Граф коммитов

27 Коммитов

Автор SHA1 Сообщение Дата
Florian Zia 35d9bec8d0
chore: Delete pre-redesign client directory and esbuild 2024-03-13 17:29:39 +01:00
Florian Zia e8e57f7c09
chore: Delete pre-redesign views directory and move emails 2024-03-12 14:30:21 +01:00
Florian Zia 92d6c5da0b
chore: Remove migration remnants directory 2024-03-12 14:06:01 +01:00
Florian Zia 88e04dabe7
chore: Remove deprecated directory 2024-03-12 13:59:27 +01:00
Vincent 7375aa0d40 Enforce authOptions with getServerSession wrapper
Next-Auth's type definitions for getServerSession() don't enforce
the first argument, and v5 (aka Auth.js) removes the function
altogether, so an upstream fix is probably not in the books. And
since the upstream docs recommend a wrapper (see
https://next-auth.js.org/configuration/nextjs#getserversession), we
can just enforce that through ESLint to avoid future instsances of
the auth options not being passed.
2024-02-21 15:49:55 +01:00
Vincent cde8caa0d4 Temporarily preserve the old public breach pages 2024-01-18 09:08:04 +01:00
Vincent 6aa6ae2884 Insert `deprecated/` into deprecated file paths 2024-01-18 09:08:04 +01:00
Vincent 00de937f07 Disallow loose equality operators 2023-12-27 11:37:55 +01:00
Florian Zia d9d809da58
chore: Restrict imports for useGlean and useGa 2023-12-11 13:16:16 +01:00
Vincent 2a020f22bc Add plans to the landing page on wide screens
Version for smaller screens will be added later.
2023-12-01 16:51:50 +01:00
Vincent f0aa942442
Resolve linting errors after updating lint deps 2023-09-25 12:09:40 +02:00
Vincent 47784a28af Lint for common test errors 2023-09-06 14:22:53 +02:00
Vincent 8c7dc84860 Enable type-checked linting rules 2023-07-10 10:36:45 +02:00
Vincent 9196af05d9 Add eslint-plugin-import
This adds an ESLint plugin that prevents potential import bugs, and
fixes issues it uncovered — primarily, a duplicate export, multiple
imports from the same file, and giving a name to the default export
that matches one of the named exports.
2023-06-29 14:26:22 +02:00
Vincent b56993359e
Merge Next.js into `main` (#3116)
* Initialise Next.js app using create-next-app

Command run: npx create-next-app@latest

* Also tell VSCode to format TS and TSX files

* WIP: Sign in with next-auth

* Add Fluent

Unfortunately, since the ReactLocalization object contains
functions, it can't be shared between client and server (because
functions can't be serialized), so in effect every page that uses
localisation has to be a client component.

But at least we can set the correct `lang` attribute on <html> on
the server, so there's that :)

* Copy-paste public breach scan into Next.js

* Halfway migrate public breach list

Did not do: breach icons and getLocale() (for list and date
formatting).

* Enable SSR for localised strings

This allows our pages to be Server Components now.

* Download breach logos in Next.js server

* Tell search engines not to index non-prod envs

* Port existing security headers from Helmet to Next

* Add a 404 page

* Relax CSP in local development

* Set up Next-Auth for server components

It still doesn't work at the moment because the correct redirect
URL hasn't yet been set up on FxA.

* Apply Prettier to Next.js files on commit

* Enable Sass

* feat: Port existing landing page

* fix: Set hibp footer as html

* Wire up Next.js to FxA using iron-session

* feat: Port main layout for authenticated pages

* chore: Get session in layout

* Set up Prettier for VSCode users

* fix: Provide fxa user menu with data

* chore: Format Create Next App template

* Make Next-Auth work with FxA

To test, add the following two variables to your .env:

  NEXTAUTH_URL=http://localhost:6060
  NEXTAUTH_SECRET=<generate using `openssl rand -base64 32`>

You can then add <SignInButton/> to e.g. the landing page to kick
off authentication.

* Port breach-detail page to Next.js

* Add pending translations

* Access session data in React components

* Use Prettier as the formatter in VSCode

* Port Nebula & Protocol tokens into tokens file

* merge: Resolve conflicts

* fix: Move hr into li element

* feat: Handle authenticated users

* chore: Add todo note

* chore: Don’t use default exports for SignInButton and UserMenu

* chore: Move site navigation to client-side component

* Make mozlog work with Next.js

Unfortunately, this required patching the `intel` package. That
said, since that package hasn't been updated in six years, this
should be relatively safe.

The problem is that `intel` was trying to dynamically determine
which modules to load based on which files were present in its
directory. However, since Next.js moves (and presumably bundles)
Node modules into the `.next` folder, it was unable to find the
modules that `mozlog` was expecting to use.

The patch fixes this by simply explicitly importing those four
modules.

* Add back a couple of authentication logs

* add woff files and metropolis css file

* add right font path

* format scss file to include camelcase

* chore: Move components into (nextjs_migration) and remove redundant layout file

* chore: Remove redirect landing page -> dashboard

* chore: Redirect to dashboard upon signin

* add title and body copy variables

* use token variables in landing scss file instead of old variables from variables.css

* feat: Add basic dashboard page elements

* chore: Add circle chart web component

* chore: Add custom select web component

* breaches get and put calls

* cleanup

* get rid of debug logs

* Add sentry to nextJS branch (#3075)

MNTOR-1641 - enable Sentry for NextJS, for front- and back-end code

* chore: Render user breaches

* feat: Port breach resolution api

* fix: Check breach resolution filter by default

* chore: Add redirect /user/dashboard -> /user/breaches

* feat: Add breach page types

* chore: Remove breach resolution API call headers

* fix: Rename changed API response data key

* add template button component

* remove assets

* add button styling

* chore: Trigger auto signIn for pages that require authentication

* chore: Update breach types

* chore: Repurpose HIBP BreachDataTypes

* chore: Don’t capitalize first letter of chart label

* chore: Remove duplicate font size

* chore: Rename BreachResolutionApiBody -> BreachResolutionRequest

* Add a redirect from /security-tips for Next.js

This was already present in the Express-based website.

