Feat: Support team-level allow list groups for links and presets

app/api/views-dataroom/route.ts

@@ -27,6 +27,7 @@ import { generateOTP } from "@/lib/utils/generate-otp";
 import { LOCALHOST_IP } from "@/lib/utils/geo";
 import { checkGlobalBlockList } from "@/lib/utils/global-block-list";
 import { validateEmail } from "@/lib/utils/validate-email";
+import { isEmailAllowedByAllowList } from "@/lib/utils/allow-list-access";
 
 export async function POST(request: NextRequest) {
   try {
@@ -110,6 +111,12 @@ export async function POST(request: NextRequest) {
         domainId: true,
         allowList: true,
         denyList: true,
+        allowListGroupId: true,
+        allowListGroup: {
+          select: {
+            allowList: true,
+          },
+        },
         enableAgreement: true,
         agreementId: true,
         enableWatermark: true,
@@ -289,19 +296,24 @@ export async function POST(request: NextRequest) {
         return NextResponse.json({ message: "Access denied" }, { status: 403 });
       }
 
-      // Check if email is allowed to visit the link
-      if (link.allowList && link.allowList.length > 0) {
-        // Determine if the email or its domain is allowed
-        const isAllowed = link.allowList.some((allowed) =>
-          isEmailMatched(email, allowed),
-        );
+      // Check if email is allowed by either link allowList or AllowListGroup
+      if (email && typeof email === "string" && email.includes("@")) {
+        const hasAnyAllowList = (link.allowList && link.allowList.length > 0) ||
+          (link.allowListGroup?.allowList && link.allowListGroup.allowList.length > 0);
 
-        // Deny access if the email is not allowed
-        if (!isAllowed) {
-          return NextResponse.json(
-            { message: "Unauthorized access" },
-            { status: 403 },
+        if (hasAnyAllowList) {
+          const isAllowed = isEmailAllowedByAllowList(
+            email,
+            link.allowList,
+            link.allowListGroup
           );
+
+          if (!isAllowed) {
+            return NextResponse.json(
+              { message: "Unauthorized access" },
+              { status: 403 },
+            );
+          }
         }
       }
 

app/api/views/route.ts

@@ -19,11 +19,12 @@ import { parseSheet } from "@/lib/sheet";
 import { recordLinkView } from "@/lib/tracking/record-link-view";
 import { CustomUser, WatermarkConfigSchema } from "@/lib/types";
 import { checkPassword, decryptEncrpytedPassword, log } from "@/lib/utils";
-import { extractEmailDomain, isEmailMatched } from "@/lib/utils/email-domain";
 import { generateOTP } from "@/lib/utils/generate-otp";
 import { LOCALHOST_IP } from "@/lib/utils/geo";
 import { checkGlobalBlockList } from "@/lib/utils/global-block-list";
 import { validateEmail } from "@/lib/utils/validate-email";
+import { isEmailMatched } from "@/lib/utils/email-domain";
+import { isEmailAllowedByAllowList } from "@/lib/utils/allow-list-access";
 
 export async function POST(request: NextRequest) {
   try {
@@ -93,6 +94,12 @@ export async function POST(request: NextRequest) {
         slug: true,
         allowList: true,
         denyList: true,
+        allowListGroupId: true,
+        allowListGroup: {
+          select: {
+            allowList: true,
+          },
+        },
         enableAgreement: true,
         agreementId: true,
         enableWatermark: true,
@@ -224,19 +231,24 @@ export async function POST(request: NextRequest) {
         return NextResponse.json({ message: "Access denied" }, { status: 403 });
       }
 
-      // Check if email is allowed to visit the link
-      if (link.allowList && link.allowList.length > 0) {
-        // Determine if the email or its domain is allowed
-        const isAllowed = link.allowList.some((allowed) =>
-          isEmailMatched(email, allowed),
-        );
+      // Check if email is allowed by either link allowList or AllowListGroup
+      if (email && typeof email === "string" && email.includes("@")) {
+        const hasAnyAllowList = (link.allowList && link.allowList.length > 0) ||
+          (link.allowListGroup?.allowList && link.allowListGroup.allowList.length > 0);
 
-        // Deny access if the email is not allowed
-        if (!isAllowed) {
-          return NextResponse.json(
-            { message: "Unauthorized access" },
-            { status: 403 },
+        if (hasAnyAllowList) {
+          const isAllowed = isEmailAllowedByAllowList(
+            email,
+            link.allowList,
+            link.allowListGroup
           );
+
+          if (!isAllowed) {
+            return NextResponse.json(
+              { message: "Unauthorized access" },
+              { status: 403 },
+            );
+          }
         }
       }
 

components/layouts/breadcrumb.tsx

@@ -3,6 +3,7 @@ import { useRouter } from "next/router";
 
 import React, { useEffect, useMemo, useRef, useState } from "react";
 
+import { useAllowListGroup } from "@/lib/swr/use-allow-list-groups";
 import { useDataroom } from "@/lib/swr/use-dataroom";
 import { useDocument } from "@/lib/swr/use-document";
 import { useFolderWithParents } from "@/lib/swr/use-folders";
@@ -365,9 +366,7 @@ const VisitorsBreadcrumb = () => {
     <Breadcrumb>
       <BreadcrumbList>
         <BreadcrumbItem>
-          <BreadcrumbLink asChild>
-            <Link href="/visitors">Visitors</Link>
-          </BreadcrumbLink>
+          <BreadcrumbPage>Visitors</BreadcrumbPage>
         </BreadcrumbItem>
       </BreadcrumbList>
     </Breadcrumb>
@@ -396,6 +395,28 @@ const SingleVisitorBreadcrumb = () => {
   );
 };
 
+const SingleVisitorGroupBreadcrumb = ({ groupId }: { groupId: string }) => {
+  const { allowListGroup } = useAllowListGroup(groupId);
+
+  return (
+    <Breadcrumb>
+      <BreadcrumbList>
+        <BreadcrumbItem>
+          <BreadcrumbLink asChild>
+            <Link href="/visitors?tab=allow-lists">Visitors</Link>
+          </BreadcrumbLink>
+        </BreadcrumbItem>
+        <BreadcrumbSeparator />
+        <BreadcrumbItem>
+          <BreadcrumbPage>
+            {allowListGroup?.name || "Loading..."}
+          </BreadcrumbPage>
+        </BreadcrumbItem>
+      </BreadcrumbList>
+    </Breadcrumb>
+  );
+};
+
 const AnalyticsBreadcrumb = () => {
   const router = useRouter();
   const { type = "links" } = router.query;
@@ -435,8 +456,9 @@ const AnalyticsBreadcrumb = () => {
 export const AppBreadcrumb = () => {
   const router = useRouter();
   const path = router.pathname;
-  const { id } = router.query as {
+  const { id, groupId } = router.query as {
     id?: string;
+    groupId?: string;
   };
 
   const breadcrumb = useMemo(() => {
@@ -516,8 +538,13 @@ export const AppBreadcrumb = () => {
       return <SingleVisitorBreadcrumb />;
     }
 
+    // Visitor group route
+    if (path === "/visitors/groups/[groupId]" && groupId) {
+      return <SingleVisitorGroupBreadcrumb groupId={groupId} />;
+    }
+
     return null;
-  }, [path, id]);
+  }, [path, id, groupId]);
 
   return breadcrumb;
 };