studiocms 0.2.0 → 0.4.0

package/frontend/pages/studiocms_api/dashboard/profile.ts

@@ -1,245 +0,0 @@
-/** biome-ignore-all lint/style/noNonNullAssertion: This file uses valid use cases for non-null assertion */
-import { Password, User } from 'studiocms:auth/lib';
-import { developerConfig } from 'studiocms:config';
-import { apiResponseLogger } from 'studiocms:logger';
-import { Notifications } from 'studiocms:notifier';
-import { SDKCore } from 'studiocms:sdk';
-import type { tsUsers } from 'studiocms:sdk/types';
-import {
-	AllResponse,
-	createEffectAPIRoutes,
-	createJsonResponse,
-	Effect,
-	genLogger,
-	OptionsResponse,
-	readAPIContextJson,
-} from '@withstudiocms/effect';
-import { z } from 'astro/zod';
-
-type tsUsersUpdate = tsUsers['Update']['Type'];
-
-type UserBasicUpdate = Omit<tsUsersUpdate, 'id'>;
-
-type UserPasswordUpdate = {
-	currentPassword: string | null;
-	newPassword: string;
-	confirmNewPassword: string;
-};
-
-type BasicUserProfileUpdate = {
-	mode: 'basic';
-	data: UserBasicUpdate;
-};
-
-type PasswordProfileUpdate = {
-	mode: 'password';
-	data: UserPasswordUpdate;
-};
-
-type AvatarProfileUpdate = {
-	mode: 'avatar';
-};
-
-type UserProfileUpdate = BasicUserProfileUpdate | PasswordProfileUpdate | AvatarProfileUpdate;
-
-export const { POST, OPTIONS, ALL } = createEffectAPIRoutes(
-	{
-		POST: (ctx) =>
-			genLogger('studiocms/routes/api/dashboard/profile.POST')(function* () {
-				const [pass, userHelper, notify, sdk] = yield* Effect.all([
-					Password,
-					User,
-					Notifications,
-					SDKCore,
-				]);
-
-				// Check if demo mode is enabled
-				if (developerConfig.demoMode !== false) {
-					return apiResponseLogger(403, 'Demo mode is enabled, this action is not allowed.');
-				}
-
-				// Get user data
-				const userData = ctx.locals.StudioCMS.security?.userSessionData;
-
-				// Check if user is logged in
-				if (!userData?.isLoggedIn) {
-					return apiResponseLogger(401, 'Unauthorized');
-				}
-
-				// Check if user has permission
-				if (!ctx.locals.StudioCMS.security?.userPermissionLevel.isVisitor) {
-					return apiResponseLogger(403, 'Unauthorized');
-				}
-
-				// Get Json Data
-				const userProfileUpdate = yield* readAPIContextJson<UserProfileUpdate>(ctx);
-
-				switch (userProfileUpdate.mode) {
-					case 'basic': {
-						const { data: r } = userProfileUpdate;
-
-						const data = r;
-
-						if (!data.name) {
-							return apiResponseLogger(400, 'Invalid form data, name is required');
-						}
-
-						if (!data.email) {
-							return apiResponseLogger(400, 'Invalid form data, email is required');
-						}
-
-						if (!data.username) {
-							return apiResponseLogger(400, 'Invalid form data, username is required');
-						}
-
-						// If the username is invalid, return an error
-						const verifyUsernameResponse = yield* userHelper.verifyUsernameInput(data.username);
-						if (verifyUsernameResponse !== true) {
-							return apiResponseLogger(400, verifyUsernameResponse);
-						}
-
-						// If the email is invalid, return an error
-						const checkEmail = z.coerce
-							.string()
-							.email({ message: 'Email address is invalid' })
-							.safeParse(data.email);
-
-						if (!checkEmail.success)
-							return apiResponseLogger(400, `Invalid email: ${checkEmail.error.message}`);
-
-						const { usernameSearch, emailSearch } =
-							yield* sdk.AUTH.user.searchUsersForUsernameOrEmail(data.username, checkEmail.data);
-
-						if (userData.user?.username !== data.username) {
-							if (usernameSearch.length > 0)
-								return apiResponseLogger(400, 'Invalid username: Username is already in use');
-						}
-						if (userData.user?.email !== data.email) {
-							if (emailSearch.length > 0)
-								return apiResponseLogger(400, 'Invalid email: Email is already in use');
-						}
-						yield* sdk.AUTH.user.update({
-							userId: userData.user!.id!,
