@payez/next-mvp 4.1.8 → 4.1.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +792 -792
- package/dist/auth/better-auth.js +15 -3
- package/dist/components/account/MobileNavDrawer.js +18 -18
- package/dist/components/account/UserAvatarMenu.js +1 -1
- package/dist/components/admin/AlertSettingsTab.js +40 -40
- package/dist/components/admin/LoggingSettingsTab.js +28 -28
- package/dist/lib/idp-fetch.js +9 -25
- package/dist/pages/login/page.js +28 -28
- package/dist/pages/settings/EnhancedSettingsPage.js +17 -17
- package/package.json +1 -1
- package/scripts/dev-broker.ps1 +35 -35
- package/scripts/dev-local.ps1 +45 -45
- package/src/api/auth-handler.ts +548 -548
- package/src/api-handlers/account/change-password.ts +142 -142
- package/src/api-handlers/account/update-phone.ts +79 -79
- package/src/api-handlers/account/verify-email.ts +125 -125
- package/src/api-handlers/account/verify-sms.ts +125 -125
- package/src/api-handlers/admin/analytics.ts +443 -443
- package/src/api-handlers/admin/audit.ts +223 -223
- package/src/api-handlers/admin/index.ts +63 -63
- package/src/api-handlers/admin/redis-sessions.ts +251 -251
- package/src/api-handlers/admin/sessions.ts +318 -318
- package/src/api-handlers/admin/site-logs.ts +365 -365
- package/src/api-handlers/admin/users.ts +242 -242
- package/src/api-handlers/admin/vibe-data.ts +324 -324
- package/src/api-handlers/auth/refresh.ts +682 -682
- package/src/api-handlers/auth/signout.ts +199 -199
- package/src/api-handlers/auth/status.ts +20 -20
- package/src/api-handlers/auth/update-session.ts +110 -110
- package/src/api-handlers/auth/verify-code.ts +112 -112
- package/src/api-handlers/session/refresh-viability.ts +36 -36
- package/src/api-handlers/test/force-expire.ts +60 -60
- package/src/auth/auth-decision.ts +229 -229
- package/src/auth/better-auth.ts +15 -3
- package/src/auth/route-config.ts +219 -219
- package/src/auth/types/auth-types.ts +555 -555
- package/src/auth/types/index.ts +7 -7
- package/src/auth/utils/idp-client.ts +445 -445
- package/src/auth/utils/index.ts +6 -6
- package/src/auth/utils/token-utils.ts +243 -243
- package/src/client/AuthContext.tsx +143 -143
- package/src/client/fetch-with-auth.ts +47 -47
- package/src/components/SessionSync.tsx +138 -138
- package/src/components/SignalRHealthCheck.tsx +131 -131
- package/src/components/account/MobileNavDrawer.tsx +305 -305
- package/src/components/account/UserAvatarMenu.tsx +266 -266
- package/src/components/account/index.ts +13 -13
- package/src/components/admin/AlertSettingsTab.tsx +728 -728
- package/src/components/admin/AnalyticsTab.tsx +703 -703
- package/src/components/admin/DataBrowserTab.tsx +505 -505
- package/src/components/admin/LoggingSettingsTab.tsx +665 -665
- package/src/components/admin/SessionsTab.tsx +414 -414
- package/src/components/admin/StatsTab.tsx +379 -379
- package/src/components/admin/VibeAdminLayout.tsx +187 -187
- package/src/components/admin/index.ts +59 -59
- package/src/components/auth/FederatedAuthSection.tsx +95 -95
- package/src/components/auth/ModeAwareLoginPage.tsx +135 -135
- package/src/components/auth/ModeAwareSignupPage.tsx +267 -267
- package/src/components/auth/TraditionalAuthSection.tsx +99 -99
- package/src/components/recovery/CompleteStep.tsx +36 -36
- package/src/components/recovery/InitiateRecoveryStep.tsx +68 -68
- package/src/components/recovery/SelectMethodStep.tsx +73 -73
- package/src/components/recovery/SetPasswordStep.tsx +97 -97
- package/src/components/recovery/VerifyCodeStep.tsx +90 -90
- package/src/components/reserved/ReservedRecoveryWarning.tsx +160 -160
- package/src/components/reserved/ReservedStatusBox.tsx +118 -118
- package/src/components/ui/BetaBadge.tsx +58 -58
- package/src/components/ui/Footer.tsx +93 -93
- package/src/config/env.ts +57 -57
- package/src/config/logger.ts +62 -62
- package/src/config/vibe-log-transport.ts +264 -264
- package/src/hooks/useAuth.ts +117 -117
- package/src/hooks/useAuthSettings.ts +97 -97
- package/src/hooks/useAvailableProviders.ts +120 -120
- package/src/hooks/usePasswordValidation.ts +127 -127
- package/src/hooks/usePublicAuthSettings.ts +149 -149
