' | 'pending' | 'expired';
30
- permissions?: Permission[];
31
- user_count?: number;
32
- permission_count?: number;
33
- is_system_role?: boolean;
34
- }
35
-
36
- // Role source type
37
- export type RoleSource = 'idp' | 'app';
38
-
39
- // Format date helper
40
- function formatDate(dateString?: string): string {
41
- if (!dateString) return '';
42
- try {
43
- return new Date(dateString).toLocaleDateString('en-US', {
44
- year: 'numeric',
45
- month: 'long',
46
- day: 'numeric',
47
- });
48
- } catch {
49
- return dateString;
50
- }
51
- }
52
-
53
- // Role icon based on name
54
- function getRoleIcon(roleName: string): string {
55
- if (roleName.includes('admin')) return 'shield';
56
- if (roleName.includes('editor')) return 'edit';
57
- if (roleName.includes('viewer')) return 'eye';
58
- return 'user';
59
- }
60
-
61
- /**
62
- * RoleBadge - Small badge showing role name and source
63
- */
64
- export function RoleBadge({
65
- roleName,
66
- source,
67
- size = 'md',
68
- isDark = true,
69
- }: {
70
- roleName: string;
71
- source: RoleSource;
72
- size?: 'sm' | 'md';
73
- isDark?: boolean;
74
- }) {
75
- const sizeClasses = size === 'sm' ? 'text-xs px-2 py-0.5' : 'text-sm px-2.5 py-1';
76
- const sourceColor = source === 'idp'
77
- ? isDark ? 'bg-purple-900/30 text-purple-400 border-purple-500/30' : 'bg-purple-100 text-purple-700 border-purple-300'
78
- : isDark ? 'bg-blue-900/30 text-blue-400 border-blue-500/30' : 'bg-blue-100 text-blue-700 border-blue-300';
79
-
80
- return (
81
- <span className={`inline-flex items-center gap-1 rounded-full border ${sizeClasses} ${sourceColor}`}>
82
- {source === 'idp' && (
83
- <svg className="w-3 h-3" fill="none" viewBox="0 0 24 24" stroke="currentColor">
84
- <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" />
85
- </svg>
86
- )}
87
- {roleName}
88
- </span>
89
- );
90
- }
91
-
92
- /**
93
- * PermissionsList - Grouped list of permissions
94
- */
95
- export function PermissionsList({
96
- permissions,
97
- grouped = true,
98
- isDark = true,
99
- }: {
100
- permissions: Permission[];
101
- grouped?: boolean;
102
- isDark?: boolean;
103
- }) {
104
- const textPrimary = isDark ? 'text-white' : 'text-gray-900';
105
- const textMuted = isDark ? 'text-slate-400' : 'text-gray-500';
106
- const borderColor = isDark ? 'border-slate-600' : 'border-gray-300';
107
-
108
- if (!permissions || permissions.length === 0) {
109
- return <p className={`text-sm ${textMuted}`}>No specific permissions defined</p>;
110
- }
111
-
112
- if (!grouped) {
113
- return (
114
- <ul className="space-y-1">
115
- {permissions.map((perm, idx) => (
116
- <li key={idx} className={`text-sm ${textMuted} flex items-center gap-2`}>
117
- <span className="text-green-400">+</span>
118
- {perm.display}
119
- </li>
120
- ))}
121
- </ul>
122
- );
123
- }
124
-
125
- // Group by type
126
- const pagePerms = permissions.filter((p) => p.type === 'page');
127
- const featurePerms = permissions.filter((p) => p.type === 'feature');
128
-
129
- return (
130
- <div className="space-y-3">
131
- {pagePerms.length > 0 && (
132
- <div>
133
- <p className={`text-xs font-medium uppercase tracking-wider mb-1 ${textMuted}`}>Page Access</p>
134
- <ul className={`pl-4 border-l-2 ${borderColor} space-y-1`}>
135
- {pagePerms.map((perm, idx) => (
136
