@payez/next-mvp 4.8.0 → 4.8.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (301) hide show
  1. package/POST-INSTALL.md +408 -408
  2. package/README.md +859 -859
  3. package/dist/components/account/MobileNavDrawer.js +18 -18
  4. package/dist/components/account/UserAvatarMenu.js +1 -1
  5. package/dist/components/admin/AlertSettingsTab.js +40 -40
  6. package/dist/components/admin/LoggingSettingsTab.js +28 -28
  7. package/dist/lib/session-store.js +21 -21
  8. package/dist/lib/startup-init.js +19 -19
  9. package/dist/middleware/create-middleware.js +6 -5
  10. package/dist/pages/login/page.js +28 -28
  11. package/dist/pages/settings/EnhancedSettingsPage.js +17 -17
  12. package/dist/vibe/sessions.js +28 -3
  13. package/package.json +2 -2
  14. package/scripts/check-publish-eol.mjs +33 -15
  15. package/src/api/auth-handler.ts +550 -550
  16. package/src/api/index.ts +17 -17
  17. package/src/api-handlers/account/change-password.ts +170 -170
  18. package/src/api-handlers/account/masked-info.ts +46 -46
  19. package/src/api-handlers/account/profile.ts +99 -99
  20. package/src/api-handlers/account/recovery/forward.ts +117 -117
  21. package/src/api-handlers/account/recovery/initiate.ts +59 -59
  22. package/src/api-handlers/account/recovery/send-code.ts +21 -21
  23. package/src/api-handlers/account/recovery/verify-code.ts +20 -20
  24. package/src/api-handlers/account/reset-password.ts +87 -87
  25. package/src/api-handlers/account/send-code.ts +70 -70
  26. package/src/api-handlers/account/update-phone.ts +84 -84
  27. package/src/api-handlers/account/validate-password.ts +139 -139
  28. package/src/api-handlers/account/verify-email.ts +134 -134
  29. package/src/api-handlers/account/verify-sms.ts +134 -134
  30. package/src/api-handlers/admin/analytics.ts +452 -452
  31. package/src/api-handlers/admin/audit.ts +232 -232
  32. package/src/api-handlers/admin/index.ts +63 -63
  33. package/src/api-handlers/admin/redis-sessions.ts +259 -259
  34. package/src/api-handlers/admin/sessions.ts +327 -327
  35. package/src/api-handlers/admin/site-logs.ts +388 -388
  36. package/src/api-handlers/admin/stats.ts +260 -260
  37. package/src/api-handlers/admin/users.ts +251 -251
  38. package/src/api-handlers/admin/vibe-data.ts +333 -333
  39. package/src/api-handlers/anon/preferences.ts +123 -123
  40. package/src/api-handlers/auth/credential-login-email-code.ts +92 -92
  41. package/src/api-handlers/auth/credential-login.ts +948 -948
  42. package/src/api-handlers/auth/jwks.ts +31 -31
  43. package/src/api-handlers/auth/login.ts +252 -252
  44. package/src/api-handlers/auth/passkey-signin.ts +116 -116
  45. package/src/api-handlers/auth/refresh.ts +829 -829
  46. package/src/api-handlers/auth/signout.ts +201 -201
  47. package/src/api-handlers/auth/status.ts +23 -23
  48. package/src/api-handlers/auth/update-session.ts +144 -144
  49. package/src/api-handlers/auth/validate.ts +45 -45
  50. package/src/api-handlers/auth/verify-code.ts +116 -116
  51. package/src/api-handlers/mfa/backup-code-verify.ts +170 -170
  52. package/src/api-handlers/mfa/backup-codes.ts +42 -42
  53. package/src/api-handlers/mfa/methods.ts +47 -47
  54. package/src/api-handlers/mfa/totp-confirm.ts +43 -43
  55. package/src/api-handlers/mfa/totp-enroll.ts +43 -43
  56. package/src/api-handlers/mfa/totp-verify.ts +172 -172
  57. package/src/api-handlers/oauth/resume.ts +182 -182
  58. package/src/api-handlers/onboarding/send-email-code.ts +18 -18
  59. package/src/api-handlers/onboarding/set-password.ts +21 -21
  60. package/src/api-handlers/onboarding/verify-code.ts +20 -20
  61. package/src/api-handlers/onboarding/verify-welcome-email.ts +17 -17
  62. package/src/api-handlers/passkeys/list.ts +32 -32
  63. package/src/api-handlers/passkeys/manage.ts +55 -55
  64. package/src/api-handlers/passkeys/register-options.ts +43 -43
  65. package/src/api-handlers/passkeys/register-verify.ts +42 -42
  66. package/src/api-handlers/session/refresh-viability.ts +56 -56
  67. package/src/api-handlers/session/viability.ts +238 -238
  68. package/src/api-handlers/test/force-expire.ts +167 -167
