feat(auth) : add admin account management

app/admin/register/actions.ts

@@ -0,0 +1,87 @@
+"use server";
+
+import { eq } from "drizzle-orm";
+import { headers } from "next/headers";
+import { revalidatePath } from "next/cache";
+import { z } from "zod";
+
+import { getDb } from "@/db";
+import { users } from "@/db/schema";
+import { getAuth, requireAdmin } from "@/lib/auth/server";
+
+export interface CreateAccountState {
+  status: "idle" | "error" | "success";
+  message: string;
+}
+
+export const initialCreateAccountState: CreateAccountState = {
+  status: "idle",
+  message: "",
+};
+
+const accountSchema = z
+  .object({
+    name: z.string().trim().min(1),
+    email: z.email().transform((value) => value.toLowerCase()),
+    password: z.string().min(8).max(128),
+    passwordConfirmation: z.string(),
+  })
+  .refine((data) => data.password === data.passwordConfirmation, {
+    path: ["passwordConfirmation"],
+  });
+
+export async function createAccount(
+  _previousState: CreateAccountState,
+  formData: FormData,
+): Promise<CreateAccountState> {
+  await requireAdmin();
+  const parsed = accountSchema.safeParse(Object.fromEntries(formData));
+  if (!parsed.success) {
+    return { status: "error", message: "โปรดตรวจสอบชื่อ อีเมล และรหัสผ่านให้ถูกต้อง" };
+  }
+
+  const existing = await getDb().query.users.findFirst({
+    columns: { id: true },
+    where: eq(users.email, parsed.data.email),
+  });
+  if (existing) {
+    return { status: "error", message: "อีเมลนี้มีบัญชีอยู่แล้ว" };
+  }
+
+  try {
+    await getAuth().api.createUser({
+      body: {
+        name: parsed.data.name,
+        email: parsed.data.email,
+        password: parsed.data.password,
+      },
+      headers: await headers(),
+    });
+  } catch {
+    return { status: "error", message: "สร้างบัญชีไม่สำเร็จ โปรดลองอีกครั้ง" };
+  }
+
+  revalidatePath("/admin/register");
+  return { status: "success", message: `สร้างบัญชี ${parsed.data.email} แล้ว` };
+}
+
+export async function removeAccount(
+  userId: string,
+): Promise<{ status: "error" | "success"; message?: string }> {
+  const session = await requireAdmin();
+  if (userId === session.user.id) {
+    return { status: "error", message: "ไม่สามารถลบบัญชีที่กำลังใช้งานอยู่" };
+  }
+
+  try {
+    await getAuth().api.removeUser({
+      body: { userId },
+      headers: await headers(),
+    });
+  } catch {
+    return { status: "error", message: "ลบบัญชีไม่สำเร็จ โปรดลองอีกครั้ง" };
+  }
+
+  revalidatePath("/admin/register");
+  return { status: "success" };
+}

app/admin/register/page.tsx

@@ -0,0 +1,41 @@
+import { asc } from "drizzle-orm";
+import { redirect } from "next/navigation";
+import { connection } from "next/server";
+
+import { AdminHeader } from "@/components/admin/admin-header";
+import { RegisterCard } from "@/components/admin/register-card";
+import { getDb } from "@/db";
+import { users } from "@/db/schema";
+import { getAdminSession } from "@/lib/auth/server";
+
+export default async function RegisterPage() {
+  await connection();
+  const session = await getAdminSession();
+  if (!session) redirect("/admin/login");
+
+  const accounts = await getDb()
+    .select({
+      id: users.id,
+      name: users.name,
+      email: users.email,
+      createdAt: users.createdAt,
+    })
+    .from(users)
+    .orderBy(asc(users.createdAt));
+
+  return (
+    <div className="min-h-svh">
+      <AdminHeader />
+      <main className="mx-auto flex w-full max-w-7xl flex-col gap-6 p-4 sm:p-6 lg:p-8">
+        <header>
+          <p className="text-sm font-medium text-primary">Admin access</p>
+          <h1 className="font-heading text-3xl font-semibold">จัดการบัญชี</h1>
+          <p className="mt-2 text-muted-foreground">
+            สร้างบัญชีให้ผู้ดูแลคนอื่น หรือลบบัญชีที่ไม่ต้องใช้งานแล้ว
+          </p>
+        </header>
+        <RegisterCard accounts={accounts} currentUserId={session.user.id} />
+      </main>
+    </div>
+  );
+}