build: Release

CHANGELOG.md

@@ -15,19 +15,6 @@ Details:
 - Purpose: official release
 - Suitable environment: production
 
-## ⚠️ [Beta Releases][log_beta]
-
-These are releases that are pretty stable, but may have still some bugs to be fixed before official release.
-
-> ### “Please try out, we’d love your feedback!”
-
-Details:
-- Stability: *pretty stable*
-- NPM channel: `@beta`
-- Branch: [beta][branch_beta]
-- Purpose: feature maturation
-- Suitable environment: development
-
 ## 🔥 [Alpha Releases][log_alpha]
 
 > ### “If you are curious to see what's next!”
@@ -43,8 +30,6 @@ Details:
 
 
 [log_release]: https://github.com/parse-community/parse-dashboard/blob/release/changelogs/CHANGELOG_release.md
-[log_beta]: https://github.com/parse-community/parse-dashboard/blob/beta/changelogs/CHANGELOG_beta.md
 [log_alpha]: https://github.com/parse-community/parse-dashboard/blob/alpha/changelogs/CHANGELOG_alpha.md
 [branch_release]: https://github.com/parse-community/parse-dashboard/tree/release
-[branch_beta]: https://github.com/parse-community/parse-dashboard/tree/beta
 [branch_alpha]: https://github.com/parse-community/parse-dashboard/tree/alpha

Dockerfile

@@ -1,7 +1,7 @@
 ############################################################
 # Build stage
 ############################################################
-FROM node:20.17.0-alpine3.20 AS build
+FROM node:20.18.2-alpine3.20 AS build
 
 RUN apk --no-cache add git
 WORKDIR /src
@@ -27,7 +27,7 @@ RUN npm run prepare && npm run build
 ############################################################
 # Release stage
 ############################################################
-FROM node:20.17.0-alpine3.20 AS release
+FROM node:20.18.2-alpine3.20 AS release
 WORKDIR /src
 
 # Copy production node_modules

Parse-Dashboard/app.js

@@ -5,6 +5,7 @@ const packageJson = require('package-json');
 const csrf = require('csurf');
 const Authentication = require('./Authentication.js');
 const fs = require('fs');
+const ConfigKeyCache = require('./configKeyCache.js');
 
 const currentVersionFeatures = require('../package.json').parseDashboardFeatures;
 
@@ -80,11 +81,11 @@ module.exports = function(config, options) {
     });
 
     // Serve the configuration.
-    app.get('/parse-dashboard-config.json', function(req, res) {
+    app.get('/parse-dashboard-config.json', async (req, res) => {
       const apps = config.apps.map((app) => Object.assign({}, app)); // make a copy
       const response = {
-        apps: apps,
-        newFeaturesInLatestVersion: newFeaturesInLatestVersion,
+        apps,
+        newFeaturesInLatestVersion,
       };
 
       //Based on advice from Doug Wilson here:
@@ -119,20 +120,31 @@ module.exports = function(config, options) {
           return app;
         });
       }
-
       if (successfulAuth) {
         if (appsUserHasAccess) {
-          // Restric access to apps defined in user dictionary
-          // If they didn't supply any app id, user will access all apps
-          response.apps = response.apps.filter(function (app) {
-            return appsUserHasAccess.find(appUserHasAccess => {
-              const isSame = app.appId === appUserHasAccess.appId;
-              if (isSame && appUserHasAccess.readOnly) {
+          const processedApps = await Promise.all(
+            response.apps.map(async (app) => {
+              const matchingAccess = appsUserHasAccess.find(
+                (access) => access.appId === app.appId
+              );
+
+              if (!matchingAccess) {
+                return null;
+              }
+
+              if (matchingAccess.readOnly) {
                 app.masterKey = app.readOnlyMasterKey;
               }
-              return isSame;
+
+              if (typeof app.masterKey === 'function') {
+                app.masterKey = await ConfigKeyCache.get(app.appId, 'masterKey', app.masterKeyTtl, app.masterKey);
+              }
+
+              return app;
             })
-          });
+          );
+
+          response.apps = processedApps.filter((app) => app !== null);
         }
         // They provided correct auth
         return res.json(response);
@@ -147,6 +159,14 @@ module.exports = function(config, options) {
       //(ie. didn't supply usernames and passwords)
       if (requestIsLocal || options.dev) {
         //Allow no-auth access on localhost only, if they have configured the dashboard to not need auth
+        await Promise.all(
+          response.apps.map(async (app) => {
+            if (typeof app.masterKey === 'function') {
+              app.masterKey = await ConfigKeyCache.get(app.appId, 'masterKey', app.masterKeyTtl, app.masterKey);
+            }
+          })
+        );
+
         return res.json(response);
       }
       //We shouldn't get here. Fail closed.

