cfa137795b
* refactor: consolidate AGENTS.md and CLAUDE.md files, update tech stack and architecture details - Merged content from CLAUDE.md into AGENTS.md for better organization. - Updated tech stack section to reflect the current technologies used, including Next.js, Supabase, and Tailwind CSS. - Enhanced monorepo structure documentation with detailed directory purposes. - Streamlined multi-tenant architecture explanation and essential commands. - Added key patterns for naming conventions and server actions. - Removed outdated agent files related to Playwright and PostgreSQL, ensuring a cleaner codebase. - Bumped version to 2.23.7 to reflect changes.
56 lines
1.2 KiB
Markdown
56 lines
1.2 KiB
Markdown
# Super Admin
|
|
|
|
## Critical Security Rules
|
|
|
|
- **ALWAYS** use `AdminGuard` to protect pages
|
|
- **ALWAYS** validate admin status before operations
|
|
- **NEVER** bypass authentication or authorization
|
|
- **ALWAYS** audit admin operations with logging
|
|
|
|
## Page Structure
|
|
|
|
```typescript
|
|
import { AdminGuard } from '@kit/admin/components/admin-guard';
|
|
import { PageBody, PageHeader } from '@kit/ui/page';
|
|
|
|
async function AdminPage() {
|
|
return (
|
|
<>
|
|
<PageHeader title="Admin" />
|
|
<PageBody>{/* Content */}</PageBody>
|
|
</>
|
|
);
|
|
}
|
|
|
|
export default AdminGuard(AdminPage);
|
|
```
|
|
|
|
## Admin Client Usage
|
|
|
|
```typescript
|
|
import { isSuperAdmin } from '@kit/admin';
|
|
import { getSupabaseServerAdminClient } from '@kit/supabase/server-admin-client';
|
|
|
|
async function adminOperation() {
|
|
// CRITICAL: Validate first - admin client bypasses RLS
|
|
if (!(await isSuperAdmin(currentUser))) {
|
|
throw new Error('Unauthorized');
|
|
}
|
|
|
|
const adminClient = getSupabaseServerAdminClient();
|
|
// Safe to proceed
|
|
}
|
|
```
|
|
|
|
## Audit Logging
|
|
|
|
```typescript
|
|
const logger = await getLogger();
|
|
logger.info({
|
|
name: 'admin-audit',
|
|
action: 'delete-user',
|
|
adminId: currentUser.id,
|
|
targetId: userId,
|
|
}, 'Admin action performed');
|
|
```
|