@punch-in/strapi-admin 1.2.6 → 1.2.8

package/admin/src/components/GlobalStyle/index.js

@@ -142,20 +142,20 @@ const GlobalStyle = createGlobalStyle`
   }
 
   ::-webkit-scrollbar-track {
-    background-color: #ffffff;
+    background-color: transparent;
   }
 
   ::-webkit-scrollbar-track:hover {
-    background-color: #ffffff;
+    background-color: transparent;
   }
 
   ::-webkit-scrollbar-thumb {
-    background-color: #007eff;
+    background-color: #c0c4cc;
     border-radius: 0.5rem;
   }
 
   ::-webkit-scrollbar-thumb:hover {
-    background-color: #007eff;
+    background-color: #a6acb8;
   }
 
   ::-webkit-scrollbar-button {
@@ -165,7 +165,7 @@ const GlobalStyle = createGlobalStyle`
   /* firefox scrollbar */
   /* stylelint-disable */
   * {
-    scrollbar-color: #ffffff #007eff;
+    scrollbar-color: #c0c4cc transparent;
     scrollbar-width: thin;
   }
   /* stylelint-enable */

package/admin/src/containers/HomePage/components.js

@@ -329,6 +329,7 @@ const SiteNavBtn = styled.button`
 const PunchList = styled.div`
   max-height: 360px;
   overflow-y: auto;
+  padding-right: 10px;
 `;
 
 const PunchRow = styled.div`

package/admin/src/translations/en.json

@@ -54,7 +54,7 @@
   "HomePage.community": "Join Punch-in Community",
   "HomePage.greetings": "Hi {name}!",
   "HomePage.helmet.title": "Homepage",
-  "HomePage.punchIn.title": "Punched in today",
+  "HomePage.punchIn.title": "Attendance recorded",
   "HomePage.punchIn.subtitle": "{count} {count, plural, one {person} other {people}} clocked in · grouped by site",
   "HomePage.punchIn.loading": "Loading today's punch-ins…",
   "HomePage.punchIn.empty": "No one has punched in yet today.",

package/controllers/authentication.js

@@ -4,6 +4,16 @@ const passport = require('koa-passport');
 const compose = require('koa-compose');
 const crypto = require('crypto');
 const axios = require('axios');
+const { LambdaClient, InvokeCommand } = require('@aws-sdk/client-lambda');
+
+// Tenant Lambdas run inside a VPC with no internet route (required for the
+// EFS mount - see CLAUDE.md). Reaching the central stripe-charge Lambda
+// therefore goes through the VPC Interface Endpoint for the Lambda service
+// (infra/shared-networking-stack.yaml) via a direct SDK invoke, not HTTPS.
+// See features/API-REDESIGN.md Phase 1. The SDK v3 client-lambda package is
+// preinstalled by the Node.js 18+ Lambda managed runtime, so it does not
+// need to be bundled in strapi-lambda-layer.
+const lambdaClient = new LambdaClient({});
 
 const {
   validateRegistrationInput,
@@ -190,6 +200,14 @@ module.exports = {
   // against *this* tenant's admin_users - never creating one.
 
   async ssoProviders(ctx) {
+    // SSO_PROVIDERS_MODE=invoke is the new path (see features/API-REDESIGN.md
+    // Phase 1); anything else keeps the old HTTPS call so this can be rolled
+    // back per-tenant without a redeploy while the invoke path is verified.
+    if (process.env.SSO_PROVIDERS_MODE === 'invoke') {
+      ctx.body = await fetchSsoProvidersViaInvoke();
+      return;
+    }
+
     try {
       const { data } = await axios.get(`${getCentralApiBase()}/sso/auth/providers`, {
         timeout: 5000,
@@ -252,6 +270,38 @@ function getCentralApiBase() {
   return (process.env.PUNCHIN_INTEGRATIONS_API_BASE || 'https://api.punch-in.co.uk').replace(/\/$/, '');
 }
 
+// SsoProvidersFunction (stripe-charge/template.yaml) is also wired behind
+// API Gateway via sso.js, so its handler returns an API-Gateway-proxy-shaped
+// object ({ statusCode, headers, body: JSON.stringify(...) }) rather than
+// the raw provider array - that shape is unchanged whether API Gateway or a
+// direct InvokeCommand calls it, so it has to be unwrapped here.
+async function fetchSsoProvidersViaInvoke() {
+  const functionName = process.env.SSO_PROVIDERS_FUNCTION_NAME;
+  if (!functionName) {
+    strapi.log.error('SSO_PROVIDERS_FUNCTION_NAME is not configured');
+    return [];
+  }
+
+  try {
+    const response = await lambdaClient.send(
+      new InvokeCommand({
+        FunctionName: functionName,
+        InvocationType: 'RequestResponse',
+      })
+    );
+
+    if (response.FunctionError) {
+      throw new Error(`SsoProvidersFunction returned ${response.FunctionError}`);
+    }
+
+    const gatewayResponse = JSON.parse(Buffer.from(response.Payload).toString('utf8'));
+    return JSON.parse(gatewayResponse.body);
+  } catch (err) {
+    strapi.log.error(`Failed to invoke SsoProvidersFunction: ${err.message}`);
+    return [];
+  }
+}
+
 function secretsMatch(provided, expected) {
   if (!provided || !expected) return false;
   const a = Buffer.from(provided);

package/package.json

@@ -139,5 +139,5 @@
     "develop:ce": "STRAPI_DISABLE_EE=true webpack-dev-server --config webpack.config.dev.js",
     "test": "echo \"no tests yet\""
   },
-  "version": "1.2.6"
+  "version": "1.2.8"
 }