* feat(api): add webhook CRUD API router and tests Add tRPC router for managing workspace webhooks: - list, create, update, delete endpoints (admin role required) - test endpoint to send a synthetic payload to a webhook URL - URL validation, event subscription filtering - Unit tests for all router procedures - Integration tests with PGlite test database - Add vitest config and test infrastructure for API package Depends on #391 (DB schema & repository). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * refactor(api): use assertPermission instead of assertUserInWorkspace Replace assertUserInWorkspace with assertPermission("workspace:manage") per project conventions. The permissions system is the preferred authorization approach for new code. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix(api): use @kan/db alias instead of relative imports in tests Replace relative path imports (../../db/src/...) with the @kan/db alias configured in vitest.config.ts for consistency and robustness. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * refactor(api): use webhookUrlSchema in router input validation Cherry-pick router-related changes from b2cc9ac: - Use extracted webhookUrlSchema zod validator in create/update input schemas for consistent SSRF checks Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * refactor(api): replace dynamic import with static import for webhook utility Add packages/api/src/utils/webhook.ts with sendWebhookToUrl, createCardWebhookPayload, and webhookUrlSchema. Replace the dynamic import() in the test endpoint with a static import at the top of the file for better tree-shaking, type-checking, and readability. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix(api): align sendWebhooksForWorkspace tests with merged PR #392 The merged delivery utility uses client-side event filtering (getActiveByWorkspaceId takes 2 args, not 3). Update test assertions to match the actual implementation. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * feat(web): add webhook management UI Add settings page for managing workspace webhooks: - Add webhooks page route and settings navigation link - Add webhook list view with status toggles and action menus - Add create/edit modal with URL validation and event selection - Add delete confirmation dialog - Add WEBHOOKS_ENABLED env flag for feature gating Depends on #393 (CRUD API router). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix(web): remove dead env vars, extract TableRow, import webhookEvents - Remove unused WEBHOOK_URL and WEBHOOK_SECRET env vars (leftovers from earlier env-var-based design) - Move TableRow component outside WebhookList to avoid re-creation on every render - Import webhookEvents from @kan/db/schema instead of hardcoding - Simplify formatDate to only handle Date objects (strings are not returned by tRPC/Superjson) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix(web): gate webhooks settings tab to admin role The webhook API requires admin role, but the settings tab was visible to all users (condition: true). Now matches the API's authorization requirement, addressing reviewer feedback on PR #394. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * refactor(web): use webhookEvents constant for form defaults Replace hardcoded event arrays with [...webhookEvents] in NewWebhookModal so default values stay in sync if new events are added to the schema. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix(web): use date-fns with locale for webhook date formatting Replace hardcoded toLocaleDateString('en-US') with date-fns format() using the useLocalisation() hook's dateLocale, matching the pattern used throughout the codebase (ActivityList, DateSelector, etc.). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
296 lines
9.5 KiB
TypeScript
296 lines
9.5 KiB
TypeScript
