- Refactor auth.ts to build OAuth providers array dynamically; extract buildOAuthProviders() for unit-testability - Add WorkOS provider (WORKOS_CLIENT_ID/SECRET/REDIRECT_URI env vars) - Add Keycloak provider with realm-scoped OIDC discovery (KEYCLOAK_URL/REALM/CLIENT_ID/CLIENT_SECRET env vars) - Add genericOAuthClient plugin to web auth-client for signIn.oauth2() - Add WorkOS + Keycloak SSO buttons to login page (NEXT_PUBLIC_*_ENABLED feature flags control visibility) - Update .env.example with SSO provider stanzas - Add 8 unit tests covering all provider inclusion/exclusion paths Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
142 lines
5.3 KiB
TypeScript
142 lines
5.3 KiB
TypeScript
'use client';
|
|
|
|
import { useState } from 'react';
|
|
import { useRouter } from 'next/navigation';
|
|
import Link from 'next/link';
|
|
import { signIn } from '@/lib/auth-client';
|
|
|
|
const workosEnabled = process.env['NEXT_PUBLIC_WORKOS_ENABLED'] === 'true';
|
|
const keycloakEnabled = process.env['NEXT_PUBLIC_KEYCLOAK_ENABLED'] === 'true';
|
|
const hasSsoProviders = workosEnabled || keycloakEnabled;
|
|
|
|
export default function LoginPage(): React.ReactElement {
|
|
const router = useRouter();
|
|
const [error, setError] = useState<string | null>(null);
|
|
const [loading, setLoading] = useState(false);
|
|
|
|
async function handleSubmit(e: React.FormEvent<HTMLFormElement>): Promise<void> {
|
|
e.preventDefault();
|
|
setError(null);
|
|
setLoading(true);
|
|
|
|
const form = new FormData(e.currentTarget);
|
|
const email = form.get('email') as string;
|
|
const password = form.get('password') as string;
|
|
|
|
const result = await signIn.email({ email, password });
|
|
|
|
if (result.error) {
|
|
setError(result.error.message ?? 'Sign in failed');
|
|
setLoading(false);
|
|
return;
|
|
}
|
|
|
|
router.push('/chat');
|
|
}
|
|
|
|
async function handleSsoSignIn(providerId: string): Promise<void> {
|
|
setError(null);
|
|
setLoading(true);
|
|
const result = await signIn.oauth2({ providerId, callbackURL: '/chat' });
|
|
if (result?.error) {
|
|
setError(result.error.message ?? 'SSO sign in failed');
|
|
setLoading(false);
|
|
}
|
|
}
|
|
|
|
return (
|
|
<div>
|
|
<h1 className="text-2xl font-semibold">Sign in</h1>
|
|
<p className="mt-1 text-sm text-text-secondary">Sign in to your Mosaic account</p>
|
|
|
|
{error && (
|
|
<div
|
|
role="alert"
|
|
className="mt-4 rounded-lg border border-error/30 bg-error/10 px-4 py-3 text-sm text-error"
|
|
>
|
|
{error}
|
|
</div>
|
|
)}
|
|
|
|
{hasSsoProviders && (
|
|
<div className="mt-6 space-y-3">
|
|
{workosEnabled && (
|
|
<button
|
|
type="button"
|
|
disabled={loading}
|
|
onClick={() => handleSsoSignIn('workos')}
|
|
className="flex w-full items-center justify-center gap-2 rounded-lg border border-surface-border bg-surface-elevated px-4 py-2.5 text-sm font-medium text-text-primary transition-colors hover:bg-surface-hover focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 focus:ring-offset-surface-card disabled:opacity-50"
|
|
>
|
|
Continue with WorkOS
|
|
</button>
|
|
)}
|
|
{keycloakEnabled && (
|
|
<button
|
|
type="button"
|
|
disabled={loading}
|
|
onClick={() => handleSsoSignIn('keycloak')}
|
|
className="flex w-full items-center justify-center gap-2 rounded-lg border border-surface-border bg-surface-elevated px-4 py-2.5 text-sm font-medium text-text-primary transition-colors hover:bg-surface-hover focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 focus:ring-offset-surface-card disabled:opacity-50"
|
|
>
|
|
Continue with Keycloak
|
|
</button>
|
|
)}
|
|
<div className="relative flex items-center">
|
|
<div className="flex-1 border-t border-surface-border" />
|
|
<span className="mx-3 text-xs text-text-muted">or</span>
|
|
<div className="flex-1 border-t border-surface-border" />
|
|
</div>
|
|
</div>
|
|
)}
|
|
|
|
<form className={hasSsoProviders ? 'space-y-4' : 'mt-6 space-y-4'} onSubmit={handleSubmit}>
|
|
<div>
|
|
<label htmlFor="email" className="block text-sm font-medium text-text-secondary">
|
|
Email
|
|
</label>
|
|
<input
|
|
id="email"
|
|
name="email"
|
|
type="email"
|
|
autoComplete="email"
|
|
required
|
|
disabled={loading}
|
|
className="mt-1 block w-full rounded-lg border border-surface-border bg-surface-elevated px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-blue-500 focus:outline-none focus:ring-1 focus:ring-blue-500 disabled:opacity-50"
|
|
placeholder="you@example.com"
|
|
/>
|
|
</div>
|
|
|
|
<div>
|
|
<label htmlFor="password" className="block text-sm font-medium text-text-secondary">
|
|
Password
|
|
</label>
|
|
<input
|
|
id="password"
|
|
name="password"
|
|
type="password"
|
|
autoComplete="current-password"
|
|
required
|
|
disabled={loading}
|
|
className="mt-1 block w-full rounded-lg border border-surface-border bg-surface-elevated px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-blue-500 focus:outline-none focus:ring-1 focus:ring-blue-500 disabled:opacity-50"
|
|
placeholder="••••••••"
|
|
/>
|
|
</div>
|
|
|
|
<button
|
|
type="submit"
|
|
disabled={loading}
|
|
className="w-full rounded-lg bg-blue-600 px-4 py-2.5 text-sm font-medium text-white transition-colors hover:bg-blue-700 focus:outline-none focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 focus:ring-offset-surface-card disabled:opacity-50"
|
|
>
|
|
{loading ? 'Signing in...' : 'Sign in'}
|
|
</button>
|
|
</form>
|
|
|
|
<p className="mt-4 text-center text-sm text-text-muted">
|
|
Don't have an account?{' '}
|
|
<Link href="/register" className="text-blue-400 hover:text-blue-300">
|
|
Sign up
|
|
</Link>
|
|
</p>
|
|
</div>
|
|
);
|
|
}
|