@strapi-community/plugin-better-auth-dashboard 1.0.0-alpha.8 → 1.0.0-beta.1

package/dist/server/index.js

@@ -1,6 +1,55 @@
 "use strict";
 Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
 const utils = require("@strapi/utils");
+const config = {
+  default: {},
+  validator(config2) {
+    if (config2.email_callback_url === void 0) return;
+    if (typeof config2.email_callback_url !== "string" || config2.email_callback_url.length === 0) {
+      throw new Error("email_callback_url must be a non-empty string");
+    }
+    try {
+      new URL(config2.email_callback_url);
+    } catch {
+      throw new Error("email_callback_url must be a valid absolute URL");
+    }
+  }
+};
+const strapi$1 = { "name": "better-auth-dashboard" };
+const packageJson = {
+  strapi: strapi$1
+};
+const PLUGIN_ID = packageJson.strapi.name;
+const bootstrap = async ({ strapi: strapi2 }) => {
+  const provider = strapi2.admin.services.permission.actionProvider;
+  const candidates = [
+    { resource: "user", uid: "plugin::better-auth.user" },
+    { resource: "organization", uid: "plugin::better-auth.organization" }
+  ];
+  const subjects = candidates.filter(({ uid }) => uid in strapi2.contentTypes);
+  for (const { resource, uid } of subjects) {
+    for (const action of ["create", "read", "update", "delete"]) {
+      const explorerActionId = `plugin::content-manager.explorer.${action}`;
+      const dashboardAction = provider.get(
+        `plugin::${PLUGIN_ID}.${resource}.${action}`
+      );
+      if (!dashboardAction) continue;
+      if (!dashboardAction.aliases) dashboardAction.aliases = [];
+      const alreadyAliased = dashboardAction.aliases.some(
+        ({
+          actionId,
+          subjects: aliasSubjects
+        }) => actionId === explorerActionId && aliasSubjects?.includes(uid)
+      );
+      if (!alreadyAliased) {
+        dashboardAction.aliases.push({
+          actionId: explorerActionId,
+          subjects: [uid]
+        });
+      }
+    }
+  }
+};
 const DASHBOARD_API_KEY = process.env.BETTER_AUTH_DASHBOARD_SECRET || "strapi-internal-dashboard-key";
 const DASH_CONTEXT_HEADER = "x-dash-context";
 async function hashApiKey(value) {
@@ -151,9 +200,157 @@ const dbController = () => ({
     ctx.body = result;
   }
 });
+const settingsController = () => ({
+  async get(ctx) {
+    ctx.body = strapi.config.get(`plugin::${PLUGIN_ID}`, {});
+  }
+});
 const controllers = {
   "auth-controller": proxyController,
-  "db-controller": dbController
+  "db-controller": dbController,
+  "settings-controller": settingsController
+};
+const { PolicyError } = utils.errors;
+const endpointsCategories = Object.freeze({
+  "/auth/dash/config": ["overview", "user", "organization"],
+  "/auth/dash/user-stats": ["overview"],
+  "/auth/dash/user-graph-data": ["overview"],
+  "/auth/dash/user-retention-data": ["overview"],
+  "/auth/dash/list-users": ["overview", "user"],
+  "/auth/dash/list-organization": ["overview", "organization"],
+  "/auth/dash/user": ["user"],
+  "/auth/dash/organization": ["organization"]
+});
+const types = Object.freeze({
+  POST: "read",
+  PUT: "update",
+  GET: "read",
+  DELETE: "delete"
+});
+const endpointsTypes = Object.freeze({
+  "/auth/dash/user-stats": "read",
+  "/auth/dash/user-graph-data": "read",
+  "/auth/dash/user-retention-data": "read",
+  "/auth/dash/list-users": "read",
+  "/auth/dash/list-organizations": "read",
+  "/auth/dash/organization/options": "read",
+  "/auth/dash/create-user": "create",
+  "/auth/dash/update-user": "update",
+  "/auth/dash/user": "read",
+  "/auth/dash/delete-user": "delete",
+  "/auth/dash/organization/create": "create",
+  "/auth/dash/organization/delete": "delete"
+});
+const hasPermission = async (ctx, _, { strapi: strapi2 }) => {
+  const { user, route } = ctx.state;
+  if (!user) return false;
+  const inherentType = types[route.method];
+  const determinedType = endpointsTypes?.[Object.keys(endpointsTypes)?.find(
+    (k) => ctx.originalUrl?.includes(k)
+  )];
+  const found = [];
+  for await (const role of user.roles) {
+    const categories = endpointsCategories[Object.keys(endpointsCategories).find(