- package/src/hooks/useSessionExpiration.ts +101 -101
- package/src/hooks/useViabilitySession.ts +336 -336
- package/src/index.ts +60 -60
- package/src/lib/api-handler.ts +643 -643
- package/src/lib/app-slug.ts +178 -178
- package/src/lib/geolocation.ts +265 -265
- package/src/lib/idp-fetch.ts +10 -26
- package/src/lib/jwt-decode.ts +82 -82
- package/src/lib/roles.ts +177 -177
- package/src/lib/site-logger.ts +245 -245
- package/src/lib/standardized-client-api.ts +901 -901
- package/src/lib/test-aware-get-token.ts +41 -41
- package/src/lib/user-agent-parser.ts +252 -252
- package/src/logging/api/admin-analytics.ts +51 -51
- package/src/logging/api/audit-log.ts +53 -53
- package/src/logging/components/AdminAnalyticsLayout.tsx +49 -49
- package/src/logging/components/AuditLogViewer.tsx +125 -125
- package/src/logging/components/ErrorMetricsCard.tsx +98 -98
- package/src/logging/components/HealthMetricsCard.tsx +70 -70
- package/src/logging/hooks/useAdminAnalytics.ts +22 -22
- package/src/logging/hooks/useAuditLog.ts +24 -24
- package/src/logging/hooks/useErrorMetrics.ts +40 -40
- package/src/logging/hooks/useHealthMetrics.ts +44 -44
- package/src/logging/index.ts +18 -18
- package/src/logging/types/analytics.ts +81 -81
- package/src/logging/types/audit.ts +31 -31
- package/src/logging/types/index.ts +3 -3
- package/src/middleware/create-middleware.ts +663 -663
- package/src/middleware/rbac-check.ts +279 -279
- package/src/middleware/twofa-presets.ts +224 -224
- package/src/pages/admin-login/page.tsx +221 -221
- package/src/pages/admin-page-permissions/PagePermissionsAdminPage.tsx +527 -527
- package/src/pages/admin-page-permissions/index.ts +7 -7
- package/src/pages/admin-roles/RolesAdminPage.tsx +533 -533
- package/src/pages/admin-roles/modals.tsx +469 -469
- package/src/pages/client-admin/ClientSiteAdminPage.tsx +382 -382
- package/src/pages/client-admin/index.ts +33 -33
- package/src/pages/coming-soon/page.tsx +83 -83
- package/src/pages/login/page.tsx +456 -456
- package/src/pages/profile/EnhancedProfilePage.tsx +485 -485
- package/src/pages/profile/index.ts +9 -9
- package/src/pages/profile/page.tsx +166 -166
- package/src/pages/recovery/page.tsx +234 -234
- package/src/pages/roles/MyRolesPage.tsx +211 -211
- package/src/pages/roles/components.tsx +294 -294
- package/src/pages/roles/index.ts +17 -17
- package/src/pages/security/EnhancedSecurityPage.tsx +565 -565
- package/src/pages/security/index.ts +9 -9
- package/src/pages/security/page.tsx +507 -507
- package/src/pages/settings/EnhancedSettingsPage.tsx +642 -642
- package/src/pages/settings/index.ts +9 -9
- package/src/pages/settings/page.tsx +47 -47
- package/src/pages/showcase/ShowcasePage.tsx +532 -532
- package/src/pages/showcase/index.ts +13 -13
- package/src/pages/test-env/EmergencyLogoutPage.tsx +180 -180
- package/src/pages/test-env/JwtInspectPage.tsx +456 -456
- package/src/pages/test-env/RefreshTokenPage.tsx +157 -157
- package/src/pages/test-env/TestEnvPage.tsx +118 -118
- package/src/pages/test-env/index.ts +25 -25
- package/src/pages/verify-code/page.tsx +652 -652
- package/src/routes/account/update-phone.ts +13 -13
- package/src/routes/auth/logout.ts +108 -108
- package/src/routes/auth/nextauth.ts +45 -45
- package/src/routes/auth/settings.ts +75 -75
- package/src/routes/auth/viability.ts +224 -224
- package/src/server/auth-guard.ts +170 -170
- package/src/server/slim-middleware.ts +117 -117
- package/src/server/with-auth.ts +93 -93
- package/src/stores/authStore.ts +1899 -1899
- package/src/templates/instrumentation.ts +41 -41
- package/src/utils/logout.ts +30 -30
- package/src/vibe/client.ts +590 -590
- package/src/vibe/enterprise-auth.ts +208 -208
- package/src/vibe/errors.ts +185 -185
- package/src/vibe/generic.ts +431 -431
- package/src/vibe/hooks/index.ts +367 -367
- package/src/vibe/index.ts +132 -132
- package/src/vibe/sessions.ts +551 -551
- package/src/vibe/types.ts +577 -577
|
@@ -1,127 +1,127 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Password Validation Hook for @payez/next-mvp
|
|
3
|
-
*
|
|
4
|
-
* Provides real-time password validation against IDP password policy.
