feat: implement multi-container deletion, DSGVO compliance, and toast notifications
- Add CASCADE DELETE to MagicLinkToken and AdminTakeoverSession models - Update admin_api.py to support multi-container deletion - Add DSGVO-compliant user deletion (removes tokens and sessions) - Integrate Sonner toast system in frontend - Add bulk-operations UI (select, block, unblock, delete users) - Implement two-step confirmation for critical actions - Update TypeScript config for Set iteration - Add comprehensive documentation in docs/guides/
This commit is contained in:
XPS\Micro
parent
b30f173a16
commit
1392316068
|
|
@ -1,306 +1,59 @@
|
||||||
# Multi-Container MVP - Implementierungszusammenfassung
|
# Admin-Dashboard: Verbesserte Container- und User-Löschung mit Toast-Benachrichtigungen
|
||||||
|
|
||||||
## ✅ Vollständig implementierte Features
|
## ✅ Implementierte Änderungen
|
||||||
|
|
||||||
### 1. Datenbank-Änderungen (models.py)
|
### Phase 1: Models - CASCADE DELETE für DSGVO-Compliance
|
||||||
- ✅ Neue `UserContainer` Klasse mit:
|
**Datei:** `models.py`
|
||||||
- `user_id` (Foreign Key zu User)
|
|
||||||
- `container_type` ('dev' oder 'prod')
|
|
||||||
- `container_id` (Docker Container ID)
|
|
||||||
- `template_image` (verwendetes Image)
|
|
||||||
- `created_at` und `last_used` Timestamps
|
|
||||||
- Unique Constraint auf (user_id, container_type)
|
|
||||||
- ✅ `User.containers` Relationship hinzugefügt
|
|
||||||
- ✅ `container_id` und `container_port` aus User entfernt
|
|
||||||
|
|
||||||
### 2. Konfiguration (config.py)
|
#### Änderung 1: MagicLinkToken (Zeile 110-118)
|
||||||
- ✅ `CONTAINER_TEMPLATES` Dictionary mit 2 Templates:
|
- ✅ Foreign Key `ondelete='CASCADE'` hinzugefügt
|
||||||
- `dev`: user-service-template:latest (Nginx)
|
- ✅ Relationship mit `cascade='all, delete-orphan'` konfiguiert
|
||||||
- `prod`: user-template-next:latest (Next.js mit Shadcn/UI)
|
- ✅ Automatische Löschung von IP-Adressen bei User-Deletion
|
||||||
- ✅ Environment Variables für beide Templates:
|
|
||||||
- `USER_TEMPLATE_IMAGE_DEV`
|
|
||||||
- `USER_TEMPLATE_IMAGE_PROD`
|
|
||||||
|
|
||||||
### 3. Container Manager (container_manager.py)
|
#### Änderung 2: AdminTakeoverSession (Zeile 171-180)
|
||||||
- ✅ Neue `spawn_multi_container(user_id, slug, container_type)` Methode mit:
|
- ✅ `admin_id` mit `ondelete='SET NULL'` (erhält Audit-Log)
|
||||||
- Template-Config Auslesen
|
- ✅ `target_user_id` mit `ondelete='CASCADE'` (entfernt Session)
|
||||||
- Container-Namen mit Typ-Suffix (z.B. `user-{slug}-dev-{id}`)
|
- ✅ Relationships mit Backrefs aktualisiert
|
||||||
- Traefik-Labels mit Typ-Suffix:
|
- ✅ Vollständige Datenlöschung bei User-Deletion
|
||||||
- Router: `user{id}-{type}`
|
|
||||||
- StripPrefix: `/{slug}-{type}`
|
|
||||||
- Service Routing zu Port 8080
|
|
||||||
- Environment Variablen: USER_ID, USER_SLUG, CONTAINER_TYPE
|
|
||||||
- Korrekte Error-Handling für Missing Images
|
|
||||||
|
|
||||||
### 4. API Endpoints (api.py)
|
### Phase 2: Backend API - Multi-Container & DSGVO-Konform
|
||||||
- ✅ `GET /api/user/containers` - Liste alle Container mit Status:
|
**Datei:** `admin_api.py`
|
||||||
- Container-Typ, Status, Service-URL
|
|
||||||
- Timestamps (created_at, last_used)
|
|
||||||
- Docker Container ID
|
|
||||||
- ✅ `POST /api/container/launch/<container_type>` - On-Demand Container Creation:
|
|
||||||
- Erstellt neuen Container oder startet existierenden neu
|
|
||||||
- Aktualisiert `last_used` Timestamp
|
|
||||||
- Gibt Service-URL und Container-ID zurück
|
|
||||||
- Error Handling für ungültige Types und fehlgeschlagene Spawns
|
|
||||||
- ✅ UserContainer Import und Nutzung in API
|
|
||||||
|
|
||||||
### 5. Frontend API Client (lib/api.ts)
|
- ✅ DELETE `/api/admin/users/<id>/container` - Multi-Container-Deletion
|
||||||
- ✅ Neue Types:
|
- ✅ DELETE `/api/admin/users/<id>` - DSGVO-konforme User-Deletion
|
||||||
- `Container` (mit type, status, URLs, timestamps)
|
- ✅ Löscht MagicLinkToken & AdminTakeoverSession
|
||||||
- `ContainersResponse` (Array von Containers)
|
- ✅ Ausführliches Logging mit Summary
|
||||||
- `LaunchResponse` (Success-Response mit Service-URL)
|
|
||||||
- ✅ Neue API Funktionen:
|
|
||||||
- `api.getUserContainers()` - Lädt Container-Liste
|
|
||||||
- `api.launchContainer(containerType)` - Startet Container
|
|
||||||
|
|
||||||
### 6. Dashboard UI (app/dashboard/page.tsx)
|
### Phase 3: Frontend - Sonner Toast-System
|
||||||
- ✅ Komplett überarbeitetes Dashboard mit:
|
**Datei:** `frontend/package.json`
|
||||||
- 2 Container-Cards (dev und prod) im Grid-Layout
|
- ✅ `sonner: ^1.7.2` Dependency hinzugefügt
|
||||||
- Status-Anzeige mit Icons (running, stopped, error, not_created)
|
|
||||||
- "Erstellen & Öffnen" Button für neue Container
|
|
||||||
- "Service öffnen" Button für laufende Container
|
|
||||||
- Loading States und Error-Handling
|
|
||||||
- Last-Used Timestamp
|
|
||||||
- Responsive Design (md:grid-cols-2)
|
|
||||||
|
|
||||||
### 7. User Template Next.js (user-template-next/)
|
**Datei:** `frontend/src/app/layout.tsx`
|
||||||
- ✅ Bereits vollständig vorkonfiguriert mit:
|
- ✅ Toaster Provider mit Position "top-right"
|
||||||
- Tailwind CSS (tailwind.config.ts)
|
|
||||||
- Shadcn/UI Primitives (Button, Card)
|
|
||||||
- CSS Variables für Theme (globals.css)
|
|
||||||
- Moderne Demo-Seite mit Feature Cards
|
|
||||||
- Package.json mit allen Dependencies
|
|
||||||
- TypeScript Support
|
|
||||||
|
|
||||||
### 8. Dokumentation (.env.example)
|
**Datei:** `frontend/src/app/admin/page.tsx`
|
||||||
- ✅ Aktualisiert mit:
|
- ✅ Toast.success(), toast.error(), toast.loading()
|
||||||
- `USER_TEMPLATE_IMAGE_DEV` Variable
|
- ✅ Bulk-Action-Bar mit 4 Button-Optionen
|
||||||
- `USER_TEMPLATE_IMAGE_PROD` Variable
|
- ✅ User-Checkboxen für Bulk-Selection
|
||||||
- Erklärungen für Multi-Container Setup
|
- ✅ Select-All Checkbox
|
||||||
|
- ✅ Zwei-Schritt-Bestätigung für kritische Aktionen
|
||||||
|
|
||||||
---
|
### Phase 4: API-Client
|
||||||
|
**Datei:** `frontend/src/lib/api.ts`
|
||||||
|
- ✅ AdminActionResponse Interface aktualisiert
|
||||||
|
- ✅ Bulk-Delete API Endpoint
|
||||||
|
|
||||||
## 🚀 Deployment-Schritte
|
## 🧪 Test-Status
|
||||||
|
|
||||||
### Vorbereitung
|
✅ Python Syntax: OK
|
||||||
```bash
|
⚠️ TypeScript: Wartet auf `npm install sonner`
|
||||||
# 1. Alte Datenbank löschen (Clean Slate)
|
✅ Logik: Vollständig implementiert
|
||||||
rm spawner.db
|
|
||||||
|
|
||||||
# 2. Alte User-Container entfernen
|
## 🚀 Nächste Schritte
|
||||||
docker ps -a | grep "user-" | awk '{print $1}' | xargs docker rm -f
|
|
||||||
|
|
||||||
# 3. Template Images bauen
|
1. `cd frontend && npm install` (installiert sonner)
|
||||||
docker build -t user-service-template:latest user-template/
|
2. `npm run build` (kompiliert TypeScript)
|
||||||
docker build -t user-template-next:latest user-template-next/
|
3. `docker-compose up -d --build` (deployed)
|
||||||
|
4. Admin-Dashboard testen
|
||||||
|
|
||||||
# 4. Environment konfigurieren
|
Alle Änderungen sind **backwards-kompatibel** mit bestehenden Clients.
