Customer email links (magic links)

import { redirect } from "next/navigation";
import { setupOpencals, AuthService } from "@opencals/storefront-sdk";

// Ensure SDK is initialized (your server config should call setupOpencals once at startup)
setupOpencals();

export default async function MagicLinkPage({ params }: { params: { token: string } }) {
  try {
    // Resolve the token: validates it, signs the customer in, and returns redirect info
    const { data: response } = await AuthService.resolveLink({
      query: { token: params.token }
    });

    if (!response) {
      return <div>Invalid or expired link</div>;
    }

    const { redirectPath, accessToken, refreshToken, requiresAction } = response;

    // If tokens are provided, save them for future requests
    if (accessToken && refreshToken) {
      // Option 1: Store in an httpOnly cookie (recommended)
      // You can set this via a server action or route handler
      
      // Option 2: Redirect to a handler that stores tokens and redirects
      // This avoids passing tokens in the URL
    }

    // Redirect the customer to their action
    redirect(redirectPath || "/account");

  } catch (error) {
    return <div>This link has expired or is invalid</div>;
  }
}

import { cookies } from "next/headers";
import { setupOpencals, AuthService } from "@opencals/storefront-sdk";

setupOpencals();

export async function GET(req: Request) {
  const { searchParams } = new URL(req.url);
  const token = searchParams.get("token");

  if (!token) {
    return new Response("Missing token", { status: 400 });
  }

  try {
    const { data: response } = await AuthService.resolveLink({
      query: { token }
    });

    if (response?.accessToken) {
      const cookieStore = await cookies();
      cookieStore.set("accessToken", response.accessToken, {
        httpOnly: true,
        secure: true,
        sameSite: "lax",
        maxAge: 3600, // 1 hour
      });
      if (response.refreshToken) {
        cookieStore.set("refreshToken", response.refreshToken, {
          httpOnly: true,
          secure: true,
          sameSite: "lax",
          maxAge: 604800, // 7 days
        });
      }
    }

    return Response.redirect(response?.redirectPath || "/account");

  } catch (error) {
    console.error("Link resolution failed:", error);
    return new Response("Invalid or expired link", { status: 400 });
  }
}

"use client";

import { useState } from "react";
import { useSearchParams } from "next/navigation";
import { AuthService } from "@opencals/storefront-sdk";

export default function ResetPasswordPage() {
  const searchParams = useSearchParams();
  const token = searchParams.get("token");
  const [password, setPassword] = useState("");
  const [error, setError] = useState<string | null>(null);
  const [loading, setLoading] = useState(false);

  if (!token) {
    return <div>Invalid reset link</div>;
  }

  const handleSubmit = async (e: React.FormEvent) => {
    e.preventDefault();
    setLoading(true);
    setError(null);

    try {
      // Call the API with the token from the URL
      await AuthService.resetPassword({
        body: { token, newPassword: password }
      });

      // Password reset successful — redirect to sign-in
      window.location.href = "/auth/sign-in?success=Password%20reset%20successful";
    } catch (err: any) {
      setError(err.message || "Failed to reset password");
    } finally {
      setLoading(false);
    }
  };

  return (
    <form onSubmit={handleSubmit}>
      <input
        type="password"
        value={password}
        onChange={(e) => setPassword(e.target.value)}
        placeholder="New password"
        required
      />
      {error && <div className="error">{error}</div>}
      <button type="submit" disabled={loading}>
        {loading ? "Resetting..." : "Reset Password"}
      </button>
    </form>
  );
}