Complete SaaS self-service onboarding sprint: - Stripe-powered signup flow: pricing page → checkout → provisioning → activation - Refresh token infrastructure: 1h access tokens + 30-day httpOnly cookie refresh - TOTP MFA with QR setup, recovery codes, and login challenge flow - Google + Azure AD SSO (conditional on env vars) with account linking - WebAuthn passkey registration and passwordless login - Guided onboarding checklist with server-side progress tracking - Stubbed email service (console + DB logging, ready for real provider) - Settings page with tabbed security settings (MFA, passkeys, linked accounts) - Login page enhanced with MFA verification, SSO buttons, passkey login - Database migration 015 with all new tables and columns - Version bump to 2026.03.17 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
183 lines
8.2 KiB
TypeScript
183 lines
8.2 KiB
TypeScript
import { Routes, Route, Navigate } from 'react-router-dom';
|
|
import { useAuthStore } from './stores/authStore';
|
|
import { AppLayout } from './components/layout/AppLayout';
|
|
import { LoginPage } from './pages/auth/LoginPage';
|
|
import { RegisterPage } from './pages/auth/RegisterPage';
|
|
import { SelectOrgPage } from './pages/auth/SelectOrgPage';
|
|
import { ActivatePage } from './pages/auth/ActivatePage';
|
|
import { DashboardPage } from './pages/dashboard/DashboardPage';
|
|
import { AccountsPage } from './pages/accounts/AccountsPage';
|
|
import { TransactionsPage } from './pages/transactions/TransactionsPage';
|
|
import { BudgetsPage } from './pages/budgets/BudgetsPage';
|
|
import { UnitsPage } from './pages/units/UnitsPage';
|
|
import { InvoicesPage } from './pages/invoices/InvoicesPage';
|
|
import { PaymentsPage } from './pages/payments/PaymentsPage';
|
|
import { VendorsPage } from './pages/vendors/VendorsPage';
|
|
import { ProjectsPage } from './pages/projects/ProjectsPage';
|
|
import { InvestmentsPage } from './pages/investments/InvestmentsPage';
|
|
import { CapitalProjectsPage } from './pages/capital-projects/CapitalProjectsPage';
|
|
import { BalanceSheetPage } from './pages/reports/BalanceSheetPage';
|
|
import { IncomeStatementPage } from './pages/reports/IncomeStatementPage';
|
|
import { BudgetVsActualPage } from './pages/reports/BudgetVsActualPage';
|
|
import { SankeyPage } from './pages/reports/SankeyPage';
|
|
import { CashFlowPage } from './pages/reports/CashFlowPage';
|
|
import { AgingReportPage } from './pages/reports/AgingReportPage';
|
|
import { YearEndPage } from './pages/reports/YearEndPage';
|
|
import { QuarterlyReportPage } from './pages/reports/QuarterlyReportPage';
|
|
import { SettingsPage } from './pages/settings/SettingsPage';
|
|
import { UserPreferencesPage } from './pages/preferences/UserPreferencesPage';
|
|
import { OrgMembersPage } from './pages/org-members/OrgMembersPage';
|
|
import { AdminPage } from './pages/admin/AdminPage';
|
|
import { AssessmentGroupsPage } from './pages/assessment-groups/AssessmentGroupsPage';
|
|
import { CashFlowForecastPage } from './pages/cash-flow/CashFlowForecastPage';
|
|
import { MonthlyActualsPage } from './pages/monthly-actuals/MonthlyActualsPage';
|
|
import { InvestmentPlanningPage } from './pages/investment-planning/InvestmentPlanningPage';
|
|
import { InvestmentScenariosPage } from './pages/board-planning/InvestmentScenariosPage';
|
|
import { InvestmentScenarioDetailPage } from './pages/board-planning/InvestmentScenarioDetailPage';
|
|
import { AssessmentScenariosPage } from './pages/board-planning/AssessmentScenariosPage';
|
|
import { AssessmentScenarioDetailPage } from './pages/board-planning/AssessmentScenarioDetailPage';
|
|
import { ScenarioComparisonPage } from './pages/board-planning/ScenarioComparisonPage';
|
|
import { BudgetPlanningPage } from './pages/board-planning/BudgetPlanningPage';
|
|
import { PricingPage } from './pages/pricing/PricingPage';
|
|
import { OnboardingPage } from './pages/onboarding/OnboardingPage';
|
|
import { OnboardingPendingPage } from './pages/onboarding/OnboardingPendingPage';
|
|
|
|
function ProtectedRoute({ children }: { children: React.ReactNode }) {
|
|
const token = useAuthStore((s) => s.token);
|
|
if (!token) return <Navigate to="/login" replace />;
|
|
return <>{children}</>;
|
|
}
|
|
|
|
function OrgRequiredRoute({ children }: { children: React.ReactNode }) {
|
|
const token = useAuthStore((s) => s.token);
|
|
const currentOrg = useAuthStore((s) => s.currentOrg);
|
|
if (!token) return <Navigate to="/login" replace />;
|
|
if (!currentOrg) return <Navigate to="/select-org" replace />;
|
|
return <>{children}</>;