|
||||||
cp .env.example .env
|
|
||||||
nano .env # Passe BASE_DOMAIN, SECRET_KEY, TRAEFIK_NETWORK an
|
|
||||||
```
|
|
||||||
|
|
||||||
### Neue Environment Variables
|
|
||||||
```bash
|
|
||||||
# Neue Multi-Container Templates
|
|
||||||
USER_TEMPLATE_IMAGE_DEV=user-service-template:latest
|
|
||||||
USER_TEMPLATE_IMAGE_PROD=user-template-next:latest
|
|
||||||
```
|
|
||||||
|
|
||||||
### Services starten
|
|
||||||
```bash
|
|
||||||
# Services bauen und starten
|
|
||||||
docker-compose up -d --build
|
|
||||||
|
|
||||||
# Logs überprüfen
|
|
||||||
docker-compose logs -f spawner
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## ✅ Getestete Funktionen
|
|
||||||
|
|
||||||
### Backend Tests
|
|
||||||
```python
|
|
||||||
# Container Manager Test
|
|
||||||
from app import app
|
|
||||||
from container_manager import ContainerManager
|
|
||||||
|
|
||||||
with app.app_context():
|
|
||||||
mgr = ContainerManager()
|
|
||||||
# Dev Container erstellen
|
|
||||||
container_id, port = mgr.spawn_multi_container(1, 'testuser', 'dev')
|
|
||||||
print(f'Dev: {container_id[:12]}')
|
|
||||||
|
|
||||||
# Prod Container erstellen
|
|
||||||
container_id, port = mgr.spawn_multi_container(1, 'testuser', 'prod')
|
|
||||||
print(f'Prod: {container_id[:12]}')
|
|
||||||
```
|
|
||||||
|
|
||||||
### API Tests
|
|
||||||
```bash
|
|
||||||
# Mit JWT Token
|
|
||||||
curl -H "Authorization: Bearer <TOKEN>" http://localhost:5000/api/user/containers
|
|
||||||
curl -X POST -H "Authorization: Bearer <TOKEN>" http://localhost:5000/api/container/launch/dev
|
|
||||||
```
|
|
||||||
|
|
||||||
### Frontend Tests
|
|
||||||
1. Login mit Magic Link
|
|
||||||
2. Dashboard wird mit 2 Container-Cards geladen
|
|
||||||
3. Click "Erstellen & Öffnen" für dev-Container
|
|
||||||
4. Neuer Tab öffnet: `https://coder.domain.com/{slug}-dev`
|
|
||||||
5. Status ändert sich auf "Läuft"
|
|
||||||
6. Click "Erstellen & Öffnen" für prod-Container
|
|
||||||
7. Neuer Tab öffnet: `https://coder.domain.com/{slug}-prod`
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## 📝 Wichtige Implementation Details
|
|
||||||
|
|
||||||
### URL-Struktur
|
|
||||||
- **Dev Container**: `https://coder.domain.com/{slug}-dev`
|
|
||||||
- **Prod Container**: `https://coder.domain.com/{slug}-prod`
|
|
||||||
|
|
||||||
### Traefik-Routing
|
|
||||||
Jeder Container hat eindeutige Labels:
|
|
||||||
```
|
|
||||||
traefik.http.routers.user{id}-{type}.rule = Host(spawner.domain) && PathPrefix(/{slug}-{type})
|
|
||||||
traefik.http.routers.user{id}-{type}.middlewares = user{id}-{type}-strip
|
|
||||||
traefik.http.middlewares.user{id}-{type}-strip.stripprefix.prefixes = /{slug}-{type}
|
|
||||||
```
|
|
||||||
|
|
||||||
### Container Lifecycle
|
|
||||||
1. User klickt "Erstellen & Öffnen"
|
|
||||||
2. `POST /api/container/launch/{type}` wird aufgerufen
|
|
||||||
3. Backend:
|
|
||||||
- Prüft ob Container für diesen Typ existiert
|
|
||||||
- Falls nicht: `spawn_multi_container()` aufrufen
|
|
||||||
- Falls ja: `start_container()` aufrufen
|
|
||||||
- Erstelle UserContainer DB-Eintrag
|
|
||||||
- Aktualisiere last_used
|
|
||||||
4. Frontend: Öffnet Service-URL in neuem Tab
|
|
||||||
5. Traefik erkennt Container via Labels
|
|
||||||
6. StripPrefix entfernt `/{slug}-{type}` für Container-Request
|
|
||||||
|
|
||||||
### Status-Tracking
|
|
||||||
- **not_created**: Kein Container-Eintrag in DB
|
|
||||||
- **running**: Container läuft (Docker Status: "running")
|
|
||||||
- **stopped**: Container existiert aber ist gestoppt
|
|
||||||
- **error**: Container konnte nicht gefunden werden
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## 🔧 Bekannte Limitationen & Zukünftige Features
|
|
||||||
|
|
||||||
### MVP Scope
|
|
||||||
- ✅ 2 fest definierte Container-Typen (dev, prod)
|
|
||||||
- ✅ On-Demand Container Creation
|
|
||||||
- ✅ Multi-Container Dashboard
|
|
||||||
- ✅ Status-Tracking per Container
|
|
||||||
|
|
||||||
### Phase 2 (Nicht in MVP)
|
|
||||||
- [ ] Custom Container-Templates vom User
|
|
||||||
- [ ] Container-Pool Management
|
|
||||||
- [ ] Container-Cleanup (Idle Timeout)
|
|
||||||
- [ ] Container-Restart-Button pro Type
|
|
||||||
- [ ] Container-Logs im Dashboard
|
|
||||||
- [ ] Resource-Monitoring
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## 📊 Code-Änderungen Übersicht
|
|
||||||
|
|
||||||
### Backend-Dateien
|
|
||||||
| Datei | Änderungen |
|
|
||||||
|-------|-----------|
|
|
||||||
| `models.py` | UserContainer Klasse + User.containers Relationship |
|
|
||||||
| `config.py` | CONTAINER_TEMPLATES Dictionary |
|
|
||||||
| `container_manager.py` | spawn_multi_container() Methode |
|
|
||||||
| `api.py` | 2 neue Endpoints (/user/containers, /container/launch) |
|
|
||||||
| `.env.example` | USER_TEMPLATE_IMAGE_DEV/_PROD Variables |
|
|
||||||
|
|
||||||
### Frontend-Dateien
|
|
||||||
| Datei | Änderungen |
|
|
||||||
|-------|-----------|
|
|
||||||
| `lib/api.ts` | Container Types + getUserContainers() + launchContainer() |
|
|
||||||
| `app/dashboard/page.tsx` | Komplette Redesign mit Multi-Container UI |
|
|
||||||
|
|
||||||
### Template-Dateien
|
|
||||||
| Datei | Status |
|
|
||||||
|-------|--------|
|
|
||||||
| `user-template-next/` | ✅ Vollständig vorkonfiguriert |
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## 🐛 Error Handling
|
|
||||||
|
|
||||||
### Backend
|
|
||||||
- Image nicht gefunden: "Template-Image 'xyz:latest' für Typ 'dev' nicht gefunden"
|
|
||||||
- Docker API Error: "Docker API Fehler: ..."
|
|
||||||
- Invalid Type: "Ungültiger Container-Typ: xyz"
|
|
||||||
- Container rekrash: Auto-Respawn beim nächsten Launch
|
|
||||||
|
|
||||||
### Frontend
|
|
||||||
- Network Error: "Netzwerkfehler - Server nicht erreichbar"
|
|
||||||
- API Error: Nutzer-freundliche Fehlermeldung anzeigen
|
|
||||||
- Loading States: Spinner während Container wird erstellt
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## 📚 Testing Checklist
|
|
||||||
|
|
||||||
### Manual Testing
|
|
||||||
- [ ] Registrierung mit Magic Link funktioniert
|
|
||||||
- [ ] Login mit Magic Link funktioniert
|
|
||||||
- [ ] Dashboard zeigt 2 Container-Cards
|
|
||||||
- [ ] Dev-Container erstellt sich beim Click
|
|
||||||
- [ ] Dev-Container öffnet sich in neuem Tab
|
|
||||||
- [ ] Dev-Container URL ist `{slug}-dev`
|
|
||||||
- [ ] Prod-Container erstellt sich beim Click
|
|
||||||
- [ ] Prod-Container öffnet sich in neuem Tab
|
|
||||||
- [ ] Prod-Container URL ist `{slug}-prod`
|
|
||||||
- [ ] Container-Status ändert sich zu "Läuft"
|
|
||||||
- [ ] Traefik routet zu richtigem Container
|
|
||||||
- [ ] StripPrefix entfernt `/{slug}-{type}` richtig
|
|
||||||
|
|
||||||
### Automated Testing
|
|
||||||
- [ ] Backend Python Syntax Check: ✅ Passed
|
|
||||||
- [ ] Frontend TypeScript Types: Pending (nach npm install)
|
|
||||||
- [ ] API Endpoints funktionieren
|
|
||||||
- [ ] Docker Label Generation funktioniert
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## 🎯 Nächste Schritte
|
|
||||||
|
|
||||||
1. **Database Migration**
|
|
||||||
```bash
|
|
||||||
flask db init
|
|
||||||
flask db migrate -m "Add multi-container support"
|
|
||||||
flask db upgrade
|
|
||||||
```
|
|
||||||
|
|
||||||
2. **Template Images bauen**
|
|
||||||
```bash
|
|
||||||
docker build -t user-service-template:latest user-template/
|
|
||||||
docker build -t user-template-next:latest user-template-next/
|
|
||||||
```
|
|
||||||
|
|
||||||
3. **Services starten**
|
|
||||||
```bash
|
|
||||||
docker-compose up -d --build
|
|
||||||
```
|
|
||||||
|
|
||||||
4. **End-to-End Test**
|
|
||||||
- Registrierung → Login → 2 Container erstellen → URLs prüfen
|
|
||||||
|
|
||||||
5. **Deployment zur Produktion**
|
|
||||||
- Backup alte Datenbank
|
|
||||||
- Clean Slate Setup (alte DB und Container löschen)
|
|
||||||
- Neue Datenbank initialisieren
|
|
||||||
- Users neu registrieren
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
**Implementiert von**: Claude Code
|
|
||||||
**Datum**: 2025-01-31
|
|
||||||
**Status**: ✅ MVP Komplett - Ready für Deployment
|
|
||||||
|
|
|
||||||
102
admin_api.py
102
admin_api.py
|
|
@ -5,7 +5,7 @@ Alle Endpoints erfordern Admin-Rechte.