|
|
5
|
-
* Uses debounced API calls to validate password strength.
|
|
6
|
-
*/
|
|
7
|
-
|
|
8
|
-
'use client';
|
|
9
|
-
|
|
10
|
-
import { useState, useCallback, useRef, useEffect } from 'react';
|
|
11
|
-
|
|
12
|
-
interface PasswordPolicy {
|
|
13
|
-
min_length?: number;
|
|
14
|
-
require_uppercase?: boolean;
|
|
15
|
-
require_lowercase?: boolean;
|
|
16
|
-
require_digit?: boolean;
|
|
17
|
-
require_special?: boolean;
|
|
18
|
-
min_strength_score?: number;
|
|
19
|
-
}
|
|
20
|
-
|
|
21
|
-
interface ValidationResult {
|
|
22
|
-
is_valid: boolean;
|
|
23
|
-
score: number;
|
|
24
|
-
failed_requirements: string[];
|
|
25
|
-
tip?: string;
|
|
26
|
-
policy?: PasswordPolicy;
|
|
27
|
-
}
|
|
28
|
-
|
|
29
|
-
interface UsePasswordValidationOptions {
|
|
30
|
-
debounceMs?: number;
|
|
31
|
-
}
|
|
32
|
-
|
|
33
|
-
export function usePasswordValidation(options: UsePasswordValidationOptions = {}) {
|
|
34
|
-
const { debounceMs = 300 } = options;
|
|
35
|
-
|
|
36
|
-
const [isValid, setIsValid] = useState(false);
|
|
37
|
-
const [score, setScore] = useState(0);
|
|
38
|
-
const [failedRequirements, setFailedRequirements] = useState<string[]>([]);
|
|
39
|
-
const [tip, setTip] = useState<string | undefined>(undefined);
|
|
40
|
-
const [policy, setPolicy] = useState<PasswordPolicy | undefined>(undefined);
|
|
41
|
-
const [isValidating, setIsValidating] = useState(false);
|
|
42
|
-
|
|
43
|
-
const debounceTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
|
|
44
|
-
const abortControllerRef = useRef<AbortController | null>(null);
|
|
45
|
-
|
|
46
|
-
const validatePassword = useCallback(async (password: string) => {
|
|
47
|
-
// Cancel any pending request
|
|
48
|
-
if (abortControllerRef.current) {
|
|
49
|
-
abortControllerRef.current.abort();
|
|
50
|
-
}
|
|
51
|
-
|
|
52
|
-
// Don't validate empty passwords
|
|
53
|
-
if (!password || password.length === 0) {
|
|
54
|
-
setIsValid(false);
|
|
55
|
-
setScore(0);
|
|
56
|
-
setFailedRequirements([]);
|
|
57
|
-
setTip(undefined);
|
|
58
|
-
return;
|
|
59
|
-
}
|
|
60
|
-
|
|
61
|
-
setIsValidating(true);
|
|
62
|
-
abortControllerRef.current = new AbortController();
|
|
63
|
-
|
|
64
|
-
try {
|
|
65
|
-
const response = await fetch('/api/account/validate-password', {
|
|
66
|
-
method: 'POST',
|
|
67
|
-
headers: { 'Content-Type': 'application/json' },
|
|
68
|
-
body: JSON.stringify({ password }),
|
|
69
|
-
signal: abortControllerRef.current.signal,
|
|
70
|
-
});
|
|
71
|
-
|
|
72
|
-
const data: ValidationResult = await response.json();
|
|
73
|
-
|
|
74
|
-
setIsValid(data.is_valid);
|
|
75
|
-
setScore(data.score);
|
|
76
|
-
setFailedRequirements(data.failed_requirements || []);
|
|
77
|
-
setTip(data.tip);
|
|
78
|
-
if (data.policy) {
|
|
79
|
-
setPolicy(data.policy);
|
|
80
|
-
}
|
|
81
|
-
} catch (err: any) {
|
|
82
|
-
if (err.name !== 'AbortError') {
|
|
83
|
-
console.error('[usePasswordValidation] Error:', err);
|
|
84
|
-
// On error, assume invalid but don't block user
