app/
  (auth)/
    login/page.tsx           -> /login
    register/page.tsx        -> /register
    forgot-password/page.tsx -> /forgot-password

"use client";

import { useState } from "react";
import Link from "next/link";
import { useRouter } from "next/navigation";
import { Loader2 } from "lucide-react";
import { Button } from "@/components/ui/button";
import { Input } from "@/components/ui/input";
import { Label } from "@/components/ui/label";
import { Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle } from "@/components/ui/card";
import { SocialButton } from "./social-button";
import { signUp } from "@/lib/auth/client";
import { toast } from "sonner";

export function RegisterForm() {
  const router = useRouter();
  const [isLoading, setIsLoading] = useState(false);
  const [formData, setFormData] = useState({ name: "", email: "", password: "" });

  const handleSubmit = async (e: React.FormEvent) => {
    e.preventDefault();
    setIsLoading(true);

    if (formData.password.length < 8) {
      toast.error("La contraseña debe tener al menos 8 caracteres");
      setIsLoading(false);
      return;
    }

    try {
      const result = await signUp.email({
        name: formData.name,
        email: formData.email,
        password: formData.password,
        callbackURL: "/dashboard",
      });

      if (result.error) {
        toast.error(result.error.message || "Error al crear la cuenta");
      } else {
        toast.success("Cuenta creada. Revisa tu email para verificarla.");
        router.push("/login");
      }
    } catch {
      toast.error("Error al registrarse. Intentalo de nuevo.");
    } finally {
      setIsLoading(false);
    }
  };

  return (
    <Card className="w-full max-w-md">
      <CardHeader className="text-center">
        <CardTitle className="text-2xl">Crea tu cuenta</CardTitle>
        <CardDescription>Empieza gratis, sin tarjeta de credito</CardDescription>
      </CardHeader>
      <CardContent className="space-y-4">
        <SocialButton provider="google" />

        <div className="relative">
          <div className="absolute inset-0 flex items-center">
            <span className="w-full border-t" />
          </div>
          <div className="relative flex justify-center text-xs uppercase">
            <span className="bg-card px-2 text-muted-foreground">o registrate con</span>
          </div>
        </div>

        <form onSubmit={handleSubmit} className="space-y-4">
          {/* campos: name, email, password */}
          <Button type="submit" className="w-full" disabled={isLoading}>
            {isLoading ? <><Loader2 className="mr-2 h-4 w-4 animate-spin" />Creando cuenta...</> : "Crear cuenta"}
          </Button>
        </form>
      </CardContent>
      <CardFooter className="justify-center">
        <p className="text-sm text-muted-foreground">
          Ya tienes cuenta? <Link href="/login" className="font-medium text-foreground hover:underline">Inicia sesión</Link>
        </p>
      </CardFooter>
    </Card>
  );
}

const handleSubmit = async (e: React.FormEvent) => {
  e.preventDefault();
  setIsLoading(true);

  try {
    const result = await signIn.email({
      email: formData.email,
      password: formData.password,
      callbackURL: "/dashboard",
    });

    if (result.error) {
      toast.error(result.error.message || "Email o contraseña incorrectos");
    } else {
      router.push("/dashboard");
    }
  } catch {
    toast.error("Error al iniciar sesión. Intentalo de nuevo.");
  } finally {
    setIsLoading(false);
  }
};

export async function sendVerificationEmail({ to, name, verificationUrl }: SendVerificationEmailProps) {
  const { VerifyEmailTemplate } = await import("@/emails/verify-email");
  const { createElement } = await import("react");

  return getResend().emails.send({
    from: FROM_EMAIL,
    to,
    subject: `Verifica tu email - ${siteConfig.name}`,
    react: createElement(VerifyEmailTemplate, { name, verificationUrl }),
  });
}

const handleSubmit = async (e: React.FormEvent) => {
  e.preventDefault();
  setIsLoading(true);

  try {
    const result = await forgetPassword({ email, redirectTo: "/reset-password" });

    if (result.error) {
      toast.error(result.error.message || "Error al enviar el email");
    } else {
      setSent(true); // Muestra estado de confirmación
    }
  } catch {
    toast.error("Error al procesar la solicitud. Intentalo de nuevo.");
  } finally {
    setIsLoading(false);
  }
};

import { NextRequest, NextResponse } from "next/server";
import { getSessionCookie } from "better-auth/cookies";
import { isAuthRoute, isProtectedRoute } from "@/lib/auth/access";

export async function proxy(request: NextRequest) {
  const { pathname } = request.nextUrl;

  const protectedPath = isProtectedRoute(pathname);
  const authPath = isAuthRoute(pathname);

  if (!protectedPath && !authPath) return NextResponse.next();

  const sessionCookie = getSessionCookie(request);
  const isAuthenticated = !!sessionCookie;

  if (!isAuthenticated && protectedPath) {
    const loginUrl = new URL("/login", request.url);
    loginUrl.searchParams.set("callbackUrl", pathname);
    return NextResponse.redirect(loginUrl);
  }

  if (isAuthenticated && authPath) {
    return NextResponse.redirect(new URL("/dashboard", request.url));
  }

  return NextResponse.next();
}

if (siteConfig.requirePayment && session?.user) {
  // Admins se saltan el paywall
  if (!isAdminRole(userRole)) {
    const subscription = await db.subscription.findUnique({
      where: { userId: session.user.id },
      select: { status: true },
    });

    if (subscription?.status !== "active") {
      return <PaywallWithPricing />; // Pricing a pantalla completa
    }
  }
}

import { auth } from "@/lib/auth";
import { headers } from "next/headers";
import { redirect } from "next/navigation";

export default async function DashboardPage() {
  const session = await auth.api.getSession({
    headers: await headers(),
  });

  if (!session) redirect("/login");

  return <h1>Bienvenido, {session.user.name}</h1>;
}

// Listar sesiónes
const result = await client.multiSession?.listDeviceSessions?.();

// Cerrar una sesión
await client.multiSession?.revokeDeviceSession?.({ sessionId });

// Cerrar todas las demas
await client.multiSession?.revokeOtherDeviceSessions?.();

plugins: [
  admin({
    defaultRole: "user",
    adminRoles: ["admin"],
  }),
],

const session = await auth.api.getSession({ headers: await headers() });

if (session?.user.role !== "admin") {
  redirect("/dashboard");
}