realtimex-crm 0.4.1 → 0.5.1

package/dist/edge-functions/users.ts

@@ -0,0 +1,240 @@
+// RealTimeX CRM - Users Edge Function
+// This function handles creating and updating CRM users (sales team members)
+//
+// To deploy:
+// 1. Go to Supabase Dashboard → Edge Functions
+// 2. Click "Deploy a new function"
+// 3. Name it: users
+// 4. Copy and paste this entire file
+// 5. Click "Deploy"
+
+import { createClient } from "jsr:@supabase/supabase-js@2";
+
+// CORS headers for API access
+const corsHeaders = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Headers":
+    "authorization, x-client-info, apikey, content-type",
+  "Access-Control-Allow-Methods": "POST, PATCH, DELETE",
+};
+
+function createErrorResponse(status: number, message: string) {
+  return new Response(JSON.stringify({ status, message }), {
+    headers: { "Content-Type": "application/json", ...corsHeaders },
+    status,
+  });
+}
+
+// Initialize Supabase Admin client (uses service_role key automatically)
+const supabaseAdmin = createClient(
+  Deno.env.get("SUPABASE_URL") ?? "",
+  Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "",
+  {
+    auth: {
+      autoRefreshToken: false,
+      persistSession: false,
+    },
+  }
+);
+
+async function updateSaleDisabled(user_id: string, disabled: boolean) {
+  return await supabaseAdmin
+    .from("sales")
+    .update({ disabled: disabled ?? false })
+    .eq("user_id", user_id);
+}
+
+async function updateSaleAdministrator(
+  user_id: string,
+  administrator: boolean
+) {
+  const { data: sales, error: salesError } = await supabaseAdmin
+    .from("sales")
+    .update({ administrator })
+    .eq("user_id", user_id)
+    .select("*");
+
+  if (!sales?.length || salesError) {
+    console.error("Error updating user:", salesError);
+    throw salesError ?? new Error("Failed to update sale");
+  }
+  return sales.at(0);
+}
+
+async function updateSaleAvatar(user_id: string, avatar: string) {
+  const { data: sales, error: salesError } = await supabaseAdmin
+    .from("sales")
+    .update({ avatar })
+    .eq("user_id", user_id)
+    .select("*");
+
+  if (!sales?.length || salesError) {
+    console.error("Error updating user:", salesError);
+    throw salesError ?? new Error("Failed to update sale");
+  }
+  return sales.at(0);
+}
+
+async function inviteUser(req: Request, currentUserSale: any) {
+  const { email, password, first_name, last_name, disabled, administrator } =
+    await req.json();
+
+  if (!currentUserSale.administrator) {
+    return createErrorResponse(401, "Not Authorized");
+  }
+
+  const { data, error: userError } = await supabaseAdmin.auth.admin.createUser({
+    email,
+    password,
+    user_metadata: { first_name, last_name },
+  });
+
+  const { error: emailError } =
+    await supabaseAdmin.auth.admin.inviteUserByEmail(email);
+
+  if (!data?.user || userError) {
+    console.error(`Error inviting user: user_error=${userError}`);
+    return createErrorResponse(500, "Internal Server Error");
+  }
+
+  if (!data?.user || userError || emailError) {
+    console.error(`Error inviting user, email_error=${emailError}`);
+    return createErrorResponse(500, "Failed to send invitation mail");
+  }
+
+  try {
+    await updateSaleDisabled(data.user.id, disabled);
+    const sale = await updateSaleAdministrator(data.user.id, administrator);
+
+    return new Response(
+      JSON.stringify({
+        data: sale,
+      }),
+      {
+        headers: { "Content-Type": "application/json", ...corsHeaders },
+      }
+    );
+  } catch (e) {
+    console.error("Error patching sale:", e);
+    return createErrorResponse(500, "Internal Server Error");
+  }
+}
+
+async function patchUser(req: Request, currentUserSale: any) {
+  const {
+    sales_id,
+    email,
+    first_name,
+    last_name,
+    avatar,
+    administrator,
+    disabled,
+  } = await req.json();
+  const { data: sale } = await supabaseAdmin
+    .from("sales")
+    .select("*")
+    .eq("id", sales_id)
+    .single();
+
+  if (!sale) {
+    return createErrorResponse(404, "Not Found");
+  }
+
+  // Users can only update their own profile unless they are an administrator
+  if (!currentUserSale.administrator && currentUserSale.id !== sale.id) {
+    return createErrorResponse(401, "Not Authorized");
+  }
+
+  const { data, error: userError } =
+    await supabaseAdmin.auth.admin.updateUserById(sale.user_id, {
+      email,
+      ban_duration: disabled ? "87600h" : "none",
+      user_metadata: { first_name, last_name },
+    });
+
+  if (!data?.user || userError) {
+    console.error("Error patching user:", userError);
+    return createErrorResponse(500, "Internal Server Error");
+  }
+
+  if (avatar) {
+    await updateSaleAvatar(data.user.id, avatar);
+  }
+
+  // Only administrators can update the administrator and disabled status
+  if (!currentUserSale.administrator) {
+    const { data: new_sale } = await supabaseAdmin
+      .from("sales")
+      .select("*")
+      .eq("id", sales_id)
+      .single();
+    return new Response(
+      JSON.stringify({
+        data: new_sale,
+      }),
+      {
+        headers: {
+          "Content-Type": "application/json",
+          ...corsHeaders,
+        },
+      }
+    );
+  }
+
+  try {
+    await updateSaleDisabled(data.user.id, disabled);
+    const sale = await updateSaleAdministrator(data.user.id, administrator);
+    return new Response(
+      JSON.stringify({
+        data: sale,
+      }),
+      {
+        headers: {
+          "Content-Type": "application/json",
+          ...corsHeaders,
+        },
+      }
+    );
+  } catch (e) {
+    console.error("Error patching sale:", e);
+    return createErrorResponse(500, "Internal Server Error");
+  }
+}
+
+Deno.serve(async (req: Request) => {
+  if (req.method === "OPTIONS") {
+    return new Response(null, {
+      status: 204,
+      headers: corsHeaders,
+    });
+  }
+
+  const authHeader = req.headers.get("Authorization")!;
+  const localClient = createClient(
+    Deno.env.get("SUPABASE_URL") ?? "",
+    Deno.env.get("SUPABASE_ANON_KEY") ?? "",
+    { global: { headers: { Authorization: authHeader } } }
+  );
+  const { data } = await localClient.auth.getUser();
+  if (!data?.user) {
+    return createErrorResponse(401, "Unauthorized");
+  }
+  const currentUserSale = await supabaseAdmin
+    .from("sales")
+    .select("*")
+    .eq("user_id", data.user.id)
+    .single();
+
+  if (!currentUserSale?.data) {
+    return createErrorResponse(401, "Unauthorized");
+  }
+  if (req.method === "POST") {
+    return inviteUser(req, currentUserSale.data);
+  }
+
+  if (req.method === "PATCH") {
+    return patchUser(req, currentUserSale.data);
+  }
+
+  return createErrorResponse(405, "Method Not Allowed");
+});

