Admin Tools: Manage users and Manage projects pages

2026-06-05 23:29:00 +02:00 · 2026-01-26 03:06:40 +01:00
parent b1db82ab0a
commit 103adeb820
132 changed files with 10128 additions and 18 deletions
@@ -0,0 +1,77 @@
+import logger from '@overleaf/logger'
+import UserListController from './UserListController.mjs'
+import ProjectListController from './ProjectListController.mjs'
+import AuthorizationMiddleware from '../../../../app/src/Features/Authorization/AuthorizationMiddleware.mjs'
+import AuthenticationController from '../../../../app/src/Features/Authentication/AuthenticationController.mjs'
+
+export default {
+  apply(webRouter) {
+    logger.debug({}, 'Init AdminTools router')
+
+    webRouter.get('/user/activate', UserListController.activateAccountPage)
+    AuthenticationController.addEndpointToLoginWhitelist('/user/activate')
+
+    webRouter.get('/admin/user',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      UserListController.manageUsersPage
+    )
+    webRouter.post(
+      '/admin/user/create',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      UserListController.registerNewUser
+    )
+    webRouter.post('/admin/user/:userId/send-activation',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      UserListController.sendActivationEmail
+    )
+    webRouter.get('/admin/user/:userId/info',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      UserListController.getAdditionalUserInfo,
+    )
+    webRouter.post('/admin/users',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      UserListController.getUsersJson
+    )
+    webRouter.post('/admin/user/:userId/delete',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      UserListController.deleteUser
+    )
+    webRouter.post('/admin/user/:userId/update',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      UserListController.updateUser,
+    )
+    webRouter.delete('/admin/user/:userId',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      UserListController.purgeDeletedUser
+    )
+    webRouter.post('/admin/user/:userId/restore',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      UserListController.restoreDeletedUser
+    )
+    webRouter.post('/admin/user/:userId/projects',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      ProjectListController.getProjectsJson
+    )
+
+    webRouter.get('/admin/project',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      ProjectListController.manageProjectsPage
+    )
+    webRouter.post('/admin/project/:project_id/trash',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      ProjectListController.trashProjectForUser
+    )
+    webRouter.post('/admin/project/:project_id/untrash',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      ProjectListController.untrashProjectForUser
+    )
+    webRouter.delete('/admin/project/:project_id/purge',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      ProjectListController.purgeDeletedProject
+    )
+    webRouter.post('/admin/project/:project_id/undelete',
+      AuthorizationMiddleware.ensureUserIsSiteAdmin,
+      ProjectListController.undeleteProject
+    )
+  },
+}