@payez/next-mvp 4.8.1 → 4.8.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/POST-INSTALL.md +408 -408
- package/README.md +859 -859
- package/dist/components/account/MobileNavDrawer.js +18 -18
- package/dist/components/account/UserAvatarMenu.js +1 -1
- package/dist/components/admin/AlertSettingsTab.js +40 -40
- package/dist/components/admin/LoggingSettingsTab.js +28 -28
- package/dist/lib/session-store.js +21 -21
- package/dist/lib/startup-init.js +19 -19
- package/dist/pages/login/page.js +28 -28
- package/dist/pages/settings/EnhancedSettingsPage.js +17 -17
- package/dist/vibe/sessions.js +28 -3
- package/package.json +2 -2
- package/scripts/check-publish-eol.mjs +33 -15
- package/src/api/auth-handler.ts +550 -550
- package/src/api/index.ts +17 -17
- package/src/api-handlers/account/change-password.ts +170 -170
- package/src/api-handlers/account/masked-info.ts +46 -46
- package/src/api-handlers/account/profile.ts +99 -99
- package/src/api-handlers/account/recovery/forward.ts +117 -117
- package/src/api-handlers/account/recovery/initiate.ts +59 -59
- package/src/api-handlers/account/recovery/send-code.ts +21 -21
- package/src/api-handlers/account/recovery/verify-code.ts +20 -20
- package/src/api-handlers/account/reset-password.ts +87 -87
- package/src/api-handlers/account/send-code.ts +70 -70
- package/src/api-handlers/account/update-phone.ts +84 -84
- package/src/api-handlers/account/validate-password.ts +139 -139
- package/src/api-handlers/account/verify-email.ts +134 -134
- package/src/api-handlers/account/verify-sms.ts +134 -134
- package/src/api-handlers/admin/analytics.ts +452 -452
- package/src/api-handlers/admin/audit.ts +232 -232
- package/src/api-handlers/admin/index.ts +63 -63
- package/src/api-handlers/admin/redis-sessions.ts +259 -259
- package/src/api-handlers/admin/sessions.ts +327 -327
- package/src/api-handlers/admin/site-logs.ts +388 -388
- package/src/api-handlers/admin/stats.ts +260 -260
- package/src/api-handlers/admin/users.ts +251 -251
- package/src/api-handlers/admin/vibe-data.ts +333 -333
- package/src/api-handlers/anon/preferences.ts +123 -123
- package/src/api-handlers/auth/credential-login-email-code.ts +92 -92
- package/src/api-handlers/auth/credential-login.ts +948 -948
- package/src/api-handlers/auth/jwks.ts +31 -31
- package/src/api-handlers/auth/login.ts +252 -252
- package/src/api-handlers/auth/passkey-signin.ts +116 -116
- package/src/api-handlers/auth/refresh.ts +829 -829
- package/src/api-handlers/auth/signout.ts +201 -201
- package/src/api-handlers/auth/status.ts +23 -23
- package/src/api-handlers/auth/update-session.ts +144 -144
- package/src/api-handlers/auth/validate.ts +45 -45
- package/src/api-handlers/auth/verify-code.ts +116 -116
- package/src/api-handlers/mfa/backup-code-verify.ts +170 -170
- package/src/api-handlers/mfa/backup-codes.ts +42 -42
- package/src/api-handlers/mfa/methods.ts +47 -47
- package/src/api-handlers/mfa/totp-confirm.ts +43 -43
- package/src/api-handlers/mfa/totp-enroll.ts +43 -43
- package/src/api-handlers/mfa/totp-verify.ts +172 -172
- package/src/api-handlers/oauth/resume.ts +182 -182
- package/src/api-handlers/onboarding/send-email-code.ts +18 -18
- package/src/api-handlers/onboarding/set-password.ts +21 -21
- package/src/api-handlers/onboarding/verify-code.ts +20 -20
- package/src/api-handlers/onboarding/verify-welcome-email.ts +17 -17
- package/src/api-handlers/passkeys/list.ts +32 -32
- package/src/api-handlers/passkeys/manage.ts +55 -55
- package/src/api-handlers/passkeys/register-options.ts +43 -43
- package/src/api-handlers/passkeys/register-verify.ts +42 -42
- package/src/api-handlers/session/refresh-viability.ts +56 -56
- package/src/api-handlers/session/viability.ts +238 -238
- package/src/api-handlers/test/force-expire.ts +167 -167
- package/src/auth/auth-decision.ts +292 -292
- package/src/auth/better-auth.ts +1688 -1688
- package/src/auth/idp-oauth.ts +310 -310
- package/src/auth/password-reset-bridge.ts +98 -98
- package/src/auth/revocation-fields.ts +16 -16
- package/src/auth/route-config.ts +236 -236
- package/src/auth/safe-callback.ts +199 -199
- package/src/auth/session-cookie-clear.ts +30 -30
- package/src/auth/session-reset-link.ts +159 -159
- package/src/auth/session-response-sanitizer.ts +151 -151
- package/src/auth/types/auth-types.ts +555 -555
- package/src/auth/types/index.ts +7 -7
- package/src/auth/unauthenticated-routes.ts +2 -2
