Compare commits
1 Commits
v0.7.0
...
feat/camer
| Author | SHA1 | Date | |
|---|---|---|---|
|
2e3097ca40 |
@@ -1,260 +0,0 @@
|
|||||||
use axum::extract::{Path, State};
|
|
||||||
use axum::http::StatusCode;
|
|
||||||
use axum::Json;
|
|
||||||
use chrono::{DateTime, Utc};
|
|
||||||
use serde::{Deserialize, Serialize};
|
|
||||||
use uuid::Uuid;
|
|
||||||
|
|
||||||
use crate::auth::middleware::RequireHost;
|
|
||||||
use crate::error::AppError;
|
|
||||||
use crate::models::comment::Comment;
|
|
||||||
use crate::models::event::Event;
|
|
||||||
use crate::models::upload::Upload;
|
|
||||||
use crate::state::AppState;
|
|
||||||
|
|
||||||
// ── DTOs ─────────────────────────────────────────────────────────────────────
|
|
||||||
|
|
||||||
#[derive(Serialize, sqlx::FromRow)]
|
|
||||||
pub struct UserSummary {
|
|
||||||
pub id: Uuid,
|
|
||||||
pub display_name: String,
|
|
||||||
pub role: String,
|
|
||||||
pub is_banned: bool,
|
|
||||||
pub uploads_hidden: bool,
|
|
||||||
pub upload_count: i64,
|
|
||||||
pub total_upload_bytes: i64,
|
|
||||||
pub created_at: DateTime<Utc>,
|
|
||||||
}
|
|
||||||
|
|
||||||
#[derive(Serialize)]
|
|
||||||
pub struct EventStatus {
|
|
||||||
pub name: String,
|
|
||||||
pub is_active: bool,
|
|
||||||
pub uploads_locked: bool,
|
|
||||||
pub export_released: bool,
|
|
||||||
}
|
|
||||||
|
|
||||||
#[derive(Deserialize)]
|
|
||||||
pub struct BanRequest {
|
|
||||||
pub hide_uploads: bool,
|
|
||||||
}
|
|
||||||
|
|
||||||
#[derive(Deserialize)]
|
|
||||||
pub struct SetRoleRequest {
|
|
||||||
pub role: String,
|
|
||||||
}
|
|
||||||
|
|
||||||
// ── Handlers ─────────────────────────────────────────────────────────────────
|
|
||||||
|
|
||||||
pub async fn get_event_status(
|
|
||||||
State(state): State<AppState>,
|
|
||||||
RequireHost(_auth): RequireHost,
|
|
||||||
) -> Result<Json<EventStatus>, AppError> {
|
|
||||||
let event = Event::find_by_slug(&state.pool, &state.config.event_slug)
|
|
||||||
.await?
|
|
||||||
.ok_or_else(|| AppError::NotFound("Event nicht gefunden.".into()))?;
|
|
||||||
|
|
||||||
Ok(Json(EventStatus {
|
|
||||||
name: event.name,
|
|
||||||
is_active: event.is_active,
|
|
||||||
uploads_locked: event.uploads_locked_at.is_some(),
|
|
||||||
export_released: event.export_released_at.is_some(),
|
|
||||||
}))
|
|
||||||
}
|
|
||||||
|
|
||||||
pub async fn list_users(
|
|
||||||
State(state): State<AppState>,
|
|
||||||
RequireHost(auth): RequireHost,
|
|
||||||
) -> Result<Json<Vec<UserSummary>>, AppError> {
|
|
||||||
let rows = sqlx::query_as::<_, UserSummary>(
|
|
||||||
"SELECT u.id,
|
|
||||||
u.display_name,
|
|
||||||
u.role::text AS role,
|
|
||||||
u.is_banned,
|
|
||||||
u.uploads_hidden,
|
|
||||||
COALESCE(COUNT(up.id), 0) AS upload_count,
|
|
||||||
u.total_upload_bytes,
|
|
||||||
u.created_at
|
|
||||||
FROM \"user\" u
|
|
||||||
LEFT JOIN upload up ON up.user_id = u.id AND up.deleted_at IS NULL
|
|
||||||
WHERE u.event_id = $1
|
|
||||||
GROUP BY u.id
|
|
||||||
ORDER BY u.created_at ASC",
|
|
||||||
)
|
|
||||||
.bind(auth.event_id)
|
|
||||||
.fetch_all(&state.pool)
|
|
||||||
.await?;
|
|
||||||
|
|
||||||
Ok(Json(rows))
|
|
||||||
}
|
|
||||||
|
|
||||||
pub async fn ban_user(
|
|
||||||
State(state): State<AppState>,
|
|
||||||
RequireHost(auth): RequireHost,
|
|
||||||
Path(user_id): Path<Uuid>,
|
|
||||||
Json(body): Json<BanRequest>,
|
|
||||||
) -> Result<StatusCode, AppError> {
|
|
||||||
// Cannot ban yourself or another host/admin
|
|
||||||
if user_id == auth.user_id {
|
|
||||||
return Err(AppError::BadRequest("Du kannst dich nicht selbst sperren.".into()));
|
|
||||||
}
|
|
||||||
let target = sqlx::query_as::<_, (String,)>(
|
|
||||||
"SELECT role::text FROM \"user\" WHERE id = $1 AND event_id = $2",
|
|
||||||
)
|
|
||||||
.bind(user_id)
|
|
||||||
.bind(auth.event_id)
|
|
||||||
.fetch_optional(&state.pool)
|
|
||||||
.await?
