diff --git a/src/lib/server/email/templates/confirmation.de.txt b/src/lib/server/email/templates/confirmation.de.txt
index 084f14c..b2da80d 100644
--- a/src/lib/server/email/templates/confirmation.de.txt
+++ b/src/lib/server/email/templates/confirmation.de.txt
@@ -10,6 +10,8 @@ vielen Dank für Ihre Registrierung bei {{tenant.longName}}. Um Ihre Registrieru
Geben Sie diesen Code in das Bestätigungsfeld ein, um Ihre Registrierung zu vervollständigen.
+Alternativ können Sie direkt diese Seite besuchen: {{tenant.baseUrl}}/confirm/{{confirmationCode}}
+
WICHTIGER HINWEIS: Dieser Code ist nur für {{expirationMinutes}} Minuten gültig und kann nur einmal verwendet werden.
Falls Sie sich nicht bei {{tenant.longName}} registriert haben, können Sie diese E-Mail ignorieren.
diff --git a/src/lib/server/email/templates/confirmation.en.html b/src/lib/server/email/templates/confirmation.en.html
index cadd7ce..10cd866 100644
--- a/src/lib/server/email/templates/confirmation.en.html
+++ b/src/lib/server/email/templates/confirmation.en.html
@@ -100,6 +100,7 @@
Enter this code in the confirmation field
+
Or simply click here.
diff --git a/src/lib/server/email/templates/confirmation.en.txt b/src/lib/server/email/templates/confirmation.en.txt
index 1b575e9..ae7c750 100644
--- a/src/lib/server/email/templates/confirmation.en.txt
+++ b/src/lib/server/email/templates/confirmation.en.txt
@@ -10,6 +10,8 @@ Thank you for registering with {{tenant.longName}}. To complete your registratio
Enter this code in the confirmation field to complete your registration.
+Or simply visit this site: {{tenant.baseUrl}}/confirm/{{confirmationCode}}
+
IMPORTANT NOTICE: This code is valid for {{expirationMinutes}} minutes only and can be used only once.
If you did not register with {{tenant.longName}}, you can safely ignore this email.
diff --git a/src/lib/server/services/__tests__/user-service.test.ts b/src/lib/server/services/__tests__/user-service.test.ts
index 33a4078..b1c4196 100644
--- a/src/lib/server/services/__tests__/user-service.test.ts
+++ b/src/lib/server/services/__tests__/user-service.test.ts
@@ -176,18 +176,25 @@ describe("UserService", () => {
limit: vi.fn().mockResolvedValue([{ id: "user-123", recoveryPassphrase: "recovery-123" }])
};
+ const mockCountSelectBuilder = {
+ from: vi.fn().mockResolvedValue([{ count: 1 }])
+ };
+
const mockUpdateBuilder = {
set: vi.fn().mockReturnThis(),
where: vi.fn().mockReturnThis(),
execute: vi.fn().mockResolvedValue({ count: 1 })
};
- mockCentralDb.select.mockReturnValue(mockSelectBuilder);
+ // First call for user lookup, second call for count query
+ mockCentralDb.select
+ .mockReturnValueOnce(mockSelectBuilder)
+ .mockReturnValueOnce(mockCountSelectBuilder);
mockCentralDb.update.mockReturnValue(mockUpdateBuilder);
const result = await UserService.confirm(token);
- expect(mockCentralDb.select).toHaveBeenCalled();
+ expect(mockCentralDb.select).toHaveBeenCalledTimes(2);
expect(mockCentralDb.update).toHaveBeenCalled();
expect(mockUpdateBuilder.set).toHaveBeenCalledWith({
confirmed: true,
@@ -195,6 +202,7 @@ describe("UserService", () => {
recoveryPassphrase: null
});
expect(result.recoveryPassphrase).toBe("recovery-123");
+ expect(result.isSetup).toBe(true);
});
it("should throw NotFoundError for invalid token", async () => {
diff --git a/src/lib/server/services/user-service.ts b/src/lib/server/services/user-service.ts
index efb9939..3458c85 100644
--- a/src/lib/server/services/user-service.ts
+++ b/src/lib/server/services/user-service.ts
@@ -1,6 +1,6 @@
import { centralDb } from "../db";
import * as centralSchema from "../db/central-schema";