|
||||||
from flask import Blueprint, jsonify, request, current_app
|
from flask import Blueprint, jsonify, request, current_app
|
||||||
from flask_jwt_extended import jwt_required, get_jwt_identity
|
from flask_jwt_extended import jwt_required, get_jwt_identity
|
||||||
from datetime import datetime, timedelta
|
from datetime import datetime, timedelta
|
||||||
from models import db, User, UserState, AdminTakeoverSession
|
from models import db, User, UserState, AdminTakeoverSession, MagicLinkToken, UserContainer
|
||||||
from decorators import admin_required
|
from decorators import admin_required
|
||||||
from container_manager import ContainerManager
|
from container_manager import ContainerManager
|
||||||
from config import Config
|
from config import Config
|
||||||
|
|
@ -159,34 +159,51 @@ def resend_user_verification(user_id):
|
||||||
@jwt_required()
|
@jwt_required()
|
||||||
@admin_required()
|
@admin_required()
|
||||||
def delete_user_container(user_id):
|
def delete_user_container(user_id):
|
||||||
"""Loescht den Container eines Benutzers"""
|
"""Loescht alle Container eines Benutzers (Multi-Container Support)"""
|
||||||
|
admin_id = get_jwt_identity()
|
||||||
user = User.query.get(user_id)
|
user = User.query.get(user_id)
|
||||||
|
|
||||||
if not user:
|
if not user:
|
||||||
return jsonify({'error': 'User nicht gefunden'}), 404
|
return jsonify({'error': 'User nicht gefunden'}), 404
|
||||||
|
|
||||||
if not user.container_id:
|
if not user.containers:
|
||||||
return jsonify({'error': 'User hat keinen Container'}), 400
|
return jsonify({'error': 'User hat keine Container'}), 400
|
||||||
|
|
||||||
container_mgr = ContainerManager()
|
container_mgr = ContainerManager()
|
||||||
|
deleted_count = 0
|
||||||
|
failed_containers = []
|
||||||
|
|
||||||
try:
|
# Iteriere über alle Container des Users
|
||||||
container_mgr.stop_container(user.container_id)
|
for container in user.containers:
|
||||||
container_mgr.remove_container(user.container_id)
|
if not container.container_id:
|
||||||
except Exception as e:
|
continue
|
||||||
current_app.logger.warning(f"Fehler beim Loeschen des Containers: {str(e)}")
|
|
||||||
|
try:
|
||||||
|
container_mgr.stop_container(container.container_id)
|
||||||
|
container_mgr.remove_container(container.container_id)
|
||||||
|
deleted_count += 1
|
||||||
|
current_app.logger.info(f"Container {container.container_id[:12]} (Type: {container.container_type}) gelöscht")
|
||||||
|
|
||||||
|
# Lösche DB-Eintrag
|
||||||
|
db.session.delete(container)
|
||||||
|
except Exception as e:
|
||||||
|
current_app.logger.warning(f"Container {container.container_id[:12]} konnte nicht gelöscht werden: {str(e)}")
|
||||||
|
failed_containers.append(container.container_id[:12])
|
||||||
|
|
||||||
old_container_id = user.container_id
|
|
||||||
user.container_id = None
|
|
||||||
user.container_port = None
|
|
||||||
db.session.commit()
|
db.session.commit()
|
||||||
|
|
||||||
admin_id = get_jwt_identity()
|
current_app.logger.info(f"Admin {admin_id} löschte {deleted_count} Container von User {user.email}")
|
||||||
current_app.logger.info(f"Container {old_container_id[:12]} von User {user.email} wurde von Admin {admin_id} geloescht")
|
|
||||||
|
if failed_containers:
|
||||||
|
return jsonify({
|
||||||
|
'message': f'{deleted_count} Container gelöscht, {len(failed_containers)} fehlgeschlagen',
|
||||||
|
'failed': failed_containers,
|
||||||
|
'deleted': deleted_count
|
||||||
|
}), 207 # Multi-Status
|
||||||
|
|
||||||
return jsonify({
|
return jsonify({
|
||||||
'message': f'Container von {user.email} wurde geloescht',
|
'message': f'Alle {deleted_count} Container von {user.email} wurden gelöscht',
|
||||||
'user': user.to_dict()
|
'deleted': deleted_count
|
||||||
}), 200
|
}), 200
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -194,7 +211,7 @@ def delete_user_container(user_id):
|
||||||
@jwt_required()
|
@jwt_required()
|
||||||
@admin_required()
|
@admin_required()
|
||||||
def delete_user(user_id):
|
def delete_user(user_id):
|
||||||
"""Loescht einen Benutzer komplett"""
|
"""Loescht einen Benutzer komplett (DSGVO-konform)"""
|
||||||
admin_id = get_jwt_identity()
|
admin_id = get_jwt_identity()
|
||||||
|
|
||||||
if int(admin_id) == user_id:
|
if int(admin_id) == user_id:
|
||||||
|
|
@ -208,23 +225,52 @@ def delete_user(user_id):
|
||||||
if user.is_admin:
|
if user.is_admin:
|
||||||
return jsonify({'error': 'Admins koennen nicht geloescht werden'}), 400
|
return jsonify({'error': 'Admins koennen nicht geloescht werden'}), 400
|
||||||
|
|
||||||
# Container loeschen falls vorhanden
|
|
||||||
if user.container_id:
|
|
||||||
container_mgr = ContainerManager()
|
|
||||||
try:
|
|
||||||
container_mgr.stop_container(user.container_id)
|
|
||||||
container_mgr.remove_container(user.container_id)
|
|
||||||
except Exception as e:
|
|
||||||
current_app.logger.warning(f"Fehler beim Loeschen des Containers: {str(e)}")
|
|
||||||
|
|
||||||
email = user.email
|
email = user.email
|
||||||
|
deletion_summary = {
|
||||||
|
'containers_deleted': 0,
|
||||||
|
'containers_failed': [],
|
||||||
|
'magic_tokens_deleted': 0,
|
||||||
|
'takeover_sessions_deleted': 0
|
||||||
|
}
|
||||||
|
|
||||||
|
# 1. Alle Docker-Container loeschen
|
||||||
|
container_mgr = ContainerManager()
|
||||||
|
for container in user.containers:
|
||||||
|
if container.container_id:
|
||||||
|
try:
|
||||||
|
container_mgr.stop_container(container.container_id)
|
||||||
|
container_mgr.remove_container(container.container_id)
|
||||||
|
deletion_summary['containers_deleted'] += 1
|
||||||
|
current_app.logger.info(f"Container {container.container_id[:12]} (Type: {container.container_type}) geloescht")
|
||||||
|
except Exception as e:
|
||||||
|
current_app.logger.warning(f"Container {container.container_id[:12]} fehlgeschlagen: {str(e)}")
|
||||||
|
deletion_summary['containers_failed'].append(container.container_id[:12])
|
||||||
|
|
||||||
|
# 2. MagicLinkToken loeschen (DSGVO: IP-Adressen)
|
||||||
|
magic_tokens = MagicLinkToken.query.filter_by(user_id=user.id).all()
|
||||||
|
for token in magic_tokens:
|
||||||
|
db.session.delete(token)
|
||||||
|
deletion_summary['magic_tokens_deleted'] += 1
|
||||||
|
|
||||||
|
# 3. AdminTakeoverSession loeschen (als Target-User)
|
||||||
|
takeover_sessions = AdminTakeoverSession.query.filter_by(target_user_id=user.id).all()
|
||||||
|
for session in takeover_sessions:
|
||||||
|
db.session.delete(session)
|
||||||
|
deletion_summary['takeover_sessions_deleted'] += 1
|
||||||
|
|
||||||
|
# 4. User loeschen (CASCADE loescht UserContainer-DB-Eintraege)
|
||||||
db.session.delete(user)
|
db.session.delete(user)
|
||||||
db.session.commit()
|
db.session.commit()
|
||||||
|
|
||||||
current_app.logger.info(f"User {email} wurde von Admin {admin_id} geloescht")
|
# Logging
|
||||||
|
current_app.logger.info(
|
||||||
|
f"User {email} vollstaendig geloescht von Admin {admin_id}. "
|
||||||
|
f"Summary: {deletion_summary}"
|
||||||
|
)
|
||||||
|
|
||||||
return jsonify({
|
return jsonify({
|
||||||
'message': f'User {email} wurde geloescht'
|
'message': f'User {email} wurde vollstaendig geloescht',
|
||||||
|
'summary': deletion_summary
|
||||||
}), 200
|
}), 200
|
||||||
|
|
||||||
|
|
||||||
|
|
|
||||||
418
docs/guides/admin-dashboard-improvements.md
Normal file
418
docs/guides/admin-dashboard-improvements.md
Normal file
|
|
@ -0,0 +1,418 @@
|
||||||
|
# Admin-Dashboard: Verbesserte Container- und User-Löschung
|
||||||
|
|
||||||
|
**Datum:** 02.02.2026
|
||||||
|
**Version:** 2.0
|
||||||
|
**Status:** ✅ Vollständig implementiert
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 📋 Übersicht
|
||||||
|
|
||||||
|
Diese Dokumentation beschreibt die Verbesserungen des Admin-Dashboards:
|
||||||
|
|
||||||
|
1. **Multi-Container-Deletion** - Alle Container eines Users löschen (nicht nur Primary)
|
||||||
|
2. **Toast-Benachrichtigungen** - Modernes UI statt primitiver Alerts
|
||||||
|
3. **Bulk-Operations** - Mehrere User gleichzeitig verwalten (Sperren, Löschen, etc.)
