simple-module-users 0.0.31__tar.gz → 0.0.32__tar.gz

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: simple_module_users
-Version: 0.0.31
+Version: 0.0.32
 Summary: Email + password user management, admin invites, RBAC-ready — replaces Keycloak for simple_module apps
 Project-URL: Homepage, https://github.com/antosubash/simple_module_python
 Project-URL: Repository, https://github.com/antosubash/simple_module_python
@@ -24,11 +24,11 @@ Requires-Python: >=3.12
 Requires-Dist: aiosmtplib>=3.0
 Requires-Dist: cachetools>=5.3
 Requires-Dist: fastapi-users[oauth,sqlalchemy]<16,>=15
-Requires-Dist: simple-module-auth==0.0.31
-Requires-Dist: simple-module-core==0.0.31
-Requires-Dist: simple-module-db==0.0.31
-Requires-Dist: simple-module-hosting==0.0.31
-Requires-Dist: simple-module-settings==0.0.31
+Requires-Dist: simple-module-auth==0.0.32
+Requires-Dist: simple-module-core==0.0.32
+Requires-Dist: simple-module-db==0.0.32
+Requires-Dist: simple-module-hosting==0.0.32
+Requires-Dist: simple-module-settings==0.0.32
 Requires-Dist: typer>=0.12
 Description-Content-Type: text/markdown
 

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "simple_module_users"
-version = "0.0.31"
+version = "0.0.32"
 description = "Email + password user management, admin invites, RBAC-ready — replaces Keycloak for simple_module apps"
 readme = "README.md"
 license = "MIT"
@@ -21,11 +21,11 @@ classifiers = [
     "Typing :: Typed",
 ]
 dependencies = [
-    "simple_module_core==0.0.31",
-    "simple_module_db==0.0.31",
-    "simple_module_hosting==0.0.31",
-    "simple_module_settings==0.0.31",
-    "simple_module_auth==0.0.31",
+    "simple_module_core==0.0.32",
+    "simple_module_db==0.0.32",
+    "simple_module_hosting==0.0.32",
+    "simple_module_settings==0.0.32",
+    "simple_module_auth==0.0.32",
     # Pinned to a narrow range: `deps.py` relies on mutating CookieTransport
     # fields after construction (see reconfigure_cookie_transport in backend.py).
     # Bumping the major version requires re-checking those field names.

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/tests/test_api_admin.py

@@ -71,6 +71,17 @@ class TestAdminList:
         assert "alpha@example.com" in emails
         assert "beta@example.com" not in emails
 
+    @pytest.mark.anyio
+    async def test_list_search_matches_like_metacharacters_literally(self, admin_client, users_db):
+        """A literal "_" or "%" in the search must match as text, not wildcard."""
+        await _make_user(users_db, email="dana_x@example.com")
+        await _make_user(users_db, email="danaYx@example.com")
+
+        resp = await admin_client.get("/api/users/admin?q=dana_x")
+        assert resp.status_code == 200
+        emails = [u["email"] for u in resp.json()]
+        assert emails == ["dana_x@example.com"]
+
     @pytest.mark.anyio
     async def test_list_pagination(self, admin_client, users_db):
         for i in range(5):

