@baseplate-dev/plugin-auth 0.1.3 → 0.6.2

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/reset-password.tsx

@@ -0,0 +1,283 @@
+// @ts-nocheck
+
+import { PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH } from '$constants';
+import { getApolloErrorCode } from '%apolloErrorImports';
+import { graphql } from '%graphqlImports';
+import {
+  Button,
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+  InputFieldController,
+} from '%reactComponentsImports';
+import { logAndFormatError, logError } from '%reactErrorImports';
+import { useMutation } from '@apollo/client/react';
+import { zodResolver } from '@hookform/resolvers/zod';
+import {
+  createFileRoute,
+  Link,
+  redirect,
+  useNavigate,
+} from '@tanstack/react-router';
+import { useCallback, useEffect, useState } from 'react';
+import { useForm } from 'react-hook-form';
+import { toast } from 'sonner';
+import { z } from 'zod';
+
+export const Route = createFileRoute('/auth_/reset-password')({
+  validateSearch: z.object({
+    token: z.string().optional(),
+  }),
+  component: ResetPasswordPage,
+  beforeLoad: ({ search: { token }, context: { userId } }) => {
+    if (userId) {
+      throw redirect({ to: '/' });
+    }
+    if (!token) {
+      throw redirect({ to: '/auth/forgot-password' });
+    }
+  },
+});
+
+const formSchema = z
+  .object({
+    newPassword: z.string().min(PASSWORD_MIN_LENGTH).max(PASSWORD_MAX_LENGTH),
+    confirmPassword: z
+      .string()
+      .min(PASSWORD_MIN_LENGTH)
+      .max(PASSWORD_MAX_LENGTH),
+  })
+  .refine((data) => data.newPassword === data.confirmPassword, {
+    message: 'Passwords do not match',
+    path: ['confirmPassword'],
+  });
+
+type FormData = z.infer<typeof formSchema>;
+
+const validateTokenMutation = graphql(`
+  mutation ValidatePasswordResetToken(
+    $input: ValidatePasswordResetTokenInput!
+  ) {
+    validatePasswordResetToken(input: $input) {
+      success
+    }
+  }
+`);
+
+const resetPasswordMutation = graphql(`
+  mutation ResetPasswordWithToken($input: ResetPasswordWithTokenInput!) {
+    resetPasswordWithToken(input: $input) {
+      success
+    }
+  }
+`);
+
+function ResetPasswordPage(): React.JSX.Element {
+  const { token } = Route.useSearch();
+  const navigate = useNavigate();
+  const [tokenValid, setTokenValid] = useState<boolean | null>(null);
+  const [validationError, setValidationError] = useState<string | null>(null);
+  const [resetComplete, setResetComplete] = useState(false);
+
+  const [validateToken] = useMutation(validateTokenMutation);
+  const [resetPassword, { loading }] = useMutation(resetPasswordMutation);
+
+  const { control, handleSubmit } = useForm<FormData>({
+    resolver: zodResolver(formSchema),
+    reValidateMode: 'onBlur',
+  });
+
+  const runTokenValidation = useCallback(() => {
+    if (!token) return;
+
+    setTokenValid(null);
+    setValidationError(null);
+
+    validateToken({
+      variables: { input: { token } },
+    })
+      .then(() => {
+        setTokenValid(true);
+      })
+      .catch((err: unknown) => {
+        const errorCode = getApolloErrorCode(err, ['invalid-token'] as const);
+        switch (errorCode) {
+          case 'invalid-token': {
+            setTokenValid(false);
+            break;
+          }
+          default: {
+            setValidationError(
+              logAndFormatError(
+                err,
+                'Sorry, we could not validate your reset link.',
+              ),
+            );
+          }
+        }
+      });
+  }, [token, validateToken]);
+
+  // Validate token on mount
+  useEffect(() => {
+    runTokenValidation();
+  }, [runTokenValidation]);
+
+  const onSubmit = (data: FormData): void => {
+    if (!token) return;
+
+    resetPassword({
+      variables: {
+        input: {
+          token,
+          newPassword: data.newPassword,
