Arnaud
8d5787e56e
Splits what was one isDeveloper flag (gating webhooks, API keys, AND BYOK together) into two independent permissions: - isDeveloper (webhooks + self-serve API keys): admin-toggled as before, but now ALSO self-serve -- PATCH /api/v1/users/me/developer-access lets any paid-tier (tier !== "free") user turn it on themselves, no added fee. Free tier still needs an admin grant. Turning it off is always self-serve regardless of tier, since revoking your own access needs no gatekeeping. canSelfServeDeveloperAccess() in lib/permissions.ts is the single check for "is this tier eligible." - isByokEnabled (BYOK AI provider keys): new column, admin-only, no self-serve path at all -- routing real AI provider spend through Epicure on the user's own key warrants a manual admin check-in that webhooks/API access don't need. requireByok() replaces requireDeveloper() on the three ai-keys routes. Migration adds is_byok_enabled and grandfathers in anyone who already has a BYOK key configured (the earlier grandfather migration only covered the combined isDeveloper flag, which BYOK no longer reads). Settings UI: webhooks/API-keys pages show a self-serve "Enable" toggle for paid-tier non-developers instead of the locked notice (still shown to free-tier users), plus a "Disable developer access" link once enabled. Settings -> AI's BYOK section now checks isByokEnabled instead of isDeveloper -- unaffected by the self-serve change, still fully admin-gated. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
65 lines
2.5 KiB
TypeScript
65 lines
2.5 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { requireAdmin } from "@/lib/api-auth";
|
|
import { db, users, auditLogs, eq } from "@epicure/db";
|
|
import { randomUUID } from "crypto";
|
|
|
|
interface RouteContext {
|
|
params: Promise<{ id: string }>;
|
|
}
|
|
|
|
export async function PATCH(req: NextRequest, { params }: RouteContext) {
|
|
const { session, response } = await requireAdmin();
|
|
if (response) return response;
|
|
|
|
const { id } = await params;
|
|
const body = await req.json() as { role?: string; tier?: string; isDeveloper?: boolean; isByokEnabled?: boolean };
|
|
const { role, tier, isDeveloper, isByokEnabled } = body;
|
|
|
|
const validRoles = ["user", "moderator", "admin"] as const;
|
|
const validTiers = ["free", "pro", "family"] as const;
|
|
|
|
if (role !== undefined && !validRoles.includes(role as typeof validRoles[number])) {
|
|
return NextResponse.json({ error: "Invalid role" }, { status: 400 });
|
|
}
|
|
if (tier !== undefined && !validTiers.includes(tier as typeof validTiers[number])) {
|
|
return NextResponse.json({ error: "Invalid tier" }, { status: 400 });
|
|
}
|
|
if (isDeveloper !== undefined && typeof isDeveloper !== "boolean") {
|
|
return NextResponse.json({ error: "Invalid isDeveloper" }, { status: 400 });
|
|
}
|
|
if (isByokEnabled !== undefined && typeof isByokEnabled !== "boolean") {
|
|
return NextResponse.json({ error: "Invalid isByokEnabled" }, { status: 400 });
|
|
}
|
|
|
|
const updateData: Partial<{ role: "user" | "moderator" | "admin"; tier: "free" | "pro" | "family"; isDeveloper: boolean; isByokEnabled: boolean; updatedAt: Date }> = {
|
|
updatedAt: new Date(),
|
|
};
|
|
if (role) updateData.role = role as "user" | "moderator" | "admin";
|
|
if (tier) updateData.tier = tier as "free" | "pro" | "family";
|
|
if (isDeveloper !== undefined) updateData.isDeveloper = isDeveloper;
|
|
if (isByokEnabled !== undefined) updateData.isByokEnabled = isByokEnabled;
|
|
|
|
const [updated] = await db
|
|
.update(users)
|
|
.set(updateData)
|
|
.where(eq(users.id, id))
|
|
.returning({ id: users.id, role: users.role, tier: users.tier, isDeveloper: users.isDeveloper, isByokEnabled: users.isByokEnabled });
|
|
|
|
if (!updated) {
|
|
return NextResponse.json({ error: "User not found" }, { status: 404 });
|
|
}
|
|
|
|
// Write audit log
|
|
await db.insert(auditLogs).values({
|
|
id: randomUUID(),
|
|
userId: session!.user.id,
|
|
action: "admin.user.update",
|
|
targetType: "user",
|
|
targetId: id,
|
|
metadata: JSON.stringify({ role, tier, isDeveloper, isByokEnabled }),
|
|
createdAt: new Date(),
|
|
});
|
|
|
|
return NextResponse.json({ user: updated });
|
|
}
|