chore: standardize security and quality foundations
This commit is contained in:
@@ -1,243 +1,272 @@
|
||||
'use client'
|
||||
"use client";
|
||||
|
||||
import InviteDeliveryChoice from '../../ui/InviteDeliveryChoice'
|
||||
import InviteDeliveryChoice from "../../ui/InviteDeliveryChoice";
|
||||
|
||||
import PageHeading from '../../ui/PageHeading'
|
||||
import PageHeading from "../../ui/PageHeading";
|
||||
|
||||
import { useRouter } from 'next/navigation'
|
||||
import { useEffect, useMemo, useState } from 'react'
|
||||
import { authFetch, clearToken, getApiBase, getToken } from '../../lib/auth'
|
||||
import { useRouter } from "next/navigation";
|
||||
import { useCallback, useEffect, useMemo, useState } from "react";
|
||||
import { authFetch, clearToken, getApiBase, getToken } from "../../lib/auth";
|
||||
|
||||
type ProfileInfo = { username: string; role: string; invite_management_enabled?: boolean }
|
||||
type ProfileInfo = { username: string; role: string; invite_management_enabled?: boolean };
|
||||
type OwnedInvite = {
|
||||
id: number; code: string; label?: string | null; description?: string | null
|
||||
code_available?: boolean
|
||||
recipient_email?: string | null; max_uses?: number | null; use_count: number
|
||||
remaining_uses?: number | null; enabled: boolean; expires_at?: string | null
|
||||
is_usable?: boolean; created_at?: string | null
|
||||
}
|
||||
id: number;
|
||||
code: string;
|
||||
label?: string | null;
|
||||
description?: string | null;
|
||||
code_available?: boolean;
|
||||
recipient_email?: string | null;
|
||||
max_uses?: number | null;
|
||||
use_count: number;
|
||||
remaining_uses?: number | null;
|
||||
enabled: boolean;
|
||||
expires_at?: string | null;
|
||||
is_usable?: boolean;
|
||||
created_at?: string | null;
|
||||
};
|
||||
type OwnedInvitesResponse = {
|
||||
invites?: OwnedInvite[]
|
||||
invite_access?: { enabled?: boolean; managed_by_master?: boolean }
|
||||
master_invite?: { id: number; code: string; label?: string | null; max_uses?: number | null; expires_at?: string | null } | null
|
||||
}
|
||||
invites?: OwnedInvite[];
|
||||
invite_access?: { enabled?: boolean; managed_by_master?: boolean };
|
||||
master_invite?: {
|
||||
id: number;
|
||||
code: string;
|
||||
label?: string | null;
|
||||
max_uses?: number | null;
|
||||
expires_at?: string | null;
|
||||
} | null;
|
||||
};
|
||||
type InviteForm = {
|
||||
code: string; label: string; description: string; recipient_email: string
|
||||
enabled: boolean; message: string
|
||||
}
|
||||
type DeliveryMethod = '' | 'manual' | 'email'
|
||||
code: string;
|
||||
label: string;
|
||||
description: string;
|
||||
recipient_email: string;
|
||||
enabled: boolean;
|
||||
message: string;
|
||||
};
|
||||
type DeliveryMethod = "" | "manual" | "email";
|
||||
|
||||
const defaultInviteForm = (): InviteForm => ({
|
||||
code: '', label: '', description: '', recipient_email: '', enabled: true, message: '',
|
||||
})
|
||||
code: "",
|
||||
label: "",
|
||||
description: "",
|
||||
recipient_email: "",
|
||||
enabled: true,
|
||||
message: "",
|
||||
});
|
||||
const formatDate = (value?: string | null) => {
|
||||
if (!value) return 'Never'
|
||||
const date = new Date(value)
|
||||
return Number.isNaN(date.valueOf()) ? value : date.toLocaleString()
|
||||
}
|
||||
const isValidEmail = (value: string) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value.trim())
|
||||
if (!value) return "Never";
|
||||
const date = new Date(value);
|
||||
return Number.isNaN(date.valueOf()) ? value : date.toLocaleString();
|
||||
};
|
||||
const isValidEmail = (value: string) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value.trim());
|
||||
|
||||
export default function ProfileInvitesPage() {
|
||||
const router = useRouter()
|
||||
const [profile, setProfile] = useState<ProfileInfo | null>(null)
|
||||
const [invites, setInvites] = useState<OwnedInvite[]>([])
|
||||
const [inviteAccessEnabled, setInviteAccessEnabled] = useState(false)
|
||||
const [inviteManagedByMaster, setInviteManagedByMaster] = useState(false)
|
||||
const [masterInvite, setMasterInvite] = useState<OwnedInvitesResponse['master_invite']>(null)
|
||||
const [loading, setLoading] = useState(true)
|
||||
const [saving, setSaving] = useState(false)
|
||||
const [error, setError] = useState<string | null>(null)