simple_module_users-0.0.32/tests/test_users_shared_props.py

@@ -0,0 +1,52 @@
+"""The ``signup`` shared prop drives whether a "Sign up" link is rendered.
+
+``/users/register`` raises 404 when ``allow_signup`` is off, so the public shell
+has to know the answer before it draws the link. Getting the default wrong in
+either direction is a visible bug: too eager and every visitor hits a 404, too
+shy and a genuinely open instance hides its own signup.
+"""
+
+from __future__ import annotations
+
+from types import SimpleNamespace
+
+import pytest
+from users.shared_props import users_shared_props
+
+
+def _request(users_state: object) -> SimpleNamespace:
+    """A stand-in carrying only what the provider is allowed to touch."""
+    return SimpleNamespace(app=SimpleNamespace(state=SimpleNamespace(users=users_state)))
+
+
+class TestSignupSharedProp:
+    @pytest.mark.parametrize("allow", [True, False])
+    def test_reflects_the_setting(self, allow: bool) -> None:
+        request = _request(SimpleNamespace(settings=SimpleNamespace(allow_signup=allow)))
+        assert users_shared_props(request) == {"signup": {"allowed": allow}}
+
+    def test_coerces_to_a_real_bool(self) -> None:
+        """The value is serialised straight to JSON, so it must not leak a
+        truthy non-bool into the page props."""
+        request = _request(SimpleNamespace(settings=SimpleNamespace(allow_signup=1)))
+        assert users_shared_props(request)["signup"]["allowed"] is True
+
+    def test_defaults_closed_when_settings_are_missing(self) -> None:
+        request = _request(SimpleNamespace())
+        assert users_shared_props(request) == {"signup": {"allowed": False}}
+
+    def test_defaults_closed_when_module_state_is_absent(self) -> None:
+        """Never raises: the provider runs on every request and a failure here
+        would cost the whole page, not just the link."""
+        request = SimpleNamespace(app=SimpleNamespace(state=SimpleNamespace()))
+        assert users_shared_props(request) == {"signup": {"allowed": False}}
+
+
+class TestProviderIsRegistered:
+    def test_the_built_app_carries_it(self, app) -> None:
+        """Registered during ``register_settings``, so a fully booted app has it
+        in place before the first request is served. Asserted against the real
+        app rather than a bare FastAPI: the registration sits downstream of the
+        settings module, and a stub would pass while the wiring was broken."""
+        providers = getattr(app.state, "inertia_shared_providers", [])
+        assert users_shared_props in providers

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/tests/test_views_admin.py

@@ -59,6 +59,45 @@ class TestAdminIndexFilters:
         assert props["filters"]["sort"] == "email"
         assert props["filters"]["order"] == "asc"
 
+    @pytest.mark.anyio
+    async def test_page_past_the_end_clamps_to_last_page(self, admin_client, users_db):
+        """A stale/hand-edited ?page= beyond the last page must clamp and
+        return the last page's rows, not an empty list with a nonzero total —
+        the same bug class background_tasks and file_storage fix for their
+        own admin listings."""
+        from test_api_admin import _make_user
+
+        await _make_user(users_db, email="clamp-a@x.com")
+        await _make_user(users_db, email="clamp-b@x.com")
+
+        resp = await admin_client.get(
+            "/users/admin?page=999&per_page=1",
+            headers={"X-Inertia": "true", "Accept": "application/json"},
+        )
+        assert resp.status_code == 200
+        props = resp.json()["props"]
+        assert props["users"], "expected the clamped last page to carry rows"
+        assert props["pagination"]["page"] < 999
+        assert props["pagination"]["total"] >= 2
+
+    @pytest.mark.anyio
+    async def test_pagination_prop_echoes_clamped_values(self, admin_client, users_db):
+        """The pagination prop must carry the values the query actually ran
+        with — ?page=0 renders page-1 rows and must not be labelled page 0,
+        and an oversized per_page is bounded to what the service fetched."""
+        from test_api_admin import _make_user
+
+        await _make_user(users_db, email="clamp-c@x.com")
+
+        resp = await admin_client.get(
+            "/users/admin?page=0&per_page=1000",
+            headers={"X-Inertia": "true", "Accept": "application/json"},
+        )
+        assert resp.status_code == 200
+        pagination = resp.json()["props"]["pagination"]
+        assert pagination["page"] == 1
+        assert pagination["per_page"] == 200
+
 
 # ---------------------------------------------------------------------------
 # has_permissions_module flag on admin edit page
@@ -184,3 +223,13 @@ class TestAdminAddPeoplePage:
         resp = await admin_client.get(old_path, follow_redirects=False)
         assert resp.status_code == 307
         assert resp.headers["location"] == f"/users/admin/add?mode={mode}"
+
+    @pytest.mark.anyio
+    @pytest.mark.parametrize("old_path", ["/users/admin/create", "/users/admin/invite"])
+    async def test_old_urls_require_auth(self, anon_client, old_path):
+        """The legacy aliases must stay gated behind the same permission as
+        the page they redirect to — an anonymous caller must not reach the
+        redirect (and learn the target route exists) before being sent to
+        log in."""
+        resp = await anon_client.get(old_path, follow_redirects=False)
+        assert resp.status_code == 302

