Files
t5de-hub/apps/web/app/account/page.tsx
T
dhkatz d5cd2be5d0
Release / release (push) Successful in 4s
CI / test (push) Successful in 1m19s
CI / image (apps/api/Dockerfile, t5de-hub-api) (push) Successful in 7s
CI / image (apps/web/Dockerfile, t5de-hub-web) (push) Successful in 20s
feat: age verification with an ID document (Didit), and closed registration (#4)
## Age verification with Didit

A new provider (`apps/api/src/age/didit.ts`) behind the existing vendor-neutral age interface. A person verifies once with an ID document, a passive liveness check and a face match; after that, all their linked IMVU accounts count as adult. The hub keeps only "over 18": never the document, photo or birth date.

- Webhooks are checked against Didit's signatures (the raw body or V2, with `-Previous` during secret rotation), and old ones are rejected. If the webhook has no decision, the hub fetches it from Didit.
- A later answer replaces an earlier one. An approval that's taken back (say, after a manual review) becomes `revoked`. A check still in review stays pending.
- Limits, for every provider: one unfinished check per person (starting again resumes it), at most 3 checks in 30 days, none once verified, and a monthly cap (`DIDIT_MONTHLY_LIMIT`, default 30: since 2026-11-01, Didit's free plan is $10 of credit a month, and a check costs $0.30).
- People are only ever sent back to the hub's website.
- The Account page gets an Age Verification card.
- Configuration: `AGE_PROVIDERS=imvu,didit`, `DIDIT_API_KEY`, `DIDIT_WORKFLOW_ID`, `DIDIT_WEBHOOK_SECRET`. The webhook is `<API_URL>/api/v1/age/webhook/didit`.

## Closed registration

Registration is open or closed. It's an admin's setting in the console, with its default from `REGISTRATION`.

- When it's closed, new accounts can only sign in until a moderator approves them, or declines them (which deletes the account).
- The website shows people who are waiting a waiting page, and the API treats them as signed out everywhere but `/me`.
- The console gets a Waiting count, a Waiting for approval filter, Approve and Decline on a person's page, and a Registration setting.
- The migration adds `user.approved` (existing accounts stay approved) and `hub_setting`.

## Testing

- New tests cover Didit (with a fake Didit server), the limits, revocation, return addresses and registration.
- `bun run test`: 35 pass. `bun run check-types` passes.
- Checked locally: the account, waiting, sign-up and console pages render.
- Not run against Didit itself yet. The sandbox workflow "T5DE Age Check" is published, and the next step is a real webhook once this is on staging.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

## Age verification with Didit

A new provider (`apps/api/src/age/didit.ts`) behind the existing vendor-neutral age interface. A person verifies once with an ID document, a passive liveness check and a face match; after that, all their linked IMVU accounts count as adult. The hub keeps only "over 18": never the document, photo or birth date.

- Webhooks are checked against Didit's signatures (the raw body or V2, with `-Previous` during secret rotation), and old ones are rejected. If the webhook has no decision, the hub fetches it from Didit.
- A later answer replaces an earlier one. An approval that's taken back (say, after a manual review) becomes `revoked`. A check still in review stays pending.
- Limits, for every provider: one unfinished check per person (starting again resumes it), at most 3 checks in 30 days, none once verified, and a monthly cap (`DIDIT_MONTHLY_LIMIT`, default 30: since 2026-11-01, Didit's free plan is $10 of credit a month, and a check costs $0.30).
- People are only ever sent back to the hub's website.
- The Account page gets an Age Verification card.
- Configuration: `AGE_PROVIDERS=imvu,didit`, `DIDIT_API_KEY`, `DIDIT_WORKFLOW_ID`, `DIDIT_WEBHOOK_SECRET`. The webhook is `<API_URL>/api/v1/age/webhook/didit`.

## Closed registration

Registration is open or closed. It's an admin's setting in the console, with its default from `REGISTRATION`.

- When it's closed, new accounts can only sign in until a moderator approves them, or declines them (which deletes the account).
- The website shows people who are waiting a waiting page, and the API treats them as signed out everywhere but `/me`.
- The console gets a Waiting count, a Waiting for approval filter, Approve and Decline on a person's page, and a Registration setting.
- The migration adds `user.approved` (existing accounts stay approved) and `hub_setting`.

