Sergei Poljanski
9bf40690e5
The admin was one shared HTTP Basic login: no way to give someone partial access, revoke one person, or tell who changed what. Add a users table and a session login form. Passwords are scrypt hashes from Ruby's OpenSSL, so no native gem is needed. Sessions carry a per-user version that is bumped on password change, which logs that user out everywhere. ADMIN_USER/ADMIN_PASSWORD now bootstrap the first superuser on an empty table and afterwards only work while no active superuser exists, as a recovery path that re-creates one. Until per-area permissions land, non-superusers only reach the dashboard and their own password page. Assisted-by: Claude:opus-5
17 lines
1.3 KiB
Text
17 lines
1.3 KiB
Text
<%== erb :'admin/_nav', layout: false %>
|
|
<div class="header">
|
|
<h1>Change password</h1>
|
|
<% if current_user.must_change_password %><p class="tagline">Set a new password to continue.</p><% end %>
|
|
</div>
|
|
|
|
<section class="section">
|
|
<% if @error %><div class="form-error-base"><div><%= @error %></div></div><% end %>
|
|
<form class="invoice-form auth-form" method="post" action="/admin/account/password">
|
|
<input type="hidden" name="authenticity_token" value="<%= csrf_token %>" />
|
|
<input type="text" name="username" value="<%= current_user.username %>" autocomplete="username" hidden />
|
|
<div class="field"><label for="current">Current password</label><input type="password" id="current" name="current" autocomplete="current-password" required /></div>
|
|
<div class="field"><label for="password">New password <span class="optional">(at least <%= User::MIN_PASS %> characters)</span></label><input type="password" id="password" name="password" autocomplete="new-password" minlength="<%= User::MIN_PASS %>" required /></div>
|
|
<div class="field"><label for="confirm">Repeat new password</label><input type="password" id="confirm" name="confirm" autocomplete="new-password" required /></div>
|
|
<button type="submit" class="download-button">Change password</button>
|
|
</form>
|
|
</section>
|