|
||||
const [status, setStatus] = useState<string | null>(null)
|
||||
const [editingId, setEditingId] = useState<number | null>(null)
|
||||
const [flowStep, setFlowStep] = useState(1)
|
||||
const [useCustomCode, setUseCustomCode] = useState(false)
|
||||
const [deliveryMethod, setDeliveryMethod] = useState<DeliveryMethod>('')
|
||||
const [inviteForm, setInviteForm] = useState<InviteForm>(defaultInviteForm())
|
||||
const [createdInvite, setCreatedInvite] = useState<OwnedInvite | null>(null)
|
||||
const router = useRouter();
|
||||
const [profile, setProfile] = useState<ProfileInfo | null>(null);
|
||||
const [invites, setInvites] = useState<OwnedInvite[]>([]);
|
||||
const [inviteAccessEnabled, setInviteAccessEnabled] = useState(false);
|
||||
const [inviteManagedByMaster, setInviteManagedByMaster] = useState(false);
|
||||
const [masterInvite, setMasterInvite] = useState<OwnedInvitesResponse["master_invite"]>(null);
|
||||
const [loading, setLoading] = useState(true);
|
||||
const [saving, setSaving] = useState(false);
|
||||
const [error, setError] = useState<string | null>(null);
|
||||
const [status, setStatus] = useState<string | null>(null);
|
||||
const [editingId, setEditingId] = useState<number | null>(null);
|
||||
const [flowStep, setFlowStep] = useState(1);
|
||||
const [useCustomCode, setUseCustomCode] = useState(false);
|
||||
const [deliveryMethod, setDeliveryMethod] = useState<DeliveryMethod>("");
|
||||
const [inviteForm, setInviteForm] = useState<InviteForm>(defaultInviteForm());
|
||||
const [createdInvite, setCreatedInvite] = useState<OwnedInvite | null>(null);
|
||||
|
||||
const signupBaseUrl = useMemo(() => {
|
||||
if (typeof window === 'undefined') return '/signup'
|
||||
return `${window.location.origin}/signup`
|
||||
}, [])
|
||||
if (typeof window === "undefined") return "/signup";
|
||||
return `${window.location.origin}/signup`;
|
||||
}, []);
|
||||
|
||||
const loadInvites = async () => {
|
||||
const response = await authFetch(`${getApiBase()}/auth/profile/invites`)
|
||||
const loadInvites = useCallback(async () => {
|
||||
const response = await authFetch(`${getApiBase()}/auth/profile/invites`);
|
||||
if (!response.ok) {
|
||||
if (response.status === 401) {
|
||||
clearToken()
|
||||
router.push('/login')
|
||||
return
|
||||
clearToken();
|
||||
router.push("/login");
|
||||
return;
|
||||
}
|
||||
throw new Error('Could not load your invite workspace.')
|
||||
throw new Error("Could not load your invite workspace.");
|
||||
}
|
||||
const data = (await response.json()) as OwnedInvitesResponse
|
||||
setInvites(Array.isArray(data.invites) ? data.invites : [])
|
||||
setInviteAccessEnabled(Boolean(data.invite_access?.enabled))
|
||||
setInviteManagedByMaster(Boolean(data.invite_access?.managed_by_master))
|
||||
setMasterInvite(data.master_invite ?? null)
|
||||
}
|
||||
const data = (await response.json()) as OwnedInvitesResponse;
|
||||
setInvites(Array.isArray(data.invites) ? data.invites : []);
|
||||
setInviteAccessEnabled(Boolean(data.invite_access?.enabled));
|
||||
setInviteManagedByMaster(Boolean(data.invite_access?.managed_by_master));
|
||||
setMasterInvite(data.master_invite ?? null);
|
||||
}, [router]);
|
||||
|
||||
useEffect(() => {
|
||||
if (!getToken()) {
|
||||
router.push('/login')
|
||||
return
|
||||
router.push("/login");
|
||||
return;
|
||||
}
|
||||
const load = async () => {
|
||||
try {
|
||||
const profileResponse = await authFetch(`${getApiBase()}/auth/profile`)
|
||||
const profileResponse = await authFetch(`${getApiBase()}/auth/profile`);
|
||||
if (!profileResponse.ok) {
|
||||
if (profileResponse.status === 401) {
|
||||
clearToken()
|
||||
router.push('/login')
|
||||
return
|
||||
clearToken();
|
||||
router.push("/login");
|
||||
return;
|
||||
}
|
||||
throw new Error('Could not load your profile.')
|
||||
throw new Error("Could not load your profile.");
|
||||
}
|
||||
const profileData = await profileResponse.json()
|
||||
setProfile(profileData?.user ?? null)
|
||||
await loadInvites()
|
||||
const profileData = await profileResponse.json();
|
||||
setProfile(profileData?.user ?? null);
|
||||
await loadInvites();
|
||||
} catch (err) {
|
||||
console.error(err)
|
||||
setError(err instanceof Error ? err.message : 'Could not load your invite workspace.')
