validate-email and reset-password buttons on Manager

Author: simonredfern

apps/api-manager/src/lib/utils/roleChecker.ts

@@ -307,6 +307,12 @@ export const SITE_MAP: Record<string, PageRoleConfig> = {
   "/users/[provider]/[username]/lock": {
     required: [{ role: "CanLockUser" }],
   },
+  "/users/[user_id]/validate-email": {
+    required: [{ role: "CanGetAnyUser" }],
+  },
+  "/users/[user_id]/reset-password": {
+    required: [{ role: "CanCreateResetPasswordUrl" }],
+  },
 
   // ── Integration ─────────────────────────────────────
   "/integration/method-routings": {

apps/api-manager/src/routes/(protected)/users/[user_id]/+page.server.ts

@@ -16,6 +16,7 @@ interface UserDetail {
   last_login_date?: string;
   is_locked?: boolean;
   is_deleted?: boolean;
+  email_validated?: boolean;
   entitlements?: any;
 }
 

apps/api-manager/src/routes/(protected)/users/[user_id]/+page.svelte

@@ -111,7 +111,16 @@
           </div>
           <div class="info-item">
             <div class="info-label">Email</div>
-            <div class="info-value">{user.email || "N/A"}</div>
+            <div class="info-value">
+              {user.email || "N/A"}
+              {#if user.email_validated === true && user.user_id}
+                <a
+                  href="/users/{encodeURIComponent(user.user_id)}/reset-password"
+                  class="action-link"
+                  data-testid="user-send-reset-password-link"
+                >Send Password Reset Email</a>
+              {/if}
+            </div>
           </div>
           <div class="info-item">
             <div class="info-label">Username</div>
@@ -157,6 +166,26 @@
               {/if}
             </div>
           </div>
+          <div class="info-item">
+            <div class="info-label">Email Validated</div>
+            <div class="info-value" data-testid="user-email-validated">
+              {#if user.email_validated === true}
+                <span class="badge badge-success">Yes</span>
+              {:else if user.email_validated === false}
+                <span class="badge badge-error">No</span>
+                {#if user.user_id}
+                  <a
+                    href="/users/{encodeURIComponent(user.user_id)}/validate-email"
+                    class="action-link"
+                    style="color: #059669;"
+                    data-testid="user-send-validation-email-link"
+                  >Send Validation Email</a>
+                {/if}
+              {:else}
+                <span class="badge badge-default">Unknown</span>
+              {/if}
+            </div>
+          </div>
           {#if user.last_activity_date}
             <div class="info-item">
               <div class="info-label">Last Activity</div>

apps/api-manager/src/routes/(protected)/users/[user_id]/reset-password/+page.server.ts

@@ -0,0 +1,129 @@
+import { createLogger } from "@obp/shared/utils";
+const logger = createLogger("ResetPasswordPageServer");
+import type { PageServerLoad } from "./$types";
+import { obp_requests } from "$lib/obp/requests";
+import { extractErrorDetails } from "$lib/obp/errors";
+import { SessionOAuthHelper } from "$lib/oauth/sessionHelper";
+import { error, fail } from "@sveltejs/kit";
+import type { RequestEvent } from "@sveltejs/kit";
+
+export const load: PageServerLoad = async ({ locals, params }) => {
+  const session = locals.session;
+
+  if (!session?.data?.user) {
+    throw error(401, "Unauthorized");
+  }
+
+  const { user_id } = params;
+
+  if (!user_id) {
+    throw error(400, "User ID is required");
+  }
+
+  const sessionOAuth = SessionOAuthHelper.getSessionOAuth(session);
+  const accessToken = sessionOAuth?.accessToken;
+
+  if (!accessToken) {
+    logger.warn("No access token available for reset-password page");
+    return {
+      user: null,
+      user_id,
+      hasApiAccess: false,
+      error: "No API access token available",
+    };
+  }
+
+  let user = null;
+  try {
+    const endpoint = `/obp/v6.0.0/users/user-id/${encodeURIComponent(user_id)}`;
+    user = await obp_requests.get(endpoint, accessToken);
+  } catch (err) {
+    logger.error(
+      `Error fetching user details: ${err instanceof Error ? err.message : String(err)}`,
+    );
+    return {
+      user: null,
+      user_id,
+      hasApiAccess: false,
+      error: err instanceof Error ? err.message : "Failed to load user details",
+    };
+  }
+
+  return {
+    user,
+    user_id,
+    hasApiAccess: true,
+  };
+};
+
+export const actions = {
+  sendResetPasswordEmail: async (event: RequestEvent) => {
+    const session = event.locals.session;
+
+    if (!session?.data?.user) {
+      return fail(401, { error: "Unauthorized", action: "sendResetPasswordEmail" });
+    }
+
+    const sessionOAuth = SessionOAuthHelper.getSessionOAuth(session);
+    const token = sessionOAuth?.accessToken;
+
+    if (!token) {
+      return fail(401, {
+        error: "Unauthorized: No access token found in session.",
+        action: "sendResetPasswordEmail",
+      });
+    }
+
+    const { user_id } = event.params;
+
+    if (!user_id) {
+      return fail(400, { error: "User ID is required.", action: "sendResetPasswordEmail" });
+    }
+
+    let user;
+    try {
+      const endpoint = `/obp/v6.0.0/users/user-id/${encodeURIComponent(user_id)}`;
+      user = await obp_requests.get(endpoint, token);
+    } catch (e: any) {
+      logger.error("Error fetching user for password reset:", e);
+      const { message } = extractErrorDetails(e);
+      return fail(500, { error: message, action: "sendResetPasswordEmail" });
+    }
+
+    if (!user?.user_id || !user?.username || !user?.email) {
+      return fail(400, {
+        error: "Could not determine user_id, username and email for this user.",
+        action: "sendResetPasswordEmail",
+      });
+    }
+
+    try {
+      const endpoint = `/obp/v6.0.0/management/user/reset-password-url`;
+      const result = await obp_requests.post(
+        endpoint,
+        {
+          user_id: user.user_id,
+          username: user.username,
+          email: user.email,
+        },
+        token,
+      );
+
+      logger.info(
+        `Password reset email requested for ${user.username} <${user.email}>`,
+      );
+
+      return {
+        success: true,
+        action: "sendResetPasswordEmail",
+        sentTo: result.to,
+        username: user.username,
+        apiStatus: result.status,
+      };
+    } catch (e: any) {
+      logger.error("Error requesting password reset email:", e);
+      const { message } = extractErrorDetails(e);
+      return fail(500, { error: message, action: "sendResetPasswordEmail" });
+    }
+  },
+};