@baseplate-dev/plugin-auth 4.0.1 → 4.0.2

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/reset-password.d.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+export declare const Route: import("@tanstack/router-core").Route<import("@tanstack/react-router").Register, never, never, never, never, never, z.ZodObject<{
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, import("@tanstack/react-router").ResolveParams<never>, import("@tanstack/react-router").AnyContext, import("@tanstack/react-router").AnyContext, ({ search: { token }, context: { userId } }: import("@tanstack/react-router").BeforeLoadContextOptions<import("@tanstack/react-router").Register, never, z.ZodObject<{
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, import("@tanstack/react-router").ResolveParams<never>, import("@tanstack/react-router").AnyContext, import("@tanstack/react-router").AnyContext, never, unknown, undefined>) => void, {}, undefined, unknown, unknown, unknown, unknown, undefined>;
+//# sourceMappingURL=reset-password.d.ts.map

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/reset-password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-password.d.ts","sourceRoot":"","sources":["../../../../../../../../src/local-auth/core/generators/auth-routes/templates/routes/auth_/reset-password.tsx"],"names":[],"mappings":"AA0BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,KAAK;;;;sQAahB,CAAC"}

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/reset-password.js

@@ -0,0 +1,131 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// @ts-nocheck
+import { PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH } from '$constants';
+import { getApolloErrorCode } from '%apolloErrorImports';
+import { graphql } from '%graphqlImports';
+import { Button, Card, CardContent, CardDescription, CardHeader, CardTitle, InputFieldController, } from '%reactComponentsImports';
+import { logAndFormatError, logError } from '%reactErrorImports';
+import { useMutation } from '@apollo/client/react';
+import { zodResolver } from '@hookform/resolvers/zod';
+import { createFileRoute, Link, redirect, useNavigate, } from '@tanstack/react-router';
+import { useEffect, useState } from 'react';
+import { useForm } from 'react-hook-form';
+import { toast } from 'sonner';
+import { z } from 'zod';
+export const Route = createFileRoute('/auth_/reset-password')({
+    validateSearch: z.object({
+        token: z.string().optional(),
+    }),
+    component: ResetPasswordPage,
+    beforeLoad: ({ search: { token }, context: { userId } }) => {
+        if (userId) {
+            throw redirect({ to: '/' });
+        }
+        if (!token) {
+            throw redirect({ to: '/auth/forgot-password' });
+        }
+    },
+});
+const formSchema = z
+    .object({
+    newPassword: z.string().min(PASSWORD_MIN_LENGTH).max(PASSWORD_MAX_LENGTH),
+    confirmPassword: z
+        .string()
+        .min(PASSWORD_MIN_LENGTH)
+        .max(PASSWORD_MAX_LENGTH),
+})
+    .refine((data) => data.newPassword === data.confirmPassword, {
+    message: 'Passwords do not match',
+    path: ['confirmPassword'],
+});
+const validateTokenMutation = graphql(`
+  mutation ValidatePasswordResetToken(
+    $input: ValidatePasswordResetTokenInput!
