3m-portal/auth.js

async function handleLogin() {
    const email        = document.getElementById('email').value.trim();
    const password     = document.getElementById('password').value;
    const errorMessage = document.getElementById('errorMessage');
    const loginButton  = document.getElementById('loginButton');
    const buttonText   = document.getElementById('loginButtonText');
    const spinner      = document.getElementById('loginSpinner');

    errorMessage.style.display = 'none';

    if (!email || !password) {
        errorMessage.textContent   = 'Please enter your email and password.';
        errorMessage.style.display = 'block';
        return;
    }

    loginButton.disabled   = true;
    buttonText.textContent = 'Signing in...';
    spinner.style.display  = 'inline-block';

    try {
        const res  = await fetch('/api/auth/login', {
            method:  'POST',
            headers: { 'Content-Type': 'application/json' },
            body:    JSON.stringify({ email, password }),
        });
        const data = await res.json();

        if (!res.ok) {
            throw new Error(data.error || 'Login failed');
        }

        if (data.mustChangePassword) {
            window.location.href = 'change-password.html';
        } else {
            window.location.href = 'dashboard.html';
        }
    } catch (error) {
        errorMessage.textContent   = error.message || 'An error occurred. Please try again.';
        errorMessage.style.display = 'block';
        loginButton.disabled       = false;
        buttonText.textContent     = 'Sign In';
        spinner.style.display      = 'none';
    }
}

document.getElementById('loginButton').addEventListener('click', handleLogin);