+
+ );
+}
+
+type SSOProviderFormProps = {
+ authenticationPortal: TGetOrganisationAuthenticationPortalResponse;
+};
+
+const SSOProviderForm = ({ authenticationPortal }: SSOProviderFormProps) => {
+ const { t } = useLingui();
+ const { toast } = useToast();
+
+ const organisation = useCurrentOrganisation();
+
+ const { mutateAsync: updateOrganisationAuthenticationPortal } =
+ trpc.enterprise.organisation.authenticationPortal.update.useMutation();
+
+ const form = useForm
+
+ Linked Accounts
+
+
+
+ View and manage all login methods linked to your account.
+
+
+
+
+
+
+ );
+}
+
+type AccountUnlinkDialogProps = {
+ accountId: string;
+ provider: string;
+ onSuccess: () => Promise
+
+
+
+
+
+
+
+
+ ),
+ }}
+ />
+
+
+
+ );
+ }
+
+ return (
+
+
+
+
+
+
+
+
+
+
+ Confirmation email sent
+
+
+
+
+
+
+
+
+ );
+}
diff --git a/apps/remix/app/routes/_unauthenticated+/organisation.sso.confirmation.$token.tsx b/apps/remix/app/routes/_unauthenticated+/organisation.sso.confirmation.$token.tsx
new file mode 100644
index 000000000..ac6869c89
--- /dev/null
+++ b/apps/remix/app/routes/_unauthenticated+/organisation.sso.confirmation.$token.tsx
@@ -0,0 +1,333 @@
+import { useState } from 'react';
+
+import { msg } from '@lingui/core/macro';
+import { Trans } from '@lingui/react/macro';
+import { AlertTriangle, Building2, Database, Eye, Settings, UserCircle2 } from 'lucide-react';
+import { data, isRouteErrorResponse } from 'react-router';
+import { useNavigate } from 'react-router';
+import { match } from 'ts-pattern';
+
+import { ORGANISATION_ACCOUNT_LINK_VERIFICATION_TOKEN_IDENTIFIER } from '@documenso/lib/constants/organisations';
+import { ZOrganisationAccountLinkMetadataSchema } from '@documenso/lib/types/organisation';
+import { formatAvatarUrl } from '@documenso/lib/utils/avatars';
+import { formatOrganisationLoginPath } from '@documenso/lib/utils/organisation-authentication-portal';
+import { extractInitials } from '@documenso/lib/utils/recipient-formatter';
+import { prisma } from '@documenso/prisma';
+import { trpc } from '@documenso/trpc/react';
+import { Alert, AlertDescription } from '@documenso/ui/primitives/alert';
+import { AvatarWithText } from '@documenso/ui/primitives/avatar';
+import { Badge } from '@documenso/ui/primitives/badge';
+import { Button } from '@documenso/ui/primitives/button';
+import {
+ Card,
+ CardContent,
+ CardDescription,
+ CardFooter,
+ CardHeader,
+ CardTitle,
+} from '@documenso/ui/primitives/card';
+import { Checkbox } from '@documenso/ui/primitives/checkbox';
+import { Separator } from '@documenso/ui/primitives/separator';
+import { useToast } from '@documenso/ui/primitives/use-toast';
+
+import { GenericErrorLayout, defaultErrorCodeMap } from '~/components/general/generic-error-layout';
+
+import type { Route } from './+types/organisation.sso.confirmation.$token';
+
+export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) {
+ const errorCode = isRouteErrorResponse(error) ? error.data.type : 500;
+
+ const errorMap = match(errorCode)
+ .with('invalid-token', () => ({
+ subHeading: msg`400 Error`,
+ heading: msg`Invalid Token`,
+ message: msg`The token is invalid or has expired.`,
+ }))
+ .otherwise(() => defaultErrorCodeMap[500]);
+
+ return (
+
+
+
+
+
+ +
+
+ Welcome to {organisationName}
+
+
+
+
+ +
+
+ setIsConfirmationChecked(checked === 'indeterminate' ? false : checked)
+ }
+ />
+
+
+
+
+
+
+
+
+
+ OR
+
+
+
+
+
+
+ Return to Documenso sign in page here
+
+
+
+
+
+
+ {type === 'link' ? (
+ Account Linking Request
+ ) : (
+ Account Creation Request
+ )}
+
+
+ {type === 'link' ? (
+
+ An organisation wants to link your account. Please review the details below.
+
+ ) : (
+
+ An organisation wants to create an account for you. Please review the details below.
+
+ )}
+
+
+
+
+ {/* Current User Section */}
+
+
+
+
+
+
+
+
+
+ );
+}
diff --git a/apps/remix/public/static/building-2.png b/apps/remix/public/static/building-2.png
new file mode 100644
index 000000000..f9c7266e6
Binary files /dev/null and b/apps/remix/public/static/building-2.png differ
diff --git a/packages/auth/client/index.ts b/packages/auth/client/index.ts
index e99573af6..5acf23c4c 100644
--- a/packages/auth/client/index.ts
+++ b/packages/auth/client/index.ts
@@ -7,6 +7,7 @@ import { AppError } from '@documenso/lib/errors/app-error';
import type { AuthAppType } from '../server';
import type { SessionValidationResult } from '../server/lib/session/session';
+import type { PartialAccount } from '../server/lib/utils/get-accounts';
import type { ActiveSession } from '../server/lib/utils/get-session';
import { handleSignInRedirect } from '../server/lib/utils/redirect';
import type {
@@ -96,6 +97,25 @@ export class AuthClient {
}
}
+ public account = {
+ getMany: async () => {
+ const response = await this.client['accounts'].$get();
+
+ await this.handleError(response);
+
+ const result = await response.json();
+
+ return superjson.deserialize<{ accounts: PartialAccount[] }>(result);
+ },
+ delete: async (accountId: string) => {
+ const response = await this.client['account'][':accountId'].$delete({
+ param: { accountId },
+ });
+
+ await this.handleError(response);
+ },
+ };
+
public emailPassword = {
signIn: async (data: Omit
+
+
+
+
+
+ Your Account
+
+
+
+ Account
+
+
+
+
+
+
+
+
+ Requesting Organisation
+
+
+
+ Organisation
+
+
+
+
+
+
+
+
+ Important: What This Means
+
+
+
+
+
+ This organisation will have administrative control over your account. You can
+ revoke this access later, but they will retain access to any data they've
+ already collected.
+
+
+
+
+
+
-
+
-
+
+ + + + Full account access: + {' '} + View all your profile information, settings, and activity + + +
+ -
+
+ + + + Account management: + {' '} + Modify your account settings, permissions, and preferences + + +
+ -
+
+ + + Data access:{' '} + Access all data associated with your account + + +
+
+
+ setIsConfirmationChecked(checked === 'indeterminate' ? false : checked)
+ }
+ />
+
+
+
+ -
+
-
+
Your account, and everything associated with it +
+ -
+
Something something something +
+ -
+
Something something something +
+
+ +