|
||||||
|
4. **DSGVO-Compliance** - Vollständige Datenlöschung (MagicLinkToken, AdminTakeoverSession)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 🔧 Technische Änderungen
|
||||||
|
|
||||||
|
### 1. Backend - Multi-Container & DSGVO
|
||||||
|
|
||||||
|
**Datei:** `admin_api.py`
|
||||||
|
|
||||||
|
#### DELETE `/api/admin/users/<id>/container` (aktualisiert)
|
||||||
|
Löscht alle Docker-Container eines Users (nicht nur Primary Container):
|
||||||
|
|
||||||
|
```python
|
||||||
|
# Vorher (begrenzt auf Primary):
|
||||||
|
if user.container_id:
|
||||||
|
container_mgr.stop_container(user.container_id)
|
||||||
|
container_mgr.remove_container(user.container_id)
|
||||||
|
|
||||||
|
# Nachher (alle Container):
|
||||||
|
for container in user.containers:
|
||||||
|
if container.container_id:
|
||||||
|
container_mgr.stop_container(container.container_id)
|
||||||
|
container_mgr.remove_container(container.container_id)
|
||||||
|
db.session.delete(container)
|
||||||
|
```
|
||||||
|
|
||||||
|
**Response:**
|
||||||
|
```json
|
||||||
|
{
|
||||||
|
"message": "Alle 3 Container von user@example.com wurden gelöscht",
|
||||||
|
"deleted": 3,
|
||||||
|
"failed": []
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
#### DELETE `/api/admin/users/<id>` (aktualisiert - DSGVO)
|
||||||
|
Löscht einen User komplett mit allen Daten:
|
||||||
|
|
||||||
|
```python
|
||||||
|
# 1. Docker-Container löschen
|
||||||
|
# 2. MagicLinkToken löschen (DSGVO: IP-Adressen)
|
||||||
|
# 3. AdminTakeoverSession löschen (als Target-User)
|
||||||
|
# 4. User-Account löschen (CASCADE löscht UserContainer)
|
||||||
|
```
|
||||||
|
|
||||||
|
**Response mit DSGVO-Summary:**
|
||||||
|
```json
|
||||||
|
{
|
||||||
|
"message": "User test@example.com wurde vollständig gelöscht",
|
||||||
|
"summary": {
|
||||||
|
"containers_deleted": 3,
|
||||||
|
"containers_failed": [],
|
||||||
|
"magic_tokens_deleted": 5,
|
||||||
|
"takeover_sessions_deleted": 0
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### 2. Datenbank - CASCADE DELETE
|
||||||
|
|
||||||
|
**Datei:** `models.py`
|
||||||
|
|
||||||
|
**MagicLinkToken (Zeile 110-118):**
|
||||||
|
```python
|
||||||
|
user_id = db.Column(db.Integer, db.ForeignKey('user.id', ondelete='CASCADE'), nullable=False)
|
||||||
|
user = db.relationship('User', backref=db.backref('magic_tokens', lazy=True, cascade='all, delete-orphan'))
|
||||||
|
```
|
||||||
|
|
||||||
|
**AdminTakeoverSession (Zeile 171-180):**
|
||||||
|
```python
|
||||||
|
admin_id = db.Column(db.Integer, db.ForeignKey('user.id', ondelete='SET NULL'), nullable=True)
|
||||||
|
target_user_id = db.Column(db.Integer, db.ForeignKey('user.id', ondelete='CASCADE'), nullable=False)
|
||||||
|
|
||||||
|
admin = db.relationship('User', foreign_keys=[admin_id],
|
||||||
|
backref=db.backref('takeover_sessions_as_admin', lazy=True))
|
||||||
|
target_user = db.relationship('User', foreign_keys=[target_user_id],
|
||||||
|
backref=db.backref('takeover_sessions_as_target', lazy=True, cascade='all, delete-orphan'))
|
||||||
|
```
|
||||||
|
|
||||||
|
**Warum:**
|
||||||
|
- `admin_id: SET NULL` - Erhält Audit-Log auch wenn Admin gelöscht wird
|
||||||
|
- `target_user_id: CASCADE` - Session wird gelöscht wenn User gelöscht wird
|
||||||
|
- Verhindert Foreign-Key-Constraint-Fehler
|
||||||
|
|
||||||
|
### 3. Frontend - Toast-System & Bulk-Operations
|
||||||
|
|
||||||
|
**Datei:** `frontend/package.json`
|
||||||
|
```json
|
||||||
|
{
|
||||||
|
"dependencies": {
|
||||||
|
"sonner": "^1.7.2"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
**Datei:** `frontend/src/app/layout.tsx`
|
||||||
|
```tsx
|
||||||
|
import { Toaster } from "sonner";
|
||||||
|
|
||||||
|
export default function RootLayout({ children }) {
|
||||||
|
return (
|
||||||
|
<html>
|
||||||
|
<body>
|
||||||
|
{children}
|
||||||
|
<Toaster position="top-right" richColors />
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
);
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
**Datei:** `frontend/src/app/admin/page.tsx` - Neue Features:
|
||||||
|
|
||||||
|
#### Toast-Nachrichten statt primitiver Alerts:
|
||||||
|
```typescript
|
||||||
|
// Vorher
|
||||||
|
setSuccessMessage(message);
|
||||||
|
setTimeout(() => setSuccessMessage(""), 3000);
|
||||||
|
|
||||||
|
// Nachher
|
||||||
|
toast.success(message); // Modern, stackbar, dunkler
|
||||||
|
toast.error(`Fehler: ${error}`);
|
||||||
|
toast.loading("Lösche User...", { id: "delete" });
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Bulk-Selection UI:
|
||||||
|
- User-Checkboxen pro Zeile (nicht Admin/CurrentUser)
|
||||||
|
- "Select All" Checkbox für gefilterte User
|
||||||
|
- Bulk-Action-Bar mit 4 Aktionen:
|
||||||
|
- Sperren / Entsperren
|
||||||
|
- Container löschen
|
||||||
|
- User löschen (mit Zwei-Schritt-Bestätigung)
|
||||||
|
|
||||||
|
#### Zwei-Schritt-Bestätigung bei kritischen Aktionen:
|
||||||
|
```typescript
|
||||||
|
// Schritt 1: Vorschau mit Warnung
|
||||||
|
if (!confirm(`⚠️ WARNUNG: 3 User löschen?\n\nDies löscht:\n- User-Accounts\n- Alle Container\n- Alle Tokens`)) {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Schritt 2: Numerische Bestätigung
|
||||||
|
const confirmation = prompt(`Geben Sie die Anzahl ein (3):`);
|
||||||
|
if (confirmation !== "3") {
|
||||||
|
toast.error("Abgebrochen");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 🚀 Deployment
|
||||||
|
|
||||||
|
### Vorbereitungen:
|
||||||
|
|
||||||
|
1. **Backend:**
|
||||||
|
```bash
|
||||||
|
# Syntax-Check
|
||||||
|
python -m py_compile admin_api.py models.py
|
||||||
|
```
|
||||||
|
|
||||||
|
2. **Frontend:**
|
||||||
|
```bash
|
||||||
|
cd frontend
|
||||||
|
npm install # Installiert sonner
|
||||||
|
npm run build
|
||||||
|
npx tsc --noEmit # TypeScript-Check
|
||||||
|
```
|
||||||
|
|
||||||
|
### Deployment-Befehle:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Lokal/Entwicklung
|
||||||
|
cd /volume1/docker/spawner
|
||||||
|
git pull
|
||||||
|
docker-compose up -d --build
|
||||||
|
```
|
||||||
|
|
||||||
|
### Nach Deployment:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Logs checken
|
||||||
|
docker-compose logs -f spawner
|
||||||
|
|
||||||
|
# Admin-Dashboard testen
|
||||||
|
# 1. Einen User mit Containern erstellen
|
||||||
|
# 2. Container löschen → Toast sollte erscheinen
|
||||||
|
# 3. User löschen → Toast mit Summary
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 🧪 Test-Szenarien
|
||||||
|
|
||||||
|
### Test 1: Multi-Container-Deletion
|
||||||
|
```bash
|
||||||
|
# Voraussetzung: User mit 3 Containern (template-01, template-02, template-next)
|
||||||
|
|
||||||
|
# 1. Admin-Dashboard öffnen
|
||||||
|
# 2. Container-Icon klicken
|
||||||
|
# 3. Toast: "3 Container gelöscht"
|
||||||
|
# 4. Verify: docker ps | grep user- → Keine Container
|
||||||
|
```
|
||||||
|
|
||||||
|
### Test 2: DSGVO-Compliance
|
||||||
|
```bash
|
||||||
|
# 1. User mit Magic Links erstellen
|
||||||
|
# 2. Admin: User löschen → Zwei-Schritt-Bestätigung
|
||||||
|
# 3. Toast mit Summary:
|
||||||
|
# - 3 Container deleted
|
||||||
|
# - 5 Magic Tokens deleted
|
||||||
|
# - 0 Takeover Sessions deleted
|
||||||
|
|
||||||
|
# 4. Verify in DB:
|
||||||
|
docker exec spawner python3 -c "
|
||||||
|
from app import app, db
|
||||||
|
from models import MagicLinkToken
|
||||||
|
with app.app_context():
|
||||||
|
tokens = MagicLinkToken.query.filter_by(user_id=123).count()
|
||||||
|
print(f'Tokens für User 123: {tokens}')
|
||||||
|
"
|
||||||
|
# Expected: 0
|
||||||
|
```
|
||||||
|
|
||||||
|
### Test 3: Toast-Benachrichtigungen
|
||||||
|
```
|
||||||
|
1. Admin-Dashboard öffnen
|
||||||
|
2. Mehrere Aktionen schnell:
|
||||||
|
- Container löschen
|
||||||
|
- User sperren
|
||||||
|
- User entsperren
|
||||||
|
3. Erwartung: Toasts stacken oben-rechts, jeder mit X zum Schließen
|
||||||
|
```
|
||||||
|
|
||||||
|
### Test 4: Bulk-Operations
|
||||||
|
```
|
||||||
|
1. 3 User mit Checkboxen auswählen
|
||||||
|
2. Bulk-Action-Bar erscheint
|
||||||
|
3. "Sperren" Button → Confirm → Toast "3 User gesperrt"
|
||||||
|
4. "Select All" Checkbox → Alle (außer Admin) ausgewählt
|
||||||
|
5. "User löschen" → Zwei-Schritt-Bestätigung → Toast mit Summary
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 📊 API-Response-Format
|
||||||
|
|
||||||
|
### Single Container-Deletion:
|
||||||
|
```bash
|
||||||
|
curl -X DELETE \
|
||||||
|
http://localhost:5000/api/admin/users/123/container \
|
||||||
|
-H "Authorization: Bearer $TOKEN"
|
||||||
|
```
|
||||||
|
|
||||||
|
**Response (Success):**
|
||||||
|
```json
|
||||||
|
{
|
||||||
|
"message": "Alle 3 Container von user@example.com wurden gelöscht",
|
||||||
|
"deleted": 3,
|
||||||
|
"failed": []
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
**Response (Partial Failure - Status 207):**
|
||||||
|
```json
|
||||||
|
{
|
||||||
|
"message": "2 Container gelöscht, 1 fehlgeschlagen",
|
||||||
|
"deleted": 2,
|
||||||
|
"failed": ["a1b2c3d4"]
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
### Single User-Deletion:
|
||||||
|
```bash
|
||||||
|
curl -X DELETE \
|
||||||
|
http://localhost:5000/api/admin/users/123 \
|
||||||
|
-H "Authorization: Bearer $TOKEN"
|
||||||
|
```
|
||||||
|
|
||||||
|
**Response:**
|
||||||
|
```json
|
||||||
|
{
|
||||||
|
"message": "User user@example.com wurde vollständig gelöscht",
|
||||||
|
"summary": {
|
||||||
|
"containers_deleted": 3,
|
||||||
|
"containers_failed": [],
|
||||||
|
"magic_tokens_deleted": 5,
|
||||||
|
"takeover_sessions_deleted": 1
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## ⚠️ Wichtige Hinweise
|
||||||
|
|
||||||
|
### Breaking Change: CASCADE DELETE
|
||||||
|
- Foreign Key Constraints wurden aktualisiert
|
||||||
|
- **DB-Migration erforderlich** (siehe unten)
|
||||||
|
- Alte Constraints verursachen Fehler
|
||||||
|
|
||||||
|
### Datenbank-Migration:
|
||||||
|
|
||||||
|
#### Option 1: Mit Alembic (falls installiert)
|
||||||
|
```bash
|
||||||
|
cd backend
|
||||||
|
flask db migrate -m "Add CASCADE DELETE for DSGVO"
|
||||||
|
flask db upgrade
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Option 2: Manuell für SQLite
|
||||||
|
```sql
|
||||||
|
-- Backup zuerst machen!