+  ) {
+    validatePasswordResetToken(input: $input) {
+      valid
+    }
+  }
+`);
+const resetPasswordMutation = graphql(`
+  mutation ResetPasswordWithToken($input: ResetPasswordWithTokenInput!) {
+    resetPasswordWithToken(input: $input) {
+      success
+    }
+  }
+`);
+function ResetPasswordPage() {
+    const { token } = Route.useSearch();
+    const navigate = useNavigate();
+    const [tokenValid, setTokenValid] = useState(null);
+    const [resetComplete, setResetComplete] = useState(false);
+    const [validateToken] = useMutation(validateTokenMutation);
+    const [resetPassword, { loading }] = useMutation(resetPasswordMutation);
+    const { control, handleSubmit } = useForm({
+        resolver: zodResolver(formSchema),
+        reValidateMode: 'onBlur',
+    });
+    // Validate token on mount
+    useEffect(() => {
+        if (token) {
+            validateToken({
+                variables: { input: { token } },
+            })
+                .then(({ data }) => {
+                setTokenValid(data?.validatePasswordResetToken.valid ?? false);
+            })
+                .catch(() => {
+                setTokenValid(false);
+            });
+        }
+    }, [token, validateToken]);
+    const onSubmit = (data) => {
+        if (!token)
+            return;
+        resetPassword({
+            variables: {
+                input: {
+                    token,
+                    newPassword: data.newPassword,
+                },
+            },
+        })
+            .then(() => {
+            setResetComplete(true);
+            toast.success('Password reset successful!');
+        })
+            .catch((err) => {
+            const errorCode = getApolloErrorCode(err, [
+                'invalid-token',
+                'token-expired',
+            ]);
+            switch (errorCode) {
+                case 'invalid-token':
+                case 'token-expired': {
+                    setTokenValid(false);
+                    break;
+                }
+                default: {
+                    toast.error(logAndFormatError(err, 'Sorry, we could not reset your password.'));
+                }
+            }
+        });
+    };
+    // Loading state
+    if (tokenValid === null) {
+        return (_jsx(Card, { children: _jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Validating..." }), _jsx(CardDescription, { children: "Please wait while we verify your reset link." })] }) }));
+    }
+    // Invalid token state
+    if (!tokenValid) {
+        return (_jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Invalid or Expired Link" }), _jsx(CardDescription, { children: "This password reset link is invalid or has expired. Please request a new one." })] }), _jsx(CardContent, { children: _jsx(Link, { to: "/auth/forgot-password", children: _jsx(Button, { variant: "secondary", className: "w-full", children: "Request New Link" }) }) })] }));
+    }
+    // Success state - redirect to login
+    if (resetComplete) {
+        return (_jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Password Reset Complete" }), _jsx(CardDescription, { children: "Your password has been successfully reset. You can now log in with your new password." })] }), _jsx(CardContent, { children: _jsx(Button, { variant: "secondary", className: "w-full", onClick: () => {
+                            navigate({ to: '/auth/login' }).catch(logError);
+                        }, children: "Go to Login" }) })] }));
+    }
+    // Reset form
+    return (_jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Reset your password" }), _jsx(CardDescription, { children: "Enter your new password below." })] }), _jsx(CardContent, { children: _jsx("form", { onSubmit: handleSubmit(onSubmit), children: _jsxs("div", { className: "flex flex-col gap-6", children: [_jsx(InputFieldController, { control: control, name: "newPassword", label: "New Password", type: "password", autoComplete: "new-password", placeholder: "Enter new password" }), _jsx(InputFieldController, { control: control, name: "confirmPassword", label: "Confirm Password", type: "password", autoComplete: "new-password", placeholder: "Confirm new password" }), _jsx(Button, { type: "submit", className: "w-full", disabled: loading, children: "Reset Password" })] }) }) })] }));
