@lastbrain/module-auth 2.0.19 → 2.0.31

package/dist/web/auth/reglage.js

@@ -3,7 +3,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useState } from "react";
 import { Card, CardBody, CardHeader, Switch, Button, Spinner, Divider, Select, SelectItem, addToast, } from "@lastbrain/ui";
 import { Settings, Save } from "lucide-react";
-import { useModuleTranslation } from "@lastbrain/core";
+import { logger, useModuleTranslation } from "@lastbrain/core";
 export function ReglagePage() {
     const t = useModuleTranslation("auth");
     const [preferences, setPreferences] = useState({
@@ -22,7 +22,9 @@ export function ReglagePage() {
     const fetchSettings = async () => {
         try {
             setIsLoading(true);
-            const response = await fetch("/api/auth/profile");
+            const response = await fetch("/api/auth/profile", {
+                credentials: "include",
+            });
             if (!response.ok) {
                 throw new Error("Failed to fetch settings");
             }
@@ -38,10 +40,10 @@ export function ReglagePage() {
             }
         }
         catch (err) {
-            console.error("Error loading settings:", err);
+            logger.error("Error loading settings:", err);
             addToast({
-                title: "Error",
-                description: "Failed to load settings",
+                title: t("settings.load_error_title") || "Error",
+                description: t("settings.load_error_description") || "Failed to load settings",
                 color: "danger",
             });
         }
@@ -57,6 +59,7 @@ export function ReglagePage() {
                 headers: {
                     "Content-Type": "application/json",
                 },
+                credentials: "include",
                 body: JSON.stringify({
                     language: preferences.language,
                     timezone: preferences.timezone,
@@ -76,9 +79,11 @@ export function ReglagePage() {
                 description: t("settings.updated") || "Settings updated successfully",
                 color: "success",
             });
+            // Si la langue a été modifiée, attendre la confirmation du serveur
+            // (localeUpdated) avant de forcer le reload complet.
         }
         catch (err) {
-            console.error("Error updating settings:", err);
+            logger.error("Error updating settings:", err);
             addToast({
                 title: t("settings.error") || "Error",
                 description: t("settings.update_failed") || "Failed to update settings",
@@ -98,8 +103,10 @@ export function ReglagePage() {
     if (isLoading) {
         return (_jsx("div", { className: "flex justify-center items-center min-h-[400px]", children: _jsx(Spinner, { size: "lg", label: t("settings.loading") || "Loading settings..." }) }));
     }
-    return (_jsxs("div", { className: "pt-12 pb-12 max-w-4xl mx-auto px-4", children: [_jsxs("div", { className: "flex items-center gap-2 mb-8", children: [_jsx(Settings, { className: "w-8 h-8" }), _jsx("h1", { className: "text-3xl font-bold", children: t("settings.account") || "Account Settings" })] }), _jsxs("div", { className: "space-y-6", children: [_jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-lg font-semibold", children: t("settings.notifications") || "Notifications" }) }), _jsx(Divider, {}), _jsx(CardBody, { children: _jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "flex justify-between items-center", children: [_jsxs("div", { children: [_jsx("p", { className: "font-medium", children: t("settings.email_notifications") || "Email Notifications" }), _jsx("p", { className: "text-small text-default-500", children: t("settings.email_notifications_desc") ||
+    return (_jsxs("div", { className: "md:pt-12 pb-12 max-w-2xl mx-auto md:px-4", children: [_jsxs("div", { className: "flex items-center gap-2 mb-8", children: [_jsx(Settings, { className: "w-8 h-8" }), _jsx("h1", { className: "text-3xl font-bold", children: t("settings.account") || "Account Settings" })] }), _jsxs("div", { className: "space-y-6", children: [_jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-lg font-semibold", children: t("settings.notifications") || "Notifications" }) }), _jsx(Divider, {}), _jsx(CardBody, { children: _jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "flex justify-between items-center", children: [_jsxs("div", { children: [_jsx("p", { className: "font-medium", children: t("settings.email_notifications") || "Email Notifications" }), _jsx("p", { className: "text-small text-default-500", children: t("settings.email_notifications_desc") ||
                                                                 "Receive email notifications for important updates" })] }), _jsx(Switch, { isSelected: preferences.email_notifications, onValueChange: (value) => handleToggle("email_notifications", value) })] }), _jsx(Divider, {}), _jsxs("div", { className: "flex justify-between items-center", children: [_jsxs("div", { children: [_jsx("p", { className: "font-medium", children: t("settings.push_notifications") || "Push Notifications" }), _jsx("p", { className: "text-small text-default-500", children: t("settings.push_notifications_desc") ||
                                                                 "Receive push notifications in your browser" })] }), _jsx(Switch, { isSelected: preferences.push_notifications, onValueChange: (value) => handleToggle("push_notifications", value) })] }), _jsx(Divider, {}), _jsxs("div", { className: "flex justify-between items-center", children: [_jsxs("div", { children: [_jsx("p", { className: "font-medium", children: t("settings.marketing_emails") || "Marketing Emails" }), _jsx("p", { className: "text-small text-default-500", children: t("settings.marketing_emails_desc") ||