-import { eq, desc, gt, and } from "drizzle-orm";
+import { eq, desc, gt, and, count } from "drizzle-orm";
import type { InferInsertModel } from "drizzle-orm";
import z from "zod/v4";
import { NotFoundError, ValidationError } from "../utils/errors";
@@ -71,7 +71,7 @@ export class UserService {
/**
* Create a new user
*/
- static async createUser(userData: UserCreation) {
+ static async createUser(userData: UserCreation, requestUrl?: URL) {
const log = logger.setContext("UserService");
log.debug("Creating new user account", {
email: userData.email,
@@ -138,7 +138,8 @@ export class UserService {
result[0],
tenant,
result[0].token,
- 10 // 10 minutes expiration to match tokenValidUntil
+ 10, // 10 minutes expiration to match tokenValidUntil
+ requestUrl
);
log.debug("Confirmation email sent successfully", {
userId: result[0].id,
@@ -165,8 +166,9 @@ export class UserService {
/**
* Resend the confirmation email for a user
* @param email - Email of the user to confirm
+ * @param requestUrl - Optional request URL for generating correct baseUrl
*/
- static async resendConfirmationEmail(email: string): Promise
{
+ static async resendConfirmationEmail(email: string, requestUrl?: URL): Promise {
const log = logger.setContext("UserService");
log.debug("Resending confirmation email", { email });
@@ -195,7 +197,8 @@ export class UserService {
user,
tenant,
token,
- 10 // 10 minutes expiration to match tokenValidUntil
+ 10, // 10 minutes expiration to match tokenValidUntil
+ requestUrl
);
log.debug("Confirmation email sent successfully", {
userId: user.id,
@@ -221,7 +224,9 @@ export class UserService {
* Confirm and activate user after confirmation link was clicked
* @param linkToken - The token from the link
*/
- static async confirm(linkToken: string): Promise<{ recoveryPassphrase?: string }> {
+ static async confirm(
+ linkToken: string
+ ): Promise<{ recoveryPassphrase?: string; isSetup: boolean }> {
const log = logger.setContext("UserService");
log.debug("Confirming user account", { token: linkToken.substring(0, 8) + "..." });
@@ -265,6 +270,8 @@ export class UserService {
throw new NotFoundError("Failed to confirm user");
}
+ const countResult = await centralDb.select({ count: count() }).from(centralSchema.user);
+
log.debug("User account confirmed successfully", {
userId: user.id,
token: linkToken.substring(0, 8) + "...",
@@ -272,7 +279,8 @@ export class UserService {
});
return {
- recoveryPassphrase: user.recoveryPassphrase || undefined
+ recoveryPassphrase: user.recoveryPassphrase || undefined,
+ isSetup: countResult[0].count === 1
};
} catch (error) {
if (error instanceof NotFoundError) throw error;
diff --git a/src/lib/utils/passkey.ts b/src/lib/utils/passkey.ts
new file mode 100644
index 0000000..f40258b
--- /dev/null
+++ b/src/lib/utils/passkey.ts
@@ -0,0 +1,109 @@
+export const arrayBufferToBase64 = (buffer: ArrayBuffer): string => {
+ const bytes = new Uint8Array(buffer);
+ let binary = "";
+
+ // Simple loop, no fancy operations
+ for (let i = 0; i < bytes.length; i++) {
+ binary += String.fromCharCode(bytes[i]);
+ }
+
+ return window.btoa(binary);
+};
+
+export function base64ToArrayBuffer(base64: string) {
+ const binaryString = atob(base64);
+ const bytes = new Uint8Array(binaryString.length);
+ for (let i = 0; i < binaryString.length; i++) {
+ bytes[i] = binaryString.charCodeAt(i);
+ }
+ return bytes.buffer;
+}
+
+export const fetchChallenge = async (email: string) => {
+ const resp = await fetch("/api/auth/challenge", {
+ method: "POST",
+ headers: {
+ "Content-Type": "application/json"
+ },
