Files
accounted/components/ui/support-link.tsx
T
Jakob WennbergandClaude Opus 4.7 b9a2ce522b chore: post-bankid redirect, recapt feedback, TIC SPAR enrichment (#400)
* chore: post-bankid redirect, recapt feedback, TIC SPAR enrichment

- BankID login + register now redirect to /select-company so the picker
  shows freshly enriched CompanyRoles from the current session.
- New lib/support/submit-feedback util prefers window.recapt feedback
  widget when present, falls back to /api/support/contact. SupportLink
  uses it and hides itself in sandbox companies via new isSandbox flag
  on CompanyContext (+ useCompanyOptional hook).
- TIC enrichment re-requests SPAR alongside CompanyRoles now that both
  types are enabled on the tenant; enrichment shape logged PII-free
  (booleans/counts only). Tests cover the SPAR+CompanyRoles path.
- Skatteverket api-client: 15s AbortSignal timeout on outbound requests.
- Swedish compliance review CI: bump REVIEW_MODEL to claude-opus-4-7.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* chore: keep compliance review model on sonnet-4-6

Reverts the opus-4-7 bump from the previous commit per request.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(tic): don't persist SPAR PII to extension_data

The previous commit started requesting SPAR alongside CompanyRoles and
wrote the full enrichment payload (incl. personnummer, full name, home
address, birth date, gender) verbatim to extension_data.value — a plain
JSON column. Personnummer is already hashed + encrypted in
bankid_identities, so the extension_data row was an unencrypted PII
duplicate exposed to anyone with read access to the table.

No consumer (middleware, /select-company, createCompanyFromTicRole)
reads any SPAR field today; they only read companyRoles. Persist a
sanitized blob of { companyRoles, enrichedAtUtc } instead. SPAR is
still requested from TIC (and its shape logged PII-free) so enrichment
completes; if address pre-fill ships later, those fields should be
encrypted before storage.

Also drop the dead `null` branch from SubmitFeedbackResult.channel —
every code path returns 'recapt' or 'email'.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-06 13:43:06 +02:00

163 lines
4.5 KiB
TypeScript

'use client'
import { useState } from 'react'
import { cn } from '@/lib/utils'
import { Mail, Loader2, Send } from 'lucide-react'
import {
Dialog,
DialogContent,
DialogDescription,
DialogFooter,
DialogHeader,
DialogTitle,
DialogTrigger,
} from '@/components/ui/dialog'
import { Button } from '@/components/ui/button'
import { Textarea } from '@/components/ui/textarea'
import { useToast } from '@/components/ui/use-toast'
import { submitFeedback } from '@/lib/support/submit-feedback'
import { useCompanyOptional } from '@/contexts/CompanyContext'
interface SupportLinkProps {
variant?: 'inline' | 'muted'
subject?: string
children?: React.ReactNode
className?: string
}
export function SupportLink({
variant = 'inline',
subject,
children,
className,
}: SupportLinkProps) {
const [open, setOpen] = useState(false)
const [message, setMessage] = useState('')
const [isSending, setIsSending] = useState(false)
const [sent, setSent] = useState(false)
const { toast } = useToast()
const companyCtx = useCompanyOptional()
if (companyCtx?.isSandbox) return null
async function handleSubmit(e: React.FormEvent) {
e.preventDefault()
if (message.trim().length < 5) return
setIsSending(true)
const result = await submitFeedback({ subject, message: message.trim() })
setIsSending(false)
if (result.ok) {
setSent(true)
setTimeout(() => {
setOpen(false)
setSent(false)
setMessage('')
}, 2000)
} else {
toast({
title: 'Kunde inte skicka',
description: result.error || 'Försök igen.',
variant: 'destructive',
})
}
}
function handleOpenChange(next: boolean) {
setOpen(next)
if (!next) {
setSent(false)
setMessage('')
}
}
const trigger =
variant === 'muted' ? (
<button
type="button"
className={cn(
'inline-flex items-center gap-1.5 text-xs text-muted-foreground hover:text-foreground transition-colors cursor-pointer',
className
)}
>
<Mail className="h-3 w-3" />
{children ?? 'Kontakta support'}
</button>
) : (
<button
type="button"
className={cn(
'inline-flex items-center gap-1 text-primary hover:text-primary/80 underline-offset-4 hover:underline transition-colors text-sm cursor-pointer',
className
)}
>
{children ?? 'Kontakta support'}
</button>
)
return (
<Dialog open={open} onOpenChange={handleOpenChange}>
<DialogTrigger asChild>{trigger}</DialogTrigger>
<DialogContent className="sm:max-w-md">
<DialogHeader>
<DialogTitle>Kontakta support</DialogTitle>
<DialogDescription>
Beskriv ditt ärende så återkommer vi så snart vi kan.
</DialogDescription>
</DialogHeader>
{sent ? (
<div className="flex flex-col items-center py-6 gap-3">
<div className="p-3 rounded-full bg-success/10">
<Send className="h-6 w-6 text-success" />
</div>
<p className="text-sm font-medium">Tack! Vi har mottagit ditt meddelande.</p>
</div>
) : (
<form onSubmit={handleSubmit}>
<Textarea
value={message}
onChange={(e) => setMessage(e.target.value)}
placeholder="Beskriv vad du behöver hjälp med..."
className="min-h-[120px] resize-none"
maxLength={5000}
disabled={isSending}
autoFocus
/>
<p className="text-xs text-muted-foreground mt-1.5">
{message.length}/5000 tecken
</p>
<DialogFooter className="mt-4">
<Button
type="button"
variant="ghost"
onClick={() => setOpen(false)}
disabled={isSending}
>
Avbryt
</Button>
<Button
type="submit"
disabled={isSending || message.trim().length < 5}
>
{isSending ? (
<>
<Loader2 className="mr-2 h-4 w-4 animate-spin" />
Skickar...
</>
) : (
<>
<Send className="mr-2 h-4 w-4" />
Skicka
</>
)}
</Button>
</DialogFooter>
</form>
)}
</DialogContent>
</Dialog>
)
}