feat: Implement standalone admin at /admin with custom login page and auth system

admin-spa/src/App.tsx

@@ -1,5 +1,5 @@
 import React, { useEffect, useState } from 'react';
-import { HashRouter, Routes, Route, NavLink, useLocation, useParams } from 'react-router-dom';
+import { HashRouter, Routes, Route, NavLink, useLocation, useParams, Navigate } from 'react-router-dom';
 import Dashboard from '@/routes/Dashboard';
 import DashboardRevenue from '@/routes/Dashboard/Revenue';
 import DashboardOrders from '@/routes/Dashboard/Orders';
@@ -19,6 +19,7 @@ import ProductAttributes from '@/routes/Products/Attributes';
 import CouponsIndex from '@/routes/Coupons';
 import CouponNew from '@/routes/Coupons/New';
 import CustomersIndex from '@/routes/Customers';
+import { Login } from '@/routes/Login';
 import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
 import { LayoutDashboard, ReceiptText, Package, Tag, Users, Settings as SettingsIcon, Maximize2, Minimize2, Loader2 } from 'lucide-react';
 import { Toaster } from 'sonner';
@@ -394,13 +395,63 @@ function Shell() {
   );
 }
 
+function AuthWrapper() {
+  const [isAuthenticated, setIsAuthenticated] = useState(
+    window.WNW_CONFIG?.isAuthenticated ?? true
+  );
+  const [isChecking, setIsChecking] = useState(window.WNW_CONFIG?.standaloneMode ?? false);
+  const location = useLocation();
+
+  useEffect(() => {
+    if (window.WNW_CONFIG?.standaloneMode) {
+      fetch(window.WNW_CONFIG.restUrl + '/auth/check', {
+        credentials: 'include',
+      })
+        .then(res => res.json())
+        .then(data => {
+          setIsAuthenticated(data.authenticated);
+          if (data.authenticated && data.user) {
+            window.WNW_CONFIG.currentUser = data.user;
+          }
+        })
+        .catch(() => setIsAuthenticated(false))
+        .finally(() => setIsChecking(false));
+    }
+  }, []);
+
+  if (isChecking) {
+    return (
+      <div className="flex items-center justify-center min-h-screen">
+        <Loader2 className="w-12 h-12 animate-spin text-primary" />
+      </div>
+    );
+  }
+
+  if (window.WNW_CONFIG?.standaloneMode && !isAuthenticated && location.pathname !== '/login') {
+    return <Navigate to="/login" replace />;
+  }
+
+  if (location.pathname === '/login' && isAuthenticated) {
+    return <Navigate to="/dashboard" replace />;
+  }
+
+  return (
+    <DashboardProvider>
+      <Shell />
+    </DashboardProvider>
+  );
+}
+
 export default function App() {
   return (
     <QueryClientProvider client={qc}>
       <HashRouter>
-        <DashboardProvider>
-          <Shell />
-        </DashboardProvider>
+        <Routes>
+          {window.WNW_CONFIG?.standaloneMode && (
+            <Route path="/login" element={<Login />} />
+          )}
+          <Route path="/*" element={<AuthWrapper />} />
+        </Routes>
         <Toaster
           richColors
           theme="light"

admin-spa/src/components/ui/alert.tsx

@@ -0,0 +1,59 @@
+import * as React from "react"
+import { cva, type VariantProps } from "class-variance-authority"
+
+import { cn } from "@/lib/utils"
+
+const alertVariants = cva(
+  "relative w-full rounded-lg border p-4 [&>svg~*]:pl-7 [&>svg+div]:translate-y-[-3px] [&>svg]:absolute [&>svg]:left-4 [&>svg]:top-4 [&>svg]:text-foreground",
+  {
+    variants: {
+      variant: {
+        default: "bg-background text-foreground",
+        destructive:
+          "border-destructive/50 text-destructive dark:border-destructive [&>svg]:text-destructive",
+      },
+    },
+    defaultVariants: {
+      variant: "default",
+    },
+  }
+)
+
+const Alert = React.forwardRef<
+  HTMLDivElement,
+  React.HTMLAttributes<HTMLDivElement> & VariantProps<typeof alertVariants>
+>(({ className, variant, ...props }, ref) => (
+  <div
+    ref={ref}
+    role="alert"
+    className={cn(alertVariants({ variant }), className)}
+    {...props}
+  />
+))
+Alert.displayName = "Alert"
+
+const AlertTitle = React.forwardRef<
+  HTMLParagraphElement,
+  React.HTMLAttributes<HTMLHeadingElement>
+>(({ className, ...props }, ref) => (
+  <h5
+    ref={ref}
+    className={cn("mb-1 font-medium leading-none tracking-tight", className)}
+    {...props}
+  />
+))
+AlertTitle.displayName = "AlertTitle"
+
+const AlertDescription = React.forwardRef<
+  HTMLParagraphElement,
+  React.HTMLAttributes<HTMLParagraphElement>
+>(({ className, ...props }, ref) => (
+  <div
+    ref={ref}
+    className={cn("text-sm [&_p]:leading-relaxed", className)}
+    {...props}
+  />
+))
+AlertDescription.displayName = "AlertDescription"
+
+export { Alert, AlertTitle, AlertDescription }