+ body: JSON.stringify({ email })
+ });
+
+ try {
+ const data = await resp.json();
+ return {
+ id: data.rpId,
+ challenge: data.challenge
+ };
+ } catch {
+ return null;
+ }
+};
+
+export type GeneratePasskeyResponse = {
+ response: AuthenticatorAttestationResponse;
+ id: string;
+ getClientExtensionResults: () => { deviceName?: string };
+} | null;
+export const generatePasskey = async ({
+ id,
+ challenge,
+ email
+}: {
+ id: string;
+ challenge: string;
+ email: string;
+}): Promise => {
+ const publicKey: PublicKeyCredentialCreationOptions = {
+ challenge: base64ToArrayBuffer(challenge),
+ rp: {
+ id,
+ name: "Open Reception"
+ },
+ user: {
+ id: new Uint8Array(16),
+ name: email,
+ displayName: email
+ },
+ pubKeyCredParams: [
+ { alg: -7, type: "public-key" } // ES256
+ ]
+ };
+ return (await navigator.credentials.create({ publicKey })) as GeneratePasskeyResponse;
+};
+
+export type GetCredentialResponse = PublicKeyCredential & {
+ response: PublicKeyCredential;
+ id: string;
+};
+export const getCredential = async ({
+ id,
+ challenge,
+ email
+}: {
+ id: string;
+ challenge: string;
+ email: string;
+}) => {
+ const publicKey: PublicKeyCredentialCreationOptions = {
+ challenge: base64ToArrayBuffer(challenge),
+ rp: {
+ id,
+ name: "Open Reception"
+ },
+ user: {
+ id: new Uint8Array(16),
+ name: email,
+ displayName: email
+ },
+ pubKeyCredParams: [
+ { alg: -7, type: "public-key" } // ES256
+ ]
+ };
+ return (await navigator.credentials.get({ publicKey })) as GetCredentialResponse;
+};
+
+export const getCounterFromAuthenticatorData = (authenticatorData: ArrayBuffer) => {
+ const view = new DataView(authenticatorData);
+ // Counter is at offset 33, 4 bytes, big-endian
+ return view.getUint32(33, false); // false = big-endian
+};
diff --git a/src/routes/(pages)/+layout.svelte b/src/routes/(pages)/+layout.svelte
index 4b048da..a7f5835 100644
--- a/src/routes/(pages)/+layout.svelte
+++ b/src/routes/(pages)/+layout.svelte
@@ -1,7 +1,8 @@
+
{@render children()}
diff --git a/src/routes/(pages)/+page.server.ts b/src/routes/(pages)/+page.server.ts
index e8d4d7c..347fa94 100644
--- a/src/routes/(pages)/+page.server.ts
+++ b/src/routes/(pages)/+page.server.ts
@@ -1,4 +1,16 @@
+import { ROUTES } from "$lib/const/routes.js";
+import { UserService } from "$lib/server/services/user-service";
+import { redirect } from "@sveltejs/kit";
+
export const load = async (event) => {
+ // Check if global admin exists
+ // If not, redirect to setup page
+ const adminExists = await UserService.adminExists();
+ if (!adminExists) {
+ redirect(302, ROUTES.SETUP.MAIN);
+ }
+
+ // Dummy placeholder for streaming data
const fetchEnvOk = async () => {
const response = await event.fetch("/api/env");
try {
diff --git a/src/routes/(pages)/+page.svelte b/src/routes/(pages)/+page.svelte
index 5cb8e51..e16f841 100644
--- a/src/routes/(pages)/+page.svelte
+++ b/src/routes/(pages)/+page.svelte
@@ -1,6 +1,4 @@
+
+
+ {m["confirm.title"]()} - OpenReception
+
+
+
+
+
+ {#await data.streaming.confirmation}
+
+ {:then confirmation}
+ {#if confirmation.success}
+ {#if confirmation.isSetup}
+
+ {:else}
+
+ {/if}
+ {:else}
+
+ {/if}
+ {/await}
+
+
+ {#await data.streaming.confirmation}
+
+
+
+ {:then confirmation}
+ {#if confirmation.success}
+ {#if confirmation.isSetup}
+
+ {m["setup.confirm.success.hint"]()}
+
+
+ {:else}
+
+ {/if}
+ {:else}
+
+ {/if}
+ {/await}
+
+
+
diff --git a/src/routes/(pages)/confirm/resend/+page.server.ts b/src/routes/(pages)/confirm/resend/+page.server.ts
new file mode 100644
index 0000000..c215441
--- /dev/null
+++ b/src/routes/(pages)/confirm/resend/+page.server.ts
