Inna
1da7349373
- lib/security-token.ts: requestSecurityToken (token de 6 chars, cooldown 7 días, guarda en home_securitytoken, email) + checkSecurityToken. - lib/change-password.ts: changePassword (valida token + contraseña actual con authenticate, re-deriva verifier SRP6 v2, actualiza battlenet_accounts). - Routes /api/account/security-token y /change-password (guard; el cambio hace logout de la sesión). Páginas /security-token y /change-password (protegidas) con sus forms cliente e i18n (SecurityToken, ChangePassword). Verificado: páginas redirigen a login sin sesión, APIs 401. Reutiliza home_securitytoken de Django y la crypto validada. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
77 lines
3.0 KiB
TypeScript
77 lines
3.0 KiB
TypeScript
'use client'
|
|
|
|
import { useState } from 'react'
|
|
import { useTranslations } from 'next-intl'
|
|
import { useRouter } from '@/i18n/navigation'
|
|
|
|
const ERROR_KEYS = [
|
|
'missingFields',
|
|
'passwordMismatch',
|
|
'passwordTooLong',
|
|
'invalidToken',
|
|
'wrongCurrentPassword',
|
|
'accountNotFound',
|
|
] as const
|
|
|
|
export function ChangePasswordForm() {
|
|
const t = useTranslations('ChangePassword')
|
|
const router = useRouter()
|
|
const [form, setForm] = useState({ currentPassword: '', newPassword: '', confPassword: '', token: '' })
|
|
const [busy, setBusy] = useState(false)
|
|
const [done, setDone] = useState(false)
|
|
const [message, setMessage] = useState<{ ok: boolean; text: string } | null>(null)
|
|
|
|
function upd(k: string, v: string) {
|
|
setForm((f) => ({ ...f, [k]: v }))
|
|
}
|
|
|
|
async function handleSubmit(e: React.FormEvent) {
|
|
e.preventDefault()
|
|
if (busy || done) return
|
|
setBusy(true)
|
|
setMessage(null)
|
|
try {
|
|
const res = await fetch('/api/account/change-password', {
|
|
method: 'POST',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
credentials: 'same-origin',
|
|
body: JSON.stringify(form),
|
|
})
|
|
const data: { success?: boolean; error?: string } = await res.json()
|
|
if (data.success) {
|
|
setDone(true)
|
|
setMessage({ ok: true, text: t('success') })
|
|
setTimeout(() => {
|
|
router.push('/login')
|
|
router.refresh()
|
|
}, 2500)
|
|
} else {
|
|
const key = (ERROR_KEYS as readonly string[]).includes(data.error ?? '') ? data.error! : 'genericError'
|
|
setMessage({ ok: false, text: t(key) })
|
|
}
|
|
} catch {
|
|
setMessage({ ok: false, text: t('genericError') })
|
|
} finally {
|
|
if (!done) setBusy(false)
|
|
}
|
|
}
|
|
|
|
const field = 'w-full rounded border border-amber-900/60 bg-[#2c1e14] px-3 py-2'
|
|
|
|
return (
|
|
<div className="mx-auto max-w-sm">
|
|
<p className="mb-4 text-sm text-amber-200/70">{t('info')}</p>
|
|
<form onSubmit={handleSubmit} className="space-y-3">
|
|
<input type="password" maxLength={16} placeholder={t('currentPassword')} value={form.currentPassword} onChange={(e) => upd('currentPassword', e.target.value)} className={field} />
|
|
<input type="password" maxLength={16} placeholder={t('newPassword')} value={form.newPassword} onChange={(e) => upd('newPassword', e.target.value)} className={field} />
|
|
<input type="password" maxLength={16} placeholder={t('confPassword')} value={form.confPassword} onChange={(e) => upd('confPassword', e.target.value)} className={field} />
|
|
<input type="text" maxLength={6} placeholder={t('token')} value={form.token} onChange={(e) => upd('token', e.target.value)} className={field} />
|
|
<button type="submit" disabled={busy || done} className="w-full rounded bg-amber-600 px-4 py-2 font-semibold text-[#1b120b] disabled:opacity-60">
|
|
{busy ? t('changing') : t('submit')}
|
|
</button>
|
|
</form>
|
|
{message && <p className={`mt-3 text-center ${message.ok ? 'text-green-400' : 'text-red-400'}`}>{message.text}</p>}
|
|
</div>
|
|
)
|
|
}
|