+        },
+      },
+    })
+      .then(() => {
+        setResetComplete(true);
+        toast.success('Password reset successful!');
+      })
+      .catch((err: unknown) => {
+        const errorCode = getApolloErrorCode(err, [
+          'invalid-token',
+          'token-expired',
+        ] as const);
+        switch (errorCode) {
+          case 'invalid-token':
+          case 'token-expired': {
+            setTokenValid(false);
+            break;
+          }
+          default: {
+            toast.error(
+              logAndFormatError(
+                err,
+                'Sorry, we could not reset your password.',
+              ),
+            );
+          }
+        }
+      });
+  };
+
+  // Loading state
+  if (tokenValid === null && !validationError) {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>Validating...</CardTitle>
+          <CardDescription>
+            Please wait while we verify your reset link.
+          </CardDescription>
+        </CardHeader>
+      </Card>
+    );
+  }
+
+  // Validation error state (transient failures, not invalid token)
+  if (validationError) {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>Something Went Wrong</CardTitle>
+          <CardDescription>{validationError}</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <Button
+            variant="secondary"
+            className="w-full"
+            onClick={runTokenValidation}
+          >
+            Try Again
+          </Button>
+        </CardContent>
+      </Card>
+    );
+  }
+
+  // Invalid token state
+  if (!tokenValid) {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>Invalid or Expired Link</CardTitle>
+          <CardDescription>
+            This password reset link is invalid or has expired. Please request a
+            new one.
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          <Link to="/auth/forgot-password">
+            <Button variant="secondary" className="w-full">
+              Request New Link
+            </Button>
+          </Link>
+        </CardContent>
+      </Card>
+    );
+  }
+
+  // Success state - redirect to login
+  if (resetComplete) {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>Password Reset Complete</CardTitle>
+          <CardDescription>
+            Your password has been successfully reset. You can now log in with
+            your new password.
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          <Button
+            variant="secondary"
+            className="w-full"
+            onClick={() => {
+              navigate({ to: '/auth/login' }).catch(logError);
+            }}
+          >
+            Go to Login
+          </Button>
+        </CardContent>
+      </Card>
+    );
+  }
+
+  // Reset form
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Reset your password</CardTitle>
+        <CardDescription>Enter your new password below.</CardDescription>
+      </CardHeader>
+      <CardContent>
+        <form onSubmit={handleSubmit(onSubmit)}>
+          <div className="flex flex-col gap-6">
+            <InputFieldController
+              control={control}
+              name="newPassword"
+              label="New Password"
+              type="password"
+              autoComplete="new-password"
+              placeholder="Enter new password"
+            />
+            <InputFieldController
+              control={control}
+              name="confirmPassword"
+              label="Confirm Password"
+              type="password"
+              autoComplete="new-password"
+              placeholder="Confirm new password"
+            />
+            <Button type="submit" className="w-full" disabled={loading}>
+              Reset Password
+            </Button>
+          </div>
+        </form>
+      </CardContent>
+    </Card>
+  );
+}