## Testing

- New tests cover Didit (with a fake Didit server), the limits, revocation, return addresses and registration.
- `bun run test`: 35 pass. `bun run check-types` passes.
- Checked locally: the account, waiting, sign-up and console pages render.
- Not run against Didit itself yet. The sandbox workflow "T5DE Age Check" is published, and the next step is a real webhook once this is on staging.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: dhkatz <[email protected]>
2026-11-04 11:37:21 +00:00

122 lines
4.5 KiB
TypeScript

import type { Metadata } from "next";
import Link from "next/link";
import { redirect } from "next/navigation";
import { ActionForm, SubmitButton } from "@/components/forms";
import { PageHeader, Tag } from "@/components/status";
import { Alert, AlertDescription, AlertTitle } from "@/components/ui/alert";
import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
import { Input } from "@/components/ui/input";
import { api, getMe, isModerator, unwrap } from "@/lib/api";
import { linkAccount, signOutComputers } from "./actions";
import { AgeCard } from "./age-card";
import { ChallengeCard } from "./challenge-card";
import { LinkCard } from "./link-card";
export const metadata: Metadata = { title: "Account" };
export default async function Account({ searchParams }: { searchParams: Promise<{ welcome?: string; age?: string }> }) {
const me = await getMe();
if (!me) redirect("/signin?next=/account");
const [account, age] = await Promise.all([api.account.get().then(unwrap), api.age.get().then(unwrap)]);
const { person, links, challenges, computers } = account;
const params = await searchParams;
const welcome = params.welcome !== undefined;
return (
<div className="space-y-6">
<PageHeader title="Your account">
<span className="flex flex-wrap items-center gap-2">
Signed in as {person.username}
{isModerator(person) && <Tag tone="strong">{person.role}</Tag>}
</span>
</PageHeader>
{welcome && (
<Alert>
<AlertTitle>Welcome to T5DE, {person.username}.</AlertTitle>
<AlertDescription>Link an IMVU account below to get started.</AlertDescription>
</Alert>
)}
<Card>
<CardHeader>
<CardTitle>IMVU accounts</CardTitle>
<CardDescription>
{links.length} of {person.linkCap}
</CardDescription>
</CardHeader>
<CardContent>
{links.length > 0 ? (
<ul className="divide-y">
{links.map((link) => (
<LinkCard key={link.imvuId} link={link} />
))}
</ul>
) : (
<p className="text-sm text-muted-foreground">No IMVU accounts linked yet.</p>
)}
</CardContent>
</Card>
{challenges.map((c) => (
<ChallengeCard key={c.imvuId} challenge={c} />
))}
<Card>
<CardHeader>
<CardTitle>Link an IMVU account</CardTitle>
</CardHeader>
<CardContent className="space-y-4">
{account.canLink ? (
<ActionForm action={linkAccount}>
<div className="flex max-w-md gap-2">
<Input name="username" placeholder="IMVU username" required maxLength={64} aria-label="IMVU username" />
<SubmitButton pendingLabel="Looking…">Next</SubmitButton>
</div>
</ActionForm>
) : (
<p className="text-sm">
You&apos;ve linked as many IMVU accounts as you can ({person.linkCap}). Ask a moderator if you need more.
</p>
)}
<p className="text-sm text-muted-foreground">
Other people can&apos;t see which IMVU accounts are yours. Adult IMVU accounts can see adult community
products: those IMVU has age verified (or with Access Pass), or all of them once you verify your age below.
</p>
</CardContent>
</Card>
<AgeCard age={age} back={params.age === "back"} />
<Card>
<CardHeader>
<CardTitle>T5DE on your computers</CardTitle>
</CardHeader>
<CardContent className="space-y-4">
<p className="text-sm text-muted-foreground">
{computers > 0
? `Signed in on ${computers} computer${computers === 1 ? "" : "s"}.`
: "Not signed in on any computer yet."}{" "}
To sign T5DE in, it shows a code to enter at{" "}
<Link href="/device" className="text-foreground underline underline-offset-4">
/device
</Link>
.
</p>
{computers > 0 && (
<ActionForm action={signOutComputers}>
<SubmitButton
variant="outline"
pendingLabel="Signing out…"
confirm="Sign T5DE out on all your computers?"
>
Sign out everywhere
</SubmitButton>
</ActionForm>
)}
</CardContent>
</Card>
</div>
);
}