3m-portal/accept-invite.js

const token = new URLSearchParams(window.location.search).get('token');

document.addEventListener('DOMContentLoaded', async () => {
    const loading      = document.getElementById('loading');
    const invalidState = document.getElementById('invalidState');
    const inviteForm   = document.getElementById('inviteForm');
    const inviteEmail  = document.getElementById('inviteEmail');

    if (!token) {
        loading.style.display      = 'none';
        invalidState.style.display = 'block';
        return;
    }

    try {
        const res  = await fetch(`/api/auth/invite-info?token=${encodeURIComponent(token)}`);
        const data = await res.json();

        loading.style.display = 'none';
        if (!data.valid) {
            invalidState.style.display = 'block';
            return;
        }
        inviteEmail.textContent    = `Setting up account for: ${data.email}`;
        inviteForm.style.display   = 'block';
    } catch {
        loading.style.display      = 'none';
        invalidState.style.display = 'block';
    }
});

async function handleAcceptInvite() {
    const newPass      = document.getElementById('newPassword').value;
    const confirm      = document.getElementById('confirmPassword').value;
    const errorMessage = document.getElementById('errorMessage');
    const submitBtn    = document.getElementById('submitBtn');
    const submitText   = document.getElementById('submitText');
    const spinner      = document.getElementById('submitSpinner');

    errorMessage.style.display = 'none';

    if (newPass !== confirm) {
        errorMessage.textContent   = 'Passwords do not match.';
        errorMessage.style.display = 'block';
        return;
    }
    if (newPass.length < 10) {
        errorMessage.textContent   = 'Password must be at least 10 characters.';
        errorMessage.style.display = 'block';
        return;
    }

    submitBtn.disabled     = true;
    submitText.textContent = 'Creating account...';
    spinner.style.display  = 'inline-block';

    try {
        const res  = await fetch('/api/auth/accept-invite', {
            method:  'POST',
            headers: { 'Content-Type': 'application/json' },
            body:    JSON.stringify({ token, password: newPass }),
        });
        const data = await res.json();
        if (!res.ok) throw new Error(data.error || 'Failed to accept invitation');
        window.location.href = 'dashboard.html';
    } catch (err) {
        errorMessage.textContent   = err.message;
        errorMessage.style.display = 'block';
        submitBtn.disabled         = false;
        submitText.textContent     = 'Create Account';
        spinner.style.display      = 'none';
    }
}

document.getElementById('submitBtn')?.addEventListener('click', handleAcceptInvite);
document.getElementById('inviteForm')?.addEventListener('keydown', e => {
    if (e.key === 'Enter') handleAcceptInvite();
});