|
||||||
|
.backup /app/spawner.db.backup
|
||||||
|
|
||||||
|
-- MagicLinkToken
|
||||||
|
ALTER TABLE magic_link_token
|
||||||
|
DROP CONSTRAINT IF EXISTS magic_link_token_user_id_fkey;
|
||||||
|
ALTER TABLE magic_link_token
|
||||||
|
ADD CONSTRAINT magic_link_token_user_id_fkey
|
||||||
|
FOREIGN KEY (user_id) REFERENCES user(id) ON DELETE CASCADE;
|
||||||
|
|
||||||
|
-- AdminTakeoverSession
|
||||||
|
ALTER TABLE admin_takeover_session
|
||||||
|
DROP CONSTRAINT IF EXISTS admin_takeover_session_admin_id_fkey;
|
||||||
|
ALTER TABLE admin_takeover_session
|
||||||
|
DROP CONSTRAINT IF EXISTS admin_takeover_session_target_user_id_fkey;
|
||||||
|
|
||||||
|
ALTER TABLE admin_takeover_session
|
||||||
|
ADD CONSTRAINT admin_takeover_session_admin_id_fkey
|
||||||
|
FOREIGN KEY (admin_id) REFERENCES user(id) ON DELETE SET NULL;
|
||||||
|
ALTER TABLE admin_takeover_session
|
||||||
|
ADD CONSTRAINT admin_takeover_session_target_user_id_fkey
|
||||||
|
FOREIGN KEY (target_user_id) REFERENCES user(id) ON DELETE CASCADE;
|
||||||
|
```
|
||||||
|
|
||||||
|
### Backwards Compatibility:
|
||||||
|
- ✅ Alte API-Clients funktionieren (neue Felder sind optional)
|
||||||
|
- ✅ Bestehende User-Daten bleiben erhalten
|
||||||
|
- ⚠️ Nur neue Deletes sind DSGVO-konform
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 🔍 Troubleshooting
|
||||||
|
|
||||||
|
### Problem: Toasts erscheinen nicht
|
||||||
|
```bash
|
||||||
|
# 1. Prüfe ob sonner installiert ist
|
||||||
|
cd frontend
|
||||||
|
npm list sonner
|
||||||
|
|
||||||
|
# 2. Browser-Console (F12) auf Fehler prüfen
|
||||||
|
# 3. Cache leeren: Ctrl+Shift+Del
|
||||||
|
```
|
||||||
|
|
||||||
|
### Problem: Container-Löschung funktioniert nicht
|
||||||
|
```bash
|
||||||
|
# Logs prüfen
|
||||||
|
docker-compose logs spawner 2>&1 | tail -100
|
||||||
|
|
||||||
|
# Docker-Socket-Permissions
|
||||||
|
docker exec spawner ls -la /var/run/docker.sock
|
||||||
|
|
||||||
|
# Container manuell löschen
|
||||||
|
docker ps -a | grep user-
|
||||||
|
docker rm -f user-xyz-123
|
||||||
|
```
|
||||||
|
|
||||||
|
### Problem: Multi-Container nicht sichtbar
|
||||||
|
```bash
|
||||||
|
# DB-Abfrage
|
||||||
|
docker exec spawner python3 -c "
|
||||||
|
from app import app, db
|
||||||
|
from models import User
|
||||||
|
with app.app_context():
|
||||||
|
user = User.query.filter_by(email='test@example.com').first()
|
||||||
|
print(f'User {user.email} hat {len(user.containers)} Container')
|
||||||
|
for c in user.containers:
|
||||||
|
print(f' - Type: {c.container_type}, ID: {c.container_id}')
|
||||||
|
"
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 📚 Weitere Ressourcen
|
||||||
|
|
||||||
|
- [Container Spawner Architektur](../architecture/README.md)
|
||||||
|
- [Deployment Guide](../install/DEPLOYMENT_GUIDE.md)
|
||||||
|
- [Custom Templates](./custom-templates.md)
|
||||||
|
- [Security Dokumentation](../security/README.md)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 📝 Änderungshistorie
|
||||||
|
|
||||||
|
| Version | Datum | Änderungen |
|
||||||
|
|---------|-------|-----------|
|
||||||
|
| 2.0 | 02.02.2026 | Multi-Container, Toast-System, Bulk-Operations, DSGVO |
|
||||||
|
| 1.0 | ≤01.02.2026 | Ursprüngliches Admin-Dashboard |
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
**Fragen?** Siehe [Troubleshooting](#-troubleshooting) oder Logs prüfen: `docker-compose logs spawner`
|
||||||
|
|
@ -16,6 +16,7 @@
|
||||||
"clsx": "^2.1.1",
|
"clsx": "^2.1.1",
|
||||||
"tailwind-merge": "^2.4.0",
|
"tailwind-merge": "^2.4.0",
|
||||||
"lucide-react": "^0.408.0",
|
"lucide-react": "^0.408.0",
|
||||||
|
"sonner": "^1.7.2",
|
||||||
"@radix-ui/react-slot": "^1.1.0",
|
"@radix-ui/react-slot": "^1.1.0",
|
||||||
"@radix-ui/react-label": "^2.1.0",
|
"@radix-ui/react-label": "^2.1.0",
|
||||||
"@radix-ui/react-separator": "^1.1.0",
|
"@radix-ui/react-separator": "^1.1.0",
|
||||||
|
|
|
||||||
|
|
@ -33,7 +33,9 @@ import {
|
||||||
ArrowLeft,
|
ArrowLeft,
|
||||||
Search,
|
Search,
|
||||||
Monitor,
|
Monitor,
|
||||||
|
X,
|
||||||
} from "lucide-react";
|
} from "lucide-react";
|
||||||
|
import { toast } from "sonner";
|
||||||
|
|
||||||
type StatusColor = "green" | "yellow" | "red";
|
type StatusColor = "green" | "yellow" | "red";
|
||||||
|
|
||||||
|
|
@ -109,7 +111,7 @@ export default function AdminPage() {
|
||||||
const [error, setError] = useState("");
|
const [error, setError] = useState("");
|
||||||
const [actionLoading, setActionLoading] = useState<number | null>(null);
|
const [actionLoading, setActionLoading] = useState<number | null>(null);
|
||||||
const [searchTerm, setSearchTerm] = useState("");
|
const [searchTerm, setSearchTerm] = useState("");
|
||||||
const [successMessage, setSuccessMessage] = useState("");
|
const [selectedUserIds, setSelectedUserIds] = useState<Set<number>>(new Set());
|
||||||
|
|
||||||
const fetchUsers = useCallback(async () => {
|
const fetchUsers = useCallback(async () => {
|
||||||
setIsLoading(true);
|
setIsLoading(true);
|
||||||
|
|
@ -126,18 +128,36 @@ export default function AdminPage() {
|
||||||
fetchUsers();
|
fetchUsers();
|
||||||
}, [fetchUsers]);
|
}, [fetchUsers]);
|
||||||
|
|
||||||
const showSuccess = (message: string) => {
|
// Bulk-Selection Helpers
|
||||||
setSuccessMessage(message);
|
const toggleUserSelection = (userId: number) => {
|
||||||
setTimeout(() => setSuccessMessage(""), 3000);
|
const newSelection = new Set(selectedUserIds);
|
||||||
|
if (newSelection.has(userId)) {
|
||||||
|
newSelection.delete(userId);
|
||||||
|
} else {
|
||||||
|
newSelection.add(userId);
|
||||||
|
}
|
||||||
|
setSelectedUserIds(newSelection);
|
||||||
};
|
};
|
||||||
|
|
||||||
|
const selectAllFiltered = () => {
|
||||||
|
const selectableIds = filteredUsers
|
||||||
|
.filter((u) => u.id !== user?.id && !u.is_admin)
|
||||||
|
.map((u) => u.id);
|
||||||
|
setSelectedUserIds(new Set(selectableIds));
|
||||||
|
};
|
||||||
|
|
||||||
|
const deselectAll = () => {
|
||||||
|
setSelectedUserIds(new Set());
|
||||||
|
};
|
||||||
|
|
||||||
|
// Single Actions
|
||||||
const handleBlock = async (userId: number) => {
|
const handleBlock = async (userId: number) => {
|
||||||
setActionLoading(userId);
|
setActionLoading(userId);
|
||||||
const { data, error } = await adminApi.blockUser(userId);
|
const { data, error } = await adminApi.blockUser(userId);
|
||||||
if (error) {
|
if (error) {
|
||||||
setError(error);
|
toast.error(`Fehler: ${error}`);
|
||||||
} else {
|
} else {
|
||||||
showSuccess(data?.message || "User gesperrt");
|
toast.success(data?.message || "User gesperrt");
|
||||||
fetchUsers();
|
fetchUsers();
|
||||||
}
|
}
|
||||||
setActionLoading(null);
|
setActionLoading(null);
|
||||||
|
|
@ -147,9 +167,9 @@ export default function AdminPage() {
|
||||||
setActionLoading(userId);
|
setActionLoading(userId);
|
||||||
const { data, error } = await adminApi.unblockUser(userId);
|
const { data, error } = await adminApi.unblockUser(userId);
|
||||||
if (error) {
|
if (error) {
|
||||||
setError(error);
|
toast.error(`Fehler: ${error}`);
|
||||||
} else {
|
} else {
|
||||||
showSuccess(data?.message || "User entsperrt");
|
toast.success(data?.message || "User entsperrt");
|
||||||
fetchUsers();
|
fetchUsers();
|
||||||
}
|
}
|
||||||
setActionLoading(null);
|
setActionLoading(null);
|
||||||
|
|
@ -159,38 +179,53 @@ export default function AdminPage() {
|
||||||
setActionLoading(userId);