-                                                                "Receive emails about new features and updates" })] }), _jsx(Switch, { isSelected: preferences.marketing_emails, onValueChange: (value) => handleToggle("marketing_emails", value) })] })] }) })] }), _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-lg font-semibold", children: t("settings.appearance") || "Appearance" }) }), _jsx(Divider, {}), _jsx(CardBody, { children: _jsxs(Select, { label: t("settings.theme") || "Theme", placeholder: t("settings.select_theme") || "Select a theme", selectedKeys: preferences.theme ? [preferences.theme] : [], onChange: (e) => handleSelect("theme", e.target.value), children: [_jsx(SelectItem, { children: t("settings.light") || "Light" }, "light"), _jsx(SelectItem, { children: t("settings.dark") || "Dark" }, "dark"), _jsx(SelectItem, { children: t("settings.system") || "System" }, "system")] }) })] }), _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-lg font-semibold", children: "Language & Region" }) }), _jsx(Divider, {}), _jsx(CardBody, { children: _jsxs("div", { className: "grid gap-4 md:grid-cols-2", children: [_jsxs(Select, { label: "Language", placeholder: "Select a language", selectedKeys: preferences.language ? [preferences.language] : [], onChange: (e) => handleSelect("language", e.target.value), children: [_jsx(SelectItem, { children: "English" }, "en"), _jsx(SelectItem, { children: "Fran\u00E7ais" }, "fr"), _jsx(SelectItem, { children: "Espa\u00F1ol" }, "es"), _jsx(SelectItem, { children: "Deutsch" }, "de")] }), _jsxs(Select, { label: "Timezone", placeholder: "Select a timezone", selectedKeys: preferences.timezone ? [preferences.timezone] : [], onChange: (e) => handleSelect("timezone", e.target.value), children: [_jsx(SelectItem, { children: "UTC" }, "UTC"), _jsx(SelectItem, { children: "Europe/Paris" }, "Europe/Paris"), _jsx(SelectItem, { children: "America/New_York" }, "America/New_York"), _jsx(SelectItem, { children: "America/Los_Angeles" }, "America/Los_Angeles"), _jsx(SelectItem, { children: "Asia/Tokyo" }, "Asia/Tokyo")] })] }) })] }), _jsxs("div", { className: "flex justify-end gap-3", children: [_jsx(Button, { type: "button", variant: "flat", onPress: () => fetchSettings(), isDisabled: isSaving, children: "Reset" }), _jsx(Button, { type: "button", color: "primary", isLoading: isSaving, onPress: handleSave, startContent: !isSaving && _jsx(Save, { className: "w-4 h-4" }), children: isSaving ? "Saving..." : "Save Settings" })] })] })] }));
+                                                                "Receive emails about new features and updates" })] }), _jsx(Switch, { isSelected: preferences.marketing_emails, onValueChange: (value) => handleToggle("marketing_emails", value) })] })] }) })] }), _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-lg font-semibold", children: t("settings.appearance") || "Appearance" }) }), _jsx(Divider, {}), _jsx(CardBody, { children: _jsxs(Select, { label: t("settings.theme") || "Theme", placeholder: t("settings.select_theme") || "Select a theme", selectedKeys: preferences.theme ? [preferences.theme] : [], onChange: (e) => handleSelect("theme", e.target.value), children: [_jsx(SelectItem, { children: t("settings.light") || "Light" }, "light"), _jsx(SelectItem, { children: t("settings.dark") || "Dark" }, "dark"), _jsx(SelectItem, { children: t("settings.system") || "System" }, "system")] }) })] }), _jsxs(Card, { children: [_jsx(CardHeader, { children: _jsx("h3", { className: "text-lg font-semibold", children: t("settings.language_region") || "Language & Region" }) }), _jsx(Divider, {}), _jsx(CardBody, { children: _jsxs("div", { className: "grid gap-4 md:grid-cols-2", children: [_jsxs(Select, { label: t("settings.language") || "Language", placeholder: t("settings.language_placeholder") || "Select a language", selectedKeys: preferences.language ? [preferences.language] : [], onChange: (e) => handleSelect("language", e.target.value), children: [_jsx(SelectItem, { children: t("settings.lang_en") || "English" }, "en"), _jsx(SelectItem, { children: t("settings.lang_fr") || "Français" }, "fr"), _jsx(SelectItem, { children: t("settings.lang_es") || "Español" }, "es"), _jsx(SelectItem, { children: t("settings.lang_de") || "Deutsch" }, "de")] }), _jsxs(Select, { label: t("settings.timezone") || "Timezone", placeholder: t("settings.timezone_placeholder") || "Select a timezone", selectedKeys: preferences.timezone ? [preferences.timezone] : [], onChange: (e) => handleSelect("timezone", e.target.value), children: [_jsx(SelectItem, { children: t("settings.tz_utc") || "UTC" }, "UTC"), _jsx(SelectItem, { children: t("settings.tz_paris") || "Europe/Paris" }, "Europe/Paris"), _jsx(SelectItem, { children: t("settings.tz_ny") || "America/New_York" }, "America/New_York"), _jsx(SelectItem, { children: t("settings.tz_la") || "America/Los_Angeles" }, "America/Los_Angeles"), _jsx(SelectItem, { children: t("settings.tz_tokyo") || "Asia/Tokyo" }, "Asia/Tokyo")] })] }) })] }), _jsxs("div", { className: "flex justify-center gap-3", children: [_jsx(Button, { type: "button", variant: "flat", onPress: () => fetchSettings(), isDisabled: isSaving, children: t("settings.reset") || "Reset" }), _jsx(Button, { type: "button", color: "primary", isLoading: isSaving, onPress: handleSave, startContent: !isSaving && _jsx(Save, { className: "w-4 h-4" }), children: isSaving
+                                    ? t("settings.saving") || "Saving..."
+                                    : t("settings.save_button") || "Save Settings" })] })] })] }));
 }