  69. package/src/auth/auth-decision.ts +292 -292
  70. package/src/auth/better-auth.ts +1688 -1688
  71. package/src/auth/idp-oauth.ts +310 -310
  72. package/src/auth/password-reset-bridge.ts +98 -98
  73. package/src/auth/route-config.ts +236 -236
  74. package/src/auth/safe-callback.ts +199 -199
  75. package/src/auth/session-cookie-clear.ts +30 -30
  76. package/src/auth/session-reset-link.ts +159 -159
  77. package/src/auth/session-response-sanitizer.ts +151 -151
  78. package/src/auth/types/auth-types.ts +555 -555
  79. package/src/auth/types/index.ts +7 -7
  80. package/src/auth/unauthenticated-routes.ts +2 -2
  81. package/src/auth/utils/idp-client.ts +364 -364
  82. package/src/auth/utils/index.ts +6 -6
  83. package/src/auth/utils/token-utils.ts +243 -243
  84. package/src/client/AuthContext.tsx +192 -192
  85. package/src/client/better-auth-client.ts +70 -70
  86. package/src/client/fetch-with-auth.ts +47 -47
  87. package/src/client/fetchWithSession.ts +21 -21
  88. package/src/client/index.ts +13 -13
  89. package/src/client/useAnonSession.ts +131 -131
  90. package/src/components/SessionSync.tsx +138 -138
  91. package/src/components/SignalRHealthCheck.tsx +131 -131
  92. package/src/components/account/MobileNavDrawer.tsx +305 -305
  93. package/src/components/account/UserAvatarMenu.tsx +277 -277
  94. package/src/components/account/index.ts +13 -13
  95. package/src/components/admin/AlertSettingsTab.tsx +728 -728
  96. package/src/components/admin/AnalyticsTab.tsx +703 -703
  97. package/src/components/admin/DataBrowserTab.tsx +508 -508
  98. package/src/components/admin/LoggingSettingsTab.tsx +665 -665
  99. package/src/components/admin/SessionsTab.tsx +421 -421
  100. package/src/components/admin/StatsTab.tsx +379 -379
  101. package/src/components/admin/VibeAdminContext.tsx +87 -87
  102. package/src/components/admin/VibeAdminLayout.tsx +187 -187
  103. package/src/components/admin/index.ts +59 -59
  104. package/src/components/auth/CredentialSignInForm.tsx +240 -240
  105. package/src/components/auth/FederatedAuthSection.tsx +129 -129
  106. package/src/components/auth/ModeAwareLoginPage.tsx +146 -146
  107. package/src/components/auth/ModeAwareSignupPage.tsx +200 -200
  108. package/src/components/auth/PasswordResetBridge.tsx +30 -30
  109. package/src/components/auth/TraditionalAuthSection.tsx +103 -103
  110. package/src/components/recovery/CompleteStep.tsx +36 -36
  111. package/src/components/recovery/InitiateRecoveryStep.tsx +68 -68
  112. package/src/components/recovery/RequestedStep.tsx +30 -30
  113. package/src/components/recovery/SelectMethodStep.tsx +73 -73
  114. package/src/components/recovery/SetPasswordStep.tsx +118 -118
  115. package/src/components/recovery/VerifyCodeStep.tsx +90 -90
  116. package/src/components/reserved/ReservedRecoveryWarning.tsx +160 -160
  117. package/src/components/reserved/ReservedStatusBox.tsx +118 -118
  118. package/src/components/ui/BetaBadge.tsx +58 -58
  119. package/src/components/ui/Footer.tsx +93 -93
  120. package/src/config/env.ts +55 -55
  121. package/src/config/logger.ts +62 -62
  122. package/src/config/logging-config.ts +82 -82
  123. package/src/config/unauthenticated-routes.ts +19 -19
  124. package/src/config/vibe-log-transport.ts +264 -264
  125. package/src/edge/internal-api-url.ts +65 -65
  126. package/src/edge/middleware.ts +42 -42
  127. package/src/hooks/useAuth.ts +117 -117
  128. package/src/hooks/useAuthSettings.ts +109 -109
  129. package/src/hooks/useAvailableProviders.ts +143 -143
  130. package/src/hooks/usePasswordValidation.ts +127 -127
  131. package/src/hooks/useProfile.ts +82 -82
  132. package/src/hooks/usePublicAuthSettings.ts +171 -171
  133. package/src/hooks/useSessionExpiration.ts +101 -101
  134. package/src/hooks/useViabilitySession.ts +337 -337
  135. package/src/index.ts +64 -64
  136. package/src/lib/anon-session.ts +213 -213
  137. package/src/lib/api-handler.ts +643 -643
  138. package/src/lib/app-slug.ts +228 -228
  139. package/src/lib/authorize-resume.ts +172 -172
  140. package/src/lib/bearer-fetch.ts +31 -31
