adding authentication

2026-05-07 19:40:39 +02:00
parent 1cf8d9f664
commit f5bdf57265
7 changed files with 381 additions and 19 deletions
@@ -30,22 +30,25 @@ let editingNodeId = null;
 let editingShapeId = null;

 document.addEventListener('DOMContentLoaded', () => {
-    canvas = document.getElementById('networkCanvas');
-    ctx = canvas.getContext('2d');
-    resizeCanvas();
+    // Check auth first
+    checkSession().then(() => {
+        canvas = document.getElementById('networkCanvas');
+        ctx = canvas.getContext('2d');
+        resizeCanvas();

-    loadTeams().then(() => loadEvents());
-    loadNetworkData();
+        loadTeams().then(() => loadEvents());
+        loadNetworkData();

-    document.getElementById('saveEvent').addEventListener('click', saveEvent);
-    document.getElementById('saveNode').addEventListener('click', saveNode);
-    document.getElementById('saveLink').addEventListener('click', saveLink);
-    document.getElementById('saveShape').addEventListener('click', saveShape);
-    document.getElementById('teamFilter').addEventListener('change', renderTimeline);
-    document.getElementById('searchEvents').addEventListener('input', renderTimeline);
-    document.getElementById('shapeOpacity').addEventListener('input', (e) => {
-        document.getElementById('opacityVal').textContent = parseFloat(e.target.value).toFixed(2);
-    });
+        document.getElementById('saveEvent').addEventListener('click', saveEvent);
+        document.getElementById('saveNode').addEventListener('click', saveNode);
+        document.getElementById('saveLink').addEventListener('click', saveLink);
+        document.getElementById('saveShape').addEventListener('click', saveShape);
+        document.getElementById('addUserBtn').addEventListener('click', addUser);
+        document.getElementById('teamFilter').addEventListener('change', renderTimeline);
+        document.getElementById('searchEvents').addEventListener('input', renderTimeline);
+        document.getElementById('shapeOpacity').addEventListener('input', (e) => {
+            document.getElementById('opacityVal').textContent = parseFloat(e.target.value).toFixed(2);
+        });

    canvas.addEventListener('mousedown', onMouseDown);
    canvas.addEventListener('mousemove', onMouseMove);
@@ -882,6 +885,76 @@ function esc(s) {
    return div.innerHTML;
 }

+// ==================== AUTH / SESSION ====================
+let currentUser = null;
+let currentRole = null;
+
+async function checkSession() {
+    try {
+        const res = await fetch('/api/session');
+        const data = await res.json();
+        if (data.loggedin) {
+            currentUser = data.username;
+            currentRole = data.role;
+            document.getElementById('userDisplay').textContent = data.username;
+            if (data.role === 'admin' || data.admin_count === 0) {
+                document.getElementById('settingsBtn').classList.remove('d-none');
+            }
+        } else {
+            window.location.href = '/login.php';
+        }
+    } catch (e) {
+        window.location.href = '/login.php';
+    }
+}
+
+async function loadUsers() {
+    const list = document.getElementById('userList');
+    try {
+        const users = await apiFetch('settings');
+        list.innerHTML = users.map(u => `
+            <div class="d-flex justify-content-between align-items-center py-1 border-bottom border-secondary">
+                <div>
+                    <strong class="small">${esc(u.username)}</strong>
+                    <span class="badge bg-${u.role === 'admin' ? 'warning' : 'secondary'} ms-1" style="font-size:.6rem;">${u.role}</span>
+                    <div class="text-secondary" style="font-size:.7rem;">${u.user_token.substring(0, 16)}...</div>
+                </div>
+                ${u.role !== 'admin' ? `<button class="btn btn-outline-danger btn-sm py-0 px-1" onclick="removeUser(${u.id})"><i class="fas fa-times" style="font-size:.7rem;"></i></button>` : ''}
+            </div>
+        `).join('');
+    } catch (e) {
+        list.innerHTML = '<div class="text-danger small">Failed to load users</div>';
+    }
+}
+
+async function addUser() {
+    const token = document.getElementById('addUserToken').value.trim();
+    if (!token) return;
+    try {
+        const res = await apiFetch('settings', { method: 'POST', body: JSON.stringify({ user_token: token }) });
+        if (res.status === 'success') {
+            document.getElementById('addUserToken').value = '';
+            loadUsers();
+        } else {
+            alert(res.error || 'Failed to add user');
+        }
+    } catch (e) {
+        alert('Failed to add user');
+    }
+}
+
+async function removeUser(id) {
+    if (!confirm('Remove this user?')) return;
+    try {
+        await apiFetch('settings', { method: 'DELETE', body: JSON.stringify({ id }) });
+        loadUsers();
+    } catch (e) {
+        alert('Failed to remove user');
+    }
+}
+
+document.getElementById('settingsModal').addEventListener('show.bs.modal', loadUsers);
+
 if (!CanvasRenderingContext2D.prototype.roundRect) {
    CanvasRenderingContext2D.prototype.roundRect = function(x, y, w, h, r) {
        if (r > w / 2) r = w / 2;