import { t } from "@lingui/core/macro";
|
|
import type { Locale as DateFnsLocale } from "date-fns";
|
|
import { format } from "date-fns";
|
|
import { HiEllipsisHorizontal } from "react-icons/hi2";
|
|
import { twMerge } from "tailwind-merge";
|
|
|
|
import Dropdown from "~/components/Dropdown";
|
|
import { useLocalisation } from "~/hooks/useLocalisation";
|
|
import { useModal } from "~/providers/modal";
|
|
import { usePopup } from "~/providers/popup";
|
|
import { api } from "~/utils/api";
|
|
|
|
interface TableRowProps {
|
|
publicId?: string;
|
|
name?: string;
|
|
url?: string;
|
|
events?: string[];
|
|
active?: boolean;
|
|
createdAt?: Date | null;
|
|
dateLocale?: DateFnsLocale;
|
|
isLastRow?: boolean;
|
|
showSkeleton?: boolean;
|
|
onEdit?: () => void;
|
|
onTest?: () => void;
|
|
onDelete?: () => void;
|
|
}
|
|
|
|
function formatEvents(events: string[]) {
|
|
return events
|
|
.map((e) => e.replace("card.", ""))
|
|
.join(", ");
|
|
}
|
|
|
|
function formatDate(date?: Date | null, locale?: DateFnsLocale) {
|
|
if (!date) return "Never";
|
|
return format(date, "MMM d, yyyy", { locale });
|
|
}
|
|
|
|
function TableRow({
|
|
publicId,
|
|
name,
|
|
url,
|
|
events,
|
|
active,
|
|
createdAt,
|
|
dateLocale,
|
|
isLastRow,
|
|
showSkeleton,
|
|
onEdit,
|
|
onTest,
|
|
onDelete,
|
|
}: TableRowProps) {
|
|
return (
|
|
<tr className="rounded-b-lg">
|
|
<td className={twMerge("w-[25%]", isLastRow ? "rounded-bl-lg" : "")}>
|
|
<div className="flex items-center p-4">
|
|
<div className="ml-2 min-w-0 flex-1">
|
|
<div className="flex items-center">
|
|
<p
|
|
className={twMerge(
|
|
"mr-2 text-sm font-medium text-light-900 dark:text-dark-900",
|
|
showSkeleton &&
|
|
"mb-2 h-3 w-[125px] animate-pulse rounded-sm bg-light-200 dark:bg-dark-200",
|
|
)}
|
|
>
|
|
{name}
|
|
</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</td>
|
|
<td className="w-[30%] px-3 py-4">
|
|
<p
|
|
className={twMerge(
|
|
"truncate text-sm text-light-900 dark:text-dark-900",
|
|
showSkeleton &&
|
|
"h-3 w-[180px] animate-pulse rounded-sm bg-light-200 dark:bg-dark-200",
|
|
)}
|
|
title={url}
|
|
>
|
|
{url}
|
|
</p>
|
|
</td>
|
|
<td className="w-[20%] px-3 py-4">
|
|
<p
|
|
className={twMerge(
|
|
"text-sm text-light-900 dark:text-dark-900",
|
|
showSkeleton &&
|
|
"h-3 w-[100px] animate-pulse rounded-sm bg-light-200 dark:bg-dark-200",
|
|
)}
|
|
>
|
|
{events && formatEvents(events)}
|
|
</p>
|
|
</td>
|
|
<td className="w-[10%] px-3 py-4">
|
|
<span
|
|
className={twMerge(
|
|
"inline-flex items-center rounded-md px-1.5 py-0.5 text-[11px] font-medium ring-1 ring-inset",
|
|
active
|
|
? "bg-emerald-500/10 text-emerald-400 ring-emerald-500/20"
|
|
: "bg-gray-500/10 text-gray-400 ring-gray-500/20",
|
|
showSkeleton &&
|
|
"h-5 w-[50px] animate-pulse bg-light-200 ring-0 dark:bg-dark-200",
|
|
)}
|
|
>
|
|
{!showSkeleton && (active ? t`Active` : t`Inactive`)}
|
|
</span>
|
|
</td>
|
|
<td className="w-[10%] px-3 py-4">
|
|
<p
|
|
className={twMerge(
|
|
"text-sm text-light-900 dark:text-dark-900",
|
|
showSkeleton &&
|
|
"h-3 w-[80px] animate-pulse rounded-sm bg-light-200 dark:bg-dark-200",
|
|
)}
|
|
>
|
|
{formatDate(createdAt, dateLocale)}
|
|
</p>
|
|
</td>
|
|
<td
|
|
className={twMerge(
|
|
"w-[5%] min-w-[50px]",
|
|
isLastRow && "rounded-br-lg",
|
|
)}
|
|
>
|
|
{!showSkeleton && (
|
|
<div className="flex w-full items-center justify-center px-3">
|
|
<div className="relative z-50">
|
|
<Dropdown
|
|
items={[
|
|
{
|
|
label: t`Edit`,
|
|
action: () => onEdit?.(),
|
|
},
|
|
{
|
|
label: t`Test`,
|
|
action: () => onTest?.(),
|
|
},
|
|
{
|
|
label: t`Delete`,
|
|
action: () => onDelete?.(),
|
|
},
|
|
]}
|
|
>
|
|
<HiEllipsisHorizontal
|
|
size={25}
|
|
className="text-light-900 dark:text-dark-900"
|
|
/>
|
|
</Dropdown>
|
|
</div>
|
|
</div>
|
|
)}
|
|
</td>
|
|
</tr>
|
|
);
|
|
}
|
|
|
|