|
|
||||||
.ok_or_else(|| AppError::NotFound("Benutzer nicht gefunden.".into()))?;
|
|
||||||
|
|
||||||
if target.0 == "admin" || (target.0 == "host" && auth.role != crate::models::user::UserRole::Admin) {
|
|
||||||
return Err(AppError::Forbidden("Du kannst diesen Benutzer nicht sperren.".into()));
|
|
||||||
}
|
|
||||||
|
|
||||||
sqlx::query(
|
|
||||||
"UPDATE \"user\" SET is_banned = TRUE, uploads_hidden = $2 WHERE id = $1",
|
|
||||||
)
|
|
||||||
.bind(user_id)
|
|
||||||
.bind(body.hide_uploads)
|
|
||||||
.execute(&state.pool)
|
|
||||||
.await?;
|
|
||||||
|
|
||||||
Ok(StatusCode::NO_CONTENT)
|
|
||||||
}
|
|
||||||
|
|
||||||
pub async fn unban_user(
|
|
||||||
State(state): State<AppState>,
|
|
||||||
RequireHost(_auth): RequireHost,
|
|
||||||
Path(user_id): Path<Uuid>,
|
|
||||||
) -> Result<StatusCode, AppError> {
|
|
||||||
sqlx::query("UPDATE \"user\" SET is_banned = FALSE WHERE id = $1")
|
|
||||||
.bind(user_id)
|
|
||||||
.execute(&state.pool)
|
|
||||||
.await?;
|
|
||||||
Ok(StatusCode::NO_CONTENT)
|
|
||||||
}
|
|
||||||
|
|
||||||
pub async fn set_role(
|
|
||||||
State(state): State<AppState>,
|
|
||||||
RequireHost(auth): RequireHost,
|
|
||||||
Path(user_id): Path<Uuid>,
|
|
||||||
Json(body): Json<SetRoleRequest>,
|
|
||||||
) -> Result<StatusCode, AppError> {
|
|
||||||
if user_id == auth.user_id {
|
|
||||||
return Err(AppError::BadRequest("Du kannst deine eigene Rolle nicht ändern.".into()));
|
|
||||||
}
|
|
||||||
let new_role = match body.role.as_str() {
|
|
||||||
"guest" => "guest",
|
|
||||||
"host" => "host",
|
|
||||||
_ => return Err(AppError::BadRequest("Ungültige Rolle. Erlaubt: guest, host.".into())),
|
|
||||||
};
|
|
||||||
sqlx::query("UPDATE \"user\" SET role = $2::user_role WHERE id = $1 AND event_id = $3")
|
|
||||||
.bind(user_id)
|
|
||||||
.bind(new_role)
|
|
||||||
.bind(auth.event_id)
|
|
||||||
.execute(&state.pool)
|
|
||||||
.await?;
|
|
||||||
Ok(StatusCode::NO_CONTENT)
|
|
||||||
}
|
|
||||||
|
|
||||||
pub async fn host_delete_upload(
|
|
||||||
State(state): State<AppState>,
|
|
||||||
RequireHost(_auth): RequireHost,
|
|
||||||
Path(upload_id): Path<Uuid>,
|
|
||||||
) -> Result<StatusCode, AppError> {
|
|
||||||
let upload = Upload::find_by_id(&state.pool, upload_id)
|
|
||||||
.await?