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/route.d.ts

@@ -0,0 +1,2 @@
+export declare const Route: import("@tanstack/router-core").Route<import("@tanstack/react-router").Register, never, never, never, never, never, undefined, import("@tanstack/react-router").ResolveParams<never>, import("@tanstack/react-router").AnyContext, import("@tanstack/react-router").AnyContext, import("@tanstack/react-router").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>;
+//# sourceMappingURL=route.d.ts.map

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/local-auth/core/generators/auth-routes/templates/routes/auth_/route.tsx"],"names":[],"mappings":"AAIA,eAAO,MAAM,KAAK,4XAEhB,CAAC"}

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/route.js

@@ -0,0 +1,10 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// @ts-nocheck
+import { createFileRoute, Outlet } from '@tanstack/react-router';
+export const Route = createFileRoute('/auth_')({
+    component: RouteComponent,
+});
+function RouteComponent() {
+    return (_jsx("div", { className: "flex min-h-svh w-full items-center justify-center p-6 md:p-10", children: _jsx("div", { className: "w-full max-w-sm", children: _jsx(Outlet, {}) }) }));
+}
+//# sourceMappingURL=route.js.map

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../../../../../../src/local-auth/core/generators/auth-routes/templates/routes/auth_/route.tsx"],"names":[],"mappings":";AAAA,cAAc;AAEd,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAEjE,MAAM,CAAC,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,SAAS,EAAE,cAAc;CAC1B,CAAC,CAAC;AAEH,SAAS,cAAc;IACrB,OAAO,CACL,cAAK,SAAS,EAAC,+DAA+D,YAC5E,cAAK,SAAS,EAAC,iBAAiB,YAC9B,KAAC,MAAM,KAAG,GACN,GACF,CACP,CAAC;AACJ,CAAC"}

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/route.tsx

@@ -0,0 +1,17 @@
+// @ts-nocheck
+
+import { createFileRoute, Outlet } from '@tanstack/react-router';
+
+export const Route = createFileRoute('/auth_')({
+  component: RouteComponent,
+});
+
+function RouteComponent(): React.ReactElement {
+  return (
+    <div className="flex min-h-svh w-full items-center justify-center p-6 md:p-10">
+      <div className="w-full max-w-sm">
+        <Outlet />
+      </div>
+    </div>
+  );
+}

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.d.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+export declare const Route: import("@tanstack/router-core").Route<import("@tanstack/react-router").Register, never, never, never, never, never, z.ZodObject<{
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, import("@tanstack/react-router").ResolveParams<never>, import("@tanstack/react-router").AnyContext, import("@tanstack/react-router").AnyContext, ({ search: { token } }: import("@tanstack/react-router").BeforeLoadContextOptions<import("@tanstack/react-router").Register, never, z.ZodObject<{
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, import("@tanstack/react-router").ResolveParams<never>, import("@tanstack/react-router").AnyContext, import("@tanstack/react-router").AnyContext, never, unknown, undefined>) => void, {}, undefined, unknown, unknown, unknown, unknown, undefined>;
+//# sourceMappingURL=verify-email.d.ts.map

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-email.d.ts","sourceRoot":"","sources":["../../../../../../../../src/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.tsx"],"names":[],"mappings":"AAiBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,KAAK;;;;sQAUhB,CAAC"}

