@plutocms/supabase 0.9.1 → 0.10.0

package/server/utils/capability-guard.ts

@@ -5,8 +5,10 @@ import { serverSupabaseClient, serverSupabaseUser } from '#supabase/server'
 export const ALL_CAPABILITIES = '*'
 
 interface RequireCapabilityOptions {
-  /** Overrides the 403 message. */
+  /** Overrides the 403 message. English text. */
   message?: string
+  /** Translation key of the `message` override, for the admin UI. */
+  messageKey?: string
 }
 
 /**
@@ -34,17 +36,29 @@ export async function requireCapability(
   const user = await serverSupabaseUser(event)
 
   if (!user) {
-    throw createError({ statusCode: 401, statusMessage: 'You must be logged in.' })
+    throw createPlutoError({
+      statusCode: 401,
+      message: 'You must be logged in.',
+      key: 'supabase.errors.notLoggedIn',
+    })
   }
 
   const client = await serverSupabaseClient<Database>(event)
   const { data, error } = await client.rpc('has_capability', { cap: capability })
 
   if (error || data !== true) {
-    throw createError({
+    // A custom `message` without a `messageKey` has no translation, so it
+    // keeps the plain English error.
+    if (options?.message && !options.messageKey) {
+      throw createError({ statusCode: 403, statusMessage: options.message })
+    }
+
+    throw createPlutoError({
       statusCode: 403,
-      statusMessage:
+      message:
         options?.message ?? `Your account is missing the "${capability}" permission.`,
+      key: options?.messageKey ?? 'supabase.errors.missingPermission',
+      params: { capability },
     })
   }
 

package/server/utils/content-adapter.ts

@@ -82,17 +82,19 @@ export function toContentError(error: PostgrestError) {
 
   // 23505: unique_violation.
   if (error.code === '23505') {
-    return createError({
+    return createPlutoError({
       statusCode: 409,
-      statusMessage: 'A record with this value already exists.',
+      message: 'A record with this value already exists.',
+      key: 'supabase.errors.duplicateRecord',
     })
   }
 
   // 23503: foreign_key_violation.
   if (error.code === '23503') {
-    return createError({
+    return createPlutoError({
       statusCode: 400,
-      statusMessage: 'This references a record that does not exist.',
+      message: 'This references a record that does not exist.',
+      key: 'supabase.errors.missingReference',
     })
   }
 

package/server/utils/validate.ts

@@ -37,7 +37,12 @@ export async function parseBody<T>(event: H3Event, schema: ZodSchema<T>): Promis
       message: issue.message,
     }))
 
-    throw createError({ statusCode: 400, statusMessage: 'Validation failed.', data: { errors } })
+    throw createPlutoError({
+      statusCode: 400,
+      message: 'Validation failed.',
+      key: 'pluto.errors.validationFailed',
+      data: { errors },
+    })
   }
 
   return result.data

package/shared/types/supabase.ts

@@ -232,6 +232,7 @@ export type Database = {
           email: string | null
           id: string
           is_admin: boolean
+          locale: string | null
           updated_at: string | null
           username: string | null
         }
@@ -240,6 +241,7 @@ export type Database = {
           email?: string | null
           id: string
           is_admin?: boolean
+          locale?: string | null
           updated_at?: string | null
           username?: string | null
         }
@@ -248,6 +250,7 @@ export type Database = {
           email?: string | null
           id?: string
           is_admin?: boolean
+          locale?: string | null
           updated_at?: string | null
           username?: string | null
         }
@@ -364,6 +367,10 @@ export type Database = {
         Args: Record<PropertyKey, never>
         Returns: boolean
       }
+      set_my_locale: {
+        Args: { new_locale: string }
+        Returns: undefined
+      }
     }
     Enums: {
       thealthcheck: "first_setup"