sexy/packages/frontend/src/routes/me/security/+page.svelte

<script lang="ts">
  import { _ } from "svelte-i18n";
  import { invalidateAll } from "$app/navigation";
  import { untrack } from "svelte";
  import { toast } from "svelte-sonner";
  import { updateProfile } from "$lib/services";
  import { Button } from "$lib/components/ui/button";
  import { Input } from "$lib/components/ui/input";
  import { Label } from "$lib/components/ui/label";
  import * as Alert from "$lib/components/ui/alert";
  import {
    Card,
    CardContent,
    CardDescription,
    CardHeader,
    CardTitle,
  } from "$lib/components/ui/card";
  import Meta from "$lib/components/meta/meta.svelte";

  const { data } = $props();

  let email = $state(untrack(() => data.authStatus.user!.email));
  let password = $state("");
  let confirmPassword = $state("");
  let showPassword = $state(false);
  let showConfirmPassword = $state(false);

  let isSecurityLoading = $state(false);
  let isSecurityError = $state(false);
  let securityError = $state("");

  async function handleSecuritySubmit(e: Event) {
    e.preventDefault();
    try {
      if (password !== confirmPassword) {
        throw new Error($_("me.settings.password_error"));
      }
      isSecurityLoading = true;
      isSecurityError = false;
      securityError = "";
      await updateProfile({
        email,
        password,
      });
      toast.success($_("me.settings.toast_update"));
      invalidateAll();
      password = confirmPassword = "";
    } catch (err) {
      const e = err as { response?: { errors?: Array<{ message: string }> }; message?: string };
      securityError = e.response?.errors?.[0]?.message ?? e.message ?? "Unknown error";
      isSecurityError = true;
    } finally {
      isSecurityLoading = false;
    }
  }
</script>

<Meta title={$_("me.settings.privacy_title")} />

<div class="py-3 sm:py-6 lg:pl-6">
  <div class="flex items-center justify-between mb-6">
    <h1 class="text-2xl font-bold">{$_("me.settings.privacy_title")}</h1>
  </div>

  <Card class="bg-card/50 border-primary/20 max-w-2xl">
      <CardHeader>
        <CardTitle>{$_("me.settings.privacy_title")}</CardTitle>
        <CardDescription>{$_("me.settings.privacy_subtitle")}</CardDescription>
      </CardHeader>
      <CardContent class="space-y-4">
        <form onsubmit={handleSecuritySubmit} class="space-y-4">
          <div class="space-y-2">
            <Label for="email">{$_("me.settings.email")}</Label>
            <Input
              id="email"
              type="email"
              placeholder={$_("me.settings.email_placeholder")}
              bind:value={email}
              required
              class="bg-background/50 border-primary/20 focus:border-primary"
            />
          </div>

          <div class="space-y-2">
            <Label for="password">{$_("me.settings.password")}</Label>
            <div class="relative">
              <Input
                id="password"
                type={showPassword ? "text" : "password"}
                placeholder={$_("me.settings.password_placeholder")}
                bind:value={password}
                required
                class="bg-background/50 border-primary/20 focus:border-primary pr-10"
              />
              <button
                type="button"
                onclick={() => (showPassword = !showPassword)}
                class="cursor-pointer absolute right-3 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground"
              >
                {#if showPassword}
                  <span class="icon-[ri--eye-off-line] w-4 h-4"></span>
                {:else}
                  <span class="icon-[ri--eye-line] w-4 h-4"></span>
                {/if}
              </button>
            </div>
          </div>

          <div class="space-y-2">
            <Label for="confirmPassword">{$_("me.settings.confirm_password")}</Label>
            <div class="relative">
              <Input
                id="confirmPassword"
                type={showConfirmPassword ? "text" : "password"}
                placeholder={$_("me.settings.confirm_password_placeholder")}
                bind:value={confirmPassword}
                required
                class="bg-background/50 border-primary/20 focus:border-primary pr-10"
              />
              <button
                type="button"
                onclick={() => (showConfirmPassword = !showConfirmPassword)}
                class="cursor-pointer absolute right-3 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground"
              >
                {#if showConfirmPassword}
                  <span class="icon-[ri--eye-off-line] w-4 h-4"></span>
                {:else}
                  <span class="icon-[ri--eye-line] w-4 h-4"></span>
                {/if}
              </button>
            </div>
          </div>

          {#if isSecurityError}
            <div class="grid w-full items-start gap-4">
              <Alert.Root variant="destructive">
                <Alert.Title class="items-center flex">
                  <span class="icon-[ri--alert-line] inline-block w-4 h-4 mr-1"></span>
                  {$_("me.settings.error")}
                </Alert.Title>
                <Alert.Description>{securityError}</Alert.Description>
              </Alert.Root>
            </div>
          {/if}

          <Button
            type="submit"
            class="cursor-pointer w-full bg-gradient-to-r from-primary to-accent hover:from-primary/90 hover:to-accent/90"
            disabled={isSecurityLoading}
          >
            {#if isSecurityLoading}
              <div
                class="w-4 h-4 border-2 border-white/30 border-t-white rounded-full animate-spin mr-2"
              ></div>
              {$_("me.settings.updating_security")}
            {:else}
              {$_("me.settings.update_security")}
            {/if}
          </Button>
        </form>
      </CardContent>
    </Card>
</div>