feat: adjust roles

apps/dokploy/components/dashboard/projects/show.tsx

@@ -57,7 +57,7 @@ export const ShowProjects = () => {
 			authId: auth?.id || "",
 		},
 		{
-			enabled: !!auth?.id && auth?.role === "user",
+			enabled: !!auth?.id && auth?.role === "member",
 		},
 	);
 	const { mutateAsync } = api.project.remove.useMutation();
@@ -91,7 +91,7 @@ export const ShowProjects = () => {
 								</CardDescription>
 							</CardHeader>
 
-							{(auth?.role === "admin" || user?.canCreateProjects) && (
+							{(auth?.role === "owner" || user?.canCreateProjects) && (
 								<div className="">
 									<HandleProject />
 								</div>
@@ -293,7 +293,7 @@ export const ShowProjects = () => {
 																				<div
 																					onClick={(e) => e.stopPropagation()}
 																				>
-																					{(auth?.role === "admin" ||
+																					{(auth?.role === "owner" ||
 																						user?.canDeleteProjects) && (
 																						<AlertDialog>
 																							<AlertDialogTrigger className="w-full">

apps/dokploy/pages/index.tsx

@@ -261,7 +261,6 @@ export async function getServerSideProps(context: GetServerSidePropsContext) {
 	}
 
 	const { user } = await validateRequest(context.req);
-	console.log("Response", user);
 
 	if (user) {
 		return {

apps/dokploy/server/api/routers/auth.ts

@@ -7,6 +7,7 @@ import {
 	apiVerify2FA,
 	apiVerifyLogin2FA,
 	auth,
+	member,
 } from "@/server/db/schema";
 import { WEBSITE_URL } from "@/server/utils/stripe";
 import {
@@ -32,7 +33,7 @@ import {
 import { TRPCError } from "@trpc/server";
 import * as bcrypt from "bcrypt";
 import { isBefore } from "date-fns";
-import { eq } from "drizzle-orm";
+import { and, eq } from "drizzle-orm";
 import { nanoid } from "nanoid";
 import { z } from "zod";
 import { db } from "../../db";
@@ -170,8 +171,14 @@ export const authRouter = createTRPCRouter({
 	}),
 
 	get: protectedProcedure.query(async ({ ctx }) => {
-		const auth = await findAuthById(ctx.user.id);
+		const memberResult = await db.query.member.findFirst({
-		return auth;
+			where: and(
+				eq(member.userId, ctx.user.id),
+				eq(member.organizationId, ctx.session?.activeOrganizationId || ""),
+			),
+		});
+
+		return memberResult;
 	}),
 
 	logout: protectedProcedure.mutation(async ({ ctx }) => {

apps/dokploy/server/api/trpc.ts

@@ -32,7 +32,7 @@ import { ZodError } from "zod";
 
 interface CreateContextOptions {
 	user: (User & { rol: "admin" | "user"; ownerId: string }) | null;
-	session: Session | null;
+	session: (Session & { activeOrganizationId: string }) | null;
 	req: CreateNextContextOptions["req"];
 	res: CreateNextContextOptions["res"];
 }
@@ -75,12 +75,15 @@ export const createTRPCContext = async (opts: CreateNextContextOptions) => {
 		user = cookieResult.user;
 	}
 
+	console.log("session", { session, user });
+
 	return createInnerTRPCContext({
 		req,
 		res,
 		session: session,
 		...((user && {
 			user: {
+				...user,
 				email: user.email,
 				rol: user.role,
 				id: user.id,

packages/server/src/db/schema/account.ts

@@ -77,7 +77,7 @@ export const member = pgTable("member", {
 	userId: text("user_id")
 		.notNull()
 		.references(() => users_temp.id),
-	role: text("role").notNull(),
+	role: text("role").notNull().$type<"owner" | "member" | "admin">(),
 	createdAt: timestamp("created_at").notNull(),
 });
 
@@ -98,7 +98,7 @@ export const invitation = pgTable("invitation", {
 		.notNull()
 		.references(() => organization.id),
 	email: text("email").notNull(),
-	role: text("role"),
+	role: text("role").$type<"owner" | "member" | "admin">(),
 	status: text("status").notNull(),
 	expiresAt: timestamp("expires_at").notNull(),
 	inviterId: text("inviter_id")

packages/server/src/db/schema/user.ts

@@ -10,7 +10,7 @@ import {
 import { createInsertSchema } from "drizzle-zod";
 import { nanoid } from "nanoid";
 import { z } from "zod";
-import { account } from "./account";
+import { account, organization } from "./account";
 import { admins } from "./admin";
 import { auth } from "./auth";
 import { certificateType } from "./shared";
@@ -185,7 +185,7 @@ export const users_temp = pgTable("user_temp", {
 	serversQuantity: integer("serversQuantity").notNull().default(0),
 });
 
-export const usersRelations = relations(users_temp, ({ one }) => ({
+export const usersRelations = relations(users_temp, ({ one, many }) => ({
 	// auth: one(auth, {
 	// 	fields: [users.authId],
 	// 	references: [auth.id],
@@ -194,6 +194,7 @@ export const usersRelations = relations(users_temp, ({ one }) => ({
 		fields: [users_temp.id],
 		references: [account.userId],
 	}),
+	organizations: many(organization),
 	// admin: one(admins, {
 	// 	fields: [users.adminId],
 	// 	references: [admins.adminId],

packages/server/src/lib/auth.ts

@@ -3,7 +3,7 @@ import * as bcrypt from "bcrypt";
 import { betterAuth } from "better-auth";
 import { drizzleAdapter } from "better-auth/adapters/drizzle";
 import { createAuthMiddleware, organization } from "better-auth/plugins";
-import { eq } from "drizzle-orm";
+import { desc, eq } from "drizzle-orm";
 import { db } from "../db";
 import * as schema from "../db/schema";
 
