+
+
+ {create.isError && (
+
+
+ setLabel(e.target.value)}
+ maxLength={100}
+ />
+
+
+
+ setMaxUses(e.target.value)}
+ />
+
+
+
+
+
+ Could not create that invite.
+ )} +Loading...
+ )} + {!isLoading && invites.length === 0 && ( ++ No invites yet. Create one above to let someone join. +
+ )} + + {invites.map((invite) => { + const status = statusOf(invite) + const active = status.label === "Active" + return ( +
+
+ )
+ })}
+
+
+
+ {active && (
+ <>
+
+
+ {active && (
+
+ )}
+ + {invite.label || "Untitled invite"} +
+
+
+ {status.label}
+
+
+ {invite.usedCount}/{invite.maxUses} used
+
+ {invite.expiresAt && (
+
+ expires {new Date(invite.expiresAt).toLocaleDateString()}
+
+ )}
+
+ {invite.redemptions.length > 0 && (
+ + Used by {invite.redemptions.map((r) => r.email).join(", ")} +
+ )} +
+
+
+
+
+ {showQr === invite.id && (
+
+ {/* eslint-disable-next-line @next/next/no-img-element */}
+ 
+
+ )}
+
+ )}
+ Loading...
+ } + + return ( +
+ {error && (
+
+
+
+
+ ))}
+
+ )
+}
diff --git a/src/components/auth/reset-form.tsx b/src/components/auth/reset-form.tsx
new file mode 100644
index 0000000..0bbf5f3
--- /dev/null
+++ b/src/components/auth/reset-form.tsx
@@ -0,0 +1,98 @@
+"use client"
+
+import { useState } from "react"
+import { useRouter } from "next/navigation"
+import { Loader2 } from "lucide-react"
+import { Button } from "@/components/ui/button"
+import { Input } from "@/components/ui/input"
+import { Label } from "@/components/ui/label"
+
+export function ResetForm({ token }: { token: string }) {
+ const router = useRouter()
+ const [password, setPassword] = useState("")
+ const [confirm, setConfirm] = useState("")
+ const [error, setError] = useState("")
+ const [done, setDone] = useState(false)
+ const [loading, setLoading] = useState(false)
+
+ async function handleSubmit(e: React.FormEvent) {
+ e.preventDefault()
+ setError("")
+
+ if (password !== confirm) {
+ setError("Passwords do not match")
+ return
+ }
+
+ setLoading(true)
+ try {
+ const res = await fetch("/api/auth/reset", {
+ method: "POST",
+ headers: { "Content-Type": "application/json" },
+ body: JSON.stringify({ token, password }),
+ })
+ const data = await res.json()
+ if (!res.ok) {
+ setError(data.error || "Could not reset the password")
+ setLoading(false)
+ return
+ }
+ setDone(true)
+ setTimeout(() => router.push("/login"), 1500)
+ } catch {
+ setError("Something went wrong. Please try again.")
