Inna
60c2e44afd
- lib/session.ts: sesión cifrada httpOnly con iron-session (SESSION_SECRET en
.env.local). SessionData {bnetId, bnetEmail, username, accountId}.
- lib/auth.ts: authenticate(email,password) verifica contra battlenet_accounts con
bnetVerify (SRP6 v2); getGameAccounts(bnetId). Resiliente si acore no está.
- app/api/auth/login/route.ts: POST -> autentica, fija sesión, resuelve cuentas de
juego (1 -> auto; 0/varias -> needsSelection). Devuelve JSON.
- app/[locale]/login: página SSR + LoginForm (cliente, next-intl, router i18n).
Textos en messages/*.json (namespace Login).
- tsconfig target ES2020 (literales BigInt de bnet.ts).
Validado end-to-end: con una cuenta creada por bnet.py (como haría AzerothCore),
el login TS la verifica OK y emite la cookie de sesión; password incorrecta ->
invalidCredentials; sin campos -> missingFields. Página en ES y EN.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
95 lines
3.1 KiB
TypeScript
95 lines
3.1 KiB
TypeScript
'use client'
|
|
|
|
import { useState } from 'react'
|
|
import { useTranslations } from 'next-intl'
|
|
import { useRouter } from '@/i18n/navigation'
|
|
|
|
const ERROR_KEYS = ['invalidCredentials', 'missingFields', 'invalidRequest'] as const
|
|
|
|
export function LoginForm() {
|
|
const t = useTranslations('Login')
|
|
const router = useRouter()
|
|
const [email, setEmail] = useState('')
|
|
const [password, setPassword] = useState('')
|
|
const [showPw, setShowPw] = useState(false)
|
|
const [busy, setBusy] = useState(false)
|
|
const [message, setMessage] = useState<{ ok: boolean; text: string } | null>(null)
|
|
|
|
async function handleSubmit(e: React.FormEvent) {
|
|
e.preventDefault()
|
|
if (busy) return
|
|
if (!email.trim() || !password) {
|
|
setMessage({ ok: false, text: t('missingFields') })
|
|
return
|
|
}
|
|
setBusy(true)
|
|
setMessage(null)
|
|
try {
|
|
const res = await fetch('/api/auth/login', {
|
|
method: 'POST',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
credentials: 'same-origin',
|
|
body: JSON.stringify({ email: email.trim(), password }),
|
|
})
|
|
const data: { success?: boolean; needsSelection?: boolean; error?: string } = await res.json()
|
|
if (data.success) {
|
|
setMessage({ ok: true, text: t('success') })
|
|
router.push(data.needsSelection ? '/select-account' : '/account')
|
|
} else {
|
|
const key = (ERROR_KEYS as readonly string[]).includes(data.error ?? '') ? data.error! : 'genericError'
|
|
setMessage({ ok: false, text: t(key) })
|
|
setBusy(false)
|
|
}
|
|
} catch {
|
|
setMessage({ ok: false, text: t('genericError') })
|
|
setBusy(false)
|
|
}
|
|
}
|
|
|
|
return (
|
|
<div className="mx-auto max-w-sm text-center">
|
|
<form onSubmit={handleSubmit} className="space-y-3">
|
|
<input
|
|
type="email"
|
|
value={email}
|
|
onChange={(e) => setEmail(e.target.value)}
|
|
placeholder={t('email')}
|
|
autoFocus
|
|
required
|
|
className="w-full rounded border border-amber-900/60 bg-[#2c1e14] px-3 py-2"
|
|
/>
|
|
<div className="relative">
|
|
<input
|
|
type={showPw ? 'text' : 'password'}
|
|
value={password}
|
|
onChange={(e) => setPassword(e.target.value)}
|
|
placeholder={t('password')}
|
|
maxLength={16}
|
|
required
|
|
className="w-full rounded border border-amber-900/60 bg-[#2c1e14] px-3 py-2 pr-10"
|
|
/>
|
|
<button
|
|
type="button"
|
|
onClick={() => setShowPw((v) => !v)}
|
|
className="absolute inset-y-0 right-2 text-amber-200/60"
|
|
aria-label="toggle"
|
|
>
|
|
{showPw ? '🙈' : '👁'}
|
|
</button>
|
|
</div>
|
|
<button
|
|
type="submit"
|
|
disabled={busy}
|
|
className="w-full rounded bg-amber-600 px-4 py-2 font-semibold text-[#1b120b] disabled:opacity-60"
|
|
>
|
|
{busy ? t('connecting') : t('submit')}
|
|
</button>
|
|
</form>
|
|
|
|
{message && (
|
|
<p className={`mt-3 ${message.ok ? 'text-green-400' : 'text-red-400'}`}>{message.text}</p>
|
|
)}
|
|
</div>
|
|
)
|
|
}
|