- <li key={idx} className={`text-sm ${textPrimary}`}>{perm.display}</li>
137
- ))}
138
- </ul>
139
- </div>
140
- )}
141
- {featurePerms.length > 0 && (
142
- <div>
143
- <p className={`text-xs font-medium uppercase tracking-wider mb-1 ${textMuted}`}>Features</p>
144
- <ul className={`pl-4 border-l-2 ${borderColor} space-y-1`}>
145
- {featurePerms.map((perm, idx) => (
146
- <li key={idx} className={`text-sm ${textPrimary}`}>{perm.display}</li>
147
- ))}
148
- </ul>
149
- </div>
150
- )}
151
- </div>
152
- );
153
- }
154
-
155
- /**
156
- * RoleCard - Expandable card showing role details and permissions
157
- */
158
- export function RoleCard({
159
- role,
160
- source,
161
- showPermissions = true,
162
- defaultExpanded = false,
163
- isDark = true,
164
- }: {
165
- role: Role;
166
- source: RoleSource;
167
- showPermissions?: boolean;
168
- defaultExpanded?: boolean;
169
- isDark?: boolean;
170
- }) {
171
- const [expanded, setExpanded] = useState(defaultExpanded);
172
-
173
- const cardBg = isDark ? 'bg-slate-800' : 'bg-white';
174
- const borderColor = isDark ? 'border-slate-700' : 'border-gray-200';
175
- const textPrimary = isDark ? 'text-white' : 'text-gray-900';
176
- const textMuted = isDark ? 'text-slate-400' : 'text-gray-500';
177
- const hoverBg = isDark ? 'hover:bg-slate-700/50' : 'hover:bg-gray-50';
178
-
179
- const statusColors = {
180
- active: isDark ? 'text-green-400' : 'text-green-600',
181
- pending: isDark ? 'text-yellow-400' : 'text-yellow-600',
182
- expired: isDark ? 'text-red-400' : 'text-red-600',
183
- };
184
-
185
- const iconMap: Record<string, React.ReactNode> = {
186
- shield: (
187
- <svg className="w-5 h-5" fill="none" viewBox="0 0 24 24" stroke="currentColor">
188
- <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z" />
189
- </svg>
190
- ),
191
- edit: (
192
- <svg className="w-5 h-5" fill="none" viewBox="0 0 24 24" stroke="currentColor">
193
- <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M11 5H6a2 2 0 00-2 2v11a2 2 0 002 2h11a2 2 0 002-2v-5m-1.414-9.414a2 2 0 112.828 2.828L11.828 15H9v-2.828l8.586-8.586z" />
194
- </svg>
195
- ),
196
- eye: (
197
- <svg className="w-5 h-5" fill="none" viewBox="0 0 24 24" stroke="currentColor">
198
- <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M15 12a3 3 0 11-6 0 3 3 0 016 0z" />
199
- <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7-1.274 4.057-5.064 7-9.542 7-4.477 0-8.268-2.943-9.542-7z" />
200
- </svg>
201
- ),
202
- user: (
203
- <svg className="w-5 h-5" fill="none" viewBox="0 0 24 24" stroke="currentColor">
204
- <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M16 7a4 4 0 11-8 0 4 4 0 018 0zM12 14a7 7 0 00-7 7h14a7 7 0 00-7-7z" />
205
- </svg>
206
- ),
207
- };
208
-
209
- const icon = iconMap[getRoleIcon(role.role_name)] || iconMap.user;
210
-
211
- return (
212
- <div className={`rounded-lg border ${borderColor} ${cardBg} overflow-hidden`}>
213
- {/* Header */}
214
- <div className={`p-4 ${showPermissions ? `cursor-pointer ${hoverBg}` : ''}`} onClick={() => showPermissions && setExpanded(!expanded)}>
215
- <div className="flex items-start justify-between">
216
- <div className="flex items-center gap-3">
217
- <div className={`p-2 rounded-lg ${isDark ? 'bg-slate-700' : 'bg-gray-100'} ${textMuted}`}>
218
- {icon}
219
- </div>
220