simple_module_users-0.0.32/users/admin/components/UsersEmpty.tsx

@@ -0,0 +1,83 @@
+import { Link } from '@inertiajs/react';
+import { keys, useT } from '@simple-module-py/i18n';
+import { EmptyState } from '@simple-module-py/ui/components/EmptyState';
+import { TableEmptyRow } from '@simple-module-py/ui/components/TableEmptyRow';
+import { Button } from '@simple-module-py/ui/components/ui/button';
+import { Plus, UserPlus, Users } from 'lucide-react';
+
+const ADD_PEOPLE_URL = '/users/admin/add';
+
+function AddPeopleAction() {
+  const { t } = useT();
+  return (
+    <Button asChild className="gap-1.5">
+      <Link href={ADD_PEOPLE_URL}>
+        <Plus className="h-4 w-4" />
+        {t(keys.users.empty.add_people)}
+      </Link>
+    </Button>
+  );
+}
+
+/**
+ * The "you are alone in here" prompt.
+ *
+ * A workspace with one member renders a perfectly valid table containing the
+ * admin's own row, which answers "who has access" without ever suggesting the
+ * obvious next step. This sits above that table rather than replacing it: the
+ * single row is still the truthful answer to the question the screen asks, and
+ * hiding it would cost the admin the only route to their own record.
+ */
+export function SoloAccountPrompt() {
+  const { t } = useT();
+  return (
+    <EmptyState
+      className="mb-4 rounded-xl border border-dashed border-border bg-card"
+      icon={UserPlus}
+      title={t(keys.users.empty.solo_title)}
+      description={t(keys.users.empty.invite_description)}
+      action={<AddPeopleAction />}
+    />
+  );
+}
+
+interface UsersEmptyRowProps {
+  /** A search term or filter is narrowing the list, so rows may exist outside it. */
+  filtered: boolean;
+  columnCount: number;
+  onClear: () => void;
+}
+
+/**
+ * The table's own empty row.
+ *
+ * "No users yet" is both wrong and alarming when the workspace is full and the
+ * filter is simply too narrow, so the two cases get opposite copy and opposite
+ * actions — clear the filter, or add the first person.
+ */
+export function UsersEmptyRow({ filtered, columnCount, onClear }: UsersEmptyRowProps) {
+  const { t } = useT();
+  return (
+    <TableEmptyRow columnCount={columnCount}>
+      {filtered ? (
+        <EmptyState
+          icon={Users}
+          title={t(keys.users.empty.filtered_title)}
+          description={t(keys.users.empty.filtered_description)}
+          action={
+            <Button variant="outline" onClick={onClear}>
+              {t(keys.users.empty.clear_filters)}
+            </Button>
+          }
+        />
+      ) : (
+        <EmptyState
+          icon={UserPlus}
+          title={t(keys.users.empty.empty_title)}
+          description={t(keys.users.empty.invite_description)}
+          action={<AddPeopleAction />}
+        />
+      )}
+    </TableEmptyRow>
+  );
+}

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/users/admin/queries.py

@@ -4,6 +4,7 @@ from __future__ import annotations
 
 import uuid
 
+from simple_module_db import LIKE_ESCAPE_CHAR, like_contains_pattern
 from sqlalchemy import func, or_, select
 from sqlalchemy.ext.asyncio import AsyncSession
 from sqlalchemy.orm import selectinload
@@ -98,6 +99,10 @@ class _UserServiceBase:
         entities) + one batched roles query — avoids hydrating full User+Role
         ORM graphs, which dominated this endpoint's CPU under load.
         """
+        # Clamp here, not in the endpoints: the admin view takes these params
+        # raw, and a page<=0 would reach SQL as a negative OFFSET.
+        page = max(page, 1)
+        per_page = max(1, min(per_page, 200))
         stmt = select(
             User.id,
             User.email,
@@ -114,11 +119,11 @@ class _UserServiceBase:
         conditions = []
 
         if search:
-            pattern = f"%{search}%"
+            pattern = like_contains_pattern(search)
             conditions.append(
                 or_(
-                    User.email.ilike(pattern),
-                    User.full_name.ilike(pattern),
+                    User.email.ilike(pattern, escape=LIKE_ESCAPE_CHAR),
+                    User.full_name.ilike(pattern, escape=LIKE_ESCAPE_CHAR),
                 )
             )
 