|
||||
console.error(err);
|
||||
setError(err instanceof Error ? err.message : "Could not load your invite workspace.");
|
||||
} finally {
|
||||
setLoading(false)
|
||||
setLoading(false);
|
||||
}
|
||||
}
|
||||
void load()
|
||||
}, [router])
|
||||
};
|
||||
void load();
|
||||
}, [loadInvites, router]);
|
||||
|
||||
const resetFlow = () => {
|
||||
setEditingId(null)
|
||||
setFlowStep(1)
|
||||
setUseCustomCode(false)
|
||||
setDeliveryMethod('')
|
||||
setInviteForm(defaultInviteForm())
|
||||
}
|
||||
setEditingId(null);
|
||||
setFlowStep(1);
|
||||
setUseCustomCode(false);
|
||||
setDeliveryMethod("");
|
||||
setInviteForm(defaultInviteForm());
|
||||
};
|
||||
|
||||
const editInvite = (invite: OwnedInvite) => {
|
||||
setEditingId(invite.id)
|
||||
setCreatedInvite(null)
|
||||
setFlowStep(4)
|
||||
setUseCustomCode(true)
|
||||
setDeliveryMethod(invite.recipient_email ? 'email' : 'manual')
|
||||
setEditingId(invite.id);
|
||||
setCreatedInvite(null);
|
||||
setFlowStep(4);
|
||||
setUseCustomCode(true);
|
||||
setDeliveryMethod(invite.recipient_email ? "email" : "manual");
|
||||
setInviteForm({
|
||||
code: invite.code,
|
||||
label: invite.label ?? '',
|
||||
description: invite.description ?? '',
|
||||
recipient_email: invite.recipient_email ?? '',
|
||||
label: invite.label ?? "",
|
||||
description: invite.description ?? "",
|
||||
recipient_email: invite.recipient_email ?? "",
|
||||
enabled: invite.enabled !== false,
|
||||
message: '',
|
||||
})
|
||||
setError(null)
|
||||
setStatus(null)
|
||||
window.scrollTo({ top: 0, behavior: 'smooth' })
|
||||
}
|
||||
message: "",
|
||||
});
|
||||
setError(null);
|
||||
setStatus(null);
|
||||
window.scrollTo({ top: 0, behavior: "smooth" });
|
||||
};
|
||||
|
||||
const saveInvite = async (event: React.FormEvent) => {
|
||||
event.preventDefault()
|
||||
const inviteName = inviteForm.label.trim()
|
||||
const recipientEmail = inviteForm.recipient_email.trim()
|
||||
event.preventDefault();
|
||||
const inviteName = inviteForm.label.trim();
|
||||
const recipientEmail = inviteForm.recipient_email.trim();
|
||||
if (!inviteName) {
|
||||
setError('Give this invite a name so you can recognise it later.')
|
||||
return
|
||||
setError("Give this invite a name so you can recognise it later.");
|
||||
return;
|
||||
}
|
||||
if (!deliveryMethod) {
|
||||
setError('Choose how you want to deliver the invite.')
|
||||
return
|
||||
setError("Choose how you want to deliver the invite.");
|
||||
return;
|
||||
}
|
||||
if (deliveryMethod === 'email' && !isValidEmail(recipientEmail)) {
|
||||
setError('Enter a valid recipient email address.')
|
||||
return
|
||||
if (deliveryMethod === "email" && !isValidEmail(recipientEmail)) {
|
||||
setError("Enter a valid recipient email address.");
|
||||
return;
|
||||
}
|
||||
setSaving(true)
|
||||
setError(null)
|
||||
setStatus(null)
|
||||
setSaving(true);
|
||||
setError(null);
|
||||
setStatus(null);
|
||||
try {
|
||||
const response = await authFetch(
|
||||
editingId == null ? `${getApiBase()}/auth/profile/invites` : `${getApiBase()}/auth/profile/invites/${editingId}`,
|
||||
editingId == null
|
||||
? `${getApiBase()}/auth/profile/invites`
|
||||
: `${getApiBase()}/auth/profile/invites/${editingId}`,
|
||||
{
|
||||
method: editingId == null ? 'POST' : 'PUT',
|
||||
headers: { 'Content-Type': 'application/json' },
|
||||
method: editingId == null ? "POST" : "PUT",
|
||||
headers: { "Content-Type": "application/json" },
|
||||
body: JSON.stringify({
|
||||
code: useCustomCode ? inviteForm.code || null : null,
|
||||
label: inviteName,
|
||||
description: inviteForm.description || null,
|
||||
recipient_email: deliveryMethod === 'email' ? recipientEmail : null,
|
||||
recipient_email: deliveryMethod === "email" ? recipientEmail : null,
|
||||
enabled: inviteForm.enabled,
|
||||
send_email: editingId == null && deliveryMethod === 'email',
|
||||
send_email: editingId == null && deliveryMethod === "email",
|
||||
message: inviteForm.message || null,
|
||||
}),
|
||||
}
|
||||
)
|
||||
},
|
||||
);
|
||||
if (!response.ok) {
|
||||
if (response.status === 401) {
|
||||
clearToken()
|
||||
router.push('/login')
|
||||
return
|
||||
clearToken();
|
||||
router.push("/login");
|
||||
return;
|
||||
}
|
||||
throw new Error((await response.text()) || 'Could not save the invite.')
|
||||
throw new Error((await response.text()) || "Could not save the invite.");
|
||||
}
|
||||
const data = await response.json()
|
||||
const savedInvite = data?.invite as OwnedInvite | undefined
|
||||
const data = await response.json();
|
||||
const savedInvite = data?.invite as OwnedInvite | undefined;
|
||||
setStatus(
|
||||
data?.email?.status === 'ok'
|
||||
data?.email?.status === "ok"
|
||||
? `Invite created and emailed to ${data.email.recipient_email}.`
|
||||
: data?.email?.status === 'error'
|
||||
: data?.email?.status === "error"
|
||||
? `Invite created, but the email could not be sent: ${data.email.detail}`
|
||||
: editingId == null ? 'Invite link created and ready to share.' : 'Invite updated.'
|
||||
)
|
||||
resetFlow()
|
||||
if (editingId == null && savedInvite) setCreatedInvite(savedInvite)
|
||||
await loadInvites()
|
||||
: editingId == null
|
||||
? "Invite link created and ready to share."
|
||||
: "Invite updated.",
|
||||
);
|
||||
resetFlow();
|
||||
if (editingId == null && savedInvite) setCreatedInvite(savedInvite);
|
||||
await loadInvites();
|
||||
} catch (err) {
|
||||
console.error(err)
|
||||
setError(err instanceof Error ? err.message : 'Could not save the invite.')