package/dist/web/public/ResetPassword.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResetPassword.d.ts","sourceRoot":"","sources":["../../../src/web/public/ResetPassword.tsx"],"names":[],"mappings":"AAAA,wBAAgB,aAAa,4CAE5B"}
+{"version":3,"file":"ResetPassword.d.ts","sourceRoot":"","sources":["../../../src/web/public/ResetPassword.tsx"],"names":[],"mappings":"AAaA,wBAAgB,aAAa,4CAiS5B"}

package/dist/web/public/ResetPassword.js

@@ -1,4 +1,174 @@
-import { jsx as _jsx } from "react/jsx-runtime";
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useState } from "react";
+import { Alert, Button, Card, CardBody, Input, addToast } from "@lastbrain/ui";
+import { Mail, ArrowRight, Lock } from "lucide-react";
+import { useModuleTranslation, useLocalizedRouter, useLanguage, logger, supabaseBrowserClient, } from "@lastbrain/core";
 export function ResetPassword() {
-    return _jsx("div", { children: "Reset Password Page" });
+    const t = useModuleTranslation("auth");
+    const router = useLocalizedRouter();
+    const { lang } = useLanguage();
+    const [email, setEmail] = useState("");
+    const [loading, setLoading] = useState(false);
+    const [success, setSuccess] = useState(null);
+    const [hasToken, setHasToken] = useState(false);
+    const [newPassword, setNewPassword] = useState("");
+    const [confirmPassword, setConfirmPassword] = useState("");
+    const [expiredMessage, setExpiredMessage] = useState(null);
+    // Detect access_token in hash (Supabase recovery link) and set session
+    useEffect(() => {
+        logger.debug("[ResetPassword] checking for tokens in URL hash");
+        const hash = window.location.hash.replace(/^#/, "");
+        if (!hash)
+            return;
+        const hasLangPrefix = /^\/[a-z]{2}(?:\/|$)/.test(window.location.pathname);
+        if (!hasLangPrefix) {
+            const preferredLang = lang || "fr";
+            const pathWithLang = window.location.pathname.startsWith("/")
+                ? window.location.pathname
+                : `/${window.location.pathname}`;
+            const target = `/${preferredLang}${pathWithLang}${window.location.search || ""}${window.location.hash || ""}`;
+            window.location.replace(target);
+            return;
+        }
+        const params = new URLSearchParams(hash);
+        const error = params.get("error");
+        const errorDescription = params.get("error_description");
+        if (error) {
+            const message = errorDescription ||
+                t("reset_password.link_expired") ||
+                "Lien invalide ou expiré, demandez un nouveau lien.";
+            setExpiredMessage(message);
+            logger.warn("Reset password link error", {
+                error,
+                description: errorDescription,
+            });
+            console.warn("Reset password magic link error", {
+                error,
+                errorDescription,
+            });
+            addToast({
+                title: t("reset_password.error") || "Erreur",
+                description: message,
+                color: "warning",
+            });
+            window.history.replaceState({}, document.title, window.location.pathname + window.location.search);
+            return;
+        }
+        const access_token = params.get("access_token");
+        const refresh_token = params.get("refresh_token");
+        if (access_token && refresh_token) {
+            supabaseBrowserClient.auth
+                .setSession({ access_token, refresh_token })
+                .then(async ({ error }) => {
+                if (error) {
+                    addToast({
+                        title: t("reset_password.error") || "Erreur",
+                        description: error.message,
+                        color: "danger",
+                    });
+                    return;
+                }
+                try {
+                    const setSessionRes = await fetch("/api/public/set-session", {
+                        method: "POST",
+                        headers: { "Content-Type": "application/json" },
+                        body: JSON.stringify({ access_token, refresh_token }),
+                    });
+                    if (!setSessionRes.ok) {
+                        const setSessionBody = await setSessionRes
+                            .json()
+                            .catch(() => null);
+                        logger.info("Failed to persist session cookies", setSessionBody);
+                    }
+                }
+                catch (err) {
+                    logger.info("set-session call failed", err);
+                }
+                setHasToken(true);
+                // Clear hash to avoid leaking tokens
+                window.history.replaceState({}, document.title, window.location.pathname + window.location.search);
+            });
+        }
+    }, [t, lang]);
+    const handleRequestLink = async (e) => {
+        e.preventDefault();
+        setSuccess(null);
+        setLoading(true);
+        try {
+            const response = await fetch("/api/public/reset-password", {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({ email }),
+            });
+            const data = await response.json();
+            if (!response.ok) {
+                throw new Error(data.error || "Erreur lors de l'envoi du lien");
+            }
+            setSuccess(t("reset_password.success") ||
+                "Vérifiez votre email pour le lien de réinitialisation");
+        }
+        catch (error) {
+            addToast({
+                title: t("reset_password.error") || "Erreur",
+                description: error?.message ||
+                    t("reset_password.error") ||
+                    "Impossible d'envoyer le lien de réinitialisation",
+                color: "danger",
+            });
+        }
+        finally {
+            setLoading(false);
+        }
+    };
+    const handleUpdatePassword = async (e) => {
+        e.preventDefault();
+        if (newPassword.length < 6) {
+            addToast({
+                title: t("reset_password.error") || "Erreur",
+                description: t("signup.password_too_short") || "Mot de passe trop court",
+                color: "warning",
+            });
+            return;
+        }
+        if (newPassword !== confirmPassword) {
+            addToast({
+                title: t("reset_password.error") || "Erreur",
+                description: t("signup.password_mismatch") ||
+                    "Les mots de passe ne correspondent pas.",
+                color: "warning",
+            });
+            return;
+        }
+        setLoading(true);
+        try {
+            const { error } = await supabaseBrowserClient.auth.updateUser({
+                password: newPassword,
+            });
+            if (error)
+                throw error;
+            addToast({
+                title: t("reset_password.success") || "Succès",
+                description: t("profile.security_reset_desc") || "Mot de passe mis à jour",
+                color: "success",
+            });
+            setTimeout(() => router.push("/auth/dashboard"), 1200);
+        }
+        catch (err) {
+            addToast({
+                title: t("reset_password.error") || "Erreur",
+                description: err?.message || "Impossible de mettre à jour le mot de passe",
+                color: "danger",
+            });
+        }
+        finally {
+            setLoading(false);
+        }
+    };
+    return (_jsx("div", { className: "min-h-[40vh] flex items-center justify-center px-4 py-16 mt-16 ", children: _jsxs("div", { className: "w-full max-w-md", children: [_jsxs("div", { className: "text-center mb-8", children: [_jsx("h1", { className: "text-3xl font-bold mb-2", children: t("reset_password.title") || "Réinitialiser le mot de passe" }), _jsx("p", { className: "text-default-600 dark:text-default-500", children: t("reset_password.subtitle") ||
+                                "Entrez votre email pour recevoir un lien" })] }), _jsx(Card, { className: "", children: _jsxs(CardBody, { className: "p-6 space-y-6", children: [expiredMessage && (_jsx(Alert, { color: "warning", title: t("reset_password.link_expired_title") || "Lien expiré", className: "text-sm font-semibold", children: expiredMessage })), hasToken ? (_jsxs("form", { onSubmit: handleUpdatePassword, className: "space-y-4", children: [_jsx(Input, { label: t("signup.password") || "Nouveau mot de passe", type: "password", value: newPassword, onChange: (e) => setNewPassword(e.target.value), startContent: _jsx(Lock, { className: "w-4 h-4 text-default-400" }), isRequired: true }), _jsx(Input, { label: t("signup.confirm_password") || "Confirmer", type: "password", value: confirmPassword, onChange: (e) => setConfirmPassword(e.target.value), startContent: _jsx(Lock, { className: "w-4 h-4 text-default-400" }), isRequired: true }), _jsx(Button, { type: "submit", color: "primary", isLoading: loading, endContent: !loading && _jsx(ArrowRight, { className: "w-4 h-4" }), className: "w-full", children: t("reset_password.submit") ||
+                                            "Mettre à jour le mot de passe" })] })) : success ? (_jsx("div", { className: "text-center text-success font-semibold", children: success })) : (_jsxs("form", { onSubmit: handleRequestLink, className: "space-y-6", children: [_jsx(Input, { label: t("reset_password.title") || "Réinitialiser le mot de passe", placeholder: t("reset_password.email_placeholder") || "votre@email.com", type: "email", value: email, onChange: (e) => setEmail(e.target.value), startContent: _jsx(Mail, { className: "w-4 h-4 text-default-400" }), isRequired: true }), _jsx(Button, { type: "submit", color: "primary", isLoading: loading, endContent: !loading && _jsx(ArrowRight, { className: "w-4 h-4" }), className: "w-full", children: t("reset_password.submit") || "Envoyer le lien" }), _jsx(Button, { type: "button", variant: "flat", onPress: () => router.push("/signin"), className: "w-full", children: t("reset_password.back_to_signin") ||
+                                            "Retour à la connexion" })] }))] }) })] }) }));
 }