  141. package/src/lib/client-key.ts +88 -88
  142. package/src/lib/code-step-copy.ts +83 -83
  143. package/src/lib/credential-sign-in-client.ts +101 -101
  144. package/src/lib/demo-mode.ts +18 -18
  145. package/src/lib/device-id.ts +67 -67
  146. package/src/lib/ensure-fresh-access-token.ts +509 -509
  147. package/src/lib/geolocation.ts +265 -265
  148. package/src/lib/idp-client-config.ts +1005 -1005
  149. package/src/lib/idp-fetch.ts +169 -169
  150. package/src/lib/idp-url-guard.ts +37 -37
  151. package/src/lib/internal-api.ts +171 -171
  152. package/src/lib/jwt-decode-client.ts +45 -45
  153. package/src/lib/jwt-decode.ts +82 -82
  154. package/src/lib/lock-window.ts +49 -49
  155. package/src/lib/login-error-message.ts +41 -41
  156. package/src/lib/never-in-response.ts +64 -64
  157. package/src/lib/nextauth-secret.ts +168 -168
  158. package/src/lib/onboarding-proxy.ts +57 -57
  159. package/src/lib/password-rules.ts +50 -50
  160. package/src/lib/rate-limit-service.ts +9 -9
  161. package/src/lib/redis.ts +105 -105
  162. package/src/lib/refresh-token-validator.ts +64 -64
  163. package/src/lib/roles.ts +177 -177
  164. package/src/lib/safe-error-response.ts +149 -149
  165. package/src/lib/secret-validation.ts +8 -8
  166. package/src/lib/session-cookie-shape.ts +185 -185
  167. package/src/lib/session-store.ts +1092 -1092
  168. package/src/lib/session.ts +34 -34
  169. package/src/lib/single-flight.ts +64 -64
  170. package/src/lib/site-logger.ts +245 -245
  171. package/src/lib/standardized-client-api.ts +901 -901
  172. package/src/lib/startup-init.ts +276 -276
  173. package/src/lib/test-aware-get-token.ts +41 -41
  174. package/src/lib/token-expiry.ts +40 -40
  175. package/src/lib/token-lifecycle.ts +546 -546
  176. package/src/lib/token-log-id.ts +69 -69
  177. package/src/lib/twofa-rejection.ts +91 -91
  178. package/src/lib/types/api-responses.ts +336 -336
  179. package/src/lib/user-agent-parser.ts +252 -252
  180. package/src/logging/api/admin-analytics.ts +51 -51
  181. package/src/logging/api/audit-log.ts +53 -53
  182. package/src/logging/components/AdminAnalyticsLayout.tsx +49 -49
  183. package/src/logging/components/AuditLogViewer.tsx +125 -125
  184. package/src/logging/components/ErrorMetricsCard.tsx +98 -98
  185. package/src/logging/components/HealthMetricsCard.tsx +70 -70
  186. package/src/logging/hooks/useAdminAnalytics.ts +22 -22
  187. package/src/logging/hooks/useAuditLog.ts +24 -24
  188. package/src/logging/hooks/useErrorMetrics.ts +40 -40
  189. package/src/logging/hooks/useHealthMetrics.ts +44 -44
  190. package/src/logging/index.ts +18 -18
  191. package/src/logging/types/analytics.ts +81 -81
  192. package/src/logging/types/audit.ts +31 -31
  193. package/src/logging/types/index.ts +3 -3
  194. package/src/middleware/create-middleware.ts +1139 -1138
  195. package/src/middleware/rbac-check.ts +279 -279
  196. package/src/middleware/twofa-presets.ts +224 -224
  197. package/src/models/DecodedAccessToken.ts +16 -16
  198. package/src/models/SessionModel.ts +331 -331
  199. package/src/pages/admin-login/page.tsx +111 -111
  200. package/src/pages/admin-page-permissions/PagePermissionsAdminPage.tsx +527 -527
  201. package/src/pages/admin-page-permissions/index.ts +7 -7
  202. package/src/pages/admin-roles/RolesAdminPage.tsx +533 -533
  203. package/src/pages/admin-roles/index.ts +9 -9
  204. package/src/pages/admin-roles/modals.tsx +469 -469
  205. package/src/pages/client-admin/ClientSiteAdminPage.tsx +382 -382
  206. package/src/pages/client-admin/index.ts +33 -33
  207. package/src/pages/coming-soon/page.tsx +83 -83
  208. package/src/pages/login/page.tsx +338 -338
  209. package/src/pages/onboarding/index.ts +11 -11
  210. package/src/pages/onboarding/page.tsx +212 -212
  211. package/src/pages/profile/EnhancedProfilePage.tsx +514 -514
  212. package/src/pages/profile/index.ts +9 -9
  213. package/src/pages/profile/page.tsx +166 -166
  214. package/src/pages/recovery/page.tsx +267 -267
  215. package/src/pages/roles/MyRolesPage.tsx +211 -211
  216. package/src/pages/roles/components.tsx +294 -294
