npm - keystone-design-bootstrap - Versions diffs - 1.0.81 → 1.0.83 - Mend

keystone-design-bootstrap 1.0.81 → 1.0.83

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (10) hide show

package/dist/design_system/sections/index.js.map +1 -1
package/dist/index.js.map +1 -1
package/dist/tracking/index.d.ts +20 -1
package/dist/tracking/index.js.map +1 -1
package/package.json +1 -1
package/src/design_system/portal/LoginForm.tsx +286 -218
package/src/design_system/portal/LoginModalController.tsx +4 -2
package/src/next/layouts/root-layout.tsx +5 -4
package/src/next/routes/consumer-auth.ts +106 -1
package/src/tracking/captureEvent.ts +27 -0

package/src/next/layouts/root-layout.tsx CHANGED Viewed

@@ -1,5 +1,6 @@
 import React from 'react';
 import type { Metadata } from 'next';
+import Script from 'next/script';
 import { HeaderNavigation, FooterHome } from '../../design_system/sections';
 import { ThemeProvider } from '../../contexts';
@@ -239,12 +240,12 @@ j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
   return (
     <html lang="en" data-theme={theme}>
-      <head>
+      <body>
         {gtmBootstrapScript ? (
-          <script id="google-tag-manager" dangerouslySetInnerHTML={{ __html: gtmBootstrapScript }} />
+          <Script id="google-tag-manager">
+            {gtmBootstrapScript}
+          </Script>
         ) : null}
-      </head>
-      <body>
         {gtmContainerId ? (
           <noscript>
             <iframe