admin-spa/src/routes/Login.tsx

@@ -0,0 +1,153 @@
+import React, { useState } from 'react';
+import { useNavigate } from 'react-router-dom';
+import { Button } from '@/components/ui/button';
+import { Input } from '@/components/ui/input';
+import { Label } from '@/components/ui/label';
+import { Alert, AlertDescription } from '@/components/ui/alert';
+import { Loader2, ArrowLeft } from 'lucide-react';
+import { __ } from '@/lib/i18n';
+
+export function Login() {
+  const [username, setUsername] = useState('');
+  const [password, setPassword] = useState('');
+  const [isLoading, setIsLoading] = useState(false);
+  const [error, setError] = useState('');
+  const navigate = useNavigate();
+
+  const handleLogin = async (e: React.FormEvent) => {
+    e.preventDefault();
+    setIsLoading(true);
+    setError('');
+
+    try {
+      const response = await fetch(window.WNW_CONFIG.restUrl + '/auth/login', {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json',
+        },
+        credentials: 'include',
+        body: JSON.stringify({ username, password }),
+      });
+
+      const data = await response.json();
+
+      if (response.ok && data.success) {
+        // Update global config
+        window.WNW_CONFIG.isAuthenticated = true;
+        window.WNW_CONFIG.currentUser = data.user;
+        window.WNW_CONFIG.nonce = data.nonce;
+        
+        // Redirect to dashboard
+        navigate('/dashboard');
+        
+        // Reload to ensure all auth state is fresh
+        window.location.reload();
+      } else {
+        setError(data.message || __('Invalid username or password'));
+      }
+    } catch (err) {
+      console.error('Login error:', err);
+      setError(__('Login failed. Please try again.'));
+    } finally {
+      setIsLoading(false);
+    }
+  };
+
+  return (
+    <div className="min-h-screen flex items-center justify-center bg-gradient-to-br from-blue-50 to-indigo-100 dark:from-gray-900 dark:to-gray-800 p-4">
+      <div className="w-full max-w-md">
+        <div className="bg-white dark:bg-gray-800 rounded-lg shadow-xl p-8">
+          {/* Logo */}
+          <div className="text-center mb-8">
+            <h1 className="text-3xl font-bold text-gray-900 dark:text-white">
+              WooNooW
+            </h1>
+            <p className="text-gray-600 dark:text-gray-400 mt-2">
+              {__('Sign in to your admin dashboard')}
+            </p>
+          </div>
+
+          {/* Error Alert */}
+          {error && (
+            <Alert variant="destructive" className="mb-6">
+              <AlertDescription>{error}</AlertDescription>
+            </Alert>
+          )}
+
+          {/* Login Form */}
+          <form onSubmit={handleLogin} className="space-y-6">
+            <div>
+              <Label htmlFor="username">{__('Username or Email')}</Label>
+              <Input
+                id="username"
+                type="text"
+                value={username}
+                onChange={(e) => setUsername(e.target.value)}
+                placeholder={__('Enter your username')}
+                required
+                disabled={isLoading}
+                className="mt-1"
+                autoComplete="username"
+              />
+            </div>
+
+            <div>
+              <Label htmlFor="password">{__('Password')}</Label>
+              <Input
+                id="password"
+                type="password"
+                value={password}
+                onChange={(e) => setPassword(e.target.value)}
+                placeholder={__('Enter your password')}
+                required
+                disabled={isLoading}
+                className="mt-1"
+                autoComplete="current-password"
+              />
+            </div>
+
+            <Button
+              type="submit"
+              className="w-full"
+              disabled={isLoading}
+            >
+              {isLoading ? (
+                <>
+                  <Loader2 className="mr-2 h-4 w-4 animate-spin" />
+                  {__('Signing in...')}
+                </>
+              ) : (
+                __('Sign In')
+              )}
+            </Button>
+          </form>
+
+          {/* Footer Links */}
+          <div className="mt-6 space-y-3">
+            <a
+              href={window.WNW_CONFIG.wpAdminUrl}
+              className="flex items-center justify-center gap-2 text-sm text-blue-600 hover:text-blue-700 dark:text-blue-400 transition-colors"
+            >
+              <ArrowLeft className="w-4 h-4" />
+              {__('Back to WordPress Admin')}
+            </a>
+            
+            <div className="text-center">
+              <a
+                href={window.WNW_CONFIG.siteUrl + '/wp-login.php?action=lostpassword'}
+                className="text-sm text-gray-600 hover:text-gray-700 dark:text-gray-400 transition-colors"
+              >
+                {__('Forgot password?')}
+              </a>
+            </div>
+          </div>
+        </div>
+
+        {/* Site Info */}
+        <div className="text-center mt-6 text-sm text-gray-600 dark:text-gray-400">
+          {window.WNW_CONFIG.siteName}
+        </div>
+      </div>
+    </div>
+  );
+}