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/users/admin/views.py

@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+import math
 import uuid
 
 from fastapi import APIRouter, Depends, HTTPException, Request
@@ -49,16 +50,30 @@ async def admin_index(
     clean_status, clean_verified, clean_sort, clean_order = sanitize_list_filters(
         status, verified, sort, order
     )
-    users, total = await service.list_users(
-        page=page,
-        per_page=per_page,
-        search=q,
-        status=clean_status,
-        role_name=role or None,
-        verified=clean_verified,
-        sort=clean_sort,
-        order=clean_order,
-    )
+    # Clamp before building filters, with the same bounds the service applies
+    # internally — the pagination prop must echo the values the query actually
+    # ran with, or ?page=0 renders page-1 rows labelled "Page 0".
+    page = max(page, 1)
+    per_page = max(1, min(per_page, 200))
+    filters = {
+        "per_page": per_page,
+        "search": q,
+        "status": clean_status,
+        "role_name": role or None,
+        "verified": clean_verified,
+        "sort": clean_sort,
+        "order": clean_order,
+    }
+    users, total = await service.list_users(page=page, **filters)
+    # A page requested past the end (a stale ?page= link, or the last row on
+    # that page just got deleted) must be clamped and re-queried — otherwise
+    # the client gets an empty `users` list with a nonzero `total`, which
+    # renders a blank table instead of the last real page.
+    # per_page is already clamped to >= 1 above, so this can't divide by zero.
+    total_pages = max(1, math.ceil(total / per_page))
+    if page > total_pages:
+        page = total_pages
+        users, total = await service.list_users(page=page, **filters)
     roles = await service.list_roles()
     aggregates = await service.count_user_states()
     return await inertia.render(

simple_module_users-0.0.32/users/locales/en.json

@@ -0,0 +1,11 @@
+{
+  "empty": {
+    "solo_title": "You're the only account",
+    "invite_description": "Invite teammates by email, or create accounts with passwords you set.",
+    "add_people": "Add people",
+    "filtered_title": "No users match these filters",
+    "filtered_description": "Nobody in this workspace fits the current search and filters.",
+    "clear_filters": "Clear filters",
+    "empty_title": "No users yet"
+  }
+}

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/users/module.py

@@ -2,6 +2,8 @@
 
 from __future__ import annotations
 
+import importlib.resources
+from pathlib import Path
 from typing import TYPE_CHECKING
 
 from fastapi import APIRouter, Depends
@@ -66,6 +68,15 @@ class UsersModule(ModuleBase):
 
         app.state.auth.auth_provider = UsersAuthProvider()
 
+        # The public shell renders a "Sign up" link only when signup is open —
+        # /users/register 404s otherwise. Registered here (not in the view
+        # layer) so it is set before the first request is served.
+        from simple_module_hosting.shared_props import register_inertia_shared_provider
+
+        from users.shared_props import users_shared_props
+
+        register_inertia_shared_provider(app, users_shared_props)
+
     def register_event_handlers(self, bus: EventBus, app: FastAPI | None = None) -> None:
         """Rebuild the OAuth client cache when the users settings reload.
 
@@ -144,6 +155,10 @@ class UsersModule(ModuleBase):
             )
         )
 
+    def locale_dirs(self) -> dict[str, Path]:
+        base = Path(str(importlib.resources.files(__package__) / "locales"))
+        return {"users": base}
+
     def register_routes(self, api_router: APIRouter, view_router: APIRouter) -> None:
         from users.admin.api import admin_router
         from users.admin.views import router as admin_views

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/users/pages/ForgotPassword.tsx

@@ -3,6 +3,7 @@ import { Button } from '@simple-module-py/ui/components/ui/button';
 import { Input } from '@simple-module-py/ui/components/ui/input';
 import { Label } from '@simple-module-py/ui/components/ui/label';
 import { AuthCardShell } from '@simple-module-py/ui/layouts/AuthCardShell';
+import { LOGIN_PATH } from '@simple-module-py/ui/lib/auth-routes';
 import { CheckCircle2 } from 'lucide-react';
 import { useState } from 'react';
 
@@ -40,7 +41,7 @@ function ForgotPassword() {
           </div>
         </div>
         <a
-          href="/users/login"
+          href={LOGIN_PATH}
           className="mt-4 block text-center text-sm font-semibold text-primary-700 hover:text-primary-800"
         >
           Back to log in
@@ -77,7 +78,7 @@ function ForgotPassword() {
       </form>
       <p className="mt-5 text-center text-xs text-muted-foreground">
         Remembered?{' '}
-        <a href="/users/login" className="font-semibold text-primary-700 hover:text-primary-800">
+        <a href={LOGIN_PATH} className="font-semibold text-primary-700 hover:text-primary-800">
           Log in
         </a>
       </p>