- <div>
221
- <div className="flex items-center gap-2">
222
- <h3 className={`font-semibold ${textPrimary}`}>{role.display_name || role.role_name}</h3>
223
- {source === 'idp' && (
224
- <svg className={`w-4 h-4 ${textMuted}`} fill="none" viewBox="0 0 24 24" stroke="currentColor">
225
- <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" />
226
- </svg>
227
- )}
228
- </div>
229
- <p className={`text-sm ${textMuted}`}>{role.description || 'No description'}</p>
230
- {role.assigned_at && (
231
- <p className={`text-xs ${textMuted} mt-1`}>Assigned: {formatDate(role.assigned_at)}</p>
232
- )}
233
- </div>
234
- </div>
235
- <div className="flex items-center gap-2">
236
- {role.status && (
237
- <span className={`flex items-center gap-1 text-sm ${statusColors[role.status]}`}>
238
- <span className="w-2 h-2 rounded-full bg-current" />
239
- {role.status.charAt(0).toUpperCase() + role.status.slice(1)}
240
- </span>
241
- )}
242
- {showPermissions && (
243
- <svg
244
- className={`w-5 h-5 transition-transform ${expanded ? 'rotate-180' : ''} ${textMuted}`}
245
- fill="none"
246
- viewBox="0 0 24 24"
247
- stroke="currentColor"
248
- >
249
- <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M19 9l-7 7-7-7" />
250
- </svg>
251
- )}
252
- </div>
253
- </div>
254
- </div>
255
-
256
- {/* Permissions (expandable) */}
257
- {showPermissions && expanded && role.permissions && (
258
- <div className={`px-4 pb-4 pt-2 border-t ${borderColor}`}>
259
- <PermissionsList permissions={role.permissions} isDark={isDark} />
260
- </div>
261
- )}
262
- </div>
263
- );
264
- }
265
-
266
- /**
267
- * RoleSourceHeader - Section header for role groups
268
- */
269
- export function RoleSourceHeader({
270
- source,
271
- count,
272
- isDark = true,
273
- }: {
274
- source: RoleSource;
275
- count?: number;
276
- isDark?: boolean;
277
- }) {
278
- const bgColor = isDark ? 'bg-slate-700' : 'bg-gray-100';
279
- const textColor = isDark ? 'text-slate-300' : 'text-gray-700';
280
-
281
- const labels = {
282
- idp: 'Identity Roles (from PayEz IDP)',
283
- app: 'Application Roles',
284
- };
285
-
286
- return (
287
- <div className={`${bgColor} px-4 py-2 rounded-lg flex items-center justify-between`}>
288
- <span className={`text-sm font-medium ${textColor}`}>{labels[source]}</span>
289
- {count !== undefined && (
290
- <span className={`text-xs ${isDark ? 'text-slate-400' : 'text-gray-500'}`}>{count} role{count !== 1 ? 's' : ''}</span>
291
- )}
292
- </div>
293
- );
294
- }
1
+ /**
2
+ * Shared Role Components for @payez/next-mvp
3
+ *
4
+ * Components for displaying roles and permissions:
5
+ * - RoleBadge: Small badge showing role name and source
6
+ * - RoleCard: Expandable card showing role details and permissions
7
+ * - PermissionsList: Grouped list of permissions
8
+ *
9
+ * @see docs/specs/ROLES_MANAGEMENT_SPEC.md
10
+ */
11
+
12
+ 'use client';
13
+
14
+ import React, { useState } from 'react';
15
+
16
+ // Types
17
+ export interface Permission {
18
+ type: 'page' | 'feature';
19
+ pattern?: string;
20
+ name?: string;
21
+ display: string;
22
+ }
23
+
24
+ export interface Role {
25
+ role_name: string;
26
+ display_name?: string;
27
+ description?: string;
28
+ assigned_at?: string;
29
+ status?: 'active' | 'pending' | 'expired';
30
+ permissions?: Permission[];
