@arch-cadre/auth 1.0.6 → 1.0.8

package/src/ui/reset-password/components.tsx

@@ -0,0 +1,128 @@
+/** biome-ignore-all lint/correctness/noUnusedImports: <all> */
+"use client";
+
+import { useTranslation } from "@arch-cadre/intl";
+import { Button } from "@arch-cadre/ui/components/button";
+import {
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@arch-cadre/ui/components/card";
+import { Checkbox } from "@arch-cadre/ui/components/checkbox";
+import {
+  Field,
+  FieldError,
+  FieldGroup,
+  FieldLabel,
+} from "@arch-cadre/ui/components/field";
+import { Input } from "@arch-cadre/ui/components/input";
+import { Label } from "@arch-cadre/ui/components/label";
+import { Separator } from "@arch-cadre/ui/components/separator";
+import { cn } from "@arch-cadre/ui/lib/utils";
+import { Loader } from "@arch-cadre/ui/shared/loader";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { AlertCircle } from "lucide-react";
+import * as React from "react";
+import { useState } from "react";
+import { Controller, useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { resetPasswordAction } from "../../actions/index.js";
+import { type ResetPasswordInput, resetPasswordSchema } from "../../validation.js";
+
+export function ResetPasswordForm() {
+  const [generalError, setGeneralError] = useState("");
+  const { t } = useTranslation();
+
+  const form = useForm<ResetPasswordInput>({
+    resolver: zodResolver(resetPasswordSchema),
+  });
+
+  async function onSubmit(data: ResetPasswordInput) {
+    setGeneralError("");
+
+    try {
+      const response = await resetPasswordAction(data);
+
+      if (response.error) {
+        setGeneralError(response.message || t("error_occurred"));
+        return;
+      }
+
+      toast(response.message);
+    } catch (_error) {
+      // setGeneralError(t("error_occurred"));
+    }
+  }
+
+  return (
+    <div className={cn("flex flex-col space-y-3")}>
+      <CardHeader className="text-center">
+        <CardTitle className="text-xl">{t("Reset password")}</CardTitle>
+        <CardDescription>{t("Enter your new password below.")}</CardDescription>
+      </CardHeader>
+
+      <div className="flex flex-col gap-6">
+        {generalError && (
+          <div className="flex gap-2 p-3 bg-red-50 border border-red-200 rounded-lg">
+            <AlertCircle className="w-4 h-4 text-red-600 flex-shrink-0 mt-0.5" />
+            <p className="text-sm text-red-600">{generalError}</p>
+          </div>
+        )}
+
+        <form
+          onSubmit={form.handleSubmit(onSubmit)}
+          className="flex flex-col gap-4"
+        >
+          <FieldGroup className="w-full mx-auto">
+            <Controller
+              name="password"
+              control={form.control}
+              render={({ field, fieldState }) => (
+                <Field className="w-full" data-invalid={fieldState.invalid}>
+                  <Label htmlFor="password">{t("New Password")}</Label>
+                  <Input
+                    {...field}
+                    id="password"
+                    type="password"
+                    placeholder="********"
+                    autoFocus={true}
+                  />
+
+                  {fieldState.invalid && (
+                    <FieldError errors={[fieldState.error]} />
+                  )}
+                </Field>
+              )}
+            />
+            <Controller
+              name="confirm"
+              control={form.control}
+              render={({ field, fieldState }) => (
+                <Field className="w-full" data-invalid={fieldState.invalid}>
+                  <Label htmlFor="confirm">{t("Confirm Password")}</Label>
+                  <Input
+                    {...field}
+                    id="confirm"
+                    type="password"
+                    placeholder="********"
+                  />
+
+                  {fieldState.invalid && (
+                    <FieldError errors={[fieldState.error]} />
+                  )}
+                </Field>
+              )}
+            />
+          </FieldGroup>
+
+          <Button disabled={form.formState.isSubmitting} className="w-full">
+            {form.formState.isSubmitting
+              ? t("Please wait...")
+              : t("Reset password")}
+            {form.formState.isSubmitting && <Loader variant="dark" />}{" "}
+          </Button>
+        </form>
+      </div>
+    </div>
+  );
+}