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/users/pages/Login.tsx

@@ -3,6 +3,7 @@ import { Button } from '@simple-module-py/ui/components/ui/button';
 import { Input } from '@simple-module-py/ui/components/ui/input';
 import { Label } from '@simple-module-py/ui/components/ui/label';
 import { AuthCardShell } from '@simple-module-py/ui/layouts/AuthCardShell';
+import { REGISTER_PATH } from '@simple-module-py/ui/lib/auth-routes';
 import { AlertTriangle } from 'lucide-react';
 import { useState } from 'react';
 
@@ -155,10 +156,7 @@ function Login() {
       {allow_signup && (
         <p className="mt-5 text-center text-xs text-muted-foreground">
           Don't have an account?{' '}
-          <a
-            href="/users/register"
-            className="font-semibold text-primary-700 hover:text-primary-800"
-          >
+          <a href={REGISTER_PATH} className="font-semibold text-primary-700 hover:text-primary-800">
             Sign up
           </a>
         </p>

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/users/pages/Register.tsx

@@ -3,6 +3,7 @@ import { Button } from '@simple-module-py/ui/components/ui/button';
 import { Input } from '@simple-module-py/ui/components/ui/input';
 import { Label } from '@simple-module-py/ui/components/ui/label';
 import { AuthCardShell } from '@simple-module-py/ui/layouts/AuthCardShell';
+import { LOGIN_PATH } from '@simple-module-py/ui/lib/auth-routes';
 import { CheckCircle2 } from 'lucide-react';
 import { useState } from 'react';
 
@@ -62,7 +63,7 @@ function Register() {
           </div>
         </div>
         <a
-          href="/users/login"
+          href={LOGIN_PATH}
           className="mt-4 block text-center text-sm font-semibold text-primary-700 hover:text-primary-800"
         >
           Back to log in
@@ -149,7 +150,7 @@ function Register() {
 
       <p className="mt-5 text-center text-xs text-muted-foreground">
         Already have an account?{' '}
-        <a href="/users/login" className="font-semibold text-primary-700 hover:text-primary-800">
+        <a href={LOGIN_PATH} className="font-semibold text-primary-700 hover:text-primary-800">
           Log in
         </a>
       </p>

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/users/pages/ResetPassword.tsx

@@ -3,6 +3,7 @@ import { Button } from '@simple-module-py/ui/components/ui/button';
 import { Input } from '@simple-module-py/ui/components/ui/input';
 import { Label } from '@simple-module-py/ui/components/ui/label';
 import { AuthCardShell } from '@simple-module-py/ui/layouts/AuthCardShell';
+import { LOGIN_PATH } from '@simple-module-py/ui/lib/auth-routes';
 import { useState } from 'react';
 
 interface Props {
@@ -38,7 +39,7 @@ function ResetPassword() {
     })
       .then(async (res) => {
         if (res.status === 200 || res.status === 204) {
-          router.visit('/users/login');
+          router.visit(LOGIN_PATH);
         } else {
           const data = await res.json().catch(() => ({}));
           const detail =

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/users/pages/Users/Index.tsx

@@ -8,7 +8,6 @@ import { Input } from '@simple-module-py/ui/components/ui/input';
 import {
   Table,
   TableBody,
-  TableCell,
   TableHead,
   TableHeader,
   TableRow,
@@ -29,6 +28,7 @@ import { useCallback, useEffect, useMemo, useState } from 'react';
 import { type Filters, IndexFilters } from '../../admin/components/IndexFilters';
 import { type RoleItem, RolesTab } from '../../admin/components/RolesTab';
 import { type UserListItem, UserRow } from '../../admin/components/UserRow';
+import { SoloAccountPrompt, UsersEmptyRow } from '../../admin/components/UsersEmpty';
 
 interface Pagination {
   page: number;
@@ -60,6 +60,9 @@ const DEFAULT_FILTERS: Filters = {
 
 const HEAD_CLASS = 'text-[11px] font-semibold uppercase tracking-[0.08em] text-muted-foreground';
 
