39b6081baa
Add complete user authentication with NextAuth.js supporting: - Email/password credentials authentication - OAuth providers (GitHub, Google) with optional configuration - JWT-based session management with 30-day expiry - Role-based access control (USER, GROWER, FARM_MANAGER, ADMIN) - Permission system with granular access control - Secure password hashing with bcrypt (12 rounds) - Rate limiting on auth endpoints - Password reset flow with secure tokens - Email verification system Files added: - lib/auth/: Core auth library (types, permissions, context, hooks, middleware) - pages/api/auth/: Auth API routes (NextAuth, register, forgot-password, verify-email) - pages/auth/: Auth pages (signin, signup, forgot-password, reset-password, verify-email) - components/auth/: Reusable auth components (LoginForm, RegisterForm, AuthGuard, etc.) Updated _app.tsx to include SessionProvider for auth state management.
270 lines
8.9 KiB
TypeScript
270 lines
8.9 KiB
TypeScript
import { useState } from 'react'
|
|
import { GetServerSideProps } from 'next'
|
|
import { getServerSession } from 'next-auth/next'
|
|
import { signIn } from 'next-auth/react'
|
|
import Head from 'next/head'
|
|
import Link from 'next/link'
|
|
import { useRouter } from 'next/router'
|
|
import { authOptions } from '../api/auth/[...nextauth]'
|
|
import Layout from '@/components/layout'
|
|
|
|
export default function SignUp() {
|
|
const router = useRouter()
|
|
const { callbackUrl } = router.query
|
|
|
|
const [formData, setFormData] = useState({
|
|
name: '',
|
|
email: '',
|
|
password: '',
|
|
confirmPassword: '',
|
|
})
|
|
const [isLoading, setIsLoading] = useState(false)
|
|
const [error, setError] = useState<string | null>(null)
|
|
const [success, setSuccess] = useState(false)
|
|
|
|
const handleChange = (e: React.ChangeEvent<HTMLInputElement>) => {
|
|
setFormData((prev) => ({
|
|
...prev,
|
|
[e.target.name]: e.target.value,
|
|
}))
|
|
}
|
|
|
|
const validateForm = (): string | null => {
|
|
if (!formData.email || !formData.password) {
|
|
return 'Email and password are required'
|
|
}
|
|
|
|
if (formData.password.length < 8) {
|
|
return 'Password must be at least 8 characters long'
|
|
}
|
|
|
|
const hasUpperCase = /[A-Z]/.test(formData.password)
|
|
const hasLowerCase = /[a-z]/.test(formData.password)
|
|
const hasNumbers = /\d/.test(formData.password)
|
|
|
|
if (!hasUpperCase || !hasLowerCase || !hasNumbers) {
|
|
return 'Password must contain uppercase, lowercase, and numbers'
|
|
}
|
|
|
|
if (formData.password !== formData.confirmPassword) {
|
|
return 'Passwords do not match'
|
|
}
|
|
|
|
return null
|
|
}
|
|
|
|
const handleSubmit = async (e: React.FormEvent) => {
|
|
e.preventDefault()
|
|
setIsLoading(true)
|
|
setError(null)
|
|
|
|
const validationError = validateForm()
|
|
if (validationError) {
|
|
setError(validationError)
|
|
setIsLoading(false)
|
|
return
|
|
}
|
|
|
|
try {
|
|
const response = await fetch('/api/auth/register', {
|
|
method: 'POST',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: JSON.stringify({
|
|
name: formData.name,
|
|
email: formData.email,
|
|
password: formData.password,
|
|
}),
|
|
})
|
|
|
|
const data = await response.json()
|
|
|
|
if (!response.ok) {
|
|
setError(data.message || 'Registration failed')
|
|
return
|
|
}
|
|
|
|
setSuccess(true)
|
|
|
|
// Auto sign in after successful registration
|
|
setTimeout(async () => {
|
|
const result = await signIn('credentials', {
|
|
email: formData.email,
|
|
password: formData.password,
|
|
redirect: false,
|
|
})
|
|
|
|
if (result?.ok) {
|
|
router.push((callbackUrl as string) || '/')
|
|
} else {
|
|
router.push('/auth/signin')
|
|
}
|
|
}, 1500)
|
|
} catch (err) {
|
|
setError('An unexpected error occurred')
|
|
} finally {
|
|
setIsLoading(false)
|
|
}
|
|
}
|
|
|
|
if (success) {
|
|
return (
|
|
<Layout>
|
|
<Head>
|
|
<title>Registration Successful | LocalGreenChain</title>
|
|
</Head>
|
|
<div className="min-h-screen flex items-center justify-center bg-gray-50 py-12 px-4 sm:px-6 lg:px-8">
|
|
<div className="max-w-md w-full space-y-8 text-center">
|
|
<div className="bg-green-50 border border-green-200 text-green-700 px-4 py-8 rounded-lg">
|
|
<h2 className="text-2xl font-bold mb-2">Registration Successful!</h2>
|
|
<p>Your account has been created. Signing you in...</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</Layout>
|
|
)
|
|
}
|
|
|
