@plutocms/supabase 0.10.0 → 0.11.1

package/app/pages/admin/(auth)/login.vue

@@ -1,95 +0,0 @@
-<script setup lang="ts">
-interface Form {
-  email: string
-  password: string
-}
-
-definePageMeta({
-  layout: 'auth',
-})
-
-const { t } = usePlutoI18n()
-
-useHead({
-  title: () => t('supabase.auth.login.title'),
-})
-
-const { isSubmitting, login } = await useAuth()
-
-const form = ref<Form>({
-  email: '',
-  password: '',
-})
-
-function submitForm() {
-  login(form.value)
-}
-</script>
-
-<template>
-  <div class="grid min-h-dvh place-items-center p-4">
-    <UCard class="w-full max-w-100">
-      <form @submit.prevent="submitForm">
-        <div class="flex flex-col gap-y-6">
-          <h1 class="text-3xl font-bold">{{ t('supabase.auth.login.title') }}</h1>
-
-          <UFormField :label="t('supabase.auth.fields.email')">
-            <UInput
-              v-model="form.email"
-              placeholder="victor@example.com"
-              class="w-full"
-              autocomplete="email"
-            />
-          </UFormField>
-
-          <UFormField :label="t('supabase.auth.fields.password')">
-            <UInput
-              v-model="form.password"
-              placeholder="••••"
-              class="w-full"
-              type="password"
-            />
-          </UFormField>
-
-          <div
-            class="flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-between sm:gap-x-4"
-          >
-            <UFormField>
-              <UButton
-                :loading="isSubmitting"
-                type="submit"
-                icon="lucide:log-in"
-                class="w-full justify-center sm:w-auto"
-              >
-                {{ t('supabase.auth.login.submit') }}
-              </UButton>
-            </UFormField>
-
-            <UFormField>
-              <UButton variant="link" to="/admin/signup" class="px-0">
-                {{ t('supabase.auth.login.createAccount') }}
-              </UButton>
-            </UFormField>
-          </div>
-
-          <div
-            class="flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-between"
-          >
-            <UButton
-              variant="link"
-              icon="lucide:arrow-left"
-              to="/"
-              class="px-0"
-            >
-              {{ t('supabase.auth.login.backToHome') }}
-            </UButton>
-
-            <UButton variant="link" to="/admin/forgot-password" class="px-0">
-              {{ t('supabase.auth.login.forgotPassword') }}
-            </UButton>
-          </div>
-        </div>
-      </form>
-    </UCard>
-  </div>
-</template>

package/app/pages/admin.vue

@@ -1,57 +0,0 @@
-<script setup lang="ts">
-definePageMeta({
-  middleware: ['setup-check', 'auth'],
-  layout: 'admin',
-})
-
-const route = useRoute()
-const { t } = usePlutoI18n()
-const { isLoggedIn, logout, allowedUnauthenticatedPaths } = await useAuth()
-const toast = useToast()
-
-// Loading/clearing permissions on login/logout lives in
-// app/plugins/pluto-permissions-sync.ts now, not here — that plugin runs
-// on every page, not just this one, so a signed-in admin browsing a public
-// page directly (no prior visit to /admin/** this session) still gets
-// their capabilities loaded.
-
-const visibility = useDocumentVisibility()
-
-watch(visibility, async (current, previous) => {
-  if (current === 'visible' && previous === 'hidden') {
-    if (
-      !isLoggedIn.value &&
-      !route.path.startsWith('/admin/setup') &&
-      !allowedUnauthenticatedPaths.includes(route.path)
-    ) {
-      await logout({ redirectTo: route.path })
-
-      toast.add({
-        title: t('supabase.auth.toasts.notLoggedIn'),
-        description: t('supabase.auth.toasts.notLoggedInDescription'),
-        icon: 'lucide:circle-x',
-        color: 'error',
-      })
-    }
-  }
-})
-</script>
-
-<template>
-  <div class="light:text-zinc-800 h-full dark:text-white">
-    <ClientOnly>
-      <Container
-        v-if="
-          isLoggedIn
-            && !route.path.startsWith('/admin/setup')
-            && !route.path.startsWith('/admin/migrations')
-        "
-        class="pt-4"
-      >
-        <MigrationsBanner />
-      </Container>
-    </ClientOnly>
-
-    <NuxtPage />
-  </div>
-</template>

package/app/plugins/pluto-locale-sync.client.ts

@@ -1,30 +0,0 @@
-/**
- * Loads the signed-in user's stored admin language whenever a session
- * appears: after a login, and on a page load that already has a session.
- * App-wide, like pluto-permissions-sync.ts, so any page gets the language,
- * not only the pages under /admin.
- *
- * Client-only, unlike the permissions sync. A server `$fetch` does not forward
- * the user's cookies, so a server run would read no locale and clear the cookie.
- * The server already resolves the first locale from the cookie or the
- * Accept-Language header. The stored value then replaces it on the client, and
- * the cookie keeps it for the next server render.
- *
- * `useSupabaseSession()` is the same primitive the permissions sync uses.
- * `syncUserLocale()` never throws. With no driver, or on an error, nothing
- * changes.
- */
-export default defineNuxtPlugin(() => {
-  const session = useSupabaseSession()
-  const { syncUserLocale } = usePlutoI18n()
-
-  watch(
-    session,
-    (current) => {
-      if (current) {
-        void syncUserLocale()
-      }
-    },
-    { immediate: true }
-  )
-})

package/app/plugins/pluto-permissions-sync.ts

@@ -1,38 +0,0 @@
-/**
- * Loads (or clears) the current user's capabilities whenever their session
- * appears or disappears — app-wide, not page-scoped.
- *
- * This used to live as a `watch` inside `app/pages/admin.vue`. That only
- * ran while `admin.vue` was the mounted page, so a signed-in admin loading
- * a public page directly (a fresh navigation or a page reload, with no
- * earlier visit to `/admin/**` in the same app instance) never triggered a
- * load at all — `usePlutoPermissions().granted` stayed empty, and every
- * `can()` check for that admin read as `false` on that page, even though
- * the same admin's capability-gated UI worked correctly inside `/admin/**`.
- * `NavbarAdminActions.vue`'s "Edit product" quick-link (shown while
- * viewing a live `/product/**` page) is exactly the kind of capability-
- * gated UI that lives outside `/admin/**` by design, so it needs this to
- * fire on every page, not just admin ones.
- *
- * `useSupabaseSession()` (not `useAuth()`) on purpose: it is the same
- * primitive `useAuth()`'s own `isLoggedIn` is built from
- * (`computed(() => !!supabaseSession.value)`), and it is genuinely
- * app-wide reactive state already (managed by `@nuxtjs/supabase`'s own
- * plugin), so reading it directly here needs no extra composable surface.
- */
-export default defineNuxtPlugin(() => {
-  const session = useSupabaseSession()
-  const { load, clear } = usePlutoPermissions()
-
-  watch(
-    session,
-    (current) => {
-      if (current) {
-        load()
-      } else {
-        clear()
-      }
-    },
-    { immediate: true }
-  )
-})