Arnaud
eb99faf655
Webhooks, self-serve API keys, and BYOK AI provider keys had zero access gating -- any logged-in user, any tier. Adds users.isDeveloper (boolean, admin-toggled in admin/users/[id] alongside role/tier), checked via a single hasDeveloperAccess() (lib/permissions.ts) so a future subscription-tier auto-grant is a one-line change there, not a redesign across call sites. requireDeveloper() (lib/api-auth.ts) wraps requireSession() with a fresh isDeveloper check (same reasoning as requireAdmin re-querying role: session.user's cookieCache can be up to 5 minutes stale) and replaces requireSession in all 8 gated routes: webhooks CRUD + deliveries + redeliver, api-keys CRUD, ai-keys CRUD. Settings UI: the sidebar hides API Keys/Webhooks nav entries for non-developers; those pages and the BYOK section of Settings -> AI show a locked notice instead of the manager component when accessed directly. Migration grandfathers in anyone who already has a webhook, API key, or BYOK key row -- ships as a new gate on existing features, not a silent lockout of active integrations. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
56 lines
1.9 KiB
TypeScript
56 lines
1.9 KiB
TypeScript
import type { Metadata } from "next";
|
|
import { headers } from "next/headers";
|
|
import { auth } from "@/lib/auth/server";
|
|
import { db, webhooks, users, eq } from "@epicure/db";
|
|
import { WebhooksManager } from "@/components/settings/webhooks-manager";
|
|
import { DeveloperLockedNotice } from "@/components/settings/developer-locked-notice";
|
|
import { getMessages } from "@/lib/i18n/server";
|
|
|
|
export const metadata: Metadata = {};
|
|
|
|
export default async function WebhooksPage() {
|
|
const session = await auth.api.getSession({ headers: await headers() });
|
|
if (!session) return null;
|
|
const m = getMessages((session.user as { locale?: string }).locale);
|
|
|
|
const dbUser = (await db.select({ isDeveloper: users.isDeveloper }).from(users).where(eq(users.id, session.user.id)).limit(1))[0];
|
|
|
|
const rows = dbUser?.isDeveloper
|
|
? await db
|
|
.select({
|
|
id: webhooks.id,
|
|
url: webhooks.url,
|
|
events: webhooks.events,
|
|
active: webhooks.active,
|
|
createdAt: webhooks.createdAt,
|
|
})
|
|
.from(webhooks)
|
|
.where(eq(webhooks.userId, session.user.id))
|
|
: [];
|
|
|
|
return (
|
|
<div className="space-y-8">
|
|
<section className="rounded-xl border p-6 space-y-4">
|
|
<div>
|
|
<h2 className="font-semibold text-lg">{m.settings.webhooksPage.title}</h2>
|
|
<p className="text-sm text-muted-foreground mt-1">
|
|
{m.settings.webhooksPage.description}
|
|
</p>
|
|
</div>
|
|
{!dbUser?.isDeveloper && <DeveloperLockedNotice message={m.settings.developerLockedNotice} />}
|
|
{dbUser?.isDeveloper && (
|
|
<WebhooksManager
|
|
initialWebhooks={rows.map((w) => ({
|
|
id: w.id,
|
|
url: w.url,
|
|
events: w.events,
|
|
active: w.active,
|
|
createdAt: w.createdAt.toISOString(),
|
|
}))}
|
|
/>
|
|
)}
|
|
</section>
|
|
</div>
|
|
);
|
|
}
|