homeio

1"use client";
2
3import type {
4  TwoFactorDisableRequest,
5  TwoFactorDisableResponse,
6  TwoFactorErrorCode,
7  TwoFactorSetupResponse,
8  TwoFactorVerifyRequest,
9  TwoFactorVerifyResponse,
10} from "@/lib/shared/contracts/auth";
11import { queryKeys } from "@/lib/shared/query-keys";
12import { useMutation, useQueryClient } from "@tanstack/react-query";
13
14export class TwoFactorApiError extends Error {
15  readonly code: TwoFactorErrorCode | "unknown";
16  readonly status: number;
17
18  constructor(
19    message: string,
20    status: number,
21    code: TwoFactorErrorCode | "unknown",
22  ) {
23    super(message);
24    this.name = "TwoFactorApiError";
25    this.status = status;
26    this.code = code;
27  }
28}
29
30type ApiEnvelope<T> = { data?: T; error?: string; code?: string };
31
32async function postJson<TBody, TResponse>(
33  endpoint: string,
34  body?: TBody,
35): Promise<TResponse> {
36  const response = await fetch(endpoint, {
37    method: "POST",
38    headers: body ? { "Content-Type": "application/json" } : undefined,
39    body: body ? JSON.stringify(body) : undefined,
40    cache: "no-store",
41  });
42
43  const payload = (await response
44    .json()
45    .catch(() => ({}))) as ApiEnvelope<TResponse>;
46
47  if (!response.ok) {
48    throw new TwoFactorApiError(
49      payload.error ?? `Request failed (${response.status})`,
50      response.status,
51      (payload.code as TwoFactorErrorCode) ?? "unknown",
52    );
53  }
54
55  if (!payload.data) {
56    throw new TwoFactorApiError(
57      "Malformed response from server",
58      response.status,
59      "unknown",
60    );
61  }
62
63  return payload.data;
64}
65
66export function useStartTwoFactorSetup() {
67  const queryClient = useQueryClient();
68  return useMutation({
69    mutationFn: async () =>
70      postJson<undefined, TwoFactorSetupResponse>("/api/v1/auth/2fa/setup"),
71    onSuccess: () => {
72      void queryClient.invalidateQueries({ queryKey: queryKeys.currentUser });
73    },
74  });
75}
76
77export function useVerifyTwoFactor() {
78  const queryClient = useQueryClient();
79  return useMutation({
80    mutationFn: async (input: TwoFactorVerifyRequest) =>
81      postJson<TwoFactorVerifyRequest, TwoFactorVerifyResponse>(
82        "/api/v1/auth/2fa/verify",
83        input,
84      ),
85    onSuccess: () => {
86      void queryClient.invalidateQueries({ queryKey: queryKeys.currentUser });
87    },
88  });
89}
90
91export function useDisableTwoFactor() {
92  const queryClient = useQueryClient();
93  return useMutation({
94    mutationFn: async (input: TwoFactorDisableRequest) =>
95      postJson<TwoFactorDisableRequest, TwoFactorDisableResponse>(
96        "/api/v1/auth/2fa/disable",
97        input,
98      ),
99    onSuccess: () => {
100      void queryClient.invalidateQueries({ queryKey: queryKeys.currentUser });
101    },
102  });
103}
104