package/dist/web/public/SignInPage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInPage.d.ts","sourceRoot":"","sources":["../../../src/web/public/SignInPage.tsx"],"names":[],"mappings":"AAiNA,wBAAgB,UAAU,4CAMzB"}
+{"version":3,"file":"SignInPage.d.ts","sourceRoot":"","sources":["../../../src/web/public/SignInPage.tsx"],"names":[],"mappings":"AAyPA,wBAAgB,UAAU,4CAMzB"}

package/dist/web/public/SignInPage.js

@@ -34,6 +34,42 @@ function SignInForm() {
                 return;
             }
             setIsLoading(false);
+            // Si le compte est suspendu, afficher un toast et déconnecter l'utilisateur
+            const isSuspended = data?.user?.app_metadata?.suspended ??
+                data?.user?.raw_app_meta_data?.suspended ??
+                false;
+            if (isSuspended) {
+                addToast({
+                    color: "danger",
+                    title: t("signin.suspended_title") || "Compte suspendu",
+                    description: t("signin.suspended_message") ||
+                        "Votre compte a été suspendu. Contactez l'administrateur.",
+                });
+                try {
+                    await supabaseBrowserClient.auth.signOut();
+                }
+                catch (e) {
+                    // ignore
+                }
+                return;
+            }
+            // Appeler l'endpoint serveur pour synchroniser le cookie `NEXT_LOCALE`.
+            // L'endpoint mettra à jour le cookie seulement s'il existe côté client
+            // (ex: cookie HttpOnly envoyé avec la requête).
+            // try {
+            //   const res = await fetch("/api/auth/sync-locale", {
+            //     method: "POST",
+            //     credentials: "include",
+            //     headers: { "Content-Type": "application/json" },
+            //     body: JSON.stringify({ userId: data.user?.id }),
+            //   });
+            //   // Wait for body to be consumed so the Set-Cookie is processed by the browser
+            //   if (res && res.body) {
+            //     await res.text().catch(() => null);
+            //   }
+            // } catch (e) {
+            //   console.debug("signin: sync-locale request failed", e);
+            // }
             addToast({
                 color: "success",
                 title: t("signin.success_title") || "Connecté avec succès !",
@@ -50,14 +86,14 @@ function SignInForm() {
             });
         }
     };
-    return (_jsxs("div", { className: "relative min-h-screen w-full overflow-hidden bg-gradient-to-br from-primary-50/30 to-secondary-50/30 dark:from-primary-950/50 dark:to-secondary-950/50", children: [_jsx("div", { className: "absolute inset-0 bg-grid-slate-100 dark:bg-grid-slate-800/20 mask-[linear-gradient(0deg,white,rgba(255,255,255,0.6))] dark:mask-[linear-gradient(0deg,rgba(255,255,255,0.1),rgba(255,255,255,0.05))]" }), _jsx("div", { className: "relative flex min-h-[60vh] items-center justify-center px-4 py-12", children: _jsxs("div", { className: "w-full max-w-md", children: [_jsxs("div", { className: "mb-8 text-center", children: [_jsx(Chip, { color: "primary", variant: "flat", startContent: _jsx(Sparkles, { className: "w-4 h-4" }), className: "mb-4 p-2", children: t("signin.chip_label") || "Espace membre" }), _jsx("h1", { className: "mb-3 text-4xl font-bold", children: _jsx("span", { className: "bg-gradient-to-r from-primary-600 to-secondary-600 bg-clip-text text-transparent", children: t("signin.title") || "Bon retour" }) }), _jsx("p", { className: "text-default-600 dark:text-default-700", children: t("signin.subtitle") ||
-                                        "Connectez-vous pour accéder à votre espace" })] }), _jsx(Card, { className: "border border-default-200/60 bg-background/60 backdrop-blur-md backdrop-saturate-150 shadow-xl", children: _jsxs(CardBody, { className: "gap-6 p-8", children: [_jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col gap-6", children: [_jsx(Input, { label: t("email") || "Email", type: "email", placeholder: t("signin.email_placeholder") || "votre@email.com", value: email, onChange: (e) => setEmail(e.target.value), required: true, startContent: _jsx(Mail, { className: "h-4 w-4 text-default-400" }), classNames: {
+    return (_jsxs("div", { className: "pt-16 relative min-h-screen w-full overflow-hidden bg-gradient-to-br from-primary-50/30 to-secondary-50/30 dark:from-primary-950/50 dark:to-secondary-950/50", children: [_jsx("div", { className: "absolute inset-0 bg-grid-slate-100 dark:bg-grid-slate-800/20 mask-[linear-gradient(0deg,white,rgba(255,255,255,0.6))] dark:mask-[linear-gradient(0deg,rgba(255,255,255,0.1),rgba(255,255,255,0.05))]" }), _jsx("div", { className: "relative flex min-h-[60vh] items-center justify-center px-4 py-12", children: _jsxs("div", { className: "w-full max-w-md", children: [_jsxs("div", { className: "mb-8 text-center", children: [_jsx(Chip, { color: "primary", variant: "flat", startContent: _jsx(Sparkles, { className: "w-4 h-4" }), className: "mb-4 p-2", children: t("signin.chip_label") || "Espace membre" }), _jsx("h1", { className: "mb-3 text-4xl font-bold", children: _jsx("span", { className: "bg-gradient-to-r from-primary-600 to-secondary-600 bg-clip-text text-transparent", children: t("signin.title") || "Bon retour" }) }), _jsx("p", { className: "text-default-600 dark:text-default-700", children: t("signin.subtitle") ||
