feat(auth): email-based login and setup flows

Login page now requires email + password. Setup page adds email and
optional display name fields. API endpoints updated to pass email
to verifyPassword/setupUser and explicit userId to createSession.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Frederic Cabassut
2026-03-09 01:10:37 +01:00
committed by Fred Cabassut
co-authored by Claude Opus 4.6
parent 59b5e92d91
commit 4dea359362
4 changed files with 63 additions and 19 deletions
+8 -4
View File
@@ -8,18 +8,22 @@ export const POST: RequestHandler = async ({ request, cookies }) => {
throw error(400, 'Setup already completed');
}
const { password } = await request.json();
const { email, displayName, password } = await request.json();
if (!email) {
throw error(400, 'Email is required');
}
if (!password || password.length < 8) {
throw error(400, 'Password must be at least 8 characters');
}
const success = await setupUser(password);
if (!success) {
const user = await setupUser(email, password, displayName);
if (!user) {
throw error(500, 'Failed to create user');
}
const token = await createSession();
const token = await createSession(user.id);
cookies.set('session', token, {
path: '/',
httpOnly: true,