+}
+//# sourceMappingURL=reset-password.js.map

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/reset-password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-password.js","sourceRoot":"","sources":["../../../../../../../../src/local-auth/core/generators/auth-routes/templates/routes/auth_/reset-password.tsx"],"names":[],"mappings":";AAAA,cAAc;AAEd,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EACL,MAAM,EACN,IAAI,EACJ,WAAW,EACX,eAAe,EACf,UAAU,EACV,SAAS,EACT,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,eAAe,EACf,IAAI,EACJ,QAAQ,EACR,WAAW,GACZ,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,KAAK,GAAG,eAAe,CAAC,uBAAuB,CAAC,CAAC;IAC5D,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,SAAS,EAAE,iBAAiB;IAC5B,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;QACzD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACzE,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,CAAC,mBAAmB,CAAC;SACxB,GAAG,CAAC,mBAAmB,CAAC;CAC5B,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,eAAe,EAAE;IAC3D,OAAO,EAAE,wBAAwB;IACjC,IAAI,EAAE,CAAC,iBAAiB,CAAC;CAC1B,CAAC,CAAC;AAIL,MAAM,qBAAqB,GAAG,OAAO,CAAC;;;;;;;;CAQrC,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,OAAO,CAAC;;;;;;CAMrC,CAAC,CAAC;AAEH,SAAS,iBAAiB;IACxB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAiB,IAAI,CAAC,CAAC;IACnE,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE1D,MAAM,CAAC,aAAa,CAAC,GAAG,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAC3D,MAAM,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAExE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAW;QAClD,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC;QACjC,cAAc,EAAE,QAAQ;KACzB,CAAC,CAAC;IAEH,0BAA0B;IAC1B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,KAAK,EAAE,CAAC;YACV,aAAa,CAAC;gBACZ,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE;aAChC,CAAC;iBACC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;gBACjB,aAAa,CAAC,IAAI,EAAE,0BAA0B,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;YACjE,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE;gBACV,aAAa,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;QACP,CAAC;IACH,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;IAE3B,MAAM,QAAQ,GAAG,CAAC,IAAc,EAAQ,EAAE;QACxC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,aAAa,CAAC;YACZ,SAAS,EAAE;gBACT,KAAK,EAAE;oBACL,KAAK;oBACL,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B;aACF;SACF,CAAC;aACC,IAAI,CAAC,GAAG,EAAE;YACT,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvB,KAAK,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QAC9C,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,EAAE;gBACxC,eAAe;gBACf,eAAe;aACP,CAAC,CAAC;YACZ,QAAQ,SAAS,EAAE,CAAC;gBAClB,KAAK,eAAe,CAAC;gBACrB,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,aAAa,CAAC,KAAK,CAAC,CAAC;oBACrB,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,KAAK,CAAC,KAAK,CACT,iBAAiB,CACf,GAAG,EACH,0CAA0C,CAC3C,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,gBAAgB;IAChB,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,CACL,KAAC,IAAI,cACH,MAAC,UAAU,eACT,KAAC,SAAS,gCAA0B,EACpC,KAAC,eAAe,+DAEE,IACP,GACR,CACR,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CACL,MAAC,IAAI,eACH,MAAC,UAAU,eACT,KAAC,SAAS,0CAAoC,EAC9C,KAAC,eAAe,gGAGE,IACP,EACb,KAAC,WAAW,cACV,KAAC,IAAI,IAAC,EAAE,EAAC,uBAAuB,YAC9B,KAAC,MAAM,IAAC,OAAO,EAAC,WAAW,EAAC,SAAS,EAAC,QAAQ,iCAErC,GACJ,GACK,IACT,CACR,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CACL,MAAC,IAAI,eACH,MAAC,UAAU,eACT,KAAC,SAAS,0CAAoC,EAC9C,KAAC,eAAe,wGAGE,IACP,EACb,KAAC,WAAW,cACV,KAAC,MAAM,IACL,OAAO,EAAC,WAAW,EACnB,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE;4BACZ,QAAQ,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBAClD,CAAC,4BAGM,GACG,IACT,CACR,CAAC;IACJ,CAAC;IAED,aAAa;IACb,OAAO,CACL,MAAC,IAAI,eACH,MAAC,UAAU,eACT,KAAC,SAAS,sCAAgC,EAC1C,KAAC,eAAe,iDAAiD,IACtD,EACb,KAAC,WAAW,cACV,eAAM,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,YACpC,eAAK,SAAS,EAAC,qBAAqB,aAClC,KAAC,oBAAoB,IACnB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAC,aAAa,EAClB,KAAK,EAAC,cAAc,EACpB,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,EAC3B,WAAW,EAAC,oBAAoB,GAChC,EACF,KAAC,oBAAoB,IACnB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAC,iBAAiB,EACtB,KAAK,EAAC,kBAAkB,EACxB,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,EAC3B,WAAW,EAAC,sBAAsB,GAClC,EACF,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,QAAQ,EAAC,QAAQ,EAAE,OAAO,+BAEjD,IACL,GACD,GACK,IACT,CACR,CAAC;AACJ,CAAC"}

