dschlueter/my_voice_assistant_v3_jamulix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

feat(2-Schritt2): Login-Link + persistentes is_admin-Flag pro Nutzer

Browse source 
- Nutzerverwaltung zeigt beim Anlegen/„Link erneuern" jetzt den vollen
  Ein-Klick-Link (location.origin/?k=<token>) statt nur des Tokens.
- Neuer Admin-Schalter pro Nutzer (DB-Spalte users.is_admin + Migration).
  is_admin_user() honoriert das Flag ODER ADMIN_USERS (SSO). Dadurch zeigt
  /me den Admin-Button anhand des Flags — Grundlage für den nginx-Cutover.
- admin.py: PUT /admin/users/{id}/admin; list_users liefert is_admin.

Migration live verifiziert (Spalte vorhanden, bestehende Admins via
ADMIN_USERS weiterhin korrekt). app.js v=45. 219 passed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Dieter Schlüter 2026-06-25 04:33:33 +02:00
commit bd55807a1c
8 changed files with 94 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

36
app/web/app.js
View file

@ -320,6 +320,12 @@ let currentUserId = null;
const sessionKey = (uid) => "va-session-" + uid;
// Sprachen (Code -> Kurzlabel) für Filter + Admin-Auswahl.
function loginLink(token) { return location.origin + "/?k=" + token; }
async function copyText(text, btn) {
try { await navigator.clipboard.writeText(text); if (btn) { const t = btn.textContent; btn.textContent = "✓ kopiert"; setTimeout(() => (btn.textContent = t), 1500); } }
catch (e) { /* Clipboard evtl. blockiert -> select-all bleibt als Fallback */ }
}
const ALL_LANGS = [["de","DE"],["en","EN"],["fr","FR"],["es","ES"],["it","IT"],
["pt","PT"],["pl","PL"],["ar","AR"],["ru","RU"],["zh","ZH"]];
@ -1013,7 +1019,7 @@ $("#create-user-form").addEventListener("submit", async (e) => {
if (!name) return;
const data = await adminFetch("/api/admin/users", "POST", { display_name: name });
if (data?.token) {
$("#new-token-value").textContent = data.token;
$("#new-token-value").textContent = loginLink(data.token);
$("#new-token-box").classList.remove("hidden");
nameEl.value = "";
loadAdminUsers();
@ -1039,14 +1045,15 @@ function buildUserCard(u) {
</div>
<div class="flex flex-wrap gap-1.5">
<button class="btn-rename text-xs rounded-lg border border-slate-300 dark:border-slate-600 px-2.5 py-1.5 hover:bg-slate-100 dark:hover:bg-slate-700 transition-colors">Umbenennen</button>
<button class="btn-token text-xs rounded-lg border border-amber-300 dark:border-amber-700 text-amber-700 dark:text-amber-300 px-2.5 py-1.5 hover:bg-amber-50 dark:hover:bg-amber-900/20 transition-colors">Token-Reset</button>
<button class="btn-admin text-xs rounded-lg border px-2.5 py-1.5 transition-colors"></button>
<button class="btn-token text-xs rounded-lg border border-amber-300 dark:border-amber-700 text-amber-700 dark:text-amber-300 px-2.5 py-1.5 hover:bg-amber-50 dark:hover:bg-amber-900/20 transition-colors">Link erneuern</button>
<button class="btn-delete text-xs rounded-lg border border-red-300 dark:border-red-800 text-red-600 dark:text-red-400 px-2.5 py-1.5 hover:bg-red-50 dark:hover:bg-red-900/20 transition-colors">Löschen</button>
</div>
</div>
<!-- Token-Anzeige nach Reset -->
<div class="token-box hidden mt-3 rounded-lg bg-amber-50 dark:bg-amber-900/30 border border-amber-200 dark:border-amber-700 p-3">
<p class="text-xs text-amber-700 dark:text-amber-300 font-medium mb-1">Neuer Token (einmalig — jetzt kopieren!):</p>
<p class="text-xs text-amber-700 dark:text-amber-300 font-medium mb-1">Neuer Login-Link (einmalig — jetzt kopieren!):</p>
<code class="token-val text-xs font-mono break-all text-amber-900 dark:text-amber-100 select-all"></code>
</div>
@ -1104,6 +1111,27 @@ function buildUserCard(u) {
}
renderLangChips();
// Admin-Rechte (persistentes Flag) ein-/ausschalten
let isAdmin = !!u.is_admin;
const adminBtn = card.querySelector(".btn-admin");
function renderAdminBtn() {
adminBtn.textContent = isAdmin ? "★ Admin" : "Admin?";
adminBtn.classList.toggle("bg-blue-600", isAdmin);
adminBtn.classList.toggle("text-white", isAdmin);
adminBtn.classList.toggle("border-blue-600", isAdmin);
adminBtn.classList.toggle("border-slate-300", !isAdmin);
adminBtn.classList.toggle("dark:border-slate-600", !isAdmin);
adminBtn.classList.toggle("text-slate-600", !isAdmin);
adminBtn.classList.toggle("dark:text-slate-300", !isAdmin);
}
renderAdminBtn();
adminBtn.addEventListener("click", async () => {
const next = !isAdmin;
if (next && !confirm(`„${u.display_name}" Admin-Rechte geben?`)) return;
const res = await adminFetch(`/api/admin/users/${uid}/admin`, "PUT", { is_admin: next });
if (res) { isAdmin = !!res.is_admin; renderAdminBtn(); }
});
// Umbenennen
card.querySelector(".btn-rename").addEventListener("click", () =>
card.querySelector(".rename-box").classList.toggle("hidden")
@ -1127,7 +1155,7 @@ function buildUserCard(u) {
if (!confirm(`Token für „${u.display_name}" zurücksetzen?\nDer alte Token wird sofort ungültig.`)) return;
const data = await adminFetch(`/api/admin/users/${uid}/token`, "POST");
if (data?.token) {
card.querySelector(".token-val").textContent = data.token;
card.querySelector(".token-val").textContent = loginLink(data.token);
card.querySelector(".token-box").classList.remove("hidden");
}
});