Track HiveGrid Cloud planning reference

hivegrid-cloud/apps/web/app/utils/data/.server/adminData.ts

@@ -0,0 +1,87 @@
+import { DefaultAdminRoles } from "~/application/dtos/shared/DefaultAdminRoles";
+import { DefaultPermission } from "~/application/dtos/shared/DefaultPermissions";
+import { TimeFunction } from "~/modules/metrics/services/.server/MetricTracker";
+import OnboardingService from "~/modules/onboarding/services/OnboardingService";
+import UrlUtils from "~/utils/app/UrlUtils";
+import { getAllEntities } from "~/utils/db/entities/entities.db.server";
+import { getAllEntityGroups } from "~/utils/db/entities/entityGroups.db.server";
+import { getMyGroups } from "~/utils/db/permissions/groups.db.server";
+import { getAllRolesWithoutPermissions } from "~/utils/db/permissions/roles.db.server";
+import { getPermissionsByUser, getUserRoleInAdmin } from "~/utils/db/permissions/userRoles.db.server";
+import { getTenantsForUser as getMyTenants } from "@toolctrl/db/auth-boundary.server";
+import { getAllTenantTypes } from "~/utils/db/tenants/tenantTypes.db.server";
+import { getUserTotpStatus } from "~/utils/db/users.db.server";
+import { enforceAdminMfa } from "~/utils/auth/mfa/enforcement.server";
+import { checkMfaStepUpState } from "~/utils/auth/mfa/step-up.server";
+import { promiseHash } from "~/utils/promises/promiseHash";
+import { getUserInfo, getUserSession } from "~/utils/session.server";
+import { AdminLoaderData } from "../useAdminData";
+import { getAuthUserWithoutPasswordById as getUser } from "@toolctrl/db/auth-boundary.server";
+import { TFunction } from "i18next";
+import { redirect } from "react-router";
+import { NOT_FOUND_ENVELOPE } from "~/utils/errors.server";
+
+export async function loadAdminData({ request, t }: { request: Request; t: TFunction }, time: TimeFunction) {
+  const userInfo = await time(getUserInfo(request), "getUserInfo");
+  const url = new URL(request.url);
+  if (UrlUtils.stripTrailingSlash(url.pathname) === `/admin`) {
+    throw Response.json(NOT_FOUND_ENVELOPE, { status: 404 });
+  }
+  const user = await time(getUser(userInfo?.userId), "getUser");
+  const redirectTo = url.pathname + url.search;
+  if (!userInfo || !user) {
+    let searchParams = new URLSearchParams([["redirect", redirectTo]]);
+    throw redirect(`/login?${searchParams}`);
+  }
+
+  if (!user.admin) {
+    throw Response.json({ error: t("admin.errors.adminOnly") }, { status: 401 });
+  }
+
+  const session = await time(getUserSession(request), "getUserSession");
+  const totpStatus = await time(getUserTotpStatus(user.id), "getUserTotpStatus");
+  const stepUp = checkMfaStepUpState(session, user.id);
+  const mfaEnforcement = enforceAdminMfa({
+    requestUrl: url,
+    userId: user.id,
+    isAdmin: Boolean(user.admin),
+    totpStatus,
+    stepUp,
+    redirectMode: "host-aware",
+  });
+  if (!mfaEnforcement.allowed) {
+    throw redirect(mfaEnforcement.redirectTo);
+  }
+
+  const myTenants = await time(getMyTenants(user.id), "getMyTenants");
+
+  const { allPermissions, superAdminRole, entities, entityGroups, allRoles, myGroups, onboardingSession } = await time(
+    promiseHash({
+      allPermissions: getPermissionsByUser(userInfo.userId, null),
+      superAdminRole: getUserRoleInAdmin(userInfo.userId, DefaultAdminRoles.SuperAdmin),
+      entities: getAllEntities({ tenantId: null }),
+      entityGroups: getAllEntityGroups(),
+      allRoles: getAllRolesWithoutPermissions("admin"),
+      myGroups: getMyGroups(user.id, null),
+      onboardingSession: OnboardingService.getUserActiveOnboarding({ userId: user.id, tenantId: null, request }),
+    }),
+    "loadAdminData.getDetails"
+  );
+  const data: AdminLoaderData = {
+    user,
+    myTenants,
+    currentTenant: null,
+    entities,
+    entityGroups,
+    // roles,
+    allRoles,
+    permissions: allPermissions.map((f) => f as DefaultPermission),
+    isSuperUser: !!superAdminRole,
+    isSuperAdmin: !!superAdminRole,
+    myGroups,
+    lng: user?.locale ?? userInfo.lng,
+    onboardingSession,
+    tenantTypes: await getAllTenantTypes(),
+  };
+  return data;
+}