This commit adds major features for sandbox isolation, public API access, and platform support ticketing. ## Sandbox Mode - Add sandbox mode toggle for businesses to test features without affecting live data - Implement schema-based isolation for tenant data (appointments, resources, services) - Add is_sandbox field filtering for shared models (customers, staff, tickets) - Create sandbox middleware to detect and set sandbox mode from cookies - Add sandbox context and hooks for React frontend - Display sandbox banner when in test mode - Auto-reload page when switching between live/test modes - Prevent platform support tickets from being created in sandbox mode ## Public API System - Full REST API for external integrations with businesses - API token management with sandbox/live token separation - Test tokens (ss_test_*) show full plaintext for easy testing - Live tokens (ss_live_*) are hashed and secure - Security validation prevents live token plaintext storage - Comprehensive test suite for token security - Rate limiting and throttling per token - Webhook support for real-time event notifications - Scoped permissions system (read/write per resource type) - API documentation page with interactive examples - Token revocation with confirmation modal ## Platform Support - Dedicated support page for businesses to contact SmoothSchedule - View all platform support tickets in one place - Create new support tickets with simplified interface - Reply to existing tickets with conversation history - Platform tickets have no admin controls (no priority/category/assignee/status) - Internal notes hidden for platform tickets (business can't see them) - Quick help section with links to guides and API docs - Sandbox warning prevents ticket creation in test mode - Business ticketing retains full admin controls (priority, assignment, internal notes) ## UI/UX Improvements - Add notification dropdown with real-time updates - Staff permissions UI for ticket access control - Help dropdown in sidebar with Platform Guide, Ticketing Help, API Docs, and Support - Update sidebar "Contact Support" to "Support" with message icon - Fix navigation links to use React Router instead of anchor tags - Remove unused language translations (Japanese, Portuguese, Chinese) ## Technical Details - Sandbox middleware sets request.sandbox_mode from cookies - ViewSets filter data by is_sandbox field - API authentication via custom token auth class - WebSocket support for real-time ticket updates - Migration for sandbox fields on User, Tenant, and Ticket models - Comprehensive documentation in SANDBOX_MODE_IMPLEMENTATION.md 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
65 lines
1.9 KiB
TypeScript
65 lines
1.9 KiB
TypeScript
import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query';
|
|
import apiClient from '../api/client';
|
|
import { User } from '../types';
|
|
|
|
interface StaffUser {
|
|
id: number | string;
|
|
email: string;
|
|
name: string; // This is the full_name from the serializer
|
|
username?: string;
|
|
role: string;
|
|
is_active: boolean;
|
|
permissions: Record<string, boolean>;
|
|
can_invite_staff?: boolean;
|
|
}
|
|
|
|
/**
|
|
* Hook to fetch all staff members (owners, managers, staff) for the current business.
|
|
* Used for assignee dropdowns in tickets and other features.
|
|
*/
|
|
export const useUsers = () => {
|
|
return useQuery<StaffUser[]>({
|
|
queryKey: ['staff'],
|
|
queryFn: async () => {
|
|
const response = await apiClient.get('/api/staff/');
|
|
return response.data;
|
|
},
|
|
});
|
|
};
|
|
|
|
/**
|
|
* Hook to fetch staff members for assignee selection.
|
|
* Returns users formatted for dropdown use.
|
|
*/
|
|
export const useStaffForAssignment = () => {
|
|
return useQuery<{ id: string; name: string; email: string; role: string }[]>({
|
|
queryKey: ['staffForAssignment'],
|
|
queryFn: async () => {
|
|
const response = await apiClient.get('/api/staff/');
|
|
return response.data.map((user: StaffUser) => ({
|
|
id: String(user.id),
|
|
name: user.name || user.email, // 'name' field from serializer (full_name)
|
|
email: user.email,
|
|
role: user.role,
|
|
}));
|
|
},
|
|
});
|
|
};
|
|
|
|
/**
|
|
* Hook to update a staff member's permissions
|
|
*/
|
|
export const useUpdateStaffPermissions = () => {
|
|
const queryClient = useQueryClient();
|
|
|
|
return useMutation({
|
|
mutationFn: async ({ userId, permissions }: { userId: string | number; permissions: Record<string, boolean> }) => {
|
|
const response = await apiClient.patch(`/api/staff/${userId}/`, { permissions });
|
|
return response.data;
|
|
},
|
|
onSuccess: () => {
|
|
queryClient.invalidateQueries({ queryKey: ['staff'] });
|
|
},
|
|
});
|
|
};
|