"use client";
import { Suspense, useState } from "react";
import Link from "next/link";
import { useSearchParams } from "next/navigation";
import { useTranslations } from "next-intl";
import { createClient } from "@/lib/supabase/client";
import { Button } from "@/components/ui/button";
import { Input } from "@/components/ui/input";
import { Label } from "@/components/ui/label";
import {
Card,
CardContent,
CardDescription,
CardHeader,
CardTitle,
} from "@/components/ui/card";
import { MessageSquare, CheckCircle, UsersRound } from "lucide-react";
// `useSearchParams` opts the component out of static prerendering
// unless wrapped in Suspense — same pattern as /login.
export default function SignupPage() {
return (
);
}
function SignupPageInner() {
const searchParams = useSearchParams();
// When the user lands here from `/join/` we carry the
// invite token in the query so it survives the signup → email
// verification → redirect round-trip. `emailRedirectTo` below
// sends the verified user to /join/ so they land on the
// redeem step instead of being dropped on /dashboard.
const inviteToken = searchParams.get("invite");
const t = useTranslations("SignupPage");
const [fullName, setFullName] = useState("");
const [email, setEmail] = useState("");
const [password, setPassword] = useState("");
const [confirmPassword, setConfirmPassword] = useState("");
const [error, setError] = useState(null);
const [loading, setLoading] = useState(false);
const [success, setSuccess] = useState(false);
const supabase = createClient();
const handleSignup = async (e: React.FormEvent) => {
e.preventDefault();
setError(null);
if (password !== confirmPassword) {
setError(t("passwordsMismatch"));
return;
}
if (password.length < 6) {
setError(t("passwordTooShort"));
return;
}
setLoading(true);
// Always name our own origin as the place the confirmation link
// returns to. Previously this was left unset unless an invite was
// involved, so Supabase fell back to its Site URL — which on a
// freshly-created or self-hosted project is `http://localhost:3000`
// (issue #595) — and even when the Site URL was right the link
// landed on `/` with an unexchanged `?code=`, so the user had to
// sign in again after verifying. /auth/callback exchanges the link
// for a session and forwards to `next` (issue #592). Supabase still
// has to allow this origin under Authentication → URL Configuration
// → Redirect URLs; see docs/auth-emails.md.
const next = inviteToken
? `/join/${encodeURIComponent(inviteToken)}`
: "/dashboard";
const emailRedirectTo = `${window.location.origin}/auth/callback?next=${encodeURIComponent(next)}`;
const { error } = await supabase.auth.signUp({
email,
password,
options: {
data: {
full_name: fullName,
},
emailRedirectTo,
},
});
if (error) {
setError(error.message);
setLoading(false);
return;
}
setSuccess(true);
setLoading(false);
};
if (success) {
return (