|
|
85
|
-
setIsValid(false);
|
|
86
|
-
setScore(0);
|
|
87
|
-
setFailedRequirements(['Unable to validate password']);
|
|
88
|
-
}
|
|
89
|
-
} finally {
|
|
90
|
-
setIsValidating(false);
|
|
91
|
-
}
|
|
92
|
-
}, []);
|
|
93
|
-
|
|
94
|
-
const setPassword = useCallback((password: string) => {
|
|
95
|
-
// Clear any pending debounce
|
|
96
|
-
if (debounceTimerRef.current) {
|
|
97
|
-
clearTimeout(debounceTimerRef.current);
|
|
98
|
-
}
|
|
99
|
-
|
|
100
|
-
// Debounce the validation
|
|
101
|
-
debounceTimerRef.current = setTimeout(() => {
|
|
102
|
-
validatePassword(password);
|
|
103
|
-
}, debounceMs);
|
|
104
|
-
}, [debounceMs, validatePassword]);
|
|
105
|
-
|
|
106
|
-
// Cleanup on unmount
|
|
107
|
-
useEffect(() => {
|
|
108
|
-
return () => {
|
|
109
|
-
if (debounceTimerRef.current) {
|
|
110
|
-
clearTimeout(debounceTimerRef.current);
|
|
111
|
-
}
|
|
112
|
-
if (abortControllerRef.current) {
|
|
113
|
-
abortControllerRef.current.abort();
|
|
114
|
-
}
|
|
115
|
-
};
|
|
116
|
-
}, []);
|
|
117
|
-
|
|
118
|
-
return {
|
|
119
|
-
setPassword,
|
|
120
|
-
isValid,
|
|
121
|
-
score,
|
|
122
|
-
failedRequirements,
|
|
123
|
-
tip,
|
|
124
|
-
policy,
|
|
125
|
-
isValidating,
|
|
126
|
-
};
|
|
127
|
-
}
|
|
1
|
+
/**
|
|
2
|
+
* Password Validation Hook for @payez/next-mvp
|
|
3
|
+
*
|
|
4
|
+
* Provides real-time password validation against IDP password policy.
|
|
5
|
+
* Uses debounced API calls to validate password strength.
|
|
6
|
+
*/
|
|
7
|
+
|
|
8
|
+
'use client';
|
|
9
|
+
|
|
10
|
+
import { useState, useCallback, useRef, useEffect } from 'react';
|
|
11
|
+
|
|
12
|
+
interface PasswordPolicy {
|
|
13
|
+
min_length?: number;
|
|
14
|
+
require_uppercase?: boolean;
|
|
15
|
+
require_lowercase?: boolean;
|
|
16
|
+
require_digit?: boolean;
|
|
17
|
+
require_special?: boolean;
|
|
18
|
+
min_strength_score?: number;
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
interface ValidationResult {
|
|
22
|
+
is_valid: boolean;
|
|
23
|
+
score: number;
|
|
24
|
+
failed_requirements: string[];
|
|
25
|
+
tip?: string;
|
|
26
|
+
policy?: PasswordPolicy;
|
|
27
|
+
}
|
|
28
|
+
|
|
29
|
+
interface UsePasswordValidationOptions {
|
|
30
|
+
debounceMs?: number;
|
|
31
|
+
}
|
|
32
|
+
|
|
33
|
+
export function usePasswordValidation(options: UsePasswordValidationOptions = {}) {
|
|
34
|
+
const { debounceMs = 300 } = options;
|
|
35
|
+
|
|
36
|
+
const [isValid, setIsValid] = useState(false);
|
|
37
|
+
const [score, setScore] = useState(0);
|
|
38
|
+
const [failedRequirements, setFailedRequirements] = useState<string[]>([]);
|
|
39
|
+
const [tip, setTip] = useState<string | undefined>(undefined);
|
|
40
|
+
const [policy, setPolicy] = useState<PasswordPolicy | undefined>(undefined);
|
|
41
|
+
const [isValidating, setIsValidating] = useState(false);
|
|
42
|
+
|
|
43
|
+
const debounceTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
|
|
44
|
+