- package/src/auth/utils/idp-client.ts +364 -364
- package/src/auth/utils/index.ts +6 -6
- package/src/auth/utils/token-utils.ts +243 -243
- package/src/client/AuthContext.tsx +192 -192
- package/src/client/better-auth-client.ts +70 -70
- package/src/client/fetch-with-auth.ts +47 -47
- package/src/client/fetchWithSession.ts +21 -21
- package/src/client/index.ts +13 -13
- package/src/client/useAnonSession.ts +131 -131
- package/src/components/SessionSync.tsx +138 -138
- package/src/components/SignalRHealthCheck.tsx +131 -131
- package/src/components/account/MobileNavDrawer.tsx +305 -305
- package/src/components/account/UserAvatarMenu.tsx +277 -277
- package/src/components/account/index.ts +13 -13
- package/src/components/admin/AlertSettingsTab.tsx +728 -728
- package/src/components/admin/AnalyticsTab.tsx +703 -703
- package/src/components/admin/DataBrowserTab.tsx +508 -508
- package/src/components/admin/LoggingSettingsTab.tsx +665 -665
- package/src/components/admin/SessionsTab.tsx +421 -421
- package/src/components/admin/StatsTab.tsx +379 -379
- package/src/components/admin/VibeAdminContext.tsx +87 -87
- package/src/components/admin/VibeAdminLayout.tsx +187 -187
- package/src/components/admin/index.ts +59 -59
- package/src/components/auth/CredentialSignInForm.tsx +240 -240
- package/src/components/auth/FederatedAuthSection.tsx +129 -129
- package/src/components/auth/ModeAwareLoginPage.tsx +146 -146
- package/src/components/auth/ModeAwareSignupPage.tsx +200 -200
- package/src/components/auth/PasswordResetBridge.tsx +30 -30
- package/src/components/auth/TraditionalAuthSection.tsx +103 -103
- package/src/components/recovery/CompleteStep.tsx +36 -36
- package/src/components/recovery/InitiateRecoveryStep.tsx +68 -68
- package/src/components/recovery/RequestedStep.tsx +30 -30
- package/src/components/recovery/SelectMethodStep.tsx +73 -73
- package/src/components/recovery/SetPasswordStep.tsx +118 -118
- package/src/components/recovery/VerifyCodeStep.tsx +90 -90
- package/src/components/reserved/ReservedRecoveryWarning.tsx +160 -160
- package/src/components/reserved/ReservedStatusBox.tsx +118 -118
- package/src/components/ui/BetaBadge.tsx +58 -58
- package/src/components/ui/Footer.tsx +93 -93
- package/src/config/env.ts +55 -55
- package/src/config/logger.ts +62 -62
- package/src/config/logging-config.ts +82 -82
- package/src/config/unauthenticated-routes.ts +19 -19
- package/src/config/vibe-log-transport.ts +264 -264
- package/src/edge/internal-api-url.ts +65 -65
- package/src/edge/middleware.ts +42 -42
- package/src/hooks/useAuth.ts +117 -117
- package/src/hooks/useAuthSettings.ts +109 -109
- package/src/hooks/useAvailableProviders.ts +143 -143
- package/src/hooks/usePasswordValidation.ts +127 -127
- package/src/hooks/useProfile.ts +82 -82
- package/src/hooks/usePublicAuthSettings.ts +171 -171
- package/src/hooks/useSessionExpiration.ts +101 -101
- package/src/hooks/useViabilitySession.ts +337 -337
- package/src/index.ts +64 -64
- package/src/lib/anon-session.ts +213 -213
- package/src/lib/api-handler.ts +643 -643
- package/src/lib/app-slug.ts +228 -228
- package/src/lib/authorize-resume.ts +172 -172
- package/src/lib/bearer-fetch.ts +31 -31
- package/src/lib/client-key.ts +88 -88
- package/src/lib/code-step-copy.ts +83 -83
- package/src/lib/credential-sign-in-client.ts +101 -101
- package/src/lib/demo-mode.ts +18 -18
- package/src/lib/device-id.ts +67 -67
- package/src/lib/ensure-fresh-access-token.ts +509 -509
- package/src/lib/geolocation.ts +265 -265
- package/src/lib/idp-client-config.ts +1005 -1005
- package/src/lib/idp-fetch.ts +169 -169
- package/src/lib/idp-url-guard.ts +37 -37
- package/src/lib/internal-api.ts +171 -171
- package/src/lib/jwt-decode-client.ts +45 -45
- package/src/lib/jwt-decode.ts +82 -82
- package/src/lib/lock-window.ts +49 -49
- package/src/lib/login-error-message.ts +41 -41
- package/src/lib/never-in-response.ts +64 -64
- package/src/lib/nextauth-secret.ts +168 -168
- package/src/lib/onboarding-proxy.ts +57 -57
- package/src/lib/password-rules.ts +50 -50
- package/src/lib/rate-limit-service.ts +9 -9
- package/src/lib/redis.ts +105 -105
- package/src/lib/refresh-token-validator.ts +64 -64
- package/src/lib/roles.ts +177 -177
- package/src/lib/safe-error-response.ts +149 -149
- package/src/lib/secret-validation.ts +8 -8
- package/src/lib/session-cookie-shape.ts +185 -185
- package/src/lib/session-store.ts +1092 -1092
- package/src/lib/session.ts +34 -34