|
|
||||||
.ok_or_else(|| AppError::NotFound("Upload nicht gefunden.".into()))?;
|
|
||||||
|
|
||||||
Upload::soft_delete(&state.pool, upload_id).await?;
|
|
||||||
|
|
||||||
let _ = state.sse_tx.send(crate::state::SseEvent {
|
|
||||||
event_type: "upload-deleted".to_string(),
|
|
||||||
data: serde_json::json!({ "upload_id": upload.id }).to_string(),
|
|
||||||
});
|
|
||||||
|
|
||||||
Ok(StatusCode::NO_CONTENT)
|
|
||||||
}
|
|
||||||
|
|
||||||
pub async fn host_delete_comment(
|
|
||||||
State(state): State<AppState>,
|
|
||||||
RequireHost(_auth): RequireHost,
|
|
||||||
Path(comment_id): Path<Uuid>,
|
|
||||||
) -> Result<StatusCode, AppError> {
|
|
||||||
Comment::find_by_id(&state.pool, comment_id)
|
|
||||||
.await?
|
|
||||||
.ok_or_else(|| AppError::NotFound("Kommentar nicht gefunden.".into()))?;
|
|
||||||
|
|
||||||
Comment::soft_delete(&state.pool, comment_id).await?;
|
|
||||||
Ok(StatusCode::NO_CONTENT)
|
|
||||||
}
|
|
||||||
|
|
||||||
pub async fn close_event(
|
|
||||||
State(state): State<AppState>,
|
|
||||||
RequireHost(_auth): RequireHost,
|
|
||||||
) -> Result<StatusCode, AppError> {
|
|
||||||
sqlx::query(
|
|
||||||
"UPDATE event SET uploads_locked_at = NOW() WHERE slug = $1 AND uploads_locked_at IS NULL",
|
|
||||||
)
|
|
||||||
.bind(&state.config.event_slug)
|
|
||||||
.execute(&state.pool)
|
|
||||||
.await?;
|
|
||||||
|
|
||||||
let _ = state.sse_tx.send(crate::state::SseEvent {
|
|
||||||
event_type: "event-closed".to_string(),
|
|
||||||
data: "{}".to_string(),
|
|
||||||
});
|
|
||||||
|
|
||||||
Ok(StatusCode::NO_CONTENT)
|
|
||||||
}
|
|
||||||
|
|
||||||
pub async fn open_event(
|
|
||||||
State(state): State<AppState>,
|
|
||||||
RequireHost(_auth): RequireHost,
|
|
||||||
) -> Result<StatusCode, AppError> {
|
|
||||||
sqlx::query(
|
|
||||||
"UPDATE event SET uploads_locked_at = NULL WHERE slug = $1",
|
|
||||||
)
|
|
||||||
.bind(&state.config.event_slug)
|
|
||||||
.execute(&state.pool)
|
|
||||||
.await?;
|
|
||||||
|
|
||||||
let _ = state.sse_tx.send(crate::state::SseEvent {
|
|
||||||
event_type: "event-opened".to_string(),
|
|
||||||
data: "{}".to_string(),
|
|
||||||
});
|
|
||||||
|
|
||||||
Ok(StatusCode::NO_CONTENT)
|
|
||||||
}
|
|
||||||
|
|
||||||
pub async fn release_gallery(
|
|
||||||
State(state): State<AppState>,
|
|
||||||
RequireHost(_auth): RequireHost,
|
|
||||||
) -> Result<StatusCode, AppError> {
|
|
||||||
let event = Event::find_by_slug(&state.pool, &state.config.event_slug)
|
|
||||||
.await?
