6dcae6956c
L'éditeur du blog (jusqu'ici limité au seeder) a maintenant une vraie
interface au-dessus de l'API.
Backend (apps/api) :
* Migration users.is_admin (boolean default false).
* Middleware admin (404 si user.is_admin=false après auth).
* Commande ace promote:admin --email=… [--revoke].
* AdminPostsController CRUD complet : list/show/store/update/publish/
unpublish/destroy + suggest-slug. Au save, contentHtml + wordCount +
readingTime sont re-calculés via blog_renderer. Au publish, durcit la
validation SEO (titre ≤60, excerpt 120-160, hero+alt requis, ≥600 mots),
flippe status='published' + publishedAt, ping Google+Bing pour le sitemap.
* BlogUploadsController :
- POST /api/v1/admin/uploads (multipart, JPEG/PNG/WebP, max 4MB)
→ MinIO clé uploads/blog/{uuid}.{ext}
→ renvoie URL relative /api/v1/uploads/blog/{filename}
- GET /api/v1/uploads/blog/:filename (public, cache immutable 1 an)
→ stream depuis MinIO, regex anti-traversal sur le nom.
* UserTransformer expose isAdmin (cf. shared/types/user).
* k3s/app/landing.yml : NodePort 30111 explicite (pour Traefik repo proxmox).
Frontend (apps/web) :
* Lib typée admin-blog (calls API, queryKeys, helpers URL).
* Route /admin/blog : liste filtrable avec status badge, ouverture
publique, dépublier, supprimer, "+ Nouveau brouillon".
* Route /admin/blog/:id : éditeur 2-colonnes
- Gauche : @uiw/react-md-editor (lazy import) avec preview live.
- Droite : hero image (drag&drop + alt), excerpt avec compteur
120-160, tags, aperçu Google snippet, validations bloquantes.
- Autosave debounce 2s + bouton Publier qui sauve d'abord.
- Hero image upload via MinIO (HeroImageUpload component).
* Sidebar : lien "Blog (admin)" si user.isAdmin.
* Gate côté client (beforeLoad redirect si non admin) + côté serveur
(middleware admin) — defense in depth.
Note : les requirements de publish miroir backend ↔ frontend (cf.
PUBLISH_REQUIREMENTS dans validators/post.ts et VALIDATION_RULES dans
admin.blog_.\$id.tsx). À synchroniser si un seuil bouge.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
87 lines
2.7 KiB
TypeScript
87 lines
2.7 KiB
TypeScript
import { api } from "./api";
|
|
import { env } from "./env";
|
|
|
|
/**
|
|
* Client API typé pour l'admin du blog. Toutes les routes nécessitent
|
|
* `auth + is_admin` côté serveur (cf. apps/api/start/routes.ts).
|
|
*/
|
|
|
|
export type PostStatus = "draft" | "published";
|
|
|
|
export type AdminPost = {
|
|
id: string;
|
|
slug: string;
|
|
title: string;
|
|
excerpt: string;
|
|
contentMd: string;
|
|
contentHtml: string;
|
|
authorName: string;
|
|
tags: string[];
|
|
status: PostStatus;
|
|
publishedAt: string | null;
|
|
heroImageUrl: string | null;
|
|
heroImageAlt: string | null;
|
|
ogImageUrl: string | null;
|
|
canonicalUrl: string | null;
|
|
noindex: boolean;
|
|
wordCount: number;
|
|
readingTimeMinutes: number;
|
|
createdAt: string;
|
|
updatedAt: string | null;
|
|
};
|
|
|
|
export type CreatePostInput = {
|
|
slug: string;
|
|
title: string;
|
|
excerpt: string;
|
|
contentMd: string;
|
|
tags?: string[];
|
|
authorName?: string;
|
|
heroImageUrl?: string | null;
|
|
heroImageAlt?: string | null;
|
|
ogImageUrl?: string | null;
|
|
canonicalUrl?: string | null;
|
|
noindex?: boolean;
|
|
};
|
|
|
|
export type UpdatePostInput = Partial<CreatePostInput>;
|
|
|
|
export type UploadResult = {
|
|
/** URL publique relative (ex: /api/v1/uploads/blog/{uuid}.jpg) — préfixée par VITE_API_URL pour usage navigateur. */
|
|
url: string;
|
|
contentType: string;
|
|
sizeBytes: number;
|
|
};
|
|
|
|
/** Renvoie l'URL absolue exploitable côté navigateur depuis une URL relative API. */
|
|
export function absolutizeApiUrl(relativeOrAbsolute: string): string {
|
|
if (!relativeOrAbsolute) return relativeOrAbsolute;
|
|
if (relativeOrAbsolute.startsWith("http")) return relativeOrAbsolute;
|
|
return `${env.VITE_API_URL}${relativeOrAbsolute}`;
|
|
}
|
|
|
|
export const adminBlogApi = {
|
|
list: () => api.get<AdminPost[]>("/api/v1/admin/posts"),
|
|
get: (id: string) => api.get<AdminPost>(`/api/v1/admin/posts/${id}`),
|
|
create: (input: CreatePostInput) => api.post<AdminPost>("/api/v1/admin/posts", input),
|
|
update: (id: string, input: UpdatePostInput) =>
|
|
api.patch<AdminPost>(`/api/v1/admin/posts/${id}`, input),
|
|
publish: (id: string) => api.post<AdminPost>(`/api/v1/admin/posts/${id}/publish`, {}),
|
|
unpublish: (id: string) => api.post<AdminPost>(`/api/v1/admin/posts/${id}/unpublish`, {}),
|
|
delete: (id: string) => api.delete<void>(`/api/v1/admin/posts/${id}`),
|
|
suggestSlug: (title: string) =>
|
|
api.get<{ slug: string }>(`/api/v1/admin/posts/suggest-slug?title=${encodeURIComponent(title)}`),
|
|
|
|
uploadImage: async (file: File): Promise<UploadResult> => {
|
|
const form = new FormData();
|
|
form.append("file", file);
|
|
return api.post<UploadResult>("/api/v1/admin/uploads", form);
|
|
},
|
|
};
|
|
|
|
export const adminBlogQueryKeys = {
|
|
all: () => ["admin", "blog"] as const,
|
|
list: () => ["admin", "blog", "list"] as const,
|
|
detail: (id: string) => ["admin", "blog", "detail", id] as const,
|
|
};
|