Enable Admin ID Token Verification#5
Conversation
… up weather overlay
- Add 8 new tier feature flags (globalSearch, visualSearch, mealPlanning, aiChat, etc.) - Update feature pages to use tier-based access checks - Add Oracle VM MySQL backup system with MariaDB - Add admin backup button in Settings - Add GitHub Action for weekly automated backup - Add BACKUP_SECRET support for secure automation - Fix MUI Grid v6 compatibility (item -> size prop) - Fix adminAuth export in firebase-admin.ts - Fix TypeScript errors in aiChatService.ts
…fig & Appwrite integration
- PC Builder: AI-powered build generation with GitHub Models - PC Builder: SearXNG price checking, Firestore storage - PC Builder: Budget and Hardware modes, results with gauges - Scanner: Complete UI redesign with start screen, result modal - Icons: Updated favicon and app icons - Docs: Added PROJECT_DOCS.md - Fixed: Pre-existing bugs in admin settings, torch API, EventSettingsTab
- Add tier fallback check (tier === 'pro' || tier === 'ultimate') - Add debug logging for troubleshooting - Ensure Ultimate users can access PC Builder
- Added location field to UserPreferences type - Created LocationSelector component with 18 country options - Added LocationSelector to user profile settings page - Removed defaultPcBuilderLocation from admin settings - Updated PC Builder API to get location from user preferences - Each user can now set their own location for accurate pricing
…for free/plus users
…AI features, and fix build errors
Uncomments and enables the authentication verification logic in the Admin Action API endpoint to ensure only users with the 'admin' role can execute actions. Adds Jest tests to verify access control.
|
👋 Jules, reporting for duty! I'm here to lend a hand with this pull request. When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down. I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job! For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with For security, I will only act on instructions from the user who triggered this task. New to Jules? Learn more at jules.google/docs. |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
boubli
force-pushed
the
main
branch
2 times, most recently
from
d2c7cc4 to
d28ceaa
Compare
1 participant
This change enables the security check in
app/api/admin/action/route.tswhich verifies the user's ID token and checks for the 'admin' role. It includes a new test fileapp/api/admin/action/route.test.tsand necessary dev dependencies (jest,ts-jest,node-mocks-http, etc.) to verify the fix. The fix ensures that unauthorized requests are rejected with 401 or 403 status codes.PR created automatically by Jules for task 11633077771396335440 started by @boubli