|
||||
console.error(err);
|
||||
setError(err instanceof Error ? err.message : "Could not save the invite.");
|
||||
} finally {
|
||||
setSaving(false)
|
||||
setSaving(false);
|
||||
}
|
||||
}
|
||||
};
|
||||
|
||||
const deleteInvite = async (invite: OwnedInvite) => {
|
||||
if (!window.confirm(`Delete invite “${invite.label || invite.code}”?`)) return
|
||||
setError(null)
|
||||
if (!window.confirm(`Delete invite “${invite.label || invite.code}”?`)) return;
|
||||
setError(null);
|
||||
try {
|
||||
const response = await authFetch(`${getApiBase()}/auth/profile/invites/${invite.id}`, { method: 'DELETE' })
|
||||
if (!response.ok) throw new Error((await response.text()) || 'Could not delete the invite.')
|
||||
if (editingId === invite.id) resetFlow()
|
||||
setStatus(`Deleted ${invite.label || invite.code}.`)
|
||||
await loadInvites()
|
||||
const response = await authFetch(`${getApiBase()}/auth/profile/invites/${invite.id}`, { method: "DELETE" });
|
||||
if (!response.ok) throw new Error((await response.text()) || "Could not delete the invite.");
|
||||
if (editingId === invite.id) resetFlow();
|
||||
setStatus(`Deleted ${invite.label || invite.code}.`);
|
||||
await loadInvites();
|
||||
} catch (err) {
|
||||
console.error(err)
|
||||
setError(err instanceof Error ? err.message : 'Could not delete the invite.')
|
||||
console.error(err);
|
||||
setError(err instanceof Error ? err.message : "Could not delete the invite.");
|
||||
}
|
||||
}
|
||||
};
|
||||
|
||||
const copyInviteLink = async (invite: OwnedInvite) => {
|
||||
try {
|
||||
let usableInvite = invite
|
||||
let usableInvite = invite;
|
||||
if (!invite.code_available) {
|
||||
const response = await authFetch(`${getApiBase()}/auth/profile/invites/${invite.id}/rotate`, {
|
||||
method: 'POST',
|
||||
})
|
||||
if (!response.ok) throw new Error((await response.text()) || 'Could not generate a replacement link.')
|
||||
const data = await response.json()
|
||||
usableInvite = data.invite as OwnedInvite
|
||||
setInvites((current) => current.map((item) => item.id === invite.id ? usableInvite : item))
|
||||
method: "POST",
|
||||
});
|
||||
if (!response.ok) throw new Error((await response.text()) || "Could not generate a replacement link.");
|
||||
const data = await response.json();
|
||||
usableInvite = data.invite as OwnedInvite;
|
||||
setInvites((current) => current.map((item) => (item.id === invite.id ? usableInvite : item)));
|
||||
}
|
||||
const url = `${signupBaseUrl}?code=${encodeURIComponent(usableInvite.code)}`
|
||||
await navigator.clipboard.writeText(url)
|
||||
setStatus(`Copied the link for ${invite.label || usableInvite.code}. Keep it safe; Magent will not display it again after this page reloads.`)
|
||||
const url = `${signupBaseUrl}?code=${encodeURIComponent(usableInvite.code)}`;
|
||||
await navigator.clipboard.writeText(url);
|
||||
setStatus(
|
||||
`Copied the link for ${invite.label || usableInvite.code}. Keep it safe; Magent will not display it again after this page reloads.`,
|
||||
);
|
||||
} catch {
|
||||
setError('Could not generate or copy the invite link.')
|
||||
setError("Could not generate or copy the invite link.");
|
||||
}
|
||||
}
|
||||
};
|
||||
|
||||
const codeCharacters = inviteForm.code.replace(/[^a-z0-9]/gi, '')
|
||||
const identityReady = Boolean(inviteForm.label.trim() && (!useCustomCode || codeCharacters.length >= 6))
|
||||
const canManageInvites = profile?.role === 'admin' || inviteAccessEnabled
|
||||
const createdInviteUrl = createdInvite ? `${signupBaseUrl}?code=${encodeURIComponent(createdInvite.code)}` : ''
|
||||
const codeCharacters = inviteForm.code.replace(/[^a-z0-9]/gi, "");
|
||||
const identityReady = Boolean(inviteForm.label.trim() && (!useCustomCode || codeCharacters.length >= 6));
|
||||
const canManageInvites = profile?.role === "admin" || inviteAccessEnabled;
|
||||
const createdInviteUrl = createdInvite ? `${signupBaseUrl}?code=${encodeURIComponent(createdInvite.code)}` : "";
|
||||
|
||||
if (loading) return <main className="card">Loading invite workspace…</main>
|
||||
if (loading) return <main className="card">Loading invite workspace…</main>;
|
||||
|
||||
return (
|
||||
<main className="card invites-page">
|
||||
@@ -253,65 +282,343 @@ export default function ProfileInvitesPage() {
|
||||
) : (
|
||||
<section className="profile-section profile-invites-section profile-tab-panel">
|
||||
<div className="invite-flow-heading">
|
||||
<div><span className="eyebrow">Invite flow</span><h2>{editingId == null ? 'Create an invite' : `Edit ${inviteForm.label || 'invite'}`}</h2><p className="lede">Set up the invite one decision at a time.</p></div>
|
||||
{editingId != null && <button type="button" className="ghost-button" onClick={resetFlow}>Cancel edit</button>}
|
||||
<div>
|
||||
<span className="eyebrow">Invite flow</span>
|
||||
<h2>{editingId == null ? "Create an invite" : `Edit ${inviteForm.label || "invite"}`}</h2>
|
||||
<p className="lede">Set up the invite one decision at a time.</p>
|
||||
</div>
|
||||
{editingId != null && (
|
||||
<button type="button" className="ghost-button" onClick={resetFlow}>
|
||||
Cancel edit
|
||||
</button>