const abortControllerRef = useRef<AbortController | null>(null);
|
|
45
|
+
|
|
46
|
+
const validatePassword = useCallback(async (password: string) => {
|
|
47
|
+
// Cancel any pending request
|
|
48
|
+
if (abortControllerRef.current) {
|
|
49
|
+
abortControllerRef.current.abort();
|
|
50
|
+
}
|
|
51
|
+
|
|
52
|
+
// Don't validate empty passwords
|
|
53
|
+
if (!password || password.length === 0) {
|
|
54
|
+
setIsValid(false);
|
|
55
|
+
setScore(0);
|
|
56
|
+
setFailedRequirements([]);
|
|
57
|
+
setTip(undefined);
|
|
58
|
+
return;
|
|
59
|
+
}
|
|
60
|
+
|
|
61
|
+
setIsValidating(true);
|
|
62
|
+
abortControllerRef.current = new AbortController();
|
|
63
|
+
|
|
64
|
+
try {
|
|
65
|
+
const response = await fetch('/api/account/validate-password', {
|
|
66
|
+
method: 'POST',
|
|
67
|
+
headers: { 'Content-Type': 'application/json' },
|
|
68
|
+
body: JSON.stringify({ password }),
|
|
69
|
+
signal: abortControllerRef.current.signal,
|
|
70
|
+
});
|
|
71
|
+
|
|
72
|
+
const data: ValidationResult = await response.json();
|
|
73
|
+
|
|
74
|
+
setIsValid(data.is_valid);
|
|
75
|
+
setScore(data.score);
|
|
76
|
+
setFailedRequirements(data.failed_requirements || []);
|
|
77
|
+
setTip(data.tip);
|
|
78
|
+
if (data.policy) {
|
|
79
|
+
setPolicy(data.policy);
|
|
80
|
+
}
|
|
81
|
+
} catch (err: any) {
|
|
82
|
+
if (err.name !== 'AbortError') {
|
|
83
|
+
console.error('[usePasswordValidation] Error:', err);
|
|
84
|
+
// On error, assume invalid but don't block user
|
|
85
|
+
setIsValid(false);
|
|
86
|
+
setScore(0);
|
|
87
|
+
setFailedRequirements(['Unable to validate password']);
|
|
88
|
+
}
|
|
89
|
+
} finally {
|
|
90
|
+
setIsValidating(false);
|
|
91
|
+
}
|
|
92
|
+
}, []);
|
|
93
|
+
|
|
94
|
+
const setPassword = useCallback((password: string) => {
|
|
95
|
+
// Clear any pending debounce
|
|
96
|
+
if (debounceTimerRef.current) {
|
|
97
|
+
clearTimeout(debounceTimerRef.current);
|
|
98
|
+
}
|
|
99
|
+
|
|
100
|
+
// Debounce the validation
|
|
101
|
+
debounceTimerRef.current = setTimeout(() => {
|
|
102
|
+
validatePassword(password);
|
|
103
|
+
}, debounceMs);
|
|
104
|
+
}, [debounceMs, validatePassword]);
|
|
105
|
+
|
|
106
|
+
// Cleanup on unmount
|
|
107
|
+
useEffect(() => {
|
|
108
|
+
return () => {
|
|
109
|
+
if (debounceTimerRef.current) {
|
|
110
|
+
clearTimeout(debounceTimerRef.current);
|
|
111
|
+
}
|
|
112
|
+
if (abortControllerRef.current) {
|
|
113
|
+
abortControllerRef.current.abort();
|
|
114
|
+
}
|
|
115
|
+
};
|
|
116
|
+
}, []);
|
|
117
|
+
|
|
118
|
+
return {
|
|
119
|
+
setPassword,
|
|
120
|
+
isValid,
|
|
121
|
+
score,
|
|
122
|
+
failedRequirements,
|
|
123
|
+
tip,
|
|
124
|
+
policy,
|
|
125
|
+
isValidating,
|
|
126
|
+
};
|
|
127
|
+
}
|
|
@@ -1,149 +1,149 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* usePublicAuthSettings Hook
|
|
3
|
-
*
|
|
4
|
-
* Fetches public auth settings for pre-login pages (signup, login).
|
|
5
|
-
* Does NOT require authentication - settings are fetched via API.
