fix: inline webauthn imports in click handlers only — no module-level import

Author: ralyodio

src/app/login/LoginForm.tsx

@@ -3,11 +3,6 @@
 import { useState } from 'react';
 import Link from 'next/link';
 import { useRouter, useSearchParams } from 'next/navigation';
-// Dynamic import to prevent SSR/hydration crashes
-const startAuthentication = async (opts: any) => {
-  const { startAuthentication: fn } = await import('@simplewebauthn/browser');
-  return fn(opts);
-};
 
 export default function LoginForm() {
   const router = useRouter();
@@ -166,6 +161,7 @@ export default function LoginForm() {
               }
 
               // 2. Browser WebAuthn prompt
+              const { startAuthentication } = await import('@simplewebauthn/browser');
               const credential = await startAuthentication({ optionsJSON: optData.options });
 
               // 3. Verify with server

src/app/settings/security/page.tsx

@@ -4,11 +4,7 @@ import { useState, useEffect } from 'react';
 import { useRouter } from 'next/navigation';
 import Link from 'next/link';
 import { authFetch } from '@/lib/auth/client';
-// Dynamic import to prevent SSR/hydration crashes
-const startRegistration = async (opts: any) => {
-  const { startRegistration: fn } = await import('@simplewebauthn/browser');
-  return fn(opts);
-};
+
 
 interface Passkey {
   id: string;
@@ -70,6 +66,7 @@ export default function SecuritySettingsPage() {
       }
 
       // 2. Start WebAuthn registration (browser prompt)
+      const { startRegistration } = await import('@simplewebauthn/browser');
       const credential = await startRegistration({ optionsJSON: optResult.data.options });
 
       // 3. Verify with server