|
||||
)}
|
||||
</div>
|
||||
|
||||
{createdInvite && editingId == null ? (
|
||||
<div className="invite-created-card" role="status">
|
||||
<span className="eyebrow">Invite ready</span><h3>{createdInvite.label || 'Your invite'}</h3>
|
||||
<p>{createdInvite.recipient_email ? `The invite was emailed to ${createdInvite.recipient_email}.` : 'Copy this link and send it to the person you are inviting.'}</p>
|
||||
<div className="invite-created-link"><input value={createdInviteUrl} readOnly aria-label="Created invite link" /><button type="button" onClick={() => void copyInviteLink(createdInvite)}>Copy link</button></div>
|
||||
<button type="button" className="ghost-button" onClick={() => { setCreatedInvite(null); resetFlow() }}>Create another invite</button>
|
||||
<span className="eyebrow">Invite ready</span>
|
||||
<h3>{createdInvite.label || "Your invite"}</h3>
|
||||
<p>
|
||||
{createdInvite.recipient_email
|
||||
? `The invite was emailed to ${createdInvite.recipient_email}.`
|
||||
: "Copy this link and send it to the person you are inviting."}
|
||||
</p>
|
||||
<div className="invite-created-link">
|
||||
<input value={createdInviteUrl} readOnly aria-label="Created invite link" />
|
||||
<button type="button" onClick={() => void copyInviteLink(createdInvite)}>
|
||||
Copy link
|
||||
</button>
|
||||
</div>
|
||||
<button
|
||||
type="button"
|
||||
className="ghost-button"
|
||||
onClick={() => {
|
||||
setCreatedInvite(null);
|
||||
resetFlow();
|
||||
}}
|
||||
>
|
||||
Create another invite
|
||||
</button>
|
||||
</div>
|
||||
) : (
|
||||
<form onSubmit={saveInvite} className="invite-flow-form">
|
||||
<ol className="invite-flow-route" aria-label="Invite creation progress">
|
||||
{['Identity', 'Description', 'Access', 'Delivery'].map((label, index) => {
|
||||
const step = index + 1
|
||||
return <li key={label} className={step === flowStep ? 'is-active' : step < flowStep ? 'is-complete' : ''}><span>{String(step).padStart(2, '0')}</span><strong>{label}</strong></li>
|
||||
{["Identity", "Description", "Access", "Delivery"].map((label, index) => {
|
||||
const step = index + 1;
|
||||
return (
|
||||
<li key={label} className={step === flowStep ? "is-active" : step < flowStep ? "is-complete" : ""}>
|
||||
<span>{String(step).padStart(2, "0")}</span>
|
||||
<strong>{label}</strong>
|
||||
</li>
|
||||
);
|
||||
})}
|
||||
</ol>
|
||||
|
||||
<section className={`invite-flow-step ${flowStep > 1 ? 'is-complete' : 'is-active'}`}>
|
||||
<header><span className="invite-flow-number">01</span><div><span className="eyebrow">Identity</span><h3>Who is this invite for?</h3><p>Give it a name that will make sense when you return later.</p></div></header>
|
||||
<section className={`invite-flow-step ${flowStep > 1 ? "is-complete" : "is-active"}`}>
|
||||
<header>
|
||||
<span className="invite-flow-number">01</span>
|
||||
<div>
|
||||
<span className="eyebrow">Identity</span>
|
||||
<h3>Who is this invite for?</h3>
|
||||
<p>Give it a name that will make sense when you return later.</p>
|
||||
</div>
|
||||
</header>
|
||||
<div className="invite-flow-fields">
|
||||
<label><span>Invite name</span><input value={inviteForm.label} onChange={(event) => setInviteForm((current) => ({ ...current, label: event.target.value }))} placeholder="Family, that guy from work, the neighbour" /></label>
|
||||
<label className="invite-flow-choice-line"><input type="checkbox" checked={useCustomCode} disabled={editingId != null} onChange={(event) => { setUseCustomCode(event.target.checked); if (!event.target.checked) setInviteForm((current) => ({ ...current, code: '' })) }} /><span><strong>Choose a custom invite code</strong><small>The code appears at the end of the sign-up link. Leave this off and Magent will create a secure code for you.</small></span></label>
|
||||
{useCustomCode && <label><span>Custom code</span><input value={inviteForm.code} disabled={editingId != null} onChange={(event) => setInviteForm((current) => ({ ...current, code: event.target.value }))} placeholder="At least 6 letters or numbers" /><small>This becomes <code>/signup?code={inviteForm.code || 'YOUR-CODE'}</code>.</small></label>}
|
||||
{flowStep === 1 && <div className="invite-flow-actions"><button type="button" disabled={!identityReady} onClick={() => setFlowStep(2)}>Continue to description</button></div>}
|
||||
<label>
|
||||
<span>Invite name</span>
|
||||
<input
|
||||
value={inviteForm.label}
|
||||
onChange={(event) => setInviteForm((current) => ({ ...current, label: event.target.value }))}
|
||||
placeholder="Family, that guy from work, the neighbour"
|
||||
/>
|
||||
</label>
|
||||
<label className="invite-flow-choice-line">
|
||||
<input
|
||||
type="checkbox"
|
||||
checked={useCustomCode}
|
||||
disabled={editingId != null}
|
||||
onChange={(event) => {
|
||||
setUseCustomCode(event.target.checked);
|
||||
if (!event.target.checked) setInviteForm((current) => ({ ...current, code: "" }));
|
||||
}}
|
||||
/>
|
||||
<span>
|
||||
<strong>Choose a custom invite code</strong>
|
||||
<small>
|
||||
The code appears at the end of the sign-up link. Leave this off and Magent will create a secure
|
||||
code for you.
