Files
myeasycms-v2/apps/web/app/identities/page.tsx
Giancarlo Buomprisco 44137016cb 2.21.12 (#423)
* chore: bump version to 2.21.12 and implement safe redirect path validation

- Updated application version from 2.21.11 to 2.21.12 in package.json.
- Introduced `getSafeRedirectPath` and `isSafeRedirectPath` utility functions to validate user-supplied redirect URLs, enhancing security against open redirect attacks.
* fix: address page reload issue in Admin tests for CI
2025-12-09 23:34:10 +08:00

127 lines
3.6 KiB
TypeScript

import { Metadata } from 'next';
import { redirect } from 'next/navigation';
import { AuthLayoutShell } from '@kit/auth/shared';
import { getSafeRedirectPath } from '@kit/shared/utils';
import { requireUser } from '@kit/supabase/require-user';
import { getSupabaseServerClient } from '@kit/supabase/server-client';
import { Heading } from '@kit/ui/heading';
import { Trans } from '@kit/ui/trans';
import { AppLogo } from '~/components/app-logo';
import authConfig from '~/config/auth.config';
import pathsConfig from '~/config/paths.config';
import { createI18nServerInstance } from '~/lib/i18n/i18n.server';
import { withI18n } from '~/lib/i18n/with-i18n';
import { IdentitiesStepWrapper } from './_components/identities-step-wrapper';
export const meta = async (): Promise<Metadata> => {
const i18n = await createI18nServerInstance();
return {
title: i18n.t('auth:setupAccount'),
};
};
type IdentitiesPageProps = {
searchParams: Promise<{ next?: string }>;
};
/**
* @name IdentitiesPage
* @description Displays linked accounts and available authentication methods.
*/
async function IdentitiesPage(props: IdentitiesPageProps) {
const {
nextPath,
showPasswordOption,
showEmailOption,
oAuthProviders,
enableIdentityLinking,
requiresConfirmation,
} = await fetchData(props);
return (
<AuthLayoutShell
Logo={AppLogo}
contentClassName="max-w-md overflow-y-hidden"
>
<div
className={
'flex max-h-[70vh] w-full flex-col items-center space-y-6 overflow-y-auto'
}
>
<div className={'flex flex-col items-center gap-1'}>
<Heading
level={4}
className="text-center"
data-test="identities-page-heading"
>
<Trans i18nKey={'auth:linkAccountToSignIn'} />
</Heading>
<Heading
level={6}
className={'text-muted-foreground text-center text-sm'}
data-test="identities-page-description"
>
<Trans i18nKey={'auth:linkAccountToSignInDescription'} />
</Heading>
</div>
<IdentitiesStepWrapper
nextPath={nextPath}
showPasswordOption={showPasswordOption}
showEmailOption={showEmailOption}
oAuthProviders={oAuthProviders}
enableIdentityLinking={enableIdentityLinking}
requiresConfirmation={requiresConfirmation}
/>
</div>
</AuthLayoutShell>
);
}
export default withI18n(IdentitiesPage);
async function fetchData(props: IdentitiesPageProps) {
const searchParams = await props.searchParams;
const client = getSupabaseServerClient();
const auth = await requireUser(client);
// If not authenticated, redirect to sign in
if (!auth.data) {
throw redirect(pathsConfig.auth.signIn);
}
// Get the next path from URL params (where to redirect after setup)
const nextPath = getSafeRedirectPath(searchParams.next, pathsConfig.app.home);
// Available auth methods to add
const showPasswordOption = authConfig.providers.password;
// Show email option if password, magic link, or OTP is enabled
const showEmailOption =
authConfig.providers.password ||
authConfig.providers.magicLink ||
authConfig.providers.otp;
const oAuthProviders = authConfig.providers.oAuth;
const enableIdentityLinking = authConfig.enableIdentityLinking;
// Only require confirmation if password or oauth providers are enabled
const requiresConfirmation =
authConfig.providers.password || oAuthProviders.length > 0;
return {
nextPath,
showPasswordOption,
showEmailOption,
oAuthProviders,
enableIdentityLinking,
requiresConfirmation,
};
}