derekc
f1b82baebd
- Replace nav user area with display name (non-clickable), gear settings modal, admin button (admins only), and logout button - Settings modal handles display name, timezone, and password change - Add admin.html + admin.js: user table with reset PW, disable/enable, login-as (impersonation), and delete; return-to-admin flow in nav - Add is_admin to UserResponse so frontend can gate the Admin button - Fix all db.begin() bugs in admin.py and users.py (transaction already active from get_current_user query; use commit() directly instead) - Add email-validator and pin bcrypt==4.0.1 for passlib compatibility - Add escHtml() to api.js and admin API namespace - Group nav brand + links in nav-left for left-aligned layout Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
83 lines
2.7 KiB
HTML
83 lines
2.7 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
<title>Admin — Bourbonacci</title>
|
|
<link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>🥃</text></svg>" />
|
|
<link rel="stylesheet" href="/css/style.css" />
|
|
</head>
|
|
<body>
|
|
|
|
<nav>
|
|
<div class="nav-left">
|
|
<a href="/index.html" class="nav-brand">🥃 Bourbonacci</a>
|
|
<div class="nav-links" id="nav-links"></div>
|
|
</div>
|
|
<div id="nav-user"></div>
|
|
</nav>
|
|
|
|
<main>
|
|
<h1 class="page-title">Admin — User Management</h1>
|
|
|
|
<div id="msg"></div>
|
|
|
|
<div class="section-header">
|
|
<h2>All Users</h2>
|
|
<button class="btn btn-ghost btn-sm" onclick="loadUsers()">Refresh</button>
|
|
</div>
|
|
|
|
<div class="table-wrap">
|
|
<table>
|
|
<thead>
|
|
<tr>
|
|
<th>Display Name</th>
|
|
<th>Email</th>
|
|
<th>Role</th>
|
|
<th>Status</th>
|
|
<th>Joined</th>
|
|
<th>Actions</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody id="users-body">
|
|
<tr class="empty-row"><td colspan="6">Loading…</td></tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
|
|
<!-- Reset password modal -->
|
|
<div id="reset-modal" class="modal-overlay" style="display:none">
|
|
<div class="modal-box">
|
|
<h2>Reset Password</h2>
|
|
<p style="margin-bottom:1rem;color:var(--cream-dim)">Setting new password for: <strong id="reset-username"></strong></p>
|
|
<div id="reset-msg"></div>
|
|
<div class="form-group" style="margin-bottom:1rem">
|
|
<label>New Password</label>
|
|
<input type="password" id="reset-password" placeholder="Min 8 characters" />
|
|
</div>
|
|
<div style="display:flex;gap:0.5rem;justify-content:flex-end">
|
|
<button class="btn btn-ghost" onclick="hideResetModal()">Cancel</button>
|
|
<button class="btn btn-primary" onclick="submitReset()">Set Password</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Delete confirmation modal -->
|
|
<div id="delete-modal" class="modal-overlay" style="display:none">
|
|
<div class="modal-box">
|
|
<h2>Delete User</h2>
|
|
<p style="margin-bottom:1.5rem;color:var(--cream-dim)">Delete <strong id="delete-username"></strong>? This will permanently remove their account and all associated data.</p>
|
|
<div style="display:flex;gap:0.5rem;justify-content:flex-end">
|
|
<button class="btn btn-ghost" onclick="hideDeleteModal()">Cancel</button>
|
|
<button class="btn btn-danger" onclick="submitDelete()">Delete</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</main>
|
|
|
|
<script src="/js/api.js"></script>
|
|
<script src="/js/auth.js"></script>
|
|
<script src="/js/admin.js"></script>
|
|
</body>
|
|
</html>
|