@strapi-community/plugin-better-auth-dashboard 1.0.0-alpha.1 → 1.0.0-alpha.10

package/dist/server/index.mjs

@@ -35,7 +35,6 @@ const proxyController = () => ({
         overrideOptions: { jwt: { expirationTime: "5m" } }
       }
     });
-    console.log("Generated JWT with payload:", { token });
     const url = new URL(
       ctx.request.url,
       `${ctx.request.protocol}://${ctx.request.host}`
@@ -61,17 +60,245 @@ const proxyController = () => ({
       ctx.set(key, value);
     });
     const contentType = response.headers.get("content-type");
-    if (contentType?.includes("application/json")) {
-      ctx.body = await response.json();
-    } else if (contentType?.includes("text/")) {
-      ctx.body = await response.text();
+    const text = await response.text();
+    if (!text) {
+      ctx.body = {};
+    } else if (contentType?.includes("application/json")) {
+      ctx.body = JSON.parse(text);
     } else {
-      ctx.body = await response.text();
+      ctx.body = text;
     }
   }
 });
+function assertValidUid(ctx, uid) {
+  if (typeof uid !== "string" || !uid.startsWith("plugin::") && !uid.startsWith("api::") && !uid.startsWith("admin::")) {
+    ctx.status = 400;
+    ctx.body = { error: "uid must be a valid Strapi content-type UID" };
+    return false;
+  }
+  return true;
+}
+const dbController = () => ({
+  /**
+   * List documents.
+   *
+   * Query params (all optional):
+   *   uid            – content-type UID, e.g. plugin::better-auth.session
+   *   filters        – Strapi filter object, supports nested qs syntax:
+   *                    ?filters[userId][$eq]=1
+   *   sort           – sort string or array, e.g. sort[0]=createdAt:desc
+   *   pagination[page]     – 1-indexed page number (default 1)
+   *   pagination[pageSize] – items per page (default 50)
+   *   populate       – "*" for all relations, or comma-separated field names
+   *
+   * Response: { results: [...], pagination: { page, pageSize, total, pageCount } }
+   */
+  async list(ctx) {
+    const { uid, filters, pagination, populate } = ctx.query;
+    if (!assertValidUid(ctx, uid)) return;
+    const page = Math.max(1, parseInt(pagination?.page ?? "1", 10));
+    const pageSize = Math.min(
+      200,
+      Math.max(1, parseInt(pagination?.pageSize ?? "50", 10))
+    );
+    const populateArg = populate ? populate === "*" ? "*" : populate.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
+    const service = strapi.documents(uid);
+    const [results, total] = await Promise.all([
+      service.findMany({
+        filters: filters ?? {},
+        sort: "createdAt:desc",
+        limit: pageSize,
+        start: (page - 1) * pageSize,
+        ...populateArg ? { populate: populateArg } : {}
+      }),
+      strapi.documents(uid).count({ filters: filters ?? {} })
+    ]);
+    ctx.body = {
+      results,
+      pagination: {
+        page,
+        pageSize,
+        total,
+        pageCount: Math.ceil(total / pageSize)
+      }
+    };
+  },
+  /**
+   * Update a single document by its documentId (UUID).
+   *
+   * Query params:
+   *   uid – content-type UID
+   *
+   * Body: partial field values to update.
+   *
+   * Response: updated document.
+   */
+  async update(ctx) {
+    const { uid } = ctx.query;
+    if (!assertValidUid(ctx, uid)) return;
+    const { documentId } = ctx.params;
+    const result = await strapi.documents(uid).update({
+      documentId,
+      data: ctx.request.body
+    });
+    if (!result) {
+      ctx.status = 404;
+      ctx.body = { error: "Document not found" };
+      return;
+    }
+    ctx.body = result;
+  }
+});
 const controllers = {
-  "auth-controller": proxyController
+  "auth-controller": proxyController,
+  "db-controller": dbController
+};
+const { PolicyError } = errors;
+const endpointsCategories = Object.freeze({
+  "/auth/dash/config": ["overview", "user", "organization"],
+  "/auth/dash/user-stats": ["overview"],
+  "/auth/dash/user-graph-data": ["overview"],
+  "/auth/dash/user-retention-data": ["overview"],
+  "/auth/dash/list-users": ["overview", "user"],
+  "/auth/dash/list-organization": ["overview", "organization"],
+  "/auth/dash/user": ["user"],
+  "/auth/dash/organization": ["organization"]
+});
+const types = Object.freeze({
+  POST: "read",
+  PUT: "update",
+  GET: "read",
+  DELETE: "delete"
+});
+const endpointsTypes = Object.freeze({
+  "/auth/dash/user-stats": "read",
+  "/auth/dash/user-graph-data": "read",
+  "/auth/dash/user-retention-data": "read",
+  "/auth/dash/list-users": "read",
+  "/auth/dash/list-organizations": "read",
+  "/auth/dash/organization/options": "read",
+  "/auth/dash/create-user": "create",
+  "/auth/dash/update-user": "update",
+  "/auth/dash/user": "read",
+  "/auth/dash/delete-user": "delete",
+  "/auth/dash/organization/create": "create",
+  "/auth/dash/organization/delete": "delete"
+});
+const hasPermission = async (ctx, _, { strapi: strapi2 }) => {
+  const { user, route } = ctx.state;
+  if (!user) return false;
+  const inherentType = types[route.method];
+  const determinedType = endpointsTypes?.[Object.keys(endpointsTypes)?.find(
+    (k) => ctx.originalUrl?.includes(k)
+  )];
+  const found = [];
+  for await (const role of user.roles) {
+    const categories = endpointsCategories[Object.keys(endpointsCategories).find(
+      (key) => ctx.originalUrl.startsWith(key)