|
return (
|
|
<Layout>
|
|
<Head>
|
|
<title>Sign Up | LocalGreenChain</title>
|
|
</Head>
|
|
|
|
<div className="min-h-screen flex items-center justify-center bg-gray-50 py-12 px-4 sm:px-6 lg:px-8">
|
|
<div className="max-w-md w-full space-y-8">
|
|
<div>
|
|
<h2 className="mt-6 text-center text-3xl font-extrabold text-gray-900">
|
|
Create your account
|
|
</h2>
|
|
<p className="mt-2 text-center text-sm text-gray-600">
|
|
Already have an account?{' '}
|
|
<Link href="/auth/signin">
|
|
<a className="font-medium text-green-600 hover:text-green-500">
|
|
Sign in
|
|
</a>
|
|
</Link>
|
|
</p>
|
|
</div>
|
|
|
|
{error && (
|
|
<div className="bg-red-50 border border-red-200 text-red-700 px-4 py-3 rounded relative">
|
|
<span className="block sm:inline">{error}</span>
|
|
</div>
|
|
)}
|
|
|
|
<form className="mt-8 space-y-6" onSubmit={handleSubmit}>
|
|
<div className="rounded-md shadow-sm space-y-4">
|
|
<div>
|
|
<label htmlFor="name" className="block text-sm font-medium text-gray-700">
|
|
Full Name (optional)
|
|
</label>
|
|
<input
|
|
id="name"
|
|
name="name"
|
|
type="text"
|
|
autoComplete="name"
|
|
value={formData.name}
|
|
onChange={handleChange}
|
|
className="mt-1 appearance-none relative block w-full px-3 py-2 border border-gray-300 placeholder-gray-500 text-gray-900 rounded-md focus:outline-none focus:ring-green-500 focus:border-green-500 sm:text-sm"
|
|
placeholder="John Doe"
|
|
/>
|
|
</div>
|
|
|
|
<div>
|
|
<label htmlFor="email" className="block text-sm font-medium text-gray-700">
|
|
Email address
|
|
</label>
|
|
<input
|
|
id="email"
|
|
name="email"
|
|
type="email"
|
|
autoComplete="email"
|
|
required
|
|
value={formData.email}
|
|
onChange={handleChange}
|
|
className="mt-1 appearance-none relative block w-full px-3 py-2 border border-gray-300 placeholder-gray-500 text-gray-900 rounded-md focus:outline-none focus:ring-green-500 focus:border-green-500 sm:text-sm"
|
|
placeholder="you@example.com"
|
|
/>
|
|
</div>
|
|
|
|
<div>
|
|
<label htmlFor="password" className="block text-sm font-medium text-gray-700">
|
|
Password
|
|
</label>
|
|
<input
|
|
id="password"
|
|
name="password"
|
|
type="password"
|
|
autoComplete="new-password"
|
|
required
|
|
value={formData.password}
|
|
onChange={handleChange}
|
|
className="mt-1 appearance-none relative block w-full px-3 py-2 border border-gray-300 placeholder-gray-500 text-gray-900 rounded-md focus:outline-none focus:ring-green-500 focus:border-green-500 sm:text-sm"
|
|
placeholder="At least 8 characters"
|
|
/>
|
|
<p className="mt-1 text-xs text-gray-500">
|
|
Must contain uppercase, lowercase, and numbers
|
|
</p>
|
|
</div>
|
|
|
|
<div>
|
|
<label htmlFor="confirmPassword" className="block text-sm font-medium text-gray-700">
|
|
Confirm Password
|
|
</label>
|
|
<input
|
|
id="confirmPassword"
|
|
name="confirmPassword"
|
|
type="password"
|
|
autoComplete="new-password"
|
|
required
|
|
value={formData.confirmPassword}
|
|
onChange={handleChange}
|
|
className="mt-1 appearance-none relative block w-full px-3 py-2 border border-gray-300 placeholder-gray-500 text-gray-900 rounded-md focus:outline-none focus:ring-green-500 focus:border-green-500 sm:text-sm"
|
|
placeholder="Confirm your password"
|
|
/>
|
|
</div>
|
|
</div>
|
|
|
|
<div>
|
|
<button
|
|
type="submit"
|
|
disabled={isLoading}
|
|
className="group relative w-full flex justify-center py-2 px-4 border border-transparent text-sm font-medium rounded-md text-white bg-green-600 hover:bg-green-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-green-500 disabled:opacity-50 disabled:cursor-not-allowed"
|
|
>
|
|
{isLoading ? 'Creating account...' : 'Create account'}
|
|
</button>
|
|
</div>
|
|
|
|
<p className="mt-2 text-center text-xs text-gray-500">
|
|
By creating an account, you agree to our{' '}
|
|
<a href="#" className="text-green-600 hover:text-green-500">
|
|
Terms of Service
|
|
</a>{' '}
|
|
and{' '}
|
|
<a href="#" className="text-green-600 hover:text-green-500">
|
|
Privacy Policy
|
|
</a>
|
|
</p>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</Layout>
|
|
)
|
|
}
|
|
|
|
export const getServerSideProps: GetServerSideProps = async (context) => {
|
|
const session = await getServerSession(context.req, context.res, authOptions)
|
|
|
|
if (session) {
|
|
return {
|
|
redirect: {
|
|
destination: '/',
|
|
permanent: false,
|
|
},
|
|
}
|
|
}
|
|
|
|
return {
|
|
props: {},
|
|
}
|
|
}
|