#20: implement F4 webmail, admin console, 2FA TOTP, surface isolation, and i18n

2026-08-02 08:39:00 -03:00
1 parent 43dcea1ade
commit 6e01fc7ffb
@@ -0,0 +1,135 @@
+"use client";
+
+import React, { useState } from "react";
+import Link from "next/link";
+
+export default function AdminLoginPage() {
+  const [email, setEmail] = useState("");
+  const [password, setPassword] = useState("");
+  const [mfaCode, setMfaCode] = useState("");
+  const [challengeToken, setChallengeToken] = useState<string | null>(null);
+  const [error, setError] = useState<string | null>(null);
+  const [loading, setLoading] = useState(false);
+
+  const handleLogin = async (e: React.FormEvent) => {
+    e.preventDefault();
+    setError(null);
+    setLoading(true);
+
+    try {
+      if (challengeToken) {
+        // Step 2: Mandatory Admin 2FA Code
+        const res = await fetch("/api/v1/auth/mfa/verify", {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ challenge_token: challengeToken, code: mfaCode }),
+        });
+        const data = await res.json();
+        if (!res.ok) throw new Error(data.message || "Admin verification failed");
+        window.location.href = "/admin/dashboard";
+        return;
+      }
+
+      // Step 1: Admin credentials
+      const res = await fetch("/api/v1/auth/admin/login", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ email, password }),
+      });
+      const data = await res.json();
+      if (!res.ok) throw new Error(data.message || "Admin authentication failed");
+
+      if (data.mfa_required) {
+        setChallengeToken(data.challenge_token);
+      } else {
+        window.location.href = "/admin/dashboard";
+      }
+    } catch (err: unknown) {
+      setError(err instanceof Error ? err.message : "An error occurred");
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  return (
+    <div className="min-h-screen flex items-center justify-center px-4 bg-slate-950">
+      <div className="glass-panel p-8 rounded-2xl max-w-md w-full border border-emerald-900/40 shadow-2xl">
+        <div className="flex items-center gap-3 mb-6">
+          <div className="w-10 h-10 rounded-xl bg-emerald-600/20 border border-emerald-500/30 flex items-center justify-center text-emerald-400 font-bold text-xl">
+            &#9881;
+          </div>
+          <div>
+            <h1 className="text-xl font-bold text-white">Management Console</h1>
+            <p className="text-xs text-slate-400">Surface: /admin/* (Cookie: Path=/admin, MFA Mandatory)</p>
+          </div>
+        </div>
+
+        {error && (
+          <div className="mb-4 p-3 rounded-lg bg-red-500/10 border border-red-500/30 text-red-400 text-sm">
+            {error}
+          </div>
+        )}
+
+        <form onSubmit={handleLogin} className="space-y-4">
+          {!challengeToken ? (
+            <>
+              <div>
+                <label className="block text-xs font-medium text-slate-300 mb-1">Administrator Email</label>
+                <input
+                  type="email"
+                  value={email}
+                  onChange={(e) => setEmail(e.target.value)}
+                  placeholder="admin@domain.com"
+                  required
+                  className="w-full px-4 py-2.5 rounded-lg bg-slate-900 border border-slate-800 text-white placeholder-slate-500 focus:outline-none focus:border-emerald-500 transition-colors"
+                />
+              </div>
+
+              <div>
+                <label className="block text-xs font-medium text-slate-300 mb-1">Password</label>
+                <input
+                  type="password"
+                  value={password}
+                  onChange={(e) => setPassword(e.target.value)}
+                  placeholder="••••••••••••"
+                  required
+                  className="w-full px-4 py-2.5 rounded-lg bg-slate-900 border border-slate-800 text-white placeholder-slate-500 focus:outline-none focus:border-emerald-500 transition-colors"
+                />
+              </div>
+            </>
+          ) : (
+            <div>
+              <div className="p-3 mb-4 rounded-lg bg-emerald-500/10 border border-emerald-500/30 text-emerald-300 text-xs">
+                Mandatory Admin 2FA Requirement (PLAN.md ADR-008). Enter your 6-digit TOTP code.
+              </div>
+              <label className="block text-xs font-medium text-slate-300 mb-1">Admin 2FA Code (6 Digits)</label>
+              <input
+                type="text"
+                value={mfaCode}
+                onChange={(e) => setMfaCode(e.target.value)}
+                placeholder="123456"
+                maxLength={6}
+                required
+                className="w-full px-4 py-2.5 rounded-lg bg-slate-900 border border-slate-800 text-white text-center tracking-widest text-lg font-mono focus:outline-none focus:border-emerald-500 transition-colors"
+              />
+            </div>
+          )}
+
+          <button
+            type="submit"
+            disabled={loading}
+            className="w-full py-3 rounded-xl bg-emerald-600 hover:bg-emerald-500 text-white font-medium transition-colors shadow-lg shadow-emerald-600/20 disabled:opacity-50"
+          >
+            {loading ? "Verifying Admin Credentials..." : challengeToken ? "Verify Admin 2FA" : "Sign In to Admin Console"}
+          </button>
+        </form>
+
+        <div className="mt-6 pt-4 border-t border-slate-800 text-center">
+          <Link href="/" className="text-xs text-slate-400 hover:text-slate-200 transition-colors">
+            &larr; Back to Surface Selector
+          </Link>
+        </div>
+      </div>
+    </div>
+  );
+}