feat: v2 managed organizations (#19341)

* refactor: allow non unique PlatformBilling customerId

* feat: add PlatformBilling managed organizations fields

* feat: ManagedOrganization table

* refactor: bill overdue based on teamId

* refactor: restructure organizations module

* wip: organizations endpoints

* Revert "wip: organizations endpoints"

This reverts commit 0e9e66fc74f31da436f12930c1b6597c650ed621.

* refactor: unique index for managed organizations

* wip: organizations endpoints

* wip: create managed organization

* remove unecessary membership check because we have guard

* feat: create managed org

* feat: get managed org and orgs

* feat: update and delete managed orgs

* wip: api key logic

* feat: allow variable api key length

* feat: refresh managed org api key

* feat: create managed org OAuth clients using api key

* finish merge main

* chore: bump platform libraries

* tests: fix and add more tests to api-auth.strategy.e2e

* refactor: dont request managed org slug and handle metadata as object

* revert: billing service and repository update overdue based on sub and customer ids

* refactor: v2 OAuth client permissions (#19501)

* refactor: v2 permissions as string array

* refactor: frontend work with permissions as string

* tests: test '*' permissions

* fix:managed org creator have profile & test can fetch oauth client

* fix: tests

* fix: OAuthClientCard on frontend

* fix: tests

apps/web/modules/settings/platform/oauth-clients/[clientId]/edit/edit-view.tsx

@@ -17,19 +17,6 @@ import { useGetUserAttributes } from "@components/settings/platform/hooks/useGet
 import type { FormValues } from "@components/settings/platform/oauth-clients/oauth-client-form";
 import { OAuthClientForm as EditOAuthClientForm } from "@components/settings/platform/oauth-clients/oauth-client-form";
 
-import {
-  hasAppsReadPermission,
-  hasAppsWritePermission,
-  hasBookingReadPermission,
-  hasBookingWritePermission,
-  hasEventTypeReadPermission,
-  hasEventTypeWritePermission,
-  hasProfileReadPermission,
-  hasProfileWritePermission,
-  hasScheduleReadPermission,
-  hasScheduleWritePermission,
-} from "../../../../../../../../packages/platform/utils/permissions";
-
 export default function EditOAuthClient() {
   const { t } = useLocale();
   const router = useRouter();
@@ -102,16 +89,16 @@ export default function EditOAuthClient() {
                   bookingRedirectUri: data?.bookingRedirectUri ?? "",
                   bookingCancelRedirectUri: data?.bookingCancelRedirectUri ?? "",
                   bookingRescheduleRedirectUri: data?.bookingRescheduleRedirectUri ?? "",
-                  appsRead: hasAppsReadPermission(data?.permissions),
-                  appsWrite: hasAppsWritePermission(data?.permissions),
-                  bookingRead: hasBookingReadPermission(data?.permissions),
-                  bookingWrite: hasBookingWritePermission(data?.permissions),
-                  eventTypeRead: hasEventTypeReadPermission(data?.permissions),
-                  eventTypeWrite: hasEventTypeWritePermission(data?.permissions),
-                  profileRead: hasProfileReadPermission(data?.permissions),
-                  profileWrite: hasProfileWritePermission(data?.permissions),
-                  scheduleRead: hasScheduleReadPermission(data?.permissions),
-                  scheduleWrite: hasScheduleWritePermission(data?.permissions),
+                  appsRead: data?.permissions.includes("APPS_READ"),
+                  appsWrite: data?.permissions.includes("APPS_WRITE"),
+                  bookingRead: data?.permissions.includes("BOOKING_READ"),
+                  bookingWrite: data?.permissions.includes("BOOKING_WRITE"),
+                  eventTypeRead: data?.permissions.includes("EVENT_TYPE_READ"),
+                  eventTypeWrite: data?.permissions.includes("EVENT_TYPE_WRITE"),
+                  profileRead: data?.permissions.includes("PROFILE_READ"),
+                  profileWrite: data?.permissions.includes("PROFILE_WRITE"),
+                  scheduleRead: data?.permissions.includes("SCHEDULE_READ"),
+                  scheduleWrite: data?.permissions.includes("SCHEDULE_WRITE"),
                 }}
                 onSubmit={onSubmit}
                 isPending={isUpdating}

apps/web/modules/settings/platform/oauth-clients/create-new-view.tsx

@@ -6,6 +6,7 @@ import Shell from "@calcom/features/shell/Shell";
 import { ErrorCode } from "@calcom/lib/errorCodes";
 import { useCompatSearchParams } from "@calcom/lib/hooks/useCompatSearchParams";
 import { useLocale } from "@calcom/lib/hooks/useLocale";
+import type { PERMISSION_MAP } from "@calcom/platform-constants";
 import { PERMISSIONS_GROUPED_MAP } from "@calcom/platform-constants/permissions";
 import { showToast } from "@calcom/ui";
 
@@ -35,22 +36,20 @@ export default function CreateOAuthClient() {
   });
 
   const onSubmit = (data: FormValues) => {
-    let userPermissions = 0;
+    const userPermissions: Array<keyof typeof PERMISSION_MAP> = [];
     const userRedirectUris = data.redirectUris.map((uri) => uri.uri).filter((uri) => !!uri);
 
     Object.keys(PERMISSIONS_GROUPED_MAP).forEach((key) => {
       const entity = key as keyof typeof PERMISSIONS_GROUPED_MAP;
       const entityKey = PERMISSIONS_GROUPED_MAP[entity].key;
-      const read = PERMISSIONS_GROUPED_MAP[entity].read;
-      const write = PERMISSIONS_GROUPED_MAP[entity].write;
-      if (data[`${entityKey}Read`]) userPermissions |= read;
-      if (data[`${entityKey}Write`]) userPermissions |= write;
+
+      if (data[`${entityKey}Read`]) userPermissions.push(`${entity}_READ`);
+      if (data[`${entityKey}Write`]) userPermissions.push(`${entity}_WRITE`);
     });
 
     save({
       name: data.name,
       permissions: userPermissions,
-      // logo: data.logo,
       redirectUris: userRedirectUris,
       bookingRedirectUri: data.bookingRedirectUri,
       bookingCancelRedirectUri: data.bookingCancelRedirectUri,