sarlink-portal/actions/auth-actions.ts

"use server";

import { authClient } from "@/lib/auth-client";
import prisma from "@/lib/db";
import { VerifyUserDetails } from "@/lib/person";
import { signUpFormSchema } from "@/lib/schemas";
import { phoneNumber } from "better-auth/plugins";
import { headers } from "next/headers";
import { redirect } from "next/navigation";
import { z } from "zod";
import { SendUserRejectionDetailSMS } from "./user-actions";
const formSchema = z.object({
	phoneNumber: z
		.string()
		.regex(/^[7|9][0-9]{2}-[0-9]{4}$/, "Please enter a valid phone number"),
});

export async function signin(previousState: ActionState, formData: FormData) {
	const phoneNumber = formData.get("phoneNumber") as string;
	const result = formSchema.safeParse({ phoneNumber });
	console.log(phoneNumber);

	if (!result.success) {
		return {
			message: result.error.errors[0].message, // Get the error message from Zod
			status: "error",
		};
	}

	if (!phoneNumber) {
		return {
			message: "Please enter a phone number",
			status: "error",
		};
	}
	const FORMATTED_MOBILE_NUMBER: string = `${phoneNumber.split("-").join("")}`;
	console.log(FORMATTED_MOBILE_NUMBER);
	const userExistsResponse = await fetch(
		`${process.env.SARLINK_API_BASE_URL}/auth/mobile/`,
		{
			method: "POST",
			headers: {
				"Content-Type": "application/json",
			},
			body: JSON.stringify({
				mobile: FORMATTED_MOBILE_NUMBER,
			}),
		},
	);
	const userExists = await userExistsResponse.json();
	console.log(userExists.non_field_errors);
	if (userExists?.non_field_errors) {
		return redirect(`/signup?phone_number=${phoneNumber}`);
	}

	if (!userExists?.verified)
		return {
			message:
				"Your account is on pending verification. Please wait for a response from admin or contact shihaam.",
			status: "error",
		};

	// await authClient.phoneNumber.sendOtp({
	// 	phoneNumber: NUMBER_WITH_COUNTRY_CODE,
	// });
	redirect(`/verify-otp?phone_number=${FORMATTED_MOBILE_NUMBER}`);
}

type ActionState = {
	message: string;
	payload?: FormData;
};

export async function signup(_actionState: ActionState, formData: FormData) {
	const data = Object.fromEntries(formData.entries());
	const parsedData = signUpFormSchema.safeParse(data);
	// get phone number from /signup?phone_number=999-1231
	const headersList = await headers();

	console.log("DATA ON SERVER SIDE", data);

	if (!parsedData.success) {
		return {
			message: "Invalid form data",
			payload: formData,
			errors: parsedData.error.flatten(),
		};
	}

	const idCardExists = await prisma.user.findFirst({
		where: {
			id_card: parsedData.data.id_card,
		},
	});

	if (idCardExists) {
		return {
			message: "ID card already exists.",
			payload: formData,
			db_error: "id_card",
		};
	}

	const phoneNumberExists = await prisma.user.findFirst({
		where: {
			phoneNumber: parsedData.data.phone_number,
		},
	});

	if (phoneNumberExists) {
		return {
			message: "Phone number already exists.",
			payload: formData,
			db_error: "phone_number",
		};
	}

	const newUser = await prisma.user.create({
		data: {
			name: parsedData.data.name,
			islandId: parsedData.data.island_id,
			atollId: parsedData.data.atoll_id,
			address: parsedData.data.address,
			id_card: parsedData.data.id_card,
			dob: new Date(parsedData.data.dob),
			role: "USER",
			accNo: parsedData.data.accNo,
			phoneNumber: parsedData.data.phone_number,
		},
	});
	const isValidPerson = await VerifyUserDetails({ user: newUser });

	if (!isValidPerson) {
		await SendUserRejectionDetailSMS({
			details: `
			A new user has requested for verification. \n
USER DETAILS:
Name: ${parsedData.data.name}
Address: ${parsedData.data.address}
ID Card: ${parsedData.data.id_card}
DOB: ${parsedData.data.dob.toLocaleDateString("en-US", {
				month: "short",
				day: "2-digit",
				year: "numeric",
			})}
ACC No: ${parsedData.data.accNo}\n\nVerify the user with the following link: ${process.env.BETTER_AUTH_URL}/users/${newUser.id}/verify
			`,
			phoneNumber: process.env.ADMIN_PHONENUMBER ?? "",
		});
		return {
			message:
				"Your account has been requested for verification. Please wait for a response from admin.",
			payload: formData,
			db_error: "invalidPersonValidation",
		};
	}

	if (isValidPerson) {
		await authClient.phoneNumber.sendOtp({
			phoneNumber: newUser.phoneNumber,
		});
	}
	redirect(
		`/verify-otp?phone_number=${encodeURIComponent(newUser.phoneNumber)}`,
	);
	return { message: "User created successfully" };
}

export const sendOtp = async (phoneNumber: string, code: string) => {
	// Implement sending OTP code via SMS
	console.log("Send OTP server fn", phoneNumber, code);
	const respose = await fetch(`${process.env.SMS_API_BASE_URL}/api/sms`, {
		method: "POST",
		headers: {
			"Content-Type": "application/json",
			Authorization: `Bearer ${process.env.SMS_API_KEY}`,
		},
		body: JSON.stringify({
			check_delivery: false,
			number: phoneNumber,
			message: `Your OTP code is ${code}`,
		}),
	});
	const data = await respose.json();
	console.log(data);
	return data;
};