Mattsson
a1a816b4a5
* Implement company and account deletion features - Add event types for company and account deletion to CoreEvent. - Enhance Supabase middleware to handle company context resolution and cookie management for archived companies. - Create API routes for deleting accounts and companies, including necessary validations and event emissions. - Implement tests for account and company deletion endpoints to ensure proper functionality and error handling. - Add retention notice component to inform users about bookkeeping data retention during destructive actions. - Create database migrations to support soft deletion of companies and anonymization of user accounts, ensuring compliance with retention laws. * feat: enhance account deletion process and update user notifications * Add service client for onboarding completion check and update escape hatch visibility * Enhance invite flow and email handling for company members * Refactor company context and RLS policies for active company isolation - Update `switchCompany` to remove unnecessary revalidation as client handles navigation. - Revise `getActiveCompanyId` to prioritize `user_preferences` and validate against non-archived memberships. - Modify `setActiveCompany` to ensure `user_preferences` is the authoritative source while maintaining cookie compatibility. - Enhance middleware to resolve active company using `user_preferences` and fallback to first non-archived membership. - Introduce new API route `/api/company/current` to fetch the active company ID for cross-tab synchronization. - Implement `CompanyTabSync` component for real-time active company enforcement across tabs. - Create migration for RLS policies to enforce single-active-company isolation using `current_active_company_id()`. * feat: implement viewer role enforcement for write permissions - Added `useCanWrite` hook to determine if the current user has write permissions based on their role in the active company. - Updated various components (JournalEntryForm, CustomerForm, DeadlineForm, etc.) to disable write actions and show a lock icon with a tooltip for users without write permissions. - Introduced `requireWritePermission` function to enforce write permissions at the API level, returning a 403 response for viewers. - Created tests to verify the behavior of the viewer role and write permissions. - Added database migration to enforce read-only access for viewers at the database level.
98 lines
3.3 KiB
TypeScript
98 lines
3.3 KiB
TypeScript
'use client'
|
|
|
|
import { useEffect } from 'react'
|
|
import { useCompany } from '@/contexts/CompanyContext'
|
|
|
|
/**
|
|
* CompanyTabSync — cross-tab active company enforcement.
|
|
*
|
|
* Mounted once inside the dashboard layout (via CompanyProvider), this
|
|
* component guarantees that every open tab of the same user always shows
|
|
* the same active company. It has three layers:
|
|
*
|
|
* 1. BroadcastChannel('gnubok-company-switch')
|
|
* When the user switches company in one tab, every other live tab
|
|
* receives the message and hard-reloads if its current company differs
|
|
* from the broadcasted one.
|
|
*
|
|
* 2. visibilitychange
|
|
* Catches tabs that were hidden/minimized during a switch. On focus,
|
|
* the tab checks /api/company/current and reloads on mismatch — before
|
|
* any pixel of stale data is painted to the user.
|
|
*
|
|
* 3. pageshow with event.persisted === true
|
|
* Catches tabs restored from the browser's bfcache (back/forward
|
|
* navigation). bfcache literally freezes the DOM and JS state, so
|
|
* neither BroadcastChannel nor visibilitychange fires. pageshow is the
|
|
* only reliable signal and is guaranteed to fire on bfcache restore.
|
|
*
|
|
* All three layers converge on the same action: window.location.assign('/')
|
|
* — a hard navigation that wipes React state, the router cache, in-flight
|
|
* requests, blob URLs, and every other in-tab leak vector.
|
|
*
|
|
* No-op when the user has no active company (renders nothing, attaches no
|
|
* listeners).
|
|
*/
|
|
export default function CompanyTabSync() {
|
|
const { company } = useCompany()
|
|
const currentCompanyId = company?.id ?? null
|
|
|
|
useEffect(() => {
|
|
const hardReload = () => {
|
|
window.location.assign('/')
|
|
}
|
|
|
|
// Layer 1: BroadcastChannel — live cross-tab sync
|
|
let channel: BroadcastChannel | null = null
|
|
if (typeof BroadcastChannel !== 'undefined') {
|
|
channel = new BroadcastChannel('gnubok-company-switch')
|
|
channel.onmessage = (event: MessageEvent<{ companyId: string | null }>) => {
|
|
const incomingId = event.data?.companyId ?? null
|
|
if (incomingId !== currentCompanyId) {
|
|
hardReload()
|
|
}
|
|
}
|
|
}
|
|
|
|
// Layer 2: visibilitychange — on focus, verify against server
|
|
const checkServer = async () => {
|
|
try {
|
|
const res = await fetch('/api/company/current', {
|
|
cache: 'no-store',
|
|
credentials: 'same-origin',
|
|
})
|
|
if (!res.ok) return
|
|
const data = (await res.json()) as { companyId: string | null }
|
|
if (data.companyId !== currentCompanyId) {
|
|
hardReload()
|
|
}
|
|
} catch {
|
|
// Network error / offline — do nothing (don't accidentally reload-loop)
|
|
}
|
|
}
|
|
|
|
const handleVisibilityChange = () => {
|
|
if (document.visibilityState === 'visible') {
|
|
void checkServer()
|
|
}
|
|
}
|
|
document.addEventListener('visibilitychange', handleVisibilityChange)
|
|
|
|
// Layer 3: pageshow (persisted === true) — bfcache restore
|
|
const handlePageShow = (event: PageTransitionEvent) => {
|
|
if (event.persisted) {
|
|
void checkServer()
|
|
}
|
|
}
|
|
window.addEventListener('pageshow', handlePageShow)
|
|
|
|
return () => {
|
|
channel?.close()
|
|
document.removeEventListener('visibilitychange', handleVisibilityChange)
|
|
window.removeEventListener('pageshow', handlePageShow)
|
|
}
|
|
}, [currentCompanyId])
|
|
|
|
return null
|
|
}
|