-							userData: { ...data, id: userData.user!.id! },
-						});
-
-						return apiResponseLogger(200, 'User profile updated successfully');
-					}
-					case 'password': {
-						const { data: r } = userProfileUpdate;
-
-						const data = r;
-
-						const { currentPassword, newPassword, confirmNewPassword } = data;
-
-						if (!currentPassword) {
-							if (userData.user?.password) {
-								return apiResponseLogger(400, 'Invalid form data, current password is required');
-							}
-						}
-
-						if (!newPassword) {
-							return apiResponseLogger(400, 'Invalid form data, new password is required');
-						}
-
-						// Verify the current password matches the stored hash (when one exists)
-						if (currentPassword && userData.user?.password) {
-							const isValid = yield* pass.verifyPasswordHash(
-								userData.user.password,
-								currentPassword
-							);
-							if (!isValid) {
-								return apiResponseLogger(400, 'Invalid current password');
-							}
-						}
-
-						if (!confirmNewPassword) {
-							return apiResponseLogger(400, 'Invalid form data, confirm new password is required');
-						}
-
-						if (newPassword !== confirmNewPassword) {
-							return apiResponseLogger(
-								400,
-								'Invalid form data, new password and confirm new password do not match'
-							);
-						}
-
-						// If the password is invalid, return an error
-						const verifyPasswordResponse = yield* pass.verifyPasswordStrength(newPassword);
-						if (verifyPasswordResponse !== true) {
-							return apiResponseLogger(400, verifyPasswordResponse);
-						}
-
-						const userUpdate = {
-							password: yield* pass.hashPassword(newPassword),
-						};
-
-						if (userData.user)
-							yield* Effect.all([
-								sdk.AUTH.user.update({
-									userId: userData.user.id,
-									userData: {
-										id: userData.user.id,
-										name: userData.user.name,
-										username: userData.user.username,
-										updatedAt: new Date().toISOString(),
-										emailVerified: userData.user.emailVerified,
-										createdAt: undefined,
-										...userUpdate,
-									},
-								}),
-								notify.sendUserNotification('account_updated', userData.user.id),
-								notify.sendAdminNotification('user_updated', userData.user.username),
-							]);
-
-						return apiResponseLogger(200, 'User password updated successfully');
-					}
-					case 'avatar': {
-						if (!userData.user?.email) {
-							return apiResponseLogger(400, 'User email required');
-						}
-
-						if (userData.user)
-							yield* userHelper.createUserAvatar(userData.user.email).pipe(
-								Effect.flatMap((newAvatar) =>
-									Effect.all([
-										sdk.AUTH.user.update({
-											userId: userData.user!.id,
-											userData: {
-												id: userData.user!.id,
-												name: userData.user!.name,
-												username: userData.user!.username,
-												updatedAt: new Date().toISOString(),
-												emailVerified: userData.user!.emailVerified,
-												createdAt: undefined,
-												avatar: newAvatar,
-											},
-										}),
-										notify.sendUserNotification('account_updated', userData.user!.id),
-										notify.sendAdminNotification('user_updated', userData.user!.username),
-									])
-								)
-							);
-
-						return apiResponseLogger(200, 'User Avatar updated successfully');
-					}
-					default:
-						return apiResponseLogger(400, 'Invalid form data, mode is required or unsupported');
-				}
-			}).pipe(Notifications.Provide),
-		OPTIONS: () => Effect.try(() => OptionsResponse({ allowedMethods: ['POST'] })),
-		ALL: () => Effect.try(() => AllResponse()),
-	},
-	{
-		cors: { methods: ['POST', 'OPTIONS'] },
-		onError: (error) => {
-			console.error('API Error:', error);
-			return createJsonResponse(
-				{ error: 'Internal Server Error' },
-				{
-					status: 500,
-				}
-			);
-		},
-	}
-);

