mirror of
https://github.com/InvoiceShelf/InvoiceShelf.git
synced 2026-04-15 09:14:08 +00:00
23d1476870
Rewires module installation to use slug + version + checksum_sha256 instead of the opaque module identifier. ModuleInstaller splits marketplace token handling out of install() into helpers, adopts structured error responses, and validates the downloaded archive's SHA-256 against the marketplace manifest before unpacking. ModuleResource is simplified to accept an already-loaded installed-module instance rather than fetching it from state, exposes access_tier and checksum fields, and drops the auto-disable-on-unpurchased side effect that was bleeding write logic into a read resource. UnzipUpdateRequest accepts a nullable module with a conditional module_name field so the same endpoint serves both app and module updates. ModulesPolicy::manageModules now short-circuits for super-admins so administration flows (token validation, store state) are not blocked on a company-scoped ability. Two new feature tests cover both the authorization bypass and ModuleResource serialization.
82 lines
2.2 KiB
TypeScript
82 lines
2.2 KiB
TypeScript
import { client } from '../client'
|
|
import { API } from '../endpoints'
|
|
import type { ApiResponse } from '@/scripts/types/api'
|
|
import type { Module } from '@/scripts/types/domain/module'
|
|
|
|
export interface ModuleCheckResponse {
|
|
error?: string
|
|
success?: boolean
|
|
authenticated?: boolean
|
|
premium?: boolean
|
|
}
|
|
|
|
export interface ModuleDetailMeta {
|
|
modules: Module[]
|
|
}
|
|
|
|
export interface ModuleInstallPayload {
|
|
slug: string
|
|
module_name: string
|
|
version: string
|
|
checksum_sha256?: string | null
|
|
path?: string
|
|
}
|
|
|
|
export interface ModuleDetailResponse {
|
|
data: Module
|
|
meta: ModuleDetailMeta
|
|
}
|
|
|
|
export const moduleService = {
|
|
async list(): Promise<ApiResponse<Module[]>> {
|
|
const { data } = await client.get(API.MODULES)
|
|
return data
|
|
},
|
|
|
|
async get(module: string): Promise<ModuleDetailResponse> {
|
|
const { data } = await client.get(`${API.MODULES}/${module}`)
|
|
return data
|
|
},
|
|
|
|
async checkToken(apiToken: string): Promise<ModuleCheckResponse> {
|
|
const { data } = await client.get(`${API.MODULES_CHECK}?api_token=${apiToken}`)
|
|
return data
|
|
},
|
|
|
|
async enable(module: string): Promise<{ success: boolean }> {
|
|
const { data } = await client.post(`${API.MODULES}/${module}/enable`)
|
|
return data
|
|
},
|
|
|
|
async disable(module: string): Promise<{ success: boolean }> {
|
|
const { data } = await client.post(`${API.MODULES}/${module}/disable`)
|
|
return data
|
|
},
|
|
|
|
// Installation flow
|
|
async download(payload: ModuleInstallPayload): Promise<{ success: boolean }> {
|
|
const { data } = await client.post(API.MODULES_DOWNLOAD, payload)
|
|
return data
|
|
},
|
|
|
|
async upload(payload: FormData): Promise<{ success: boolean }> {
|
|
const { data } = await client.post(API.MODULES_UPLOAD, payload)
|
|
return data
|
|
},
|
|
|
|
async unzip(payload: ModuleInstallPayload): Promise<{ success: boolean }> {
|
|
const { data } = await client.post(API.MODULES_UNZIP, payload)
|
|
return data
|
|
},
|
|
|
|
async copy(payload: ModuleInstallPayload): Promise<{ success: boolean }> {
|
|
const { data } = await client.post(API.MODULES_COPY, payload)
|
|
return data
|
|
},
|
|
|
|
async complete(payload: ModuleInstallPayload): Promise<{ success: boolean }> {
|
|
const { data } = await client.post(API.MODULES_COMPLETE, payload)
|
|
return data
|
|
},
|
|
}
|