mirror of
https://github.com/hanzoai/calendar.git
synced 2026-10-30 14:46:43 +00:00
a44a3e5b84
* feat: add Webhook resource to PBAC system with permission enforcement - Add Webhook resource to PBAC permission registry with CRUD actions - Implement PBAC permission checks in webhook handlers (create, edit, delete) - Add webhook permission translations to common.json - Use PermissionCheckService with fallback roles [ADMIN, OWNER] for team webhooks - Maintain backward compatibility when PBAC is disabled - Follow same pattern as workflow PBAC implementation from PR #22845 Co-Authored-By: [email protected] <[email protected]> * fix: implement PBAC permission filtering in webhook list handler - Add PermissionCheckService to filter team webhooks by webhook.read permission - Only show webhooks from teams where user has proper permissions - Maintain backward compatibility with fallback to all team memberships Co-Authored-By: [email protected] <[email protected]> * add migration for default roles * new forUserMethod * update webhook repository * fix UI showing/hiding webhooks for webhoo.create teams * WIP pbac procedure migratoin + tests * add more roles to get fallback * permissions in cmponents instead of readOnly * passPermissions to list item * push instant events logic * Git merge * wip teamId accessable refactor * fix delete handler --------- Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
152 lines
4.7 KiB
TypeScript
152 lines
4.7 KiB
TypeScript
import { router } from "../../../trpc";
|
|
import { ZCreateInputSchema } from "./create.schema";
|
|
import { ZDeleteInputSchema } from "./delete.schema";
|
|
import { ZEditInputSchema } from "./edit.schema";
|
|
import { ZGetInputSchema } from "./get.schema";
|
|
import { ZListInputSchema } from "./list.schema";
|
|
import { ZTestTriggerInputSchema } from "./testTrigger.schema";
|
|
import { createWebhookPbacProcedure } from "./util";
|
|
|
|
type WebhookRouterHandlerCache = {
|
|
list?: typeof import("./list.handler").listHandler;
|
|
get?: typeof import("./get.handler").getHandler;
|
|
create?: typeof import("./create.handler").createHandler;
|
|
edit?: typeof import("./edit.handler").editHandler;
|
|
delete?: typeof import("./delete.handler").deleteHandler;
|
|
testTrigger?: typeof import("./testTrigger.handler").testTriggerHandler;
|
|
getByViewer?: typeof import("./getByViewer.handler").getByViewerHandler;
|
|
};
|
|
|
|
const UNSTABLE_HANDLER_CACHE: WebhookRouterHandlerCache = {};
|
|
|
|
export const webhookRouter = router({
|
|
list: createWebhookPbacProcedure("webhook.read")
|
|
.input(ZListInputSchema)
|
|
.query(async ({ ctx, input }) => {
|
|
if (!UNSTABLE_HANDLER_CACHE.list) {
|
|
UNSTABLE_HANDLER_CACHE.list = await import("./list.handler").then((mod) => mod.listHandler);
|
|
}
|
|
|
|
// Unreachable code but required for type safety
|
|
if (!UNSTABLE_HANDLER_CACHE.list) {
|
|
throw new Error("Failed to load handler");
|
|
}
|
|
|
|
return UNSTABLE_HANDLER_CACHE.list({
|
|
ctx,
|
|
input,
|
|
});
|
|
}),
|
|
|
|
get: createWebhookPbacProcedure("webhook.read", ["ADMIN", "OWNER", "MEMBER"])