|
|
6
|
-
*/
|
|
7
|
-
|
|
8
|
-
'use client';
|
|
9
|
-
|
|
10
|
-
import { useState, useEffect } from 'react';
|
|
11
|
-
import type { FederatedProvider } from '../types/auth';
|
|
12
|
-
|
|
13
|
-
export interface PublicAuthSettings {
|
|
14
|
-
enabledProviders: FederatedProvider[];
|
|
15
|
-
allowPublicRegistration: boolean;
|
|
16
|
-
allowFederatedLogin: boolean;
|
|
17
|
-
enablePasswordReset: boolean;
|
|
18
|
-
require2FA: boolean;
|
|
19
|
-
allowed2FAMethods: string[];
|
|
20
|
-
}
|
|
21
|
-
|
|
22
|
-
export interface UsePublicAuthSettingsResult {
|
|
23
|
-
settings: PublicAuthSettings | null;
|
|
24
|
-
isLoading: boolean;
|
|
25
|
-
error: Error | null;
|
|
26
|
-
}
|
|
27
|
-
|
|
28
|
-
// Map provider strings to FederatedProvider type
|
|
29
|
-
const PROVIDER_MAP: Record<string, FederatedProvider> = {
|
|
30
|
-
'google': 'google',
|
|
31
|
-
'apple': 'apple',
|
|
32
|
-
'facebook': 'facebook',
|
|
33
|
-
'github': 'github',
|
|
34
|
-
'microsoft': 'microsoft',
|
|
35
|
-
'azure-ad': 'microsoft',
|
|
36
|
-
};
|
|
37
|
-
|
|
38
|
-
const DEFAULT_SETTINGS: PublicAuthSettings = {
|
|
39
|
-
enabledProviders: [],
|
|
40
|
-
allowPublicRegistration: true,
|
|
41
|
-
allowFederatedLogin: false,
|
|
42
|
-
enablePasswordReset: true,
|
|
43
|
-
require2FA: true,
|
|
44
|
-
allowed2FAMethods: ['email', 'sms'],
|
|
45
|
-
};
|
|
46
|
-
|
|
47
|
-
/**
|
|
48
|
-
* Hook to fetch public auth settings for login/signup pages.
|
|
49
|
-
*
|
|
50
|
-
* @example
|
|
51
|
-
* ```tsx
|
|
52
|
-
* function SignupPage() {
|
|
53
|
-
* const { settings, isLoading } = usePublicAuthSettings();
|
|
54
|
-
*
|
|
55
|
-
* if (isLoading) return <Spinner />;
|
|
56
|
-
*
|
|
57
|
-
* return (
|
|
58
|
-
* <>
|
|
59
|
-
* {settings?.allowFederatedLogin && (
|
|
60
|
-
* <FederatedAuthSection providers={settings.enabledProviders} />
|
|
61
|
-
* )}
|
|
62
|
-
* {settings?.allowPublicRegistration && (
|
|
63
|
-
* <EmailSignupForm />
|
|
64
|
-
* )}
|
|
65
|
-
* </>
|
|
66
|
-
* );
|
|
67
|
-
* }
|
|
68
|
-
* ```
|
|
69
|
-
*/
|
|
70
|
-
export function usePublicAuthSettings(): UsePublicAuthSettingsResult {
|
|
71
|
-
const [settings, setSettings] = useState<PublicAuthSettings | null>(null);
|
|
72
|
-
const [isLoading, setIsLoading] = useState(true);
|
|
73
|
-
const [error, setError] = useState<Error | null>(null);
|
|
74
|
-
|
|
75
|
-
useEffect(() => {
|
|
76
|
-
let mounted = true;
|
|
77
|
-
|
|
78
|
-
async function fetchSettings() {
|
|
79
|
-
try {
|
|
80
|
-
const response = await fetch('/api/auth/settings');
|
|
81
|
-
|
|
82
|
-
if (!mounted) return;
|
|
83
|
-
|
|
84
|
-
if (!response.ok) {
|
|
85
|
-
throw new Error(`Failed to fetch auth settings: ${response.status}`);
|
|
86
|
-
}
|
|
87
|
-
|
|
88
|
-
const data = await response.json();
|
|
89
|
-
|
|
90
|
-
if (data.success && data.data) {
|
|
91
|
-
// Map provider strings to FederatedProvider type
|
|
92
|
-
const providers = (data.data.enabledProviders || [])
|
|
93
|
-
.map((p: string) => PROVIDER_MAP[p.toLowerCase()])
|
|
94
|
-
.filter((p: FederatedProvider | undefined): p is FederatedProvider => p !== undefined);
|
|
95
|
-
|
|
96
|
-
setSettings({
|
|
97
|
-
...data.data,
|
|
98
|
-
enabledProviders: providers,
|
|
99
|
-
});
|
|
100
|
-
} else {
|
|
101
|
-
setSettings(DEFAULT_SETTINGS);
|
|
102
|
-
}
|
|
103
|
-
|
|
104
|
-
setError(null);
|
|
105
|
-
} catch (err) {
|
|
106
|
-
if (!mounted) return;
|
|
107
|
-
console.warn('[usePublicAuthSettings] Failed to fetch settings:', err);
|
|
108
|
-
setError(err instanceof Error ? err : new Error(String(err)));
|
|
109
|
-
setSettings(DEFAULT_SETTINGS);
|
|
110
|
-
} finally {
|
|
111
|
-
if (mounted) {
|
|
112
|
-
setIsLoading(false);
|
|
113
|
-
}
|
|
114
|
-
}
|
|
115
|
-
}
|
|
116
|
-
|
|
117
|
-
fetchSettings();
|
|
118
|
-
|
|
119
|
-
return () => {
|
|
120
|
-
mounted = false;
|
|
121
|
-
};
|
|
122
|
-
}, []);
|
|
123
|
-
|
|
124
|
-
return { settings, isLoading, error };
|
|
125
|
-
}
|
|
126
|
-
|
|
127
|
-
/**
|
|
128
|
-
* Hook to check if federated (OAuth) login is enabled.