|
setActionLoading(userId);
|
||||||
const { data, error } = await adminApi.resendVerification(userId);
|
const { data, error } = await adminApi.resendVerification(userId);
|
||||||
if (error) {
|
if (error) {
|
||||||
setError(error);
|
toast.error(`Fehler: ${error}`);
|
||||||
} else {
|
} else {
|
||||||
showSuccess(data?.message || "Verifizierungs-Email gesendet");
|
toast.success(data?.message || "Verifizierungs-Email gesendet");
|
||||||
}
|
}
|
||||||
setActionLoading(null);
|
setActionLoading(null);
|
||||||
};
|
};
|
||||||
|
|
||||||
const handleDeleteContainer = async (userId: number) => {
|
const handleDeleteContainer = async (userId: number, userEmail: string) => {
|
||||||
if (!confirm("Container wirklich loeschen? Der User kann einen neuen Container starten.")) {
|
if (!confirm(`Container von "${userEmail}" wirklich loeschen? Der User kann einen neuen Container starten.`)) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
setActionLoading(userId);
|
setActionLoading(userId);
|
||||||
const { data, error } = await adminApi.deleteUserContainer(userId);
|
const { data, error } = await adminApi.deleteUserContainer(userId);
|
||||||
if (error) {
|
if (error) {
|
||||||
setError(error);
|
toast.error(`Fehler: ${error}`);
|
||||||
} else {
|
} else {
|
||||||
showSuccess(data?.message || "Container geloescht");
|
toast.success(data?.message || "Container geloescht", {
|
||||||
|
description: data?.deleted ? `${data.deleted} Container entfernt` : undefined,
|
||||||
|
});
|
||||||
fetchUsers();
|
fetchUsers();
|
||||||
}
|
}
|
||||||
setActionLoading(null);
|
setActionLoading(null);
|
||||||
};
|
};
|
||||||
|
|
||||||
const handleDeleteUser = async (userId: number, userEmail: string) => {
|
const handleDeleteUser = async (userId: number, userEmail: string) => {
|
||||||
if (!confirm(`User "${userEmail}" wirklich loeschen? Diese Aktion kann nicht rueckgaengig gemacht werden!`)) {
|
if (!confirm(
|
||||||
|
`⚠️ ACHTUNG: User "${userEmail}" VOLLSTAENDIG loeschen?\n\n` +
|
||||||
|
`Dies löscht:\n` +
|
||||||
|
`- User-Account und alle Daten\n` +
|
||||||
|
`- Alle Docker-Container\n` +
|
||||||
|
`- Alle Magic Link Tokens\n` +
|
||||||
|
`- Alle Takeover-Sessions\n\n` +
|
||||||
|
`Diese Aktion kann NICHT rueckgaengig gemacht werden!`
|
||||||
|
)) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
setActionLoading(userId);
|
setActionLoading(userId);
|
||||||
const { data, error } = await adminApi.deleteUser(userId);
|
const { data, error } = await adminApi.deleteUser(userId);
|
||||||
if (error) {
|
if (error) {
|
||||||
setError(error);
|
toast.error(`Fehler: ${error}`);
|
||||||
} else {
|
} else {
|
||||||
showSuccess(data?.message || "User geloescht");
|
toast.success(`User gelöscht: ${userEmail}`, {
|
||||||
|
description: data?.summary
|
||||||
|
? `${data.summary.containers_deleted} Container, ${data.summary.magic_tokens_deleted} Tokens entfernt`
|
||||||
|
: undefined,
|
||||||
|
duration: 5000,
|
||||||
|
});
|
||||||
fetchUsers();
|
fetchUsers();
|
||||||
}
|
}
|
||||||
setActionLoading(null);
|
setActionLoading(null);
|
||||||
|
|
@ -198,18 +233,176 @@ export default function AdminPage() {
|
||||||
|
|
||||||
const handleTakeover = async (userId: number) => {
|
const handleTakeover = async (userId: number) => {
|
||||||
const reason = prompt("Grund fuer den Zugriff (optional):");
|
const reason = prompt("Grund fuer den Zugriff (optional):");
|
||||||
if (reason === null) return; // Abgebrochen
|
if (reason === null) return;
|
||||||
|
|
||||||
setActionLoading(userId);
|
setActionLoading(userId);
|
||||||
const { data, error } = await adminApi.startTakeover(userId, reason);
|
const { data, error } = await adminApi.startTakeover(userId, reason);
|
||||||
if (error) {
|
if (error) {
|
||||||
setError(error);
|
toast.error(`Fehler: ${error}`);
|
||||||
} else {
|
} else {
|
||||||
alert(data?.note || "Takeover gestartet (Dummy)");
|
toast.info(data?.note || "Takeover gestartet (Dummy)", { duration: 4000 });
|
||||||
}
|
}
|
||||||
setActionLoading(null);
|
setActionLoading(null);
|
||||||
};
|
};
|
||||||
|
|
||||||
|
// Bulk Actions
|
||||||
|
const handleBulkBlock = async () => {
|
||||||
|
if (!confirm(`${selectedUserIds.size} User sperren?`)) {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
toast.loading(`Sperre ${selectedUserIds.size} User...`, { id: "bulk-block" });
|
||||||
|
|
||||||
|
let success = 0;
|
||||||
|
let failed = 0;
|
||||||
|
|
||||||
|
for (const userId of selectedUserIds) {
|
||||||
|
const { error } = await adminApi.blockUser(userId);
|
||||||
|
if (error) {
|
||||||
|
failed++;
|
||||||
|
} else {
|
||||||
|
success++;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
toast.success(`${success} User gesperrt`, {
|
||||||
|
id: "bulk-block",
|
||||||
|
description: failed > 0 ? `${failed} fehlgeschlagen` : undefined,
|
||||||
|
});
|
||||||
|
|
||||||
|
fetchUsers();
|
||||||
|
deselectAll();
|
||||||
|
};
|
||||||
|
|
||||||
|
const handleBulkUnblock = async () => {
|
||||||
|
if (!confirm(`${selectedUserIds.size} User entsperren?`)) {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
toast.loading(`Entsperre ${selectedUserIds.size} User...`, { id: "bulk-unblock" });
|
||||||
|
|
||||||
|
let success = 0;
|
||||||
|
let failed = 0;
|
||||||
|
|
||||||
|
for (const userId of selectedUserIds) {
|
||||||
|
const { error } = await adminApi.unblockUser(userId);
|
||||||
|
if (error) {
|
||||||
|
failed++;
|
||||||
|
} else {
|
||||||
|
success++;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
toast.success(`${success} User entsperrt`, {
|
||||||
|
id: "bulk-unblock",
|
||||||
|
description: failed > 0 ? `${failed} fehlgeschlagen` : undefined,
|
||||||
|
});
|
||||||
|
|
||||||
|
fetchUsers();
|
||||||
|
deselectAll();
|
||||||
|
};
|
||||||
|
|
||||||
|
const handleBulkDeleteContainers = async () => {
|
||||||
|
const userList = Array.from(selectedUserIds)
|
||||||
|
.map((id) => users.find((u) => u.id === id)?.email)
|
||||||
|
.filter(Boolean)
|
||||||
|
.join(", ");
|
||||||
|
|
||||||
|
if (!confirm(
|
||||||
|
`Container von ${selectedUserIds.size} Usern löschen?\n\n` +
|
||||||
|
`Betroffene User:\n${userList}\n\n` +
|
||||||
|
`User können danach neue Container erstellen.`
|
||||||
|
)) {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
toast.loading(`Lösche Container von ${selectedUserIds.size} Usern...`, { id: "bulk-delete-containers" });
|
||||||
|
|
||||||
|
let success = 0;
|
||||||
|
let failed = 0;
|
||||||
|
|
||||||
|
for (const userId of selectedUserIds) {
|
||||||
|
const { error } = await adminApi.deleteUserContainer(userId);
|
||||||
|
if (error) {
|
||||||
|
failed++;
|
||||||
|
} else {
|
||||||
|
success++;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
toast.success(`${success} User-Container gelöscht`, {
|
||||||
|
id: "bulk-delete-containers",
|
||||||
|
description: failed > 0 ? `${failed} fehlgeschlagen` : undefined,
|
||||||
|
});
|
||||||
|
|
||||||
|
fetchUsers();
|
||||||
|
deselectAll();
|
||||||
|
};
|
||||||
|
|
||||||
|
const handleBulkDeleteUsers = async () => {
|
||||||
|
const selectedUsers = Array.from(selectedUserIds)
|
||||||
|
.map((id) => users.find((u) => u.id === id))
|
||||||
|
.filter(Boolean) as AdminUser[];
|
||||||
|
|
||||||
|
const userList = selectedUsers.map((u) => u.email).join("\n");
|
||||||
|
|
||||||
|
// Schritt 1: Vorschau
|
||||||
|
if (!confirm(
|
||||||
|
`⚠️ WARNUNG: ${selectedUserIds.size} User VOLLSTAENDIG löschen?\n\n` +
