+
+ Application error
++ An unexpected error occurred. Please retry or return to the home page. +
+
+
+
+
+ + +
/ Atlas
+
+ +
/ Atlas
+
+ +
+https://avatars.githubusercontent.com/u/90376906?s=400&u=7592339d75e23b1e5b5db486c48271f6491d1422&v=4 ++ Website • Demo • Documentation • Chat +
+ ++Atlas business intelligence library plugs in to your existing reporting platforms, extracts useful metadata, and displays it in a unified report library where you can easily search for, document, and launch reports. +
+ +
+
+
+
+
+
+
+
+
+ />
+
+
[](https://sonarcloud.io/summary/new_code?id=atlas-bi_atlas-bi-library)
+[](https://sonarcloud.io/summary/new_code?id=atlas-bi_atlas-bi-library)
+[](https://sonarcloud.io/summary/new_code?id=atlas-bi_atlas-bi-library)
\ No newline at end of file
diff --git a/frontend/app/api/home/[tab]/route.ts b/frontend/app/api/home/[tab]/route.ts
new file mode 100644
index 000000000..df55b2a6c
--- /dev/null
+++ b/frontend/app/api/home/[tab]/route.ts
@@ -0,0 +1,33 @@
+import { NextResponse } from "next/server"
+import { getCurrentUser } from "@/lib/auth"
+import { getHomeTabPanel, getHomeUserPageSummary } from "@/lib/home/api"
+import { isHomeTabId } from "@/lib/home/constants"
+
+export async function GET(_request: Request, context: { params: Promise<{ tab: string }> }) {
+ const user = await getCurrentUser()
+ if (!user) {
+ return NextResponse.json({ ok: false, error: "auth_required" }, { status: 401 })
+ }
+
+ const { tab } = await context.params
+ if (!isHomeTabId(tab)) {
+ return NextResponse.json({ ok: false, error: "not_found" }, { status: 404 })
+ }
+
+ const userId = Number(user.userId)
+ if (!Number.isFinite(userId) || userId <= 0) {
+ return NextResponse.json({ ok: false, error: "bad_request" }, { status: 400 })
+ }
+
+ const page = await getHomeUserPageSummary(userId)
+ if (!page.data) {
+ return NextResponse.json({ ok: false, error: page.error ?? "unknown" }, { status: 400 })
+ }
+
+ const panel = await getHomeTabPanel(userId, page.data.defaultReportTypeIds, tab)
+ if (!panel.data) {
+ return NextResponse.json({ ok: false, error: panel.error ?? "unknown" }, { status: 400 })
+ }
+
+ return NextResponse.json({ ok: true, data: panel.data })
+}
diff --git a/frontend/app/auth/admin-mode/route.ts b/frontend/app/auth/admin-mode/route.ts
new file mode 100644
index 000000000..175ba2a46
--- /dev/null
+++ b/frontend/app/auth/admin-mode/route.ts
@@ -0,0 +1,42 @@
+import { cookies } from "next/headers"
+import { type NextRequest, NextResponse } from "next/server"
+import { getServerApiBase } from "@/lib/api-base"
+
+export async function GET(request: NextRequest) {
+ const token = (await cookies()).get("atlas_token")?.value
+ const returnTo = request.nextUrl.searchParams.get("returnTo") || "/"
+ const publicOrigin = process.env.AUTH_RETURN_URL_ORIGIN ?? request.nextUrl.origin
+ const parsedReturnTo = new URL(returnTo, publicOrigin)
+ const redirectUrl = new URL(
+ `${parsedReturnTo.pathname}${parsedReturnTo.search}${parsedReturnTo.hash}` || "/",
+ publicOrigin,
+ )
+ redirectUrl.searchParams.set("_admin", String(Date.now()))
+
+ if (!token) {
+ return NextResponse.redirect(redirectUrl)
+ }
+
+ const apiBase = getServerApiBase()
+ if (!apiBase) {
+ return NextResponse.redirect(redirectUrl)
+ }
+
+ try {
+ const result = await fetch(`${apiBase}/api/users/me/admin-mode/toggle`, {
+ method: "POST",
+ headers: {
+ Authorization: `Bearer ${token}`,
+ },
+ cache: "no-store",
+ })
+ if (!result.ok) {
+ redirectUrl.searchParams.set("adminToggle", "failed")
+ }
+ } catch {
+ redirectUrl.searchParams.set("adminToggle", "failed")
+ return NextResponse.redirect(redirectUrl)
+ }
+
+ return NextResponse.redirect(redirectUrl)
+}
diff --git a/frontend/app/auth/callback/route.ts b/frontend/app/auth/callback/route.ts
new file mode 100644
index 000000000..87f31bb57
--- /dev/null
+++ b/frontend/app/auth/callback/route.ts
@@ -0,0 +1,28 @@
+import { NextResponse } from "next/server"
+import { getAuthRedirectOrigin } from "../redirect-origin"
+
+const tokenCookieName = "atlas_token"
+const maxAgeSeconds = 8 * 60 * 60
+
+export function GET(request: Request) {
+ const url = new URL(request.url)
+ const redirectOrigin = getAuthRedirectOrigin(request.url)