@@ -29,15 +29,47 @@ export const auth = betterAuth({
 		after: createAuthMiddleware(async (ctx) => {
 			if (ctx.path.startsWith("/sign-up")) {
 				const newSession = ctx.context.newSession;
-        await db
+				const organization = await db
-          .update(schema.users_temp)
+					.insert(schema.organization)
-          .set({
+					.values({
-            role: "admin",
+						name: "My Organization",
+						ownerId: newSession?.user?.id || "",
+						createdAt: new Date(),
 					})
-          .where(eq(schema.users_temp.id, newSession?.user?.id || ""));
+					.returning()
+					.then((res) => res[0]);
+
+				await db.insert(schema.member).values({
+					userId: newSession?.user?.id || "",
+					organizationId: organization?.id || "",
+					role: "owner",
+					createdAt: new Date(),
+				});
 			}
 		}),
 	},
+	databaseHooks: {
+		session: {
+			create: {
+				before: async (session) => {
+					const member = await db.query.member.findFirst({
+						where: eq(schema.member.userId, session.userId),
+						orderBy: desc(schema.member.createdAt),
+						with: {
+							organization: true,
+						},
+					});
+
+					return {
+						data: {
+							...session,
+							activeOrganizationId: member?.organization.id,
+						},
+					};
+				},
+			},
+		},
+	},
 	user: {
 		modelName: "users_temp",
 		additionalFields: {
@@ -67,19 +99,18 @@ export const validateRequest = async (request: IncomingMessage) => {
 	}
 
 	if (session?.user) {
-    if (session?.user.role === "user") {
+		const member = await db.query.member.findFirst({
-      const owner = await db.query.member.findFirst({
 			where: eq(schema.member.userId, session.user.id),
 			with: {
 				organization: true,
 			},
 		});
 
-      if (owner) {
+		session.user.role = member?.role || "member";
-        session.user.ownerId = owner.organization.ownerId;
+		if (member) {
-      }
+			session.user.ownerId = member.organization.ownerId;
 		} else {
-      session.user.ownerId = session?.user?.id || "";
+			session.user.ownerId = session.user.id;
 		}
 	}
 

packages/server/src/services/admin.ts

@@ -1,9 +1,12 @@
 import { randomBytes } from "node:crypto";
 import { db } from "@dokploy/server/db";
 import {
+	account,
 	admins,
 	type apiCreateUserInvitation,
 	auth,
+	member,
+	organization,
 	users_temp,
 } from "@dokploy/server/db/schema";
 import { TRPCError } from "@trpc/server";
@@ -14,7 +17,7 @@ import { IS_CLOUD } from "../constants";
 export type Admin = typeof users_temp.$inferSelect;
 export const createInvitation = async (
 	input: typeof apiCreateUserInvitation._type,
-  adminId: string
+	adminId: string,
 ) => {
 	await db.transaction(async (tx) => {
 		const result = await tx
@@ -36,15 +39,15 @@ export const createInvitation = async (
 		const expiresIn24Hours = new Date();
 		expiresIn24Hours.setDate(expiresIn24Hours.getDate() + 1);
 		const token = randomBytes(32).toString("hex");
-    await tx
+		// await tx
-      .insert(users)
+		// 	.insert(users)
-      .values({
+		// 	.values({
-        adminId: adminId,
+		// 		adminId: adminId,
-        authId: result.id,
+		// 		authId: result.id,
-        token,
+		// 		token,
-        expirationDate: expiresIn24Hours.toISOString(),
+		// 		expirationDate: expiresIn24Hours.toISOString(),
-      })
+		// 	})
-      .returning();
+		// 	.returning();
 	});
 };
 
@@ -79,31 +82,33 @@ export const updateUser = async (userId: string, userData: Partial<Admin>) => {
 
 export const updateAdminById = async (
 	adminId: string,
-  adminData: Partial<Admin>
+	adminData: Partial<Admin>,
 ) => {
-  const admin = await db
+	// const admin = await db
-    .update(admins)
+	// 	.update(admins)
-    .set({
+	// 	.set({
-      ...adminData,
+	// 		...adminData,
-    })
+	// 	})
-    .where(eq(admins.adminId, adminId))
+	// 	.where(eq(admins.adminId, adminId))
-    .returning()
+	// 	.returning()
-    .then((res) => res[0]);
+	// 	.then((res) => res[0]);
-
+	// return admin;
-  return admin;
 };
 
 export const findAdminById = async (userId: string) => {
 	const admin = await db.query.admins.findFirst({
-    where: eq(admins.userId, userId),
+		// where: eq(admins.userId, userId),
 	});
 	return admin;
 };
 
 export const isAdminPresent = async () => {
-  const admin = await db.query.users_temp.findFirst({
+	const admin = await db.query.member.findFirst({
-    where: eq(users_temp.role, "admin"),
+		where: eq(member.role, "owner"),
 	});
+
+	console.log("admin", admin);
+
 	if (!admin) {
 		return false;
 	}