@proofkit/cli 1.0.0-beta.0

package/template/extras/fmaddon-auth/app/(main)/auth/profile/profile-form.tsx

@@ -0,0 +1,56 @@
+"use client";
+import { useHookFormAction } from "@next-safe-action/adapter-react-hook-form/hooks";
+import { updateEmailSchema } from "./schema";
+import { updateEmailAction } from "./actions";
+import { zodResolver } from "@hookform/resolvers/zod";
+import {
+  Anchor,
+  Button,
+  Group,
+  Paper,
+  PasswordInput,
+  Text,
+} from "@mantine/core";
+import { TextInput } from "@mantine/core";
+import { Stack } from "@mantine/core";
+
+export default function UpdateEmailForm({
+  currentEmail,
+}: {
+  currentEmail: string;
+}) {
+  const { form, handleSubmitWithAction, action } = useHookFormAction(
+    updateEmailAction,
+    zodResolver(updateEmailSchema),
+    { formProps: { defaultValues: { email: currentEmail } } }
+  );
+
+  return (
+    <form onSubmit={handleSubmitWithAction}>
+      <Stack>
+        <TextInput
+          label="Email"
+          type="email"
+          required
+          withAsterisk={false}
+          {...form.register("email")}
+          error={form.formState.errors.email?.message}
+        />
+
+        {action.result.data?.error ? (
+          <Text c="red">{action.result.data.error}</Text>
+        ) : action.hasErrored ? (
+          <Text c="red">An error occured</Text>
+        ) : null}
+
+        {form.formState.isDirty && (
+          <Group justify="end">
+            <Button type="submit" loading={action.isPending}>
+              Update Email
+            </Button>
+          </Group>
+        )}
+      </Stack>
+    </form>
+  );
+}

package/template/extras/fmaddon-auth/app/(main)/auth/profile/reset-password-form.tsx

@@ -0,0 +1,110 @@
+"use client";
+import { useHookFormAction } from "@next-safe-action/adapter-react-hook-form/hooks";
+import { updatePasswordSchema } from "./schema";
+import { updatePasswordAction } from "./actions";
+import { zodResolver } from "@hookform/resolvers/zod";
+import {
+  Anchor,
+  Button,
+  Group,
+  Paper,
+  PasswordInput,
+  Text,
+} from "@mantine/core";
+import { TextInput } from "@mantine/core";
+import { Stack } from "@mantine/core";
+import { useState } from "react";
+import { showSuccessNotification } from "@/utils/notification-helpers";
+
+export default function UpdatePasswordForm() {
+  const [showForm, setShowForm] = useState(false);
+  const { form, handleSubmitWithAction, action } = useHookFormAction(
+    updatePasswordAction,
+    zodResolver(updatePasswordSchema),
+    {
+      formProps: { defaultValues: {} },
+      actionProps: {
+        onSuccess: ({ data }) => {
+          if (data?.message) {
+            showSuccessNotification(data.message);
+            setShowForm(false);
+          }
+        },
+      },
+    }
+  );
+
+  if (!showForm) {
+    return (
+      <Group>
+        <TextInput
+          variant="subtle"
+          label="Password"
+          style={{ flexGrow: 1 }}
+          value="••••••••"
+          readOnly
+        />
+        <Button
+          size="sm"
+          variant="subtle"
+          color="gray"
+          onClick={() => setShowForm(true)}
+        >
+          Update
+        </Button>
+      </Group>
+    );
+  }
+
+  return (
+    <form onSubmit={handleSubmitWithAction}>
+      <Stack>
+        <PasswordInput
+          label="Current Password"
+          type="password"
+          autoComplete="current-password"
+          required
+          withAsterisk={false}
+          {...form.register("currentPassword")}
+          error={form.formState.errors.currentPassword?.message}
+        />
+
+        <PasswordInput
+          label="New Password"
+          type="password"
+          required
+          withAsterisk={false}
+          {...form.register("newPassword")}
+          error={form.formState.errors.newPassword?.message}
+          autoComplete="new-password"
+        />
+
+        <PasswordInput
+          label="Confirm New Password"
+          type="password"
+          required
+          autoComplete="new-password"
+          withAsterisk={false}
+          {...form.register("confirmNewPassword")}
+        />
+
+        {action.result.data?.error ? (
+          <Text c="red">{action.result.data.error}</Text>
+        ) : action.hasErrored ? (
+          <Text c="red">An error occured</Text>
+        ) : null}
+
+        <Group justify="end">
+          <Button
+            type="submit"
+            variant="light"
+            disabled={!form.formState.isDirty}
+            loading={action.isPending}
+          >
+            Update Password
+          </Button>
+        </Group>
+      </Stack>
+    </form>
+  );
+}

