@frequencyads/auth 0.1.0

package/dist/components/verify-code.js

@@ -0,0 +1,155 @@
+'use client';
+"use strict";
+"use client";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/components/verify-code.tsx
+var verify_code_exports = {};
+__export(verify_code_exports, {
+  VerifyCodeForm: () => VerifyCodeForm
+});
+module.exports = __toCommonJS(verify_code_exports);
+var import_react = require("react");
+var import_core = require("@mantine/core");
+var import_client = require("@frequencyads/db/client");
+var import_jsx_runtime = require("react/jsx-runtime");
+function VerifyCodeForm({
+  email,
+  type,
+  onSuccess,
+  onResend,
+  onBack,
+  backLabel = "Back to sign in",
+  header
+}) {
+  const [code, setCode] = (0, import_react.useState)("");
+  const [error, setError] = (0, import_react.useState)(null);
+  const [loading, setLoading] = (0, import_react.useState)(false);
+  const [verified, setVerified] = (0, import_react.useState)(false);
+  const [resendCooldown, setResendCooldown] = (0, import_react.useState)(0);
+  (0, import_react.useEffect)(() => {
+    if (resendCooldown <= 0) return;
+    const timer = setTimeout(() => setResendCooldown((c) => c - 1), 1e3);
+    return () => clearTimeout(timer);
+  }, [resendCooldown]);
+  const handleVerify = (0, import_react.useCallback)(
+    async (value) => {
+      if (value.length !== 6) return;
+      setError(null);
+      setLoading(true);
+      try {
+        const supabase = (0, import_client.createBrowserClient)();
+        const { error: verifyError } = await supabase.auth.verifyOtp({
+          email,
+          token: value,
+          type
+        });
+        if (verifyError) {
+          setError("This code is invalid or has expired. Please request a new one.");
+          setCode("");
+        } else {
+          setVerified(true);
+          onSuccess();
+        }
+      } finally {
+        setLoading(false);
+      }
+    },
+    [email, type, onSuccess]
+  );
+  const [resending, setResending] = (0, import_react.useState)(false);
+  const handleResend = async () => {
+    setError(null);
+    setResending(true);
+    try {
+      const result = await onResend();
+      if (result.error) {
+        setError(result.error);
+      } else {
+        setResendCooldown(60);
+      }
+    } finally {
+      setResending(false);
+    }
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_core.Box, { w: "100%", maw: 460, children: [
+    header && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_core.Box, { mb: "lg", style: { textAlign: "center" }, children: header }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_core.Title, { order: 3, fw: 600, mb: "xs", c: "gray.7", children: type === "email" ? "Verify your email" : "Enter reset code" }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_core.Text, { size: "sm", c: "gray.6", mb: "lg", children: [
+      "We sent a 6-digit code to ",
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: email })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_core.Stack, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        import_core.PinInput,
+        {
+          length: 6,
+          type: "number",
+          oneTimeCode: true,
+          autoFocus: true,
+          size: "lg",
+          value: code,
+          onChange: (value) => {
+            setCode(value);
+            if (value.length > 0) setError(null);
+          },
+          onComplete: handleVerify,
+          error: !!error,
+          disabled: loading || verified,
+          styles: { input: { fontWeight: 600, fontSize: 20 } }
+        }
+      ),
+      error && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_core.Text, { size: "sm", c: "red", children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        import_core.Button,
+        {
+          fullWidth: true,
+          size: "md",
+          loading: loading || verified,
+          onClick: () => handleVerify(code),
+          children: "Verify"
+        }
+      ),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_core.Text, { size: "sm", c: "gray.6", ta: "center", children: [
+        "Didn't receive the code?",
+        " ",
+        resendCooldown > 0 ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_core.Text, { span: true, c: "gray.5", children: [
+          "Resend in ",
+          resendCooldown,
+          "s"
+        ] }) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+          import_core.Anchor,
+          {
+            component: "button",
+            type: "button",
+            size: "sm",
+            onClick: handleResend,
+            disabled: resending,
+            children: resending ? "Sending\u2026" : "Resend code"
+          }
+        )
+      ] }),
+      onBack && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_core.Anchor, { component: "button", type: "button", size: "sm", onClick: onBack, ta: "center", children: backLabel })
+    ] })
+  ] });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  VerifyCodeForm
+});