|
|
||||||
.ok_or_else(|| AppError::NotFound("Event nicht gefunden.".into()))?;
|
|
||||||
|
|
||||||
if event.export_released_at.is_some() {
|
|
||||||
return Err(AppError::BadRequest("Galerie wurde bereits freigegeben.".into()));
|
|
||||||
}
|
|
||||||
|
|
||||||
sqlx::query("UPDATE event SET export_released_at = NOW() WHERE slug = $1")
|
|
||||||
.bind(&state.config.event_slug)
|
|
||||||
.execute(&state.pool)
|
|
||||||
.await?;
|
|
||||||
|
|
||||||
// Enqueue export jobs (processed by the export worker in a later step)
|
|
||||||
for export_type in ["zip", "html"] {
|
|
||||||
sqlx::query(
|
|
||||||
"INSERT INTO export_job (event_id, type) VALUES ($1, $2::export_type)
|
|
||||||
ON CONFLICT (event_id, type) DO NOTHING",
|
|
||||||
)
|
|
||||||
.bind(event.id)
|
|
||||||
.bind(export_type)
|
|
||||||
.execute(&state.pool)
|
|
||||||
.await?;
|
|
||||||
}
|
|
||||||
|
|
||||||
Ok(StatusCode::NO_CONTENT)
|
|
||||||
}
|
|
||||||
@@ -1,5 +1,4 @@
|
|||||||
pub mod feed;
|
pub mod feed;
|
||||||
pub mod host;
|
|
||||||
pub mod social;
|
pub mod social;
|
||||||
pub mod sse;
|
pub mod sse;
|
||||||
pub mod upload;
|
pub mod upload;
|
||||||
|
|||||||
@@ -58,18 +58,7 @@ async fn main() -> Result<()> {
|
|||||||
)
|
)
|
||||||
.route("/api/v1/comment/{id}", delete(handlers::social::delete_comment))
|
.route("/api/v1/comment/{id}", delete(handlers::social::delete_comment))
|
||||||
// SSE
|
// SSE
|
||||||
.route("/api/v1/stream", get(handlers::sse::stream))
|
.route("/api/v1/stream", get(handlers::sse::stream));
|
||||||
// Host Dashboard
|
|
||||||
.route("/api/v1/host/event", get(handlers::host::get_event_status))
|
|
||||||
.route("/api/v1/host/event/close", post(handlers::host::close_event))
|
|
||||||
.route("/api/v1/host/event/open", post(handlers::host::open_event))
|
|
||||||
.route("/api/v1/host/gallery/release", post(handlers::host::release_gallery))
|
|
||||||
.route("/api/v1/host/users", get(handlers::host::list_users))
|
|
||||||
.route("/api/v1/host/users/{id}/ban", post(handlers::host::ban_user))
|
|
||||||
.route("/api/v1/host/users/{id}/unban", post(handlers::host::unban_user))
|
|
||||||
.route("/api/v1/host/users/{id}/role", patch(handlers::host::set_role))
|
|
||||||
.route("/api/v1/host/upload/{id}", delete(handlers::host::host_delete_upload))
|
|
||||||
.route("/api/v1/host/comment/{id}", delete(handlers::host::host_delete_comment));
|
|
||||||
|
|
||||||
// Serve media files from disk
|
// Serve media files from disk
|
||||||
let media_service = ServeDir::new(&config.media_path);
|
let media_service = ServeDir::new(&config.media_path);
|
||||||
|
|||||||
@@ -38,17 +38,6 @@ export function clearAuth(): void {
|
|||||||
isAuthenticated.set(false);
|
isAuthenticated.set(false);
|
||||||
}
|
}
|
||||||
|
|
||||||
export function getRole(): 'guest' | 'host' | 'admin' | null {
|
|
||||||
const token = getToken();
|
|
||||||
if (!token) return null;
|
|
||||||
try {
|
|
||||||
const payload = JSON.parse(atob(token.split('.')[1]));
|
|
||||||
return payload.role ?? null;
|
|
||||||
} catch {
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
export function initAuth(): void {
|
export function initAuth(): void {
|
||||||
if (!browser) return;
|
if (!browser) return;
|
||||||
isAuthenticated.set(!!getToken());
|
isAuthenticated.set(!!getToken());
|
||||||
|
|||||||
@@ -8,8 +8,8 @@
|
|||||||
|
|
||||||
let { oncapture, onclose }: Props = $props();
|
let { oncapture, onclose }: Props = $props();
|
||||||
|
|
||||||
let videoEl: HTMLVideoElement = $state()!;
|
let videoEl: HTMLVideoElement;