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/reset-password.tsx

@@ -0,0 +1,240 @@
+// @ts-nocheck
+
+import { PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH } from '$constants';
+import { getApolloErrorCode } from '%apolloErrorImports';
+import { graphql } from '%graphqlImports';
+import {
+  Button,
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+  InputFieldController,
+} from '%reactComponentsImports';
+import { logAndFormatError, logError } from '%reactErrorImports';
+import { useMutation } from '@apollo/client/react';
+import { zodResolver } from '@hookform/resolvers/zod';
+import {
+  createFileRoute,
+  Link,
+  redirect,
+  useNavigate,
+} from '@tanstack/react-router';
+import { useEffect, useState } from 'react';
+import { useForm } from 'react-hook-form';
+import { toast } from 'sonner';
+import { z } from 'zod';
+
+export const Route = createFileRoute('/auth_/reset-password')({
+  validateSearch: z.object({
+    token: z.string().optional(),
+  }),
+  component: ResetPasswordPage,
+  beforeLoad: ({ search: { token }, context: { userId } }) => {
+    if (userId) {
+      throw redirect({ to: '/' });
+    }
+    if (!token) {
+      throw redirect({ to: '/auth/forgot-password' });
+    }
+  },
+});
+
+const formSchema = z
+  .object({
+    newPassword: z.string().min(PASSWORD_MIN_LENGTH).max(PASSWORD_MAX_LENGTH),
+    confirmPassword: z
+      .string()
+      .min(PASSWORD_MIN_LENGTH)
+      .max(PASSWORD_MAX_LENGTH),
+  })
+  .refine((data) => data.newPassword === data.confirmPassword, {
+    message: 'Passwords do not match',
+    path: ['confirmPassword'],
+  });
+
+type FormData = z.infer<typeof formSchema>;
+
+const validateTokenMutation = graphql(`
+  mutation ValidatePasswordResetToken(
+    $input: ValidatePasswordResetTokenInput!
+  ) {
+    validatePasswordResetToken(input: $input) {
+      valid
+    }
+  }
+`);
+
+const resetPasswordMutation = graphql(`
+  mutation ResetPasswordWithToken($input: ResetPasswordWithTokenInput!) {
+    resetPasswordWithToken(input: $input) {
+      success
+    }
+  }
+`);
+
+function ResetPasswordPage(): React.JSX.Element {
+  const { token } = Route.useSearch();
+  const navigate = useNavigate();
+  const [tokenValid, setTokenValid] = useState<boolean | null>(null);
+  const [resetComplete, setResetComplete] = useState(false);
+
+  const [validateToken] = useMutation(validateTokenMutation);
+  const [resetPassword, { loading }] = useMutation(resetPasswordMutation);
+
+  const { control, handleSubmit } = useForm<FormData>({
+    resolver: zodResolver(formSchema),
+    reValidateMode: 'onBlur',
+  });
+
+  // Validate token on mount
+  useEffect(() => {
+    if (token) {
+      validateToken({
+        variables: { input: { token } },
+      })
+        .then(({ data }) => {
+          setTokenValid(data?.validatePasswordResetToken.valid ?? false);
+        })
+        .catch(() => {
+          setTokenValid(false);
+        });
+    }
+  }, [token, validateToken]);
+
+  const onSubmit = (data: FormData): void => {
+    if (!token) return;
+
+    resetPassword({
+      variables: {
+        input: {
+          token,
+          newPassword: data.newPassword,
+        },
+      },
+    })
+      .then(() => {
+        setResetComplete(true);
+        toast.success('Password reset successful!');
+      })
+      .catch((err: unknown) => {
+        const errorCode = getApolloErrorCode(err, [
+          'invalid-token',
+          'token-expired',
+        ] as const);
+        switch (errorCode) {
+          case 'invalid-token':
+          case 'token-expired': {
+            setTokenValid(false);
+            break;
+          }
+          default: {
+            toast.error(
+              logAndFormatError(
+                err,
+                'Sorry, we could not reset your password.',
+              ),
+            );
+          }
+        }
+      });
+  };
+
+  // Loading state
+  if (tokenValid === null) {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>Validating...</CardTitle>
+          <CardDescription>
+            Please wait while we verify your reset link.