- package/src/lib/single-flight.ts +64 -64
- package/src/lib/site-logger.ts +245 -245
- package/src/lib/standardized-client-api.ts +901 -901
- package/src/lib/startup-init.ts +276 -276
- package/src/lib/test-aware-get-token.ts +41 -41
- package/src/lib/token-expiry.ts +40 -40
- package/src/lib/token-lifecycle.ts +546 -546
- package/src/lib/token-log-id.ts +69 -69
- package/src/lib/twofa-rejection.ts +91 -91
- package/src/lib/types/api-responses.ts +336 -336
- package/src/lib/user-agent-parser.ts +252 -252
- package/src/logging/api/admin-analytics.ts +51 -51
- package/src/logging/api/audit-log.ts +53 -53
- package/src/logging/components/AdminAnalyticsLayout.tsx +49 -49
- package/src/logging/components/AuditLogViewer.tsx +125 -125
- package/src/logging/components/ErrorMetricsCard.tsx +98 -98
- package/src/logging/components/HealthMetricsCard.tsx +70 -70
- package/src/logging/hooks/useAdminAnalytics.ts +22 -22
- package/src/logging/hooks/useAuditLog.ts +24 -24
- package/src/logging/hooks/useErrorMetrics.ts +40 -40
- package/src/logging/hooks/useHealthMetrics.ts +44 -44
- package/src/logging/index.ts +18 -18
- package/src/logging/types/analytics.ts +81 -81
- package/src/logging/types/audit.ts +31 -31
- package/src/logging/types/index.ts +3 -3
- package/src/middleware/create-middleware.ts +1141 -1141
- package/src/middleware/rbac-check.ts +279 -279
- package/src/middleware/twofa-presets.ts +224 -224
- package/src/models/DecodedAccessToken.ts +16 -16
- package/src/models/SessionModel.ts +331 -331
- package/src/pages/admin-login/page.tsx +111 -111
- package/src/pages/admin-page-permissions/PagePermissionsAdminPage.tsx +527 -527
- package/src/pages/admin-page-permissions/index.ts +7 -7
- package/src/pages/admin-roles/RolesAdminPage.tsx +533 -533
- package/src/pages/admin-roles/index.ts +9 -9
- package/src/pages/admin-roles/modals.tsx +469 -469
- package/src/pages/client-admin/ClientSiteAdminPage.tsx +382 -382
- package/src/pages/client-admin/index.ts +33 -33
- package/src/pages/coming-soon/page.tsx +83 -83
- package/src/pages/login/page.tsx +338 -338
- package/src/pages/onboarding/index.ts +11 -11
- package/src/pages/onboarding/page.tsx +212 -212
- package/src/pages/profile/EnhancedProfilePage.tsx +514 -514
- package/src/pages/profile/index.ts +9 -9
- package/src/pages/profile/page.tsx +166 -166
- package/src/pages/recovery/page.tsx +267 -267
- package/src/pages/roles/MyRolesPage.tsx +211 -211
- package/src/pages/roles/components.tsx +294 -294
- package/src/pages/roles/index.ts +17 -17
- package/src/pages/security/EnhancedSecurityPage.tsx +660 -660
- package/src/pages/security/index.ts +12 -12
- package/src/pages/security/page.tsx +507 -507
- package/src/pages/service-unavailable/page.tsx +63 -63
- package/src/pages/settings/EnhancedSettingsPage.tsx +642 -642
- package/src/pages/settings/index.ts +9 -9
- package/src/pages/settings/page.tsx +47 -47
- package/src/pages/showcase/ShowcasePage.tsx +532 -532
- package/src/pages/showcase/index.ts +13 -13
- package/src/pages/test-env/EmergencyLogoutPage.tsx +192 -192
- package/src/pages/test-env/JwtInspectPage.tsx +449 -449
- package/src/pages/test-env/RefreshTokenPage.tsx +178 -178
- package/src/pages/test-env/TestEnvPage.tsx +130 -130
- package/src/pages/test-env/guarded.tsx +81 -81
- package/src/pages/test-env/index.ts +77 -77
- package/src/pages/test-env/redact-credentials.ts +96 -96
- package/src/pages/verify-code/page.tsx +746 -746
- package/src/routes/account/index.ts +31 -31
- package/src/routes/account/masked-info.ts +36 -36
- package/src/routes/account/send-code.ts +39 -39
- package/src/routes/account/update-phone.ts +13 -13
- package/src/routes/account/verify-email.ts +40 -40
- package/src/routes/account/verify-sms.ts +40 -40
- package/src/routes/auth/credential-login-email-code.ts +6 -6
- package/src/routes/auth/credential-login.ts +6 -6
- package/src/routes/auth/index.ts +22 -22
- package/src/routes/auth/logout.ts +111 -111
- package/src/routes/auth/nextauth.ts +45 -45
- package/src/routes/auth/passkey-signin.ts +13 -13
- package/src/routes/auth/refresh.ts +77 -77
- package/src/routes/auth/session-reset.ts +37 -37
- package/src/routes/auth/session.ts +261 -261
- package/src/routes/auth/settings.ts +181 -181
- package/src/routes/auth/viability.ts +519 -519
- package/src/routes/index.ts +17 -17
- package/src/routes/mfa/backup-code-verify.ts +1 -1
- package/src/routes/mfa/backup-codes.ts +10 -10
