Main page. Just simple HTML, CSS and JS. https://asxp.io
  • Ruby 66.9%
  • HTML 23.5%
  • CSS 5.9%
  • JavaScript 2.7%
  • Nix 0.4%
  • Other 0.6%
Find a file
Sergei Poljanski d91a72f603
admin: user management, invites, password reset, audit log
Add /admin/users to create, edit, disable and delete accounts with the
per-area permission grid. New users get a one-time invite link (48 h)
by email; the admin also sees it once, so an account without email can
still be onboarded. Forgotten passwords get a 1 h reset link with the
same answer for unknown accounts. Only token hashes are stored.

Guards against escalation and lockout: a user manager can only grant
flags they hold and cannot touch flags they lack; only superusers change
superuser accounts; nobody can disable or delete themselves; the last
active superuser stays.

Logins, user changes, and bingo and invoice actions are recorded in an
audit log at /admin/audit.

Read timestamps as UTC: they are all written with Time.now.utc, and on a
UTC+4 host a fresh 1 h token read back as already expired.

Assisted-by: Claude:opus-5
2026-10-10 08:31:42 +04:00
.forgejo/workflows bingo: stop serving bingo.asxp.io 2026-10-10 06:07:37 +04:00
bin tests: minitest + rack-test suite, bin/test with ephemeral Postgres 2026-07-02 17:32:14 +04:00
db admin: user management, invites, password reset, audit log 2026-10-10 08:31:42 +04:00
lib admin: user management, invites, password reset, audit log 2026-10-10 08:31:42 +04:00
public admin: per-area permissions on every route 2026-10-10 08:27:37 +04:00
test admin: user management, invites, password reset, audit log 2026-10-10 08:31:42 +04:00
views admin: user management, invites, password reset, audit log 2026-10-10 08:31:42 +04:00
.dockerignore tests: minitest + rack-test suite, bin/test with ephemeral Postgres 2026-07-02 17:32:14 +04:00
.env.example bingo: serve bingo.asxp.io too, credit asxp.io in footer 2026-10-10 06:00:39 +04:00
.gitignore ltc payments 2026-06-08 18:43:01 +03:00
asxpio.rb admin: user management, invites, password reset, audit log 2026-10-10 08:31:42 +04:00
bingo_web.rb bingo: planned status and capacity type 2026-10-10 06:59:04 +04:00
CLAUDE.md admin: user management, invites, password reset, audit log 2026-10-10 08:31:42 +04:00
config.ru bingo: serve bingo.asxp.io too, credit asxp.io in footer 2026-10-10 06:00:39 +04:00
docker-compose.yml bingo: stop serving bingo.asxp.io 2026-10-10 06:07:37 +04:00
Dockerfile bingo: SEO pass and resized photos 2026-10-10 06:26:03 +04:00
flake.lock ruby rework with contact form 2026-05-05 00:45:27 +04:00
flake.nix gems: add pg, sequel, prawn, aws-sdk-s3 for invoicing 2026-05-26 17:29:21 +03:00
Gemfile tests: minitest + rack-test suite, bin/test with ephemeral Postgres 2026-07-02 17:32:14 +04:00
Gemfile.lock tests: minitest + rack-test suite, bin/test with ephemeral Postgres 2026-07-02 17:32:14 +04:00
Rakefile tests: minitest + rack-test suite, bin/test with ephemeral Postgres 2026-07-02 17:32:14 +04:00