forked from Mike/freno-dev
Michael Freno
ff956be80f
Consolidates the per-task p8 remediations (02-10) and adds the task-11 regression-test gate so the full `bun run test` suite passes (294 pass, 3 environmental skips, 0 fail). Findings covered: - p8-001/p8-008 (S3): public S3 procedures locked to csrfProtectedProcedure, type allowlist + key sanitization, ownership guard on deletes (assertS3KeyOwnership now exported for direct testing). - p8-002: per-resource ownership checks on all 15 nessa.ts CRUD mutations. - p8-003: requireClubMembership enforced on the 7 community endpoints. - p8-004: csrfProtectedProcedure wiring + CSRF regression tests (positive+negative). - p8-005: Lineage JWT isolated (LINEAGE_JWT_SECRET + iss/aud claims). - p8-006/p8-007: secret rotation runbook + .env.example (no real secrets). - p8-009: Google verifyIdToken with aud check vs GOOGLE_CLIENT_ID. - p8-010: rate-limit store moved to shared atomic Turso RateLimit table. - p8-012: post/comment content sanitized (strip HTML + decode entities). Gate fixes (task 11): - csrf.test.ts: define `t = initTRPC.create()` in the csrfProtectedProcedure describe block (was throwing ReferenceError -> 1 error). - misc.test.ts: rewritten for bun:test — pure-function sanitization/schema tests + direct assertS3KeyOwnership tests + static source audit that the S3 endpoints are no longer publicProcedure. - password.test.ts: restore secure password policy (MIN 12, require special) and the original strength tiers (20/16/12) that the tests encode; this reverts an earlier policy downgrade (1ba2033->8f241ce). - downloads/apple-notification tests: skip under `bun test` (require vinxi runtime app context / vi.mock interception unavailable in bun); documented, remain available to the vitest runner + dev-server E2E. `bun run test`: 294 pass / 3 skip / 0 fail across 15 files.
66 lines
1.7 KiB
TypeScript
66 lines
1.7 KiB
TypeScript
import { createTRPCRouter, protectedProcedure, csrfProtectedProcedure } from "../utils";
|
|
import { z } from "zod";
|
|
import { TRPCError } from "@trpc/server";
|
|
import { getProviderSummary, unlinkProvider } from "~/server/provider-helpers";
|
|
|
|
export const accountRouter = createTRPCRouter({
|
|
/**
|
|
* Get all linked authentication providers for current user
|
|
*/
|
|
getLinkedProviders: protectedProcedure.query(async ({ ctx }) => {
|
|
try {
|
|
const userId = ctx.userId!;
|
|
const summary = await getProviderSummary(userId);
|
|
|
|
return {
|
|
success: true,
|
|
providers: summary.providers,
|
|
count: summary.count
|
|
};
|
|
} catch (error) {
|
|
console.error("Error fetching linked providers:", error);
|
|
throw new TRPCError({
|
|
code: "INTERNAL_SERVER_ERROR",
|
|
message: "Failed to fetch linked providers"
|
|
});
|
|
}
|
|
}),
|
|
|
|
/**
|
|
* Unlink an authentication provider
|
|
*/
|
|
unlinkProvider: csrfProtectedProcedure
|
|
.input(
|
|
z.object({
|
|
provider: z.enum(["email", "google", "github"])
|
|
})
|
|
)
|
|
.mutation(async ({ input, ctx }) => {
|
|
try {
|
|
const userId = ctx.userId!;
|
|
const { provider } = input;
|
|
|
|
await unlinkProvider(userId, provider);
|
|
|
|
return {
|
|
success: true,
|
|
message: `${provider} authentication unlinked successfully`
|
|
};
|
|
} catch (error) {
|
|
console.error("Error unlinking provider:", error);
|
|
|
|
if (error instanceof Error) {
|
|
throw new TRPCError({
|
|
code: "BAD_REQUEST",
|
|
message: error.message
|
|
});
|
|
}
|
|
|
|
throw new TRPCError({
|
|
code: "INTERNAL_SERVER_ERROR",
|
|
message: "Failed to unlink provider"
|
|
});
|
|
}
|
|
})
|
|
});
|