+          </CardDescription>
+        </CardHeader>
+      </Card>
+    );
+  }
+
+  // Invalid token state
+  if (!tokenValid) {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>Invalid or Expired Link</CardTitle>
+          <CardDescription>
+            This password reset link is invalid or has expired. Please request a
+            new one.
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          <Link to="/auth/forgot-password">
+            <Button variant="secondary" className="w-full">
+              Request New Link
+            </Button>
+          </Link>
+        </CardContent>
+      </Card>
+    );
+  }
+
+  // Success state - redirect to login
+  if (resetComplete) {
+    return (
+      <Card>
+        <CardHeader>
+          <CardTitle>Password Reset Complete</CardTitle>
+          <CardDescription>
+            Your password has been successfully reset. You can now log in with
+            your new password.
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          <Button
+            variant="secondary"
+            className="w-full"
+            onClick={() => {
+              navigate({ to: '/auth/login' }).catch(logError);
+            }}
+          >
+            Go to Login
+          </Button>
+        </CardContent>
+      </Card>
+    );
+  }
+
+  // Reset form
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Reset your password</CardTitle>
+        <CardDescription>Enter your new password below.</CardDescription>
+      </CardHeader>
+      <CardContent>
+        <form onSubmit={handleSubmit(onSubmit)}>
+          <div className="flex flex-col gap-6">
+            <InputFieldController
+              control={control}
+              name="newPassword"
+              label="New Password"
+              type="password"
+              autoComplete="new-password"
+              placeholder="Enter new password"
+            />
+            <InputFieldController
+              control={control}
+              name="confirmPassword"
+              label="Confirm Password"
+              type="password"
+              autoComplete="new-password"
+              placeholder="Confirm new password"
+            />
+            <Button type="submit" className="w-full" disabled={loading}>
+              Reset Password
+            </Button>
+          </div>
+        </form>
+      </CardContent>
+    </Card>
+  );
+}

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.d.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+export declare const Route: import("@tanstack/router-core").Route<import("@tanstack/react-router").Register, never, never, never, never, never, z.ZodObject<{
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, import("@tanstack/react-router").ResolveParams<never>, import("@tanstack/react-router").AnyContext, import("@tanstack/react-router").AnyContext, ({ search: { token } }: import("@tanstack/react-router").BeforeLoadContextOptions<import("@tanstack/react-router").Register, never, z.ZodObject<{
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, import("@tanstack/react-router").ResolveParams<never>, import("@tanstack/react-router").AnyContext, import("@tanstack/react-router").AnyContext, never, unknown, undefined>) => void, {}, undefined, unknown, unknown, unknown, unknown, undefined>;
+//# sourceMappingURL=verify-email.d.ts.map

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-email.d.ts","sourceRoot":"","sources":["../../../../../../../../src/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.tsx"],"names":[],"mappings":"AAiBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,KAAK;;;;sQAUhB,CAAC"}

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.js

@@ -0,0 +1,106 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// @ts-nocheck
+import { getApolloErrorCode } from '%apolloErrorImports';
+import { graphql } from '%graphqlImports';
+import { Button, Card, CardContent, CardDescription, CardHeader, CardTitle, } from '%reactComponentsImports';
+import { logAndFormatError, logError } from '%reactErrorImports';