  217. package/src/pages/roles/index.ts +17 -17
  218. package/src/pages/security/EnhancedSecurityPage.tsx +660 -660
  219. package/src/pages/security/index.ts +12 -12
  220. package/src/pages/security/page.tsx +507 -507
  221. package/src/pages/settings/EnhancedSettingsPage.tsx +642 -642
  222. package/src/pages/settings/index.ts +9 -9
  223. package/src/pages/settings/page.tsx +47 -47
  224. package/src/pages/showcase/ShowcasePage.tsx +532 -532
  225. package/src/pages/showcase/index.ts +13 -13
  226. package/src/pages/test-env/EmergencyLogoutPage.tsx +192 -192
  227. package/src/pages/test-env/JwtInspectPage.tsx +449 -449
  228. package/src/pages/test-env/RefreshTokenPage.tsx +178 -178
  229. package/src/pages/test-env/TestEnvPage.tsx +130 -130
  230. package/src/pages/test-env/guarded.tsx +81 -81
  231. package/src/pages/test-env/index.ts +77 -77
  232. package/src/pages/test-env/redact-credentials.ts +96 -96
  233. package/src/pages/verify-code/page.tsx +746 -746
  234. package/src/routes/account/index.ts +31 -31
  235. package/src/routes/account/masked-info.ts +36 -36
  236. package/src/routes/account/send-code.ts +39 -39
  237. package/src/routes/account/update-phone.ts +13 -13
  238. package/src/routes/account/verify-email.ts +40 -40
  239. package/src/routes/account/verify-sms.ts +40 -40
  240. package/src/routes/auth/credential-login-email-code.ts +6 -6
  241. package/src/routes/auth/credential-login.ts +6 -6
  242. package/src/routes/auth/index.ts +22 -22
  243. package/src/routes/auth/logout.ts +111 -111
  244. package/src/routes/auth/nextauth.ts +45 -45
  245. package/src/routes/auth/passkey-signin.ts +13 -13
  246. package/src/routes/auth/refresh.ts +77 -77
  247. package/src/routes/auth/session-reset.ts +37 -37
  248. package/src/routes/auth/session.ts +261 -261
  249. package/src/routes/auth/settings.ts +181 -181
  250. package/src/routes/auth/viability.ts +519 -519
  251. package/src/routes/index.ts +17 -17
  252. package/src/routes/mfa/backup-code-verify.ts +1 -1
  253. package/src/routes/mfa/backup-codes.ts +10 -10
  254. package/src/routes/mfa/methods.ts +22 -22
  255. package/src/routes/mfa/totp-confirm.ts +10 -10
  256. package/src/routes/mfa/totp-enroll.ts +10 -10
  257. package/src/routes/mfa/totp-verify.ts +14 -14
  258. package/src/routes/onboarding/index.ts +15 -15
  259. package/src/routes/onboarding/send-email-code.ts +2 -2
  260. package/src/routes/onboarding/set-password.ts +2 -2
  261. package/src/routes/onboarding/verify-code.ts +2 -2
  262. package/src/routes/onboarding/verify-welcome-email.ts +2 -2
  263. package/src/routes/passkeys/list.ts +10 -10
  264. package/src/routes/passkeys/manage.ts +23 -23
  265. package/src/routes/passkeys/register-options.ts +10 -10
  266. package/src/routes/passkeys/register-verify.ts +10 -10
  267. package/src/routes/session/index.ts +7 -7
  268. package/src/routes/session/refresh-viability.ts +17 -17
  269. package/src/server/auth-guard.ts +203 -203
  270. package/src/server/auth.ts +486 -486
  271. package/src/server/decode-session.ts +309 -309
  272. package/src/server/slim-middleware.ts +117 -117
  273. package/src/server/verified-session-token.ts +103 -103
  274. package/src/server/with-auth.ts +93 -93
  275. package/src/services/signalrActivityService.ts +258 -258
  276. package/src/stores/authStore.ts +1900 -1900
  277. package/src/templates/instrumentation.ts +60 -60
  278. package/src/theme/ThemeProvider.tsx +39 -39
  279. package/src/theme/default.ts +33 -33
  280. package/src/theme/index.ts +31 -31
  281. package/src/theme/types.ts +69 -69
  282. package/src/theme/useTheme.ts +57 -57
  283. package/src/theme/utils.ts +40 -40
  284. package/src/types/api.ts +12 -12
  285. package/src/types/auth.d.ts +23 -23
  286. package/src/types/auth.ts +48 -48
  287. package/src/types/logging.ts +11 -11
  288. package/src/types/recovery.ts +54 -54
  289. package/src/utils/api.ts +401 -401
  290. package/src/utils/circuitBreaker.ts +40 -40
  291. package/src/utils/error-message.ts +108 -108
  292. package/src/utils/layout/reservedSpace.ts +124 -124
  293. package/src/utils/logout.ts +30 -30