+    )];
+    const permissions = await strapi2.documents("admin::permission").findMany({
+      filters: {
+        $or: (categories || []).map((cat) => ({
+          role: { id: role.id },
+          action: {
+            $startsWith: "plugin::better-auth-dashboard",
+            $containsi: cat,
+            $endsWith: determinedType || inherentType
+          }
+        }))
+      }
+    });
+    if (permissions?.length > 0) found.push(...permissions);
+  }
+  if (found.length <= 0) {
+    throw new PolicyError("You do not have permission to see this content.");
+  }
+  return true;
+};
+const policies = { "has-permission": hasPermission };
+const strapi$1 = { "name": "better-auth-dashboard" };
+const packageJson = {
+  strapi: strapi$1
+};
+const PLUGIN_ID = packageJson.strapi.name;
+const ACTIONS = {
+  overview: [
+    {
+      section: "plugins",
+      subCategory: "overview",
+      displayName: "Read",
+      pluginName: PLUGIN_ID,
+      uid: "overview.read"
+    }
+  ],
+  user: [
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Create",
+      pluginName: PLUGIN_ID,
+      uid: "user.create"
+    },
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Read",
+      pluginName: PLUGIN_ID,
+      uid: "user.read"
+    },
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Update",
+      pluginName: PLUGIN_ID,
+      uid: "user.update"
+    },
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Delete",
+      pluginName: PLUGIN_ID,
+      uid: "user.delete"
+    }
+  ],
+  organization: [
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Create",
+      pluginName: PLUGIN_ID,
+      uid: "organization.create"
+    },
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Read",
+      pluginName: PLUGIN_ID,
+      uid: "organization.read"
+    },
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Update",
+      pluginName: PLUGIN_ID,
+      uid: "organization.update"
+    },
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Delete",
+      pluginName: PLUGIN_ID,
+      uid: "organization.delete"
+    }
+  ]
+};
+const register = ({ strapi: strapi2 }) => {
+  const actionsToRegister = [...ACTIONS.overview, ...ACTIONS.user];
+  if (strapi2.plugin("better-auth").contentTypes?.organization)
+    actionsToRegister.push(...ACTIONS.organization);
+  strapi2.admin.services.permission.actionProvider.registerMany(
+    actionsToRegister
+  );
 };
 const adminRoutes = () => ({
   type: "admin",
@@ -81,9 +308,8 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        prefix: "",
-        auth: false
+        policies: ["has-permission"],
+        prefix: ""
       }
     },
     {
@@ -91,8 +317,7 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -101,8 +326,7 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -111,8 +335,7 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -121,8 +344,25 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
+        prefix: ""
+      }
+    },
+    {
+      method: "GET",
+      path: "/better-auth-dashboard/db",
+      handler: "db-controller.list",
+      config: {
+        policies: ["has-permission"],
+        prefix: ""
+      }
+    },
+    {
+      method: "PUT",
+      path: "/better-auth-dashboard/db/:documentId",
+      handler: "db-controller.update",
+      config: {
+        policies: ["has-permission"],
         prefix: ""
       }
     }
@@ -131,7 +371,9 @@ const adminRoutes = () => ({
 const routes = { admin: adminRoutes };
 const index = {
   controllers,
-  routes
+  routes,
+  policies,
+  register
 };
 export {
   index as default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi-community/plugin-better-auth-dashboard",
-  "version": "1.0.0-alpha.1",
+  "version": "1.0.0-alpha.10",
   "description": "Better Auth dashboard for the Strapi admin panel",
   "keywords": [
     "strapi",
@@ -11,13 +11,13 @@
   "license": "MIT",
   "author": {
     "name": "Boaz Poolman",
-    "email": "boaz@pluginpal.io",
+    "email": "boaz.poolman@strapi.io",
     "url": "https://github.com/boazpoolman"
   },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/strapi-community/plugin-better-auth.git",
-    "directory": "packages/plugin-better-auth-dashboard"
+    "directory": "plugins/plugin-better-auth-dashboard"
   },
   "type": "commonjs",
   "exports": {
@@ -48,7 +48,8 @@
     "@types/node": "^22",
     "@types/react": "^18.0.0",
     "@types/styled-components": "^5.1.36",
-    "typescript": "^5.9.3"
+    "typescript": "^5.9.3",
+    "@strapi-community/dev-utils": "0.0.1"
   },
   "peerDependencies": {
     "@better-auth/infra": "^0.2.6",
@@ -63,6 +64,7 @@
     "react-intl": "^6.0.0 || ^7.0.0",
     "react-query": "^3.0.0",
     "styled-components": "^6.0.0",
+    "react-router-dom": "^6.0.0",
     "@strapi-community/plugin-better-auth": "^1.0.0-beta.6"
   },
   "strapi": {
@@ -76,9 +78,9 @@
     "watch": "strapi-plugin watch",
     "dev": "strapi-plugin watch",
     "verify": "strapi-plugin verify",
-    "test:ts:server": "cd server && tsc --noEmit",
-    "test:ts:admin": "cd admin && tsc --noEmit",
-    "check-types": "pnpm run test:ts:server && pnpm run test:ts:admin",
-    "lint": "biome check --fix"
+    "lint:ts:server": "cd server && tsc --noEmit",
+    "lint:ts:admin": "cd admin && tsc --noEmit",
+    "lint": "biome check --fix",
+    "test:e2e": "playwright test"
   }
 }