+                                        "Connectez-vous pour accéder à votre espace" })] }), _jsx(Card, { className: "border border-default-200/60  backdrop-blur-md backdrop-saturate-150 shadow-xl", children: _jsxs(CardBody, { className: "gap-6 p-8", children: [_jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col gap-6", children: [_jsx(Input, { label: t("email") || "Email", type: "email", placeholder: t("signin.email_placeholder") || "votre@email.com", value: email, onChange: (e) => setEmail(e.target.value), required: true, startContent: _jsx(Mail, { className: "h-4 w-4 text-default-400" }), classNames: {
                                                     input: "text-base",
                                                     inputWrapper: "border border-default-200/60 hover:border-primary-400 focus-within:border-primary-500",
                                                 } }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Input, { label: t("password") || "Mot de passe", type: "password", placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022", value: password, onChange: (e) => setPassword(e.target.value), required: true, minLength: 6, startContent: _jsx(Lock, { className: "h-4 w-4 text-default-400" }), classNames: {
                                                             input: "text-base",
                                                             inputWrapper: "border border-default-200/60 hover:border-primary-400 focus-within:border-primary-500",
-                                                        } }), _jsx(Link, { href: "/forgot-password", className: "text-xs text-default-500 hover:text-primary-500 self-end", children: t("signin.forgot_password") || "Mot de passe oublié ?" })] }), error && (_jsx("div", { className: "rounded-lg border border-danger-200 bg-danger-50/50 px-4 py-3 dark:border-danger-800 dark:bg-danger-950/50", children: _jsx("p", { className: "text-sm text-danger-600 dark:text-danger-400", children: error }) })), _jsx(Button, { type: "submit", color: "primary", size: "lg", className: "w-full font-semibold", endContent: isLoading ? null : _jsx(ArrowRight, { className: "h-5 w-5" }), isLoading: isLoading, children: t("signin.submit") || "Se connecter" })] }), _jsxs("div", { className: "relative flex items-center gap-4 py-2", children: [_jsx("div", { className: "h-px flex-1 bg-default-200" }), _jsx("span", { className: "text-xs text-default-400", children: t("or") || "OU" }), _jsx("div", { className: "h-px flex-1 bg-default-200" })] }), _jsx("div", { className: "text-center", children: _jsxs("p", { className: "text-sm text-default-600", children: [t("signin.no_account") || "Pas encore de compte ?", " ", _jsx(Link, { href: redirectUrl
+                                                        } }), _jsx(Link, { href: "/reset-password", className: "text-xs text-default-500 hover:text-primary-500 self-end", children: t("signin.forgot_password") || "Mot de passe oublié ?" })] }), error && (_jsx("div", { className: "rounded-lg border border-danger-200 bg-danger-50/50 px-4 py-3 dark:border-danger-800 dark:bg-danger-950/50", children: _jsx("p", { className: "text-sm text-danger-600 dark:text-danger-400", children: error }) })), _jsx(Button, { type: "submit", color: "primary", size: "lg", className: "w-full font-semibold", endContent: isLoading ? null : _jsx(ArrowRight, { className: "h-5 w-5" }), isLoading: isLoading, children: t("signin.submit") || "Se connecter" })] }), _jsxs("div", { className: "relative flex items-center gap-4 py-2", children: [_jsx("div", { className: "h-px flex-1 bg-default-200" }), _jsx("span", { className: "text-xs text-default-400", children: t("or") || "OU" }), _jsx("div", { className: "h-px flex-1 bg-default-200" })] }), _jsx("div", { className: "text-center", children: _jsxs("p", { className: "text-sm text-default-600", children: [t("signin.no_account") || "Pas encore de compte ?", " ", _jsx(Link, { href: redirectUrl
                                                         ? `/signup?redirect=${encodeURIComponent(redirectUrl)}`
                                                         : "/signup", className: "font-semibold text-primary-600 hover:text-primary-700", children: t("signin.sign_up") || "Créer un compte" })] }) })] }) }), _jsxs("p", { className: "mt-8 text-center text-sm text-default-700", children: [t("signin.accept_terms"), " ", _jsx(Link, { href: "/legal/terms", className: "underline hover:text-primary-500", children: t("signin.term") })] })] }) })] }));
 }