|
||||||
let canvasEl: HTMLCanvasElement = $state()!;
|
let canvasEl: HTMLCanvasElement;
|
||||||
let stream: MediaStream | null = $state(null);
|
let stream: MediaStream | null = $state(null);
|
||||||
let facingMode = $state<'environment' | 'user'>('environment');
|
let facingMode = $state<'environment' | 'user'>('environment');
|
||||||
let recording = $state(false);
|
let recording = $state(false);
|
||||||
|
|||||||
@@ -1,318 +0,0 @@
|
|||||||
<script lang="ts">
|
|
||||||
import { goto } from '$app/navigation';
|
|
||||||
import { getToken, getRole } from '$lib/auth';
|
|
||||||
import { api } from '$lib/api';
|
|
||||||
import { onMount } from 'svelte';
|
|
||||||
|
|
||||||
interface UserSummary {
|
|
||||||
id: string;
|
|
||||||
display_name: string;
|
|
||||||
role: string;
|
|
||||||
is_banned: boolean;
|
|
||||||
uploads_hidden: boolean;
|
|
||||||
upload_count: number;
|
|
||||||
total_upload_bytes: number;
|
|
||||||
created_at: string;
|
|
||||||
}
|
|
||||||
|
|
||||||
interface EventStatus {
|
|
||||||
name: string;
|
|
||||||
is_active: boolean;
|
|
||||||
uploads_locked: boolean;
|
|
||||||
export_released: boolean;
|
|
||||||
}
|
|
||||||
|
|
||||||
let event = $state<EventStatus | null>(null);
|
|
||||||
let users = $state<UserSummary[]>([]);
|
|
||||||
let loading = $state(true);
|
|
||||||
let error = $state<string | null>(null);
|
|
||||||
|
|
||||||
// Ban modal state
|
|
||||||
let banTarget = $state<UserSummary | null>(null);
|
|
||||||
let banHideUploads = $state(false);
|
|
||||||
let banSubmitting = $state(false);
|
|
||||||
|
|
||||||
// Toast state
|
|
||||||
let toast = $state<string | null>(null);
|
|
||||||
|
|
||||||
onMount(async () => {
|
|
||||||
const token = getToken();
|
|
||||||
const role = getRole();
|
|
||||||
if (!token || (role !== 'host' && role !== 'admin')) {
|
|
||||||
goto('/join');
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
await reload();
|
|
||||||
});
|
|
||||||
|
|
||||||
async function reload() {
|
|
||||||
loading = true;
|
|
||||||
error = null;
|
|
||||||
try {
|
|
||||||
[event, users] = await Promise.all([
|
|
||||||
api.get<EventStatus>('/host/event'),
|
|
||||||
api.get<UserSummary[]>('/host/users')
|
|
||||||
]);
|
|
||||||
} catch (e: unknown) {
|
|
||||||
error = e instanceof Error ? e.message : 'Fehler beim Laden.';
|
|
||||||
} finally {
|
|
||||||
loading = false;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
function showToast(msg: string) {
|
|
||||||
toast = msg;
|
|
||||||
setTimeout(() => (toast = null), 3000);
|
|
||||||
}
|
|
||||||
|
|
||||||
async function toggleEventLock() {
|
|
||||||
if (!event) return;
|
|
||||||
try {
|
|
||||||
if (event.uploads_locked) {
|
|
||||||
await api.post('/host/event/open');
|
|
||||||
showToast('Uploads wurden wieder geöffnet.');
|
|
||||||
} else {
|
|
||||||
await api.post('/host/event/close');
|
|
||||||
showToast('Uploads wurden gesperrt.');
|
|
||||||
}
|
|
||||||
await reload();
|
|
||||||
} catch (e: unknown) {
|
|
||||||
showToast(e instanceof Error ? e.message : 'Fehler.');
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
async function releaseGallery() {
|
|
||||||
try {
|
|
||||||
await api.post('/host/gallery/release');
|
|
||||||
showToast('Galerie wurde freigegeben. Export wird vorbereitet…');
|
|
||||||
await reload();
|
|
||||||
} catch (e: unknown) {
|
|
||||||
showToast(e instanceof Error ? e.message : 'Fehler.');
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
function openBanModal(user: UserSummary) {
|
|
||||||
banTarget = user;
