Files
sass-mohfarawati/components/admin/admin-dashboard-shell.tsx
T
moh dc21c33867 ADDED - Admin SEO page, robots/sitemap hardening and media/maintenance security fixes
SEO
- New Settings > SEO admin page (seo_settings in app_config): indexing switch,
  Google/Bing verification, X handle, JSON-LD identity (Person/Organization,
  sameAs), per-locale keywords, readiness checklist and open links for
  sitemap.xml / robots.txt / manifest.
- robots.txt is now dynamic: disallows admin, api, success and coming-soon
  paths; blocks everything while indexing is off or maintenance is on.
- sitemap.xml carries hreflang alternates per URL, lists only categories with
  published projects, and is empty while hidden.
- Metadata: robots + verification meta, og:locale in de_DE/en_US/ar_AR form,
  alternateLocale, twitter site/creator, project cover as OG image with
  article type, noindex on /success and /coming-soon.
- JSON-LD: WebSite + publisher graph on all public pages, CreativeWork per
  project (view-mode independent).

Security
- Maintenance bypass now requires a correctly signed admin cookie; the
  middleware previously only checked the cookie existed. Token helpers moved
  to lib/admin-session-token.ts (shared by proxy.ts and lib/admin-auth.ts).
- Media uploads: magic-byte validation against the declared type, SVG
  sanitization (script/handlers/foreignObject/javascript: rejected), upload
  folder sanitized, kind inferred from the real file.
- Media route: fixed prefix-based path check that accepted sibling
  directories, unknown extensions return 404, nosniff header, CSP sandbox on
  SVG, gif content type added.
- External media URLs: protocol-relative (//host) URLs rejected.

Portfolio
- Project and category slugs share /portfolio/[slug]; saving now rejects a
  slug already used on the other side instead of silently shadowing it.

Tooling/docs
- Lint: ignore scripts/legacy-prisma-seed.cjs, drop unused import.
- New docs/SEO.md; FEATURES, ARCHITECTURE (Drizzle instead of Prisma), admin
  spec and CLAUDE.md updated.
- Tests for all of the above (unit + integration); suite green.
2026-09-20 21:36:16 +02:00

182 lines
5.5 KiB
TypeScript

import type { ReactNode } from "react";
import {
FolderKanban,
Globe2,
ImageIcon,
Languages,
LayoutDashboard,
LogOut,
Palette,
PlusSquare,
Search,
ShieldAlert,
SwatchBook,
Tags,
Type,
} from "lucide-react";
import Link from "next/link";
import { AdminFlash } from "@/components/admin/admin-flash";
import { DashboardLayout } from "@/components/dashboard/dashboard-layout";
import { MotionFade } from "@/components/motion-fade";
import { SidebarMaintenanceControl } from "@/components/admin/sidebar-maintenance-control";
import { SoundToggle } from "@/components/sound-toggle";
import { ThemeToggle } from "@/components/theme-toggle";
import { Button } from "@/components/ui/button";
import { buildSiteUrl, getAdminAppPath } from "@/lib/admin-routing";
import { getMaintenanceMode, getSiteSettingsMediaBindings } from "@/lib/app-config";
import { getAdminNavigation } from "@/lib/admin-navigation";
import type { FlashMessages } from "@/lib/admin-feedback";
import { updateMaintenanceModeAction } from "@/app/_admin/maintenance/actions";
type AdminDashboardCopy = {
title: string;
subtitle: string;
overview: string;
maintenance: string;
uiKit: string;
portfolio: string;
media: string;
siteSettings: string;
brandSettings?: string;
localizationSettings?: string;
seoSettings?: string;
marquee?: string;
smtp?: string;
logout: string;
backToSite: string;
};
type AdminDashboardShellProps = {
copy: AdminDashboardCopy;
active: "overview" | "maintenance" | "ui-kit" | "portfolio" | "media" | "site-settings" | "smtp" | "marquee";
portfolioChild?: "overview" | "projects" | "new-project" | "categories";
siteSettingsChild?: "brand" | "localization" | "seo";
flash?: FlashMessages;
logoutAction: () => Promise<void>;
headerTitle: string;
headerDescription: string;
headerActions?: ReactNode;
sidebarTopContent?: ReactNode;
toolbar?: ReactNode;
children: ReactNode;
};
export async function AdminDashboardShell({
copy,
active,
portfolioChild,
siteSettingsChild,
flash,
logoutAction,
headerTitle,
headerDescription,
headerActions,
sidebarTopContent,
toolbar,
children,
}: AdminDashboardShellProps) {
const [mediaBindings, maintenanceEnabled] = await Promise.all([
getSiteSettingsMediaBindings(),
getMaintenanceMode(),
]);
const sidebarItems = getAdminNavigation(copy, active, portfolioChild, siteSettingsChild);
const normalizedSidebarItems = sidebarItems.filter(
(item) =>
item.href !== getAdminAppPath("/maintenance") &&
item.href !== getAdminAppPath("/ui-kit") &&
item.href !== getAdminAppPath("/smtp") &&
item.href !== getAdminAppPath("/marquee"),
);
const footerSidebarItems = [getAdminAppPath("/marquee"), getAdminAppPath("/smtp")]
.map((href) => sidebarItems.find((item) => item.href === href))
.filter((item): item is NonNullable<typeof item> => Boolean(item));
const headerIcon =
active === "overview"
? LayoutDashboard
: active === "maintenance"
? ShieldAlert
: active === "ui-kit"
? SwatchBook
: active === "site-settings"
? siteSettingsChild === "localization"
? Languages
: siteSettingsChild === "seo"
? Search
: siteSettingsChild === "brand"
? Palette
: Globe2
: active === "marquee"
? Type
: active === "smtp"
? ShieldAlert
: active === "media"
? ImageIcon
: portfolioChild === "categories"
? Tags
: portfolioChild === "new-project"
? PlusSquare
: FolderKanban;
return (
<DashboardLayout
title={headerTitle}
description={headerDescription}
icon={headerIcon}
items={normalizedSidebarItems}
sidebarIconSrc={mediaBindings.favicon?.url}
sidebarBrandHref={buildSiteUrl()}
sidebarBrandHoverLabel={copy.backToSite}
sidebarTop={sidebarTopContent}
sidebarFooterItems={footerSidebarItems}
sidebarFooter={
<>
<SidebarMaintenanceControl
action={updateMaintenanceModeAction}
initialEnabled={maintenanceEnabled}
label="Mohs Status"
/>
<Button
asChild
variant={active === "ui-kit" ? "default" : "outline"}
className="w-full justify-between"
>
<Link href={getAdminAppPath("/ui-kit")}>
{copy.uiKit}
<SwatchBook className="h-4 w-4" />
</Link>
</Button>
<form action={logoutAction}>
<Button type="submit" variant="ghost" className="w-full justify-between text-destructive hover:bg-destructive/10 hover:text-destructive">
{copy.logout}
<LogOut className="h-4 w-4" />
</Button>
</form>
</>
}
headerActions={
<div className="flex flex-wrap items-center justify-end gap-2">
{headerActions}
<SoundToggle
ariaLabel="Mute sounds"
mutedAriaLabel="Unmute sounds"
/>
<ThemeToggle
ariaLabel="Theme wechseln"
/>
</div>
}
>
<div className="space-y-6">
{flash?.success || flash?.error ? (
<MotionFade delay={0.05}>
<AdminFlash success={flash.success} error={flash.error} />
</MotionFade>
) : null}
{toolbar ? <MotionFade delay={0.05}>{toolbar}</MotionFade> : null}
{children}
</div>
</DashboardLayout>
);
}