package/dist/web/public/SignUpPage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignUpPage.d.ts","sourceRoot":"","sources":["../../../src/web/public/SignUpPage.tsx"],"names":[],"mappings":"AA2SA,wBAAgB,UAAU,4CAMzB"}
+{"version":3,"file":"SignUpPage.d.ts","sourceRoot":"","sources":["../../../src/web/public/SignUpPage.tsx"],"names":[],"mappings":"AAoTA,wBAAgB,UAAU,4CAMzB"}

package/dist/web/public/SignUpPage.js

@@ -55,6 +55,11 @@ function SignUpForm() {
             // Si la confirmation par email est requise
             if (result.data.user && !result.data.session) {
                 setSuccess("Compte créé avec succès ! Veuillez vérifier votre email pour confirmer votre compte.");
+                // Reset le formulaire après succès
+                setFullName("");
+                setEmail("");
+                setPassword("");
+                setConfirmPassword("");
                 return;
             }
             setSuccess("Compte créé. Vous pouvez désormais vous connecter.");
@@ -78,8 +83,8 @@ function SignUpForm() {
             setLoading(false);
         }
     };
-    return (_jsxs("div", { className: " relative min-h-screen w-full overflow-hidden bg-gradient-to-br from-secondary-50/30 to-primary-50/30 dark:from-secondary-950/50 dark:to-primary-950/50", children: [_jsx("div", { className: "absolute inset-0 bg-grid-slate-100 dark:bg-grid-slate-800/20 mask-[linear-gradient(0deg,white,rgba(255,255,255,0.6))] dark:mask-[linear-gradient(0deg,rgba(255,255,255,0.1),rgba(255,255,255,0.05))]" }), _jsx("div", { className: "relative flex min-h-screen items-center justify-center px-4 py-12", children: _jsxs("div", { className: "w-full max-w-md", children: [_jsxs("div", { className: "mb-8 text-center", children: [_jsx(Chip, { color: "secondary", variant: "flat", startContent: _jsx(Sparkles, { className: "w-4 h-4" }), className: "mb-4 p-2", children: t("signup.chip_label") || "Rejoignez-nous" }), _jsx("h1", { className: "mb-3 text-4xl font-bold", children: _jsx("span", { className: "bg-gradient-to-r from-secondary-600 to-primary-600 bg-clip-text text-transparent", children: t("signup.title") || "Commencer gratuitement" }) }), _jsx("p", { className: "text-default-600 dark:text-default-700", children: t("signup.subtitle") ||
-                                        "Créez votre compte en quelques secondes" })] }), _jsx(Card, { className: "border border-default-200/60 bg-background/60 backdrop-blur-md backdrop-saturate-150 shadow-xl", children: _jsxs(CardBody, { className: "gap-6 p-8", children: [_jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col gap-6", children: [_jsx(Input, { label: t("signup.full_name") || "Nom complet", type: "text", placeholder: t("signup.full_name_placeholder") || "Jean Dupont", value: fullName, onChange: (e) => setFullName(e.target.value), startContent: _jsx(User, { className: "h-4 w-4 text-default-400" }), classNames: {
+    return (_jsxs("div", { className: "pt-16  relative min-h-screen w-full overflow-hidden bg-gradient-to-br from-secondary-50/30 to-primary-50/30 dark:from-secondary-950/50 dark:to-primary-950/50", children: [_jsx("div", { className: "absolute inset-0 bg-grid-slate-100 dark:bg-grid-slate-800/20 mask-[linear-gradient(0deg,white,rgba(255,255,255,0.6))] dark:mask-[linear-gradient(0deg,rgba(255,255,255,0.1),rgba(255,255,255,0.05))]" }), _jsx("div", { className: "relative flex min-h-screen items-center justify-center px-4 py-12", children: _jsxs("div", { className: "w-full max-w-md", children: [_jsxs("div", { className: "mb-8 text-center", children: [_jsx(Chip, { color: "secondary", variant: "flat", startContent: _jsx(Sparkles, { className: "w-4 h-4" }), className: "mb-4 p-2", children: t("signup.chip_label") || "Rejoignez-nous" }), _jsx("h1", { className: "mb-3 text-4xl font-bold", children: _jsx("span", { className: "bg-gradient-to-r from-secondary-600 to-primary-600 bg-clip-text text-transparent", children: t("signup.title") || "Commencer gratuitement" }) }), _jsx("p", { className: "text-default-600 dark:text-default-700", children: t("signup.subtitle") ||
+                                        "Créez votre compte en quelques secondes" })] }), _jsx(Card, { className: "border border-default-200/60  backdrop-blur-md backdrop-saturate-150 shadow-xl", children: _jsxs(CardBody, { className: "gap-6 p-8", children: [_jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col gap-6", children: [_jsx(Input, { label: t("signup.full_name") || "Nom complet", type: "text", placeholder: t("signup.full_name_placeholder") || "Jean Dupont", value: fullName, onChange: (e) => setFullName(e.target.value), startContent: _jsx(User, { className: "h-4 w-4 text-default-400" }), classNames: {
                                                     input: "text-base",
                                                     inputWrapper: "border border-default-200/60 hover:border-secondary-400 focus-within:border-secondary-500",
                                                 } }), _jsx(Input, { label: t("email") || "Email", type: "email", placeholder: t("signin.email_placeholder") || "votre@email.com", value: email, onChange: (e) => setEmail(e.target.value), required: true, startContent: _jsx(Mail, { className: "h-4 w-4 text-default-400" }), classNames: {