|
|
||||||
banHideUploads = false;
|
|
||||||
}
|
|
||||||
|
|
||||||
async function confirmBan() {
|
|
||||||
if (!banTarget) return;
|
|
||||||
banSubmitting = true;
|
|
||||||
try {
|
|
||||||
await api.post(`/host/users/${banTarget.id}/ban`, { hide_uploads: banHideUploads });
|
|
||||||
showToast(`${banTarget.display_name} wurde gesperrt.`);
|
|
||||||
banTarget = null;
|
|
||||||
await reload();
|
|
||||||
} catch (e: unknown) {
|
|
||||||
showToast(e instanceof Error ? e.message : 'Fehler.');
|
|
||||||
} finally {
|
|
||||||
banSubmitting = false;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
async function unban(user: UserSummary) {
|
|
||||||
try {
|
|
||||||
await api.post(`/host/users/${user.id}/unban`);
|
|
||||||
showToast(`Sperre für ${user.display_name} aufgehoben.`);
|
|
||||||
await reload();
|
|
||||||
} catch (e: unknown) {
|
|
||||||
showToast(e instanceof Error ? e.message : 'Fehler.');
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
async function promoteToHost(user: UserSummary) {
|
|
||||||
try {
|
|
||||||
await api.patch(`/host/users/${user.id}/role`, { role: 'host' });
|
|
||||||
showToast(`${user.display_name} ist jetzt Host.`);
|
|
||||||
await reload();
|
|
||||||
} catch (e: unknown) {
|
|
||||||
showToast(e instanceof Error ? e.message : 'Fehler.');
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
async function demoteToGuest(user: UserSummary) {
|
|
||||||
try {
|
|
||||||
await api.patch(`/host/users/${user.id}/role`, { role: 'guest' });
|
|
||||||
showToast(`${user.display_name} ist jetzt Gast.`);
|
|
||||||
await reload();
|
|
||||||
} catch (e: unknown) {
|
|
||||||
showToast(e instanceof Error ? e.message : 'Fehler.');
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
function formatBytes(bytes: number): string {
|
|
||||||
if (bytes < 1024) return `${bytes} B`;
|
|
||||||
if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
|
|
||||||
return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
|
|
||||||
}
|
|
||||||
|
|
||||||
const myRole = getRole();
|
|
||||||
</script>
|
|
||||||
|
|
||||||
<!-- Ban modal -->
|
|
||||||
{#if banTarget}
|
|
||||||
<div class="fixed inset-0 z-50 flex items-center justify-center bg-black/50 p-4">
|
|
||||||
<div class="w-full max-w-sm rounded-2xl bg-white p-6 shadow-xl">
|
|
||||||
<h2 class="mb-1 text-lg font-bold text-gray-900">Benutzer sperren</h2>
|
|
||||||
<p class="mb-4 text-sm text-gray-600">
|
|
||||||
Was soll mit den Uploads von <strong>{banTarget.display_name}</strong> passieren?
|
|
||||||
</p>
|
|
||||||
<label class="mb-4 flex cursor-pointer items-center gap-3 rounded-lg border border-gray-200 p-3">
|
|
||||||
<input
|
|
||||||
type="checkbox"
|
|
||||||
bind:checked={banHideUploads}
|
|
||||||
class="h-4 w-4 rounded border-gray-300 text-red-600 focus:ring-red-500"
|
|
||||||
/>
|
|
||||||
<span class="text-sm text-gray-700">Uploads aus der Galerie ausblenden</span>
|
|
||||||
</label>
|
|
||||||
<div class="flex gap-2">
|
|
||||||
<button
|
|
||||||
onclick={() => (banTarget = null)}
|
|
||||||
class="flex-1 rounded-lg border border-gray-300 py-2 text-sm text-gray-700 hover:bg-gray-50"
|
|
||||||
>
|
|
||||||
Abbrechen
|
|
||||||
</button>
|
|
||||||
<button
|
|
||||||
onclick={confirmBan}
|
|
||||||
disabled={banSubmitting}
|
|
||||||
class="flex-1 rounded-lg bg-red-600 py-2 text-sm font-medium text-white hover:bg-red-700 disabled:opacity-50"
|
|
||||||
>
|
|
||||||
{banSubmitting ? 'Wird gesperrt…' : 'Sperren'}
|
|
||||||
</button>
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