- package/src/routes/mfa/methods.ts +22 -22
- package/src/routes/mfa/totp-confirm.ts +10 -10
- package/src/routes/mfa/totp-enroll.ts +10 -10
- package/src/routes/mfa/totp-verify.ts +14 -14
- package/src/routes/onboarding/index.ts +15 -15
- package/src/routes/onboarding/send-email-code.ts +2 -2
- package/src/routes/onboarding/set-password.ts +2 -2
- package/src/routes/onboarding/verify-code.ts +2 -2
- package/src/routes/onboarding/verify-welcome-email.ts +2 -2
- package/src/routes/passkeys/list.ts +10 -10
- package/src/routes/passkeys/manage.ts +23 -23
- package/src/routes/passkeys/register-options.ts +10 -10
- package/src/routes/passkeys/register-verify.ts +10 -10
- package/src/routes/session/index.ts +7 -7
- package/src/routes/session/refresh-viability.ts +17 -17
- package/src/server/auth-guard.ts +203 -203
- package/src/server/auth.ts +486 -486
- package/src/server/decode-session.ts +309 -309
- package/src/server/slim-middleware.ts +117 -117
- package/src/server/verified-session-token.ts +103 -103
- package/src/server/with-auth.ts +93 -93
- package/src/services/signalrActivityService.ts +258 -258
- package/src/stores/authStore.ts +1900 -1900
- package/src/templates/instrumentation.ts +60 -60
- package/src/theme/ThemeProvider.tsx +39 -39
- package/src/theme/default.ts +33 -33
- package/src/theme/index.ts +31 -31
- package/src/theme/types.ts +69 -69
- package/src/theme/useTheme.ts +57 -57
- package/src/theme/utils.ts +40 -40
- package/src/types/api.ts +12 -12
- package/src/types/auth.d.ts +23 -23
- package/src/types/auth.ts +48 -48
- package/src/types/logging.ts +11 -11
- package/src/types/recovery.ts +54 -54
- package/src/utils/api.ts +401 -401
- package/src/utils/circuitBreaker.ts +40 -40
- package/src/utils/error-message.ts +108 -108
- package/src/utils/layout/reservedSpace.ts +124 -124
- package/src/utils/logout.ts +30 -30
- package/src/vibe/client.ts +877 -877
- package/src/vibe/enterprise-auth.ts +208 -208
- package/src/vibe/errors.ts +209 -209
- package/src/vibe/generic.ts +339 -339
- package/src/vibe/hooks/index.ts +367 -367
- package/src/vibe/index.ts +133 -133
- package/src/vibe/sessions.ts +925 -899
- package/src/vibe/types.ts +577 -577
|
@@ -1,13 +1,13 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Feature Showcase Page
|
|
3
|
-
*
|
|
4
|
-
* Export showcase page for MVP consumers.
|
|
5
|
-
*
|
|
6
|
-
* Usage:
|
|
7
|
-
* ```typescript
|
|
8
|
-
* // app/showcase/page.tsx
|
|
9
|
-
* export { ShowcasePage as default } from '@payez/next-mvp/pages/showcase';
|
|
10
|
-
* ```
|
|
11
|
-
*/
|
|
12
|
-
|
|
13
|
-
export { ShowcasePage, ShowcasePage as default } from './ShowcasePage';
|
|
1
|
+
/**
|
|
2
|
+
* Feature Showcase Page
|
|
3
|
+
*
|
|
4
|
+
* Export showcase page for MVP consumers.
|
|
5
|
+
*
|
|
6
|
+
* Usage:
|
|
7
|
+
* ```typescript
|
|
8
|
+
* // app/showcase/page.tsx
|
|
9
|
+
* export { ShowcasePage as default } from '@payez/next-mvp/pages/showcase';
|
|
10
|
+
* ```
|
|
11
|
+
*/
|
|
12
|
+
|
|
13
|
+
export { ShowcasePage, ShowcasePage as default } from './ShowcasePage';
|
|
@@ -1,192 +1,192 @@
|
|
|
1
|
-
'use client';
|
|
2
|
-
|
|
3
|
-
import { authClient } from '../../client/better-auth-client';
|
|
4
|
-
import { useState, useEffect } from 'react';
|
|
5
|
-
|
|
6
|
-
/**
|
|
7
|
-
* ⚠️ DESTRUCTIVE DEBUG PAGE — NOT INTENDED FOR PRODUCTION. ⚠️
|
|
8
|
-
*
|
|
9
|
-
* Emergency Logout Page. Nuclear option for clearing auth state when things go
|
|
10
|
-
* wrong: clears cookies, clears localStorage, and forces a signout.
|
|
11
|
-
*
|
|
12
|
-
* ────────────────────────── SCOPE, STATED HONESTLY (QAPert 35000 sweep) ──────────────────────────
|
|
13
|
-
* This is the MILDEST of the four test-env pages and this warning is
|
|
14
|
-
* deliberately weaker than its siblings'. The damage is SELF-INFLICTED and
|
|
15
|
-
* recoverable: a visitor can only destroy their OWN client-side auth state,
|
|
16
|
-
* and the remedy is to sign in again. It exposes no credential and mutates no
|
|
17
|
-
* other user's state. Do not read the banner above as equivalent to the JWT
|
|
18
|
-
* inspector's — inflating a mild finding is how real ones get discounted.
|
|
19
|
-
*
|
|
20
|
-
* It is flagged only because it ships with no env gate of its own, and because
|
|
21
|
-
* clearing localStorage wholesale can discard unrelated application state that
|
|
22
|
-
* a consuming app kept there. Mounting it is the gate.
