94 lines
2.4 KiB
TypeScript
94 lines
2.4 KiB
TypeScript
/**
|
|
* EncryptID Auth Store for rfunds-online
|
|
*
|
|
* Provides passkey-based identity for space creation and editing.
|
|
* Uses Zustand with localStorage persistence, delegates WebAuthn ceremony to @encryptid/sdk.
|
|
*/
|
|
|
|
import { create } from 'zustand'
|
|
import { persist } from 'zustand/middleware'
|
|
import { EncryptIDClient } from '@encryptid/sdk/client'
|
|
|
|
const ENCRYPTID_SERVER = process.env.NEXT_PUBLIC_ENCRYPTID_SERVER_URL || 'https://auth.ridentity.online'
|
|
const client = new EncryptIDClient(ENCRYPTID_SERVER)
|
|
|
|
interface AuthState {
|
|
isAuthenticated: boolean
|
|
token: string | null
|
|
did: string | null
|
|
username: string | null
|
|
loading: boolean
|
|
|
|
login: () => Promise<void>
|
|
register: (username: string) => Promise<void>
|
|
logout: () => void
|
|
}
|
|
|
|
export const useAuthStore = create<AuthState>()(
|
|
persist(
|
|
(set) => ({
|
|
isAuthenticated: false,
|
|
token: null,
|
|
did: null,
|
|
username: null,
|
|
loading: false,
|
|
|
|
login: async () => {
|
|
set({ loading: true })
|
|
try {
|
|
const result = await client.authenticate()
|
|
document.cookie = `encryptid_token=${result.token};path=/;max-age=900;SameSite=Lax`
|
|
set({
|
|
isAuthenticated: true,
|
|
token: result.token,
|
|
did: result.did,
|
|
username: result.username,
|
|
loading: false,
|
|
})
|
|
} catch (error) {
|
|
set({ loading: false })
|
|
throw error
|
|
}
|
|
},
|
|
|
|
register: async (username: string) => {
|
|
set({ loading: true })
|
|
try {
|
|
const result = await client.register(username)
|
|
document.cookie = `encryptid_token=${result.token};path=/;max-age=900;SameSite=Lax`
|
|
set({
|
|
isAuthenticated: true,
|
|
token: result.token,
|
|
did: result.did,
|
|
username,
|
|
loading: false,
|
|
})
|
|
} catch (error) {
|
|
set({ loading: false })
|
|
throw error
|
|
}
|
|
},
|
|
|
|
logout: () => {
|
|
document.cookie = 'encryptid_token=;path=/;max-age=0;SameSite=Lax'
|
|
set({
|
|
isAuthenticated: false,
|
|
token: null,
|
|
did: null,
|
|
username: null,
|
|
loading: false,
|
|
})
|
|
},
|
|
}),
|
|
{
|
|
name: 'rfunds-auth',
|
|
partialize: (state) => ({
|
|
isAuthenticated: state.isAuthenticated,
|
|
token: state.token,
|
|
did: state.did,
|
|
username: state.username,
|
|
}),
|
|
}
|
|
)
|
|
)
|