@@ -72,29 +50,16 @@ export default function AccountPage() {
- Passkeys
+ Access
- {me?.passkeyCount && me.passkeyCount > 0
- ? `You have ${me.passkeyCount} passkey${me.passkeyCount === 1 ? "" : "s"} registered.`
- : "No passkeys registered yet."}
+ Access to RTAP is managed through your configured SSO provider.
-
diff --git a/src/app/(public-routes)/auth/signin/page.tsx b/src/app/(public-routes)/auth/signin/page.tsx
index 351fc3c..01b3ce1 100644
--- a/src/app/(public-routes)/auth/signin/page.tsx
+++ b/src/app/(public-routes)/auth/signin/page.tsx
@@ -1,5 +1,6 @@
import { redirect } from "next/navigation";
import { auth } from "@/server/auth";
+import { env } from "@/env";
import SignInPageClient from "@features/shared/auth/sign-in-page";
export default async function SignInPage(props: { searchParams?: Promise<{ callbackUrl?: string; error?: string }> }) {
@@ -9,13 +10,13 @@ export default async function SignInPage(props: { searchParams?: Promise<{ callb
}
const { callbackUrl = "/", error } = (await props.searchParams) ?? {};
- const passkeysEnabled = process.env.AUTH_PASSKEYS_ENABLED === "true";
- const googleEnabled = Boolean(process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET);
+ const demoEnabled = env.ENABLE_DEMO_MODE === "true";
+ const googleEnabled = Boolean(env.GOOGLE_CLIENT_ID && env.GOOGLE_CLIENT_SECRET);
return (
diff --git a/src/env.ts b/src/env.ts
index 1a56196..8e5e357 100644
--- a/src/env.ts
+++ b/src/env.ts
@@ -20,8 +20,8 @@ export const env = createEnv({
// Logging: default to debug in dev, info in prod; override with LOG_LEVEL
LOG_LEVEL: z.enum(["fatal", "error", "warn", "info", "debug", "trace", "silent"]).optional(),
AUTH_URL: z.string().url().optional(),
- // Optional: toggle passkey provider (default disabled)
- AUTH_PASSKEYS_ENABLED: z.enum(["true", "false"]).optional(),
+ // Optional: demo-mode login button (default disabled)
+ ENABLE_DEMO_MODE: z.enum(["true", "false"]).optional(),
// Optional: Google OAuth client credentials (registers provider when present)
GOOGLE_CLIENT_ID: z.string().optional(),
GOOGLE_CLIENT_SECRET: z.string().optional(),
@@ -46,7 +46,7 @@ export const env = createEnv({
NODE_ENV: process.env.NODE_ENV,
LOG_LEVEL: process.env.LOG_LEVEL,
AUTH_URL: process.env.AUTH_URL,
- AUTH_PASSKEYS_ENABLED: process.env.AUTH_PASSKEYS_ENABLED,
+ ENABLE_DEMO_MODE: process.env.ENABLE_DEMO_MODE,
GOOGLE_CLIENT_ID: process.env.GOOGLE_CLIENT_ID,
GOOGLE_CLIENT_SECRET: process.env.GOOGLE_CLIENT_SECRET,
},
diff --git a/src/features/settings/components/users-tab.tsx b/src/features/settings/components/users-tab.tsx
index 738ce82..b53fef3 100644
--- a/src/features/settings/components/users-tab.tsx
+++ b/src/features/settings/components/users-tab.tsx
@@ -1,48 +1,25 @@
"use client";
import { useState } from "react";
-import { z } from "zod";
import { api } from "@/trpc/react";
import { Button, Card, CardContent, Input, Label } from "@components/ui";
import ConfirmModal from "@components/ui/confirm-modal";
import SettingsHeader from "./settings-header";
import InlineActions from "@components/ui/inline-actions";
import { UserRole } from "@prisma/client";
-import { isUserRole, userWithPasskeySchema, type UserWithPasskey } from "@features/shared/users/user-validators";
+import { isUserRole, userProfileSchema, type UserProfile } from "@features/shared/users/user-validators";
-const EMPTY_USERS: UserWithPasskey[] = [];
-const loginLinkSchema = z.object({
- url: z.string(),
- expires: z.union([z.date(), z.string(), z.number()]),
-});
-const createUserResponseSchema = z.object({ user: userWithPasskeySchema, loginLink: loginLinkSchema });
-
-interface PendingLink {
- email: string;
- url: string;
- expires: string;
-}
-