  294. package/src/vibe/client.ts +877 -877
  295. package/src/vibe/enterprise-auth.ts +208 -208
  296. package/src/vibe/errors.ts +209 -209
  297. package/src/vibe/generic.ts +339 -339
  298. package/src/vibe/hooks/index.ts +367 -367
  299. package/src/vibe/index.ts +133 -133
  300. package/src/vibe/sessions.ts +925 -899
  301. package/src/vibe/types.ts +577 -577
@@ -1,277 +1,277 @@
1
- 'use client';
2
-
3
- import { useState, useRef, useEffect } from 'react';
4
- import { authClient } from '../../client/better-auth-client';
5
- import { useRouter } from 'next/navigation';
6
- import Image from 'next/image';
7
- import { User, Settings, Shield, LogOut } from 'lucide-react';
8
-
9
- export interface UserAvatarMenuProps {
10
- /** Base path for navigation (e.g., '/dashboard', '/account') */
11
- basePath?: string;
12
-
13
- /** Show Profile menu item (default: true) */
14
- showProfile?: boolean;
15
-
16
- /** Show Settings menu item (default: true) */
17
- showSettings?: boolean;
18
-
19
- /** Show Security menu item (default: true) */
20
- showSecurity?: boolean;
21
-
22
- /** Custom menu items to add before the sign out divider */
23
- customItems?: Array<{
24
- label: string;
25
- icon?: React.ReactNode;
26
- href?: string;
27
- onClick?: () => void;
28
- }>;
29
-
30
- /** Override default signOut behavior */
31
- onSignOut?: () => void;
32
- }
33
-
34
- export function UserAvatarMenu({
35
- basePath = '',
36
- showProfile = true,
37
- showSettings = true,
38
- showSecurity = true,
39
- customItems,
40
- onSignOut,
41
- }: UserAvatarMenuProps) {
42
- const { data: sessionData, isPending } = authClient.useSession();
43
- const session = sessionData;
44
- const status = isPending ? 'loading' : session ? 'authenticated' : 'unauthenticated';
45
- const router = useRouter();
46
- const [isOpen, setIsOpen] = useState(false);
47
- const menuRef = useRef<HTMLDivElement>(null);
48
-
49
- // Close menu when clicking outside
50
- useEffect(() => {
51
- function handleClickOutside(event: MouseEvent) {
52
- if (menuRef.current && !menuRef.current.contains(event.target as Node)) {
53
- setIsOpen(false);
54
- }
55
- }
56
-
57
- if (isOpen) {
58
- document.addEventListener('mousedown', handleClickOutside);
59
- return () => document.removeEventListener('mousedown', handleClickOutside);
60
- }
61
- }, [isOpen]);
62
-
63
- // Close menu on Escape
64
- useEffect(() => {
65
- function handleEscape(event: KeyboardEvent) {
66
- if (event.key === 'Escape') {
67
- setIsOpen(false);
68
- }
69
- }
70
-
71
- if (isOpen) {
72
- document.addEventListener('keydown', handleEscape);
73
- return () => document.removeEventListener('keydown', handleEscape);
74
- }
75
- }, [isOpen]);
76
-
77
- // Loading state
78
- if (status === 'loading') {
79
- return (
80
- <div className="h-10 w-10 rounded-full bg-gray-200 dark:bg-white/10 animate-pulse" />
81
- );
82
- }
83
-
84
- // Not authenticated
85
- if (!session?.user) {
86
- return null;
87
- }
88
-
89
- // Derive display initial from name or email — ignore anon/internal IDs
90
- const userName = (session.user as any)?.name;
91
- const userEmail = session.user.email;
92
- const displaySource = userName || userEmail;
93
- const userInitial = displaySource?.charAt(0).toUpperCase() || '?';
94
-
95
- const handleNavigation = (path: string) => {
96
- setIsOpen(false);
97
- router.push(path);
98
- };
99
-
100
- const handleSignOut = async () => {
101
- setIsOpen(false);
102
- if (onSignOut) {
103
- onSignOut();
104
- } else {
105
- // Use NEXT_PUBLIC env var or default to root
106
- const logoutUrl = process.env.NEXT_PUBLIC_LOGOUT_REDIRECT_URL || '/';
107
- // 272068: revoke server-side BEFORE the better-auth client sign-out clears
108
- // the cookie jar. authClient.signOut() ALONE leaves the server-side sess
109
- // record alive - a copied pre-signout cookie still authenticates. The
110
- // logout route (routes/auth/logout) runs deleteSessionEverywhere and
111
- // clears the __Secure- twin; it must still see the cookie, so it goes
112
- // first. Best-effort: a failed revoke must not trap the user on the page.
