Merge pull request #259 from guillermoscript/feature/mcp

Feature/mcp

Author: guillermoscript

app/[locale]/dashboard/admin/api-tokens/page.tsx

@@ -0,0 +1,20 @@
+import { getUserRole } from '@/lib/supabase/get-user-role'
+import { redirect } from 'next/navigation'
+import { listMcpTokens } from '@/app/actions/mcp-tokens'
+import ApiTokensPage from '@/components/dashboard/api-tokens-page'
+
+export default async function AdminApiTokensPage() {
+  const role = await getUserRole()
+  if (role !== 'admin') {
+    redirect('/dashboard/admin')
+  }
+
+  const { data: tokens } = await listMcpTokens()
+  const domain = process.env.NEXT_PUBLIC_PLATFORM_DOMAIN || 'localhost:3000'
+
+  return (
+    <div className="p-6 lg:p-8">
+      <ApiTokensPage tokens={tokens ?? []} domain={domain} />
+    </div>
+  )
+}

app/[locale]/dashboard/teacher/api-tokens/page.tsx

@@ -0,0 +1,20 @@
+import { getUserRole } from '@/lib/supabase/get-user-role'
+import { redirect } from 'next/navigation'
+import { listMcpTokens } from '@/app/actions/mcp-tokens'
+import ApiTokensPage from '@/components/dashboard/api-tokens-page'
+
+export default async function TeacherApiTokensPage() {
+  const role = await getUserRole()
+  if (role !== 'teacher') {
+    redirect('/dashboard/teacher')
+  }
+
+  const { data: tokens } = await listMcpTokens()
+  const domain = process.env.NEXT_PUBLIC_PLATFORM_DOMAIN || 'localhost:3000'
+
+  return (
+    <div className="p-6 lg:p-8">
+      <ApiTokensPage tokens={tokens ?? []} domain={domain} />
+    </div>
+  )
+}

app/actions/mcp-tokens.ts

@@ -0,0 +1,112 @@
+'use server'
+
+import { createClient } from '@/lib/supabase/server'
+import { getUserRole } from '@/lib/supabase/get-user-role'
+import { revalidatePath } from 'next/cache'
+import { randomBytes, createHash } from 'crypto'
+
+export interface McpToken {
+  id: number
+  name: string
+  created_at: string
+  last_used_at: string | null
+  expires_at: string | null
+  is_active: boolean
+}
+
+function hashToken(token: string): string {
+  return createHash('sha256').update(token).digest('hex')
+}
+
+export async function createMcpToken(name: string, expiresInDays?: number) {
+  const role = await getUserRole()
+  if (role !== 'teacher' && role !== 'admin') {
+    throw new Error('Only teachers and admins can create API tokens')
+  }
+
+  const supabase = await createClient()
+  const { data: { user } } = await supabase.auth.getUser()
+  if (!user) throw new Error('Not authenticated')
+
+  const rawToken = randomBytes(32).toString('hex')
+  const tokenHash = hashToken(rawToken)
+
+  const expiresAt = expiresInDays
+    ? new Date(Date.now() + expiresInDays * 24 * 60 * 60 * 1000).toISOString()
+    : null
+
+  const { error } = await supabase
+    .from('mcp_api_tokens')
+    .insert({
+      user_id: user.id,
+      token_hash: tokenHash,
+      name,
+      expires_at: expiresAt,
+      is_active: true,
+    })
+
+  if (error) throw new Error(error.message)
+
+  revalidatePath('/dashboard/admin/api-tokens')
+  revalidatePath('/dashboard/teacher/api-tokens')
+
+  return { token: rawToken }
+}
+
+export async function listMcpTokens(): Promise<{ data: McpToken[] | null; error: string | null }> {
+  const role = await getUserRole()
+  if (role !== 'teacher' && role !== 'admin') {
+    return { data: null, error: 'Unauthorized' }
+  }
+
+  const supabase = await createClient()
+  const { data: { user } } = await supabase.auth.getUser()
+  if (!user) return { data: null, error: 'Not authenticated' }
+
+  const { data, error } = await supabase
+    .from('mcp_api_tokens')
+    .select('id, name, created_at, last_used_at, expires_at, is_active')
+    .eq('user_id', user.id)
+    .order('created_at', { ascending: false })
+
+  if (error) return { data: null, error: error.message }
+  return { data, error: null }
+}
+
+export async function revokeMcpToken(tokenId: number) {
+  const role = await getUserRole()
+  if (role !== 'teacher' && role !== 'admin') {
+    throw new Error('Unauthorized')
+  }
+
+  const supabase = await createClient()
+
+  const { error } = await supabase
+    .from('mcp_api_tokens')
+    .update({ is_active: false })
+    .eq('id', tokenId)
+
+  if (error) throw new Error(error.message)
+
+  revalidatePath('/dashboard/admin/api-tokens')
+  revalidatePath('/dashboard/teacher/api-tokens')
+}
+
+export async function deleteMcpToken(tokenId: number) {
+  const role = await getUserRole()
+  if (role !== 'teacher' && role !== 'admin') {
+    throw new Error('Unauthorized')
+  }
+
+  const supabase = await createClient()
+
+  const { error } = await supabase
+    .from('mcp_api_tokens')
+    .delete()
+    .eq('id', tokenId)
+
+  if (error) throw new Error(error.message)
+
+  revalidatePath('/dashboard/admin/api-tokens')
+  revalidatePath('/dashboard/teacher/api-tokens')
+}

components/app-sidebar.tsx

@@ -24,6 +24,7 @@ import {
     IconSearch,
     IconSettings,
     IconSparkles,
+    IconKey,
     IconTrophy,
     IconUsers,
 } from "@tabler/icons-react"
@@ -82,6 +83,7 @@ export function AppSidebar({ userRole, ...props }: AppSidebarProps) {
                 { title: t('transactions'), href: "/dashboard/admin/transactions", icon: IconCurrencyDollar },
                 { title: t('billing'), href: "/dashboard/admin/billing", icon: IconCreditCard },
                 { title: 'Landing Page', href: "/dashboard/admin/landing-page", icon: IconLayout },
+                { title: t('apiTokens'), href: "/dashboard/admin/api-tokens", icon: IconKey },
             ],
         },
         teacher: {
@@ -91,6 +93,7 @@ export function AppSidebar({ userRole, ...props }: AppSidebarProps) {
             content: [
                 { title: t('myCourses'), href: "/dashboard/teacher/courses", icon: IconBook },
                 { title: t('createCourse'), href: "/dashboard/teacher/courses/new", icon: IconPlus },
+                { title: t('apiTokens'), href: "/dashboard/teacher/api-tokens", icon: IconKey },
             ],
             business: [
                 { title: t('revenue'), href: "/dashboard/teacher/revenue", icon: IconCurrencyDollar },