package/src/ui/reset-password/page.tsx

@@ -0,0 +1,25 @@
+import {
+  checkSecurity,
+  getCurrentPasswordResetSession,
+} from "@arch-cadre/core/server";
+import { redirect } from "next/navigation";
+import * as React from "react";
+import { ResetPasswordForm } from "./components.js";
+
+export default async function Page() {
+  const { session, user } = await getCurrentPasswordResetSession();
+  if (session === null || user === null) {
+    return redirect("/forgot-password");
+  }
+  if (!session.emailVerified) {
+    return redirect("/reset-password/verify-email");
+  }
+
+  // Security requirements check (for 2FA during reset)
+  const security = await checkSecurity(session as any, user);
+  if (!security.satisfied && security.redirect) {
+    return redirect(security.redirect);
+  }
+
+  return <ResetPasswordForm />;
+}

package/src/ui/reset-password/verify-email/components.tsx

@@ -0,0 +1,110 @@
+"use client";
+import { useTranslation } from "@arch-cadre/intl";
+import { Button } from "@arch-cadre/ui/components/button";
+import {
+  Field,
+  FieldError,
+  FieldGroup,
+  FieldLabel,
+} from "@arch-cadre/ui/components/field";
+import {
+  InputOTP,
+  InputOTPGroup,
+  InputOTPSlot,
+} from "@arch-cadre/ui/components/input-otp";
+import { cn } from "@arch-cadre/ui/lib/utils";
+import { Loader } from "@arch-cadre/ui/shared/loader";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { AlertCircle } from "lucide-react";
+import * as React from "react";
+import { useState } from "react";
+import { Controller, useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { verifyPasswordResetEmailAction } from "../../../actions/index.js";
+import { type VerifyEmailInput, verifyEmailSchema } from "../../../validation.js";
+
+export function PasswordResetEmailVerificationForm({ email = "" }) {
+  const [generalError, setGeneralError] = useState("");
+  const { t } = useTranslation();
+  const form = useForm<VerifyEmailInput>({
+    resolver: zodResolver(verifyEmailSchema),
+  });
+
+  async function onSubmit(data: VerifyEmailInput) {
+    setGeneralError("");
+
+    try {
+      const response = await verifyPasswordResetEmailAction(data);
+
+      if (response.error) {
+        setGeneralError(
+          response.message || t("Verification failed. Please try again."),
+        );
+        return;
+      }
+
+      toast(response.message);
+    } catch (_error) {
+      // setGeneralError(t("error_occurred"));
+    }
+  }
+
+  return (
+    <div className={cn("flex flex-col space-y-3")}>
+      <div className="space-y-2 text-center">
+        <h1 className="text-3xl font-semibold">
+          {t("Verify your email address")}
+        </h1>
+        <p className="text-muted-foreground">
+          {t("We sent an 6-digit code to {email}.", { email })}
+        </p>
+      </div>
+
+      <div className="grid gap-5">
+        {generalError && (
+          <div className="flex gap-2 p-3 bg-red-50 border border-red-200 rounded-lg">
+            <AlertCircle className="w-4 h-4 text-red-600 flex-shrink-0 mt-0.5" />
+            <p className="text-sm text-red-600">{generalError}</p>
+          </div>
+        )}
+
+        <form onSubmit={form.handleSubmit(onSubmit)} className="grid gap-6">
+          <FieldGroup className="w-full mx-auto">
+            <Controller
+              name="code"
+              control={form.control}
+              render={({ field, fieldState }) => (
+                <Field className="w-full" data-invalid={fieldState.invalid}>
+                  <InputOTP
+                    {...field}
+                    className="mx-auto w-full"
+                    maxLength={6}
+                    autoFocus={true}
+                    inputMode="text"
+                  >
+                    <InputOTPGroup className="mx-auto">
+                      <InputOTPSlot index={0} />
+                      <InputOTPSlot index={1} />
+                      <InputOTPSlot index={2} />
+                      <InputOTPSlot index={3} />
+                      <InputOTPSlot index={4} />
+                      <InputOTPSlot index={5} />
+                    </InputOTPGroup>
+                  </InputOTP>
+                  {fieldState.invalid && (
+                    <FieldError errors={[fieldState.error]} />
+                  )}
+                </Field>
+              )}
+            />
+          </FieldGroup>
+
+          <Button disabled={form.formState.isSubmitting} className="w-full">
+            {form.formState.isSubmitting ? t("Please wait...") : t("Verify")}
+            {form.formState.isSubmitting && <Loader variant="dark" />}
+          </Button>
+        </form>
+      </div>
+    </div>
+  );
+}

