managarten/packages/shared-auth-ui/src/components/SecurityOnboarding.svelte
Till JS 7073756117 feat(auth): UX improvements for passkeys, 2FA, and password management
1. Passkey Conditional UI: autocomplete="username webauthn" on email
   field enables browser passkey suggestions in autofill dropdown
2. Trust Device checkbox: "Diesem Gerät 30 Tage vertrauen" option
   during 2FA verification (uses Better Auth trust_device cookie)
3. Local QR code generation: replaced external api.qrserver.com with
   local qrcode package for 2FA setup (no external dependency)
4. SecurityOnboarding component: post-registration wizard suggesting
   passkey setup to new users
5. ChangePassword component: reusable password change form with
   validation, visibility toggles, and changePassword() in authService

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 21:15:09 +01:00

348 lines
7.1 KiB
Svelte

<script lang="ts">
interface Props {
onSetupPasskey?: () => Promise<{ success: boolean; error?: string }>;
onSkip: () => void;
passkeyAvailable: boolean;
primaryColor?: string;
}
let { onSetupPasskey, onSkip, passkeyAvailable, primaryColor = '#6366f1' }: Props = $props();
let loading = $state(false);
let error = $state<string | null>(null);
let success = $state(false);
async function handleSetupPasskey() {
if (!onSetupPasskey) return;
loading = true;
error = null;
const result = await onSetupPasskey();
loading = false;
if (result.success) {
success = true;
} else {
error = result.error || 'Fehler beim Einrichten des Passkeys';
}
}
</script>
<div class="onboarding-container">
{#if success}
<div class="onboarding-card">
<div class="icon-circle success-icon">
<svg
width="32"
height="32"
viewBox="0 0 24 24"
fill="none"
stroke="currentColor"
stroke-width="2"
stroke-linecap="round"
stroke-linejoin="round"
>
<polyline points="20 6 9 17 4 12" />
</svg>
</div>
<h2 class="onboarding-title">Passkey eingerichtet!</h2>
<p class="onboarding-description">
Dein Konto ist jetzt mit einem Passkey gesichert. Du kannst dich ab sofort ohne Passwort
anmelden.
</p>
<button
type="button"
class="primary-button"
style:background-color={primaryColor + '60'}
style:border-color={primaryColor}
onclick={onSkip}
>
Weiter
</button>
</div>
{:else}
<div class="onboarding-card">
<div class="icon-circle" style:border-color={primaryColor}>
<svg
width="32"
height="32"
viewBox="0 0 24 24"
fill="none"
stroke="currentColor"
stroke-width="2"
stroke-linecap="round"
stroke-linejoin="round"
>
<rect x="3" y="11" width="18" height="11" rx="2" ry="2" />
<path d="M7 11V7a5 5 0 0 1 10 0v4" />
</svg>
</div>
<h2 class="onboarding-title">Sichere dein Konto</h2>
<p class="onboarding-description">Schütze dein Konto mit zusätzlicher Sicherheit.</p>
{#if error}
<div class="error-message" role="alert">
<p>{error}</p>
</div>
{/if}
{#if passkeyAvailable && onSetupPasskey}
<div class="option-card">
<div class="option-icon">
<svg
width="24"
height="24"
viewBox="0 0 24 24"
fill="none"
stroke="currentColor"
stroke-width="2"
stroke-linecap="round"
stroke-linejoin="round"
>
<path d="M2 18v3c0 .6.4 1 1 1h4v-3h3v-3h2l1.4-1.4a6.5 6.5 0 1 0-4-4Z" />
<circle cx="16.5" cy="7.5" r=".5" fill="currentColor" />
</svg>
</div>
<div class="option-content">
<h3 class="option-title">Passkey einrichten</h3>
<p class="option-description">
Anmelden ohne Passwort mit Touch ID, Face ID oder Windows Hello
</p>
</div>
<button
type="button"
class="setup-button"
style:background-color={primaryColor + '60'}
style:border-color={primaryColor}
disabled={loading}
onclick={handleSetupPasskey}
>
{loading ? '...' : 'Jetzt einrichten'}
</button>
</div>
{/if}
<p class="hint-text">Du kannst 2FA jederzeit in den Einstellungen aktivieren.</p>