{/if}
|
|
||||||
|
|
||||||
<!-- Toast -->
|
|
||||||
{#if toast}
|
|
||||||
<div class="fixed bottom-6 left-1/2 z-50 -translate-x-1/2 rounded-full bg-gray-900 px-5 py-2.5 text-sm text-white shadow-lg">
|
|
||||||
{toast}
|
|
||||||
</div>
|
|
||||||
{/if}
|
|
||||||
|
|
||||||
<div class="min-h-screen bg-gray-50">
|
|
||||||
<!-- Header -->
|
|
||||||
<div class="border-b border-gray-200 bg-white">
|
|
||||||
<div class="mx-auto flex max-w-3xl items-center justify-between px-4 py-4">
|
|
||||||
<div>
|
|
||||||
<h1 class="text-xl font-bold text-gray-900">Host Dashboard</h1>
|
|
||||||
{#if event}
|
|
||||||
<p class="text-sm text-gray-500">{event.name}</p>
|
|
||||||
{/if}
|
|
||||||
</div>
|
|
||||||
<a href="/feed" class="text-sm text-blue-600 hover:underline">Zur Galerie</a>
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<div class="mx-auto max-w-3xl space-y-4 p-4">
|
|
||||||
{#if loading}
|
|
||||||
<div class="py-16 text-center text-gray-400">Laden…</div>
|
|
||||||
{:else if error}
|
|
||||||
<div class="rounded-lg bg-red-50 p-4 text-sm text-red-700">{error}</div>
|
|
||||||
{:else if event}
|
|
||||||
<!-- Event controls -->
|
|
||||||
<div class="rounded-xl border border-gray-200 bg-white p-5">
|
|
||||||
<h2 class="mb-4 font-semibold text-gray-900">Veranstaltung</h2>
|
|
||||||
<div class="flex flex-wrap gap-3">
|
|
||||||
<button
|
|
||||||
onclick={toggleEventLock}
|
|
||||||
class="rounded-lg px-4 py-2 text-sm font-medium {event.uploads_locked
|
|
||||||
? 'bg-green-600 text-white hover:bg-green-700'
|
|
||||||
: 'bg-amber-500 text-white hover:bg-amber-600'}"
|
|
||||||
>
|
|
||||||
{event.uploads_locked ? 'Uploads wieder öffnen' : 'Uploads sperren'}
|
|
||||||
</button>
|
|
||||||
<button
|
|
||||||
onclick={releaseGallery}
|
|
||||||
disabled={event.export_released}
|
|
||||||
class="rounded-lg px-4 py-2 text-sm font-medium {event.export_released
|
|
||||||
? 'cursor-default bg-gray-100 text-gray-400'
|
|
||||||
: 'bg-blue-600 text-white hover:bg-blue-700'}"
|
|
||||||
>
|
|
||||||
{event.export_released ? 'Galerie bereits freigegeben' : 'Galerie freigeben'}
|
|
||||||
</button>
|
|
||||||
</div>
|
|
||||||
<div class="mt-3 flex gap-4 text-xs text-gray-500">
|
|
||||||
<span class="flex items-center gap-1">
|
|
||||||
<span class="h-2 w-2 rounded-full {event.uploads_locked ? 'bg-red-500' : 'bg-green-500'}"></span>
|
|
||||||
Uploads {event.uploads_locked ? 'gesperrt' : 'offen'}
|
|
||||||
</span>
|
|
||||||
<span class="flex items-center gap-1">
|
|
||||||
<span class="h-2 w-2 rounded-full {event.export_released ? 'bg-blue-500' : 'bg-gray-300'}"></span>
|
|
||||||
Export {event.export_released ? 'freigegeben' : 'gesperrt'}
|
|
||||||
</span>
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<!-- User management -->
|
|
||||||
<div class="rounded-xl border border-gray-200 bg-white">
|
|
||||||
<div class="border-b border-gray-100 px-5 py-4">
|
|
||||||
<h2 class="font-semibold text-gray-900">Gäste ({users.length})</h2>
|
|
||||||
</div>
|
|
||||||
{#if users.length === 0}
|
|
||||||
<p class="px-5 py-8 text-center text-sm text-gray-400">Noch keine Gäste.</p>
|
|
||||||
{:else}
|
|
||||||
<div class="divide-y divide-gray-100">
|
|
||||||
{#each users as user}
|
|
||||||
<div class="flex items-center gap-3 px-5 py-3">
|
|
||||||
<div class="min-w-0 flex-1">
|
|
||||||
<div class="flex items-center gap-2">
|
|
||||||
<span class="truncate font-medium text-gray-900">{user.display_name}</span>
|
|
||||||
{#if user.role === 'host'}
|
|
||||||