@@ -0,0 +1,33 @@
+import { fail } from "@sveltejs/kit";
+import { superValidate } from "sveltekit-superforms";
+import { zod } from "sveltekit-superforms/adapters";
+import type { Actions, PageServerLoad } from "./$types";
+import { formSchema } from "./schema";
+
+export const load: PageServerLoad = async () => {
+ return {
+ form: await superValidate(zod(formSchema))
+ };
+};
+
+export const actions: Actions = {
+ default: async (event) => {
+ const form = await superValidate(event, zod(formSchema));
+
+ if (!form.valid) {
+ return fail(400, {
+ form
+ });
+ }
+
+ await event.fetch("/api/auth/resend-confirmation", {
+ method: "POST",
+ headers: {
+ "Content-Type": "application/json"
+ },
+ body: JSON.stringify({ email: form.data.email })
+ });
+
+ return { form };
+ }
+};
diff --git a/src/routes/(pages)/confirm/resend/+page.svelte b/src/routes/(pages)/confirm/resend/+page.svelte
new file mode 100644
index 0000000..a65b080
--- /dev/null
+++ b/src/routes/(pages)/confirm/resend/+page.svelte
@@ -0,0 +1,53 @@
+
+
+
+ {m["confirm.resend.title"]()} - OpenReception
+
+
+
+
+
+
+ {m["confirm.resend.title"]()}
+
+
+ {m["confirm.resend.description"]()}
+
+
+
+
+
+
+
+ {m["confirm.resend.action"]()}
+
+
+
+
diff --git a/src/routes/(pages)/confirm/resend/resend-confirmation-form.svelte b/src/routes/(pages)/confirm/resend/resend-confirmation-form.svelte
new file mode 100644
index 0000000..d506b48
--- /dev/null
+++ b/src/routes/(pages)/confirm/resend/resend-confirmation-form.svelte
@@ -0,0 +1,43 @@
+
+
+
+
+
+ {#snippet children({ props })}
+ {m["form.email"]()}
+
+ {/snippet}
+
+
+
+
diff --git a/src/routes/(pages)/confirm/resend/schema.ts b/src/routes/(pages)/confirm/resend/schema.ts
new file mode 100644
index 0000000..9c07ee8
--- /dev/null
+++ b/src/routes/(pages)/confirm/resend/schema.ts
@@ -0,0 +1,8 @@
+import { m } from "$i18n/messages";
+import { z } from "zod";
+
+export const formSchema = z.object({
+ email: z.string().email(m["form.errors.email"]())
+});
+
+export type FormSchema = typeof formSchema;
diff --git a/src/routes/(pages)/dashboard/+page.svelte b/src/routes/(pages)/dashboard/+page.svelte
new file mode 100644
index 0000000..f29a407
--- /dev/null
+++ b/src/routes/(pages)/dashboard/+page.svelte
@@ -0,0 +1,2 @@
+Hello from Dashboard
+Logout
diff --git a/src/routes/(pages)/login/+page.server.ts b/src/routes/(pages)/login/+page.server.ts
new file mode 100644
index 0000000..b2699d0
--- /dev/null
+++ b/src/routes/(pages)/login/+page.server.ts
@@ -0,0 +1,63 @@
+import { fail } from "@sveltejs/kit";
+import { superValidate } from "sveltekit-superforms";
+import { zod } from "sveltekit-superforms/adapters";
+import type { Actions, PageServerLoad } from "./$types";
+import { formSchema } from "./schema";
+import type { WebAuthnCredential } from "$lib/server/auth/webauthn-service";
+
+export const load: PageServerLoad = async () => {
+ return {
+ form: await superValidate(zod(formSchema))
+ };
+};
+
+export const actions: Actions = {
+ default: async (event) => {
+ const form = await superValidate(event, zod(formSchema));
+
+ if (!form.valid) {
+ if (!form.valid) {
+ return fail(400, {
+ form: { ...form, data: { ...form.data, type: "passkey" } }
+ });
+ }
+ }
+
+ let body: { credential?: WebAuthnCredential; email: string; passphrase?: string } = {
+ email: form.data.email
+ };
+ if (form.data.type === "passphrase") {
+ body = { ...body, passphrase: form.data.passphrase };
+ }
+
+ if (form.data.type === "passkey") {
+ body = {
+ ...body,
+ credential: {
+ id: form.data.id,
+ response: {
+ clientDataJSON: form.data.clientDataBase64,