package/src/ui/reset-password/verify-email/page.tsx

@@ -0,0 +1,25 @@
+import {
+  checkSecurity,
+  getCurrentPasswordResetSession,
+} from "@arch-cadre/core/server";
+import { redirect } from "next/navigation";
+import * as React from "react";
+import { PasswordResetEmailVerificationForm } from "./components.js";
+
+export default async function Page() {
+  const { session, user } = await getCurrentPasswordResetSession();
+
+  if (session === null || user === null) {
+    return redirect("/forgot-password");
+  }
+
+  if (session.emailVerified) {
+    const security = await checkSecurity(session as any, user);
+    if (!security.satisfied && security.redirect) {
+      return redirect(security.redirect);
+    }
+    return redirect("/reset-password");
+  }
+
+  return <PasswordResetEmailVerificationForm email={session.email} />;
+}

package/src/ui/signin/components.tsx

@@ -0,0 +1,215 @@
+"use client";
+
+import { useTranslation } from "@arch-cadre/intl";
+import { Button } from "@arch-cadre/ui/components/button";
+import { Checkbox } from "@arch-cadre/ui/components/checkbox";
+import {
+  Field,
+  FieldError,
+  FieldGroup,
+  FieldLabel,
+} from "@arch-cadre/ui/components/field";
+import { Input } from "@arch-cadre/ui/components/input";
+import { Separator } from "@arch-cadre/ui/components/separator";
+import { cn } from "@arch-cadre/ui/lib/utils";
+import { Loader } from "@arch-cadre/ui/shared/loader";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { AlertCircle } from "lucide-react";
+import Link from "next/link";
+import * as React from "react";
+import { createContext, useContext, useState } from "react";
+import type { UseFormReturn } from "react-hook-form";
+import { Controller, useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { loginAction } from "../../actions/index.js";
+import { type LoginInput, loginSchema } from "../../validation.js";
+
+const LoginFormContext = createContext<{
+  form: UseFormReturn<LoginInput>;
+} | null>(null);
+
+export function useLoginForm() {
+  const context = useContext(LoginFormContext);
+  if (!context) {
+    throw new Error("useLoginForm must be used within a LoginForm");
+  }
+  return context;
+}
+
+export function LoginForm({
+  extraButtons,
+  extraFields,
+  hasAllowedExtensions,
+}: {
+  hasAllowedExtensions?: boolean;
+  extraButtons?: React.ReactNode;
+  extraFields?: React.ReactNode;
+}) {
+  const [generalError, setGeneralError] = useState("");
+  const { t } = useTranslation();
+
+  const form = useForm<LoginInput>({
+    resolver: zodResolver(loginSchema),
+  });
+
+  async function onSubmit(data: LoginInput) {
+    setGeneralError("");
+
+    try {
+      const response = await loginAction(data);
+
+      if (response.error) {
+        setGeneralError(response.message || t("error_occurred"));
+        return;
+      }
+
+      toast(response.message);
+    } catch (_error) {
+      // setGeneralError(t("error_occurred"));
+    }
+  }
+
+  return (
+    <LoginFormContext.Provider value={{ form }}>
+      <div className={cn("flex flex-col space-y-6")}>
+        <div className="space-y-2 text-center">
+          <h1 className="text-3xl font-semibold">{t("Sign In")}</h1>
+          <p className="text-muted-foreground">
+            {t("Sign in to access your dashboard, settings and projects.")}
+          </p>
+        </div>
+
+        <div className="grid gap-5">
+          {hasAllowedExtensions && (
+            <>
+              <div className="flex flex-col gap-2">{extraButtons}</div>
+
+              <div className="flex items-center gap-2">
+                <Separator className="flex-1" />
+                <span className="text-sm text-muted-foreground">
+                  {t("or sign in with email")}
+                </span>
+                <Separator className="flex-1" />
+              </div>
+            </>
+          )}
+
+          {generalError && (
+            <div className="flex gap-2 p-3 bg-red-50 border border-red-200 rounded-lg">
+              <AlertCircle className="w-4 h-4 text-red-600 flex-shrink-0 mt-0.5" />
+              <p className="text-sm text-red-600">{generalError}</p>
+            </div>
+          )}
+
+          <form onSubmit={form.handleSubmit(onSubmit)} className="grid gap-6">
+            <FieldGroup>
+              <Controller
+                name="email"
+                control={form.control}
+                render={({ field, fieldState }) => (
+                  <Field data-invalid={fieldState.invalid}>
+                    <FieldLabel htmlFor="email">
+                      {t("Email address")}
+                    </FieldLabel>
+                    <Input
+                      {...field}
+                      id="email"
+                      type="email"
+                      aria-invalid={fieldState.invalid}
+                      placeholder={t("Email address")}
+                      autoComplete="off"
+                    />
+                    {fieldState.invalid && (
+                      <FieldError errors={[fieldState.error]} />
+                    )}
+                  </Field>
+                )}
+              />
+
+              <Controller
+                name="password"
+                control={form.control}
+                render={({ field, fieldState }) => (
+                  <Field data-invalid={fieldState.invalid}>
+                    <div className="flex items-center">
+                      <FieldLabel htmlFor="password">
+                        {t("Password")}
+                      </FieldLabel>
+
+                      <Link
+                        href="/forgot-password"
+                        className="ml-auto text-sm text-primary! underline-offset-4 hover:underline"
+                      >
+                        {t("Forgot your password?")}
+                      </Link>
+                    </div>
+
+                    <Input
+                      {...field}
+                      id="password"
+                      type="password"
+                      aria-invalid={fieldState.invalid}
+                      placeholder="********"
+                      autoComplete="off"
+                    />
+                    {fieldState.invalid && (
+                      <FieldError errors={[fieldState.error]} />
+                    )}
+                  </Field>
+                )}
+              />
+
+              {extraFields}
+
+              <Controller
+                name="remember"
+                control={form.control}
+                render={({ field, fieldState }) => (
+                  <Field
+                    data-invalid={fieldState.invalid}
+                    className="flex items-center space-x-2"
+                  >
+                    <div className="flex items-center space-x-2">
+                      <Checkbox
+                        id="remember-me"
+                        aria-invalid={fieldState.invalid}
+                        checked={field.value}
+                        onCheckedChange={(checked) => field.onChange(checked)}
+                      />
+                      <FieldLabel
+                        htmlFor="remember-me"
+                        className="text-sm text-muted-foreground"
+                      >
+                        {t("Remember me")}
+                      </FieldLabel>
+                    </div>
+
+                    {fieldState.invalid && (
+                      <FieldError errors={[fieldState.error]} />
+                    )}
+                  </Field>
+                )}
+              />
+            </FieldGroup>
+
+            <Button disabled={form.formState.isSubmitting} className="w-full">
+              {form.formState.isSubmitting ? t("Please wait...") : t("Sign In")}
+              {form.formState.isSubmitting && <Loader variant="dark" />}
+            </Button>
+          </form>
+
+          <div className="text-center text-sm">
+            {t("No account?")}{" "}
+            <Link
+              key="signup"
+              href="/signup"
+              className="underline underline-offset-4"
+            >
+              {t("Sign Up")}
+            </Link>
+          </div>
+        </div>
+      </div>
+    </LoginFormContext.Provider>
+  );
+}