+import { useMutation } from '@apollo/client/react';
+import { createFileRoute, redirect, useNavigate } from '@tanstack/react-router';
+import { useCallback, useEffect, useState } from 'react';
+import { toast } from 'sonner';
+import { z } from 'zod';
+export const Route = createFileRoute('/auth_/verify-email')({
+    validateSearch: z.object({
+        token: z.string().optional(),
+    }),
+    component: VerifyEmailPage,
+    beforeLoad: ({ search: { token } }) => {
+        if (!token) {
+            throw redirect({ to: '/' });
+        }
+    },
+});
+const verifyEmailMutation = graphql(`
+  mutation VerifyEmail($input: VerifyEmailInput!) {
+    verifyEmail(input: $input) {
+      success
+    }
+  }
+`);
+const requestEmailVerificationMutation = graphql(`
+  mutation RequestEmailVerification {
+    requestEmailVerification {
+      success
+    }
+  }
+`);
+function VerifyEmailPage() {
+    const { token } = Route.useSearch();
+    const { userId } = Route.useRouteContext();
+    const navigate = useNavigate();
+    const [status, setStatus] = useState(userId ? 'verifying' : 'idle');
+    const [verifyEmail] = useMutation(verifyEmailMutation);
+    const [requestVerification, { loading: resending }] = useMutation(requestEmailVerificationMutation);
+    const doVerify = useCallback(() => {
+        if (!token)
+            return;
+        setStatus('verifying');
+        verifyEmail({
+            variables: { input: { token } },
+        })
+            .then(() => {
+            setStatus('success');
+        })
+            .catch((err) => {
+            const errorCode = getApolloErrorCode(err, [
+                'invalid-token',
+                'token-expired',
+            ]);
+            switch (errorCode) {
+                case 'invalid-token':
+                case 'token-expired': {
+                    setStatus('error');
+                    break;
+                }
+                default: {
+                    toast.error(logAndFormatError(err, 'Sorry, we could not verify your email.'));
+                    setStatus('error');
+                }
+            }
+        });
+    }, [token, verifyEmail]);
+    // If logged in, auto-verify on mount
+    useEffect(() => {
+        if (userId && token) {
+            doVerify();
+        }
+    }, [userId, token, doVerify]);
+    const handleResend = () => {
+        requestVerification()
+            .then(() => {
+            toast.success('Verification email sent! Check your inbox.');
+        })
+            .catch((err) => {
+            toast.error(logAndFormatError(err, 'Could not resend verification email.'));
+        });
+    };
+    // Verifying state
+    if (status === 'verifying') {
+        return (_jsx(Card, { children: _jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Verifying..." }), _jsx(CardDescription, { children: "Please wait while we verify your email address." })] }) }));
+    }
+    // Success state
+    if (status === 'success') {
+        return (_jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Email Verified!" }), _jsx(CardDescription, { children: "Your email address has been successfully verified." })] }), _jsx(CardContent, { children: _jsx(Button, { variant: "secondary", className: "w-full", onClick: () => {
+                            navigate({ to: '/' }).catch(logError);
+                        }, children: "Continue" }) })] }));
+    }
+    // Error state
+    if (status === 'error') {
+        return (_jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Invalid or Expired Link" }), _jsx(CardDescription, { children: "This verification link is invalid or has expired." })] }), _jsx(CardContent, { children: _jsx("div", { className: "flex flex-col gap-3", children: userId ? (_jsx(Button, { variant: "secondary", className: "w-full", disabled: resending, onClick: handleResend, children: "Resend Verification Email" })) : (_jsx(Button, { variant: "secondary", className: "w-full", onClick: () => {