+      (key) => ctx.originalUrl.startsWith(key)
+    )];
+    const permissions = await strapi2.documents("admin::permission").findMany({
+      filters: {
+        $or: (categories || []).map((cat) => ({
+          role: { id: role.id },
+          action: {
+            $startsWith: "plugin::better-auth-dashboard",
+            $containsi: cat,
+            $endsWith: determinedType || inherentType
+          }
+        }))
+      }
+    });
+    if (permissions?.length > 0) found.push(...permissions);
+  }
+  if (found.length <= 0) {
+    throw new PolicyError("You do not have permission to see this content.");
+  }
+  return true;
+};
+const policies = { "has-permission": hasPermission };
+const ACTIONS = {
+  overview: [
+    {
+      section: "plugins",
+      subCategory: "overview",
+      displayName: "Read",
+      pluginName: PLUGIN_ID,
+      uid: "overview.read"
+    }
+  ],
+  user: [
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Create",
+      pluginName: PLUGIN_ID,
+      uid: "user.create"
+    },
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Read",
+      pluginName: PLUGIN_ID,
+      uid: "user.read"
+    },
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Update",
+      pluginName: PLUGIN_ID,
+      uid: "user.update"
+    },
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Delete",
+      pluginName: PLUGIN_ID,
+      uid: "user.delete"
+    }
+  ],
+  organization: [
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Create",
+      pluginName: PLUGIN_ID,
+      uid: "organization.create"
+    },
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Read",
+      pluginName: PLUGIN_ID,
+      uid: "organization.read"
+    },
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Update",
+      pluginName: PLUGIN_ID,
+      uid: "organization.update"
+    },
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Delete",
+      pluginName: PLUGIN_ID,
+      uid: "organization.delete"
+    }
+  ]
+};
+const register = ({ strapi: strapi2 }) => {
+  const actionsToRegister = [...ACTIONS.overview, ...ACTIONS.user];
+  if (strapi2.plugin("better-auth").contentTypes?.organization)
+    actionsToRegister.push(...ACTIONS.organization);
+  strapi2.admin.services.permission.actionProvider.registerMany(
+    actionsToRegister
+  );
 };
 const adminRoutes = () => ({
   type: "admin",
@@ -163,9 +360,8 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        prefix: "",
-        auth: false
+        policies: ["has-permission"],
+        prefix: ""
       }
     },
     {
@@ -173,8 +369,7 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -183,8 +378,7 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -193,8 +387,7 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -203,8 +396,7 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -213,7 +405,7 @@ const adminRoutes = () => ({
       path: "/better-auth-dashboard/db",
       handler: "db-controller.list",
       config: {
-        policies: [],
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -222,7 +414,16 @@ const adminRoutes = () => ({
       path: "/better-auth-dashboard/db/:documentId",
       handler: "db-controller.update",
       config: {
-        policies: [],
+        policies: ["has-permission"],
+        prefix: ""
+      }
+    },
+    {
+      method: "GET",
+      path: "/better-auth-dashboard/settings",
+      handler: "settings-controller.get",
+      config: {
+        policies: ["has-permission"],
         prefix: ""
       }
     }
@@ -230,7 +431,11 @@ const adminRoutes = () => ({
 });
 const routes = { admin: adminRoutes };
 const index = {
+  config,
   controllers,
-  routes
+  routes,
+  policies,
+  register,
+  bootstrap
 };
 exports.default = index;

package/dist/server/index.mjs

@@ -1,4 +1,53 @@
 import { errors } from "@strapi/utils";
+const config = {
+  default: {},
+  validator(config2) {
+    if (config2.email_callback_url === void 0) return;
+    if (typeof config2.email_callback_url !== "string" || config2.email_callback_url.length === 0) {
+      throw new Error("email_callback_url must be a non-empty string");