package/dist/admin/index-A9PUvldu.js

@@ -1,26 +0,0 @@
-"use strict";
-const PLUGIN_ID = "better-auth-dashboard";
-function captureApp(app) {
-  window.__betterAuthDashApp = app;
-}
-function getMediaLibraryComponent() {
-  return window.__betterAuthDashApp?.library?.components?.["media-library"] ?? null;
-}
-const index = {
-  register(app) {
-    captureApp(app);
-    app.addMenuLink({
-      to: `/plugins/${PLUGIN_ID}`,
-      icon: () => null,
-      intlLabel: {
-        id: `${PLUGIN_ID}.plugin.name`,
-        defaultMessage: "Auth Dashboard"
-      },
-      Component: async () => Promise.resolve().then(() => require("./Root-Bl4iPGDu.js"))
-    });
-  },
-  bootstrap() {
-  }
-};
-exports.getMediaLibraryComponent = getMediaLibraryComponent;
-exports.index = index;

package/dist/admin/index-Cvcysa5M.mjs

@@ -1,27 +0,0 @@
-const PLUGIN_ID = "better-auth-dashboard";
-function captureApp(app) {
-  window.__betterAuthDashApp = app;
-}
-function getMediaLibraryComponent() {
-  return window.__betterAuthDashApp?.library?.components?.["media-library"] ?? null;
-}
-const index = {
-  register(app) {
-    captureApp(app);
-    app.addMenuLink({
-      to: `/plugins/${PLUGIN_ID}`,
-      icon: () => null,
-      intlLabel: {
-        id: `${PLUGIN_ID}.plugin.name`,
-        defaultMessage: "Auth Dashboard"
-      },
-      Component: async () => import("./Root-hwPhIfaT.mjs")
-    });
-  },
-  bootstrap() {
-  }
-};
-export {
-  getMediaLibraryComponent as g,
-  index as i
-};