package/dist/components/verify-code.mjs

@@ -0,0 +1,9 @@
+'use client';
+"use client";
+import {
+  VerifyCodeForm
+} from "../chunk-OKP757OV.mjs";
+import "../chunk-NS2JRZGO.mjs";
+export {
+  VerifyCodeForm
+};

package/dist/index.d.mts

@@ -0,0 +1,44 @@
+import * as _supabase_supabase_js from '@supabase/supabase-js';
+import { NextRequest, NextResponse } from 'next/server';
+export { AuthProvider, AuthProviderProps, UserProfile, useAuth } from './components/auth-provider.mjs';
+export { LoginPage } from './components/login.mjs';
+export { SignOutButton, getSignOutUrl } from './components/sign-out-button.mjs';
+export { UserMenu } from './components/user-menu.mjs';
+export { VerifyCodeForm } from './components/verify-code.mjs';
+export { ResetPasswordForm } from './components/reset-password.mjs';
+import 'react/jsx-runtime';
+import 'react';
+import '@mantine/core';
+
+declare function updateSession(request: NextRequest): Promise<{
+    supabaseResponse: NextResponse<unknown>;
+    claims: _supabase_supabase_js.JwtPayload | null;
+}>;
+
+type AccessLevel = 'org-member' | 'employee';
+interface AuthMiddlewareOptions {
+    /** Required access level for this app. */
+    access: AccessLevel;
+}
+/**
+ * Create a Next.js middleware that gates access based on org membership or employee role.
+ *
+ * - Unauthenticated users are redirected to account.frequency.media/login
+ * - Authenticated users without the required access level are redirected to
+ *   account.frequency.media with an access_denied error
+ *
+ * @example
+ * // middleware.ts (private app — org members only)
+ * export const middleware = createAuthMiddleware({ access: 'org-member' });
+ *
+ * @example
+ * // middleware.ts (internal app — employees only)
+ * export const middleware = createAuthMiddleware({ access: 'employee' });
+ */
+declare function createAuthMiddleware({ access }: AuthMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
+/** Default matcher config for use in consuming apps. */
+declare const defaultMatcher: {
+    matcher: string[];
+};
+
+export { createAuthMiddleware, defaultMatcher, updateSession };

package/dist/index.d.ts

@@ -0,0 +1,44 @@
+import * as _supabase_supabase_js from '@supabase/supabase-js';
+import { NextRequest, NextResponse } from 'next/server';
+export { AuthProvider, AuthProviderProps, UserProfile, useAuth } from './components/auth-provider.js';
+export { LoginPage } from './components/login.js';
+export { SignOutButton, getSignOutUrl } from './components/sign-out-button.js';
+export { UserMenu } from './components/user-menu.js';
+export { VerifyCodeForm } from './components/verify-code.js';
+export { ResetPasswordForm } from './components/reset-password.js';
+import 'react/jsx-runtime';
+import 'react';
+import '@mantine/core';
+
+declare function updateSession(request: NextRequest): Promise<{
+    supabaseResponse: NextResponse<unknown>;
+    claims: _supabase_supabase_js.JwtPayload | null;
+}>;
+
+type AccessLevel = 'org-member' | 'employee';
+interface AuthMiddlewareOptions {
+    /** Required access level for this app. */
+    access: AccessLevel;
+}
+/**
+ * Create a Next.js middleware that gates access based on org membership or employee role.
+ *
+ * - Unauthenticated users are redirected to account.frequency.media/login
+ * - Authenticated users without the required access level are redirected to
+ *   account.frequency.media with an access_denied error
+ *
+ * @example
+ * // middleware.ts (private app — org members only)
+ * export const middleware = createAuthMiddleware({ access: 'org-member' });
+ *
+ * @example
+ * // middleware.ts (internal app — employees only)
+ * export const middleware = createAuthMiddleware({ access: 'employee' });
+ */
+declare function createAuthMiddleware({ access }: AuthMiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
+/** Default matcher config for use in consuming apps. */
+declare const defaultMatcher: {
+    matcher: string[];
+};
+
+export { createAuthMiddleware, defaultMatcher, updateSession };