feat: public events/polls, friends graph, captcha, SSE hardening, and admin UX

Ship product gaps: register/vote pages, friend add/accept/decline/remove, email verify TTL, captcha on login/forgot, soft-fail user actions, SSE abort/shared client, Commando Centrum error toasts, admin delete for events/polls, and IT/NL i18n fills.

Co-authored-by: Cursor <[email protected]>

src/components/auth/home-login-form.tsx

@@ -3,8 +3,19 @@
 import { signIn } from "next-auth/react";
 import { type FormEvent, useState } from "react";
 import { precheckLogin } from "@/actions/auth-precheck";
+import {
+	CaptchaWidget,
+	type CaptchaPublicConfig,
+	readCaptchaToken,
+} from "@/components/auth/captcha-widget";
 
-export function HomeLoginForm() {
+export function HomeLoginForm({
+	captcha = { provider: "none" },
+	nonce,
+}: {
+	captcha?: CaptchaPublicConfig;
+	nonce?: string;
+} = {}) {
 	const [username, setUsername] = useState("");
 	const [password, setPassword] = useState("");
 	const [code, setCode] = useState("");
@@ -12,17 +23,26 @@ export function HomeLoginForm() {
 	const [error, setError] = useState<string | null>(null);
 	const [pending, setPending] = useState(false);
 
-	async function onSubmit(e: FormEvent) {
+	async function onSubmit(e: FormEvent<HTMLFormElement>) {
 		e.preventDefault();
 		setError(null);
 		setPending(true);
 		try {
 			if (!needs2fa) {
-				const pre = await precheckLogin(username, password);
+				const captchaToken = readCaptchaToken(e.currentTarget, captcha);
+				const pre = await precheckLogin(username, password, captchaToken);
 				if (pre === "invalid") {
 					setError("Invalid username or password");
 					return;
 				}
+				if (pre === "captcha") {
+					setError("Captcha verification failed. Please try again.");
+					return;
+				}
+				if (pre === "unverified") {
+					setError("Please verify your email before signing in.");
+					return;
+				}
 				if (pre === "twofactor") {
 					setNeeds2fa(true);
 					return;
@@ -52,7 +72,10 @@ export function HomeLoginForm() {
 			className="relative flex flex-col gap-6 rounded-lg bg-gray-100 p-3 dark:bg-gray-800"
 		>
 			<fieldset className="flex w-full flex-col gap-1">
-				<label htmlFor="login-username" className="block font-semibold text-gray-700 dark:text-gray-200">
+				<label
+					htmlFor="login-username"
+					className="block font-semibold text-gray-700 dark:text-gray-200"
+				>
 					Username
 				</label>
 				<input
@@ -68,7 +91,10 @@ export function HomeLoginForm() {
 				/>
 			</fieldset>
 			<fieldset className="flex w-full flex-col gap-1">
-				<label htmlFor="login-password" className="block font-semibold text-gray-700 dark:text-gray-200">
+				<label
+					htmlFor="login-password"
+					className="block font-semibold text-gray-700 dark:text-gray-200"
+				>
 					Password
 				</label>
 				<input
@@ -85,7 +111,10 @@ export function HomeLoginForm() {
 			</fieldset>
 			{needs2fa ? (
 				<fieldset className="flex w-full flex-col gap-1">
-					<label htmlFor="login-2fa" className="block font-semibold text-gray-700 dark:text-gray-200">
+					<label
+						htmlFor="login-2fa"
+						className="block font-semibold text-gray-700 dark:text-gray-200"
+					>
 						2FA Code
 					</label>
 					<input
@@ -99,7 +128,9 @@ export function HomeLoginForm() {
 						style={{ borderColor: "#e5e7eb", borderWidth: "4px" }}
 					/>
 				</fieldset>
-			) : null}
+			) : (
+				<CaptchaWidget captcha={captcha} nonce={nonce} />
+			)}
 			{error ? (
 				<p className="m-0 text-center text-sm text-red-600 dark:text-red-400">
 					{error}