31
+ user_count?: number;
32
+ permission_count?: number;
33
+ is_system_role?: boolean;
34
+ }
35
+
36
+ // Role source type
37
+ export type RoleSource = 'idp' | 'app';
38
+
39
+ // Format date helper
40
+ function formatDate(dateString?: string): string {
41
+ if (!dateString) return '';
42
+ try {
43
+ return new Date(dateString).toLocaleDateString('en-US', {
44
+ year: 'numeric',
45
+ month: 'long',
46
+ day: 'numeric',
47
+ });
48
+ } catch {
49
+ return dateString;
50
+ }
51
+ }
52
+
53
+ // Role icon based on name
54
+ function getRoleIcon(roleName: string): string {
55
+ if (roleName.includes('admin')) return 'shield';
56
+ if (roleName.includes('editor')) return 'edit';
57
+ if (roleName.includes('viewer')) return 'eye';
58
+ return 'user';
59
+ }
60
+
61
+ /**
62
+ * RoleBadge - Small badge showing role name and source
63
+ */
64
+ export function RoleBadge({
65
+ roleName,
66
+ source,
67
+ size = 'md',
68
+ isDark = true,
69
+ }: {
70
+ roleName: string;
71
+ source: RoleSource;
72
+ size?: 'sm' | 'md';
73
+ isDark?: boolean;
74
+ }) {
75
+ const sizeClasses = size === 'sm' ? 'text-xs px-2 py-0.5' : 'text-sm px-2.5 py-1';
76
+ const sourceColor = source === 'idp'
77
+ ? isDark ? 'bg-purple-900/30 text-purple-400 border-purple-500/30' : 'bg-purple-100 text-purple-700 border-purple-300'
78
+ : isDark ? 'bg-blue-900/30 text-blue-400 border-blue-500/30' : 'bg-blue-100 text-blue-700 border-blue-300';
79
+
80
+ return (
81
+ <span className={`inline-flex items-center gap-1 rounded-full border ${sizeClasses} ${sourceColor}`}>
82
+ {source === 'idp' && (
83
+ <svg className="w-3 h-3" fill="none" viewBox="0 0 24 24" stroke="currentColor">
84
+ <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" />
85
+ </svg>
86
+ )}
87
+ {roleName}
88
+ </span>
89
+ );
90
+ }
91
+
92
+ /**
93
+ * PermissionsList - Grouped list of permissions
94
+ */
95
+ export function PermissionsList({
96
+ permissions,
97
+ grouped = true,
98
+ isDark = true,
99
+ }: {
100
+ permissions: Permission[];
101
+ grouped?: boolean;
102
+ isDark?: boolean;
103
+ }) {
104
+ const textPrimary = isDark ? 'text-white' : 'text-gray-900';
105
+ const textMuted = isDark ? 'text-slate-400' : 'text-gray-500';
106
+ const borderColor = isDark ? 'border-slate-600' : 'border-gray-300';
107
+
108
+ if (!permissions || permissions.length === 0) {
109
+ return <p className={`text-sm ${textMuted}`}>No specific permissions defined</p>;
110
+ }
111
+
112
+ if (!grouped) {
113
+ return (
114
+ <ul className="space-y-1">
115
+ {permissions.map((perm, idx) => (
116
+ <li key={idx} className={`text-sm ${textMuted} flex items-center gap-2`}>
117
+ <span className="text-green-400">+</span>
118
+ {perm.display}
119
+ </li>
120
+ ))}
121
+ </ul>
122
+ );
123
+ }
124
+
125
+ // Group by type
126
+ const pagePerms = permissions.filter((p) => p.type === 'page');
127
+ const featurePerms = permissions.filter((p) => p.type === 'feature');
128
+
129
+ return (
130
+ <div className="space-y-3">
131
+ {pagePerms.length > 0 && (
132
+ <div>
133
+ <p className={`text-xs font-medium uppercase tracking-wider mb-1 ${textMuted}`}>Page Access</p>
134
+ <ul className={`pl-4 border-l-2 ${borderColor} space-y-1`}>
135
+ {pagePerms.map((perm, idx) => (
136
+ <li key={idx} className={`text-sm ${textPrimary}`}>{perm.display}</li>