package/dist/web/public/auth-code-error.d.ts

@@ -0,0 +1,2 @@
+export default function AuthCodeErrorPage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=auth-code-error.d.ts.map

package/dist/web/public/auth-code-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-code-error.d.ts","sourceRoot":"","sources":["../../../src/web/public/auth-code-error.tsx"],"names":[],"mappings":"AAQA,MAAM,CAAC,OAAO,UAAU,iBAAiB,4CAwCxC"}

package/dist/web/public/auth-code-error.js

@@ -0,0 +1,14 @@
+/**
+ * Auth error page - shown when email confirmation fails
+ */
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useSearchParams } from "next/navigation";
+import Link from "next/link";
+export default function AuthCodeErrorPage() {
+    const searchParams = useSearchParams();
+    const error = searchParams.get("error");
+    const description = searchParams.get("description");
+    return (_jsx("div", { className: "flex items-center justify-center min-h-screen bg-gray-50", children: _jsx("div", { className: "w-full max-w-md p-8 bg-white rounded-lg shadow-md", children: _jsxs("div", { className: "text-center", children: [_jsx("div", { className: "text-red-500 text-4xl mb-4", children: "\u274C" }), _jsx("h1", { className: "text-2xl font-bold text-gray-900 mb-2", children: "Confirmation Failed" }), _jsx("p", { className: "text-gray-600 mb-4", children: description ||
+                            "We couldn't confirm your email. The link may have expired." }), error && (_jsxs("p", { className: "text-sm text-gray-500 bg-gray-100 p-2 rounded mb-6", children: ["Error: ", error] })), _jsxs("div", { className: "space-y-3", children: [_jsx(Link, { href: "/auth/signin", className: "block w-full px-4 py-2 bg-green-500 text-white rounded-lg hover:bg-green-600 transition", children: "Try signing in" }), _jsx(Link, { href: "/auth/signup", className: "block w-full px-4 py-2 bg-blue-500 text-white rounded-lg hover:bg-blue-600 transition", children: "Create new account" })] })] }) }) }));
+}

package/dist/web/public/confirm.d.ts

@@ -0,0 +1,2 @@
+export default function ConfirmPage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=confirm.d.ts.map

package/dist/web/public/confirm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.d.ts","sourceRoot":"","sources":["../../../src/web/public/confirm.tsx"],"names":[],"mappings":"AAcA,MAAM,CAAC,OAAO,UAAU,WAAW,4CAoLlC"}

