supabase/apps/studio/components/interfaces/Settings/Database/BannedIPs.tsx

import { PermissionAction } from '@supabase/shared-types/out/constants'
import { useParams } from 'common'
import { Globe } from 'lucide-react'
import { useState } from 'react'
import { toast } from 'sonner'
import { Badge, Card, CardContent, Skeleton } from 'ui'
import ConfirmationModal from 'ui-patterns/Dialogs/ConfirmationModal'
import {
  PageSection,
  PageSectionContent,
  PageSectionDescription,
  PageSectionMeta,
  PageSectionSummary,
  PageSectionTitle,
} from 'ui-patterns/PageSection'

import { AlertError } from '@/components/ui/AlertError'
import { ButtonTooltip } from '@/components/ui/ButtonTooltip'
import { DocsButton } from '@/components/ui/DocsButton'
import { HighAvailabilityDisabledSectionNotice } from '@/components/ui/HighAvailability/HighAvailabilityDisabledSectionNotice'
import { useBannedIPsDeleteMutation } from '@/data/banned-ips/banned-ips-delete-mutations'
import { useBannedIPsQuery } from '@/data/banned-ips/banned-ips-query'
import { useUserIPAddressQuery } from '@/data/misc/user-ip-address-query'
import { useAsyncCheckPermissions } from '@/hooks/misc/useCheckPermissions'
import { useHighAvailability } from '@/hooks/misc/useHighAvailability'
import { useSelectedProjectQuery } from '@/hooks/misc/useSelectedProject'
import { DOCS_URL } from '@/lib/constants'

const HA_DISABLED_TITLE = 'Network bans unavailable on High Availability projects'
const HA_DISABLED_DESCRIPTION =
  "We're working to bring network bans to High Availability projects. Contact support if this is blocking your work."

export const BannedIPs = () => {
  const { ref } = useParams()
  const { data: project } = useSelectedProjectQuery()
  const { isHighAvailability } = useHighAvailability()

  const [selectedIPToUnban, setSelectedIPToUnban] = useState<string | null>(null) // Track the selected IP for unban

  const {
    isPending: isLoadingIPList,
    isFetching: isFetchingIPList,
    data: ipList,
    error: ipListError,
  } = useBannedIPsQuery({
    projectRef: ref,
  })

  const { data: userIPAddress } = useUserIPAddressQuery()

  const ipListLoading = isLoadingIPList || isFetchingIPList

  const [showUnban, setShowUnban] = useState(false)
  const [confirmingIP, setConfirmingIP] = useState<string | null>(null) // Track the IP being confirmed for unban

  const { can: canUnbanNetworks } = useAsyncCheckPermissions(PermissionAction.UPDATE, 'projects', {
    resource: {
      project_id: project?.id,
    },
  })

  const isSectionDisabled = isHighAvailability || !canUnbanNetworks
  const sectionDisabledReason = isHighAvailability
    ? HA_DISABLED_TITLE
    : 'You need additional permissions to unban networks'

  const { mutate: unbanIPs, isPending: isUnbanning } = useBannedIPsDeleteMutation({
    onSuccess: () => {
      toast.success('IP address successfully unbanned')
      setSelectedIPToUnban(null) // Reset the selected IP for unban
      setShowUnban(false)
    },
    onError: (error) => {
      toast.error(`Failed to unban IP: ${error?.message}`)
    },
  })

  const onConfirmUnbanIP = () => {
    if (confirmingIP == null || !ref) return
    unbanIPs({
      projectRef: ref,
      ips: [confirmingIP], // Pass the IP as an array
    })
  }

  const openConfirmationModal = (ip: string) => {
    setSelectedIPToUnban(ip) // Set the selected IP for unban
    setConfirmingIP(ip) // Set the IP being confirmed for unban
    setShowUnban(true)
  }

  return (
    <>
      <PageSection id="banned-ips">
        <PageSectionMeta>
          <PageSectionSummary>
            <PageSectionTitle>Network bans</PageSectionTitle>
            <PageSectionDescription>
              IP addresses temporarily blocked due to suspicious traffic
            </PageSectionDescription>
          </PageSectionSummary>
          <DocsButton href={`${DOCS_URL}/reference/cli/supabase-network-bans`} />
        </PageSectionMeta>
        <PageSectionContent>
          {isHighAvailability && (
            <div className="mb-4">
              <HighAvailabilityDisabledSectionNotice
                title={HA_DISABLED_TITLE}
                description={HA_DISABLED_DESCRIPTION}
              />
            </div>
          )}
          {!isHighAvailability &&
            (ipListLoading ? (
              <Card>
                <CardContent className="space-y-4">
                  <Skeleton className="h-4 w-full" />
                  <Skeleton className="h-4 w-full" />
                </CardContent>
              </Card>
            ) : ipListError ? (
              <AlertError error={ipListError} subject="Failed to retrieve banned IP addresses" />
            ) : ipList.banned_ipv4_addresses.length > 0 ? (
              <Card>
                {ipList.banned_ipv4_addresses.map((ip) => (
                  <CardContent key={ip} className="flex items-center justify-between">
                    <div className="flex items-center space-x-5">
                      <Globe size={16} className="text-foreground-lighter" />
                      <p className="text-sm font-mono">{ip}</p>
                      {ip === userIPAddress && <Badge>Your IP address</Badge>}
                    </div>
                    <ButtonTooltip
                      variant="default"
                      disabled={isSectionDisabled}
                      onClick={() => openConfirmationModal(ip)}
                      tooltip={{
                        content: {
                          side: 'bottom',
                          text: isSectionDisabled ? sectionDisabledReason : undefined,
                        },
                      }}
                    >
                      Unban IP
                    </ButtonTooltip>
                  </CardContent>
                ))}
              </Card>
            ) : (
              <Card>
                <CardContent className="text-foreground text-sm">
                  There are no banned IP addresses for your project
                </CardContent>
              </Card>
            ))}
        </PageSectionContent>
      </PageSection>

      <ConfirmationModal
        variant="destructive"
        size="medium"
        loading={isUnbanning}
        visible={showUnban}
        title="Confirm Unban IP"
        confirmLabel="Confirm Unban"
        confirmLabelLoading="Unbanning..."
        onCancel={() => setShowUnban(false)}
        onConfirm={onConfirmUnbanIP}
        alert={{
          title: 'This action cannot be undone',
          description: `Are you sure you want to unban this IP address ${selectedIPToUnban}?`,
        }}
      />
    </>
  )
}