feat: secure KYC storage, Google OAuth, terms gating

2026-04-28 23:10:21 +07:00
parent 58da4608ac
commit 05d0929f7a
41 changed files with 3087 additions and 262 deletions
@@ -0,0 +1,89 @@
+"use client";
+
+import { useState } from "react";
+import Link from "next/link";
+import { useRouter } from "next/navigation";
+import { signOut, useSession } from "next-auth/react";
+import { acceptTermsAction } from "@/features/auth/actions";
+
+export function AcceptTermsForm() {
+  const router = useRouter();
+  const { update } = useSession();
+  const [checked, setChecked] = useState(false);
+  const [error, setError] = useState("");
+  const [loading, setLoading] = useState(false);
+
+  async function handleAccept() {
+    setError("");
+    setLoading(true);
+    const result = await acceptTermsAction();
+    if (result.error) {
+      setError(result.error);
+      setLoading(false);
+      return;
+    }
+    // Refresh JWT supaya middleware lihat acceptedTermsAndPrivacy=true
+    await update();
+    router.replace("/");
+    router.refresh();
+  }
+
+  return (
+    <div className="mt-6 rounded-2xl border border-neutral-200 bg-white p-6 shadow-sm">
+      {error && (
+        <div className="mb-4 rounded-xl bg-red-50 px-4 py-3 text-sm font-medium text-red-600">
+          {error}
+        </div>
+      )}
+
+      <label className="flex items-start gap-2.5 text-sm text-neutral-700">
+        <input
+          type="checkbox"
+          checked={checked}
+          onChange={(e) => setChecked(e.target.checked)}
+          className="mt-0.5 h-4 w-4 shrink-0 rounded border-neutral-300 text-primary-600 focus:ring-primary-500"
+        />
+        <span>
+          Saya telah membaca dan menyetujui{" "}
+          <Link
+            href="/terms"
+            target="_blank"
+            rel="noopener noreferrer"
+            className="font-semibold text-primary-600 hover:text-primary-700"
+          >
+            Syarat &amp; Ketentuan
+          </Link>{" "}
+          dan{" "}
+          <Link
+            href="/privacy"
+            target="_blank"
+            rel="noopener noreferrer"
+            className="font-semibold text-primary-600 hover:text-primary-700"
+          >
+            Kebijakan Privasi
+          </Link>{" "}
+          SeTrip.
+        </span>
+      </label>
+
+      <div className="mt-5 flex flex-col gap-2 sm:flex-row">
+        <button
+          type="button"
+          onClick={handleAccept}
+          disabled={!checked || loading}
+          className="flex-1 rounded-xl bg-primary-600 py-2.5 text-sm font-bold text-white shadow-lg shadow-primary-600/20 transition-colors hover:bg-primary-700 disabled:opacity-50"
+        >
+          {loading ? "Memproses..." : "Setuju & Lanjutkan"}
+        </button>
+        <button
+          type="button"
+          onClick={() => signOut({ callbackUrl: "/login" })}
+          disabled={loading}
+          className="rounded-xl border border-neutral-200 bg-white px-4 py-2.5 text-sm font-medium text-neutral-600 hover:bg-neutral-50 disabled:opacity-50"
+        >
+          Keluar
+        </button>
+      </div>
+    </div>
+  );
+}
@@ -0,0 +1,27 @@
+import { redirect } from "next/navigation";
+import { getServerSession } from "next-auth";
+import { authOptions } from "@/lib/auth";
+import { userRepo } from "@/server/repositories/user.repo";
+import { AcceptTermsForm } from "./form";
+
+export default async function AcceptTermsPage() {
+  const session = await getServerSession(authOptions);
+  if (!session?.user) redirect("/login?callbackUrl=/accept-terms");
+
+  // Source of truth = DB (token bisa stale).
+  const user = await userRepo.findById(session.user.id);
+  if (user?.acceptedTermsAndPrivacy) redirect("/");
+
+  return (
+    <div className="mx-auto max-w-xl px-4 py-10 sm:py-16">
+      <h1 className="text-2xl font-bold text-neutral-900 sm:text-3xl">
+        Satu langkah lagi
+      </h1>
+      <p className="mt-2 text-sm text-neutral-600">
+        Sebelum melanjutkan, mohon baca dan setujui Syarat &amp; Ketentuan dan
+        Kebijakan Privasi SeTrip.
+      </p>
+      <AcceptTermsForm />
+    </div>
+  );
+}