+ const token = url.searchParams.get("token")
+
+ if (!token) {
+ return NextResponse.redirect(new URL("/auth/login", redirectOrigin))
+ }
+
+ const response = NextResponse.redirect(new URL("/", redirectOrigin))
+ response.cookies.set({
+ name: tokenCookieName,
+ value: token,
+ httpOnly: true,
+ sameSite: "lax",
+ secure: url.protocol === "https:",
+ path: "/",
+ maxAge: maxAgeSeconds,
+ })
+
+ return response
+}
diff --git a/frontend/app/auth/login/route.ts b/frontend/app/auth/login/route.ts
new file mode 100644
index 000000000..b48e0072e
--- /dev/null
+++ b/frontend/app/auth/login/route.ts
@@ -0,0 +1,10 @@
+import { redirect } from "next/navigation"
+import type { NextRequest } from "next/server"
+import { getPublicApiBase } from "@/lib/api-base"
+
+export function GET(request: NextRequest) {
+ const authReturnOrigin = process.env.AUTH_RETURN_URL_ORIGIN ?? request.nextUrl.origin
+ const returnUrl = `${authReturnOrigin.replace(/\/$/, "")}/auth/callback`
+ const apiBase = getPublicApiBase(request.nextUrl.origin)
+ redirect(`${apiBase}/api/auth/login?returnUrl=${encodeURIComponent(returnUrl)}`)
+}
diff --git a/frontend/app/auth/logout/route.ts b/frontend/app/auth/logout/route.ts
new file mode 100644
index 000000000..5d85bce00
--- /dev/null
+++ b/frontend/app/auth/logout/route.ts
@@ -0,0 +1,17 @@
+import { type NextRequest, NextResponse } from "next/server"
+import { getAuthRedirectOrigin } from "../redirect-origin"
+
+export function GET(request: NextRequest) {
+ const redirectOrigin = getAuthRedirectOrigin(request.url)
+ const response = NextResponse.redirect(new URL("/", redirectOrigin))
+ response.cookies.set({
+ name: "atlas_token",
+ value: "",
+ httpOnly: true,
+ sameSite: "lax",
+ secure: request.nextUrl.protocol === "https:",
+ path: "/",
+ expires: new Date(0),
+ })
+ return response
+}
diff --git a/frontend/app/auth/redirect-origin.test.ts b/frontend/app/auth/redirect-origin.test.ts
new file mode 100644
index 000000000..7fa0a7c3d
--- /dev/null
+++ b/frontend/app/auth/redirect-origin.test.ts
@@ -0,0 +1,32 @@
+import type { NextRequest } from "next/server"
+import { afterEach, describe, expect, test } from "vitest"
+import { GET as callbackGet } from "./callback/route"
+import { GET as logoutGet } from "./logout/route"
+
+describe("auth public redirect origin", () => {
+ const originalEnv = process.env.AUTH_RETURN_URL_ORIGIN
+
+ afterEach(() => {
+ if (originalEnv === undefined) {
+ delete process.env.AUTH_RETURN_URL_ORIGIN
+ } else {
+ process.env.AUTH_RETURN_URL_ORIGIN = originalEnv
+ }
+ })
+
+ test("callback redirects to configured public origin after setting token", () => {
+ process.env.AUTH_RETURN_URL_ORIGIN = "https://library.atlas.bi"
+
+ const response = callbackGet(new Request("https://0.0.0.0:3000/auth/callback?token=test-token"))
+
+ expect(response.headers.get("location")).toBe("https://library.atlas.bi/")
+ })
+
+ test("logout redirects to configured public origin", () => {
+ process.env.AUTH_RETURN_URL_ORIGIN = "https://library.atlas.bi"
+
+ const response = logoutGet(new Request("https://0.0.0.0:3000/auth/logout") as NextRequest)
+
+ expect(response.headers.get("location")).toBe("https://library.atlas.bi/")
+ })
+})
diff --git a/frontend/app/auth/redirect-origin.ts b/frontend/app/auth/redirect-origin.ts
new file mode 100644
index 000000000..29e2afe44
--- /dev/null
+++ b/frontend/app/auth/redirect-origin.ts
@@ -0,0 +1,23 @@
+const internalHosts = new Set(["0.0.0.0", "127.0.0.1", "localhost"])
+
+function stripTrailingSlashes(value: string): string {
+ let end = value.length
+ while (end > 0 && value.charCodeAt(end - 1) === 47) {
+ end -= 1
+ }
+ return value.slice(0, end)
+}
+
+export function getAuthRedirectOrigin(requestUrl: string): string {
+ const configuredOrigin = process.env.AUTH_RETURN_URL_ORIGIN
+ ? stripTrailingSlashes(process.env.AUTH_RETURN_URL_ORIGIN)
+ : undefined
+ if (configuredOrigin) return configuredOrigin
+
+ const url = new URL(requestUrl)
+ if (internalHosts.has(url.hostname)) {
+ return "http://localhost:3000"
+ }
+
+ return url.origin
+}
diff --git a/frontend/app/collections/actions.ts b/frontend/app/collections/actions.ts
new file mode 100644
index 000000000..4bfd1b290
