Enforce RLS when user opted in to MFA. (#188)

* Allow Super Admin to view tables using RLS
* Replace previous usages of the Admin client using the authed client using the new RLS
* Enforce MFA for Super Admin users
* Enforce RLS when user opted in to MFA.
* Add Super Admin Access Policies and Update Database Types
* Consolidate super admin logic into a single function that uses the RPC is_super_admin
* Added Super Admin E2E tests
* Fixes and improvements
* Bump version to 2.5.0
This commit is contained in:
Giancarlo Buomprisco
2025-03-02 10:21:01 +07:00
committed by GitHub
parent 9cf7bf0aac
commit 131b1061e6
61 changed files with 2193 additions and 302 deletions

View File

@@ -21,6 +21,7 @@ import {
FormItem,
FormMessage,
} from '@kit/ui/form';
import { Heading } from '@kit/ui/heading';
import { If } from '@kit/ui/if';
import {
InputOTP,
@@ -86,9 +87,15 @@ export function MultiFactorChallengeContainer({
});
})}
>
<div className={'flex flex-col space-y-4'}>
<div className={'flex w-full flex-col space-y-2.5'}>
<div className={'flex flex-col space-y-4'}>
<div className={'flex flex-col items-center gap-y-6'}>
<div className="flex flex-col items-center gap-y-4">
<Heading level={5}>
<Trans i18nKey={'auth:verifyCodeHeading'} />
</Heading>
</div>
<div className={'flex w-full flex-col gap-y-2.5'}>
<div className={'flex flex-col gap-y-4'}>
<If condition={verifyMFAChallenge.error}>
<Alert variant={'destructive'}>
<ExclamationTriangleIcon className={'h-5'} />
@@ -130,7 +137,7 @@ export function MultiFactorChallengeContainer({
</InputOTP>
</FormControl>
<FormDescription>
<FormDescription className="text-center">
<Trans
i18nKey={'account:verifyActivationCodeDescription'}
/>
@@ -145,6 +152,8 @@ export function MultiFactorChallengeContainer({
</div>
<Button
className="w-full"
data-test={'submit-mfa-button'}
disabled={
verifyMFAChallenge.isPending ||
!verificationCodeForm.formState.isValid