113
- try {
114
- await fetch('/api/auth/logout', { method: 'POST', credentials: 'include' });
115
- } catch {
116
- // sign-out continues regardless
117
- }
118
- await authClient.signOut();
119
- window.location.href = logoutUrl;
120
- }
121
- };
122
-
123
- const handleItemClick = (item: NonNullable<typeof customItems>[number]) => {
124
- setIsOpen(false);
125
- if (item.onClick) {
126
- item.onClick();
127
- } else if (item.href) {
128
- router.push(item.href);
129
- }
130
- };
131
-
132
- return (
133
- <div ref={menuRef} className="relative">
134
- {/* Avatar trigger button */}
135
- <button
136
- onClick={() => setIsOpen(!isOpen)}
137
- className="flex items-center justify-center h-10 w-10 rounded-full overflow-hidden bg-blue-500 text-white font-semibold text-lg hover:opacity-90 transition-opacity focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 dark:focus:ring-offset-slate-900"
138
- aria-label="User menu"
139
- aria-expanded={isOpen}
140
- aria-haspopup="true"
141
- >
142
- {session.user.image ? (
143
- <Image
144
- src={session.user.image}
145
- alt=""
146
- width={40}
147
- height={40}
148
- className="w-10 h-10 rounded-full object-cover"
149
- unoptimized
150
- />
151
- ) : (
152
- userInitial
153
- )}
154
- </button>
155
-
156
- {/* Dropdown menu */}
157
- {isOpen && (
158
- <div
159
- className="absolute right-0 mt-2 w-56 rounded-md shadow-lg z-50
160
- bg-white dark:bg-slate-900
161
- border border-gray-200 dark:border-slate-700"
162
- role="menu"
163
- aria-orientation="vertical"
164
- >
165
- {/* User identity label */}
166
- <div className="px-4 py-3 border-b border-gray-200 dark:border-slate-700">
167
- <div className="flex items-center gap-3">
168
- {session.user.image ? (
169
- <Image
170
- src={session.user.image}
171
- alt=""
172
- width={32}
173
- height={32}
174
- className="w-8 h-8 rounded-full flex-shrink-0"
175
- unoptimized
176
- />
177
- ) : (
178
- <div className="w-8 h-8 rounded-full bg-blue-500 flex items-center justify-center text-white font-semibold text-sm flex-shrink-0">
179
- {userInitial}
180
- </div>
181
- )}
182
- <div className="min-w-0">
183
- {userName && (
184
- <p className="text-sm font-medium text-gray-700 dark:text-slate-200 truncate">
185
- {userName}
186
- </p>
187
- )}
188
- {userEmail && (
189
- <p className="text-sm text-gray-500 dark:text-slate-400 truncate">
190
- {userEmail}
191
- </p>
192
- )}
193
- {!userName && !userEmail && (
194
- <p className="text-sm text-gray-500 dark:text-slate-400">
195
- Signed in
196
- </p>
197
- )}
198
- </div>
199
- </div>
200
- </div>
201
-
202
- {/* Menu items */}
203
- <div className="py-1">
204
- {showProfile && (
205
- <MenuItem
206
- icon={<User className="h-4 w-4" />}
207
- label="Profile"
208
- onClick={() => handleNavigation(`${basePath}/profile`)}
209
- />
210
- )}
211
-
212
- {showSettings && (
213
- <MenuItem
214
- icon={<Settings className="h-4 w-4" />}
215
- label="Settings"
216
- onClick={() => handleNavigation(`${basePath}/settings`)}
217
- />
218
- )}
219
-
220
- {showSecurity && (
221
- <MenuItem
222
- icon={<Shield className="h-4 w-4" />}
223
- label="Security"
224
- onClick={() => handleNavigation(`${basePath}/security`)}
225
- />
226
- )}
227
-
228
- {/* Custom items */}
229
- {customItems?.map((item, index) => (
230
- <MenuItem
231
- key={index}
232
- icon={item.icon}
233
- label={item.label}
234
- onClick={() => handleItemClick(item)}
235
- />
236
- ))}
237
- </div>
238
-
239
- {/* Sign out section */}
240
- <div className="border-t border-gray-200 dark:border-slate-700 py-1">
241
- <MenuItem
242
- icon={<LogOut className="h-4 w-4" />}
243
- label="Sign Out"
244
- onClick={handleSignOut}
245
- variant="danger"
246
- />
247
- </div>
248
- </div>
249
- )}
250
- </div>
251
- );
252
- }
253
-
254
- interface MenuItemProps {
255
- icon?: React.ReactNode;
256
- label: string;
257
- onClick: () => void;
258
- variant?: 'default' | 'danger';
259
- }
260
-
261
- function MenuItem({ icon, label, onClick, variant = 'default' }: MenuItemProps) {
262
- const baseClasses = "flex items-center w-full px-4 py-2 text-sm cursor-pointer transition-colors";
263
- const variantClasses = variant === 'danger'
264
- ? "text-red-600 dark:text-red-400 hover:bg-red-50 dark:hover:bg-slate-800"
265
- : "text-gray-700 dark:text-white hover:bg-gray-100 dark:hover:bg-slate-800";
266
-
267
- return (
268
- <button
269
- onClick={onClick}
270
- className={`${baseClasses} ${variantClasses}`}
271
- role="menuitem"
272
- >
273
- {icon && <span className="mr-3">{icon}</span>}
274
- <span>{label}</span>
275
- </button>
