Leon SerfatyandClaude Opus 5
3e9ba07175
Turnstile bot protection (sign-in, sign-up, password-reset): - Register Better Auth's captcha plugin with the cloudflare-turnstile provider; endpoints listed explicitly rather than relying on defaults. /reset-password is intentionally excluded — it is reached only via a single-use emailed token. - Add an explicit-render Turnstile widget component. Tokens are single-use, so each form resets the challenge after a failed submit; submit stays disabled until a token is held. - Read the site key server-side and pass it down as a prop, so rotating it does not require a rebuild. - Fail fast in production when TURNSTILE_SECRET_KEY is missing, and when a secret is set without a site key (that combination would demand a token no form can produce, locking every user out). - Pass a throwaway secret during `next build` in the Dockerfile, mirroring the existing BETTER_AUTH_SECRET treatment, so image builds don't need it. CSP fixes in middleware (these blocked Turnstile entirely): - Add frame-src for challenges.cloudflare.com. Without it the widget's iframe fell back to default-src 'self' and was blocked outright. - Allow 'unsafe-eval' and websockets in DEVELOPMENT only. `next dev` compiles with eval(), so the strict policy threw EvalError and killed hydration — no client JS ran at all, which also meant form submit handlers never fired. Production policy is unchanged and still strict. Also included (concurrent work in the tree): - Admin organizations pages and lib/admin/orgs. - Episode moderation migration, SEO metadata (sitemap, robots, JSON-LD, OG/Twitter images, manifest), Umami analytics, not-found page. Local dev database: docker-compose.dev.yml provisions Postgres 18 on port 5443 (5432-5442 are in use by other local projects). Note: `npx tsc --noEmit` currently fails in app/(app)/team/page.tsx — an `invitations` prop the component does not accept. This predates the commit and will fail `next build` until fixed. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
69 lines
2.6 KiB
TypeScript
69 lines
2.6 KiB
TypeScript
import type { Metadata } from "next";
|
|
import { notFound } from "next/navigation";
|
|
import Link from "next/link";
|
|
import { ArrowLeft } from "lucide-react";
|
|
import { requireAuth } from "@/lib/auth/guards";
|
|
import { prisma } from "@/lib/db";
|
|
import { PageHeader } from "@/components/app/page-header";
|
|
import { SeriesDetailClient } from "@/components/app/series-detail-client";
|
|
import { EpisodeStatusBadge } from "@/components/app/episode-status-badge";
|
|
import { Button } from "@/components/ui/button";
|
|
import { Card, CardContent } from "@/components/ui/card";
|
|
|
|
export async function generateMetadata({
|
|
params,
|
|
}: {
|
|
params: Promise<{ id: string }>;
|
|
}): Promise<Metadata> {
|
|
const { id } = await params;
|
|
// Title only — this is an authed page and the route group is already noindex.
|
|
const series = await prisma.series.findUnique({ where: { id }, select: { title: true } });
|
|
return { title: series?.title ?? "Series" };
|
|
}
|
|
|
|
export default async function SeriesDetailPage({ params }: { params: Promise<{ id: string }> }) {
|
|
const { id } = await params;
|
|
const session = await requireAuth();
|
|
|
|
const series = await prisma.series.findUnique({
|
|
where: { id },
|
|
include: { episodes: { orderBy: { createdAt: "desc" } } },
|
|
});
|
|
if (!series) notFound();
|
|
if (series.userId !== session.user.id && session.user.role !== "admin") notFound();
|
|
|
|
const planned = (series.plan as unknown as { title: string; topic: string; summary: string }[]) ?? [];
|
|
|
|
return (
|
|
<>
|
|
<Button asChild variant="ghost" size="sm" className="mb-2">
|
|
<Link href="/series">
|
|
<ArrowLeft className="h-4 w-4" /> Back to series
|
|
</Link>
|
|
</Button>
|
|
<PageHeader title={series.title} description={series.description ?? undefined} />
|
|
|
|
<h2 className="mb-3 text-sm font-semibold text-muted-foreground">Planned episodes</h2>
|
|
<SeriesDetailClient seriesId={series.id} episodes={planned} />
|
|
|
|
{series.episodes.length > 0 && (
|
|
<div className="mt-8">
|
|
<h2 className="mb-3 text-sm font-semibold text-muted-foreground">Generated</h2>
|
|
<div className="space-y-2">
|
|
{series.episodes.map((ep) => (
|
|
<Link key={ep.id} href={`/episodes/${ep.id}`}>
|
|
<Card className="transition-shadow hover:shadow-md">
|
|
<CardContent className="flex items-center justify-between py-3">
|
|
<span className="truncate font-medium">{ep.title}</span>
|
|
<EpisodeStatusBadge status={ep.status} />
|
|
</CardContent>
|
|
</Card>
|
|
</Link>
|
|
))}
|
|
</div>
|
|
</div>
|
|
)}
|
|
</>
|
|
);
|
|
}
|