|
|
.input(ZGetInputSchema)
|
|
.query(async ({ ctx, input }) => {
|
|
if (!UNSTABLE_HANDLER_CACHE.get) {
|
|
UNSTABLE_HANDLER_CACHE.get = await import("./get.handler").then((mod) => mod.getHandler);
|
|
}
|
|
|
|
// Unreachable code but required for type safety
|
|
if (!UNSTABLE_HANDLER_CACHE.get) {
|
|
throw new Error("Failed to load handler");
|
|
}
|
|
|
|
return UNSTABLE_HANDLER_CACHE.get({
|
|
ctx,
|
|
input,
|
|
});
|
|
}),
|
|
|
|
create: createWebhookPbacProcedure("webhook.create")
|
|
.input(ZCreateInputSchema)
|
|
.mutation(async ({ ctx, input }) => {
|
|
if (!UNSTABLE_HANDLER_CACHE.create) {
|
|
UNSTABLE_HANDLER_CACHE.create = await import("./create.handler").then((mod) => mod.createHandler);
|
|
}
|
|
|
|
// Unreachable code but required for type safety
|
|
if (!UNSTABLE_HANDLER_CACHE.create) {
|
|
throw new Error("Failed to load handler");
|
|
}
|
|
|
|
return UNSTABLE_HANDLER_CACHE.create({
|
|
ctx,
|
|
input,
|
|
});
|
|
}),
|
|
|
|
edit: createWebhookPbacProcedure("webhook.update")
|
|
.input(ZEditInputSchema)
|
|
.mutation(async ({ ctx, input }) => {
|
|
if (!UNSTABLE_HANDLER_CACHE.edit) {
|
|
UNSTABLE_HANDLER_CACHE.edit = await import("./edit.handler").then((mod) => mod.editHandler);
|
|
}
|
|
|
|
// Unreachable code but required for type safety
|
|
if (!UNSTABLE_HANDLER_CACHE.edit) {
|
|
throw new Error("Failed to load handler");
|
|
}
|
|
|
|
return UNSTABLE_HANDLER_CACHE.edit({
|
|
ctx,
|
|
input,
|
|
});
|
|
}),
|
|
|
|
delete: createWebhookPbacProcedure("webhook.delete")
|
|
.input(ZDeleteInputSchema)
|
|
.mutation(async ({ ctx, input }) => {
|
|
if (!UNSTABLE_HANDLER_CACHE.delete) {
|
|
UNSTABLE_HANDLER_CACHE.delete = await import("./delete.handler").then((mod) => mod.deleteHandler);
|
|
}
|
|
|
|
// Unreachable code but required for type safety
|
|
if (!UNSTABLE_HANDLER_CACHE.delete) {
|
|
throw new Error("Failed to load handler");
|
|
}
|
|
|
|
return UNSTABLE_HANDLER_CACHE.delete({
|
|
ctx,
|
|
input,
|
|
});
|
|
}),
|
|
|
|
testTrigger: createWebhookPbacProcedure("webhook.update")
|
|
.input(ZTestTriggerInputSchema)
|
|
.mutation(async ({ ctx, input }) => {
|
|
if (!UNSTABLE_HANDLER_CACHE.testTrigger) {
|
|
UNSTABLE_HANDLER_CACHE.testTrigger = await import("./testTrigger.handler").then(
|
|
(mod) => mod.testTriggerHandler
|
|
);
|
|
}
|
|
|
|
// Unreachable code but required for type safety
|
|
if (!UNSTABLE_HANDLER_CACHE.testTrigger) {
|
|
throw new Error("Failed to load handler");
|
|
}
|
|
|
|
return UNSTABLE_HANDLER_CACHE.testTrigger({
|
|
ctx,
|
|
input,
|
|
});
|
|
}),
|
|
|
|
getByViewer: createWebhookPbacProcedure("webhook.read", ["ADMIN", "OWNER", "MEMBER"]).query(
|
|
async ({ ctx }) => {
|
|
if (!UNSTABLE_HANDLER_CACHE.getByViewer) {
|
|
UNSTABLE_HANDLER_CACHE.getByViewer = await import("./getByViewer.handler").then(
|
|
(mod) => mod.getByViewerHandler
|
|
);
|
|
}
|
|
|
|
// Unreachable code but required for type safety
|
|
if (!UNSTABLE_HANDLER_CACHE.getByViewer) {
|
|
throw new Error("Failed to load handler");
|
|
}
|
|
|
|
return UNSTABLE_HANDLER_CACHE.getByViewer({
|
|
ctx,
|
|
});
|
|
}
|
|
),
|
|
});
|