package/frontend/pages/studiocms_api/dashboard/resend-verify-email.ts

@@ -1,77 +0,0 @@
-import { VerifyEmail } from 'studiocms:auth/lib';
-import { apiResponseLogger } from 'studiocms:logger';
-import { SDKCore } from 'studiocms:sdk';
-import {
-	AllResponse,
-	createEffectAPIRoutes,
-	createJsonResponse,
-	Effect,
-	genLogger,
-	OptionsResponse,
-	readAPIContextJson,
-} from '@withstudiocms/effect';
-
-export const { POST, OPTIONS, ALL } = createEffectAPIRoutes(
-	{
-		POST: (ctx) =>
-			genLogger('studiocms/routes/api/dashboard/resend-verify-email.POST')(function* () {
-				const [sdk, verifier] = yield* Effect.all([SDKCore, VerifyEmail]);
-
-				// Check if mailer is enabled
-				if (!ctx.locals.StudioCMS.siteConfig.data.enableMailer) {
-					return apiResponseLogger(400, 'Mailer is disabled, this action is disabled.');
-				}
-
-				// Require authentication
-				const userData = ctx.locals.StudioCMS.security?.userSessionData;
-				if (!userData?.isLoggedIn) {
-					return apiResponseLogger(403, 'Unauthorized');
-				}
-				// Restrict to admins/owners (or relax below to allow "self" requests only)
-				const isPrivileged =
-					ctx.locals.StudioCMS.security?.userPermissionLevel.isAdmin ||
-					ctx.locals.StudioCMS.security?.userPermissionLevel.isOwner;
-				if (!isPrivileged) {
-					return apiResponseLogger(403, 'Unauthorized');
-				}
-
-				const { userId } = yield* readAPIContextJson<{ userId: string }>(ctx);
-
-				if (!userId) {
-					return apiResponseLogger(400, 'Invalid request');
-				}
-
-				const newToken = yield* sdk.AUTH.verifyEmail.create(userId);
-
-				if (!newToken) {
-					return apiResponseLogger(500, 'Failed to create verification token');
-				}
-
-				const response = yield* verifier.sendVerificationEmail(userId);
-
-				if (!response) {
-					return apiResponseLogger(500, 'Failed to send verification email');
-				}
-
-				if ('error' in response) {
-					return apiResponseLogger(500, response.error);
-				}
-
-				return apiResponseLogger(200, response.message);
-			}).pipe(VerifyEmail.Provide),
-		OPTIONS: () => Effect.try(() => OptionsResponse({ allowedMethods: ['POST'] })),
-		ALL: () => Effect.try(() => AllResponse()),
-	},
-	{
-		cors: { methods: ['POST', 'OPTIONS'] },
-		onError: (error) => {
-			console.error('API Error:', error);
-			return createJsonResponse(
-				{ error: 'Internal Server Error' },
-				{
-					status: 500,
-				}
-			);
-		},
-	}
-);

package/frontend/pages/studiocms_api/dashboard/reset-password.ts

@@ -1,124 +0,0 @@
-import { Password } from 'studiocms:auth/lib';
-import { developerConfig } from 'studiocms:config';
-import { apiResponseLogger } from 'studiocms:logger';
-import { Notifications } from 'studiocms:notifier';
-import { SDKCore } from 'studiocms:sdk';
-import {
-	AllResponse,
-	createEffectAPIRoutes,
-	createJsonResponse,
-	Effect,
-	genLogger,
-	OptionsResponse,
-	readAPIContextJson,
-} from '@withstudiocms/effect';
-
-export const { POST, OPTIONS, ALL } = createEffectAPIRoutes(
-	{
-		POST: (ctx) =>
-			genLogger('studiocms/routes/api/dashboard/reset-password.POST')(function* () {
-				const [notify, sdk, pass] = yield* Effect.all([Notifications, SDKCore, Password]);
-
-				// Check if demo mode is enabled
-				if (developerConfig.demoMode !== false) {
-					return apiResponseLogger(403, 'Demo mode is enabled, this action is not allowed.');
-				}
-
-				const { token, id, userid, password, confirm_password } = yield* readAPIContextJson<{
-					token: string;
-					id: string;
-					userid: string;
-					password: string;
-					confirm_password: string;
-				}>(ctx);
-
-				if (!token) {
-					return apiResponseLogger(400, 'Invalid form data, token is required');
-				}
-
-				if (!id) {
-					return apiResponseLogger(400, 'Invalid form data, id is required');
-				}
-
-				if (!userid) {
-					return apiResponseLogger(400, 'Invalid form data, userid is required');
-				}
-
-				if (!password) {
-					return apiResponseLogger(400, 'Invalid form data, password is required');
-				}
-
-				if (!confirm_password) {
-					return apiResponseLogger(400, 'Invalid form data, confirm_password is required');
-				}
-
-				if (password !== confirm_password) {
-					return apiResponseLogger(400, 'Passwords do not match');
-				}
-
-				// If the password is invalid, return an error
-				const verifyPasswordResponse = yield* pass.verifyPasswordStrength(password);
-				if (verifyPasswordResponse !== true) {
-					return apiResponseLogger(400, verifyPasswordResponse);
-				}
-
-				const hashedPassword = yield* pass.hashPassword(password);
-
-				// Verify the reset token and derive the userId from it
-				const isTokenValid = yield* sdk.resetTokenBucket.check(token);
-				if (!isTokenValid) {
-					return apiResponseLogger(403, 'Invalid or expired reset token');
-				}
-
-				const tokenInfo = yield* sdk.UTIL.Generators.testToken(token);
-				if (!tokenInfo || !tokenInfo.userId) {
-					return apiResponseLogger(403, 'Invalid or expired reset token');
-				}
-
-				const targetUserId = tokenInfo.userId as string;
-
-				const userUpdate = { password: hashedPassword };
-
-				const userData = yield* sdk.GET.users.byId(targetUserId);
-
-				if (!userData) {
-					return apiResponseLogger(404, 'User not found');
-				}
-
-				yield* sdk.AUTH.user.update({
-					userId: targetUserId,
-					userData: {
-						id: targetUserId,
-						name: userData.name,
-						username: userData.username,
-						updatedAt: new Date().toISOString(),
-						emailVerified: userData.emailVerified,
-						createdAt: undefined,
-						...userUpdate,
-					},
-				});
-
-				yield* Effect.all([
-					sdk.resetTokenBucket.delete(targetUserId),
-					notify.sendUserNotification('account_updated', targetUserId),
-					notify.sendAdminNotification('user_updated', userData.username),
-				]);
-
-				return apiResponseLogger(200, 'User password updated successfully');
-			}).pipe(Notifications.Provide),
-		OPTIONS: () => Effect.try(() => OptionsResponse({ allowedMethods: ['POST'] })),
-		ALL: () => Effect.try(() => AllResponse()),
-	},
-	{
-		cors: { methods: ['POST', 'OPTIONS'] },
-		onError: (error) => {
-			console.error('API Error:', error);
-			return createJsonResponse(
-				{ error: 'Internal Server Error' },
-				{
-					status: 500,
-				}
-			);
-		},
-	}
-);

