refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

* refactor(auth): replace dashboard sessions with stateless tokens * feat(auth): harden session issuance and distributed enforcement * fix(proxy): preserve trusted proxy compatibility defaults * refactor: address dashboard auth review feedback * refactor: remove classic frontend and flatten web app
2026-07-20 16:48:43 +08:00
parent 5a6c53d496
commit 31d70fca39
1605 changed files with 17511 additions and 147913 deletions
@@ -0,0 +1,110 @@
+/*
+Copyright (C) 2023-2026 QuantumNous
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+For commercial licensing, please contact support@quantumnous.com
+*/
+import { redirect } from '@tanstack/react-router'
+import * as z from 'zod'
+
+/**
+ * Create search schema for settings routes with section parameter
+ */
+export function createSectionSearchSchema<TSectionId extends string>(
+  sectionIds: readonly [TSectionId, ...TSectionId[]],
+  defaultSection: TSectionId
+) {
+  return z.object({
+    section: z
+      .enum(sectionIds as unknown as [string, ...string[]])
+      .optional()
+      .catch(defaultSection),
+  })
+}
+
+/**
+ * Configuration for creating a settings route config
+ */
+export type SettingsRouteConfigOptions<
+  TSectionId extends string,
+  TComponent = unknown,
+> = {
+  /** Section IDs array from section-registry */
+  sectionIds: readonly [TSectionId, ...TSectionId[]]
+  /** Default section ID */
+  defaultSection: TSectionId
+  /** Settings component to render */
+  component: TComponent
+  /** Route path for redirect (e.g., '/system-settings/site') */
+  routePath: string
+  /** Whether to redirect to default section if no section is provided (default: false) */
+  redirectToDefault?: boolean
+}
+
+/**
+ * Create a settings route configuration with common setup
+ * This abstracts the repetitive pattern of:
+ * - Creating search schema
+ * - Setting up validateSearch
+ * - Optionally redirecting to default section
+ *
+ * @example
+ * ```tsx
+ * export const Route = createFileRoute('/_authenticated/system-settings/site')(
+ *   createSettingsRouteConfig({
+ *     sectionIds: SITE_SECTION_IDS,
+ *     defaultSection: SITE_DEFAULT_SECTION,
+ *     component: SiteSettings,
+ *     routePath: '/system-settings/site',
+ *     redirectToDefault: true,
+ *   })
+ * )
+ * ```
+ */
+export function createSettingsRouteConfig<
+  TSectionId extends string,
+  TComponent = unknown,
+>(options: SettingsRouteConfigOptions<TSectionId, TComponent>) {
+  const {
+    sectionIds,
+    defaultSection,
+    component,
+    routePath,
+    redirectToDefault = false,
+  } = options
+
+  const searchSchema = createSectionSearchSchema(sectionIds, defaultSection)
+
+  const routeConfig = {
+    validateSearch: searchSchema,
+    component,
+    ...(redirectToDefault && {
+      beforeLoad: ({
+        search,
+      }: {
+        search?: { section?: TSectionId | string }
+      }) => {
+        if (!search?.section) {
+          throw redirect({
+            to: routePath,
+            search: { section: defaultSection } as Record<string, unknown>,
+          })
+        }
+      },
+    }),
+  }
+
+  return routeConfig
+}