package/template/extras/fmaddon-auth/app/(main)/auth/profile/schema.ts

@@ -0,0 +1,19 @@
+import { z } from "zod/v4";
+
+export const updateEmailSchema = z.object({
+  email: z.string().email(),
+});
+
+export const updatePasswordSchema = z
+  .object({
+    currentPassword: z.string(),
+    newPassword: z
+      .string()
+      .min(8, { message: "Password must be at least 8 characters long" })
+      .max(255, { message: "Password is too long" }),
+    confirmNewPassword: z.string(),
+  })
+  .refine((data) => data.newPassword === data.confirmNewPassword, {
+    path: ["confirmNewPassword"],
+    message: "Passwords do not match",
+  });

package/template/extras/fmaddon-auth/app/auth/forgot-password/actions.ts

@@ -0,0 +1,37 @@
+"use server";
+import { actionClient } from "@/server/safe-action";
+import { forgotPasswordSchema } from "./schema";
+import { getUserFromEmail } from "@/server/auth/utils/user";
+import { generateSessionToken } from "@/server/auth/utils/session";
+import { redirect } from "next/navigation";
+import {
+  createPasswordResetSession,
+  invalidateUserPasswordResetSessions,
+  sendPasswordResetEmail,
+  setPasswordResetSessionTokenCookie,
+} from "@/server/auth/utils/password-reset";
+
+export const forgotPasswordAction = actionClient
+  .schema(forgotPasswordSchema)
+  .action(async ({ parsedInput }) => {
+    const { email } = parsedInput;
+
+    const user = await getUserFromEmail(email);
+    if (user === null) {
+      return {
+        error: "Account does not exist",
+      };
+    }
+
+    await invalidateUserPasswordResetSessions(user.id);
+    const sessionToken = generateSessionToken();
+    const session = await createPasswordResetSession(
+      sessionToken,
+      user.id,
+      user.email
+    );
+
+    await sendPasswordResetEmail(session.email, session.code);
+    await setPasswordResetSessionTokenCookie(sessionToken, session.expires_at);
+    return redirect("/auth/reset-password/verify-email");
+  });

package/template/extras/fmaddon-auth/app/auth/forgot-password/forgot-form.tsx

@@ -0,0 +1,41 @@
+"use client";
+
+import { useHookFormAction } from "@next-safe-action/adapter-react-hook-form/hooks";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { TextInput, Button, Stack, Paper, Text } from "@mantine/core";
+import { forgotPasswordAction } from "./actions";
+import { forgotPasswordSchema } from "./schema";
+
+export default function ForgotForm() {
+  const { form, handleSubmitWithAction, action } = useHookFormAction(
+    forgotPasswordAction,
+    zodResolver(forgotPasswordSchema),
+    {}
+  );
+
+  return (
+    <form onSubmit={handleSubmitWithAction}>
+      <Paper withBorder shadow="md" p={30} mt={30} radius="md">
+        <Stack>
+          <TextInput
+            autoFocus
+            label="Email"
+            placeholder="you@proofkit.dev"
+            required
+            withAsterisk={false}
+            {...form.register("email")}
+            error={form.formState.errors.email?.message}
+          />
+
+          {action.result.data?.error && (
+            <Text c="red">{action.result.data.error}</Text>
+          )}
+
+          <Button fullWidth type="submit" loading={action.isPending}>
+            Send Reset Email
+          </Button>
+        </Stack>
+      </Paper>
+    </form>
+  );
+}

package/template/extras/fmaddon-auth/app/auth/forgot-password/page.tsx

@@ -0,0 +1,21 @@
+import { Anchor, Container, Text, Title } from "@mantine/core";
+import ForgotForm from "./forgot-form";
+
+export default async function Page() {
+  return (
+    <Container size={420} my={40}>
+      <Title ta="center">Forgot Password</Title>
+      <Text c="dimmed" size="sm" ta="center" mt={5}>
+        Enter your email for a link to reset your password.
+      </Text>
+
+      <ForgotForm />
+
+      <Text ta="center" mt={10}>
+        <Anchor size="sm" component="a" href="/auth/login" c="dimmed">
+          Back to login
+        </Anchor>
+      </Text>
+    </Container>
+  );
+}