|
|
}
|
|
|
|
function SuperAdminRoute({ children }: { children: React.ReactNode }) {
|
|
const token = useAuthStore((s) => s.token);
|
|
const user = useAuthStore((s) => s.user);
|
|
if (!token) return <Navigate to="/login" replace />;
|
|
if (!user?.isSuperadmin) return <Navigate to="/dashboard" replace />;
|
|
return <>{children}</>;
|
|
}
|
|
|
|
function AuthRoute({ children }: { children: React.ReactNode }) {
|
|
const token = useAuthStore((s) => s.token);
|
|
const user = useAuthStore((s) => s.user);
|
|
const currentOrg = useAuthStore((s) => s.currentOrg);
|
|
const organizations = useAuthStore((s) => s.organizations);
|
|
if (token && currentOrg) return <Navigate to="/" replace />;
|
|
// Platform owner / superadmin with no org memberships → admin panel
|
|
if (token && user?.isSuperadmin && (!organizations || organizations.length === 0)) {
|
|
return <Navigate to="/admin" replace />;
|
|
}
|
|
if (token && !currentOrg) return <Navigate to="/select-org" replace />;
|
|
return <>{children}</>;
|
|
}
|
|
|
|
export function App() {
|
|
return (
|
|
<Routes>
|
|
{/* Public routes (no auth required) */}
|
|
<Route path="/pricing" element={<PricingPage />} />
|
|
<Route path="/activate" element={<ActivatePage />} />
|
|
<Route path="/onboarding/pending" element={<OnboardingPendingPage />} />
|
|
|
|
{/* Auth routes (redirect if already logged in) */}
|
|
<Route
|
|
path="/login"
|
|
element={
|
|
<AuthRoute>
|
|
<LoginPage />
|
|
</AuthRoute>
|
|
}
|
|
/>
|
|
<Route
|
|
path="/register"
|
|
element={
|
|
<AuthRoute>
|
|
<RegisterPage />
|
|
</AuthRoute>
|
|
}
|
|
/>
|
|
<Route
|
|
path="/select-org"
|
|
element={
|
|
<ProtectedRoute>
|
|
<SelectOrgPage />
|
|
</ProtectedRoute>
|
|
}
|
|
/>
|
|
|
|
{/* Onboarding (requires auth but not org selection) */}
|
|
<Route
|
|
path="/onboarding"
|
|
element={
|
|
<ProtectedRoute>
|
|
<OnboardingPage />
|
|
</ProtectedRoute>
|
|
}
|
|
/>
|
|
|
|
{/* Admin routes */}
|
|
<Route
|
|
path="/admin"
|
|
element={
|
|
<SuperAdminRoute>
|
|
<AppLayout />
|
|
</SuperAdminRoute>
|
|
}
|
|
>
|
|
<Route index element={<AdminPage />} />
|
|
</Route>
|
|
|
|
{/* Main app routes (require auth + org) */}
|
|
<Route
|
|
path="/*"
|
|
element={
|
|
<OrgRequiredRoute>
|
|
<AppLayout />
|
|
</OrgRequiredRoute>
|
|
}
|
|
>
|
|
<Route index element={<Navigate to="/dashboard" replace />} />
|
|
<Route path="dashboard" element={<DashboardPage />} />
|
|
<Route path="accounts" element={<AccountsPage />} />
|
|
<Route path="transactions" element={<TransactionsPage />} />
|
|
<Route path="budgets/:year" element={<BudgetsPage />} />
|
|
<Route path="units" element={<UnitsPage />} />
|
|
<Route path="invoices" element={<InvoicesPage />} />
|
|
<Route path="payments" element={<PaymentsPage />} />
|
|
<Route path="vendors" element={<VendorsPage />} />
|
|
<Route path="projects" element={<ProjectsPage />} />
|
|
<Route path="investments" element={<InvestmentsPage />} />
|
|
<Route path="capital-projects" element={<CapitalProjectsPage />} />
|
|
<Route path="investment-planning" element={<InvestmentPlanningPage />} />
|
|
<Route path="assessment-groups" element={<AssessmentGroupsPage />} />
|
|
<Route path="cash-flow" element={<CashFlowForecastPage />} />
|
|
<Route path="monthly-actuals" element={<MonthlyActualsPage />} />
|
|
<Route path="reports/balance-sheet" element={<BalanceSheetPage />} />
|
|
<Route path="reports/income-statement" element={<IncomeStatementPage />} />
|
|
<Route path="reports/budget-vs-actual" element={<BudgetVsActualPage />} />
|
|
<Route path="reports/cash-flow" element={<CashFlowPage />} />
|
|
<Route path="reports/aging" element={<AgingReportPage />} />
|
|
<Route path="reports/sankey" element={<SankeyPage />} />
|
|
<Route path="reports/year-end" element={<YearEndPage />} />
|
|
<Route path="reports/quarterly" element={<QuarterlyReportPage />} />
|
|
<Route path="board-planning/budgets" element={<BudgetPlanningPage />} />
|
|
<Route path="board-planning/investments" element={<InvestmentScenariosPage />} />
|
|
<Route path="board-planning/investments/:id" element={<InvestmentScenarioDetailPage />} />
|
|
<Route path="board-planning/assessments" element={<AssessmentScenariosPage />} />
|
|
<Route path="board-planning/assessments/:id" element={<AssessmentScenarioDetailPage />} />
|
|
<Route path="board-planning/compare" element={<ScenarioComparisonPage />} />
|
|
<Route path="settings" element={<SettingsPage />} />
|
|
<Route path="preferences" element={<UserPreferencesPage />} />
|
|
<Route path="org-members" element={<OrgMembersPage />} />
|
|
</Route>
|
|
</Routes>
|
|
);
|
|
}
|