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.js

@@ -0,0 +1,106 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// @ts-nocheck
+import { getApolloErrorCode } from '%apolloErrorImports';
+import { graphql } from '%graphqlImports';
+import { Button, Card, CardContent, CardDescription, CardHeader, CardTitle, } from '%reactComponentsImports';
+import { logAndFormatError, logError } from '%reactErrorImports';
+import { useMutation } from '@apollo/client/react';
+import { createFileRoute, redirect, useNavigate } from '@tanstack/react-router';
+import { useCallback, useEffect, useState } from 'react';
+import { toast } from 'sonner';
+import { z } from 'zod';
+export const Route = createFileRoute('/auth_/verify-email')({
+    validateSearch: z.object({
+        token: z.string().optional(),
+    }),
+    component: VerifyEmailPage,
+    beforeLoad: ({ search: { token } }) => {
+        if (!token) {
+            throw redirect({ to: '/' });
+        }
+    },
+});
+const verifyEmailMutation = graphql(`
+  mutation VerifyEmail($input: VerifyEmailInput!) {
+    verifyEmail(input: $input) {
+      success
+    }
+  }
+`);
+const requestEmailVerificationMutation = graphql(`
+  mutation RequestEmailVerification {
+    requestEmailVerification {
+      success
+    }
+  }
+`);
+function VerifyEmailPage() {
+    const { token } = Route.useSearch();
+    const { userId } = Route.useRouteContext();
+    const navigate = useNavigate();
+    const [status, setStatus] = useState(userId ? 'verifying' : 'idle');
+    const [verifyEmail] = useMutation(verifyEmailMutation);
+    const [requestVerification, { loading: resending }] = useMutation(requestEmailVerificationMutation);
+    const doVerify = useCallback(() => {
+        if (!token)
+            return;
+        setStatus('verifying');
+        verifyEmail({
+            variables: { input: { token } },
+        })
+            .then(() => {
+            setStatus('success');
+        })
+            .catch((err) => {
+            const errorCode = getApolloErrorCode(err, [
+                'invalid-token',
+                'token-expired',
+            ]);
+            switch (errorCode) {
+                case 'invalid-token':
+                case 'token-expired': {
+                    setStatus('error');
+                    break;
+                }
+                default: {
+                    toast.error(logAndFormatError(err, 'Sorry, we could not verify your email.'));
+                    setStatus('error');
+                }
+            }
+        });
+    }, [token, verifyEmail]);
+    // If logged in, auto-verify on mount
+    useEffect(() => {
+        if (userId && token) {
+            doVerify();
+        }
+    }, [userId, token, doVerify]);
+    const handleResend = () => {
+        requestVerification()
+            .then(() => {
+            toast.success('Verification email sent! Check your inbox.');
+        })
+            .catch((err) => {
+            toast.error(logAndFormatError(err, 'Could not resend verification email.'));
+        });
+    };
+    // Verifying state
+    if (status === 'verifying') {
+        return (_jsx(Card, { children: _jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Verifying..." }), _jsx(CardDescription, { children: "Please wait while we verify your email address." })] }) }));
+    }
+    // Success state
+    if (status === 'success') {
+        return (_jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Email Verified!" }), _jsx(CardDescription, { children: "Your email address has been successfully verified." })] }), _jsx(CardContent, { children: _jsx(Button, { variant: "secondary", className: "w-full", onClick: () => {
+                            navigate({ to: '/' }).catch(logError);
+                        }, children: "Continue" }) })] }));
+    }
+    // Error state
+    if (status === 'error') {
+        return (_jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Invalid or Expired Link" }), _jsx(CardDescription, { children: "This verification link is invalid or has expired." })] }), _jsx(CardContent, { children: _jsx("div", { className: "flex flex-col gap-3", children: userId ? (_jsx(Button, { variant: "secondary", className: "w-full", disabled: resending, onClick: handleResend, children: "Resend Verification Email" })) : (_jsx(Button, { variant: "secondary", className: "w-full", onClick: () => {
+                                navigate({ to: '/auth/login' }).catch(logError);
+                            }, children: "Log In to Resend" })) }) })] }));
+    }
+    // Idle state (not logged in) — show button to verify
+    return (_jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Verify your email" }), _jsx(CardDescription, { children: "Click the button below to verify your email address." })] }), _jsx(CardContent, { children: _jsx(Button, { className: "w-full", onClick: doVerify, children: "Verify Email" }) })] }));
+}
+//# sourceMappingURL=verify-email.js.map