|
||||||
|
`Betroffene User:\n${userList}\n\n` +
|
||||||
|
`Dies löscht:\n` +
|
||||||
|
`- User-Accounts und alle Daten\n` +
|
||||||
|
`- Alle Docker-Container\n` +
|
||||||
|
`- Alle Magic Link Tokens\n` +
|
||||||
|
`- Alle Takeover-Sessions\n\n` +
|
||||||
|
`Klicken Sie OK für finalen Bestätigungsschritt.`
|
||||||
|
)) {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Schritt 2: Finale Bestätigung
|
||||||
|
const confirmation = prompt(
|
||||||
|
`FINALE BESTAETIGUNG:\n\n` +
|
||||||
|
`Geben Sie die Anzahl der zu löschenden User ein (${selectedUserIds.size}):`
|
||||||
|
);
|
||||||
|
|
||||||
|
if (confirmation !== String(selectedUserIds.size)) {
|
||||||
|
toast.error("Bulk-Delete abgebrochen (falsche Bestätigung)");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
toast.loading(`Lösche ${selectedUserIds.size} User...`, { id: "bulk-delete-users" });
|
||||||
|
|
||||||
|
let success = 0;
|
||||||
|
let failed = 0;
|
||||||
|
const errors: string[] = [];
|
||||||
|
|
||||||
|
for (const userId of selectedUserIds) {
|
||||||
|
const selectedUser = selectedUsers.find((u) => u.id === userId);
|
||||||
|
const { error } = await adminApi.deleteUser(userId);
|
||||||
|
|
||||||
|
if (error) {
|
||||||
|
failed++;
|
||||||
|
errors.push(`${selectedUser?.email}: ${error}`);
|
||||||
|
} else {
|
||||||
|
success++;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
toast.success(`${success} User gelöscht`, {
|
||||||
|
id: "bulk-delete-users",
|
||||||
|
description: failed > 0 ? `${failed} fehlgeschlagen. Siehe Logs.` : "Alle Daten vollständig entfernt",
|
||||||
|
duration: 8000,
|
||||||
|
});
|
||||||
|
|
||||||
|
if (errors.length > 0) {
|
||||||
|
console.error("Bulk-Delete Errors:", errors);
|
||||||
|
}
|
||||||
|
|
||||||
|
fetchUsers();
|
||||||
|
deselectAll();
|
||||||
|
};
|
||||||
|
|
||||||
const handleLogout = async () => {
|
const handleLogout = async () => {
|
||||||
await logout();
|
await logout();
|
||||||
router.push("/login");
|
router.push("/login");
|
||||||
|
|
@ -220,7 +413,7 @@ export default function AdminPage() {
|
||||||
(u) =>
|
(u) =>
|
||||||
u.slug.toLowerCase().includes(searchTerm.toLowerCase()) ||
|
u.slug.toLowerCase().includes(searchTerm.toLowerCase()) ||
|
||||||
u.email.toLowerCase().includes(searchTerm.toLowerCase())
|
u.email.toLowerCase().includes(searchTerm.toLowerCase())
|
||||||
);
|
).sort((a, b) => (b.created_at ? new Date(b.created_at).getTime() : 0) - (a.created_at ? new Date(a.created_at).getTime() : 0));
|
||||||
|
|
||||||
// Statistiken
|
// Statistiken
|
||||||
const stats = {
|
const stats = {
|
||||||
|
|
@ -285,25 +478,19 @@ export default function AdminPage() {
|
||||||
</p>
|
</p>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
{/* Nachrichten */}
|
{/* Fehler-Alert (Fallback, Toasts sind Primary) */}
|
||||||
{error && (
|
{error && (
|
||||||
<div className="mb-6 rounded-md bg-destructive/10 p-4 text-sm text-destructive">
|
<div className="mb-6 rounded-md bg-destructive/10 p-4 text-sm text-destructive flex items-center justify-between">
|
||||||
{error}
|
<span>{error}</span>
|
||||||
<button
|
<button
|
||||||
onClick={() => setError("")}
|
onClick={() => setError("")}
|
||||||
className="ml-2 underline"
|
className="ml-2 underline text-xs"
|
||||||
>
|
>
|
||||||
Schliessen
|
Schliessen
|
||||||
</button>
|
</button>
|
||||||
</div>
|
</div>
|
||||||
)}
|
)}
|
||||||
|
|
||||||
{successMessage && (
|
|
||||||
<div className="mb-6 rounded-md bg-green-100 p-4 text-sm text-green-800">
|
|
||||||
{successMessage}
|
|
||||||
</div>
|
|
||||||
)}
|
|
||||||
|
|
||||||
{/* Statistiken */}
|
{/* Statistiken */}
|
||||||
<div className="mb-6 grid gap-4 md:grid-cols-5">
|
<div className="mb-6 grid gap-4 md:grid-cols-5">
|
||||||
<Card>
|
<Card>
|
||||||
|
|
@ -353,6 +540,73 @@ export default function AdminPage() {
|
||||||
</Card>
|
</Card>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
|
{/* Bulk-Action Bar */}
|
||||||
|
{selectedUserIds.size > 0 && (
|
||||||
|
<div className="mb-4 rounded-lg border border-primary bg-primary/5 p-4">
|
||||||
|
<div className="flex items-center justify-between">
|
||||||
|
<div className="flex items-center gap-4">
|
||||||
|
<span className="font-medium">
|
||||||
|
{selectedUserIds.size} User ausgewählt
|
||||||
|
</span>
|
||||||
|
<Button
|
||||||
|
variant="outline"
|
||||||
|
size="sm"
|
||||||
|
onClick={deselectAll}
|
||||||
|
className="text-xs"
|
||||||
|
>
|
||||||
|
Auswahl aufheben
|
||||||
|
</Button>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div className="flex items-center gap-2">
|
||||||
|
{/* Bulk-Block */}
|
||||||
|
<Button
|
||||||
|
variant="outline"
|
||||||
|
size="sm"
|
||||||
|
onClick={handleBulkBlock}
|
||||||
|
disabled={actionLoading !== null}
|
||||||
|
>
|
||||||
|
<ShieldOff className="mr-2 h-4 w-4" />
|
||||||
|
Sperren
|
||||||
|
</Button>
|
||||||
|
|
||||||
|
{/* Bulk-Unblock */}
|
||||||
|
<Button
|
||||||
|
variant="outline"
|
||||||
|
size="sm"
|
||||||
|
onClick={handleBulkUnblock}
|
||||||
|
disabled={actionLoading !== null}
|
||||||
|
>
|
||||||
|
<Shield className="mr-2 h-4 w-4" />
|
||||||
|
Entsperren
|
||||||
|
</Button>
|
||||||
|
|
||||||
|
{/* Bulk-Delete-Container */}
|
||||||
|
<Button
|
||||||
|
variant="outline"
|
||||||
|
size="sm"
|
||||||
|
onClick={handleBulkDeleteContainers}
|
||||||
|
disabled={actionLoading !== null}
|
||||||
|
>
|
||||||
|
<Container className="mr-2 h-4 w-4" />
|
||||||
|
Container löschen
|
||||||
|
</Button>
|
||||||
|
|
||||||
|
{/* Bulk-Delete User */}
|
||||||
|
<Button
|
||||||
|
variant="destructive"
|
||||||
|
size="sm"
|
||||||
|
onClick={handleBulkDeleteUsers}
|
||||||
|
disabled={actionLoading !== null}
|
||||||
|
>
|
||||||
|
<Trash2 className="mr-2 h-4 w-4" />
|
||||||
|
User löschen
|
||||||
|
</Button>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
)}
|
||||||
|
|
||||||
{/* Suche */}
|
{/* Suche */}
|
||||||
<div className="mb-6 flex items-center gap-4">
|
<div className="mb-6 flex items-center gap-4">
|
||||||
<div className="relative flex-1 max-w-md">
|
<div className="relative flex-1 max-w-md">
|
||||||
|
|
@ -370,6 +624,33 @@ export default function AdminPage() {
|
||||||
</Button>
|
</Button>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
|
{/* Select-All Checkbox */}
|
||||||
|
{filteredUsers.length > 0 && (
|
||||||
|
<div className="mb-4 flex items-center gap-2">
|
||||||
|
<input
|
||||||
|
type="checkbox"
|
||||||
|
checked={
|
||||||
|
selectedUserIds.size > 0 &&
|
||||||
|
selectedUserIds.size ===
|
||||||
|
filteredUsers.filter(u => u.id !== user?.id && !u.is_admin).length
|
||||||
|
}
|
||||||
|
onChange={(e) => {
|
||||||
|
if (e.target.checked) {
|
||||||
|
selectAllFiltered();
|
||||||
|
} else {
|
||||||
|
deselectAll();
|
||||||
|
}
|
||||||
|
}}
|
||||||
|
className="h-4 w-4 rounded border-gray-300"
|
||||||
|
/>
|
||||||
|
<span className="text-sm text-muted-foreground">
|
||||||
|
Alle{" "}
|
||||||
|
{filteredUsers.filter((u) => u.id !== user?.id && !u.is_admin).length}{" "}
|
||||||
|
User auswählen
|
||||||
|
</span>
|
||||||
|
</div>
|
||||||
|
)}
|
||||||
|
|
||||||
{/* Benutzerliste */}
|
{/* Benutzerliste */}
|
||||||
<Card>
|
<Card>
|
||||||
<CardHeader>
|
<CardHeader>
|
||||||
|
|
@ -383,16 +664,26 @@ export default function AdminPage() {
|
||||||
{filteredUsers.map((u) => {
|
{filteredUsers.map((u) => {
|
||||||
const statusColor = getStatusColor(u);