|
|
23
|
-
*
|
|
24
|
-
* ────────────────────────── IF YOU MOUNT IT, MOUNT IT LIKE THIS ──────────────────────────
|
|
25
|
-
* ```typescript
|
|
26
|
-
* // app/test-env/emergency-logout/page.tsx — TEST/DEV ENVIRONMENTS ONLY
|
|
27
|
-
* export { EmergencyLogoutPage as default } from '@payez/next-mvp/pages/test-env';
|
|
28
|
-
* ```
|
|
29
|
-
*/
|
|
30
|
-
export function EmergencyLogoutPage() {
|
|
31
|
-
const { data: sessionData, isPending } = authClient.useSession();
|
|
32
|
-
const status = isPending ? 'loading' : sessionData ? 'authenticated' : 'unauthenticated';
|
|
33
|
-
const [isDarkMode, setIsDarkMode] = useState(false);
|
|
34
|
-
const [isLoggingOut, setIsLoggingOut] = useState(false);
|
|
35
|
-
const [logoutComplete, setLogoutComplete] = useState(false);
|
|
36
|
-
const [logs, setLogs] = useState<string[]>([]);
|
|
37
|
-
|
|
38
|
-
useEffect(() => {
|
|
39
|
-
const checkDarkMode = () => {
|
|
40
|
-
const isDark = document.documentElement.classList.contains('dark') ||
|
|
41
|
-
window.matchMedia('(prefers-color-scheme: dark)').matches;
|
|
42
|
-
setIsDarkMode(isDark);
|
|
43
|
-
};
|
|
44
|
-
checkDarkMode();
|
|
45
|
-
const mediaQuery = window.matchMedia('(prefers-color-scheme: dark)');
|
|
46
|
-
mediaQuery.addEventListener('change', checkDarkMode);
|
|
47
|
-
return () => mediaQuery.removeEventListener('change', checkDarkMode);
|
|
48
|
-
}, []);
|
|
49
|
-
|
|
50
|
-
const addLog = (message: string) => {
|
|
51
|
-
setLogs(prev => [...prev, `[${new Date().toISOString().substring(11, 19)}] ${message}`]);
|
|
52
|
-
};
|
|
53
|
-
|
|
54
|
-
const handleEmergencyLogout = async () => {
|
|
55
|
-
setIsLoggingOut(true);
|
|
56
|
-
setLogs([]);
|
|
57
|
-
|
|
58
|
-
try {
|
|
59
|
-
// Step 1: Clear all cookies
|
|
60
|
-
addLog('Clearing cookies...');
|
|
61
|
-
document.cookie.split(';').forEach(cookie => {
|
|
62
|
-
const name = cookie.split('=')[0].trim();
|
|
63
|
-
document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/`;
|
|
64
|
-
document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/;domain=${window.location.hostname}`;
|
|
65
|
-
});
|
|
66
|
-
addLog('Cookies cleared');
|
|
67
|
-
|
|
68
|
-
// Step 2: Clear localStorage
|
|
69
|
-
addLog('Clearing localStorage...');
|
|
70
|
-
const keysToRemove: string[] = [];
|
|
71
|
-
for (let i = 0; i < localStorage.length; i++) {
|
|
72
|
-
const key = localStorage.key(i);
|
|
73
|
-
if (key) keysToRemove.push(key);
|
|
74
|
-
}
|
|
75
|
-
keysToRemove.forEach(key => {
|
|
76
|
-
localStorage.removeItem(key);
|
|
77
|
-
addLog(` Removed: ${key}`);
|
|
78
|
-
});
|
|
79
|
-
addLog(`localStorage cleared (${keysToRemove.length} items)`);
|
|
80
|
-
|
|
81
|
-
// Step 3: Clear sessionStorage
|
|
82
|
-
addLog('Clearing sessionStorage...');
|
|
83
|
-
sessionStorage.clear();
|
|
84
|
-
addLog('sessionStorage cleared');
|
|
85
|
-
|
|
86
|
-
// Step 4: Call Better Auth signOut
|
|
87
|
-
addLog('Calling Better Auth signOut...');
|
|
88
|
-
await authClient.signOut();
|
|
89
|
-
addLog('Better Auth signOut complete');
|
|
90
|
-
|
|
91
|
-
// Step 5: Clear any auth-related fetch cache
|
|
92
|
-
addLog('Invalidating caches...');
|
|
93
|
-
if ('caches' in window) {
|
|
94
|
-
const cacheNames = await caches.keys();
|
|
95
|
-
await Promise.all(cacheNames.map(name => caches.delete(name)));
|
|
96
|
-
addLog(`Cleared ${cacheNames.length} caches`);
|
|
97
|
-
}
|
|
98
|
-
|
|
99
|
-
addLog('Emergency logout complete!');
|
|
100
|
-
setLogoutComplete(true);
|
|
101
|
-
|
|
102
|
-
} catch (error) {
|
|
103
|
-
addLog(`ERROR: ${error instanceof Error ? error.message : String(error)}`);
|
|
104
|
-
} finally {
|
|
105
|
-
setIsLoggingOut(false);
|
|
106
|
-
}
|
|
107
|
-
};
|
|
108
|
-
|
|
109
|
-
const handleRedirectHome = () => {
|
|
110
|
-
window.location.href = '/';
|
|
111
|
-
};
|
|
112
|
-
|
|
113
|
-
return (
|
|
114
|
-
<div className={`min-h-screen p-8 ${isDarkMode ? 'bg-slate-950 text-white' : 'bg-gray-50 text-gray-900'}`}>
|
|
115
|
-
<div className="max-w-2xl mx-auto">
|
|
116
|
-
<h1 className="text-2xl font-bold mb-2">Emergency Logout</h1>
|
|
117
|
-
<p className={`mb-6 ${isDarkMode ? 'text-gray-400' : 'text-gray-600'}`}>
|
|
118
|
-
Nuclear option for when auth gets into a bad state. Clears everything.
