certificates — gitlawb

repository

loading code, commits, and activity

repositories

loading repo index

#1	import {
#2	createContext,
#3	useContext,
#4	useEffect,
#5	useState,
#6	type ReactNode,
#7	} from "react";
#8	import {
#9	onAuthStateChanged,
#10	signInWithEmailAndPassword,
#11	createUserWithEmailAndPassword,
#12	signOut,
#13	type User,
#14	} from "firebase/auth";
#15	import { auth } from "../firebase";
#16
#17	// ─── Admin allowlist ───────────────────────────────────────────────
#18	// Add allowed admin emails here. When this list has entries, only
#19	// these emails can create accounts. Leave empty to allow all (not
#20	// recommended for production).
#21	const ALLOWED_ADMIN_EMAILS: string[] = [
#22	// "admin@example.com",
#23	// "manager@example.com",
#24	"apizohafeez@gmail.com",
#25	];
#26
#27	const RECAPTCHA_SITE_KEY = "6Lda3PgsAAAAAK7I13P0tmyamzwjjM5xjfyQ7Frr";
#28	const RECAPTCHA_ASSESSMENT_URL = import.meta.env.VITE_RECAPTCHA_ASSESSMENT_URL ?? "";
#29	const RECAPTCHA_MIN_SCORE = 0.5;
#30
#31	declare global {
#32	interface Window {
#33	grecaptcha?: {
#34	enterprise: {
#35	ready: (cb: () => void) => void;
#36	execute: (siteKey: string, options: { action: string }) => Promise<string>;
#37	};
#38	};
#39	}
#40	}
#41
#42	async function getRecaptchaToken(action: string): Promise<string \| null> {
#43	try {
#44	if (!window.grecaptcha?.enterprise) return null;
#45	return await new Promise<string>((resolve, reject) => {
#46	window.grecaptcha!.enterprise.ready(async () => {
#47	try {
#48	const token = await window.grecaptcha!.enterprise.execute(RECAPTCHA_SITE_KEY, { action });
#49	resolve(token);
#50	} catch (err) {
#51	reject(err);
#52	}
#53	});
#54	});
#55	} catch {
#56	return null;
#57	}
#58	}
#59
#60	async function verifyRecaptcha(token: string, action: string): Promise<void> {
#61	if (!RECAPTCHA_ASSESSMENT_URL) {
#62	console.warn("[recaptcha] VITE_RECAPTCHA_ASSESSMENT_URL not set — skipping backend verification");
#63	return;
#64	}
#65
#66	const res = await fetch(RECAPTCHA_ASSESSMENT_URL, {
#67	method: "POST",
#68	headers: { "Content-Type": "application/json" },
#69	body: JSON.stringify({
#70	event: {
#71	token,
#72	expectedAction: action,
#73	siteKey: RECAPTCHA_SITE_KEY,
#74	},
#75	}),
#76	});
#77
#78	if (!res.ok) {
#79	throw new Error("reCAPTCHA verification request failed. Please try again.");
#80	}
#81
#82	const data = await res.json();
#83	const score = data?.riskAnalysis?.score ?? 0;
#84	if (score < RECAPTCHA_MIN_SCORE) {
#85	throw new Error("reCAPTCHA verification failed. Please try again or contact support.");
#86	}
#87	}
#88
#89	interface AuthContextType {
#90	user: User \| null;
#91	loading: boolean;
#92	login: (email: string, password: string) => Promise<void>;
#93	signup: (email: string, password: string) => Promise<void>;
#94	logout: () => Promise<void>;
#95	}
#96
#97	const AuthContext = createContext<AuthContextType \| null>(null);
#98
#99	export function AuthProvider({ children }: { children: ReactNode }) {
#100	const [user, setUser] = useState<User \| null>(null);
#101	const [loading, setLoading] = useState(true);
#102
#103	useEffect(() => {
#104	const unsub = onAuthStateChanged(auth, (u) => {
#105	setUser(u);
#106	setLoading(false);
#107	});
#108	return unsub;
#109	}, []);
#110
#111	const login = async (email: string, password: string) => {
#112	const token = await getRecaptchaToken("login");
#113	if (token) await verifyRecaptcha(token, "login");
#114	await signInWithEmailAndPassword(auth, email, password);
#115	};
#116
#117	const signup = async (email: string, password: string) => {
#118	const token = await getRecaptchaToken("signup");
#119	if (token) await verifyRecaptcha(token, "signup");
#120	const normalizedEmail = email.trim().toLowerCase();
#121	if (ALLOWED_ADMIN_EMAILS.length > 0) {
#122	const allowed = ALLOWED_ADMIN_EMAILS.some(
#123	(e) => e.toLowerCase() === normalizedEmail
#124	);
#125	if (!allowed) {
#126	throw new Error(
#127	"This email is not authorized. Contact the platform administrator for access."
#128	);
#129	}
#130	}
#131	await createUserWithEmailAndPassword(auth, email, password);
#132	};
#133
#134	const logout = async () => {
#135	await signOut(auth);
#136	};
#137
#138	return (
#139	<AuthContext.Provider value={{ user, loading, login, signup, logout }}>
#140	{children}
#141	</AuthContext.Provider>
#142	);
#143	}
#144
#145	export function useAuth() {
#146	const ctx = useContext(AuthContext);
#147	if (!ctx) throw new Error("useAuth must be used within AuthProvider");
#148	return ctx;
#149	}
#150

z6Mkqhmm/certificates