* Add the app shell for the React-based website

* chore: Re-enable gtag

* use old font code and add status pill component

* remove unnecessary package additions and style status pills

* lint

* test exposurecard data func

* MNTOR-1765 - set title, favicon, and meta tag correctly for nextjs app (#3082)

* Port unsubscribe-monthly page to Next.js

* add toggle to exposurecard accordion

* add icons to exposure type

* Ease transition from `getMessage`

This adds a `getStringLookup` API to ease the transition from old
Fluent functions (which depend on the user's locale being stored in
AsyncLocalStorage). It will behave the same as the old getMessage()
when called as-is, but when passed an instance of ReactLocalization
(which we have access to in Next.js routes), it will retrieve the
localised string from that.

* Add preliminary Subscriber table type definition

* Process new user sign-in

This does a couple of things:
- It updates the code that sends the breach check email on
  first sign-in to pass an instance of ReactLocalization.
- It splits session data and JWT properties to separate data
  provided to use by FxA from data we store in our own database.
- It checks if the user that signs in is already known in our
  database, and if not, it adds them. It does so using mostly the
  same code as in /src/controllers/auth.js's `confirmed` function.

* dockerflow endpoints

* remove introduction.mdx for now, refine button states

* apply some changes

* Move new components out of migration dir

* Delete .bash_profile

* Delete storybook.log

* Delete main.js

* Delete preview.js

* remove use of inter for now

* feat: add email api

* feat: remove email api

* verify email

* update comms options

* light refactoring

* take shared function out to util

* send verification email

* add another property to EmailRow

* add some types

* rename route

* fix review comment

* Fix MNTOR-1634: Stub /settings page (auth)

* Remove commented code, add CSS, match HTML markup from previous iterations

* Remove/comment out logic dependent on session info

* Wire up settings page and new APIs

* Work around radio button unchecking on page load

* Adding a catch all 404

Not ideal but the best solution at the moment

Co-authored-by: Vincent <Vinnl@users.noreply.github.com>

* version route

* remove log

* Port admin pages to Next.js

The Notification email doesn't work yet, because it's not clear yet
how to trigger the Cloud Function.

* Add Storybook build output folder to gitignore

* Set up Netlify

* Group Storybook ignores together

* add node env

Co-authored-by: Vincent <Vinnl@users.noreply.github.com>

* fix test

* fix npm test

* fix css lint

* fix lint js

* exclude sentry.*

* Set up the actual linting we'll use

* Prettier-ignore appropriate files, format the rest

* Fix/ignore ESLint and TypeScript errors

* Make tests work with getStringLookup

* Remove now-unused dependencies and build scripts

* Update CI scripts for Next.js

* Add missing Next.js dependencies to the lockfile

These were added when running `next build`.

* Tag Next.js migration TODOs

* Make "add email" dialog work on dashboard

* Load client-side scripts as modules

This is the same the old website did, and avoids e.g. different
`init` functions overriding each other.

* Fix loading of FxA avatar

* Use <BreachLogo> component

* Allow Next.js's inline scripts/styles in prod

For `style-src`, the current website already enables
'unsafe-inline'. For script-src, it looks like we currently cannot
avoid that: https://github.com/vercel/next.js/discussions/51039

* Debug Playwright (#3118)

---------

Co-authored-by: Florian Zia <zia.florian@gmail.com>
Co-authored-by: Kaitlyn <kandres@mozilla.com>
Co-authored-by: Joey Zhou <jozhou@mozilla.com>
Co-authored-by: Robert Helmer <rhelmer@mozilla.com>
Co-authored-by: maxxcrawford <maxx.crawford@gmail.com>
2023-06-12 13:35:35 -07:00
Amri Toufali 98c7ea21d6
fix ESLint errors and update config 2023-04-24 21:24:35 -07:00
Amri Toufali 067e5a2985
move db migration files and refactor for ESM 2023-04-20 10:55:25 -07:00
Amri Toufali b950466726
add ESLint plugin for camelCase lint 2023-04-13 23:42:22 -07:00
Vincent f7f80b0f5d Ensure that @ts-ignore is always commented
It's an escape hatch, so we want to know why it was added (and when
it can be removed again).
2023-04-04 10:58:03 +02:00
Vincent 6450a4835c Add relevant links to breach resolutions 2023-03-14 17:13:55 +01:00
Florian Zia 20b0551567 chore: Do not require jsdoc comments and param description 2023-02-20 11:57:50 +01:00
Florian Zia bf6f0c8efd chore: Add eslint-plugin-jsdoc 2023-02-17 10:09:25 +01:00
Vincent 50acedfd52 Add ESLint plugin to enforce the licence header 2023-02-16 10:22:05 +01:00
Joey Zhou b328eaca9e var updates 2022-12-01 23:41:14 -08:00
Amri Toufali 5d7c8e6aa1
change ESLint "new-cap" to warning 2022-05-10 22:15:35 -07:00
Amri Toufali f331e937fe
warn on certain ESLint rules to reduce error noise 2022-05-10 20:43:16 -07:00
Amri Toufali 7112d08b01
update ESLint 2022-05-10 16:17:52 -07:00