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-email.js","sourceRoot":"","sources":["../../../../../../../../src/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.tsx"],"names":[],"mappings":";AAAA,cAAc;AAEd,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EACL,MAAM,EACN,IAAI,EACJ,WAAW,EACX,eAAe,EACf,UAAU,EACV,SAAS,GACV,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,CAAC;IAC1D,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,SAAS,EAAE,eAAe;IAC1B,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,OAAO,CAAC;;;;;;CAMnC,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,OAAO,CAAC;;;;;;CAMhD,CAAC,CAAC;AAIH,SAAS,eAAe;IACtB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IACpC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAClC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAC9B,CAAC;IAEF,MAAM,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACvD,MAAM,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,WAAW,CAC/D,gCAAgC,CACjC,CAAC;IAEF,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAS,EAAE;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,SAAS,CAAC,WAAW,CAAC,CAAC;QACvB,WAAW,CAAC;YACV,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE;SAChC,CAAC;aACC,IAAI,CAAC,GAAG,EAAE;YACT,SAAS,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,EAAE;gBACxC,eAAe;gBACf,eAAe;aACP,CAAC,CAAC;YACZ,QAAQ,SAAS,EAAE,CAAC;gBAClB,KAAK,eAAe,CAAC;gBACrB,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,SAAS,CAAC,OAAO,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,KAAK,CAAC,KAAK,CACT,iBAAiB,CAAC,GAAG,EAAE,wCAAwC,CAAC,CACjE,CAAC;oBACF,SAAS,CAAC,OAAO,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IAEzB,qCAAqC;IACrC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE9B,MAAM,YAAY,GAAG,GAAS,EAAE;QAC9B,mBAAmB,EAAE;aAClB,IAAI,CAAC,GAAG,EAAE;YACT,KAAK,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;QAC9D,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,KAAK,CAAC,KAAK,CACT,iBAAiB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAC/D,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,kBAAkB;IAClB,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO,CACL,KAAC,IAAI,cACH,MAAC,UAAU,eACT,KAAC,SAAS,+BAAyB,EACnC,KAAC,eAAe,kEAEE,IACP,GACR,CACR,CAAC;IACJ,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CACL,MAAC,IAAI,eACH,MAAC,UAAU,eACT,KAAC,SAAS,kCAA4B,EACtC,KAAC,eAAe,qEAEE,IACP,EACb,KAAC,WAAW,cACV,KAAC,MAAM,IACL,OAAO,EAAC,WAAW,EACnB,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE;4BACZ,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBACxC,CAAC,yBAGM,GACG,IACT,CACR,CAAC;IACJ,CAAC;IAED,cAAc;IACd,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,CACL,MAAC,IAAI,eACH,MAAC,UAAU,eACT,KAAC,SAAS,0CAAoC,EAC9C,KAAC,eAAe,oEAEE,IACP,EACb,KAAC,WAAW,cACV,cAAK,SAAS,EAAC,qBAAqB,YACjC,MAAM,CAAC,CAAC,CAAC,CACR,KAAC,MAAM,IACL,OAAO,EAAC,WAAW,EACnB,SAAS,EAAC,QAAQ,EAClB,QAAQ,EAAE,SAAS,EACnB,OAAO,EAAE,YAAY,0CAGd,CACV,CAAC,CAAC,CAAC,CACF,KAAC,MAAM,IACL,OAAO,EAAC,WAAW,EACnB,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE;gCACZ,QAAQ,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;4BAClD,CAAC,iCAGM,CACV,GACG,GACM,IACT,CACR,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,OAAO,CACL,MAAC,IAAI,eACH,MAAC,UAAU,eACT,KAAC,SAAS,oCAA8B,EACxC,KAAC,eAAe,uEAEE,IACP,EACb,KAAC,WAAW,cACV,KAAC,MAAM,IAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,QAAQ,6BAEnC,GACG,IACT,CACR,CAAC;AACJ,CAAC"}