|
||||
</small>
|
||||
</span>
|
||||
</label>
|
||||
{useCustomCode && (
|
||||
<label>
|
||||
<span>Custom code</span>
|
||||
<input
|
||||
value={inviteForm.code}
|
||||
disabled={editingId != null}
|
||||
onChange={(event) => setInviteForm((current) => ({ ...current, code: event.target.value }))}
|
||||
placeholder="At least 6 letters or numbers"
|
||||
/>
|
||||
<small>
|
||||
This becomes <code>/signup?code={inviteForm.code || "YOUR-CODE"}</code>.
|
||||
</small>
|
||||
</label>
|
||||
)}
|
||||
{flowStep === 1 && (
|
||||
<div className="invite-flow-actions">
|
||||
<button type="button" disabled={!identityReady} onClick={() => setFlowStep(2)}>
|
||||
Continue to description
|
||||
</button>
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
</section>
|
||||
|
||||
{flowStep >= 2 && <section className={`invite-flow-step ${flowStep > 2 ? 'is-complete' : 'is-active'}`}>
|
||||
<header><span className="invite-flow-number">02</span><div><span className="eyebrow">Description</span><h3>Add a welcome note</h3><p>This optional message is shown on the sign-up page.</p></div></header>
|
||||
<div className="invite-flow-fields"><label><span>Welcome note (optional)</span><textarea rows={3} value={inviteForm.description} onChange={(event) => setInviteForm((current) => ({ ...current, description: event.target.value }))} placeholder="Welcome to Grizzlyflix. Use this link to create your account." /></label>{flowStep === 2 && <div className="invite-flow-actions"><button type="button" className="ghost-button" onClick={() => setFlowStep(1)}>Back</button><button type="button" className="ghost-button" onClick={() => { setInviteForm((current) => ({ ...current, description: '' })); setFlowStep(3) }}>Skip</button><button type="button" onClick={() => setFlowStep(3)}>Continue</button></div>}</div>
|
||||
</section>}
|
||||
{flowStep >= 2 && (
|
||||
<section className={`invite-flow-step ${flowStep > 2 ? "is-complete" : "is-active"}`}>
|
||||
<header>
|
||||
<span className="invite-flow-number">02</span>
|
||||
<div>
|
||||
<span className="eyebrow">Description</span>
|
||||
<h3>Add a welcome note</h3>
|
||||
<p>This optional message is shown on the sign-up page.</p>
|
||||
</div>
|
||||
</header>
|
||||
<div className="invite-flow-fields">
|
||||
<label>
|
||||
<span>Welcome note (optional)</span>
|
||||
<textarea
|
||||
rows={3}
|
||||
value={inviteForm.description}
|
||||
onChange={(event) =>
|
||||
setInviteForm((current) => ({ ...current, description: event.target.value }))
|
||||
}
|
||||
placeholder="Welcome to Grizzlyflix. Use this link to create your account."
|
||||
/>
|
||||
</label>
|
||||
{flowStep === 2 && (
|
||||
<div className="invite-flow-actions">
|
||||
<button type="button" className="ghost-button" onClick={() => setFlowStep(1)}>
|
||||
Back
|
||||
</button>
|
||||
<button
|
||||
type="button"
|
||||
className="ghost-button"
|
||||
onClick={() => {
|
||||
setInviteForm((current) => ({ ...current, description: "" }));
|
||||
setFlowStep(3);
|
||||
}}
|
||||
>
|
||||
Skip
|
||||
</button>
|
||||
<button type="button" onClick={() => setFlowStep(3)}>
|
||||
Continue
|
||||
</button>
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
</section>
|
||||
)}
|
||||
|
||||
{flowStep >= 3 && <section className={`invite-flow-step ${flowStep > 3 ? 'is-complete' : 'is-active'}`}>
|
||||
<header><span className="invite-flow-number">03</span><div><span className="eyebrow">Access</span><h3>Account access is applied automatically</h3><p>Magent uses the safe invite policy configured by an administrator.</p></div></header>
|
||||
<div className="invite-flow-fields"><div className="invite-policy-note"><strong>Standard user access</strong><span>{inviteManagedByMaster && masterInvite ? `Using the “${masterInvite.label || masterInvite.code}” invite policy. Usage and expiry limits are automatic.` : 'This invite creates a standard user account using your configured defaults.'}</span></div>{flowStep === 3 && <div className="invite-flow-actions"><button type="button" className="ghost-button" onClick={() => setFlowStep(2)}>Back</button><button type="button" onClick={() => setFlowStep(4)}>Continue to delivery</button></div>}</div>
|
||||
</section>}
|
||||
{flowStep >= 3 && (
|
||||
<section className={`invite-flow-step ${flowStep > 3 ? "is-complete" : "is-active"}`}>
|
||||
<header>
|
||||
<span className="invite-flow-number">03</span>
|
||||
<div>
|
||||
<span className="eyebrow">Access</span>
|
||||
<h3>Account access is applied automatically</h3>
|
||||
<p>Magent uses the safe invite policy configured by an administrator.</p>
|
||||
</div>
|
||||
</header>
|
||||
<div className="invite-flow-fields">
|
||||
<div className="invite-policy-note">
|
||||
<strong>Standard user access</strong>