Parse-Dashboard/configKeyCache.js

@@ -0,0 +1,22 @@
+class KeyCache {
+  constructor() {
+    this.cache = {};
+  }
+
+  async get(appId, key, ttl, callback) {
+    key = `${appId}:${key}`;
+    const cached = this.cache[key];
+    if (cached && cached.expiry > Date.now()) {
+      return cached.value;
+    }
+
+    const value = await Promise.resolve(callback());
+    this.cache[key] = {
+      value,
+      expiry: Date.now() + ttl,
+    };
+    return value;
+  }
+}
+
+module.exports = new KeyCache();

Parse-Dashboard/index.js

@@ -13,6 +13,7 @@ const startServer = require('./server');
 const program = require('commander');
 program.option('--appId [appId]', 'the app Id of the app you would like to manage.');
 program.option('--masterKey [masterKey]', 'the master key of the app you would like to manage.');
+program.option('--masterKeyTtl [masterKeyTtl]', 'the master key ttl of the app you would like to manage.');
 program.option('--serverURL [serverURL]', 'the server url of the app you would like to manage.');
 program.option('--graphQLServerURL [graphQLServerURL]', 'the GraphQL server url of the app you would like to manage.');
 program.option('--dev', 'Enable development mode. This will disable authentication and allow non HTTPS connections. DO NOT ENABLE IN PRODUCTION SERVERS');

README.md

@@ -3,15 +3,13 @@
 ---
 
 [![Build Status](https://github.com/parse-community/parse-dashboard/workflows/ci/badge.svg?branch=alpha)](https://github.com/parse-community/parse-dashboard/actions?query=workflow%3Aci+branch%3Aalpha)
-[![Build Status](https://github.com/parse-community/parse-dashboard/workflows/ci/badge.svg?branch=beta)](https://github.com/parse-community/parse-dashboard/actions?query=workflow%3Aci+branch%3Abeta)
 [![Build Status](https://github.com/parse-community/parse-dashboard/workflows/ci/badge.svg?branch=release)](https://github.com/parse-community/parse-dashboard/actions?query=workflow%3Aci+branch%3Arelease)
 [![Snyk Badge](https://snyk.io/test/github/parse-community/parse-dashboard/badge.svg)](https://snyk.io/test/github/parse-community/parse-dashboard)
 
 [![Node Version](https://img.shields.io/badge/nodejs-18,_20-green.svg?logo=node.js&style=flat)](https://nodejs.org/)
 [![auto-release](https://img.shields.io/badge/%F0%9F%9A%80-auto--release-9e34eb.svg)](https://github.com/parse-community/parse-dashboard/releases)
 
 [![npm latest version](https://img.shields.io/npm/v/parse-dashboard/latest.svg)](https://www.npmjs.com/package/parse-dashboard)
-[![npm beta version](https://img.shields.io/npm/v/parse-dashboard/beta.svg)](https://www.npmjs.com/package/parse-dashboard)
 [![npm alpha version](https://img.shields.io/npm/v/parse-dashboard/alpha.svg)](https://www.npmjs.com/package/parse-dashboard)
 
 [![Backers on Open Collective](https://opencollective.com/parse-server/backers/badge.svg)][open-collective-link]
@@ -71,6 +69,7 @@ Parse Dashboard is a standalone dashboard for managing your [Parse Server](https
       - [Video Item](#video-item)
       - [Audio Item](#audio-item)
       - [Button Item](#button-item)
+      - [Panel Item](#panel-item)
   - [Browse as User](#browse-as-user)
   - [Change Pointer Key](#change-pointer-key)
     - [Limitations](#limitations)
@@ -130,6 +129,11 @@ Parse Dashboard is continuously tested with the most recent releases of Node.js
 | Parameter                              | Type                | Optional | Default | Example              | Description                                                                                                                                 |
 |----------------------------------------|---------------------|----------|---------|----------------------|---------------------------------------------------------------------------------------------------------------------------------------------|
 | `apps`                                 | Array<Object> | no       | -       | `[{ ... }, { ... }]` | The apps that are configured for the dashboard.                                                                                             |
+| `apps.appId`                           | String                        | yes          | -           | `"myAppId"`            | The Application ID for your Parse Server instance.                                                                                          |
+| `apps.masterKey`                       | String \| Function         | yes          | -           | `"exampleMasterKey"`, `() => "exampleMasterKey"` | The master key for full access to Parse Server. It can be provided directly as a String or as a Function returning a String.        |
+| `apps.masterKeyTtl`                    | Number                        | no           | -           | `3600`                  | Time-to-live (TTL) for the master key in seconds. This defines how long the master key is cached before the `masterKey` function is re-triggered.                |
+| `apps.serverURL`                       | String                        | yes          | -           | `"http://localhost:1337/parse"` | The URL where your Parse Server is running.                                                                                                 |
+| `apps.appName`                         | String                        | no           | -           | `"MyApp"`              | The display name of the app in the dashboard.                                                                                               |
 | `infoPanel`                            | Array<Object> | yes      | -       | `[{ ... }, { ... }]` | The [info panel](#info-panel) configuration.                                                                                                |
 | `infoPanel[*].title`                   | String              | no       | -       | `User Details`       | The panel title.                                                                                                                            |
 | `infoPanel[*].classes`                 | Array<String> | no       | -       | `["_User"]`          | The classes for which the info panel should be displayed.                                                                                   |
@@ -929,12 +933,13 @@ Example:
 