137
+ ))}
138
+ </ul>
139
+ </div>
140
+ )}
141
+ {featurePerms.length > 0 && (
142
+ <div>
143
+ <p className={`text-xs font-medium uppercase tracking-wider mb-1 ${textMuted}`}>Features</p>
144
+ <ul className={`pl-4 border-l-2 ${borderColor} space-y-1`}>
145
+ {featurePerms.map((perm, idx) => (
146
+ <li key={idx} className={`text-sm ${textPrimary}`}>{perm.display}</li>
147
+ ))}
148
+ </ul>
149
+ </div>
150
+ )}
151
+ </div>
152
+ );
153
+ }
154
+
155
+ /**
156
+ * RoleCard - Expandable card showing role details and permissions
157
+ */
158
+ export function RoleCard({
159
+ role,
160
+ source,
161
+ showPermissions = true,
162
+ defaultExpanded = false,
163
+ isDark = true,
164
+ }: {
165
+ role: Role;
166
+ source: RoleSource;
167
+ showPermissions?: boolean;
168
+ defaultExpanded?: boolean;
169
+ isDark?: boolean;
170
+ }) {
171
+ const [expanded, setExpanded] = useState(defaultExpanded);
172
+
173
+ const cardBg = isDark ? 'bg-slate-800' : 'bg-white';
174
+ const borderColor = isDark ? 'border-slate-700' : 'border-gray-200';
175
+ const textPrimary = isDark ? 'text-white' : 'text-gray-900';
176
+ const textMuted = isDark ? 'text-slate-400' : 'text-gray-500';
177
+ const hoverBg = isDark ? 'hover:bg-slate-700/50' : 'hover:bg-gray-50';
178
+
179
+ const statusColors = {
180
+ active: isDark ? 'text-green-400' : 'text-green-600',
181
+ pending: isDark ? 'text-yellow-400' : 'text-yellow-600',
182
+ expired: isDark ? 'text-red-400' : 'text-red-600',
183
+ };
184
+
185
+ const iconMap: Record<string, React.ReactNode> = {
186
+ shield: (
187
+ <svg className="w-5 h-5" fill="none" viewBox="0 0 24 24" stroke="currentColor">
188
+ <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z" />
189
+ </svg>
190
+ ),
191
+ edit: (
192
+ <svg className="w-5 h-5" fill="none" viewBox="0 0 24 24" stroke="currentColor">
193
+ <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M11 5H6a2 2 0 00-2 2v11a2 2 0 002 2h11a2 2 0 002-2v-5m-1.414-9.414a2 2 0 112.828 2.828L11.828 15H9v-2.828l8.586-8.586z" />
194
+ </svg>
195
+ ),
196
+ eye: (
197
+ <svg className="w-5 h-5" fill="none" viewBox="0 0 24 24" stroke="currentColor">
198
+ <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M15 12a3 3 0 11-6 0 3 3 0 016 0z" />
199
+ <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7-1.274 4.057-5.064 7-9.542 7-4.477 0-8.268-2.943-9.542-7z" />
200
+ </svg>
201
+ ),
202
+ user: (
203
+ <svg className="w-5 h-5" fill="none" viewBox="0 0 24 24" stroke="currentColor">
204
+ <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M16 7a4 4 0 11-8 0 4 4 0 018 0zM12 14a7 7 0 00-7 7h14a7 7 0 00-7-7z" />
205
+ </svg>
206
+ ),
207
+ };
208
+
209
+ const icon = iconMap[getRoleIcon(role.role_name)] || iconMap.user;
210
+
211
+ return (
212
+ <div className={`rounded-lg border ${borderColor} ${cardBg} overflow-hidden`}>
213
+ {/* Header */}
214
+ <div className={`p-4 ${showPermissions ? `cursor-pointer ${hoverBg}` : ''}`} onClick={() => showPermissions && setExpanded(!expanded)}>
215
+ <div className="flex items-start justify-between">
216
+ <div className="flex items-center gap-3">
217
+ <div className={`p-2 rounded-lg ${isDark ? 'bg-slate-700' : 'bg-gray-100'} ${textMuted}`}>
218
+ {icon}
219
+ </div>
220
+ <div>
221
+ <div className="flex items-center gap-2">