package/dist/index.html

@@ -1 +1 @@
-<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="minimum-scale=1,initial-scale=1,width=device-width,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="./manifest.json"><link rel="icon shortcut" href="./favicon.ico"><title>CRM</title><style>body{margin:0;padding:0;font-family:sans-serif}.loader-container{background-color:#fafafa;flex-direction:column;justify-content:center;align-items:center;display:flex;position:absolute;inset:0}.loader,.loader:before,.loader:after{border-radius:50%}.loader{color:#283593;text-indent:-99999em;width:10em;height:10em;margin:55px auto;font-size:11px;position:relative;-webkit-transform:translateZ(0);-ms-transform:translateZ(0);transform:translateZ(0);box-shadow:inset 0 0 0 1em}.loader:before,.loader:after{content:"";position:absolute}.loader:before{-webkit-transform-origin:5.2em 5.1em;transform-origin:5.2em 5.1em;background:#fafafa;border-radius:10.2em 0 0 10.2em;width:5.2em;height:10.2em;-webkit-animation:2s 1.5s infinite load2;animation:2s 1.5s infinite load2;top:-.1em;left:-.1em}.loader:after{-webkit-transform-origin:0 5.1em;transform-origin:0 5.1em;background:#fafafa;border-radius:0 10.2em 10.2em 0;width:5.2em;height:10.2em;-webkit-animation:2s infinite load2;animation:2s infinite load2;top:-.1em;left:5.1em}@-webkit-keyframes load2{0%{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes load2{0%{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}</style><script type="module" crossorigin src="./assets/index-IQ-gFBbx.js"></script><link rel="stylesheet" crossorigin href="./assets/index-C0zU8xwx.css"></head><body><div id="root"><div class="loader-container"><div class="loader">Loading...</div></div></div><noscript>You need to enable JavaScript to run this app.</noscript></body></html>
+<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="minimum-scale=1,initial-scale=1,width=device-width,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="./manifest.json"><link rel="icon shortcut" href="./favicon.ico"><title>CRM</title><style>body{margin:0;padding:0;font-family:sans-serif}.loader-container{background-color:#fafafa;flex-direction:column;justify-content:center;align-items:center;display:flex;position:absolute;inset:0}.loader,.loader:before,.loader:after{border-radius:50%}.loader{color:#283593;text-indent:-99999em;width:10em;height:10em;margin:55px auto;font-size:11px;position:relative;-webkit-transform:translateZ(0);-ms-transform:translateZ(0);transform:translateZ(0);box-shadow:inset 0 0 0 1em}.loader:before,.loader:after{content:"";position:absolute}.loader:before{-webkit-transform-origin:5.2em 5.1em;transform-origin:5.2em 5.1em;background:#fafafa;border-radius:10.2em 0 0 10.2em;width:5.2em;height:10.2em;-webkit-animation:2s 1.5s infinite load2;animation:2s 1.5s infinite load2;top:-.1em;left:-.1em}.loader:after{-webkit-transform-origin:0 5.1em;transform-origin:0 5.1em;background:#fafafa;border-radius:0 10.2em 10.2em 0;width:5.2em;height:10.2em;-webkit-animation:2s infinite load2;animation:2s infinite load2;top:-.1em;left:5.1em}@-webkit-keyframes load2{0%{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes load2{0%{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}</style><script type="module" crossorigin src="./assets/index-CTPFYcZP.js"></script><link rel="stylesheet" crossorigin href="./assets/index-DbCBhMSJ.css"></head><body><div id="root"><div class="loader-container"><div class="loader">Loading...</div></div></div><noscript>You need to enable JavaScript to run this app.</noscript></body></html>