276
- );
277
- }
1
+ 'use client';
2
+
3
+ import { useState, useRef, useEffect } from 'react';
4
+ import { authClient } from '../../client/better-auth-client';
5
+ import { useRouter } from 'next/navigation';
6
+ import Image from 'next/image';
7
+ import { User, Settings, Shield, LogOut } from 'lucide-react';
8
+
9
+ export interface UserAvatarMenuProps {
10
+ /** Base path for navigation (e.g., '/dashboard', '/account') */
11
+ basePath?: string;
12
+
13
+ /** Show Profile menu item (default: true) */
14
+ showProfile?: boolean;
15
+
16
+ /** Show Settings menu item (default: true) */
17
+ showSettings?: boolean;
18
+
19
+ /** Show Security menu item (default: true) */
20
+ showSecurity?: boolean;
21
+
22
+ /** Custom menu items to add before the sign out divider */
23
+ customItems?: Array<{
24
+ label: string;
25
+ icon?: React.ReactNode;
26
+ href?: string;
27
+ onClick?: () => void;
28
+ }>;
29
+
30
+ /** Override default signOut behavior */
31
+ onSignOut?: () => void;
32
+ }
33
+
34
+ export function UserAvatarMenu({
35
+ basePath = '',
36
+ showProfile = true,
37
+ showSettings = true,
38
+ showSecurity = true,
39
+ customItems,
40
+ onSignOut,
41
+ }: UserAvatarMenuProps) {
42
+ const { data: sessionData, isPending } = authClient.useSession();
43
+ const session = sessionData;
44
+ const status = isPending ? 'loading' : session ? 'authenticated' : 'unauthenticated';
45
+ const router = useRouter();
46
+ const [isOpen, setIsOpen] = useState(false);
47
+ const menuRef = useRef<HTMLDivElement>(null);
48
+
49
+ // Close menu when clicking outside
50
+ useEffect(() => {
51
+ function handleClickOutside(event: MouseEvent) {
52
+ if (menuRef.current && !menuRef.current.contains(event.target as Node)) {
53
+ setIsOpen(false);
54
+ }
55
+ }
56
+
57
+ if (isOpen) {
58
+ document.addEventListener('mousedown', handleClickOutside);
59
+ return () => document.removeEventListener('mousedown', handleClickOutside);
60
+ }
61
+ }, [isOpen]);
62
+
63
+ // Close menu on Escape
64
+ useEffect(() => {
65
+ function handleEscape(event: KeyboardEvent) {
66
+ if (event.key === 'Escape') {
67
+ setIsOpen(false);
68
+ }
69
+ }
70
+
71
+ if (isOpen) {
72
+ document.addEventListener('keydown', handleEscape);
73
+ return () => document.removeEventListener('keydown', handleEscape);
74
+ }
75
+ }, [isOpen]);
76
+
77
+ // Loading state
78
+ if (status === 'loading') {
79
+ return (
80
+ <div className="h-10 w-10 rounded-full bg-gray-200 dark:bg-white/10 animate-pulse" />
81
+ );
82
+ }
83
+
84
+ // Not authenticated
85
+ if (!session?.user) {
86
+ return null;
87
+ }
88
+
89
+ // Derive display initial from name or email — ignore anon/internal IDs
90
+ const userName = (session.user as any)?.name;
91
+ const userEmail = session.user.email;
92
+ const displaySource = userName || userEmail;
93
+ const userInitial = displaySource?.charAt(0).toUpperCase() || '?';
94
+
95
+ const handleNavigation = (path: string) => {
96
+ setIsOpen(false);
97
+ router.push(path);
98
+ };
99
+
100
+ const handleSignOut = async () => {
101
+ setIsOpen(false);
102
+ if (onSignOut) {
103
+ onSignOut();
104
+ } else {
105
+ // Use NEXT_PUBLIC env var or default to root
106
+ const logoutUrl = process.env.NEXT_PUBLIC_LOGOUT_REDIRECT_URL || '/';
107
+ // 272068: revoke server-side BEFORE the better-auth client sign-out clears
108
+ // the cookie jar. authClient.signOut() ALONE leaves the server-side sess
109
+ // record alive - a copied pre-signout cookie still authenticates. The
110
+ // logout route (routes/auth/logout) runs deleteSessionEverywhere and
111
+ // clears the __Secure- twin; it must still see the cookie, so it goes
112
+ // first. Best-effort: a failed revoke must not trap the user on the page.
113
+ try {
114
+ await fetch('/api/auth/logout', { method: 'POST', credentials: 'include' });
115
+ } catch {
116
+ // sign-out continues regardless
117
+ }
118
+ await authClient.signOut();
119
+ window.location.href = logoutUrl;
120
+ }
121
+ };
122
+
123
+ const handleItemClick = (item: NonNullable<typeof customItems>[number]) => {
124
+ setIsOpen(false);
125
+ if (item.onClick) {
126
+ item.onClick();
127
+ } else if (item.href) {
128
+ router.push(item.href);
129
+ }
130
+ };
131
+
132
+ return (
133
+ <div ref={menuRef} className="relative">
134
+ {/* Avatar trigger button */}
135
+ <button
136
+ onClick={() => setIsOpen(!isOpen)}
137
+ className="flex items-center justify-center h-10 w-10 rounded-full overflow-hidden bg-blue-500 text-white font-semibold text-lg hover:opacity-90 transition-opacity focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 dark:focus:ring-offset-slate-900"