+    }
+    try {
+      new URL(config2.email_callback_url);
+    } catch {
+      throw new Error("email_callback_url must be a valid absolute URL");
+    }
+  }
+};
+const strapi$1 = { "name": "better-auth-dashboard" };
+const packageJson = {
+  strapi: strapi$1
+};
+const PLUGIN_ID = packageJson.strapi.name;
+const bootstrap = async ({ strapi: strapi2 }) => {
+  const provider = strapi2.admin.services.permission.actionProvider;
+  const candidates = [
+    { resource: "user", uid: "plugin::better-auth.user" },
+    { resource: "organization", uid: "plugin::better-auth.organization" }
+  ];
+  const subjects = candidates.filter(({ uid }) => uid in strapi2.contentTypes);
+  for (const { resource, uid } of subjects) {
+    for (const action of ["create", "read", "update", "delete"]) {
+      const explorerActionId = `plugin::content-manager.explorer.${action}`;
+      const dashboardAction = provider.get(
+        `plugin::${PLUGIN_ID}.${resource}.${action}`
+      );
+      if (!dashboardAction) continue;
+      if (!dashboardAction.aliases) dashboardAction.aliases = [];
+      const alreadyAliased = dashboardAction.aliases.some(
+        ({
+          actionId,
+          subjects: aliasSubjects
+        }) => actionId === explorerActionId && aliasSubjects?.includes(uid)
+      );
+      if (!alreadyAliased) {
+        dashboardAction.aliases.push({
+          actionId: explorerActionId,
+          subjects: [uid]
+        });
+      }
+    }
+  }
+};
 const DASHBOARD_API_KEY = process.env.BETTER_AUTH_DASHBOARD_SECRET || "strapi-internal-dashboard-key";
 const DASH_CONTEXT_HEADER = "x-dash-context";
 async function hashApiKey(value) {
@@ -149,9 +198,157 @@ const dbController = () => ({
     ctx.body = result;
   }
 });
+const settingsController = () => ({
+  async get(ctx) {
+    ctx.body = strapi.config.get(`plugin::${PLUGIN_ID}`, {});
+  }
+});
 const controllers = {
   "auth-controller": proxyController,
-  "db-controller": dbController
+  "db-controller": dbController,
+  "settings-controller": settingsController
+};
+const { PolicyError } = errors;
+const endpointsCategories = Object.freeze({
+  "/auth/dash/config": ["overview", "user", "organization"],
+  "/auth/dash/user-stats": ["overview"],
+  "/auth/dash/user-graph-data": ["overview"],
+  "/auth/dash/user-retention-data": ["overview"],
+  "/auth/dash/list-users": ["overview", "user"],
+  "/auth/dash/list-organization": ["overview", "organization"],
+  "/auth/dash/user": ["user"],
+  "/auth/dash/organization": ["organization"]
+});
+const types = Object.freeze({
+  POST: "read",
+  PUT: "update",
+  GET: "read",
+  DELETE: "delete"
+});
+const endpointsTypes = Object.freeze({
+  "/auth/dash/user-stats": "read",
+  "/auth/dash/user-graph-data": "read",
+  "/auth/dash/user-retention-data": "read",
+  "/auth/dash/list-users": "read",
+  "/auth/dash/list-organizations": "read",
+  "/auth/dash/organization/options": "read",
+  "/auth/dash/create-user": "create",
+  "/auth/dash/update-user": "update",
+  "/auth/dash/user": "read",
+  "/auth/dash/delete-user": "delete",
+  "/auth/dash/organization/create": "create",
+  "/auth/dash/organization/delete": "delete"
+});
+const hasPermission = async (ctx, _, { strapi: strapi2 }) => {
+  const { user, route } = ctx.state;
+  if (!user) return false;
+  const inherentType = types[route.method];
+  const determinedType = endpointsTypes?.[Object.keys(endpointsTypes)?.find(
+    (k) => ctx.originalUrl?.includes(k)
+  )];
+  const found = [];
+  for await (const role of user.roles) {
+    const categories = endpointsCategories[Object.keys(endpointsCategories).find(
+      (key) => ctx.originalUrl.startsWith(key)
+    )];
+    const permissions = await strapi2.documents("admin::permission").findMany({
+      filters: {
+        $or: (categories || []).map((cat) => ({
+          role: { id: role.id },
+          action: {
+            $startsWith: "plugin::better-auth-dashboard",
+            $containsi: cat,
+            $endsWith: determinedType || inherentType
+          }
+        }))
+      }
+    });
