feat: move community supabase request to api layer (#612)

* feat: move community supabase request to api layer * chore: pr review checkpoint * chore: PR fixes * feat: implement role-based authorization middleware and align the community features with the developer guide. - Added role-based authorization middleware for organization and course membership checks, including `orgMemberMiddleware`, `orgTeamMemberMiddleware`, and `courseMemberMiddleware`. - Introduced route-specific middleware for comment and question authorization, ensuring only authors or team members can modify content. - Updated community routes to utilize the new middleware for enhanced security and access control. - Refactored community services to streamline upvote functionality and improve error handling. - Enhanced UI components for community interactions, including new comment and question pages, and improved state management for user actions. - Updated documentation to reflect new middleware usage and best practices for authorization in the API layer. * feat: enhance course and organization routes with middleware for improved access control - Added `courseMemberMiddleware` to course download and clone routes to enforce membership checks. - Updated lesson route to include `courseMemberMiddleware` for PDF downloads. - Integrated `orgMemberMiddleware` into organization routes for team and audience access, ensuring only authorized members can retrieve data. - Refactored lesson and organization routes for consistency and clarity in middleware usage. * chore: streamline dashboard and API development scripts in package.json - Consolidated dashboard and API development commands to include all relevant filters in a single line for improved clarity and ease of use. - Removed redundant full command variants to simplify the script section. --------- Co-authored-by: Rotimi Best <[email protected]>
2025-12-22 19:57:27 +01:00
parent 9fb6c7cbaa
commit bc9e3b41ae
41 changed files with 2699 additions and 1598 deletions
@@ -0,0 +1,78 @@
+<script lang="ts">
+  import * as Select from '@cio/ui/base/select';
+  import { Button } from '@cio/ui/base/button';
+  import { InputField } from '@cio/ui/custom/input-field';
+  import { TextEditor } from '$features/ui';
+
+  import { profile } from '$lib/utils/store/user';
+  import { t } from '$lib/utils/functions/translations';
+  import { currentOrg } from '$lib/utils/store/org';
+  import { communityApi } from '$features/community/api/community.svelte';
+
+  interface Props {
+    isLMS?: boolean;
+  }
+
+  let { isLMS = false }: Props = $props();
+
+  let fields = $state({
+    title: '',
+    body: '',
+    courseId: ''
+  });
+
+  $effect(() => {
+    if ($profile.id && $currentOrg.id) {
+      communityApi.fetchCoursesForOrg($profile.id, $currentOrg.id);
+    }
+  });
+</script>
+
+<div class="mb-3 flex justify-between gap-x-5">
+  <InputField
+    bind:value={fields.title}
+    placeholder={$t('community.ask.title')}
+    errorMessage={communityApi.errors.title}
+    className="w-[75%]"
+  />
+  <div class="w-[25%]">
+    <Select.Root type="single" bind:value={fields.courseId}>
+      <Select.Trigger class="h-full w-full">
+        <p>
+          {fields.courseId
+            ? communityApi.courses.find((course) => course.id === fields.courseId)?.title
+            : $t('community.ask.select_course')}
+        </p>
+      </Select.Trigger>
+      <Select.Content>
+        {#each communityApi.courses as course}
+          {#if course.id}
+            <Select.Item value={course.id}>{course.title}</Select.Item>
+          {/if}
+        {/each}
+      </Select.Content>
+    </Select.Root>
+    {#if communityApi.errors.courseId}
+      <p class="mt-1 text-sm text-red-500">
+        {communityApi.errors.courseId}
+      </p>
+    {/if}
+  </div>
+</div>
+<div class="px-2">
+  <TextEditor placeholder="Give an answer" content={fields.body} onChange={(content) => (fields.body = content)} />
+
+  {#if communityApi.errors.body}
+    <p class="mt-2 text-sm text-red-500">{communityApi.errors.body}</p>
+  {/if}
+</div>
+
+<div class="mt-4 flex justify-end">
+  <Button
+    variant="default"
+    onclick={() => communityApi.createQuestion(fields, isLMS)}
+    disabled={communityApi.isLoading}
+  >
+    {$t('community.ask.publish')}
+  </Button>
+</div>