+/** Member, Role, Status, Last seen, row actions — the empty row spans all of them. */
+const COLUMN_COUNT = 5;
+
 function SortIcon({ col, filters }: { col: Filters['sort']; filters: Filters }) {
   if (filters.sort !== col) return null;
   return filters.order === 'asc' ? (
@@ -123,6 +126,25 @@ function Index() {
 
   const totalPages = Math.ceil(pagination.total / pagination.per_page);
 
+  // Sort column and direction are deliberately excluded: reordering an empty
+  // list leaves it empty for the same reason it already was, so counting them
+  // here would turn "no users yet" into a misleading "no matches".
+  const isFiltered =
+    !!search ||
+    filters.status !== DEFAULT_FILTERS.status ||
+    filters.role !== DEFAULT_FILTERS.role ||
+    filters.verified !== DEFAULT_FILTERS.verified;
+
+  const clearFilters = useCallback(() => {
+    setSearch('');
+    navigate({
+      q: '',
+      status: DEFAULT_FILTERS.status,
+      role: DEFAULT_FILTERS.role,
+      verified: DEFAULT_FILTERS.verified,
+    });
+  }, [navigate]);
+
   return (
     <PageShell
       title="Users"
@@ -187,6 +209,8 @@ function Index() {
             />
           </div>
 
+          {pagination.total === 1 && !isFiltered && <SoloAccountPrompt />}
+
           <Card className="border-border overflow-hidden p-0">
             <Table>
               <TableHeader className="bg-secondary/40">
@@ -221,14 +245,11 @@ function Index() {
                   <UserRow key={user.id} user={user} />
                 ))}
                 {users.length === 0 && (
-                  <TableRow>
-                    <TableCell colSpan={5} className="h-32 text-center">
-                      <div className="flex flex-col items-center gap-2 text-muted-foreground">
-                        <Users className="size-8" />
-                        <p>{search ? `No users match "${search}"` : 'No users yet'}</p>
-                      </div>
-                    </TableCell>
-                  </TableRow>
+                  <UsersEmptyRow
+                    filtered={isFiltered}
+                    columnCount={COLUMN_COUNT}
+                    onClear={clearFilters}
+                  />
                 )}
               </TableBody>
             </Table>

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/users/pages/Users/components/CreateUserFields.tsx

@@ -64,13 +64,15 @@ export function CreateUserFields({
             type="password"
             value={password}
             onChange={(e) => onPasswordChange(e.target.value)}
+            placeholder="At least 8 characters"
             required
             autoComplete="new-password"
             className="pl-9"
           />
         </div>
         <p className="text-xs text-muted-foreground">
-          The account is active and verified immediately — share the password securely.
+          Must be at least 8 characters and not all numbers. The account is active and verified
+          immediately — share the password securely.
         </p>
       </div>
     </>

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/users/pages/Users/components/DangerZone.tsx

@@ -13,8 +13,10 @@ import {
 } from '@simple-module-py/ui/components/ui/alert-dialog';
 import { Button } from '@simple-module-py/ui/components/ui/button';
 import { Card, CardContent } from '@simple-module-py/ui/components/ui/card';
+import { Input } from '@simple-module-py/ui/components/ui/input';
+import { Label } from '@simple-module-py/ui/components/ui/label';
 import { Trash2 } from 'lucide-react';
-import { useState } from 'react';
+import { useId, useState } from 'react';
 import { toast } from 'sonner';
 
 interface Props {
@@ -25,6 +27,13 @@ interface Props {
 
 export function DangerZone({ userId, email, isSelf }: Props) {
   const [deleting, setDeleting] = useState(false);
+  // Deleting a user is unrecoverable and the row it starts from looks like
+  // every other row, so the confirm asks for the address to be typed out.
+  // Reading it back is the part that catches "wrong person" — a second click
+  // never would.
+  const [typed, setTyped] = useState('');
+  const confirmId = useId();
+  const confirmed = typed.trim().toLowerCase() === email.toLowerCase();
 