138
+ aria-label="User menu"
139
+ aria-expanded={isOpen}
140
+ aria-haspopup="true"
141
+ >
142
+ {session.user.image ? (
143
+ <Image
144
+ src={session.user.image}
145
+ alt=""
146
+ width={40}
147
+ height={40}
148
+ className="w-10 h-10 rounded-full object-cover"
149
+ unoptimized
150
+ />
151
+ ) : (
152
+ userInitial
153
+ )}
154
+ </button>
155
+
156
+ {/* Dropdown menu */}
157
+ {isOpen && (
158
+ <div
159
+ className="absolute right-0 mt-2 w-56 rounded-md shadow-lg z-50
160
+ bg-white dark:bg-slate-900
161
+ border border-gray-200 dark:border-slate-700"
162
+ role="menu"
163
+ aria-orientation="vertical"
164
+ >
165
+ {/* User identity label */}
166
+ <div className="px-4 py-3 border-b border-gray-200 dark:border-slate-700">
167
+ <div className="flex items-center gap-3">
168
+ {session.user.image ? (
169
+ <Image
170
+ src={session.user.image}
171
+ alt=""
172
+ width={32}
173
+ height={32}
174
+ className="w-8 h-8 rounded-full flex-shrink-0"
175
+ unoptimized
176
+ />
177
+ ) : (
178
+ <div className="w-8 h-8 rounded-full bg-blue-500 flex items-center justify-center text-white font-semibold text-sm flex-shrink-0">
179
+ {userInitial}
180
+ </div>
181
+ )}
182
+ <div className="min-w-0">
183
+ {userName && (
184
+ <p className="text-sm font-medium text-gray-700 dark:text-slate-200 truncate">
185
+ {userName}
186
+ </p>
187
+ )}
188
+ {userEmail && (
189
+ <p className="text-sm text-gray-500 dark:text-slate-400 truncate">
190
+ {userEmail}
191
+ </p>
192
+ )}
193
+ {!userName && !userEmail && (
194
+ <p className="text-sm text-gray-500 dark:text-slate-400">
195
+ Signed in
196
+ </p>
197
+ )}
198
+ </div>
199
+ </div>
200
+ </div>
201
+
202
+ {/* Menu items */}
203
+ <div className="py-1">
204
+ {showProfile && (
205
+ <MenuItem
206
+ icon={<User className="h-4 w-4" />}
207
+ label="Profile"
208
+ onClick={() => handleNavigation(`${basePath}/profile`)}
209
+ />
210
+ )}
211
+
212
+ {showSettings && (
213
+ <MenuItem
214
+ icon={<Settings className="h-4 w-4" />}
215
+ label="Settings"
216
+ onClick={() => handleNavigation(`${basePath}/settings`)}
217
+ />
218
+ )}
219
+
220
+ {showSecurity && (
221
+ <MenuItem
222
+ icon={<Shield className="h-4 w-4" />}
223
+ label="Security"
224
+ onClick={() => handleNavigation(`${basePath}/security`)}
225
+ />
226
+ )}
227
+
228
+ {/* Custom items */}
229
+ {customItems?.map((item, index) => (
230
+ <MenuItem
231
+ key={index}
232
+ icon={item.icon}
233
+ label={item.label}
234
+ onClick={() => handleItemClick(item)}
235
+ />
236
+ ))}
237
+ </div>
238
+
239
+ {/* Sign out section */}
240
+ <div className="border-t border-gray-200 dark:border-slate-700 py-1">
241
+ <MenuItem
242
+ icon={<LogOut className="h-4 w-4" />}
243
+ label="Sign Out"
244
+ onClick={handleSignOut}
245
+ variant="danger"
246
+ />
247
+ </div>
248
+ </div>
249
+ )}
250
+ </div>
251
+ );
252
+ }
253
+
254
+ interface MenuItemProps {
255
+ icon?: React.ReactNode;
256
+ label: string;
257
+ onClick: () => void;
258
+ variant?: 'default' | 'danger';
259
+ }
260
+
261
+ function MenuItem({ icon, label, onClick, variant = 'default' }: MenuItemProps) {
262
+ const baseClasses = "flex items-center w-full px-4 py-2 text-sm cursor-pointer transition-colors";
263
+ const variantClasses = variant === 'danger'
264
+ ? "text-red-600 dark:text-red-400 hover:bg-red-50 dark:hover:bg-slate-800"
265
+ : "text-gray-700 dark:text-white hover:bg-gray-100 dark:hover:bg-slate-800";
266
+
267
+ return (
268
+ <button
269
+ onClick={onClick}
270
+ className={`${baseClasses} ${variantClasses}`}
271
+ role="menuitem"
272
+ >
273
+ {icon && <span className="mr-3">{icon}</span>}
274
+ <span>{label}</span>
275
+ </button>
276
+ );
277
+ }
@@ -1,13 +1,13 @@
1
- 'use client';
2
-
3
- /**
4
- * Account Components for @payez/next-mvp
5
- *
6
- * User account related UI components.
7
- */
8
-
9
- export { UserAvatarMenu } from './UserAvatarMenu';
10
- export type { UserAvatarMenuProps } from './UserAvatarMenu';
11
-
12
- export { MobileNavDrawer } from './MobileNavDrawer';
13
- export type { MobileNavDrawerProps, NavItem, NavSection } from './MobileNavDrawer';
1
+ 'use client';
2
+
3
+ /**
4
+ * Account Components for @payez/next-mvp
5
+ *
6
+ * User account related UI components.
7
+ */
8
+
9
+ export { UserAvatarMenu } from './UserAvatarMenu';
10
+ export type { UserAvatarMenuProps } from './UserAvatarMenu';
11
+
12
+ export { MobileNavDrawer } from './MobileNavDrawer';
13
+ export type { MobileNavDrawerProps, NavItem, NavSection } from './MobileNavDrawer';