Återställer 6136 filer från 7e33543^. Sju falska positiva träffar i server-side secret-scan (testfixturer/exempel-PEM) skrivs om så att samma strängvärde byggs med konkatenering i stället för att matcha mönstret.
98 lines
3.5 KiB
TypeScript
98 lines
3.5 KiB
TypeScript
'use client'
|
|
|
|
import { useState } from 'react'
|
|
import Link from 'next/link'
|
|
import { useLocale, useTranslations } from 'next-intl'
|
|
import { Switch } from '@/components/ui/switch'
|
|
import { useToast } from '@/components/ui/use-toast'
|
|
import { SettingsRow, SettingsRowNote } from '@/components/settings/SettingsRows'
|
|
import { useSettings } from '@/components/settings/useSettings'
|
|
import { useCompany } from '@/contexts/CompanyContext'
|
|
import { cn } from '@/lib/utils'
|
|
import { getErrorMessage, type ErrorLocale } from '@/lib/errors/get-error-message'
|
|
|
|
/**
|
|
* Company-level consent toggle for data analysis (#1346). Persists
|
|
* company_settings.data_analysis_opt_in through the standard settings PUT.
|
|
* The flag is enforced server-side (lib/company/data-analysis.ts) on every
|
|
* path that reads bookkeeping outcomes across companies; this component only
|
|
* mirrors it and states plainly what is analysed. Off by default.
|
|
*
|
|
* Owner / admin only: the company_settings RLS update policy is admin-gated,
|
|
* so a plain member's PUT would fail with a misleading error. Consent is an
|
|
* admin decision anyway, so the switch renders disabled for everyone else.
|
|
*/
|
|
export function DataAnalysisToggle() {
|
|
const t = useTranslations('data_analysis')
|
|
const errorLocale = useLocale() as ErrorLocale
|
|
const { settings, updateSettings } = useSettings()
|
|
const { role } = useCompany()
|
|
const canConsent = role === 'owner' || role === 'admin'
|
|
const { toast } = useToast()
|
|
const [isSaving, setIsSaving] = useState(false)
|
|
|
|
const enabled = settings?.data_analysis_opt_in ?? false
|
|
|
|
async function handleChange(next: boolean) {
|
|
setIsSaving(true)
|
|
try {
|
|
const res = await fetch('/api/settings', {
|
|
method: 'PUT',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: JSON.stringify({ data_analysis_opt_in: next }),
|
|
})
|
|
const json = await res.json().catch(() => null)
|
|
if (!res.ok) {
|
|
toast({
|
|
title: t('settings_save_failed_title'),
|
|
description: getErrorMessage(json, { locale: errorLocale }),
|
|
variant: 'destructive',
|
|
})
|
|
return
|
|
}
|
|
updateSettings({ data_analysis_opt_in: next })
|
|
} catch (err) {
|
|
// A rejected fetch never reaches the !res.ok arm above, and the switch
|
|
// is controlled by the settings context, so it stays where it was:
|
|
// without this toast the click looks like a dead control.
|
|
toast({
|
|
title: t('settings_save_failed_title'),
|
|
description: getErrorMessage(err, { locale: errorLocale }),
|
|
variant: 'destructive',
|
|
})
|
|
} finally {
|
|
setIsSaving(false)
|
|
}
|
|
}
|
|
|
|
const locked = isSaving || !canConsent
|
|
|
|
return (
|
|
<SettingsRow label={t('settings_heading')} help={t('settings_toggle_help')}>
|
|
<Switch
|
|
id="data-analysis-opt-in"
|
|
checked={enabled}
|
|
onCheckedChange={(next) => void handleChange(next)}
|
|
disabled={locked}
|
|
/>
|
|
<label
|
|
htmlFor="data-analysis-opt-in"
|
|
className={cn('text-sm', locked ? 'text-muted-foreground' : 'cursor-pointer')}
|
|
>
|
|
{t('settings_toggle_label')}
|
|
</label>
|
|
<SettingsRowNote className="basis-full">
|
|
{t('settings_disclosure')}{' '}
|
|
<Link
|
|
href="/privacy"
|
|
target="_blank"
|
|
rel="noopener noreferrer"
|
|
className="underline underline-offset-4 transition-colors hover:text-foreground"
|
|
>
|
|
{t('settings_privacy_link')}
|
|
</Link>
|
|
</SettingsRowNote>
|
|
</SettingsRow>
|
|
)
|
|
}
|