airano-ir
43fd2201a0
Settings fixes: - MAX_SITES_PER_USER, USER_RATE_LIMIT_PER_MIN/HR now read from DB settings table (DB > ENV > default), so dashboard/settings changes apply without restart. Sync cache refreshed on every save or delete. - /api/me reports the live DB value for max_sites_per_user. Admin improvements: - Admin users bypass per-user rate limiting entirely (role=admin or ADMIN_EMAILS). - Admin Overview now shows platform stats: registered users, new users (7d), total user sites, available tools. Plugin cleanup: - Appwrite and Directus plugins removed from the active registry (8 plugins now: WordPress, WooCommerce, WordPress Specialist, Gitea, n8n, Supabase, OpenPanel, Coolify). Plugin code is retained for future re-enabling. - Settings page plugin visibility list updated to match. Mobile onboarding: - Stepper steps on narrow viewports stack vertically with correct full border and rounded corners on each step. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
69 lines
1.8 KiB
Python
69 lines
1.8 KiB
Python
"""Plugin visibility control for public vs admin users (Track F.1).
|
|
|
|
Controls which plugins are visible to public (OAuth) users vs admin users.
|
|
Admin users (MASTER_API_KEY) always see all plugins. Public users only see
|
|
plugins listed in the ENABLED_PLUGINS setting (DB > ENV > default).
|
|
|
|
Usage:
|
|
from core.plugin_visibility import get_public_plugin_types, is_plugin_public
|
|
|
|
public_types = get_public_plugin_types()
|
|
if is_plugin_public("gitea"): # True
|
|
...
|
|
"""
|
|
|
|
import os
|
|
|
|
# Default plugins available to public (OAuth) users.
|
|
DEFAULT_PUBLIC_PLUGINS = {
|
|
"wordpress",
|
|
"woocommerce",
|
|
"wordpress_specialist",
|
|
"supabase",
|
|
"openpanel",
|
|
"gitea",
|
|
"n8n",
|
|
"coolify",
|
|
}
|
|
|
|
|
|
def _parse_plugins(val: str) -> set[str]:
|
|
"""Parse comma-separated plugin string into set."""
|
|
return {p.strip().lower() for p in val.split(",") if p.strip()}
|
|
|
|
|
|
def get_public_plugin_types() -> set[str]:
|
|
"""Return the set of plugin types visible to public users.
|
|
|
|
Checks DB settings first (sync-safe), then env var, then defaults.
|
|
|
|
Returns:
|
|
Set of lowercase plugin type strings.
|
|
"""
|
|
# Try DB setting (sync access via cached value)
|
|
try:
|
|
from core.settings import _cached_plugins
|
|
|
|
if _cached_plugins is not None:
|
|
return set(_cached_plugins)
|
|
except (ImportError, AttributeError):
|
|
pass
|
|
|
|
# Fallback to env var
|
|
env_val = os.getenv("ENABLED_PLUGINS", "").strip()
|
|
if not env_val:
|
|
return set(DEFAULT_PUBLIC_PLUGINS)
|
|
return _parse_plugins(env_val)
|
|
|
|
|
|
def is_plugin_public(plugin_type: str) -> bool:
|
|
"""Check if a plugin type is enabled for public users.
|
|
|
|
Args:
|
|
plugin_type: Plugin type string (e.g., "wordpress").
|
|
|
|
Returns:
|
|
True if the plugin is in the public set.
|
|
"""
|
|
return plugin_type.lower() in get_public_plugin_types()
|