interface WebhookListProps {
|
|
workspacePublicId: string;
|
|
}
|
|
|
|
export default function WebhookList({ workspacePublicId }: WebhookListProps) {
|
|
const { openModal, setModalState } = useModal();
|
|
const { showPopup } = usePopup();
|
|
const { dateLocale } = useLocalisation();
|
|
|
|
const { data: webhooks, isLoading } = api.webhook.list.useQuery({
|
|
workspacePublicId,
|
|
});
|
|
|
|
const testWebhookMutation = api.webhook.test.useMutation({
|
|
onSuccess: (result) => {
|
|
if (result.success) {
|
|
showPopup({ message: t`Test webhook sent successfully!`, type: "success" });
|
|
} else {
|
|
showPopup({
|
|
message: result.error || t`Webhook test failed`,
|
|
type: "error",
|
|
});
|
|
}
|
|
},
|
|
onError: (error) => {
|
|
showPopup({
|
|
message: error.message || t`Failed to test webhook`,
|
|
type: "error",
|
|
});
|
|
},
|
|
});
|
|
|
|
if (!isLoading && (!webhooks || webhooks.length === 0)) {
|
|
return (
|
|
<div className="rounded-lg border border-light-300 bg-light-50 p-8 text-center dark:border-dark-300 dark:bg-dark-100">
|
|
<p className="text-sm text-neutral-500 dark:text-dark-900">
|
|
{t`No webhooks configured. Add a webhook to receive notifications.`}
|
|
</p>
|
|
</div>
|
|
);
|
|
}
|
|
|
|
return (
|
|
<div className="mt-8 flow-root">
|
|
<div className="overflow-x-auto overflow-y-visible">
|
|
<div className="inline-block min-w-full py-2 pb-12 align-middle">
|
|
<div className="relative h-full shadow ring-1 ring-black ring-opacity-5 sm:rounded-lg">
|
|
<table className="min-w-[700px] divide-y divide-light-600 dark:divide-dark-600">
|
|
<thead className="rounded-t-lg bg-light-300 dark:bg-dark-200">
|
|
<tr>
|
|
<th
|
|
scope="col"
|
|
className="w-[25%] rounded-tl-lg py-3.5 pl-4 pr-3 text-left text-sm font-semibold text-light-900 dark:text-dark-900 sm:pl-6"
|
|
>
|
|
{t`Name`}
|
|
</th>
|
|
<th
|
|
scope="col"
|
|
className="w-[30%] px-3 py-3.5 text-left text-sm font-semibold text-light-900 dark:text-dark-900"
|
|
>
|
|
{t`URL`}
|
|
</th>
|
|
<th
|
|
scope="col"
|
|
className="w-[20%] px-3 py-3.5 text-left text-sm font-semibold text-light-900 dark:text-dark-900"
|
|
>
|
|
{t`Events`}
|
|
</th>
|
|
<th
|
|
scope="col"
|
|
className="w-[10%] px-3 py-3.5 text-left text-sm font-semibold text-light-900 dark:text-dark-900"
|
|
>
|
|
{t`Status`}
|
|
</th>
|
|
<th
|
|
scope="col"
|
|
className="w-[10%] px-3 py-3.5 text-left text-sm font-semibold text-light-900 dark:text-dark-900"
|
|
>
|
|
{t`Created`}
|
|
</th>
|
|
<th
|
|
scope="col"
|
|
className="w-[5%] rounded-tr-lg px-3 py-3.5 text-center text-sm font-semibold text-light-900 dark:text-dark-900"
|
|
>
|
|
{/* Actions column */}
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody className="divide-y divide-light-600 bg-light-50 dark:divide-dark-600 dark:bg-dark-100">
|
|
{!isLoading &&
|
|
webhooks?.map((webhook, index) => (
|
|
<TableRow
|
|
key={webhook.publicId}
|
|
publicId={webhook.publicId}
|
|
name={webhook.name}
|
|
url={webhook.url}
|
|
events={webhook.events}
|
|
active={webhook.active}
|
|
createdAt={webhook.createdAt}
|
|
dateLocale={dateLocale}
|
|
isLastRow={index === webhooks.length - 1}
|
|
onEdit={() => {
|
|
setModalState("EDIT_WEBHOOK", {
|
|
publicId: webhook.publicId,
|
|
name: webhook.name,
|
|
url: webhook.url,
|
|
events: webhook.events,
|
|
active: webhook.active,
|
|
});
|
|
openModal("EDIT_WEBHOOK", webhook.publicId, webhook.name);
|
|
}}
|
|
onTest={() => {
|
|
testWebhookMutation.mutate({
|
|
workspacePublicId,
|
|
webhookPublicId: webhook.publicId,
|
|
});
|
|
}}
|
|
onDelete={() => {
|
|
openModal("DELETE_WEBHOOK", webhook.publicId, webhook.name);
|
|
}}
|
|
/>
|
|
))}
|
|
|
|
{isLoading && (
|
|
<>
|
|
<TableRow showSkeleton />
|
|
<TableRow showSkeleton />
|
|
<TableRow showSkeleton isLastRow />
|
|
</>
|
|
)}
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
);
|
|
}
|