AyrisAIandClaude Sonnet 5
1b8cfeda95
Security: - requireAdmin() session check added to every admin-only server action (previously relied only on middleware path matching, which Next.js Server Actions don't reliably respect) - Real Prisma + bcrypt admin auth, replacing hardcoded credentials; split into an Edge-safe auth.config.ts (used by proxy.ts) and the full Prisma-backed auth.ts (route handler, server actions, server components) - Removed hardcoded fallback secret on the Instagram sync cron endpoint - Honeypot field + per-IP rate limiting on contact/business-submission forms and the analytics events endpoint Features: - AI trip planner (/plan-olustur, /plan/[id]) backed by DeepSeek, grounded to only recommend isLocalApproved listings, with a deterministic link-injection fallback for anything the model doesn't format as markdown - Interactive Leaflet/OpenStreetMap view on category listing pages - Telegram notifications for new contact messages and business submissions SEO: - Brand-consistent favicon/apple-icon/PWA icons and default Open Graph/ Twitter share images, generated via next/og (replacing default Next.js placeholders) - BreadcrumbList structured data on category and listing detail pages - Fixed two remaining raw <img> tags to use next/image Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
34 lines
883 B
TypeScript
34 lines
883 B
TypeScript
import { PrismaClient } from '@prisma/client'
|
||
import bcrypt from 'bcryptjs'
|
||
|
||
const prisma = new PrismaClient()
|
||
|
||
async function main() {
|
||
const email = process.env.ADMIN_EMAIL || process.argv[2]
|
||
const password = process.env.ADMIN_PASSWORD || process.argv[3]
|
||
|
||
if (!email || !password) {
|
||
console.error('Kullanım: npx tsx create-admin.ts <email> <şifre> (ya da ADMIN_EMAIL / ADMIN_PASSWORD env değişkenleriyle)')
|
||
process.exit(1)
|
||
}
|
||
|
||
const hashed = await bcrypt.hash(password, 12)
|
||
|
||
const user = await prisma.user.upsert({
|
||
where: { email },
|
||
update: { password: hashed, role: 'ADMIN' },
|
||
create: { email, password: hashed, role: 'ADMIN', name: 'Admin' }
|
||
})
|
||
|
||
console.log(`✅ Admin kullanıcı hazır: ${user.email}`)
|
||
}
|
||
|
||
main()
|
||
.catch((e) => {
|
||
console.error(e)
|
||
process.exit(1)
|
||
})
|
||
.finally(async () => {
|
||
await prisma.$disconnect()
|
||
})
|