npm - keystone-design-bootstrap - Versions diffs - 1.0.82 → 1.0.83 - Mend

keystone-design-bootstrap 1.0.82 → 1.0.83

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/dist/design_system/sections/index.js.map +1 -1
package/dist/index.js.map +1 -1
package/dist/tracking/index.d.ts +20 -1
package/dist/tracking/index.js.map +1 -1
package/package.json +1 -1
package/src/design_system/portal/LoginForm.tsx +280 -272
package/src/design_system/portal/LoginModalController.tsx +4 -2
package/src/next/layouts/root-layout.tsx +5 -4
package/src/next/routes/consumer-auth.ts +106 -1

package/src/design_system/portal/LoginModalController.tsx CHANGED Viewed

@@ -60,10 +60,12 @@ export function LoginModalController() {
   // Close the modal once the router transition has fully completed and the
   // server component has re-rendered with the new authenticated state.
   useEffect(() => {
-    if (refreshing && !isPending) {
+    if (!(refreshing && !isPending)) return;
+    const timeout = window.setTimeout(() => {
       setOpen(false);
       setRefreshing(false);
-    }
+    }, 0);
+    return () => window.clearTimeout(timeout);
   }, [refreshing, isPending]);
   return (

package/src/next/layouts/root-layout.tsx CHANGED Viewed

@@ -1,5 +1,6 @@
 import React from 'react';
 import type { Metadata } from 'next';
+import Script from 'next/script';
 import { HeaderNavigation, FooterHome } from '../../design_system/sections';
 import { ThemeProvider } from '../../contexts';
@@ -239,12 +240,12 @@ j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
   return (
     <html lang="en" data-theme={theme}>
-      <head>
+      <body>
         {gtmBootstrapScript ? (
-          <script id="google-tag-manager" dangerouslySetInnerHTML={{ __html: gtmBootstrapScript }} />
+          <Script id="google-tag-manager">
+            {gtmBootstrapScript}
+          </Script>
         ) : null}
-      </head>
-      <body>
         {gtmContainerId ? (
           <noscript>
             <iframe

package/src/next/routes/consumer-auth.ts CHANGED Viewed

@@ -7,7 +7,7 @@
  *   import { createConsumerAuthHandlers } from 'keystone-design-bootstrap/next/routes/consumer-auth';
  *   export const { POST } = createConsumerAuthHandlers({ NextResponse });
  *
- * Handles: initiate, login, signup, logout
+ * Handles: initiate, login, signup, send_code, verify_code, passwordless_auth, logout
  *
  * Env (server-side only):
  * - API_URL (default: http://localhost:3000/api/v1)
@@ -151,6 +151,108 @@ async function handleSignup(request: Request, NR: NextResponseLike): Promise<Res
   return response;
 }
+// POST /api/consumer/send_code
+// Sends a 4-digit SMS verification code for passwordless login/signup.
+async function handleSendCode(request: Request, NR: NextResponseLike): Promise<Response> {
+  const body = await request.json().catch(() => ({})) as Record<string, string>;
+  const { phone } = body;
+  if (!phone) return NR.json({ error: 'Phone is required.' }, { status: 422 });
+  const res = await fetch(`${getApiUrl()}/consumer/auth/send_code`, {
+    method: 'POST',
+    headers: apiHeaders(request),
+    body: JSON.stringify({ phone }),
+  });
+  const json = await res.json().catch(() => ({}));
+  if (!res.ok) {
+    return NR.json(
+      {
+        error: json.error || 'Failed to send verification code. Please try again.',
+        code: json.code,
+        retry_in_seconds: json.retry_in_seconds,
+      },
+      { status: res.status }
+    );
+  }
+  return NR.json({
+    resend_available_at: json.data?.resend_available_at ?? null,
+  });
+}
+// POST /api/consumer/verify_code
+// Verifies the SMS code and returns a short-lived verification token.
+async function handleVerifyCode(request: Request, NR: NextResponseLike): Promise<Response> {
+  const body = await request.json().catch(() => ({})) as Record<string, string>;
+  const { phone, code } = body;
+  if (!phone || !code) return NR.json({ error: 'Phone and code are required.' }, { status: 422 });
+  const res = await fetch(`${getApiUrl()}/consumer/auth/verify_code`, {
+    method: 'POST',
+    headers: apiHeaders(request),
+    body: JSON.stringify({ phone, code }),
+  });
+  const json = await res.json().catch(() => ({}));
+  if (!res.ok) {
+    return NR.json(
+      { error: json.error || 'Verification failed. Please try again.', code: json.code },
+      { status: res.status }
+    );
+  }
+  return NR.json({
+    verification_token: json.data?.verification_token,
+    first_name: json.data?.first_name ?? '',
+    last_name: json.data?.last_name ?? '',
+    email: json.data?.email ?? '',
+  });
+}
+// POST /api/consumer/passwordless_auth
+// Completes passwordless auth and sets HttpOnly JWT cookie.
+async function handlePasswordlessAuth(request: Request, NR: NextResponseLike): Promise<Response> {
+  const body = await request.json().catch(() => ({})) as Record<string, string>;
+  const { phone, verification_token, first_name, last_name, email } = body;
+  if (!phone) return NR.json({ error: 'Phone is required.' }, { status: 422 });
+  if (!verification_token) return NR.json({ error: 'Verification token is required.' }, { status: 422 });
+  if (!first_name || !last_name || !email) {
+    return NR.json({ error: 'First name, last name, and email are required.' }, { status: 422 });
+  }
+  const res = await fetch(`${getApiUrl()}/consumer/auth/passwordless_auth`, {
+    method: 'POST',
+    headers: apiHeaders(request),
+    body: JSON.stringify({
+      phone,
+      verification_token,
+      first_name,
+      last_name,
+      email,
+    }),
+  });
+  const json = await res.json().catch(() => ({}));
+  if (!res.ok) {
+    return NR.json({ error: json.error || 'Authentication failed. Please try again.' }, { status: res.status });
+  }
+  const token = json.data?.token;
+  if (!token) return NR.json({ error: 'No token received.' }, { status: 500 });
+  const response = NR.json({});
+  response.cookies.set(CONSUMER_TOKEN_COOKIE, token, {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === 'production',
+    sameSite: 'lax',
+    path: '/',
+    maxAge: COOKIE_MAX_AGE,
+  });
+  return response;
+}
 // POST /api/consumer/logout
 // Clears the JWT cookie.
 async function handleLogout(_request: Request, NR: NextResponseLike): Promise<Response> {
@@ -173,6 +275,9 @@ export function createConsumerAuthHandlers({ NextResponse }: { NextResponse: Nex
       if (action === 'initiate') return handleInitiate(request, NextResponse);
       if (action === 'login') return handleLogin(request, NextResponse);
       if (action === 'signup') return handleSignup(request, NextResponse);
+      if (action === 'send_code') return handleSendCode(request, NextResponse);
+      if (action === 'verify_code') return handleVerifyCode(request, NextResponse);
+      if (action === 'passwordless_auth') return handlePasswordlessAuth(request, NextResponse);
       if (action === 'logout') return handleLogout(request, NextResponse);
       return NextResponse.json({ error: 'Not found' }, { status: 404 });
     },