   const handleDelete = () => {
     setDeleting(true);
@@ -56,7 +65,7 @@ export function DangerZone({ userId, email, isSelf }: Props) {
             <p className="text-sm text-muted-foreground">
               Permanently delete this user. This cannot be undone.
             </p>
-            <AlertDialog>
+            <AlertDialog onOpenChange={(open) => !open && setTyped('')}>
               <AlertDialogTrigger asChild>
                 <Button variant="destructive" size="sm" className="gap-1.5" disabled={deleting}>
                   <Trash2 className="h-3.5 w-3.5" />
@@ -67,13 +76,27 @@ export function DangerZone({ userId, email, isSelf }: Props) {
                 <AlertDialogHeader>
                   <AlertDialogTitle>Delete {email}?</AlertDialogTitle>
                   <AlertDialogDescription>
-                    This permanently removes the account and all of its access. This action cannot
-                    be undone.
+                    Removes the account, its roles and its sessions. Audit entries stay, attributed
+                    to a deleted user. This cannot be undone.
                   </AlertDialogDescription>
                 </AlertDialogHeader>
+                <div className="grid gap-2">
+                  <Label htmlFor={confirmId} className="text-sm font-normal">
+                    Type <span className="font-medium text-foreground">{email}</span> to confirm
+                  </Label>
+                  <Input
+                    id={confirmId}
+                    value={typed}
+                    onChange={(e) => setTyped(e.target.value)}
+                    autoComplete="off"
+                    placeholder={email}
+                  />
+                </div>
                 <AlertDialogFooter>
                   <AlertDialogCancel>Cancel</AlertDialogCancel>
-                  <AlertDialogAction onClick={handleDelete}>Delete</AlertDialogAction>
+                  <AlertDialogAction disabled={!confirmed} onClick={handleDelete}>
+                    Delete user
+                  </AlertDialogAction>
                 </AlertDialogFooter>
               </AlertDialogContent>
             </AlertDialog>

{simple_module_users-0.0.31 → simple_module_users-0.0.32}/users/pages/VerifyEmail.tsx

@@ -1,6 +1,7 @@
 import { Head, usePage } from '@inertiajs/react';
 import { Button } from '@simple-module-py/ui/components/ui/button';
 import { AuthCardShell } from '@simple-module-py/ui/layouts/AuthCardShell';
+import { LOGIN_PATH } from '@simple-module-py/ui/lib/auth-routes';
 import { CheckCircle2, Loader2, XCircle } from 'lucide-react';
 import { useEffect, useState } from 'react';
 
@@ -67,7 +68,7 @@ function VerifyEmail() {
       title: 'Email verified!',
       description: 'Your account is now active.',
       body: (
-        <a href="/users/login">
+        <a href={LOGIN_PATH}>
           <Button className="w-full">Log in</Button>
         </a>
       ),
@@ -78,7 +79,7 @@ function VerifyEmail() {
       title: 'Already verified',
       description: 'This account is already verified — you can log in.',
       body: (
-        <a href="/users/login">
+        <a href={LOGIN_PATH}>
           <Button className="w-full">Log in</Button>
         </a>
       ),
@@ -90,7 +91,7 @@ function VerifyEmail() {
       description: errorMsg || 'Verification link expired or invalid.',
       body: (
         <a
-          href="/users/login"
+          href={LOGIN_PATH}
           className="text-center text-sm font-semibold text-primary-700 hover:text-primary-800"
         >
           Back to log in

simple_module_users-0.0.32/users/shared_props.py

@@ -0,0 +1,29 @@
+"""Inertia shared props contributed by the users module.
+
+The public shell (landing page, ``PublicLayout``) has to know whether local
+signup is open *before* it renders a "Sign up" link: ``/users/register`` raises
+404 when ``allow_signup`` is off, so a link rendered unconditionally walks every
+visitor into a dead end.
+
+Exposed as its own top-level key rather than folded into ``auth`` — the
+framework owns that block and a provider may not overwrite it.
+"""
+
+from __future__ import annotations
+
+from typing import TYPE_CHECKING
+
+if TYPE_CHECKING:
+    from starlette.requests import Request
+
+
+def users_shared_props(request: Request) -> dict:
+    """Whether local self-signup is currently accepted.
+
+    Runs on every request, so it only reads already-hydrated state. Defaults to
+    closed: if settings are missing, the safe answer is "no signup link" rather
+    than a link that 404s.
+    """
+    state = getattr(request.app.state, "users", None)
+    settings = getattr(state, "settings", None)
+    return {"signup": {"allowed": bool(getattr(settings, "allow_signup", False))}}