fix(admin): key tunnels by user_id, server-side initial list load, full-scan user search

This commit is contained in:
Gerhard Scheikl
2026-05-31 11:46:14 +02:00
parent fb4880a1d9
commit b6c4d94990
19 changed files with 1676 additions and 840 deletions
+1 -1
View File
@@ -38,7 +38,7 @@ export async function POST(
const { data, error } = await admin
.from('tunnels')
.update({ is_active: isActive })
.eq('id', id)
.eq('user_id', id)
.select('subdomain')
.maybeSingle<{ subdomain: string }>();
if (error) {
+1 -1
View File
@@ -40,7 +40,7 @@ export async function POST(
const { data, error } = await admin
.from('tunnels')
.update({ quota_bytes: parsed.value })
.eq('id', id)
.eq('user_id', id)
.select('subdomain')
.maybeSingle<{ subdomain: string }>();
if (error) {
+5 -5
View File
@@ -45,20 +45,20 @@ export async function POST(
const admin = getSupabaseAdmin();
// Reject if taken by a different tunnel.
// Reject if taken by a different tunnel (keyed by owner user_id).
const { data: existing } = await admin
.from('tunnels')
.select('id')
.select('user_id')
.eq('subdomain', subdomain)
.maybeSingle<{ id: string }>();
if (existing && existing.id !== id) {
.maybeSingle<{ user_id: string }>();
if (existing && existing.user_id !== id) {
return NextResponse.json({ error: 'subdomain taken' }, { status: 409 });
}
const { data, error } = await admin
.from('tunnels')
.update({ subdomain })
.eq('id', id)
.eq('user_id', id)
.select('subdomain')
.maybeSingle<{ subdomain: string }>();
if (error) {
@@ -26,7 +26,7 @@ export async function POST(
const { data, error } = await admin
.from('tunnels')
.update({ token })
.eq('id', id)
.eq('user_id', id)
.select('subdomain, token')
.maybeSingle<{ subdomain: string; token: string }>();
if (error) {
@@ -23,7 +23,7 @@ export async function POST(
const { data, error } = await admin
.from('tunnels')
.update({ bytes_used: 0 })
.eq('id', id)
.eq('user_id', id)
.select('subdomain')
.maybeSingle<{ subdomain: string }>();
if (error) {
+1 -1
View File
@@ -24,7 +24,7 @@ export async function DELETE(
const { data, error } = await admin
.from('tunnels')
.delete()
.eq('id', id)
.eq('user_id', id)
.select('subdomain')
.maybeSingle<{ subdomain: string }>();
if (error) {