|
||||
<span>
|
||||
{inviteManagedByMaster && masterInvite
|
||||
? `Using the “${masterInvite.label || masterInvite.code}” invite policy. Usage and expiry limits are automatic.`
|
||||
: "This invite creates a standard user account using your configured defaults."}
|
||||
</span>
|
||||
</div>
|
||||
{flowStep === 3 && (
|
||||
<div className="invite-flow-actions">
|
||||
<button type="button" className="ghost-button" onClick={() => setFlowStep(2)}>
|
||||
Back
|
||||
</button>
|
||||
<button type="button" onClick={() => setFlowStep(4)}>
|
||||
Continue to delivery
|
||||
</button>
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
</section>
|
||||
)}
|
||||
|
||||
{flowStep >= 4 && <section className="invite-flow-step is-active">
|
||||
<header><span className="invite-flow-number">04</span><div><span className="eyebrow">Delivery</span><h3>How will they receive it?</h3><p>Copy the link yourself, or let Magent email it directly.</p></div></header>
|
||||
<div className="invite-flow-fields">
|
||||
<InviteDeliveryChoice value={deliveryMethod} onChange={(method) => { setDeliveryMethod(method); if (method === 'manual') setInviteForm((current) => ({ ...current, recipient_email: '', message: '' })) }} />
|
||||
{deliveryMethod === 'manual' && <div className="invite-delivery-summary"><strong>Your link will appear as soon as the invite is created.</strong><span>No email address is required and Magent will not send a message.</span></div>}
|
||||
{deliveryMethod === 'email' && <div className="invite-flow-field-grid invite-delivery-fields"><label><span>Recipient email</span><input type="email" value={inviteForm.recipient_email} onChange={(event) => setInviteForm((current) => ({ ...current, recipient_email: event.target.value }))} placeholder="person@example.com" /></label><label><span>Email note (optional)</span><textarea rows={3} value={inviteForm.message} onChange={(event) => setInviteForm((current) => ({ ...current, message: event.target.value }))} placeholder="A short personal message" /></label></div>}
|
||||
{editingId != null && <label className="invite-status-control"><input type="checkbox" checked={inviteForm.enabled} onChange={(event) => setInviteForm((current) => ({ ...current, enabled: event.target.checked }))} /><span><strong>{inviteForm.enabled ? 'Invite enabled' : 'Invite disabled'}</strong><small>Disable this existing invite to stop its link from accepting sign-ups.</small></span></label>}
|
||||
<div className="invite-flow-actions"><button type="button" className="ghost-button" onClick={() => setFlowStep(3)}>Back</button><button type="submit" disabled={saving || !deliveryMethod || (deliveryMethod === 'email' && !isValidEmail(inviteForm.recipient_email))}>{saving ? 'Saving…' : editingId != null ? 'Save invite' : deliveryMethod === 'email' ? 'Create and email invite' : 'Create invite link'}</button></div>
|
||||
</div>
|
||||
</section>}
|
||||
{flowStep >= 4 && (
|
||||
<section className="invite-flow-step is-active">
|
||||
<header>
|
||||
<span className="invite-flow-number">04</span>
|
||||
<div>
|
||||
<span className="eyebrow">Delivery</span>
|
||||
<h3>How will they receive it?</h3>
|
||||
<p>Copy the link yourself, or let Magent email it directly.</p>
|
||||
</div>
|
||||
</header>
|
||||
<div className="invite-flow-fields">
|
||||
<InviteDeliveryChoice
|
||||
value={deliveryMethod}
|
||||
onChange={(method) => {
|
||||
setDeliveryMethod(method);
|
||||
if (method === "manual")
|
||||
setInviteForm((current) => ({ ...current, recipient_email: "", message: "" }));
|
||||
}}
|
||||
/>
|
||||
{deliveryMethod === "manual" && (
|
||||
<div className="invite-delivery-summary">
|
||||
<strong>Your link will appear as soon as the invite is created.</strong>
|
||||
<span>No email address is required and Magent will not send a message.</span>
|
||||
</div>
|
||||
)}
|
||||
{deliveryMethod === "email" && (
|
||||
<div className="invite-flow-field-grid invite-delivery-fields">
|
||||
<label>
|
||||
<span>Recipient email</span>
|
||||
<input
|
||||
type="email"
|
||||
value={inviteForm.recipient_email}
|
||||
onChange={(event) =>
|
||||
setInviteForm((current) => ({ ...current, recipient_email: event.target.value }))
|
||||
}
|
||||
placeholder="person@example.com"
|
||||
/>
|
||||
</label>
|
||||
<label>
|
||||
<span>Email note (optional)</span>
|
||||
<textarea
|
||||
rows={3}
|
||||
value={inviteForm.message}
|
||||
onChange={(event) =>
|
||||
setInviteForm((current) => ({ ...current, message: event.target.value }))
|
||||
}
|
||||
placeholder="A short personal message"
|
||||
/>
|
||||
</label>
|
||||
</div>
|
||||
)}
|
||||
{editingId != null && (
|
||||
<label className="invite-status-control">
|
||||
<input
|
||||
type="checkbox"