package/template/extras/fmaddon-auth/app/auth/forgot-password/schema.ts

@@ -0,0 +1,5 @@
+import { z } from "zod/v4";
+
+export const forgotPasswordSchema = z.object({
+  email: z.string().email(),
+});

package/template/extras/fmaddon-auth/app/auth/login/actions.ts

@@ -0,0 +1,34 @@
+"use server";
+
+import { actionClient } from "@/server/safe-action";
+import { loginSchema } from "./schema";
+import { validateLogin } from "@/server/auth/utils/user";
+import {
+  createSession,
+  generateSessionToken,
+  setSessionTokenCookie,
+} from "@/server/auth/utils/session";
+import { redirect } from "next/navigation";
+import { getRedirectCookie } from "@/server/auth/utils/redirect";
+
+export const loginAction = actionClient
+  .schema(loginSchema)
+  .action(async ({ parsedInput }) => {
+    const { email, password } = parsedInput;
+    const user = await validateLogin(email, password);
+
+    if (user === null) {
+      return { error: "Invalid email or password" };
+    }
+
+    const sessionToken = generateSessionToken();
+    const session = await createSession(sessionToken, user.id);
+    setSessionTokenCookie(sessionToken, session.expiresAt);
+
+    if (!user.emailVerified) {
+      return redirect("/auth/verify-email");
+    }
+
+    const redirectTo = await getRedirectCookie();
+    return redirect(redirectTo);
+  });

package/template/extras/fmaddon-auth/app/auth/login/login-form.tsx

@@ -0,0 +1,64 @@
+"use client";
+import { useHookFormAction } from "@next-safe-action/adapter-react-hook-form/hooks";
+import { loginSchema } from "./schema";
+import { loginAction } from "./actions";
+import { zodResolver } from "@hookform/resolvers/zod";
+import {
+  Anchor,
+  Button,
+  Group,
+  Paper,
+  PasswordInput,
+  Text,
+} from "@mantine/core";
+import { TextInput } from "@mantine/core";
+import { Stack } from "@mantine/core";
+
+export default function LoginForm() {
+  const { form, handleSubmitWithAction, action } = useHookFormAction(
+    loginAction,
+    zodResolver(loginSchema),
+    {}
+  );
+
+  return (
+    <form onSubmit={handleSubmitWithAction}>
+      <Paper withBorder shadow="md" p={30} mt={30} radius="md">
+        <Stack>
+          <TextInput
+            autoFocus
+            label="Email"
+            placeholder="you@proofkit.dev"
+            required
+            withAsterisk={false}
+            {...form.register("email")}
+            error={form.formState.errors.email?.message}
+          />
+          <PasswordInput
+            label="Password"
+            placeholder="Your password"
+            autoComplete="current-password"
+            required
+            withAsterisk={false}
+            {...form.register("password")}
+            error={form.formState.errors.password?.message}
+          />
+
+          <Group justify="end">
+            <Anchor size="sm" component="a" href="/auth/forgot-password">
+              Forgot password?
+            </Anchor>
+          </Group>
+          {action.result.data?.error ? (
+            <Text c="red">{action.result.data.error}</Text>
+          ) : action.hasErrored ? (
+            <Text c="red">An error occured</Text>
+          ) : null}
+          <Button fullWidth type="submit" loading={action.isPending}>
+            Sign in
+          </Button>
+        </Stack>
+      </Paper>
+    </form>
+  );
+}

package/template/extras/fmaddon-auth/app/auth/login/page.tsx

@@ -0,0 +1,26 @@
+import { getCurrentSession } from "@/server/auth/utils/session";
+import { Anchor, Container, Text, Title } from "@mantine/core";
+import { redirect } from "next/navigation";
+import LoginForm from "./login-form";
+
+export default async function Page() {
+  const { session } = await getCurrentSession();
+
+  if (session !== null) {
+    return redirect("/");
+  }
+
+  return (
+    <Container size={420} my={40}>
+      <Title ta="center">Welcome back!</Title>
+      <Text c="dimmed" size="sm" ta="center" mt={5}>
+        Do not have an account yet?{" "}
+        <Anchor size="sm" component="a" href="/auth/signup">
+          Create account
+        </Anchor>
+      </Text>
+
+      <LoginForm />
+    </Container>
+  );
+}

