Nicolas
bbd9afe8aa
L'admin etait une 2e app front Vite independante (apps/admin-web, port 5174,
Dockerfile nginx, service compose dedie, job CI propre) non demandee. Toute
l'UI passe dans apps/web sous le prefixe /admin ; seul le frontend est
fusionne, l'authentification admin reste entierement separee.
Front (apps/web/src) :
- pages -> pages/admin/{login,dashboard,monitoring,corrections,catalog}/,
layout -> layouts/AdminLayout.tsx, contexte + garde -> features/admin/.
- client API -> api/admin-client.ts : classe AdminApiError (evite la
collision avec ApiError), lit VITE_API_URL (plus de VITE_ADMIN_API_URL).
- routes /admin/* dans App.tsx, enveloppees d'AdminAuthProvider +
RequireAdmin -> le probe GET /admin/auth/me ne tourne que sous /admin.
- reutilise l'i18n, lib/zod-errors, services/error-message.service et le
theme SCSS de apps/web ; bloc i18n admin.* fusionne dans la locale fr
(les cles errors etaient deja toutes presentes).
- corrige une race dans CatalogPage (reponse d'un onglet precedent qui
ecrasait l'onglet courant, exposee par le double-mount StrictMode) via
un ref requestSeq.
Auth admin inchangee : table AdminUser, cookie admin_session,
ADMIN_JWT_SECRET, script create-admin.ts.
Infra :
- docker-compose : service admin-web + ADMIN_WEB_PORT supprimes (l'app
`app` sert deja le front construit).
- ADMIN_CORS_ORIGIN retire (meme origine) : env.ts, app.ts, .env.example.
- job CI "Run admin-web E2E tests" supprime ; les specs admin-* tournent
dans le job web (apps/web/cypress/e2e/admin-*.{cy.ts,feature}).
- apps/api/.env.example : ajout ADMIN_JWT_SECRET / ADMIN_INITIAL_*.
- recharts ajoute a apps/web ; pnpm-lock regenere.
- specs/backend-architecture.md : section admin mise a jour.
Verifie : biome + tsc -b (web/api) + pnpm -r build verts ; Cypress web
102/103 (l'unique echec est le flake pre-existant recipe-form.feature
"Preloads ..." de clipping headless, sans rapport) ; 16/16 specs admin ;
45/45 composants.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
35 lines
1.4 KiB
TypeScript
35 lines
1.4 KiB
TypeScript
import { Given } from "@badeball/cypress-cucumber-preprocessor";
|
|
|
|
// Admin-specific steps for `admin-login.feature`. Generic navigation / form
|
|
// steps ("I visit", "I fill in the … field", "I click the button", "I
|
|
// should see …") are reused from `support/step_definitions/common.steps.ts`;
|
|
// only the `/admin/*` API mocks live here. Every admin call is stubbed via
|
|
// `cy.intercept` — this suite never runs a live backend (apps/api's Mocha
|
|
// suite covers real `/admin/*` behaviour).
|
|
|
|
const adminBody = {
|
|
id: 1,
|
|
email: "ops@example.com",
|
|
name: "Ops",
|
|
createdAt: "2026-08-01T00:00:00.000Z",
|
|
lastLoginAt: "2026-08-28T09:00:00.000Z",
|
|
};
|
|
|
|
Given("the admin session check returns unauthenticated", () => {
|
|
cy.intercept("GET", "**/admin/auth/me", { statusCode: 401, body: { code: 4011, message: "no" } });
|
|
});
|
|
|
|
Given("admin login fails with invalid credentials", () => {
|
|
cy.intercept("POST", "**/admin/auth/login", {
|
|
statusCode: 401,
|
|
body: { code: 4010, message: "Invalid email or password" },
|
|
});
|
|
});
|
|
|
|
Given("admin login succeeds as {string}", (name: string) => {
|
|
const body = { ...adminBody, name, email: `${name.toLowerCase()}@example.com` };
|
|
cy.intercept("POST", "**/admin/auth/login", { statusCode: 200, body });
|
|
// After navigate("/admin"), RequireAdmin re-checks the session — from now
|
|
// on it must report authenticated (last matching intercept wins).
|
|
cy.intercept("GET", "**/admin/auth/me", { statusCode: 200, body });
|
|
});
|