package/src/ui/signin/page.tsx

@@ -0,0 +1,43 @@
+// import { ExtensionPoint } from "@arch-cadre/ui/shared/extension-point";
+import { checkSecurity, getCurrentSession } from "@arch-cadre/core/server";
+import { ExtensionPoint } from "@arch-cadre/modules";
+import { hasExtension } from "@arch-cadre/modules/server";
+import { redirect } from "next/navigation";
+import * as React from "react";
+import { LoginForm } from "./components.js";
+
+export default async function Page() {
+  const { session, user } = await getCurrentSession();
+
+  if (session !== null && user !== null) {
+    // Check if there are any pending security requirements (like 2FA)
+    const security = await checkSecurity(session, user);
+    if (!security.satisfied && security.redirect) {
+      return redirect(security.redirect);
+    }
+    return redirect("/");
+  }
+
+  const hasAllowed = await hasExtension("auth", "signin:extra-buttons");
+
+  return (
+    <LoginForm
+      hasAllowedExtensions={hasAllowed}
+      extraButtons={
+
+        <ExtensionPoint
+          module="auth"
+          point="signin:extra-buttons"
+          className="flex flex-col gap-2"
+        />
+      }
+      extraFields={
+        <ExtensionPoint
+          module="auth"
+          point="signin:extra-fields"
+          className="flex flex-col gap-4"
+        />
+      }
+    />
+  );
+}