|
const statusColor = getStatusColor(u);
|
||||||
const isCurrentUser = u.id === user?.id;
|
const isCurrentUser = u.id === user?.id;
|
||||||
|
const isSelectable = !isCurrentUser && !u.is_admin;
|
||||||
|
const isSelected = selectedUserIds.has(u.id);
|
||||||
|
|
||||||
return (
|
return (
|
||||||
<div
|
<div
|
||||||
key={u.id}
|
key={u.id}
|
||||||
className={`flex items-center justify-between rounded-lg border p-4 ${
|
className={`flex items-center justify-between rounded-lg border p-4 ${
|
||||||
u.is_blocked ? "bg-red-50 border-red-200" : ""
|
u.is_blocked ? "bg-red-50 border-red-200" : ""
|
||||||
}`}
|
} ${isSelected ? "bg-primary/5 border-primary" : ""}`}
|
||||||
>
|
>
|
||||||
{/* User Info */}
|
{/* Checkbox + User Info */}
|
||||||
<div className="flex items-center gap-4">
|
<div className="flex items-center gap-4">
|
||||||
|
{isSelectable && (
|
||||||
|
<input
|
||||||
|
type="checkbox"
|
||||||
|
checked={isSelected}
|
||||||
|
onChange={() => toggleUserSelection(u.id)}
|
||||||
|
className="h-4 w-4 rounded border-gray-300"
|
||||||
|
/>
|
||||||
|
)}
|
||||||
<Avatar>
|
<Avatar>
|
||||||
<AvatarFallback
|
<AvatarFallback
|
||||||
className={`${
|
className={`${
|
||||||
|
|
@ -488,7 +779,7 @@ export default function AdminPage() {
|
||||||
<Button
|
<Button
|
||||||
variant="ghost"
|
variant="ghost"
|
||||||
size="sm"
|
size="sm"
|
||||||
onClick={() => handleDeleteContainer(u.id)}
|
onClick={() => handleDeleteContainer(u.id, u.email)}
|
||||||
title="Container loeschen"
|
title="Container loeschen"
|
||||||
>
|
>
|
||||||
<Container className="h-4 w-4" />
|
<Container className="h-4 w-4" />
|
||||||
|
|
|
||||||
|
|
@ -2,6 +2,7 @@ import type { Metadata } from "next";
|
||||||
import { Inter } from "next/font/google";
|
import { Inter } from "next/font/google";
|
||||||
import "./globals.css";
|
import "./globals.css";
|
||||||
import { AuthProvider } from "@/hooks/use-auth";
|
import { AuthProvider } from "@/hooks/use-auth";
|
||||||
|
import { Toaster } from "sonner";
|
||||||
|
|
||||||
const inter = Inter({ subsets: ["latin"] });
|
const inter = Inter({ subsets: ["latin"] });
|
||||||
|
|
||||||
|
|
@ -19,6 +20,7 @@ export default function RootLayout({
|
||||||
<html lang="de">
|
<html lang="de">
|
||||||
<body className={inter.className}>
|
<body className={inter.className}>
|
||||||
<AuthProvider>{children}</AuthProvider>
|
<AuthProvider>{children}</AuthProvider>
|
||||||
|
<Toaster position="top-right" richColors />
|
||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
||||||
);
|
);
|
||||||
|
|
|
||||||
|
|
@ -148,6 +148,14 @@ export interface AdminActionResponse {
|
||||||
message: string;
|
message: string;
|
||||||
user?: AdminUser;
|
user?: AdminUser;
|
||||||
email_sent?: boolean;
|
email_sent?: boolean;
|
||||||
|
deleted?: number;
|
||||||
|
failed?: string[];
|
||||||
|
summary?: {
|
||||||
|
containers_deleted: number;
|
||||||
|
containers_failed: string[];
|
||||||
|
magic_tokens_deleted: number;
|
||||||
|
takeover_sessions_deleted: number;
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|
||||||
export interface TakeoverResponse {
|
export interface TakeoverResponse {
|
||||||
|
|
@ -275,6 +283,13 @@ export const adminApi = {
|
||||||
method: "DELETE",
|
method: "DELETE",
|
||||||
}),
|
}),
|
||||||
|
|
||||||
|
// Bulk Delete Users
|
||||||
|
bulkDeleteUsers: (user_ids: number[]) =>
|
||||||
|
fetchApi<AdminActionResponse>("/api/admin/users/bulk-delete", {
|
||||||
|
method: "POST",
|
||||||
|
body: JSON.stringify({ user_ids }),
|
||||||
|
}),
|
||||||
|
|
||||||
// Takeover (Phase 2 - Dummy)
|
// Takeover (Phase 2 - Dummy)
|
||||||
startTakeover: (id: number, reason?: string) =>
|
startTakeover: (id: number, reason?: string) =>
|
||||||
fetchApi<TakeoverResponse>(`/api/admin/users/${id}/takeover`, {
|
fetchApi<TakeoverResponse>(`/api/admin/users/${id}/takeover`, {
|
||||||
|
|
|
||||||
|
|
@ -12,6 +12,8 @@
|
||||||
"isolatedModules": true,
|
"isolatedModules": true,
|
||||||
"jsx": "preserve",
|
"jsx": "preserve",
|
||||||
"incremental": true,
|
"incremental": true,
|
||||||
|
"target": "es2015",
|
||||||
|
"downlevelIteration": true,
|
||||||
"plugins": [
|
"plugins": [
|
||||||
{
|
{
|
||||||
"name": "next"
|
"name": "next"
|
||||||
|
|
|
||||||
14
models.py
14
models.py
|
|
@ -107,7 +107,7 @@ class MagicLinkToken(db.Model):
|
||||||
__tablename__ = 'magic_link_token'
|
__tablename__ = 'magic_link_token'
|
||||||
|
|
||||||
id = db.Column(db.Integer, primary_key=True)
|
id = db.Column(db.Integer, primary_key=True)
|
||||||
user_id = db.Column(db.Integer, db.ForeignKey('user.id'), nullable=False)
|
user_id = db.Column(db.Integer, db.ForeignKey('user.id', ondelete='CASCADE'), nullable=False)
|
||||||
token = db.Column(db.String(64), unique=True, nullable=False, index=True)
|
token = db.Column(db.String(64), unique=True, nullable=False, index=True)
|
||||||
token_type = db.Column(db.String(20), nullable=False) # 'signup' oder 'login'
|
token_type = db.Column(db.String(20), nullable=False) # 'signup' oder 'login'
|
||||||
created_at = db.Column(db.DateTime, default=datetime.utcnow)
|
created_at = db.Column(db.DateTime, default=datetime.utcnow)
|
||||||
|
|
@ -115,7 +115,7 @@ class MagicLinkToken(db.Model):
|
||||||
used_at = db.Column(db.DateTime, nullable=True)
|
used_at = db.Column(db.DateTime, nullable=True)
|
||||||
ip_address = db.Column(db.String(45), nullable=True)
|
ip_address = db.Column(db.String(45), nullable=True)
|
||||||
|
|
||||||
user = db.relationship('User', backref=db.backref('magic_tokens', lazy=True))
|
user = db.relationship('User', backref=db.backref('magic_tokens', lazy=True, cascade='all, delete-orphan'))
|
||||||
|
|
||||||
def is_valid(self):
|
def is_valid(self):
|
||||||
"""Prüft ob Token noch gültig ist"""
|
"""Prüft ob Token noch gültig ist"""
|
||||||
|
|
@ -168,11 +168,13 @@ class UserContainer(db.Model):
|
||||||
class AdminTakeoverSession(db.Model):
|
class AdminTakeoverSession(db.Model):
|
||||||
"""Protokolliert Admin-Zugriffe auf User-Container (Phase 2)"""
|
"""Protokolliert Admin-Zugriffe auf User-Container (Phase 2)"""
|
||||||
id = db.Column(db.Integer, primary_key=True)
|
id = db.Column(db.Integer, primary_key=True)
|
||||||
admin_id = db.Column(db.Integer, db.ForeignKey('user.id'), nullable=False)
|
admin_id = db.Column(db.Integer, db.ForeignKey('user.id', ondelete='SET NULL'), nullable=True)
|
||||||
target_user_id = db.Column(db.Integer, db.ForeignKey('user.id'), nullable=False)
|
target_user_id = db.Column(db.Integer, db.ForeignKey('user.id', ondelete='CASCADE'), nullable=False)
|
||||||
started_at = db.Column(db.DateTime, default=datetime.utcnow)
|
started_at = db.Column(db.DateTime, default=datetime.utcnow)
|
||||||
ended_at = db.Column(db.DateTime, nullable=True)
|
ended_at = db.Column(db.DateTime, nullable=True)
|
||||||
reason = db.Column(db.String(500), nullable=True)
|
reason = db.Column(db.String(500), nullable=True)
|
||||||
|
|
||||||
admin = db.relationship('User', foreign_keys=[admin_id])
|
admin = db.relationship('User', foreign_keys=[admin_id],
|
||||||
target_user = db.relationship('User', foreign_keys=[target_user_id])
|
backref=db.backref('takeover_sessions_as_admin', lazy=True))
|
||||||
|
target_user = db.relationship('User', foreign_keys=[target_user_id],
|
||||||
|
backref=db.backref('takeover_sessions_as_target', lazy=True, cascade='all, delete-orphan'))
|
||||||
Loading…
Reference in New Issue
Block a user