|
|
119
|
-
</p>
|
|
120
|
-
|
|
121
|
-
{/* Current Status */}
|
|
122
|
-
<div className={`mb-6 p-4 rounded-lg ${isDarkMode ? 'bg-slate-900' : 'bg-white border'}`}>
|
|
123
|
-
<h2 className="font-semibold mb-2">Current Status</h2>
|
|
124
|
-
<div className="flex items-center gap-2">
|
|
125
|
-
<span className={`inline-block w-3 h-3 rounded-full ${
|
|
126
|
-
status === 'authenticated' ? 'bg-green-500' :
|
|
127
|
-
status === 'loading' ? 'bg-yellow-500' : 'bg-red-500'
|
|
128
|
-
}`} />
|
|
129
|
-
<span className="capitalize">{status}</span>
|
|
130
|
-
</div>
|
|
131
|
-
</div>
|
|
132
|
-
|
|
133
|
-
{/* Action Button */}
|
|
134
|
-
{!logoutComplete ? (
|
|
135
|
-
<button
|
|
136
|
-
onClick={handleEmergencyLogout}
|
|
137
|
-
disabled={isLoggingOut}
|
|
138
|
-
className={`w-full py-3 px-4 rounded-lg font-semibold transition-colors ${
|
|
139
|
-
isLoggingOut
|
|
140
|
-
? 'bg-gray-500 cursor-not-allowed'
|
|
141
|
-
: 'bg-red-600 hover:bg-red-700 text-white'
|
|
142
|
-
}`}
|
|
143
|
-
>
|
|
144
|
-
{isLoggingOut ? 'Logging out...' : 'Emergency Logout'}
|
|
145
|
-
</button>
|
|
146
|
-
) : (
|
|
147
|
-
<div className="space-y-3">
|
|
148
|
-
<div className={`p-4 rounded-lg ${isDarkMode ? 'bg-green-900/30 border border-green-700' : 'bg-green-50 border border-green-200'}`}>
|
|
149
|
-
<p className={`font-semibold ${isDarkMode ? 'text-green-400' : 'text-green-700'}`}>
|
|
150
|
-
Logout complete! All auth state has been cleared.
|
|
151
|
-
</p>
|
|
152
|
-
</div>
|
|
153
|
-
<button
|
|
154
|
-
onClick={handleRedirectHome}
|
|
155
|
-
className="w-full py-3 px-4 rounded-lg font-semibold bg-blue-600 hover:bg-blue-700 text-white transition-colors"
|
|
156
|
-
>
|
|
157
|
-
Go to Home Page
|
|
158
|
-
</button>
|
|
159
|
-
</div>
|
|
160
|
-
)}
|
|
161
|
-
|
|
162
|
-
{/* Log Output */}
|
|
163
|
-
{logs.length > 0 && (
|
|
164
|
-
<div className={`mt-6 p-4 rounded-lg font-mono text-sm ${isDarkMode ? 'bg-slate-900' : 'bg-gray-100'}`}>
|
|
165
|
-
<h3 className="font-semibold mb-2">Log</h3>
|
|
166
|
-
<div className="space-y-1">
|
|
167
|
-
{logs.map((log, i) => (
|
|
168
|
-
<div key={i} className={log.includes('ERROR') ? 'text-red-500' : isDarkMode ? 'text-gray-300' : 'text-gray-700'}>
|
|
169
|
-
{log}
|
|
170
|
-
</div>
|
|
171
|
-
))}
|
|
172
|
-
</div>
|
|
173
|
-
</div>
|
|
174
|
-
)}
|
|
175
|
-
|
|
176
|
-
{/* What this does */}
|
|
177
|
-
<div className={`mt-8 p-4 rounded-lg ${isDarkMode ? 'bg-slate-900' : 'bg-white border'}`}>
|
|
178
|
-
<h2 className="font-semibold mb-2">What this does</h2>
|
|
179
|
-
<ul className={`list-disc list-inside space-y-1 ${isDarkMode ? 'text-gray-400' : 'text-gray-600'}`}>
|
|
180
|
-
<li>Clears all browser cookies</li>
|
|
181
|
-
<li>Clears localStorage (theme, preferences, etc.)</li>
|
|
182
|
-
<li>Clears sessionStorage</li>
|
|
183
|
-
<li>Calls NextAuth signOut</li>
|
|
184
|
-
<li>Invalidates browser caches</li>
|
|
185
|
-
</ul>
|
|
186
|
-
</div>
|
|
187
|
-
</div>
|
|
188
|
-
</div>
|
|
189
|
-
);
|
|
190
|
-
}
|
|
191
|
-
|
|
192
|
-
export default EmergencyLogoutPage;
|
|
1
|
+
'use client';
|
|
2
|
+
|
|
3
|
+
import { authClient } from '../../client/better-auth-client';
|
|
4
|
+
import { useState, useEffect } from 'react';
|
|
5
|
+
|
|
6
|
+
/**
|
|
7
|
+
* ⚠️ DESTRUCTIVE DEBUG PAGE — NOT INTENDED FOR PRODUCTION. ⚠️
|
|
8
|
+
*
|
|
9
|
+
* Emergency Logout Page. Nuclear option for clearing auth state when things go
|
|
10
|
+
* wrong: clears cookies, clears localStorage, and forces a signout.
|
|
11
|
+
*
|
|
12
|
+
* ────────────────────────── SCOPE, STATED HONESTLY (QAPert 35000 sweep) ──────────────────────────
|
|
13
|
+
* This is the MILDEST of the four test-env pages and this warning is
|
|
14
|
+
* deliberately weaker than its siblings'. The damage is SELF-INFLICTED and
|
|
15
|
+
* recoverable: a visitor can only destroy their OWN client-side auth state,
|
|
16
|
+
* and the remedy is to sign in again. It exposes no credential and mutates no
|
|
17
|
+
* other user's state. Do not read the banner above as equivalent to the JWT
|
|
18
|
+
* inspector's — inflating a mild finding is how real ones get discounted.
