Grapevine_Disease_Detection/vineye-admin/lib/validations.ts
Yanis 792e969c00 feat(api/mobile): auth sync/me/sign-out + scans + bearer plugin
Connect the React Native app to the admin backend so users and scans flow
into the panel and bans take effect on the device.

- Activate the bearer() plugin in lib/auth.ts so mobile clients can pass
  the better-auth session token via Authorization: Bearer header
- Add requireMobileAuth() helper in lib/auth-guard.ts that resolves the
  session, re-fetches the user from DB (banned flag is on User, not in
  the Session payload) and returns 403 with banned/bannedReason for
  banned accounts
- Extend CORS in middleware.ts to allow POST + Authorization header on
  /api/mobile/* (preflight was failing before)
- New routes:
  POST /api/mobile/auth/sync       — passwordless mobile auth via
    deterministic password derived from sha256(email + deviceId + pepper).
    Tries signIn first, falls back to signUp on USER_NOT_FOUND. Returns
    409 when the email exists with a different deviceId.
  GET  /api/mobile/auth/me         — current user enriched with
    banned/bannedReason/role/xp/level
  POST /api/mobile/auth/sign-out   — best-effort session revocation
  POST /api/mobile/scans           — create a scan, resolves diseaseSlug
    to diseaseId, never accepts an imageUrl from the device (V1 keeps
    photos local-only)
  GET  /api/mobile/scans           — own scans, 50 most recent

Validated end-to-end via curl: signUp → me → repeat sync (idempotent) →
post scan → ban via DB → me reflects banned: true → POST scans returns
403 + banned/bannedReason.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-01 12:02:45 +02:00

114 lines
5.4 KiB
TypeScript

import { z } from "zod/v4";
export const diseaseSchema = z.object({
name: z.string().min(1, "Nom requis").max(200).trim(),
nameEn: z.string().max(200).trim().optional().default(""),
scientificName: z.string().max(200).trim().optional().default(""),
slug: z.string().max(100).trim().optional(),
type: z.enum(["FUNGAL", "BACTERIAL", "PEST", "ABIOTIC"]),
severity: z.enum(["LOW", "MEDIUM", "HIGH"]),
description: z.string().min(1, "Description requise").trim(),
descriptionEn: z.string().trim().optional().default(""),
symptoms: z.array(z.string().trim()).min(1, "Au moins un symptome"),
symptomsEn: z.array(z.string().trim()).optional().default([]),
treatment: z.string().min(1, "Traitement requis").trim(),
treatmentEn: z.string().trim().optional().default(""),
season: z.string().min(1, "Saison requise").trim(),
seasonEn: z.string().trim().optional().default(""),
iconName: z.string().trim().optional().default("leaf"),
iconColor: z.string().trim().optional().default("#1D9E75"),
bgColor: z.string().trim().optional().default("#E1F5EE"),
imageUrl: z.string().url().optional().nullable(),
published: z.boolean().optional().default(true),
// Enriched fields
startMonth: z.number().int().min(1).max(12).optional().nullable(),
endMonth: z.number().int().min(1).max(12).optional().nullable(),
peakMonth: z.number().int().min(1).max(12).optional().nullable(),
conditions: z.array(z.string().trim()).optional().default([]),
conditionsEn: z.array(z.string().trim()).optional().default([]),
preventiveActions: z.array(z.string().trim()).optional().default([]),
preventiveActionsEn: z.array(z.string().trim()).optional().default([]),
curativeActions: z.array(z.string().trim()).optional().default([]),
curativeActionsEn: z.array(z.string().trim()).optional().default([]),
impactedParts: z.array(z.string().trim()).optional().default([]),
impactedPartsEn: z.array(z.string().trim()).optional().default([]),
spreadMethod: z.string().trim().optional().nullable(),
spreadMethodEn: z.string().trim().optional().nullable(),
images: z.array(z.object({
url: z.string().url(),
alt: z.string().optional().default(""),
order: z.number().int().optional().default(0),
})).optional().default([]),
});
export const guideSchema = z.object({
title: z.string().min(1, "Titre requis").max(200).trim(),
titleEn: z.string().max(200).trim().optional().default(""),
slug: z.string().max(100).trim().optional(),
subtitle: z.string().min(1, "Sous-titre requis").max(500).trim(),
subtitleEn: z.string().max(500).trim().optional().default(""),
content: z.string().trim().optional().default(""),
contentEn: z.string().trim().optional().default(""),
category: z.string().trim().optional().default("general"),
iconName: z.string().trim().optional().default("book"),
iconColor: z.string().trim().optional().default("#185FA5"),
bgColor: z.string().trim().optional().default("#E6F1FB"),
published: z.boolean().optional().default(true),
order: z.number().int().min(0).optional().default(0),
readTime: z.number().int().min(1).optional().nullable(),
coverImage: z.string().trim().optional().nullable(),
sections: z.array(z.object({
title: z.string().min(1, "Titre de section requis").trim(),
titleEn: z.string().trim().optional().default(""),
body: z.string().min(1, "Contenu de section requis").trim(),
bodyEn: z.string().trim().optional().default(""),
image: z.string().trim().optional().nullable(),
tip: z.string().trim().optional().nullable(),
tipEn: z.string().trim().optional().nullable(),
order: z.number().int().optional().default(0),
})).optional().default([]),
});
export const alertSchema = z.object({
title: z.string().min(1, "Titre requis").max(200).trim(),
titleEn: z.string().max(200).trim().optional().default(""),
message: z.string().min(1, "Message requis").trim(),
messageEn: z.string().trim().optional().default(""),
type: z.enum(["WARNING", "INFO", "DANGER"]).optional().default("WARNING"),
region: z.string().trim().optional().default("bordeaux"),
active: z.boolean().optional().default(true),
activeFrom: z.coerce.date().optional(),
activeTo: z.coerce.date().optional().nullable(),
});
export const scanSchema = z.object({
diseaseId: z.string().optional().nullable(),
confidence: z.number().min(0).max(1),
latitude: z.number().optional().nullable(),
longitude: z.number().optional().nullable(),
imageUrl: z.string().url().optional().nullable(),
deviceId: z.string().optional().nullable(),
});
// Mobile-specific schemas
export const mobileAuthSyncSchema = z.object({
name: z.string().min(2).max(50).trim(),
email: z.string().email().max(255).toLowerCase().trim(),
deviceId: z.string().max(128).trim().optional().nullable(),
});
export const mobileScanCreateSchema = z.object({
confidence: z.number().min(0).max(1),
diseaseSlug: z.string().max(100).trim().optional().nullable(),
latitude: z.number().min(-90).max(90).optional().nullable(),
longitude: z.number().min(-180).max(180).optional().nullable(),
deviceId: z.string().max(128).trim().optional().nullable(),
});
export type DiseaseInput = z.infer<typeof diseaseSchema>;
export type GuideInput = z.infer<typeof guideSchema>;
export type AlertInput = z.infer<typeof alertSchema>;
export type ScanInput = z.infer<typeof scanSchema>;
export type MobileAuthSyncInput = z.infer<typeof mobileAuthSyncSchema>;
export type MobileScanCreateInput = z.infer<typeof mobileScanCreateSchema>;