+ authenticatorData: form.data.authenticatorDataBase64,
+ signature: form.data.signatureBase64
+ }
+ }
+ };
+ }
+
+ const resp = await event.fetch("/api/auth/login", {
+ method: "POST",
+ headers: {
+ "Content-Type": "application/json"
+ },
+ body: JSON.stringify(body)
+ });
+
+ if (resp.status < 400) {
+ return { form };
+ } else {
+ return fail(400, {
+ form
+ });
+ }
+ }
+};
diff --git a/src/routes/(pages)/login/+page.svelte b/src/routes/(pages)/login/+page.svelte
new file mode 100644
index 0000000..24de273
--- /dev/null
+++ b/src/routes/(pages)/login/+page.svelte
@@ -0,0 +1,53 @@
+
+
+
+ {m["login.title"]()} - OpenReception
+
+
+
+
+
+
+ {m["login.title"]()}
+
+
+ {m["login.description_passphrase"]()}
+
+
+
+
+
+
+
+ {m["login.action"]()}
+
+
+
+
diff --git a/src/routes/(pages)/login/login-form.svelte b/src/routes/(pages)/login/login-form.svelte
new file mode 100644
index 0000000..d3a5183
--- /dev/null
+++ b/src/routes/(pages)/login/login-form.svelte
@@ -0,0 +1,228 @@
+
+
+
+
+
+ {#snippet children({ props })}
+
+ {/snippet}
+
+
+
+
+ {#snippet children({ props })}
+ {m["form.email"]()}
+
+ {/snippet}
+
+
+
+ {#if $formData.type === "passphrase"}
+
+
+ {#snippet children({ props })}
+ {m["form.passphrase"]()}
+
+
+ {/snippet}
+
+
+
+ {m["login.or"]()}
+
+
+
+ {/if}
+ {#if $formData.type === "passkey"}
+
+
+
+ {#snippet children({ props })}
+
+
+ {/snippet}
+
+
+
+
+ {#snippet children({ props })}
+
+
+ {/snippet}
+
+
+
+
+ {#snippet children({ props })}
+
+
+ {/snippet}
+
+
+
+
+ {#snippet children({ props })}
+
+
+ {/snippet}
+
+
+
+
+
+ {m["login.or"]()}
+ .
+
+
+ {m.welcome()}
+ {m.slogan()}
+
+
+
+
+
+
diff --git a/src/routes/(pages)/setup/check-email/+page.server.ts b/src/routes/(pages)/setup/check-email/+page.server.ts
new file mode 100644
index 0000000..4f5f243
--- /dev/null
+++ b/src/routes/(pages)/setup/check-email/+page.server.ts
@@ -0,0 +1,37 @@
+import { superValidate } from "sveltekit-superforms";
+import { zod } from "sveltekit-superforms/adapters";
+import type { Actions, PageServerLoad } from "./$types";
+import { formSchema } from "./schema";
+import { UserService } from "$lib/server/services/user-service";
+import { fail } from "@sveltejs/kit";
+import logger from "$lib/logger";
+
+const log = logger.setContext("Setup");
+
+export const load: PageServerLoad = async () => {
+ return {
+ form: await superValidate(zod(formSchema))
+ };
+};
+
+export const actions: Actions = {
+ default: async (event) => {
+ const form = await superValidate(event, zod(formSchema));
+
+ if (!form.valid) {
+ return fail(400, {
+ form
+ });
+ }
+
+ await UserService.resendConfirmationEmail(form.data.email, event.url);
+
+ log.debug("Resent confirmation e-mail", {
+ email: form.data.email
+ });
+
+ return {
+ form
+ };
+ }
+};
diff --git a/src/routes/(pages)/setup/check-email/+page.svelte b/src/routes/(pages)/setup/check-email/+page.svelte
new file mode 100644
index 0000000..5339a5f
--- /dev/null
+++ b/src/routes/(pages)/setup/check-email/+page.svelte
@@ -0,0 +1,91 @@
+
+
+
+ {m["setup.verify_email.title"]()} - OpenReception
+
+
+
+
+
+
+
+
+
+
+
+ {#snippet children({ props })}
+
+ {/snippet}
+
+
+
+ {m["setup.verify_email.action"]()}
+
+
+
+
+
diff --git a/src/routes/(pages)/setup/check-email/schema.ts b/src/routes/(pages)/setup/check-email/schema.ts
new file mode 100644
index 0000000..9c07ee8
--- /dev/null
+++ b/src/routes/(pages)/setup/check-email/schema.ts
@@ -0,0 +1,8 @@
+import { m } from "$i18n/messages";
+import { z } from "zod";
+
+export const formSchema = z.object({
+ email: z.string().email(m["form.errors.email"]())