package/src/next/routes/consumer-auth.ts CHANGED Viewed

@@ -7,7 +7,7 @@
  *   import { createConsumerAuthHandlers } from 'keystone-design-bootstrap/next/routes/consumer-auth';
  *   export const { POST } = createConsumerAuthHandlers({ NextResponse });
  *
- * Handles: initiate, login, signup, logout
+ * Handles: initiate, login, signup, send_code, verify_code, passwordless_auth, logout
  *
  * Env (server-side only):
  * - API_URL (default: http://localhost:3000/api/v1)
@@ -151,6 +151,108 @@ async function handleSignup(request: Request, NR: NextResponseLike): Promise<Res
   return response;
 }
+// POST /api/consumer/send_code
+// Sends a 4-digit SMS verification code for passwordless login/signup.
+async function handleSendCode(request: Request, NR: NextResponseLike): Promise<Response> {
+  const body = await request.json().catch(() => ({})) as Record<string, string>;
+  const { phone } = body;
+  if (!phone) return NR.json({ error: 'Phone is required.' }, { status: 422 });
+  const res = await fetch(`${getApiUrl()}/consumer/auth/send_code`, {
+    method: 'POST',
+    headers: apiHeaders(request),
+    body: JSON.stringify({ phone }),
+  });
+  const json = await res.json().catch(() => ({}));
+  if (!res.ok) {
+    return NR.json(
+      {
+        error: json.error || 'Failed to send verification code. Please try again.',
+        code: json.code,
+        retry_in_seconds: json.retry_in_seconds,
+      },
+      { status: res.status }
+    );
+  }
+  return NR.json({
+    resend_available_at: json.data?.resend_available_at ?? null,
+  });
+}
+// POST /api/consumer/verify_code
+// Verifies the SMS code and returns a short-lived verification token.
+async function handleVerifyCode(request: Request, NR: NextResponseLike): Promise<Response> {
+  const body = await request.json().catch(() => ({})) as Record<string, string>;
+  const { phone, code } = body;
+  if (!phone || !code) return NR.json({ error: 'Phone and code are required.' }, { status: 422 });
+  const res = await fetch(`${getApiUrl()}/consumer/auth/verify_code`, {
+    method: 'POST',
+    headers: apiHeaders(request),
+    body: JSON.stringify({ phone, code }),
+  });
+  const json = await res.json().catch(() => ({}));
+  if (!res.ok) {
+    return NR.json(
+      { error: json.error || 'Verification failed. Please try again.', code: json.code },
+      { status: res.status }
+    );
+  }
+  return NR.json({
+    verification_token: json.data?.verification_token,
+    first_name: json.data?.first_name ?? '',
+    last_name: json.data?.last_name ?? '',
+    email: json.data?.email ?? '',
+  });
+}
+// POST /api/consumer/passwordless_auth
+// Completes passwordless auth and sets HttpOnly JWT cookie.
+async function handlePasswordlessAuth(request: Request, NR: NextResponseLike): Promise<Response> {
+  const body = await request.json().catch(() => ({})) as Record<string, string>;
+  const { phone, verification_token, first_name, last_name, email } = body;
+  if (!phone) return NR.json({ error: 'Phone is required.' }, { status: 422 });
+  if (!verification_token) return NR.json({ error: 'Verification token is required.' }, { status: 422 });
+  if (!first_name || !last_name || !email) {
+    return NR.json({ error: 'First name, last name, and email are required.' }, { status: 422 });
+  }
+  const res = await fetch(`${getApiUrl()}/consumer/auth/passwordless_auth`, {
+    method: 'POST',
+    headers: apiHeaders(request),
+    body: JSON.stringify({
+      phone,
+      verification_token,
+      first_name,
+      last_name,
+      email,
+    }),
+  });
+  const json = await res.json().catch(() => ({}));
+  if (!res.ok) {
+    return NR.json({ error: json.error || 'Authentication failed. Please try again.' }, { status: res.status });
+  }
+  const token = json.data?.token;
+  if (!token) return NR.json({ error: 'No token received.' }, { status: 500 });
+  const response = NR.json({});
+  response.cookies.set(CONSUMER_TOKEN_COOKIE, token, {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === 'production',
+    sameSite: 'lax',
+    path: '/',
+    maxAge: COOKIE_MAX_AGE,
+  });
+  return response;
+}
 // POST /api/consumer/logout
 // Clears the JWT cookie.
 async function handleLogout(_request: Request, NR: NextResponseLike): Promise<Response> {
@@ -173,6 +275,9 @@ export function createConsumerAuthHandlers({ NextResponse }: { NextResponse: Nex
       if (action === 'initiate') return handleInitiate(request, NextResponse);
       if (action === 'login') return handleLogin(request, NextResponse);
       if (action === 'signup') return handleSignup(request, NextResponse);
+      if (action === 'send_code') return handleSendCode(request, NextResponse);
+      if (action === 'verify_code') return handleVerifyCode(request, NextResponse);
+      if (action === 'passwordless_auth') return handlePasswordlessAuth(request, NextResponse);
       if (action === 'logout') return handleLogout(request, NextResponse);
       return NextResponse.json({ error: 'Not found' }, { status: 404 });
     },

package/src/tracking/captureEvent.ts CHANGED Viewed

@@ -45,6 +45,10 @@ export type KsEventName =
   | 'portal_tab_viewed'
   // Member portal — authentication flow
   | 'portal_login_started'
+  | 'portal_login_step_viewed'
+  | 'portal_login_step_submitted'
+  | 'portal_login_step_advanced'
+  | 'portal_login_back_clicked'
   | 'portal_login_identified'
   | 'portal_login_completed'
   | 'portal_login_failed';
@@ -92,6 +96,29 @@ export type KsEventProperties = {
   /** Fired when the portal login modal is opened / login flow starts. */
   portal_login_started: Record<string, never>;
+  /** Fired whenever a login step becomes visible to the user. */
+  portal_login_step_viewed: {
+    step: 'identifier' | 'signin' | 'signup';
+  };
+  /** Fired when the user submits a specific login step. */
+  portal_login_step_submitted: {
+    step: 'identifier' | 'signin' | 'signup';
+  };
+  /** Fired when the flow transitions from one step to another state. */
+  portal_login_step_advanced: {
+    from_step: 'identifier' | 'signin' | 'signup';
+    to_step: 'signin' | 'signup' | 'authenticated';
+    reason: string;
+  };
+  /** Fired when the user explicitly navigates back to the identifier step. */
+  portal_login_back_clicked: {
+    from_step: 'signin' | 'signup';
+    to_step: 'identifier';
+  };
   /**
    * Fired after the identifier step resolves — we know whether the user
    * already has an account.