Signing in showed the "Welcome back!" toast but never left /login. The session cookie was host-only on the API subdomain, so the Next middleware guard on the site origin saw no cookie and bounced /dashboard straight back to /login?redirect=/dashboard. - Add AUTH_COOKIE_DOMAIN, wiring Better Auth's crossSubDomainCookies so the cookie also reaches the site origin. Unset in dev, where localhost is single-host and must stay host-only. - Navigate after authentication with a full page load, via a shared authRedirect helper: only a top-level request carries the httpOnly cookie. Used by the login, register, magic-link and Google flows. - Show "Redirecting..." on the login and register pages and keep the submit button disabled until the browser replaces the page, instead of re-enabling it mid-navigation. - Guard against a redirect loop with a sessionStorage marker. A React ref cannot do this: the full page load resets component state. If the destination bounces back, explain it rather than navigating again. - Middleware: accept any *.session_token cookie so a cookiePrefix change cannot lock everyone out, and preserve the destination's query string. - Trust any loopback port in dev, so reaching the dev server through a forwarded port does not fail Better Auth's CSRF origin check. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
92 lines
2.7 KiB
TypeScript
92 lines
2.7 KiB
TypeScript
'use client';
|
|
|
|
import { ButtonHTMLAttributes, forwardRef } from 'react';
|
|
import clsx from 'clsx';
|
|
|
|
interface ButtonProps extends ButtonHTMLAttributes<HTMLButtonElement> {
|
|
variant?: 'primary' | 'secondary' | 'outline' | 'ghost' | 'danger';
|
|
size?: 'sm' | 'md' | 'lg';
|
|
isLoading?: boolean;
|
|
/** Label shown in place of the children while loading. */
|
|
loadingText?: string;
|
|
}
|
|
|
|
const Button = forwardRef<HTMLButtonElement, ButtonProps>(
|
|
(
|
|
{
|
|
className,
|
|
variant = 'primary',
|
|
size = 'md',
|
|
isLoading,
|
|
loadingText = 'Loading...',
|
|
children,
|
|
disabled,
|
|
...props
|
|
},
|
|
ref
|
|
) => {
|
|
return (
|
|
<button
|
|
ref={ref}
|
|
disabled={disabled || isLoading}
|
|
className={clsx(
|
|
'inline-flex items-center justify-center font-medium transition-all duration-200 rounded-btn focus:outline-none focus:ring-2 focus:ring-offset-2',
|
|
{
|
|
// Variants
|
|
'bg-primary-yellow text-primary-dark hover:bg-yellow-400 focus:ring-yellow-400':
|
|
variant === 'primary',
|
|
'bg-primary-dark text-white hover:bg-gray-800 focus:ring-gray-800':
|
|
variant === 'secondary',
|
|
'border-2 border-primary-dark text-primary-dark bg-transparent hover:bg-gray-50 focus:ring-gray-400':
|
|
variant === 'outline',
|
|
'text-primary-dark hover:bg-gray-100 focus:ring-gray-300':
|
|
variant === 'ghost',
|
|
'bg-red-600 text-white hover:bg-red-700 focus:ring-red-500':
|
|
variant === 'danger',
|
|
// Sizes
|
|
'text-sm px-3 py-1.5': size === 'sm',
|
|
'text-base px-5 py-2.5': size === 'md',
|
|
'text-lg px-7 py-3': size === 'lg',
|
|
// States
|
|
'opacity-50 cursor-not-allowed': disabled || isLoading,
|
|
},
|
|
className
|
|
)}
|
|
{...props}
|
|
>
|
|
{isLoading ? (
|
|
<>
|
|
<svg
|
|
className="animate-spin -ml-1 mr-2 h-4 w-4"
|
|
xmlns="http://www.w3.org/2000/svg"
|
|
fill="none"
|
|
viewBox="0 0 24 24"
|
|
>
|
|
<circle
|
|
className="opacity-25"
|
|
cx="12"
|
|
cy="12"
|
|
r="10"
|
|
stroke="currentColor"
|
|
strokeWidth="4"
|
|
/>
|
|
<path
|
|
className="opacity-75"
|
|
fill="currentColor"
|
|
d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z"
|
|
/>
|
|
</svg>
|
|
{loadingText}
|
|
</>
|
|
) : (
|
|
children
|
|
)}
|
|
</button>
|
|
);
|
|
}
|
|
);
|
|
|
|
Button.displayName = 'Button';
|
|
|
|
export default Button;
|