+});
+
+export type FormSchema = typeof formSchema;
diff --git a/src/routes/(pages)/setup/create-admin-account/+page.server.ts b/src/routes/(pages)/setup/create-admin-account/+page.server.ts
new file mode 100644
index 0000000..82a6def
--- /dev/null
+++ b/src/routes/(pages)/setup/create-admin-account/+page.server.ts
@@ -0,0 +1,63 @@
+import logger from "$lib/logger";
+import { UserService } from "$lib/server/services/user-service";
+import { fail } from "@sveltejs/kit";
+import { superValidate } from "sveltekit-superforms";
+import { zod } from "sveltekit-superforms/adapters";
+import type { Actions, PageServerLoad } from "./$types";
+import { formSchema } from "./schema";
+import { base64ToArrayBuffer, getCounterFromAuthenticatorData } from "$lib/utils/passkey";
+
+const log = logger.setContext("Setup");
+
+export const load: PageServerLoad = async () => {
+ return {
+ form: await superValidate(zod(formSchema))
+ };
+};
+
+export const actions: Actions = {
+ default: async (event) => {
+ const form = await superValidate(event, zod(formSchema));
+ if (!form.valid) {
+ return fail(400, {
+ form: { ...form, data: { ...form.data, type: "passkey" } }
+ });
+ }
+
+ // Create admin account
+ const admin = await UserService.createUser(
+ {
+ name: "Admin",
+ email: form.data.email,
+ passphrase:
+ form.data.type === "passphrase" && form.data.passphrase
+ ? form.data.passphrase
+ : undefined,
+ language: form.data.language
+ },
+ event.url
+ );
+
+ if (form.data.type === "passkey") {
+ const publicKey = form.data.publicKeyBase64;
+ const authenticatorData = base64ToArrayBuffer(form.data.authenticatorDataBase64);
+ const counter = getCounterFromAuthenticatorData(authenticatorData);
+
+ await UserService.addPasskey(admin.id, {
+ id: form.data.id,
+ publicKey: publicKey,
+ counter,
+ deviceName: "Unknown Device"
+ });
+ }
+
+ log.debug("Admin account created successfully", {
+ adminId: admin.id,
+ email: admin.email,
+ authMethod: form.data.type === "passkey" ? "passkey" : "passphrase",
+ passkeyId: form.data.type === "passkey" ? form.data.id : undefined
+ });
+
+ return { form };
+ }
+};
diff --git a/src/routes/(pages)/setup/create-admin-account/+page.svelte b/src/routes/(pages)/setup/create-admin-account/+page.svelte
new file mode 100644
index 0000000..c7a3574
--- /dev/null
+++ b/src/routes/(pages)/setup/create-admin-account/+page.svelte
@@ -0,0 +1,53 @@
+
+
+
+ {m["setup.create_admin_account.title"]()} - OpenReception
+
+
+
+
+
+
+ {m["setup.create_admin_account.title"]()}
+
+
+ {m["setup.create_admin_account.description"]()}
+
+
+
+
+
+
+
+ {m["setup.create_admin_account.action"]()}
+
+
+
+
diff --git a/src/routes/(pages)/setup/create-admin-account/create-account-form.svelte b/src/routes/(pages)/setup/create-admin-account/create-account-form.svelte
new file mode 100644
index 0000000..431b79c
--- /dev/null
+++ b/src/routes/(pages)/setup/create-admin-account/create-account-form.svelte
@@ -0,0 +1,222 @@
+
+
+
+
+
+ {#snippet children({ props })}
+
+ {/snippet}
+
+
+
+
+ {#snippet children({ props })}
+
+ {/snippet}
+
+
+
+
+ {#snippet children({ props })}
+ {m["form.email"]()}
+
+ {/snippet}
+
+
+
+ {#if $formData.type === "passphrase"}
+
+
+ {#snippet children({ props })}
+ {m["form.passphrase"]()}
+
+
+ {/snippet}
+
+
+
+ {m["form.passphraseRequirements"]()}
+ {m["login.or"]()}
+ .
+
+
+ {/if}
+ {#if $formData.type === "passkey"}
+
+
+
+ {#snippet children({ props })}
+
+
+ {/snippet}
+
+
+
+
+ {#snippet children({ props })}
+
+
+ {/snippet}
+
+
+
+
+ {#snippet children({ props })}
+
+
+ {/snippet}
+
+
+
+
+
+ {m["login.or"]()}
+ .
+
+