Implement rate limiting and enhance authentication flow

- Added rate limiting configuration for authentication endpoints, allowing customizable request limits via environment variables. - Updated authentication flow to utilize HttpRequest for cookie management, ensuring secure handling of refresh tokens. - Introduced a new endpoint to retrieve user subscription details. - Enhanced the handling of Telegram bot token validation to prevent errors with empty tokens. - Updated the application to serialize enums as strings for better documentation and compatibility with TypeScript. - Improved test coverage for new features and adjustments in command handlers.
2026-07-02 12:40:23 +03:00
parent ed07221ca5
commit 8067be3c35
106 changed files with 8823 additions and 172 deletions
@@ -0,0 +1,92 @@
+import { useState } from 'react'
+import { createFileRoute } from '@tanstack/react-router'
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query'
+import { useTranslation } from 'react-i18next'
+import { toast } from '@/shared/ui/toast-store'
+import { Button } from '@/shared/ui/button'
+import { Badge } from '@/shared/ui/badge'
+import { listRoles, deleteRole } from '@/features/admin/roles/api'
+import { RoleFormDialog } from '@/features/admin/roles/RoleFormDialog'
+import type { RoleDto } from '@/shared/api/types'
+
+export const Route = createFileRoute('/admin/roles')({ component: AdminRolesPage })
+
+function AdminRolesPage() {
+  const { t } = useTranslation()
+  const queryClient = useQueryClient()
+  const [editing, setEditing] = useState<RoleDto | null>(null)
+
+  const { data, isLoading, isError, refetch } = useQuery({ queryKey: ['admin-roles-page'], queryFn: listRoles })
+
+  const deleteMutation = useMutation({
+    mutationFn: deleteRole,
+    onSuccess: async () => {
+      toast.success(t('admin.roles.deleted'))
+      await queryClient.invalidateQueries({ queryKey: ['admin-roles-page'] })
+    },
+    onError: () => toast.error(t('auth.genericError')),
+  })
+
+  return (
+    <div className="flex flex-col gap-4">
+      <div className="flex justify-end">
+        <RoleFormDialog />
+      </div>
+
+      {isLoading && <p className="text-sm text-muted-foreground">…</p>}
+
+      {isError && (
+        <div className="flex items-center gap-2">
+          <p className="text-sm text-muted-foreground">{t('auth.genericError')}</p>
+          <Button variant="outline" size="sm" onClick={() => void refetch()}>
+            {t('activation.retry')}
+          </Button>
+        </div>
+      )}
+
+      {data && (
+        <table className="w-full text-left text-sm">
+          <thead>
+            <tr className="border-b border-border text-muted-foreground">
+              <th className="py-2 font-medium">{t('admin.roles.name')}</th>
+              <th className="py-2 font-medium">{t('admin.roles.maxConfigs')}</th>
+              <th className="py-2" />
+              <th className="py-2" />
+            </tr>
+          </thead>
+          <tbody>
+            {data.map((role) => (
+              <tr key={role.id} className="border-b border-border">
+                <td className="py-2">
+                  {role.name} {role.isSystem && <Badge variant="outline">{t('admin.roles.system')}</Badge>}
+                </td>
+                <td className="py-2">{role.maxConfigs < 0 ? t('configs.deviceLimitUnlimited') : role.maxConfigs}</td>
+                <td className="py-2 text-right">
+                  <Button size="sm" variant="outline" onClick={() => setEditing(role)}>
+                    {t('admin.roles.edit')}
+                  </Button>
+                </td>
+                <td className="py-2 text-right">
+                  {!role.isSystem && (
+                    <Button
+                      size="sm"
+                      variant="ghost"
+                      disabled={deleteMutation.isPending}
+                      onClick={() => {
+                        if (confirm(t('admin.roles.confirmDelete'))) deleteMutation.mutate(role.id)
+                      }}
+                    >
+                      {t('admin.roles.delete')}
+                    </Button>
+                  )}
+                </td>
+              </tr>
+            ))}
+          </tbody>
+        </table>
+      )}
+
+      {editing && <RoleFormDialog role={editing} open={!!editing} onOpenChange={(open) => !open && setEditing(null)} />}
+    </div>
+  )
+}