feat(02-01): extend proxy.ts with admin session guard, add login page

- Extend src/proxy.ts to guard /admin/* routes with getToken() JWT check - /admin/login and /api/auth/* exempted from session guard (pass-through) - Unauthenticated /admin/* requests redirect to /admin/login?callbackUrl=... - /c/:path* client token validation logic preserved unchanged - matcher updated: ["/admin/:path*", "/c/:path*"] - Create src/app/admin/login/page.tsx: email+password form, signIn('credentials'), error on failure, redirect on success - Fix: Next.js 16 requires export named 'proxy' not 'middleware' - Fix: useSearchParams wrapped in Suspense boundary (Next.js App Router requirement)
2026-05-15 10:42:21 +02:00
parent 5d363a633d
commit 69f8a7eae3
2 changed files with 141 additions and 22 deletions
@@ -0,0 +1,90 @@
+"use client";
+
+import { Suspense, useState } from "react";
+import { signIn } from "next-auth/react";
+import { useRouter, useSearchParams } from "next/navigation";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+
+function AdminLoginForm() {
+  const router = useRouter();
+  const searchParams = useSearchParams();
+  const callbackUrl = searchParams.get("callbackUrl") ?? "/admin";
+
+  const [email, setEmail] = useState("");
+  const [password, setPassword] = useState("");
+  const [error, setError] = useState<string | null>(null);
+  const [loading, setLoading] = useState(false);
+
+  async function handleSubmit(e: React.FormEvent) {
+    e.preventDefault();
+    setLoading(true);
+    setError(null);
+
+    const result = await signIn("credentials", {
+      email,
+      password,
+      redirect: false, // handle redirect manually to show errors
+    });
+
+    if (result?.error) {
+      setError("Email o password non corretti.");
+      setLoading(false);
+      return;
+    }
+
+    router.replace(callbackUrl);
+  }
+
+  return (
+    <form onSubmit={handleSubmit} className="space-y-4">
+      <div className="space-y-1">
+        <Label htmlFor="email">Email</Label>
+        <Input
+          id="email"
+          type="email"
+          value={email}
+          onChange={(e) => setEmail(e.target.value)}
+          required
+          autoComplete="email"
+        />
+      </div>
+      <div className="space-y-1">
+        <Label htmlFor="password">Password</Label>
+        <Input
+          id="password"
+          type="password"
+          value={password}
+          onChange={(e) => setPassword(e.target.value)}
+          required
+          autoComplete="current-password"
+        />
+      </div>
+      {error && (
+        <p className="text-sm text-red-600">{error}</p>
+      )}
+      <Button type="submit" className="w-full" disabled={loading}>
+        {loading ? "Accesso in corso..." : "Accedi"}
+      </Button>
+    </form>
+  );
+}
+
+export default function AdminLoginPage() {
+  return (
+    <div className="min-h-screen flex items-center justify-center bg-gray-50">
+      <Card className="w-full max-w-sm">
+        <CardHeader>
+          <CardTitle className="text-xl">Admin — ClientHub</CardTitle>
+        </CardHeader>
+        <CardContent>
+          <Suspense fallback={<div className="text-sm text-gray-500">Caricamento...</div>}>
+            <AdminLoginForm />
+          </Suspense>
+        </CardContent>
+      </Card>
+    </div>
+  );
+}