Login end-to-end en Next.js: iron-session + auth SRP6 + página i18n

- lib/session.ts: sesión cifrada httpOnly con iron-session (SESSION_SECRET en .env.local). SessionData {bnetId, bnetEmail, username, accountId}. - lib/auth.ts: authenticate(email,password) verifica contra battlenet_accounts con bnetVerify (SRP6 v2); getGameAccounts(bnetId). Resiliente si acore no está. - app/api/auth/login/route.ts: POST -> autentica, fija sesión, resuelve cuentas de juego (1 -> auto; 0/varias -> needsSelection). Devuelve JSON. - app/[locale]/login: página SSR + LoginForm (cliente, next-intl, router i18n). Textos en messages/*.json (namespace Login). - tsconfig target ES2020 (literales BigInt de bnet.ts). Validado end-to-end: con una cuenta creada por bnet.py (como haría AzerothCore), el login TS la verifica OK y emite la cookie de sesión; password incorrecta -> invalidCredentials; sin campos -> missingFields. Página en ES y EN. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-12 22:42:23 +00:00
parent 10ba2d32df
commit 60c2e44afd
11 changed files with 309 additions and 4 deletions
@@ -0,0 +1,94 @@
+'use client'
+
+import { useState } from 'react'
+import { useTranslations } from 'next-intl'
+import { useRouter } from '@/i18n/navigation'
+
+const ERROR_KEYS = ['invalidCredentials', 'missingFields', 'invalidRequest'] as const
+
+export function LoginForm() {
+  const t = useTranslations('Login')
+  const router = useRouter()
+  const [email, setEmail] = useState('')
+  const [password, setPassword] = useState('')
+  const [showPw, setShowPw] = useState(false)
+  const [busy, setBusy] = useState(false)
+  const [message, setMessage] = useState<{ ok: boolean; text: string } | null>(null)
+
+  async function handleSubmit(e: React.FormEvent) {
+    e.preventDefault()
+    if (busy) return
+    if (!email.trim() || !password) {
+      setMessage({ ok: false, text: t('missingFields') })
+      return
+    }
+    setBusy(true)
+    setMessage(null)
+    try {
+      const res = await fetch('/api/auth/login', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        credentials: 'same-origin',
+        body: JSON.stringify({ email: email.trim(), password }),
+      })
+      const data: { success?: boolean; needsSelection?: boolean; error?: string } = await res.json()
+      if (data.success) {
+        setMessage({ ok: true, text: t('success') })
+        router.push(data.needsSelection ? '/select-account' : '/account')
+      } else {
+        const key = (ERROR_KEYS as readonly string[]).includes(data.error ?? '') ? data.error! : 'genericError'
+        setMessage({ ok: false, text: t(key) })
+        setBusy(false)
+      }
+    } catch {
+      setMessage({ ok: false, text: t('genericError') })
+      setBusy(false)
+    }
+  }
+
+  return (
+    <div className="mx-auto max-w-sm text-center">
+      <form onSubmit={handleSubmit} className="space-y-3">
+        <input
+          type="email"
+          value={email}
+          onChange={(e) => setEmail(e.target.value)}
+          placeholder={t('email')}
+          autoFocus
+          required
+          className="w-full rounded border border-amber-900/60 bg-[#2c1e14] px-3 py-2"
+        />
+        <div className="relative">
+          <input
+            type={showPw ? 'text' : 'password'}
+            value={password}
+            onChange={(e) => setPassword(e.target.value)}
+            placeholder={t('password')}
+            maxLength={16}
+            required
+            className="w-full rounded border border-amber-900/60 bg-[#2c1e14] px-3 py-2 pr-10"
+          />
+          <button
+            type="button"
+            onClick={() => setShowPw((v) => !v)}
+            className="absolute inset-y-0 right-2 text-amber-200/60"
+            aria-label="toggle"
+          >
+            {showPw ? '🙈' : '👁'}
+          </button>
+        </div>
+        <button
+          type="submit"
+          disabled={busy}
+          className="w-full rounded bg-amber-600 px-4 py-2 font-semibold text-[#1b120b] disabled:opacity-60"
+        >
+          {busy ? t('connecting') : t('submit')}
+        </button>
+      </form>
+
+      {message && (
+        <p className={`mt-3 ${message.ok ? 'text-green-400' : 'text-red-400'}`}>{message.text}</p>
+      )}
+    </div>
+  )
+}