Implement rate limiting and enhance authentication flow

- Added rate limiting configuration for authentication endpoints, allowing customizable request limits via environment variables. - Updated authentication flow to utilize HttpRequest for cookie management, ensuring secure handling of refresh tokens. - Introduced a new endpoint to retrieve user subscription details. - Enhanced the handling of Telegram bot token validation to prevent errors with empty tokens. - Updated the application to serialize enums as strings for better documentation and compatibility with TypeScript. - Improved test coverage for new features and adjustments in command handlers.
2026-07-02 12:40:23 +03:00
parent ed07221ca5
commit 8067be3c35
106 changed files with 8823 additions and 172 deletions
@@ -0,0 +1,65 @@
+import { zodResolver } from '@hookform/resolvers/zod'
+import { useForm } from 'react-hook-form'
+import { useTranslation } from 'react-i18next'
+import { z } from 'zod'
+import { toast } from '@/shared/ui/toast-store'
+import { Button } from '@/shared/ui/button'
+import { Input } from '@/shared/ui/input'
+import { Label } from '@/shared/ui/label'
+import { Card, CardContent, CardHeader, CardTitle } from '@/shared/ui/card'
+import { HttpError } from '@/shared/api/client'
+import { changePassword } from '@/features/auth/api'
+
+const schema = z.object({
+  currentPassword: z.string().min(1),
+  newPassword: z.string().min(8),
+})
+
+type FormValues = z.infer<typeof schema>
+
+export function ChangePasswordForm() {
+  const { t } = useTranslation()
+  const {
+    register,
+    handleSubmit,
+    reset,
+    formState: { errors, isSubmitting },
+  } = useForm<FormValues>({ resolver: zodResolver(schema) })
+
+  const onSubmit = async (values: FormValues) => {
+    try {
+      await changePassword(values.currentPassword, values.newPassword)
+      toast.success(t('settings.passwordChanged'))
+      reset()
+    } catch (error) {
+      const message =
+        error instanceof HttpError && error.status === 400 ? t('settings.currentPasswordInvalid') : t('auth.genericError')
+      toast.error(message)
+    }
+  }
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="text-base">{t('settings.changePassword')}</CardTitle>
+      </CardHeader>
+      <CardContent>
+        <form onSubmit={handleSubmit(onSubmit)} className="flex flex-col gap-4">
+          <div className="flex flex-col gap-1.5">
+            <Label htmlFor="currentPassword">{t('settings.currentPassword')}</Label>
+            <Input id="currentPassword" type="password" autoComplete="current-password" {...register('currentPassword')} />
+            {errors.currentPassword && <p className="text-sm text-red-500">{t('settings.currentPasswordRequired')}</p>}
+          </div>
+          <div className="flex flex-col gap-1.5">
+            <Label htmlFor="newPassword">{t('settings.newPassword')}</Label>
+            <Input id="newPassword" type="password" autoComplete="new-password" {...register('newPassword')} />
+            {errors.newPassword && <p className="text-sm text-red-500">{t('auth.passwordHint')}</p>}
+          </div>
+          <Button type="submit" disabled={isSubmitting} className="self-start">
+            {t('settings.changePassword')}
+          </Button>
+        </form>
+      </CardContent>
+    </Card>
+  )
+}