L'admin etait une 2e app front Vite independante (apps/admin-web, port 5174,
Dockerfile nginx, service compose dedie, job CI propre) non demandee. Toute
l'UI passe dans apps/web sous le prefixe /admin ; seul le frontend est
fusionne, l'authentification admin reste entierement separee.
Front (apps/web/src) :
- pages -> pages/admin/{login,dashboard,monitoring,corrections,catalog}/,
layout -> layouts/AdminLayout.tsx, contexte + garde -> features/admin/.
- client API -> api/admin-client.ts : classe AdminApiError (evite la
collision avec ApiError), lit VITE_API_URL (plus de VITE_ADMIN_API_URL).
- routes /admin/* dans App.tsx, enveloppees d'AdminAuthProvider +
RequireAdmin -> le probe GET /admin/auth/me ne tourne que sous /admin.
- reutilise l'i18n, lib/zod-errors, services/error-message.service et le
theme SCSS de apps/web ; bloc i18n admin.* fusionne dans la locale fr
(les cles errors etaient deja toutes presentes).
- corrige une race dans CatalogPage (reponse d'un onglet precedent qui
ecrasait l'onglet courant, exposee par le double-mount StrictMode) via
un ref requestSeq.
Auth admin inchangee : table AdminUser, cookie admin_session,
ADMIN_JWT_SECRET, script create-admin.ts.
Infra :
- docker-compose : service admin-web + ADMIN_WEB_PORT supprimes (l'app
`app` sert deja le front construit).
- ADMIN_CORS_ORIGIN retire (meme origine) : env.ts, app.ts, .env.example.
- job CI "Run admin-web E2E tests" supprime ; les specs admin-* tournent
dans le job web (apps/web/cypress/e2e/admin-*.{cy.ts,feature}).
- apps/api/.env.example : ajout ADMIN_JWT_SECRET / ADMIN_INITIAL_*.
- recharts ajoute a apps/web ; pnpm-lock regenere.
- specs/backend-architecture.md : section admin mise a jour.
Verifie : biome + tsc -b (web/api) + pnpm -r build verts ; Cypress web
102/103 (l'unique echec est le flake pre-existant recipe-form.feature
"Preloads ..." de clipping headless, sans rapport) ; 16/16 specs admin ;
45/45 composants.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
85 lines
3 KiB
TypeScript
85 lines
3 KiB
TypeScript
import { adminLoginSchema, ErrorCode } from "@batch-cooking/shared";
|
|
import { type FormEvent, useState } from "react";
|
|
import { useTranslation } from "react-i18next";
|
|
import { useNavigate } from "react-router-dom";
|
|
import { AdminApiError } from "../../../api/admin-client";
|
|
import { useAdminAuth } from "../../../features/admin/AdminAuthContext";
|
|
import "../../../features/admin/admin-auth.scss";
|
|
import { fieldErrorsFrom } from "../../../lib/zod-errors";
|
|
import { errorMessageService } from "../../../services/error-message.service";
|
|
|
|
/**
|
|
* The admin login screen — the only unauthenticated route under `/admin`.
|
|
* Client-side validation via the shared `adminLoginSchema` (same rules the
|
|
* API enforces), then `POST /admin/auth/login`; any API failure is
|
|
* translated to a localized label via {@link ErrorMessageService}. Same
|
|
* structure as the user-facing `LoginPage` (`pages/auth/`).
|
|
*/
|
|
export function AdminLoginPage() {
|
|
const { login } = useAdminAuth();
|
|
const navigate = useNavigate();
|
|
const { t } = useTranslation();
|
|
|
|
const [email, setEmail] = useState("");
|
|
const [password, setPassword] = useState("");
|
|
const [fieldErrors, setFieldErrors] = useState<Record<string, string>>({});
|
|
const [formError, setFormError] = useState<string | null>(null);
|
|
const [isSubmitting, setIsSubmitting] = useState(false);
|
|
|
|
async function handleSubmit(e: FormEvent) {
|
|
e.preventDefault();
|
|
setFormError(null);
|
|
|
|
const result = adminLoginSchema.safeParse({ email, password });
|
|
if (!result.success) {
|
|
setFieldErrors(fieldErrorsFrom(result.error));
|
|
return;
|
|
}
|
|
setFieldErrors({});
|
|
|
|
setIsSubmitting(true);
|
|
try {
|
|
await login(result.data);
|
|
void navigate("/admin");
|
|
} catch (err) {
|
|
const code = err instanceof AdminApiError ? err.code : ErrorCode.INTERNAL_ERROR;
|
|
setFormError(errorMessageService.getLabel(code));
|
|
} finally {
|
|
setIsSubmitting(false);
|
|
}
|
|
}
|
|
|
|
return (
|
|
<main className="admin-auth-page">
|
|
<form className="admin-auth-card" onSubmit={handleSubmit} noValidate>
|
|
<h1>{t("admin.login.title")}</h1>
|
|
|
|
<label htmlFor="email">{t("admin.login.emailLabel")}</label>
|
|
<input
|
|
id="email"
|
|
type="email"
|
|
value={email}
|
|
onChange={(e) => setEmail(e.target.value)}
|
|
autoComplete="email"
|
|
/>
|
|
{fieldErrors.email && <p className="field-error">{fieldErrors.email}</p>}
|
|
|
|
<label htmlFor="password">{t("admin.login.passwordLabel")}</label>
|
|
<input
|
|
id="password"
|
|
type="password"
|
|
value={password}
|
|
onChange={(e) => setPassword(e.target.value)}
|
|
autoComplete="current-password"
|
|
/>
|
|
{fieldErrors.password && <p className="field-error">{fieldErrors.password}</p>}
|
|
|
|
{formError && <p className="form-error">{formError}</p>}
|
|
|
|
<button type="submit" disabled={isSubmitting}>
|
|
{isSubmitting ? t("admin.login.submitting") : t("admin.login.submit")}
|
|
</button>
|
|
</form>
|
|
</main>
|
|
);
|
|
}
|