Files
felhom-controller/controller/internal/web/templates/launcher.html
T
admin 15206314ab v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)
Mint a 160-bit capability URL (/s/<token>) serving a standalone read-only guest
launcher: same tiles, opens apps in new tabs, no account, no admin session.
Information only, zero control — every privilege stays behind each app's own auth.

- /s/ pre-auth pass-through (after the claim gate) + session-CSRF exemption; guest
  password POST carries its own pre-auth HMAC CSRF.
- Constant-time token match; empty stored token = disabled = byte-identical mux 404.
- Optional per-share password: separate bcrypt hash + own attempt map; signed cookie
  = HMAC(token|passwordHash) keyed with web.session_secret, so rotate/change invalidates.
- Guest labels ride the v0.164.0 ruling; never expose internal state vocabulary.
- Token redacted in logs (/s/<redacted>); never in CHANGELOG/REPORT/CONTEXT.
- Admin modal: copy-link, QR (go-qrcode), set/clear password, rotate, disable.
- Tests: Groups A-G (14) + 3 red-proofs verified red.
2026-07-24 12:08:43 +02:00

136 lines
6.4 KiB
HTML

{{define "launch_tile"}}
<span class="launch-tile{{if .Off}} launch-tile--off{{end}}" style="background: {{tileColor .Slug .BrandColor}}">
<span class="launch-mono">{{initial .DisplayName}}</span>
<img class="launch-logo" src="{{logoURL .Slug}}" alt=""
onerror="if(!this.dataset.step){this.dataset.step='1';this.src='{{logoPNGURL .Slug}}';}else{this.onerror=null;this.style.display='none';this.parentElement.classList.add('launch-tile--noimg');}">
</span>
{{end}}
{{define "launcher"}}
{{template "layout_start" .}}
<div class="page-header">
<h2>Indítópult</h2>
<span class="domain-badge">{{.Domain}}</span>
<button type="button" class="btn btn-outline share-open-btn" onclick="openShareModal()"><svg class="ico"><use href="#i-share"/></svg>Indítópult megosztása</button>
</div>
{{if .ShareFlash}}
<div class="alerts-container">
<div class="alert-banner alert-banner-info">
<span class="alert-icon"><svg class="ico"><use href="#i-info"/></svg></span>
<span class="alert-message">{{.ShareFlash}}</span>
</div>
</div>
{{end}}
{{if .Apps}}
<div class="launch-grid">
{{range .Apps}}
{{if isOperational .State}}
<a class="launch-cell" href="https://{{.Subdomain}}.{{$.Domain}}{{.OpenPath}}" target="_blank" rel="noopener">
{{template "launch_tile" (dict "Slug" .Slug "BrandColor" .BrandColor "DisplayName" .DisplayName "Off" false)}}
<span class="launch-name">{{.DisplayName}}</span>
{{if ne (stateStr .State) "running"}}<span class="tag tag-{{stateColor .State}}"><span class="dot"></span>{{stateLabel .State}}</span>{{end}}
</a>
{{else}}
<div class="launch-cell launch-cell--off">
{{template "launch_tile" (dict "Slug" .Slug "BrandColor" .BrandColor "DisplayName" .DisplayName "Off" true)}}
<span class="launch-name">{{.DisplayName}}</span>
<span class="tag tag-{{stateColor .State}}"><span class="dot"></span>{{stateLabel .State}}</span>
</div>
{{end}}
{{end}}
</div>
{{else}}
<div class="empty-state">
<p>Még nincs telepített alkalmazás.</p>
<p><a href="/stacks" class="empty-state-link">Alkalmazások telepítése</a></p>
</div>
{{end}}
<div class="modal-overlay" id="share-modal" style="display:none">
<div class="modal-card">
<h3>Indítópult megosztása</h3>
<p class="share-lede">Egy megosztható link, amely csak megmutatja az alkalmazásokat és új lapon megnyitja őket. Fiók nélkül, felügyeleti hozzáférés nélkül — minden alkalmazás a saját bejelentkezése mögött marad.</p>
{{if .ShareEnabled}}
<div class="share-field">
<label class="share-label">Megosztási link</label>
<div class="share-link-row">
<input id="share-link-input" type="text" readonly value="{{.ShareURL}}">
<button type="button" id="share-copy-btn" class="btn btn-outline" onclick="copyShareLink()">Link másolása</button>
</div>
</div>
<div class="share-qr">
<img src="/launcher/share/qr.png" alt="QR-kód a megosztási linkhez" width="200" height="200">
<span class="share-qr-hint">Olvassa be telefonnal a gyors megnyitáshoz.</span>
</div>
<div class="share-field">
{{if .SharePasswordSet}}
<label class="share-label">Jelszó</label>
<p class="share-note">A megosztás jelszóval védett.</p>
<form method="POST" action="/launcher/share/password">
{{.CSRFField}}
<input type="hidden" name="action" value="clear">
<button type="submit" class="btn btn-outline">Jelszó törlése</button>
</form>
{{else}}
<form method="POST" action="/launcher/share/password">
{{.CSRFField}}
<label class="share-label">Jelszó (nem kötelező)</label>
<div class="share-link-row">
<input type="password" name="password" autocomplete="new-password" placeholder="Legalább 8 karakter">
<button type="submit" class="btn btn-outline">Jelszó beállítása</button>
</div>
</form>
{{end}}
</div>
<div class="share-actions">
<form method="POST" action="/launcher/share/rotate">
{{.CSRFField}}
<button type="submit" class="btn btn-outline" data-confirm="Új link készítése? A régi link és minden korábbi belépés érvénytelenné válik.">Új link készítése</button>
</form>
<form method="POST" action="/launcher/share/disable">
{{.CSRFField}}
<button type="submit" class="btn btn-danger" data-confirm="Biztosan kikapcsolja a megosztást? A link azonnal érvénytelenné válik.">Megosztás kikapcsolása</button>
</form>
</div>
{{else}}
<p class="share-note">A megosztás jelenleg ki van kapcsolva.</p>
<form method="POST" action="/launcher/share/enable">
{{.CSRFField}}
<div class="modal-actions">
<button type="button" class="btn btn-outline" onclick="closeShareModal()">Bezárás</button>
<button type="submit" class="btn btn-primary">Megosztás bekapcsolása</button>
</div>
</form>
{{end}}
{{if .ShareEnabled}}
<div class="modal-actions">
<button type="button" class="btn btn-outline" onclick="closeShareModal()">Bezárás</button>
</div>
{{end}}
</div>
</div>
<script>
function openShareModal(){var m=document.getElementById('share-modal');if(m)m.style.display='flex';}
function closeShareModal(){var m=document.getElementById('share-modal');if(m)m.style.display='none';}
function copyShareLink(){
var inp=document.getElementById('share-link-input');
var btn=document.getElementById('share-copy-btn');
if(!inp)return;
function done(){if(btn){var o=btn.textContent;btn.textContent='Másolva';setTimeout(function(){btn.textContent=o;},1500);}}
if(navigator.clipboard&&navigator.clipboard.writeText){navigator.clipboard.writeText(inp.value).then(done,function(){inp.select();done();});}
else{inp.select();try{document.execCommand('copy');}catch(e){}done();}
}
(function(){
var m=document.getElementById('share-modal');
if(m){m.addEventListener('click',function(e){if(e.target===m)closeShareModal();});}
{{if .ShareFlash}}openShareModal();{{end}}
})();
</script>
{{template "layout_end"}}
{{end}}