|
|
129
|
-
*/
|
|
130
|
-
export function useFederatedLoginEnabled(): boolean {
|
|
131
|
-
const { settings } = usePublicAuthSettings();
|
|
132
|
-
return settings?.allowFederatedLogin ?? false;
|
|
133
|
-
}
|
|
134
|
-
|
|
135
|
-
/**
|
|
136
|
-
* Hook to check if public registration is enabled.
|
|
137
|
-
*/
|
|
138
|
-
export function usePublicRegistrationEnabled(): boolean {
|
|
139
|
-
const { settings } = usePublicAuthSettings();
|
|
140
|
-
return settings?.allowPublicRegistration ?? true;
|
|
141
|
-
}
|
|
142
|
-
|
|
143
|
-
/**
|
|
144
|
-
* Hook to check if password reset is enabled.
|
|
145
|
-
*/
|
|
146
|
-
export function usePasswordResetEnabled(): boolean {
|
|
147
|
-
const { settings } = usePublicAuthSettings();
|
|
148
|
-
return settings?.enablePasswordReset ?? true;
|
|
149
|
-
}
|
|
1
|
+
/**
|
|
2
|
+
* usePublicAuthSettings Hook
|
|
3
|
+
*
|
|
4
|
+
* Fetches public auth settings for pre-login pages (signup, login).
|
|
5
|
+
* Does NOT require authentication - settings are fetched via API.
|
|
6
|
+
*/
|
|
7
|
+
|
|
8
|
+
'use client';
|
|
9
|
+
|
|
10
|
+
import { useState, useEffect } from 'react';
|
|
11
|
+
import type { FederatedProvider } from '../types/auth';
|
|
12
|
+
|
|
13
|
+
export interface PublicAuthSettings {
|
|
14
|
+
enabledProviders: FederatedProvider[];
|
|
15
|
+
allowPublicRegistration: boolean;
|
|
16
|
+
allowFederatedLogin: boolean;
|
|
17
|
+
enablePasswordReset: boolean;
|
|
18
|
+
require2FA: boolean;
|
|
19
|
+
allowed2FAMethods: string[];
|
|
20
|
+
}
|
|
21
|
+
|
|
22
|
+
export interface UsePublicAuthSettingsResult {
|
|
23
|
+
settings: PublicAuthSettings | null;
|
|
24
|
+
isLoading: boolean;
|
|
25
|
+
error: Error | null;
|
|
26
|
+
}
|
|
27
|
+
|
|
28
|
+
// Map provider strings to FederatedProvider type
|
|
29
|
+
const PROVIDER_MAP: Record<string, FederatedProvider> = {
|
|
30
|
+
'google': 'google',
|
|
31
|
+
'apple': 'apple',
|
|
32
|
+
'facebook': 'facebook',
|
|
33
|
+
'github': 'github',
|
|
34
|
+
'microsoft': 'microsoft',
|
|
35
|
+
'azure-ad': 'microsoft',
|
|
36
|
+
};
|
|
37
|
+
|
|
38
|
+
const DEFAULT_SETTINGS: PublicAuthSettings = {
|
|
39
|
+
enabledProviders: [],
|
|
40
|
+
allowPublicRegistration: true,
|
|
41
|
+
allowFederatedLogin: false,
|
|
42
|
+
enablePasswordReset: true,
|
|
43
|
+
require2FA: true,
|
|
44
|
+
allowed2FAMethods: ['email', 'sms'],
|
|
45
|
+
};
|
|
46
|
+
|
|
47
|
+
/**
|
|
48
|
+
* Hook to fetch public auth settings for login/signup pages.