+                                navigate({ to: '/auth/login' }).catch(logError);
+                            }, children: "Log In to Resend" })) }) })] }));
+    }
+    // Idle state (not logged in) — show button to verify
+    return (_jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { children: "Verify your email" }), _jsx(CardDescription, { children: "Click the button below to verify your email address." })] }), _jsx(CardContent, { children: _jsx(Button, { className: "w-full", onClick: doVerify, children: "Verify Email" }) })] }));
+}
+//# sourceMappingURL=verify-email.js.map

package/dist/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-email.js","sourceRoot":"","sources":["../../../../../../../../src/local-auth/core/generators/auth-routes/templates/routes/auth_/verify-email.tsx"],"names":[],"mappings":";AAAA,cAAc;AAEd,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EACL,MAAM,EACN,IAAI,EACJ,WAAW,EACX,eAAe,EACf,UAAU,EACV,SAAS,GACV,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,KAAK,GAAG,eAAe,CAAC,qBAAqB,CAAC,CAAC;IAC1D,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,SAAS,EAAE,eAAe;IAC1B,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,OAAO,CAAC;;;;;;CAMnC,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,OAAO,CAAC;;;;;;CAMhD,CAAC,CAAC;AAIH,SAAS,eAAe;IACtB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IACpC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAClC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAC9B,CAAC;IAEF,MAAM,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACvD,MAAM,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,WAAW,CAC/D,gCAAgC,CACjC,CAAC;IAEF,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAS,EAAE;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,SAAS,CAAC,WAAW,CAAC,CAAC;QACvB,WAAW,CAAC;YACV,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE;SAChC,CAAC;aACC,IAAI,CAAC,GAAG,EAAE;YACT,SAAS,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,EAAE;gBACxC,eAAe;gBACf,eAAe;aACP,CAAC,CAAC;YACZ,QAAQ,SAAS,EAAE,CAAC;gBAClB,KAAK,eAAe,CAAC;gBACrB,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,SAAS,CAAC,OAAO,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,KAAK,CAAC,KAAK,CACT,iBAAiB,CAAC,GAAG,EAAE,wCAAwC,CAAC,CACjE,CAAC;oBACF,SAAS,CAAC,OAAO,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IAEzB,qCAAqC;IACrC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE9B,MAAM,YAAY,GAAG,GAAS,EAAE;QAC9B,mBAAmB,EAAE;aAClB,IAAI,CAAC,GAAG,EAAE;YACT,KAAK,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;QAC9D,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,KAAK,CAAC,KAAK,CACT,iBAAiB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAC/D,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,kBAAkB;IAClB,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO,CACL,KAAC,IAAI,cACH,MAAC,UAAU,eACT,KAAC,SAAS,+BAAyB,EACnC,KAAC,eAAe,kEAEE,IACP,GACR,CACR,CAAC;IACJ,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CACL,MAAC,IAAI,eACH,MAAC,UAAU,eACT,KAAC,SAAS,kCAA4B,EACtC,KAAC,eAAe,qEAEE,IACP,EACb,KAAC,WAAW,cACV,KAAC,MAAM,IACL,OAAO,EAAC,WAAW,EACnB,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE;4BACZ,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBACxC,CAAC,yBAGM,GACG,IACT,CACR,CAAC;IACJ,CAAC;IAED,cAAc;IACd,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,CACL,MAAC,IAAI,eACH,MAAC,UAAU,eACT,KAAC,SAAS,0CAAoC,EAC9C,KAAC,eAAe,oEAEE,IACP,EACb,KAAC,WAAW,cACV,cAAK,SAAS,EAAC,qBAAqB,YACjC,MAAM,CAAC,CAAC,CAAC,CACR,KAAC,MAAM,IACL,OAAO,EAAC,WAAW,EACnB,SAAS,EAAC,QAAQ,EAClB,QAAQ,EAAE,SAAS,EACnB,OAAO,EAAE,YAAY,0CAGd,CACV,CAAC,CAAC,CAAC,CACF,KAAC,MAAM,IACL,OAAO,EAAC,WAAW,EACnB,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE;gCACZ,QAAQ,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;4BAClD,CAAC,iCAGM,CACV,GACG,GACM,IACT,CACR,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,OAAO,CACL,MAAC,IAAI,eACH,MAAC,UAAU,eACT,KAAC,SAAS,oCAA8B,EACxC,KAAC,eAAe,uEAEE,IACP,EACb,KAAC,WAAW,cACV,KAAC,MAAM,IAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,QAAQ,6BAEnC,GACG,IACT,CACR,CAAC;AACJ,CAAC"}