|
|
19
|
+
*
|
|
20
|
+
* It is flagged only because it ships with no env gate of its own, and because
|
|
21
|
+
* clearing localStorage wholesale can discard unrelated application state that
|
|
22
|
+
* a consuming app kept there. Mounting it is the gate.
|
|
23
|
+
*
|
|
24
|
+
* ────────────────────────── IF YOU MOUNT IT, MOUNT IT LIKE THIS ──────────────────────────
|
|
25
|
+
* ```typescript
|
|
26
|
+
* // app/test-env/emergency-logout/page.tsx — TEST/DEV ENVIRONMENTS ONLY
|
|
27
|
+
* export { EmergencyLogoutPage as default } from '@payez/next-mvp/pages/test-env';
|
|
28
|
+
* ```
|
|
29
|
+
*/
|
|
30
|
+
export function EmergencyLogoutPage() {
|
|
31
|
+
const { data: sessionData, isPending } = authClient.useSession();
|
|
32
|
+
const status = isPending ? 'loading' : sessionData ? 'authenticated' : 'unauthenticated';
|
|
33
|
+
const [isDarkMode, setIsDarkMode] = useState(false);
|
|
34
|
+
const [isLoggingOut, setIsLoggingOut] = useState(false);
|
|
35
|
+
const [logoutComplete, setLogoutComplete] = useState(false);
|
|
36
|
+
const [logs, setLogs] = useState<string[]>([]);
|
|
37
|
+
|
|
38
|
+
useEffect(() => {
|
|
39
|
+
const checkDarkMode = () => {
|
|
40
|
+
const isDark = document.documentElement.classList.contains('dark') ||
|
|
41
|
+
window.matchMedia('(prefers-color-scheme: dark)').matches;
|
|
42
|
+
setIsDarkMode(isDark);
|
|
43
|
+
};
|
|
44
|
+
checkDarkMode();
|
|
45
|
+
const mediaQuery = window.matchMedia('(prefers-color-scheme: dark)');
|
|
46
|
+
mediaQuery.addEventListener('change', checkDarkMode);
|
|
47
|
+
return () => mediaQuery.removeEventListener('change', checkDarkMode);
|
|
48
|
+
}, []);
|
|
49
|
+
|
|
50
|
+
const addLog = (message: string) => {
|
|
51
|
+
setLogs(prev => [...prev, `[${new Date().toISOString().substring(11, 19)}] ${message}`]);
|
|
52
|
+
};
|
|
53
|
+
|
|
54
|
+
const handleEmergencyLogout = async () => {
|
|
55
|
+
setIsLoggingOut(true);
|
|
56
|
+
setLogs([]);
|
|
57
|
+
|
|
58
|
+
try {
|
|
59
|
+
// Step 1: Clear all cookies
|
|
60
|
+
addLog('Clearing cookies...');
|
|
61
|
+
document.cookie.split(';').forEach(cookie => {
|
|
62
|
+
const name = cookie.split('=')[0].trim();
|
|
63
|
+
document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/`;
|
|
64
|
+
document.cookie = `${name}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/;domain=${window.location.hostname}`;
|
|
65
|
+
});
|
|
66
|
+
addLog('Cookies cleared');
|
|
67
|
+
|
|
68
|
+
// Step 2: Clear localStorage
|
|
69
|
+
addLog('Clearing localStorage...');
|
|
70
|
+
const keysToRemove: string[] = [];
|
|
71
|
+
for (let i = 0; i < localStorage.length; i++) {
|
|
72
|
+
const key = localStorage.key(i);
|
|
73
|
+
if (key) keysToRemove.push(key);
|
|
74
|
+
}
|
|
75
|
+
keysToRemove.forEach(key => {
|
|
76
|
+
localStorage.removeItem(key);
|
|
77
|
+
addLog(` Removed: ${key}`);
|
|
78
|
+
});
|
|
79
|
+
addLog(`localStorage cleared (${keysToRemove.length} items)`);
|
|
80
|
+
|
|
81
|
+
// Step 3: Clear sessionStorage
|
|
82
|
+
addLog('Clearing sessionStorage...');
|
|
83
|
+
sessionStorage.clear();
|
|
84
|
+
addLog('sessionStorage cleared');
|
|
85
|
+
|
|
86
|
+
// Step 4: Call Better Auth signOut
|
|
87
|
+
addLog('Calling Better Auth signOut...');
|
|
88
|
+
await authClient.signOut();
|
|
89
|
+
addLog('Better Auth signOut complete');
|
|
90
|
+
|
|
91
|
+
// Step 5: Clear any auth-related fetch cache
|
|
92
|
+
addLog('Invalidating caches...');
|
|
93
|
+
if ('caches' in window) {
|
|
94
|
+
const cacheNames = await caches.keys();
|
|
95
|
+
await Promise.all(cacheNames.map(name => caches.delete(name)));
|
|
96
|
+
addLog(`Cleared ${cacheNames.length} caches`);
|
|
97
|
+
}
|
|
98
|
+
|
|
99
|
+
addLog('Emergency logout complete!');
|
|
100
|
+
setLogoutComplete(true);
|
|
101
|
+
|
|
102
|
+
} catch (error) {
|
|
103
|
+
addLog(`ERROR: ${error instanceof Error ? error.message : String(error)}`);
|
|
104
|
+
} finally {
|
|
105
|
+
setIsLoggingOut(false);
|
|
106
|
+
}
|
|
107
|
+
};
|
|
108
|
+
|
|
109
|
+
const handleRedirectHome = () => {
|
|
110
|
+
window.location.href = '/';
|
|
111
|
+
};
|
|
112
|
+
|
|
113
|
+
return (
|
|
114
|
+
<div className={`min-h-screen p-8 ${isDarkMode ? 'bg-slate-950 text-white' : 'bg-gray-50 text-gray-900'}`}>
|
|
115
|
+
<div className="max-w-2xl mx-auto">
|
|
116
|
+
<h1 className="text-2xl font-bold mb-2">Emergency Logout</h1>
|
|
117
|
+
<p className={`mb-6 ${isDarkMode ? 'text-gray-400' : 'text-gray-600'}`}>
|
|
118
|
+
Nuclear option for when auth gets into a bad state. Clears everything.