-const toIsoString = (value: Date | string | number) => {
- if (typeof value === "number") {
- const parsed = new Date(value);
- return Number.isNaN(parsed.getTime()) ? String(value) : parsed.toISOString();
- }
-
- return value instanceof Date ? value.toISOString() : value;
-};
+const EMPTY_USERS: UserProfile[] = [];
export default function UsersTab() {
const [isCreateModalOpen, setIsCreateModalOpen] = useState(false);
- const [editingUser, setEditingUser] = useState
(null);
- const [confirmDelete, setConfirmDelete] = useState(null);
- const [pendingLink, setPendingLink] = useState(null);
- const [copyStatus, setCopyStatus] = useState<"idle" | "copied" | "error">("idle");
+ const [editingUser, setEditingUser] = useState(null);
+ const [confirmDelete, setConfirmDelete] = useState(null);
// Queries
const usersQuery = api.users.list.useQuery();
- const parsedUsers = userWithPasskeySchema.array().safeParse(usersQuery.data);
- let users: UserWithPasskey[] = EMPTY_USERS;
+ const parsedUsers = userProfileSchema.array().safeParse(usersQuery.data);
+ let users: UserProfile[] = EMPTY_USERS;
if (parsedUsers.success) {
users = parsedUsers.data;
}
@@ -52,17 +29,10 @@ export default function UsersTab() {
const utils = api.useUtils();
const createMutation = api.users.create.useMutation({
onSuccess: (data) => {
- const parsed = createUserResponseSchema.safeParse(data);
+ const parsed = userProfileSchema.safeParse(data);
void utils.users.invalidate();
- if (!parsed.success) {
- return;
- }
+ if (!parsed.success) return;
setIsCreateModalOpen(false);
- setPendingLink({
- email: parsed.data.user.email,
- url: parsed.data.loginLink.url,
- expires: toIsoString(parsed.data.loginLink.expires),
- });
},
});
@@ -80,21 +50,6 @@ export default function UsersTab() {
},
});
- const loginLinkMutation = api.users.issueLoginLink.useMutation({
- onSuccess: (data, variables) => {
- void utils.users.invalidate();
- const parsedLink = loginLinkSchema.safeParse(data);
- const user = users.find((u) => u.id === variables.id);
- if (parsedLink.success) {
- setPendingLink({
- email: user?.email ?? "",
- url: parsedLink.data.url,
- expires: toIsoString(parsedLink.data.expires),
- });
- }
- },
- });
-
const handleCreate = async (data: { name: string; email: string; role: UserRole }) => {
try {
await createMutation.mutateAsync(data);
@@ -111,22 +66,6 @@ export default function UsersTab() {
deleteMutation.mutate({ id });
};
- const handleIssueLink = (user: UserWithPasskey) => {
- loginLinkMutation.mutate({ id: user.id });
- };
-
- const copyLink = async () => {
- if (!pendingLink) return;
- try {
- await navigator.clipboard.writeText(pendingLink.url);
- setCopyStatus("copied");
- setTimeout(() => setCopyStatus("idle"), 1500);
- } catch {
- setCopyStatus("error");
- setTimeout(() => setCopyStatus("idle"), 1500);
- }
- };
-
const getRoleColor = (role: UserRole) => {
switch (role) {
case UserRole.ADMIN:
@@ -139,7 +78,7 @@ export default function UsersTab() {
}
};
- const renderLastLogin = (lastLogin: UserWithPasskey["lastLogin"]) => {
+ const renderLastLogin = (lastLogin: UserProfile["lastLogin"]) => {
if (!lastLogin) return "Never";
if (lastLogin instanceof Date) {
@@ -168,25 +107,6 @@ export default function UsersTab() {
setIsCreateModalOpen(true)} />
- {pendingLink && (
-
-
-
-
One-time login link for {pendingLink.email}
-
-
-
-
- Expires at {new Date(pendingLink.expires).toLocaleString()}
-
-
-
-
- )}
-
{users.map((user) => (
@@ -203,21 +123,11 @@ export default function UsersTab() {
{user.email}
- Last login: {renderLastLogin(user.lastLogin)} • Passkeys {user.passkeyCount > 0 ? "Enrolled" : "Not enrolled"}
+ Last login: {renderLastLogin(user.lastLogin)}
setEditingUser(user)} onDelete={() => setConfirmDelete(user)} />
-