<button type="button" class="skip-button" onclick={onSkip}> Überspringen </button>
</div>
{/if}
</div>
<style>
.onboarding-container {
display: flex;
align-items: center;
justify-content: center;
padding: 2rem 1rem;
}
.onboarding-card {
width: 100%;
max-width: 24rem;
display: flex;
flex-direction: column;
align-items: center;
text-align: center;
padding: 2rem;
border-radius: 1rem;
border: 1px solid rgba(255, 255, 255, 0.1);
background: rgba(255, 255, 255, 0.05);
}
:global(.light) .onboarding-card {
border-color: rgba(0, 0, 0, 0.1);
background: rgba(0, 0, 0, 0.02);
}
.icon-circle {
width: 4rem;
height: 4rem;
border-radius: 50%;
border: 2px solid rgba(255, 255, 255, 0.2);
display: flex;
align-items: center;
justify-content: center;
margin-bottom: 1.25rem;
color: rgba(255, 255, 255, 0.8);
}
:global(.light) .icon-circle {
border-color: rgba(0, 0, 0, 0.15);
color: rgba(0, 0, 0, 0.7);
}
.success-icon {
border-color: #22c55e;
color: #22c55e;
}
.onboarding-title {
font-size: 1.25rem;
font-weight: 600;
margin: 0 0 0.5rem;
color: rgba(255, 255, 255, 0.9);
}
:global(.light) .onboarding-title {
color: rgba(0, 0, 0, 0.9);
}
.onboarding-description {
font-size: 0.875rem;
color: rgba(255, 255, 255, 0.6);
margin: 0 0 1.5rem;
line-height: 1.5;
}
:global(.light) .onboarding-description {
color: rgba(0, 0, 0, 0.6);
}
.error-message {
width: 100%;
padding: 0.625rem 0.75rem;
margin-bottom: 1rem;
border-radius: 0.5rem;
background: rgba(239, 68, 68, 0.15);
border: 1px solid rgba(239, 68, 68, 0.3);
color: #ef4444;
font-size: 0.8125rem;
text-align: left;
}
.error-message p {
margin: 0;
}
.option-card {
width: 100%;
display: flex;
flex-direction: column;
align-items: center;
gap: 0.75rem;
padding: 1.25rem;
border-radius: 0.75rem;
border: 1px solid rgba(255, 255, 255, 0.1);
background: rgba(255, 255, 255, 0.05);
margin-bottom: 1rem;
}
:global(.light) .option-card {
border-color: rgba(0, 0, 0, 0.1);
background: rgba(0, 0, 0, 0.02);
}
.option-icon {
color: rgba(255, 255, 255, 0.7);
}
:global(.light) .option-icon {
color: rgba(0, 0, 0, 0.6);
}
.option-content {
text-align: center;
}
.option-title {
font-size: 0.9375rem;
font-weight: 600;
margin: 0 0 0.25rem;
color: rgba(255, 255, 255, 0.9);
}
:global(.light) .option-title {
color: rgba(0, 0, 0, 0.9);
}
.option-description {
font-size: 0.8125rem;
color: rgba(255, 255, 255, 0.5);
margin: 0;
line-height: 1.4;
}
:global(.light) .option-description {
color: rgba(0, 0, 0, 0.5);
}
.setup-button {
width: 100%;
height: 2.5rem;
border: 2px solid;
border-radius: 0.5rem;
font-weight: 500;
font-size: 0.875rem;
cursor: pointer;
transition: opacity 0.2s;
color: rgba(255, 255, 255, 0.9);
background: transparent;
}
:global(.light) .setup-button {
color: rgba(0, 0, 0, 0.9);
}
.setup-button:hover:not(:disabled) {
opacity: 0.8;
}
.setup-button:disabled {
opacity: 0.5;
cursor: not-allowed;
}
.hint-text {
font-size: 0.8125rem;
color: rgba(255, 255, 255, 0.4);
margin: 0 0 1.25rem;
}
:global(.light) .hint-text {
color: rgba(0, 0, 0, 0.4);
}
.skip-button {
background: none;
border: none;
font-size: 0.875rem;
font-weight: 500;
color: rgba(255, 255, 255, 0.5);
cursor: pointer;
padding: 0.5rem 1rem;
transition: color 0.2s;
}
:global(.light) .skip-button {
color: rgba(0, 0, 0, 0.5);
}
.skip-button:hover {
color: rgba(255, 255, 255, 0.8);
}
:global(.light) .skip-button:hover {
color: rgba(0, 0, 0, 0.8);
}
.primary-button {
width: 100%;
height: 2.75rem;
border: 2px solid;
border-radius: 0.5rem;
font-weight: 500;
font-size: 0.875rem;
cursor: pointer;
transition: opacity 0.2s;
color: rgba(255, 255, 255, 0.9);
}
:global(.light) .primary-button {
color: rgba(0, 0, 0, 0.9);
}
.primary-button:hover {
opacity: 0.8;
}
</style>