222
+ <h3 className={`font-semibold ${textPrimary}`}>{role.display_name || role.role_name}</h3>
223
+ {source === 'idp' && (
224
+ <svg className={`w-4 h-4 ${textMuted}`} fill="none" viewBox="0 0 24 24" stroke="currentColor">
225
+ <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" />
226
+ </svg>
227
+ )}
228
+ </div>
229
+ <p className={`text-sm ${textMuted}`}>{role.description || 'No description'}</p>
230
+ {role.assigned_at && (
231
+ <p className={`text-xs ${textMuted} mt-1`}>Assigned: {formatDate(role.assigned_at)}</p>
232
+ )}
233
+ </div>
234
+ </div>
235
+ <div className="flex items-center gap-2">
236
+ {role.status && (
237
+ <span className={`flex items-center gap-1 text-sm ${statusColors[role.status]}`}>
238
+ <span className="w-2 h-2 rounded-full bg-current" />
239
+ {role.status.charAt(0).toUpperCase() + role.status.slice(1)}
240
+ </span>
241
+ )}
242
+ {showPermissions && (
243
+ <svg
244
+ className={`w-5 h-5 transition-transform ${expanded ? 'rotate-180' : ''} ${textMuted}`}
245
+ fill="none"
246
+ viewBox="0 0 24 24"
247
+ stroke="currentColor"
248
+ >
249
+ <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M19 9l-7 7-7-7" />
250
+ </svg>
251
+ )}
252
+ </div>
253
+ </div>
254
+ </div>
255
+
256
+ {/* Permissions (expandable) */}
257
+ {showPermissions && expanded && role.permissions && (
258
+ <div className={`px-4 pb-4 pt-2 border-t ${borderColor}`}>
259
+ <PermissionsList permissions={role.permissions} isDark={isDark} />
260
+ </div>
261
+ )}
262
+ </div>
263
+ );
264
+ }
265
+
266
+ /**
267
+ * RoleSourceHeader - Section header for role groups
268
+ */
269
+ export function RoleSourceHeader({
270
+ source,
271
+ count,
272
+ isDark = true,
273
+ }: {
274
+ source: RoleSource;
275
+ count?: number;
276
+ isDark?: boolean;
277
+ }) {
278
+ const bgColor = isDark ? 'bg-slate-700' : 'bg-gray-100';
279
+ const textColor = isDark ? 'text-slate-300' : 'text-gray-700';
280
+
281
+ const labels = {
282
+ idp: 'Identity Roles (from PayEz IDP)',
283
+ app: 'Application Roles',
284
+ };
285
+
286
+ return (
287
+ <div className={`${bgColor} px-4 py-2 rounded-lg flex items-center justify-between`}>
288
+ <span className={`text-sm font-medium ${textColor}`}>{labels[source]}</span>
289
+ {count !== undefined && (
290
+ <span className={`text-xs ${isDark ? 'text-slate-400' : 'text-gray-500'}`}>{count} role{count !== 1 ? 's' : ''}</span>
291
+ )}
292
+ </div>
293
+ );
294
+ }
@@ -1,17 +1,17 @@
1
- /**
2
- * Roles Page exports
3
- *
4
- * - MyRolesPage: User view of their roles (/account/roles)
5
- * - Components: RoleCard, RoleBadge, PermissionsList, RoleSourceHeader
6
- */
7
-
8
- export { default as MyRolesPage } from './MyRolesPage';
9
- export {
10
- RoleCard,
11
- RoleBadge,
12
- PermissionsList,
13
- RoleSourceHeader,
14
- type Role,
15
- type Permission,
16
- type RoleSource,
17
- } from './components';
1
+ /**
2
+ * Roles Page exports
3
+ *
4
+ * - MyRolesPage: User view of their roles (/account/roles)
5
+ * - Components: RoleCard, RoleBadge, PermissionsList, RoleSourceHeader
6
+ */
7
+
8
+ export { default as MyRolesPage } from './MyRolesPage';
9
+ export {
10
+ RoleCard,
11
+ RoleBadge,
12
+ PermissionsList,
13
+ RoleSourceHeader,
14
+ type Role,
15
+ type Permission,
16
+ type RoleSource,
17
+ } from './components';