|
|
119
|
+
</p>
|
|
120
|
+
|
|
121
|
+
{/* Current Status */}
|
|
122
|
+
<div className={`mb-6 p-4 rounded-lg ${isDarkMode ? 'bg-slate-900' : 'bg-white border'}`}>
|
|
123
|
+
<h2 className="font-semibold mb-2">Current Status</h2>
|
|
124
|
+
<div className="flex items-center gap-2">
|
|
125
|
+
<span className={`inline-block w-3 h-3 rounded-full ${
|
|
126
|
+
status === 'authenticated' ? 'bg-green-500' :
|
|
127
|
+
status === 'loading' ? 'bg-yellow-500' : 'bg-red-500'
|
|
128
|
+
}`} />
|
|
129
|
+
<span className="capitalize">{status}</span>
|
|
130
|
+
</div>
|
|
131
|
+
</div>
|
|
132
|
+
|
|
133
|
+
{/* Action Button */}
|
|
134
|
+
{!logoutComplete ? (
|
|
135
|
+
<button
|
|
136
|
+
onClick={handleEmergencyLogout}
|
|
137
|
+
disabled={isLoggingOut}
|
|
138
|
+
className={`w-full py-3 px-4 rounded-lg font-semibold transition-colors ${
|
|
139
|
+
isLoggingOut
|
|
140
|
+
? 'bg-gray-500 cursor-not-allowed'
|
|
141
|
+
: 'bg-red-600 hover:bg-red-700 text-white'
|
|
142
|
+
}`}
|
|
143
|
+
>
|
|
144
|
+
{isLoggingOut ? 'Logging out...' : 'Emergency Logout'}
|
|
145
|
+
</button>
|
|
146
|
+
) : (
|
|
147
|
+
<div className="space-y-3">
|
|
148
|
+
<div className={`p-4 rounded-lg ${isDarkMode ? 'bg-green-900/30 border border-green-700' : 'bg-green-50 border border-green-200'}`}>
|
|
149
|
+
<p className={`font-semibold ${isDarkMode ? 'text-green-400' : 'text-green-700'}`}>
|
|
150
|
+
Logout complete! All auth state has been cleared.
|
|
151
|
+
</p>
|
|
152
|
+
</div>
|
|
153
|
+
<button
|
|
154
|
+
onClick={handleRedirectHome}
|
|
155
|
+
className="w-full py-3 px-4 rounded-lg font-semibold bg-blue-600 hover:bg-blue-700 text-white transition-colors"
|
|
156
|
+
>
|
|
157
|
+
Go to Home Page
|
|
158
|
+
</button>
|
|
159
|
+
</div>
|
|
160
|
+
)}
|
|
161
|
+
|
|
162
|
+
{/* Log Output */}
|
|
163
|
+
{logs.length > 0 && (
|
|
164
|
+
<div className={`mt-6 p-4 rounded-lg font-mono text-sm ${isDarkMode ? 'bg-slate-900' : 'bg-gray-100'}`}>
|
|
165
|
+
<h3 className="font-semibold mb-2">Log</h3>
|
|
166
|
+
<div className="space-y-1">
|
|
167
|
+
{logs.map((log, i) => (
|
|
168
|
+
<div key={i} className={log.includes('ERROR') ? 'text-red-500' : isDarkMode ? 'text-gray-300' : 'text-gray-700'}>
|
|
169
|
+
{log}
|
|
170
|
+
</div>
|
|
171
|
+
))}
|
|
172
|
+
</div>
|
|
173
|
+
</div>
|
|
174
|
+
)}
|
|
175
|
+
|
|
176
|
+
{/* What this does */}
|
|
177
|
+
<div className={`mt-8 p-4 rounded-lg ${isDarkMode ? 'bg-slate-900' : 'bg-white border'}`}>
|
|
178
|
+
<h2 className="font-semibold mb-2">What this does</h2>
|
|
179
|
+
<ul className={`list-disc list-inside space-y-1 ${isDarkMode ? 'text-gray-400' : 'text-gray-600'}`}>
|
|
180
|
+
<li>Clears all browser cookies</li>
|
|
181
|
+
<li>Clears localStorage (theme, preferences, etc.)</li>
|
|
182
|
+
<li>Clears sessionStorage</li>
|
|
183
|
+
<li>Calls NextAuth signOut</li>
|
|
184
|
+
<li>Invalidates browser caches</li>
|
|
185
|
+
</ul>
|
|
186
|
+
</div>
|
|
187
|
+
</div>
|
|
188
|
+
</div>
|
|
189
|
+
);
|
|
190
|
+
}
|
|
191
|
+
|
|
192
|
+
export default EmergencyLogoutPage;
|