package/template/extras/fmaddon-auth/app/auth/login/schema.ts

@@ -0,0 +1,6 @@
+import { z } from "zod/v4";
+
+export const loginSchema = z.object({
+  email: z.string().email(),
+  password: z.string(),
+});

package/template/extras/fmaddon-auth/app/auth/reset-password/actions.ts

@@ -0,0 +1,50 @@
+"use server";
+
+import { actionClient } from "@/server/safe-action";
+import { resetPasswordSchema } from "./schema";
+import {
+  deletePasswordResetSessionTokenCookie,
+  invalidateUserPasswordResetSessions,
+} from "@/server/auth/utils/password-reset";
+import { validatePasswordResetSessionRequest } from "@/server/auth/utils/password-reset";
+import { createSession } from "@/server/auth/utils/session";
+import { generateSessionToken } from "@/server/auth/utils/session";
+import { setSessionTokenCookie } from "@/server/auth/utils/session";
+import { verifyPasswordStrength } from "@/server/auth/utils/password";
+import { invalidateUserSessions } from "@/server/auth/utils/session";
+import { updateUserPassword } from "@/server/auth/utils/user";
+import { redirect } from "next/navigation";
+
+export const resetPasswordAction = actionClient
+  .schema(resetPasswordSchema)
+  .action(async ({ parsedInput }) => {
+    const { password } = parsedInput;
+    const { session: passwordResetSession, user } =
+      await validatePasswordResetSessionRequest();
+    if (passwordResetSession === null) {
+      return {
+        error: "Not authenticated",
+      };
+    }
+    if (!passwordResetSession.email_verified) {
+      return {
+        error: "Forbidden",
+      };
+    }
+
+    const strongPassword = await verifyPasswordStrength(password);
+    if (!strongPassword) {
+      return {
+        error: "Weak password",
+      };
+    }
+    await invalidateUserPasswordResetSessions(passwordResetSession.id_user);
+    await invalidateUserSessions(passwordResetSession.id_user);
+    await updateUserPassword(passwordResetSession.id_user, password);
+
+    const sessionToken = generateSessionToken();
+    const session = await createSession(sessionToken, user.id);
+    await setSessionTokenCookie(sessionToken, session.expiresAt);
+    await deletePasswordResetSessionTokenCookie();
+    return redirect("/");
+  });

package/template/extras/fmaddon-auth/app/auth/reset-password/page.tsx

@@ -0,0 +1,32 @@
+import { Alert, Anchor, Container, Text, Title } from "@mantine/core";
+import ResetPasswordForm from "./reset-password-form";
+import { env } from "@/config/env";
+import { validatePasswordResetSessionRequest } from "@/server/auth/utils/password-reset";
+import { redirect } from "next/navigation";
+
+export default async function Page() {
+  const { session, user } = await validatePasswordResetSessionRequest();
+  if (session === null) {
+    return redirect("/auth/forgot-password");
+  }
+  if (!session.email_verified) {
+    return redirect("/auth/reset-password/verify-email");
+  }
+
+  return (
+    <Container size={420} my={40}>
+      <Title ta="center">Reset Password</Title>
+      <Text c="dimmed" size="sm" ta="center" mt={5}>
+        Enter your new password.
+      </Text>
+
+      <ResetPasswordForm />
+
+      <Text ta="center" mt={10}>
+        <Anchor size="sm" component="a" href="/auth/login" c="dimmed">
+          Back to login
+        </Anchor>
+      </Text>
+    </Container>
+  );
+}

package/template/extras/fmaddon-auth/app/auth/reset-password/reset-password-form.tsx