+    if (permissions?.length > 0) found.push(...permissions);
+  }
+  if (found.length <= 0) {
+    throw new PolicyError("You do not have permission to see this content.");
+  }
+  return true;
+};
+const policies = { "has-permission": hasPermission };
+const ACTIONS = {
+  overview: [
+    {
+      section: "plugins",
+      subCategory: "overview",
+      displayName: "Read",
+      pluginName: PLUGIN_ID,
+      uid: "overview.read"
+    }
+  ],
+  user: [
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Create",
+      pluginName: PLUGIN_ID,
+      uid: "user.create"
+    },
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Read",
+      pluginName: PLUGIN_ID,
+      uid: "user.read"
+    },
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Update",
+      pluginName: PLUGIN_ID,
+      uid: "user.update"
+    },
+    {
+      section: "plugins",
+      subCategory: "user",
+      displayName: "Delete",
+      pluginName: PLUGIN_ID,
+      uid: "user.delete"
+    }
+  ],
+  organization: [
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Create",
+      pluginName: PLUGIN_ID,
+      uid: "organization.create"
+    },
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Read",
+      pluginName: PLUGIN_ID,
+      uid: "organization.read"
+    },
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Update",
+      pluginName: PLUGIN_ID,
+      uid: "organization.update"
+    },
+    {
+      section: "plugins",
+      subCategory: "organization",
+      displayName: "Delete",
+      pluginName: PLUGIN_ID,
+      uid: "organization.delete"
+    }
+  ]
+};
+const register = ({ strapi: strapi2 }) => {
+  const actionsToRegister = [...ACTIONS.overview, ...ACTIONS.user];
+  if (strapi2.plugin("better-auth").contentTypes?.organization)
+    actionsToRegister.push(...ACTIONS.organization);
+  strapi2.admin.services.permission.actionProvider.registerMany(
+    actionsToRegister
+  );
 };
 const adminRoutes = () => ({
   type: "admin",
@@ -161,9 +358,8 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        prefix: "",
-        auth: false
+        policies: ["has-permission"],
+        prefix: ""
       }
     },
     {
@@ -171,8 +367,7 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -181,8 +376,7 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -191,8 +385,7 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -201,8 +394,7 @@ const adminRoutes = () => ({
       path: "/auth/:path*",
       handler: "auth-controller.handleAuthRequest",
       config: {
-        policies: [],
-        auth: false,
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -211,7 +403,7 @@ const adminRoutes = () => ({
       path: "/better-auth-dashboard/db",
       handler: "db-controller.list",
       config: {
-        policies: [],
+        policies: ["has-permission"],
         prefix: ""
       }
     },
@@ -220,7 +412,16 @@ const adminRoutes = () => ({
       path: "/better-auth-dashboard/db/:documentId",
       handler: "db-controller.update",
       config: {
-        policies: [],
+        policies: ["has-permission"],
+        prefix: ""
+      }
+    },
+    {
+      method: "GET",
+      path: "/better-auth-dashboard/settings",
+      handler: "settings-controller.get",
+      config: {
+        policies: ["has-permission"],
         prefix: ""
       }
     }
@@ -228,8 +429,12 @@ const adminRoutes = () => ({
 });
 const routes = { admin: adminRoutes };
 const index = {
+  config,
   controllers,
-  routes
+  routes,
+  policies,
+  register,
+  bootstrap
 };
 export {
   index as default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi-community/plugin-better-auth-dashboard",
-  "version": "1.0.0-alpha.8",
+  "version": "1.0.0-beta.1",
   "description": "Better Auth dashboard for the Strapi admin panel",
   "keywords": [
     "strapi",
@@ -64,7 +64,8 @@
     "react-intl": "^6.0.0 || ^7.0.0",
     "react-query": "^3.0.0",
     "styled-components": "^6.0.0",
-    "@strapi-community/plugin-better-auth": "^1.0.0-beta.6"
+    "react-router-dom": "^6.0.0",
+    "@strapi-community/plugin-better-auth": "^1.0.0-beta.7"
   },
   "strapi": {
     "kind": "plugin",