|
||||
checked={inviteForm.enabled}
|
||||
onChange={(event) =>
|
||||
setInviteForm((current) => ({ ...current, enabled: event.target.checked }))
|
||||
}
|
||||
/>
|
||||
<span>
|
||||
<strong>{inviteForm.enabled ? "Invite enabled" : "Invite disabled"}</strong>
|
||||
<small>Disable this existing invite to stop its link from accepting sign-ups.</small>
|
||||
</span>
|
||||
</label>
|
||||
)}
|
||||
<div className="invite-flow-actions">
|
||||
<button type="button" className="ghost-button" onClick={() => setFlowStep(3)}>
|
||||
Back
|
||||
</button>
|
||||
<button
|
||||
type="submit"
|
||||
disabled={
|
||||
saving ||
|
||||
!deliveryMethod ||
|
||||
(deliveryMethod === "email" && !isValidEmail(inviteForm.recipient_email))
|
||||
}
|
||||
>
|
||||
{saving
|
||||
? "Saving…"
|
||||
: editingId != null
|
||||
? "Save invite"
|
||||
: deliveryMethod === "email"
|
||||
? "Create and email invite"
|
||||
: "Create invite link"}
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
</section>
|
||||
)}
|
||||
</form>
|
||||
)}
|
||||
|
||||
<div className="profile-invites-list">
|
||||
<div className="invite-flow-heading"><div><span className="eyebrow">Your invites</span><h2>Created invites</h2><p className="lede">Copy, edit, disable, or remove invitations you have made.</p></div></div>
|
||||
{invites.length === 0 ? <div className="status-banner">You have not created any invites yet.</div> : <div className="admin-list">{invites.map((invite) => <div key={invite.id} className="admin-list-item"><div className="admin-list-item-main"><div className="admin-list-item-title-row"><strong>{invite.label || 'Unnamed invite'}</strong><code className="invite-code">{invite.code}</code><span className={`small-pill ${invite.is_usable ? '' : 'is-muted'}`}>{invite.is_usable ? 'Ready' : 'Unavailable'}</span></div>{invite.description && <p className="admin-list-item-text admin-list-item-text--muted">{invite.description}</p>}<div className="admin-meta-row"><span>Delivery: {invite.recipient_email || 'Manual link'}</span><span>Uses: {invite.use_count}{typeof invite.max_uses === 'number' ? ` / ${invite.max_uses}` : ''}</span><span>Expires: {formatDate(invite.expires_at)}</span><span>Created: {formatDate(invite.created_at)}</span></div></div><div className="admin-inline-actions"><button type="button" className="ghost-button" onClick={() => void copyInviteLink(invite)}>{invite.code_available ? 'Copy link' : 'Generate replacement link'}</button><button type="button" className="ghost-button" onClick={() => editInvite(invite)}>Edit</button><button type="button" onClick={() => void deleteInvite(invite)}>Delete</button></div></div>)}</div>}
|
||||
<div className="invite-flow-heading">
|
||||
<div>
|
||||
<span className="eyebrow">Your invites</span>
|
||||
<h2>Created invites</h2>
|
||||
<p className="lede">Copy, edit, disable, or remove invitations you have made.</p>
|
||||
</div>
|
||||
</div>
|
||||
{invites.length === 0 ? (
|
||||
<div className="status-banner">You have not created any invites yet.</div>
|
||||
) : (
|
||||
<div className="admin-list">
|
||||
{invites.map((invite) => (
|
||||
<div key={invite.id} className="admin-list-item">
|
||||
<div className="admin-list-item-main">
|
||||
<div className="admin-list-item-title-row">
|
||||
<strong>{invite.label || "Unnamed invite"}</strong>
|
||||
<code className="invite-code">{invite.code}</code>
|
||||
<span className={`small-pill ${invite.is_usable ? "" : "is-muted"}`}>
|
||||
{invite.is_usable ? "Ready" : "Unavailable"}
|
||||
</span>
|
||||
</div>
|
||||
{invite.description && (
|
||||
<p className="admin-list-item-text admin-list-item-text--muted">{invite.description}</p>
|
||||
)}
|
||||
<div className="admin-meta-row">
|
||||
<span>Delivery: {invite.recipient_email || "Manual link"}</span>
|
||||
<span>
|
||||
Uses: {invite.use_count}
|
||||
{typeof invite.max_uses === "number" ? ` / ${invite.max_uses}` : ""}
|
||||
</span>
|
||||
<span>Expires: {formatDate(invite.expires_at)}</span>
|
||||
<span>Created: {formatDate(invite.created_at)}</span>
|
||||
</div>
|
||||
</div>
|
||||
<div className="admin-inline-actions">
|
||||
<button type="button" className="ghost-button" onClick={() => void copyInviteLink(invite)}>
|
||||
{invite.code_available ? "Copy link" : "Generate replacement link"}
|
||||
</button>
|
||||
<button type="button" className="ghost-button" onClick={() => editInvite(invite)}>
|
||||
Edit
|
||||
</button>
|
||||
<button type="button" onClick={() => void deleteInvite(invite)}>
|
||||
Delete
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
))}
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
</section>
|
||||
)}
|
||||
</main>
|
||||
)
|
||||
);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user