@@ -0,0 +1,59 @@
+"use client";
+
+import { useHookFormAction } from "@next-safe-action/adapter-react-hook-form/hooks";
+import { zodResolver } from "@hookform/resolvers/zod";
+import {
+  TextInput,
+  Button,
+  Stack,
+  Paper,
+  Text,
+  PasswordInput,
+} from "@mantine/core";
+import { resetPasswordAction } from "./actions";
+import { resetPasswordSchema } from "./schema";
+
+export default function ForgotForm() {
+  const { form, handleSubmitWithAction, action } = useHookFormAction(
+    resetPasswordAction,
+    zodResolver(resetPasswordSchema),
+    {}
+  );
+
+  return (
+    <form onSubmit={handleSubmitWithAction}>
+      <Paper withBorder shadow="md" p={30} mt={30} radius="md">
+        <Stack>
+          <PasswordInput
+            autoFocus
+            label="Password"
+            required
+            withAsterisk={false}
+            {...form.register("password")}
+            error={form.formState.errors.password?.message}
+            autoComplete="new-password"
+          />
+
+          <PasswordInput
+            label="Confirm Password"
+            required
+            withAsterisk={false}
+            {...form.register("confirmPassword")}
+            error={form.formState.errors.confirmPassword?.message}
+            autoComplete="new-password"
+          />
+
+          {action.result.data?.error ? (
+            <Text c="red">{action.result.data.error}</Text>
+          ) : action.hasErrored ? (
+            <Text c="red">An error occured</Text>
+          ) : null}
+
+          <Button fullWidth type="submit" loading={action.isPending}>
+            Reset Password
+          </Button>
+        </Stack>
+      </Paper>
+    </form>
+  );
+}

package/template/extras/fmaddon-auth/app/auth/reset-password/schema.ts

@@ -0,0 +1,14 @@
+import { z } from "zod/v4";
+
+export const resetPasswordSchema = z
+  .object({
+    password: z
+      .string()
+      .min(8, { message: "Your password should be at least 8 characters" })
+      .max(255, { message: "Password is too long" }),
+    confirmPassword: z.string(),
+  })
+  .refine((data) => data.password === data.confirmPassword, {
+    path: ["confirmPassword"],
+    message: "Passwords do not match",
+  });

package/template/extras/fmaddon-auth/app/auth/reset-password/verify-email/actions.ts

@@ -0,0 +1,45 @@
+"use server";
+
+import { actionClient } from "@/server/safe-action";
+import { verifyEmailSchema } from "./schema";
+import {
+  setPasswordResetSessionAsEmailVerified,
+  validatePasswordResetSessionRequest,
+} from "@/server/auth/utils/password-reset";
+import { setUserAsEmailVerifiedIfEmailMatches } from "@/server/auth/utils/user";
+import { redirect } from "next/navigation";
+
+export const verifyEmailAction = actionClient
+  .schema(verifyEmailSchema)
+  .action(async ({ parsedInput }) => {
+    const { session } = await validatePasswordResetSessionRequest();
+    if (session === null) {
+      return {
+        error: "Not authenticated",
+      };
+    }
+    if (Boolean(session.email_verified)) {
+      return {
+        error: "Forbidden",
+      };
+    }
+
+    const { code } = parsedInput;
+
+    if (code !== session.code) {
+      return {
+        error: "Incorrect code",
+      };
+    }
+    await setPasswordResetSessionAsEmailVerified(session.id);
+    const emailMatches = await setUserAsEmailVerifiedIfEmailMatches(
+      session.id_user,
+      session.email
+    );
+    if (!emailMatches) {
+      return {
+        error: "Please restart the process",
+      };
+    }
+    return redirect("/auth/reset-password");
+  });

package/template/extras/fmaddon-auth/app/auth/reset-password/verify-email/page.tsx

@@ -0,0 +1,32 @@
+import { Alert, Anchor, Container, Text, Title } from "@mantine/core";
+import VerifyEmailForm from "./verify-email-form";
+import { env } from "@/config/env";
+import { validatePasswordResetSessionRequest } from "@/server/auth/utils/password-reset";
+import { redirect } from "next/navigation";
+
+export default async function Page() {
+  const { session } = await validatePasswordResetSessionRequest();
+  if (session === null) {
+    return redirect("/auth/forgot-password");
+  }
+  if (session.email_verified) {
+    return redirect("/auth/reset-password");
+  }
+
+  return (
+    <Container size={420} my={40}>
+      <Title ta="center">Verify Email</Title>
+      <Text c="dimmed" size="sm" ta="center" mt={5}>
+        Enter the code sent to your email.
+      </Text>
+
+      <VerifyEmailForm />
+
+      <Text ta="center" mt={10}>
+        <Anchor size="sm" component="a" href="/auth/login" c="dimmed">
+          Back to login
+        </Anchor>
+      </Text>
+    </Container>
+  );
+}

package/template/extras/fmaddon-auth/app/auth/reset-password/verify-email/schema.ts

@@ -0,0 +1,5 @@
+import { z } from "zod/v4";
+
+export const verifyEmailSchema = z.object({
+  code: z.string().length(8),
+});