From 6f04e39bf33829f02a08c3973ed085db977029cd Mon Sep 17 00:00:00 2001
From: AyrisAI <ayris@ayris.tech>
Date: Fri, 15 May 2026 19:12:42 +0300
Subject: [PATCH] feat: add admin user management (create, password change)

---
 app/admin/actions.ts              | 41 ++++++++++++++++
 app/admin/components/UserForm.tsx | 78 +++++++++++++++++++++++++++++++
 app/admin/layout.tsx              |  4 ++
 app/admin/users/UserManager.tsx   | 75 +++++++++++++++++++++++++++++
 app/admin/users/page.tsx          | 13 ++++++
 5 files changed, 211 insertions(+)
 create mode 100644 app/admin/components/UserForm.tsx
 create mode 100644 app/admin/users/UserManager.tsx
 create mode 100644 app/admin/users/page.tsx

diff --git a/app/admin/actions.ts b/app/admin/actions.ts
index 72688a8..812c77b 100644
--- a/app/admin/actions.ts
+++ b/app/admin/actions.ts
@@ -33,6 +33,47 @@ export async function signout() {
   redirect('/login');
 }
 
+/* ────── User Actions ────── */
+
+export async function createAdmin(formData: FormData) {
+  const username = formData.get('username') as string;
+  const password = formData.get('password') as string;
+
+  const hashedPassword = await bcrypt.hash(password, 10);
+
+  await prisma.user.create({
+    data: {
+      username,
+      password: hashedPassword,
+    },
+  });
+
+  revalidatePath('/admin/users');
+}
+
+export async function updateAdminPassword(id: string, formData: FormData) {
+  const password = formData.get('password') as string;
+  const hashedPassword = await bcrypt.hash(password, 10);
+
+  await prisma.user.update({
+    where: { id },
+    data: {
+      password: hashedPassword,
+    },
+  });
+
+  revalidatePath('/admin/users');
+}
+
+export async function deleteAdmin(id: string) {
+  const session = await encrypt({ expires: new Date(0) }); // placeholder check
+  // Don't allow deleting self if we had current user id here, 
+  // but for now simple delete
+  await prisma.user.delete({ where: { id } });
+
+  revalidatePath('/admin/users');
+}
+
 export async function createCategory(formData: FormData) {
   const title = formData.get('title') as string;
   const externalId = formData.get('externalId') as string;
diff --git a/app/admin/components/UserForm.tsx b/app/admin/components/UserForm.tsx
new file mode 100644
index 0000000..259ac25
--- /dev/null
+++ b/app/admin/components/UserForm.tsx
@@ -0,0 +1,78 @@
+'use client';
+
+import React, { useState } from 'react';
+import { createAdmin, updateAdminPassword } from '../actions';
+
+interface UserFormProps {
+  initialData?: any;
+  onClose: () => void;
+}
+
+export default function UserForm({ initialData, onClose }: UserFormProps) {
+  const [loading, setLoading] = useState(false);
+
+  async function handleSubmit(formData: FormData) {
+    setLoading(true);
+    if (initialData) {
+      await updateAdminPassword(initialData.id, formData);
+    } else {
+      await createAdmin(formData);
+    }
+    setLoading(false);
+    onClose();
+  }
+
+  return (
+    <div className="modal-overlay">
+      <div className="modal-content">
+        <div className="card-header">
+          <h2 className="card-title">{initialData ? 'Şifre Değiştir' : 'Yeni Admin Ekle'}</h2>
+          <button onClick={onClose} className="action-btn">✕</button>
+        </div>
+        <form action={handleSubmit} className="admin-form">
+          {!initialData && (
+            <div className="form-group">
+              <label htmlFor="username">Kullanıcı Adı</label>
+              <input
+                id="username"
+                name="username"
+                className="admin-input"
+                placeholder="Örn: ayrisdev"
+                required
+              />
+            </div>
+          )}
+          {initialData && (
+            <div className="form-group">
+              <label>Kullanıcı Adı</label>
+              <input
+                className="admin-input"
+                value={initialData.username}
+                disabled
+                style={{ opacity: 0.6 }}
+              />
+            </div>
+          )}
+          <div className="form-group">
+            <label htmlFor="password">{initialData ? 'Yeni Şifre' : 'Şifre'}</label>
+            <input
+              id="password"
+              name="password"
+              type="password"
+              className="admin-input"
+              required
+            />
+          </div>
+          <div style={{ display: 'flex', gap: '1rem', marginTop: '1rem' }}>
