NightSpire/web-next/app/[locale]/reset-password/ResetForm.tsx

'use client'

import { useState } from 'react'
import { useTranslations } from 'next-intl'
import { useRouter, Link } from '@/i18n/navigation'

const ERROR_KEYS = ['invalidLink', 'expiredLink', 'passwordMismatch', 'passwordTooLong', 'accountNotFound'] as const

export function ResetForm({ token }: { token: string }) {
  const t = useTranslations('Reset')
  const router = useRouter()
  const [password, setPassword] = useState('')
  const [confPassword, setConfPassword] = useState('')
  const [busy, setBusy] = useState(false)
  const [done, setDone] = useState(false)
  const [message, setMessage] = useState<{ ok: boolean; text: string } | null>(null)

  async function handleSubmit(e: React.FormEvent) {
    e.preventDefault()
    if (busy || done) return
    setBusy(true)
    setMessage(null)
    try {
      const res = await fetch('/api/auth/reset-password', {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify({ token, password, confPassword }),
      })
      const data: { success?: boolean; error?: string } = await res.json()
      if (data.success) {
        setDone(true)
        setMessage({ ok: true, text: t('success') })
        setTimeout(() => router.push('/login'), 2500)
      } else {
        const key = (ERROR_KEYS as readonly string[]).includes(data.error ?? '') ? data.error! : 'genericError'
        setMessage({ ok: false, text: t(key) })
      }
    } catch {
      setMessage({ ok: false, text: t('genericError') })
    } finally {
      setBusy(false)
    }
  }

  const field = 'nw-input'

  return (
    <div className="mx-auto max-w-sm text-center">
      <form onSubmit={handleSubmit} className="space-y-3">
        <input type="password" maxLength={16} placeholder={t('password')} value={password} onChange={(e) => setPassword(e.target.value)} required className={field} />
        <input type="password" maxLength={16} placeholder={t('confPassword')} value={confPassword} onChange={(e) => setConfPassword(e.target.value)} required className={field} />
        <button type="submit" disabled={busy || done} className="w-full nw-btn disabled:opacity-60">
          {busy ? t('saving') : t('submit')}
        </button>
      </form>
      {message && <p className={`mt-3 ${message.ok ? 'text-green-400' : 'text-red-400'}`}>{message.text}</p>}
      {done && (
        <p className="mt-4">
          <Link href="/login" className="text-sky-400 underline">
            {t('goLogin')}
          </Link>
        </p>
      )}
    </div>
  )
}