maro
65b6eeac51
Adds a first-party analytics system with no third-party trackers and no persistent per-visitor identifiers: events are grouped into sessions via a daily-rotating pseudonymous hash (IP+UA+host, HMAC-salted, never stored raw). - New "Analytics" section in the Payload admin, gated by a canViewAnalytics permission on Users, following the existing custom-admin-view pattern used by the calendar feature - Sessions, page views, unique visitors, top/entry/exit pages, events, device/browser breakdown, date range filter with period comparison - Raw events and daily aggregate rollups as their own collections, with configurable retention and a cron endpoint that rolls up before purging - Cookie consent banner (necessary/preferences/statistics) with categories and copy editable from a new CMS global; a track() helper that is a complete no-op without statistics consent, so nothing is ever sent before a visitor opts in - track() calls wired into the booking flow, contact form, and navigation
78 lines
2.4 KiB
TypeScript
78 lines
2.4 KiB
TypeScript
import type { CollectionConfig } from "payload";
|
|
import { isAdmin, isAdminFieldLevel } from "@/access";
|
|
|
|
export const Users: CollectionConfig = {
|
|
slug: "users",
|
|
labels: {
|
|
singular: "Benutzer:in",
|
|
plural: "Benutzer:innen",
|
|
},
|
|
admin: {
|
|
useAsTitle: "name",
|
|
defaultColumns: ["name", "email", "role"],
|
|
description: "Zugänge für den geschützten Admin-Bereich.",
|
|
},
|
|
auth: {
|
|
// Payload shows a "create first user" screen automatically when this
|
|
// collection is empty, bypassing normal access control just for that
|
|
// one-time setup — no hardcoded default password is ever needed.
|
|
maxLoginAttempts: 5,
|
|
lockTime: 10 * 60 * 1000,
|
|
},
|
|
access: {
|
|
read: isAdmin,
|
|
create: isAdmin,
|
|
update: isAdmin,
|
|
delete: isAdmin,
|
|
},
|
|
fields: [
|
|
{
|
|
name: "name",
|
|
type: "text",
|
|
label: "Name",
|
|
required: true,
|
|
},
|
|
{
|
|
name: "role",
|
|
type: "select",
|
|
label: "Rolle",
|
|
required: true,
|
|
defaultValue: "admin",
|
|
// Only "admin" exists today; add further roles here later and extend
|
|
// the checks in access/index.ts to match.
|
|
options: [{ label: "Administrator:in", value: "admin" }],
|
|
access: {
|
|
update: isAdminFieldLevel,
|
|
},
|
|
},
|
|
{
|
|
name: "canViewAnalytics",
|
|
type: "checkbox",
|
|
label: "Analytics sichtbar",
|
|
defaultValue: true,
|
|
// Admins always have access regardless of this flag (see
|
|
// access/index.ts's canViewAnalytics) — this only matters once a
|
|
// non-admin role exists, letting an admin grant/revoke Analytics
|
|
// visibility per account without changing anyone's role.
|
|
access: {
|
|
update: isAdminFieldLevel,
|
|
},
|
|
admin: {
|
|
description: "Steuert, ob dieser Zugang das Analytics-Dashboard im Admin-Bereich sehen kann.",
|
|
},
|
|
},
|
|
{
|
|
name: "calendarFeedTokenHash",
|
|
type: "text",
|
|
// Only ever set by /api/admin/calendar-feed/regenerate (see
|
|
// lib/calendar/feedToken.ts) — never exposed or directly settable via
|
|
// any API, so the plaintext token is never retrievable again after
|
|
// it's shown once at generation time.
|
|
access: { create: () => false, read: () => false, update: () => false },
|
|
admin: { hidden: true },
|
|
index: true,
|
|
},
|
|
// "email" and "password" are added automatically by `auth: true`-style config.
|
|
],
|
|
};
|