+            <button type="submit" className="admin-btn" disabled={loading}>
+              {loading ? 'Kaydediliyor...' : 'Kaydet'}
+            </button>
+            <button type="button" onClick={onClose} className="admin-btn" style={{ background: 'rgba(255,255,255,0.05)', color: '#fff' }}>
+              İptal
+            </button>
+          </div>
+        </form>
+      </div>
+    </div>
+  );
+}
diff --git a/app/admin/layout.tsx b/app/admin/layout.tsx
index d6b47b2..5974086 100644
--- a/app/admin/layout.tsx
+++ b/app/admin/layout.tsx
@@ -33,6 +33,10 @@ export default async function AdminLayout({
             <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2"><path d="M12 2l3.09 6.26L22 9.27l-5 4.87 1.18 6.88L12 17.77l-6.18 3.25L7 14.14 2 9.27l6.91-1.01L12 2z" /></svg>
             Ürünler
           </AdminNavItem>
+          <AdminNavItem href="/admin/users">
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2"><path d="M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2" /><circle cx="9" cy="7" r="4" /><path d="M23 21v-2a4 4 0 0 0-3-3.87" /><path d="M16 3.13a4 4 0 0 1 0 7.75" /></svg>
+            Kullanıcılar
+          </AdminNavItem>
         </nav>
         <div className="admin-sidebar-footer">
           <Link href="/" target="_blank" className="admin-view-site">
diff --git a/app/admin/users/UserManager.tsx b/app/admin/users/UserManager.tsx
new file mode 100644
index 0000000..5f9dab6
--- /dev/null
+++ b/app/admin/users/UserManager.tsx
@@ -0,0 +1,75 @@
+'use client';
+
+import React, { useState } from 'react';
+import UserForm from '../components/UserForm';
+import DeleteButton from '../components/DeleteButton';
+import { deleteAdmin } from '../actions';
+
+interface UserManagerProps {
+  users: any[];
+}
+
+export default function UserManager({ users }: UserManagerProps) {
+  const [showForm, setShowForm] = useState(false);
+  const [editingUser, setEditingUser] = useState<any>(null);
+
+  const handleEdit = (user: any) => {
+    setEditingUser(user);
+    setShowForm(true);
+  };
+
+  const handleClose = () => {
+    setShowForm(false);
+    setEditingUser(null);
+  };
+
+  return (
+    <div className="admin-users">
+      <div className="admin-page-header" style={{ display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: '2rem' }}>
+        <div>
+          <h1>Kullanıcılar</h1>
+          <p>Yönetici hesaplarını yönetin</p>
+        </div>
+        <button className="admin-btn" onClick={() => setShowForm(true)}>
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" style={{width: '16px'}}><line x1="12" y1="5" x2="12" y2="19" /><line x1="5" y1="12" x2="19" y2="12" /></svg>
+          Yeni Admin Ekle
+        </button>
+      </div>
+
+      <div className="admin-card">
+        <table className="admin-table">
+          <thead>
+            <tr>
+              <th>Kullanıcı Adı</th>
+              <th>Oluşturulma</th>
+              <th>İşlemler</th>
+            </tr>
+          </thead>
+          <tbody>
+            {users.map((user) => (
+              <tr key={user.id}>
+                <td style={{ fontWeight: 500, color: '#fff' }}>{user.username}</td>
+                <td style={{ color: 'var(--text-muted)', fontSize: '0.85rem' }}>
+                  {new Date(user.createdAt).toLocaleDateString('tr-TR')}
+                </td>
+                <td className="actions-cell">
+                  <button className="action-btn" onClick={() => handleEdit(user)}>Şifre Değiştir</button>
+                  {users.length > 1 && (
+                    <DeleteButton onDelete={async () => { await deleteAdmin(user.id); }} />
+                  )}
+                </td>
+              </tr>
+            ))}
+          </tbody>
+        </table>
+      </div>
+
+      {showForm && (
+        <UserForm 
+          initialData={editingUser} 
+          onClose={handleClose} 
+        />
+      )}
+    </div>
+  );
+}
diff --git a/app/admin/users/page.tsx b/app/admin/users/page.tsx
new file mode 100644
index 0000000..5f41e77
--- /dev/null
+++ b/app/admin/users/page.tsx
@@ -0,0 +1,13 @@
+import React from 'react';
+import { prisma } from '@/app/lib/prisma';
+import UserManager from './UserManager';
+
+export const dynamic = 'force-dynamic';
+
+export default async function AdminUsersPage() {
+  const users = await prisma.user.findMany({
+    orderBy: { createdAt: 'desc' }
+  });
+
+  return <UserManager users={users} />;
+}