--- /dev/null
+++ b/frontend/app/collections/actions.ts
@@ -0,0 +1,52 @@
+"use server"
+
+import { revalidatePath } from "next/cache"
+import { redirect } from "next/navigation"
+import {
+ createCollection,
+ deleteCollection,
+ searchCollectionReports,
+ searchCollectionTerms,
+ updateCollection,
+} from "@/lib/collections/api"
+import type { CollectionWriteBody } from "@/lib/collections/types"
+
+export async function searchCollectionTermsAction(query: string) {
+ return searchCollectionTerms(query)
+}
+
+export async function searchCollectionReportsAction(query: string) {
+ return searchCollectionReports(query)
+}
+
+export async function createCollectionAction(
+ body: CollectionWriteBody,
+): Promise<{ error: string } | undefined> {
+ const result = await createCollection(body)
+ if (!result.ok) {
+ return { error: result.message }
+ }
+ revalidatePath("/collections")
+ redirect(`/collections?id=${result.data.id}`)
+}
+
+export async function updateCollectionAction(
+ id: number,
+ body: CollectionWriteBody,
+): Promise<{ error: string } | undefined> {
+ const result = await updateCollection(id, body)
+ if (!result.ok) {
+ return { error: result.message }
+ }
+ revalidatePath("/collections")
+ redirect(`/collections?id=${id}`)
+}
+
+export async function deleteCollectionAction(id: number): Promise<{ error: string } | undefined> {
+ const result = await deleteCollection(id)
+ if (!result.ok) {
+ return { error: result.message }
+ }
+ revalidatePath("/collections")
+ redirect("/collections")
+}
diff --git a/frontend/app/collections/edit/page.tsx b/frontend/app/collections/edit/page.tsx
new file mode 100644
index 000000000..4389cf46b
--- /dev/null
+++ b/frontend/app/collections/edit/page.tsx
@@ -0,0 +1,122 @@
+import Link from "next/link"
+import { redirect } from "next/navigation"
+import { CollectionForm } from "@/components/collections/collection-form"
+import { Button } from "@/components/ui/button"
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card"
+import { getCurrentUser, getToken, hasPermission } from "@/lib/auth"
+import { getCollectionById } from "@/lib/collections/api"
+
+type EditSearchParams = { id?: string }
+
+function getSingleValue(value: string | string[] | undefined): string | undefined {
+ if (typeof value === "string") return value
+ if (Array.isArray(value)) return value[0]
+ return undefined
+}
+
+export default async function EditCollectionPage({
+ searchParams,
+}: {
+ searchParams: EditSearchParams
+}) {
+ const token = await getToken()
+ if (!token) redirect("/auth/login")
+
+ const user = await getCurrentUser()
+ if (!user || !hasPermission(user, "Edit Collection")) {
+ return (
+ + You need the Edit Collection permission to update collections. +
+ ++ Provide a valid collection id in the URL. +
+ ++ You do not have access to edit this collection. +
+ ++ You need the Create Collection permission to add collections. +
+ ++ Missing or invalid collection id. +
+ +{message}
+ +{message}
+ {statusHint ?{statusHint}
: null} + {backendHint ?{backendHint}
: null} + +No collections found.
+ ) : ( ++ We could not complete this action. Please try again. +
++ An unexpected error occurred. Please retry or return to the home page. +
+Missing or invalid group id.
+ ++ {denied ? "You do not have access to this page." : message} +
+ +You do not have access to this page.
++ Site analytics for this group are available in the Analytics application. +
+ ++ {denied ? "You do not have access to this page." : message} +
+You do not have access to this page.
++ You need the Edit Report Documentation permission to update reports. +
+ +Provide a valid report id in the URL.
+ ++ You do not have access to edit this report. +
+ +Missing or invalid report id.
+ +{message}
++ {report.detailedDescription || report.description} +
+ ) : null} +{message}
+ ++ {renderHighlightSnippet(descriptionSnippet)} +
+ ) : item.description ? ( +{item.description}
+ ) : null} + {renderResultMeta(item)} ++ {denied ? "You do not have access to this page." : message} +
+ ++ Site analytics for this user are available in the Analytics application. +
+ +None selected.
+ } + + return ( ++ Supports Markdown. Shown as search summary. +
+