 A text item that consists of a key and a value. The value can optionally be linked to a URL.
 
-| Parameter | Value  | Optional | Description                                                                       |
-|-----------|--------|----------|-----------------------------------------------------------------------------------|
-| `type`    | String | No       | Must be `"keyValue"`.                                                             |
-| `key`     | String | No       | The key text to display.                                                          |
-| `value`   | String | No       | The value text to display.                                                        |
-| `url`     | String | Yes      | The URL that will be opened in a new browser tab when clicking on the value text. |
+| Parameter       | Value   | Default     | Optional | Description                                                                                                                                                                                             |
+|-----------------|---------|-------------|----------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| `type`          | String  | -           | No       | Must be `"keyValue"`.                                                                                                                                                                                   |
+| `key`           | String  | -           | No       | The key text to display.                                                                                                                                                                                |
+| `value`         | String  | -           | No       | The value text to display.                                                                                                                                                                              |
+| `url`           | String  | `undefined` | Yes      | The URL that will be opened in a new browser tab when clicking on the value text. It can be set to an absolute URL or a relative URL in which case the base URL is `<PROTOCOL>://<HOST>/<MOUNT_PATH>/`. |
+| `isRelativeUrl` | Boolean | `false`     | Yes      | Set this to `true` when linking to another dashboard page, in which case the base URL for the relative URL will be `<PROTOCOL>://<HOST>/<MOUNT_PATH>/apps/<APP_NAME>/`.                                 |
 
 Examples:
 
@@ -951,7 +956,33 @@ Examples:
   "type": "keyValue",
   "key": "Last purchase ID",
   "value": "123",
-  "url": "https://example.com/purchaseDetails?purchaseId=012345"
+  "url": "https://example.com/purchaseDetails?purchaseId=123"
+}
+```
+
+```json
+{
+  "type": "keyValue",
+  "key": "Purchase",
+  "value": "123",
+  "url": "browser/Purchase",
+  "isRelativeUrl": true
+}
+```
+
+To navigate to a specific object using a relative URL, the query parameters must be URL encoded:
+
+```js
+const objectId = 'abc123';
+const className = 'Purchase';
+const query = [{ field: 'objectId', constraint: 'eq', compareTo: objectId }];
+const url = `browser/Purchase?filters=${JSON.stringify(query)}`;
+const item = {
+  type: 'keyValue',
+  key: 'Purchase',
+  value: objectId,
+  url,
+  isRelativeUrl: true
 }
 ```
 
@@ -1082,6 +1113,26 @@ Example:
 }
 ```
 
+#### Panel Item
+
+A sub-panel whose data is loaded on-demand by expanding the item.
+
+| Parameter           | Value  | Optional | Description                                                                                                                                       |
+|---------------------|--------|----------|---------------------------------------------------------------------------------------------------------------------------------------------------|
+| `type`              | String | No       | Must be `"infoPanel"`.                                                                                                                            |
+| `title`             | String | No       | The title to display in the expandable headline.                                                                                                  |
+| `cloudCodeFunction` | String | No       | The Cloud Code Function to call which receives the selected object in the data browser and returns the response to be displayed in the sub-panel. |
+
+Example:
+
+```json
+{
+  "type": "panel",
+  "title": "Purchase History",
+  "cloudCodeFunction": "getUserPurchaseHistory"
+}
+```
+
 ## Browse as User
 
 ▶️ *Core > Browser > Browse*