admin/mylegal-stage-law
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Changes

Browse Source 
Co-authored-by: renee-png <262607627+renee-png@users.noreply.github.com>
This commit is contained in:
gpt-engineer-app[bot]
2026-04-18 16:01:01 +00:00
co-authored by renee-png
parent 7a0be01cc8
commit 9f558fb41c
3 changed files with 98 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/routeTree.gen.ts
-9
View File
@@ -847,12 +847,3 @@ const rootRouteChildren: RootRouteChildren = {
export const routeTree = rootRouteImport
._addFileChildren(rootRouteChildren)
._addFileTypes<FileRouteTypes>()
import type { getRouter } from './router.tsx'
import type { createStart } from '@tanstack/react-start'
declare module '@tanstack/react-start' {
interface Register {
ssr: true
router: Awaited<ReturnType<typeof getRouter>>
}
}
src/routes/admin.users.tsx
+27 -24
View File
@@ -50,7 +50,7 @@ import {
TableRow,
} from "@/components/ui/table";
import { Badge } from "@/components/ui/badge";
import { Loader2, UserPlus, Trash2 } from "lucide-react";
import { Loader2, UserPlus, Trash2, KeyRound } from "lucide-react";
import { toast } from "sonner";
export const Route = createFileRoute("/admin/users")({
@@ -231,29 +231,32 @@ function UsersPage() {
/>
</TableCell>
<TableCell>
{!isSelf && (
<AlertDialog>
<AlertDialogTrigger asChild>
<Button variant="ghost" size="icon">
<Trash2 className="h-4 w-4 text-destructive" />
</Button>
</AlertDialogTrigger>
<AlertDialogContent>
<AlertDialogHeader>
<AlertDialogTitle>Delete user?</AlertDialogTitle>
<AlertDialogDescription>
This will permanently remove {u.email} and revoke their access.
</AlertDialogDescription>
</AlertDialogHeader>
<AlertDialogFooter>
<AlertDialogCancel>Cancel</AlertDialogCancel>
<AlertDialogAction onClick={() => handleDelete(u.id)}>
Delete
</AlertDialogAction>
</AlertDialogFooter>
</AlertDialogContent>
</AlertDialog>
)}
<div className="flex items-center justify-end gap-1">
<SetPasswordDialog userId={u.id} email={u.email} />
{!isSelf && (
<AlertDialog>
<AlertDialogTrigger asChild>
<Button variant="ghost" size="icon">
<Trash2 className="h-4 w-4 text-destructive" />
</Button>
</AlertDialogTrigger>
<AlertDialogContent>
<AlertDialogHeader>
<AlertDialogTitle>Delete user?</AlertDialogTitle>
<AlertDialogDescription>
This will permanently remove {u.email} and revoke their access.
</AlertDialogDescription>
</AlertDialogHeader>
<AlertDialogFooter>
<AlertDialogCancel>Cancel</AlertDialogCancel>
<AlertDialogAction onClick={() => handleDelete(u.id)}>
Delete
</AlertDialogAction>
</AlertDialogFooter>
</AlertDialogContent>
</AlertDialog>
)}
</div>
</TableCell>
</TableRow>
);
supabase/functions/admin-set-password/index.ts
+71
View File
@@ -0,0 +1,71 @@
// Admin-only edge function to set a user's password.
import { createClient } from "https://esm.sh/@supabase/supabase-js@2.49.4";
const corsHeaders = {
"Access-Control-Allow-Origin": "*",
"Access-Control-Allow-Headers": "authorization, x-client-info, apikey, content-type",
"Access-Control-Allow-Methods": "POST, OPTIONS",
};
Deno.serve(async (req) => {
if (req.method === "OPTIONS") return new Response(null, { headers: corsHeaders });
try {
const SUPABASE_URL = Deno.env.get("SUPABASE_URL")!;
const SERVICE_ROLE = Deno.env.get("SUPABASE_SERVICE_ROLE_KEY")!;
const ANON_KEY = Deno.env.get("SUPABASE_PUBLISHABLE_KEY") ?? Deno.env.get("SUPABASE_ANON_KEY")!;
const token = (req.headers.get("Authorization") ?? "").replace("Bearer ", "");
if (!token) {
return new Response(JSON.stringify({ error: "Missing auth" }), {
status: 401,
headers: { ...corsHeaders, "Content-Type": "application/json" },
});
}
const userClient = createClient(SUPABASE_URL, ANON_KEY, {
global: { headers: { Authorization: `Bearer ${token}` } },
});
const { data: userData } = await userClient.auth.getUser();
if (!userData.user) {
return new Response(JSON.stringify({ error: "Unauthorized" }), {
status: 401,
headers: { ...corsHeaders, "Content-Type": "application/json" },
});
}
const admin = createClient(SUPABASE_URL, SERVICE_ROLE);
const { data: isAdminData } = await admin.rpc("is_admin", { _user_id: userData.user.id });
if (!isAdminData) {
return new Response(JSON.stringify({ error: "Forbidden" }), {
status: 403,
headers: { ...corsHeaders, "Content-Type": "application/json" },
});
}
const { user_id, password } = (await req.json()) as { user_id: string; password: string };
if (!user_id || !password || typeof password !== "string" || password.length < 10) {
return new Response(
JSON.stringify({ error: "Password must be at least 10 characters" }),
{ status: 400, headers: { ...corsHeaders, "Content-Type": "application/json" } },
);
}
const { error } = await admin.auth.admin.updateUserById(user_id, { password });
if (error) {
return new Response(JSON.stringify({ error: error.message }), {
status: 400,
headers: { ...corsHeaders, "Content-Type": "application/json" },
});
}
return new Response(JSON.stringify({ ok: true }), {
headers: { ...corsHeaders, "Content-Type": "application/json" },
});
} catch (e) {
return new Response(JSON.stringify({ error: (e as Error).message }), {
status: 500,
headers: { ...corsHeaders, "Content-Type": "application/json" },
});
}
});