package/dist/web/public/confirm.js

@@ -0,0 +1,157 @@
+/**
+ * Email confirmation handler
+ * Handles hash-based tokens (direct from email with #access_token=XXX)
+ *
+ * Note: Code-based flow is now handled server-side in /api/auth/callback
+ * This page is only reached for hash-based tokens or as a fallback loading screen
+ */
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useState } from "react";
+import { useSearchParams } from "next/navigation";
+import { addToast, Card, Spinner } from "@lastbrain/ui";
+import { logger, useLocalizedRouter } from "@lastbrain/core";
+export default function ConfirmPage() {
+    const router = useLocalizedRouter();
+    const searchParams = useSearchParams();
+    const [message, setMessage] = useState("Confirming your email...");
+    const [isProcessing, setIsProcessing] = useState(false);
+    const [debug, setDebug] = useState(null);
+    useEffect(() => {
+        // Éviter les appels multiples
+        if (isProcessing)
+            return;
+        const confirmEmail = async () => {
+            setIsProcessing(true);
+            const next = searchParams.get("next") || "/";
+            // Check for token in hash (direct from email links that use #access_token)
+            // This handles the legacy hash-based flow from Supabase
+            if (typeof window !== "undefined") {
+                const hash = window.location.hash;
+                if (hash && hash.length > 1) {
+                    const params = new URLSearchParams(hash.substring(1));
+                    const accessToken = params.get("access_token");
+                    const refreshToken = params.get("refresh_token");
+                    if (accessToken && refreshToken) {
+                        try {
+                            setMessage("Setting up your session...");
+                            // Debug: capture full href & hash and tokens for troubleshooting
+                            setDebug({
+                                href: window.location.href,
+                                hash,
+                                access_token: accessToken,
+                                refresh_token: refreshToken,
+                            });
+                            // Sync tokens to server-side cookies
+                            console.debug("[ConfirmPage] Posting tokens to /api/public/set-session", {
+                                accessToken: String(accessToken).slice(0, 8) + "...",
+                                refreshToken: String(refreshToken).slice(0, 8) + "...",
+                            });
+                            const response = await fetch("/api/public/set-session", {
+                                method: "POST",
+                                headers: { "Content-Type": "application/json" },
+                                body: JSON.stringify({
+                                    access_token: accessToken,
+                                    refresh_token: refreshToken,
+                                }),
+                            });
+                            const respBody = await response.json().catch(() => null);
+                            console.debug("[ConfirmPage] /api/public/set-session response", {
+                                ok: response.ok,
+                                status: response.status,
+                                body: respBody,
+                            });
+                            // Update debug panel with response
+                            setDebug((d) => ({
+                                ...(d || {}),
+                                responseStatus: response.status,
+                                responseBody: respBody,
+                            }));
+                            logger.debug("[ConfirmPage] start", {
+                                url: typeof window !== "undefined" ? window.location.href : null,
+                                searchParams: String(searchParams),
+                                next,
+                            });
+                            if (!response.ok) {
+                                const errorData = await response.json();
+                                throw new Error(errorData.error || "Failed to set session");
+                            }
+                            // Add welcome bonus asynchronously (don't block redirect)
+                            try {
+                                const res = await fetch("/api/public/add-welcome-bonus", {
+                                    method: "POST",
+                                    headers: { "Content-Type": "application/json" },
+                                });
+                                if (!res.ok) {
+                                    const err = await res.json().catch(() => ({}));
+                                    logger.warn("add-welcome-bonus failed:", err);
+                                }
+                                else {
+                                    logger.debug("add-welcome-bonus succeeded for user");
+                                }
+                            }
+                            catch (bonusError) {
+                                logger.warn("Failed to add welcome bonus:", bonusError);
+                                // Don't block the redirect if bonus fails
+                            }
+                            addToast({
+                                title: "Email confirmed!",
+                                description: "Your email has been verified successfully.",
+                                color: "success",
+                            });
+                            // Redirect to destination
+                            // Use hard reload to ensure cookies are applied
+                            setMessage("Redirecting...");
+                            setTimeout(() => {
+                                window.location.href = next;
+                            }, 500);
+                            return;
+                        }
+                        catch (err) {
+                            logger.error("❌ Error setting session:", err);
+                            addToast({
+                                title: "Email confirmation failed",
+                                description: err instanceof Error
+                                    ? err.message
+                                    : "Could not create session",
+                                color: "danger",
+                            });
+                            router.push("/auth-code-error");
+                            return;
+                        }
+                    }
+                }
+            }
+            // If we reach here, either:
+            // 1. Code was already handled by callback (just show loading and redirect)
+            // 2. No valid token/code found (redirect to error)
+            const code = searchParams.get("code");
+            if (code) {
+                // Code should have been handled by callback, but we're here
+                // This means callback already set cookies and redirected us here as fallback
+                // Just redirect to next
+                setMessage("Completing sign-in...");
+                setTimeout(() => {
+                    window.location.href = next;
+                }, 500);
+                return;
+            }
+            // No code or token found - assume the user was redirected here after
+            // a verification step (Supabase verify) which does not provide a code.
+            // Consider this a successful confirmation and redirect to `next`.
+            logger.debug("No confirmation code or token found - assuming success and redirecting");
+            addToast({
+                title: "Email confirmé",
+                description: "Votre email a été vérifié.",
+                color: "success",
+            });
+            setMessage("Redirecting...");
+            setTimeout(() => {
+                window.location.href = next;
+            }, 500);
+        };
+        confirmEmail();
+    }, []); // eslint-disable-line react-hooks/exhaustive-deps
+    // On ne met pas searchParams/router dans les deps pour éviter les boucles
+    return (_jsx("div", { className: "flex items-center justify-center min-h-screen ", children: _jsx(Card, { className: "w-full max-w-md", children: _jsxs("div", { className: "text-center py-8", children: [_jsx(Spinner, { size: "lg", className: "mx-auto" }), _jsx("p", { className: "mt-4 text-gray-600", children: message })] }) }) }));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lastbrain/module-auth",
-  "version": "2.0.19",
+  "version": "2.0.31",
   "description": "Module d'authentification complet pour LastBrain avec Supabase",
   "private": false,
   "type": "module",
@@ -32,9 +32,10 @@
     "supabase"
   ],
   "dependencies": {
-    "@lastbrain/app": "^2.0.21",
-    "@lastbrain/core": "^2.0.19",
-    "@lastbrain/ui": "^2.0.19",
+    "@lastbrain/app": "^2.0.35",
+    "@lastbrain/core": "^2.0.31",
+    "@lastbrain-labs/module-contact-pro": "^0.1.3",
+    "@lastbrain/ui": "^2.0.31",
     "@supabase/supabase-js": "^2.86.0",
     "lucide-react": "^0.554.0",
     "react": "^19.2.1",
@@ -44,7 +45,7 @@
     "next": ">=15.0.0"
   },
   "devDependencies": {
-    "next": "^16.0.7",
+    "next": "16.0.10",
     "typescript": "^5.4.0"
   },
   "exports": {
@@ -63,6 +64,10 @@
     "./api/*": {
       "types": "./dist/api/*.d.ts",
       "default": "./dist/api/*.js"
+    },
+    "./sitemap/*": {
+      "types": "./dist/sitemap/*.d.ts",
+      "default": "./dist/sitemap/*.js"
     }
   },
   "sideEffects": false,

package/src/api/admin/signup-stats.ts

@@ -1,3 +1,4 @@
+import { logger } from "@lastbrain/core";
 import { getSupabaseServiceClient } from "@lastbrain/core/server";
 import { NextRequest, NextResponse } from "next/server";
 
@@ -48,7 +49,7 @@ export async function GET(_request: NextRequest) {
 
     return NextResponse.json({ data: stats }, { status: 200 });
   } catch (error) {
-    console.error("Error fetching signup stats:", error);
+    logger.error("Error fetching signup stats:", error);
     return NextResponse.json(
       { error: "Erreur interne du serveur" },
       { status: 500 }