+ setLoading(false)
+ }
+ }
+
+ if (done) {
+ return (
+
+ {error}
+
+ )}
+
+ {users.map((user) => (
+
+
+
+
+
+
+
+ Owner
+
+ )}
+ {user.status === "SUSPENDED" && (
+
+ Suspended
+
+ )}
+ {!user.aiEnabled && (
+
+ AI off
+
+ )}
+
+ {user.name || "No name"}
+ {user.role === "OWNER" && ( +{user.email}
++ {user._count.drinks} drinks · {user._count.ratings} ratings ·{" "} + {user._count.menuScans} scans · joined{" "} + {new Date(user.createdAt).toLocaleDateString()} +
++ AI last 30 days: ${user.aiSpend30d.usd.toFixed(4)} over{" "} + {user.aiSpend30d.calls} calls + {user.role === "MEMBER" && ( + <> · daily cap ${(user.aiDailyBudgetUsd ?? 1).toFixed(2)} + )} +
+
+
+
+ {user.role !== "OWNER" && (
+ <>
+
+
+
+
+ {confirmDelete === user.id ? (
+ <>
+
+
+
+ ) : (
+
+ )}
+
+ )}
+
+
+ {confirmDelete === user.id && (
+ + This permanently removes their account, drinks, ratings, photos and + gateway key. It cannot be undone. +
+ )} + + {resetLink?.id === user.id && ( +
+
+ )}
+ + Single-use, valid 24 hours. Send it to them yourself - the app + cannot send email. +
+
+
+
+ {resetLink.url}
+
+
+ + Password updated. Taking you to sign in... +
+ ) + } + + return ( + + ) +} diff --git a/src/components/layout/more-menu.tsx b/src/components/layout/more-menu.tsx index 787075d..55a2440 100644 --- a/src/components/layout/more-menu.tsx +++ b/src/components/layout/more-menu.tsx @@ -3,6 +3,7 @@ import { useState } from "react" import Link from "next/link" import { usePathname } from "next/navigation" +import { useSession } from "next-auth/react" import { Camera, Sparkles, @@ -11,6 +12,8 @@ import { MoreHorizontal, X, BookOpen, + UserPlus, + Users, } from "lucide-react" import { cn } from "@/lib/utils" @@ -22,11 +25,21 @@ const moreItems = [ { href: "/settings", label: "Settings", icon: Settings }, ] +// Appended only for owners; the /admin layout 404s for everyone else. +const ADMIN_ITEMS = [ + { href: "/admin/invites", label: "Invites", icon: UserPlus }, + { href: "/admin/users", label: "People", icon: Users }, +] + export function MoreMenu() { const [open, setOpen] = useState(false) const pathname = usePathname() + const { data: session } = useSession() - const isActiveInMore = moreItems.some((item) => + const items = + session?.user?.role === "OWNER" ? [...moreItems, ...ADMIN_ITEMS] : moreItems + + const isActiveInMore = items.some((item) => pathname === item.href || pathname.startsWith(item.href + "/") ) @@ -57,7 +70,7 @@ export function MoreMenu() { {/* Menu */}
- {moreItems.map((item) => {
+ {items.map((item) => {
const isActive = pathname === item.href || pathname.startsWith(item.href + "/")
return (
+ {session?.user?.role === "OWNER" && (
+
+
+ )}
+
+ Admin +
+ {ADMIN_ITEMS.map((item) => { + const isActive = pathname.startsWith(item.href) + return ( + +
diff --git a/src/lib/auth.ts b/src/lib/auth.ts
index 044190a..1d0d099 100644
--- a/src/lib/auth.ts
+++ b/src/lib/auth.ts
@@ -9,7 +9,14 @@ import { rateLimit } from "@/lib/rate-limit"
* prefix, so `/share` also covers `/share/`. Everything else is private -
* see the `authorized` callback and the denylist matcher in src/middleware.ts.
*/
-const PUBLIC_ROUTES = ["/login", "/register", "/join", "/invite", "/share"]
+const PUBLIC_ROUTES = [
+ "/login",
+ "/register",
+ "/join",
+ "/invite",
+ "/reset",
+ "/share",
+]
// Email and password only. Google and GitHub were configured but never had
// credentials set and no account ever linked to them, and dropping them keeps
diff --git a/src/lib/origin.ts b/src/lib/origin.ts
new file mode 100644
index 0000000..3973fbe
--- /dev/null
+++ b/src/lib/origin.ts
@@ -0,0 +1,15 @@
+/**
+ * The public origin of this deployment.
+ *
+ * `request.url` carries the app's internal bind address (0.0.0.0:3000) because it
+ * runs behind a reverse proxy, so links built from it are unreachable. NEXTAUTH_URL
+ * is the configured public origin and cannot be influenced by a request header.
+ */
+export function publicOrigin(request: Request): string {
+ const configured = process.env.NEXTAUTH_URL
+ if (configured) return configured.replace(/\/$/, "")
+
+ const host = request.headers.get("x-forwarded-host") ?? request.headers.get("host")
+ const proto = request.headers.get("x-forwarded-proto") ?? "https"
+ return host ? `${proto}://${host}` : new URL(request.url).origin
+}