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.tsx

@@ -0,0 +1,206 @@
+// @ts-nocheck
+
+import { getApolloErrorCode } from '%apolloErrorImports';
+import { graphql } from '%graphqlImports';
+import {
+  Button,
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from '%reactComponentsImports';
+import { logAndFormatError, logError } from '%reactErrorImports';
+import { useMutation } from '@apollo/client/react';
+import { createFileRoute, redirect, useNavigate } from '@tanstack/react-router';
+import { useCallback, useEffect, useState } from 'react';
+import { toast } from 'sonner';
+import { z } from 'zod';
+
+export const Route = createFileRoute('/auth_/verify-email')({
+  validateSearch: z.object({
+    token: z.string().optional(),
+  }),
+  component: VerifyEmailPage,
+  beforeLoad: ({ search: { token } }) => {
+    if (!token) {
+      throw redirect({ to: '/' });
+    }
+  },
+});
+
+const verifyEmailMutation = graphql(`
+  mutation VerifyEmail($input: VerifyEmailInput!) {
+    verifyEmail(input: $input) {
+      success
+    }
+  }
+`);
+
+const requestEmailVerificationMutation = graphql(`
+  mutation RequestEmailVerification {
+    requestEmailVerification {
+      success
+    }
+  }
+`);
+
+type VerifyStatus = 'idle' | 'verifying' | 'success' | 'error';
+
+function VerifyEmailPage(): React.JSX.Element {
+  const { token } = Route.useSearch();
+  const { userId } = Route.useRouteContext();
+  const navigate = useNavigate();
+  const [status, setStatus] = useState<VerifyStatus>(
+    userId ? 'verifying' : 'idle',
+  );
+
+  const [verifyEmail] = useMutation(verifyEmailMutation);
+  const [requestVerification, { loading: resending }] = useMutation(
+    requestEmailVerificationMutation,
+  );
+
+  const doVerify = useCallback((): void => {
+    if (!token) return;
+
+    setStatus('verifying');
+    verifyEmail({
+      variables: { input: { token } },
+    })
+      .then(() => {
+        setStatus('success');
+      })
+      .catch((err: unknown) => {
+        const errorCode = getApolloErrorCode(err, [
+          'invalid-token',
+          'token-expired',
+        ] as const);
+        switch (errorCode) {
+          case 'invalid-token':
+          case 'token-expired': {
+            setStatus('error');
+            break;
+          }
+          default: {
+            toast.error(
+              logAndFormatError(err, 'Sorry, we could not verify your email.'),
+            );
+            setStatus('error');
+          }
+        }
+      });
+  }, [token, verifyEmail]);
+
+  // If logged in, auto-verify on mount
+  useEffect(() => {
+    if (userId && token) {
+      doVerify();
+    }
+  }, [userId, token, doVerify]);
+
+  const handleResend = (): void => {
+    requestVerification()
+      .then(() => {
+        toast.success('Verification email sent! Check your inbox.');
+      })
+      .catch((err: unknown) => {
+        toast.error(
+          logAndFormatError(err, 'Could not resend verification email.'),
+        );
+      });
+  };
+
+  // Verifying state
+  if (status === 'verifying') {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>Verifying...</CardTitle>
+          <CardDescription>
+            Please wait while we verify your email address.
+          </CardDescription>
+        </CardHeader>
+      </Card>
+    );
+  }
+
+  // Success state
+  if (status === 'success') {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>Email Verified!</CardTitle>
+          <CardDescription>
+            Your email address has been successfully verified.
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          <Button
+            variant="secondary"
+            className="w-full"
+            onClick={() => {
+              navigate({ to: '/' }).catch(logError);
+            }}
+          >
+            Continue
+          </Button>
+        </CardContent>
+      </Card>
+    );
+  }
+
+  // Error state
+  if (status === 'error') {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>Invalid or Expired Link</CardTitle>
+          <CardDescription>
+            This verification link is invalid or has expired.
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          <div className="flex flex-col gap-3">
+            {userId ? (
+              <Button
+                variant="secondary"
+                className="w-full"
+                disabled={resending}
+                onClick={handleResend}
+              >
+                Resend Verification Email
+              </Button>
+            ) : (
+              <Button
+                variant="secondary"
+                className="w-full"
+                onClick={() => {
+                  navigate({ to: '/auth/login' }).catch(logError);
+                }}
+              >
+                Log In to Resend
+              </Button>
+            )}
+          </div>
+        </CardContent>
+      </Card>
+    );
+  }
+
+  // Idle state (not logged in) — show button to verify
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Verify your email</CardTitle>
+        <CardDescription>
+          Click the button below to verify your email address.
+        </CardDescription>
+      </CardHeader>
+      <CardContent>
+        <Button className="w-full" onClick={doVerify}>
+          Verify Email
+        </Button>
+      </CardContent>
+    </Card>
+  );
+}

package/dist/local-auth/core/generators/index.d.ts

@@ -0,0 +1,10 @@
+export * from './auth-apollo/index.js';
+export * from './auth-email-password/index.js';
+export * from './auth-email-templates/index.js';
+export * from './auth-hooks/index.js';
+export * from './auth-module/index.js';
+export * from './auth-routes/index.js';
+export * from './react-auth/index.js';
+export * from './react-session/index.js';
+export * from './seed-initial-user/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/local-auth/core/generators/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/local-auth/core/generators/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC"}

package/dist/local-auth/core/generators/index.js

@@ -0,0 +1,10 @@
+export * from './auth-apollo/index.js';
+export * from './auth-email-password/index.js';
+export * from './auth-email-templates/index.js';
+export * from './auth-hooks/index.js';
+export * from './auth-module/index.js';
+export * from './auth-routes/index.js';
+export * from './react-auth/index.js';
+export * from './react-session/index.js';
+export * from './seed-initial-user/index.js';
+//# sourceMappingURL=index.js.map