package/frontend/pages/studiocms_api/dashboard/search-list.ts

@@ -1,59 +0,0 @@
-import { SDKCore } from 'studiocms:sdk';
-import {
-	AllResponse,
-	createEffectAPIRoutes,
-	createJsonResponse,
-	Effect,
-	genLogger,
-	OptionsResponse,
-} from '@withstudiocms/effect';
-
-type SearchItem = {
-	id: string;
-	name: string;
-	slug?: string;
-	type: 'folder' | 'page';
-	isDraft?: boolean | null;
-};
-
-export const { GET, OPTIONS, ALL } = createEffectAPIRoutes(
-	{
-		GET: () =>
-			genLogger('studiocms/routes/api/dashboard/search-list.GET')(function* () {
-				const sdk = yield* SDKCore;
-
-				const searchList = yield* Effect.all([
-					sdk.GET.folderList().pipe(
-						Effect.map((res) => res.map(({ id, name }) => ({ id, name, type: 'folder' })))
-					),
-					sdk.GET.pages(true).pipe(
-						Effect.map((res) =>
-							res.map(({ id, title, slug, draft }) => ({
-								id,
-								name: title,
-								slug,
-								isDraft: draft,
-								type: 'page',
-							}))
-						)
-					),
-				]).pipe(Effect.map(([folders, pages]) => [...folders, ...pages] as SearchItem[]));
-
-				return createJsonResponse(searchList);
-			}),
-		OPTIONS: () => Effect.try(() => OptionsResponse({ allowedMethods: ['GET'] })),
-		ALL: () => Effect.try(() => AllResponse()),
-	},
-	{
-		cors: { methods: ['GET', 'OPTIONS'] },
-		onError: (error) => {
-			console.error('API Error:', error);
-			return createJsonResponse(
-				{ error: 'Internal Server Error' },
-				{
-					status: 500,
-				}
-			);
-		},
-	}
-);

package/frontend/pages/studiocms_api/dashboard/taxonomy-search.ts

@@ -1,47 +0,0 @@
-import { SDKCore } from 'studiocms:sdk';
-import {
-	AllResponse,
-	createEffectAPIRoutes,
-	createJsonResponse,
-	Effect,
-	genLogger,
-	OptionsResponse,
-} from '@withstudiocms/effect';
-import {
-	categoriesToTaxonomyNodes,
-	tagsToTaxonomyNodes,
-} from '#frontend/components/shared/taxonomy/shared.js';
-
-export const { GET, OPTIONS, ALL } = createEffectAPIRoutes(
-	{
-		GET: () =>
-			genLogger('studiocms/routes/api/dashboard/search-list.GET')(function* () {
-				const sdk = yield* SDKCore;
-
-				return yield* Effect.all([sdk.GET.categories.getAll(), sdk.GET.tags.getAll()]).pipe(
-					Effect.map(([categories, tags]) => ({
-						categories: categoriesToTaxonomyNodes(categories),
-						tags: tagsToTaxonomyNodes(tags),
-					})),
-					Effect.map(({ categories, tags }) => {
-						return [...categories, ...tags];
-					}),
-					Effect.map(createJsonResponse)
-				);
-			}),
-		OPTIONS: () => Effect.try(() => OptionsResponse({ allowedMethods: ['GET'] })),
-		ALL: () => Effect.try(() => AllResponse()),
-	},
-	{
-		cors: { methods: ['GET', 'OPTIONS'] },
-		onError: (error) => {
-			console.error('API Error:', error);
-			return createJsonResponse(
-				{ error: 'Internal Server Error' },
-				{
-					status: 500,
-				}
-			);
-		},
-	}
-);