|
|
49
|
+
*
|
|
50
|
+
* @example
|
|
51
|
+
* ```tsx
|
|
52
|
+
* function SignupPage() {
|
|
53
|
+
* const { settings, isLoading } = usePublicAuthSettings();
|
|
54
|
+
*
|
|
55
|
+
* if (isLoading) return <Spinner />;
|
|
56
|
+
*
|
|
57
|
+
* return (
|
|
58
|
+
* <>
|
|
59
|
+
* {settings?.allowFederatedLogin && (
|
|
60
|
+
* <FederatedAuthSection providers={settings.enabledProviders} />
|
|
61
|
+
* )}
|
|
62
|
+
* {settings?.allowPublicRegistration && (
|
|
63
|
+
* <EmailSignupForm />
|
|
64
|
+
* )}
|
|
65
|
+
* </>
|
|
66
|
+
* );
|
|
67
|
+
* }
|
|
68
|
+
* ```
|
|
69
|
+
*/
|
|
70
|
+
export function usePublicAuthSettings(): UsePublicAuthSettingsResult {
|
|
71
|
+
const [settings, setSettings] = useState<PublicAuthSettings | null>(null);
|
|
72
|
+
const [isLoading, setIsLoading] = useState(true);
|
|
73
|
+
const [error, setError] = useState<Error | null>(null);
|
|
74
|
+
|
|
75
|
+
useEffect(() => {
|
|
76
|
+
let mounted = true;
|
|
77
|
+
|
|
78
|
+
async function fetchSettings() {
|
|
79
|
+
try {
|
|
80
|
+
const response = await fetch('/api/auth/settings');
|
|
81
|
+
|
|
82
|
+
if (!mounted) return;
|
|
83
|
+
|
|
84
|
+
if (!response.ok) {
|
|
85
|
+
throw new Error(`Failed to fetch auth settings: ${response.status}`);
|
|
86
|
+
}
|
|
87
|
+
|
|
88
|
+
const data = await response.json();
|
|
89
|
+
|
|
90
|
+
if (data.success && data.data) {
|
|
91
|
+
// Map provider strings to FederatedProvider type
|
|
92
|
+
const providers = (data.data.enabledProviders || [])
|
|
93
|
+
.map((p: string) => PROVIDER_MAP[p.toLowerCase()])
|
|
94
|
+
.filter((p: FederatedProvider | undefined): p is FederatedProvider => p !== undefined);
|
|
95
|
+
|
|
96
|
+
setSettings({
|
|
97
|
+
...data.data,
|
|
98
|
+
enabledProviders: providers,
|
|
99
|
+
});
|
|
100
|
+
} else {
|
|
101
|
+
setSettings(DEFAULT_SETTINGS);
|
|
102
|
+
}
|
|
103
|
+
|
|
104
|
+
setError(null);
|
|
105
|
+
} catch (err) {
|
|
106
|
+
if (!mounted) return;
|
|
107
|
+
console.warn('[usePublicAuthSettings] Failed to fetch settings:', err);
|
|
108
|
+
setError(err instanceof Error ? err : new Error(String(err)));
|
|
109
|
+
setSettings(DEFAULT_SETTINGS);
|
|
110
|
+
} finally {
|
|
111
|
+
if (mounted) {
|
|
112
|
+
setIsLoading(false);
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
}
|
|
116
|
+
|
|
117
|
+
fetchSettings();
|
|
118
|
+
|
|
119
|
+
return () => {
|
|
120
|
+
mounted = false;
|
|
121
|
+
};
|
|
122
|
+
}, []);
|
|
123
|
+
|
|
124
|
+
return { settings, isLoading, error };
|
|
125
|
+
}
|
|
126
|
+
|
|
127
|
+
/**
|
|
128
|
+
* Hook to check if federated (OAuth) login is enabled.
|
|
129
|
+
*/
|
|
130
|
+
export function useFederatedLoginEnabled(): boolean {
|
|
131
|
+
const { settings } = usePublicAuthSettings();
|
|
132
|
+
return settings?.allowFederatedLogin ?? false;
|
|
133
|
+
}
|
|
134
|
+
|
|
135
|
+
/**
|
|
136
|
+
* Hook to check if public registration is enabled.
|
|
137
|
+
*/
|
|
138
|
+
export function usePublicRegistrationEnabled(): boolean {
|
|
139
|
+
const { settings } = usePublicAuthSettings();
|
|
140
|
+
return settings?.allowPublicRegistration ?? true;
|
|
141
|
+
}
|
|
142
|
+
|
|
143
|
+
/**
|
|
144
|
+
* Hook to check if password reset is enabled.
|
|
145
|
+
*/
|
|
146
|
+
export function usePasswordResetEnabled(): boolean {
|
|
147
|
+
const { settings } = usePublicAuthSettings();
|
|
148
|
+
return settings?.enablePasswordReset ?? true;
|
|
149
|
+
}
|