<span class="rounded-full bg-blue-100 px-2 py-0.5 text-xs font-medium text-blue-700">Host</span>
|
|
||||||
{:else if user.role === 'admin'}
|
|
||||||
<span class="rounded-full bg-purple-100 px-2 py-0.5 text-xs font-medium text-purple-700">Admin</span>
|
|
||||||
{/if}
|
|
||||||
{#if user.is_banned}
|
|
||||||
<span class="rounded-full bg-red-100 px-2 py-0.5 text-xs font-medium text-red-700">Gesperrt</span>
|
|
||||||
{/if}
|
|
||||||
</div>
|
|
||||||
<p class="text-xs text-gray-400">
|
|
||||||
{user.upload_count} Upload{user.upload_count !== 1 ? 's' : ''} · {formatBytes(user.total_upload_bytes)}
|
|
||||||
</p>
|
|
||||||
</div>
|
|
||||||
<div class="flex shrink-0 gap-1.5">
|
|
||||||
{#if user.role !== 'admin'}
|
|
||||||
{#if user.is_banned}
|
|
||||||
<button
|
|
||||||
onclick={() => unban(user)}
|
|
||||||
class="rounded-lg bg-gray-100 px-3 py-1.5 text-xs font-medium text-gray-700 hover:bg-gray-200"
|
|
||||||
>
|
|
||||||
Entsperren
|
|
||||||
</button>
|
|
||||||
{:else}
|
|
||||||
{#if user.role === 'guest' && (myRole === 'host' || myRole === 'admin')}
|
|
||||||
<button
|
|
||||||
onclick={() => promoteToHost(user)}
|
|
||||||
class="rounded-lg bg-blue-50 px-3 py-1.5 text-xs font-medium text-blue-700 hover:bg-blue-100"
|
|
||||||
>
|
|
||||||
Host
|
|
||||||
</button>
|
|
||||||
{/if}
|
|
||||||
{#if user.role === 'host' && myRole === 'admin'}
|
|
||||||
<button
|
|
||||||
onclick={() => demoteToGuest(user)}
|
|
||||||
class="rounded-lg bg-gray-100 px-3 py-1.5 text-xs font-medium text-gray-700 hover:bg-gray-200"
|
|
||||||
>
|
|
||||||
Degradieren
|
|
||||||
</button>
|
|
||||||
{/if}
|
|
||||||
<button
|
|
||||||
onclick={() => openBanModal(user)}
|
|
||||||
class="rounded-lg bg-red-50 px-3 py-1.5 text-xs font-medium text-red-700 hover:bg-red-100"
|
|
||||||
>
|
|
||||||
Sperren
|
|
||||||
</button>
|
|
||||||
{/if}
|
|
||||||
{/if}
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
{/each}
|
|
||||||
</div>
|
|
||||||
{/if}
|
|
||||||
</div>
|
|
||||||
{/if}
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
@@ -3,13 +3,11 @@
|
|||||||
import { getToken } from '$lib/auth';
|
import { getToken } from '$lib/auth';
|
||||||
import { addToQueue, loadQueue } from '$lib/upload-queue';
|
import { addToQueue, loadQueue } from '$lib/upload-queue';
|
||||||
import UploadQueue from '$lib/components/UploadQueue.svelte';
|
import UploadQueue from '$lib/components/UploadQueue.svelte';
|
||||||
import CameraCapture from '$lib/components/CameraCapture.svelte';
|
|
||||||
import { onMount } from 'svelte';
|
import { onMount } from 'svelte';
|
||||||
|
|
||||||
let caption = $state('');
|
let caption = $state('');
|
||||||
let hashtags = $state('');
|
let hashtags = $state('');
|
||||||
let fileInput: HTMLInputElement;
|
let fileInput: HTMLInputElement;
|
||||||
let showCamera = $state(false);
|
|
||||||
|
|
||||||
onMount(() => {
|
onMount(() => {
|
||||||
if (!getToken()) {
|
if (!getToken()) {
|
||||||
@@ -32,23 +30,8 @@
|
|||||||
hashtags = '';
|
hashtags = '';
|
||||||
if (fileInput) fileInput.value = '';
|
if (fileInput) fileInput.value = '';
|
||||||
}
|
}
|
||||||
|
|
||||||
async function handleCapture(blob: Blob, type: 'photo' | 'video') {
|
|
||||||
const ext = type === 'photo' ? 'jpg' : blob.type.includes('mp4') ? 'mp4' : 'webm';
|
|
||||||
const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
|
|
||||||
const fileName = `${type}_${timestamp}.${ext}`;
|
|
||||||
const file = new File([blob], fileName, { type: blob.type });
|
|
||||||
await addToQueue(file, caption, hashtags);
|
|
||||||
}
|
|
||||||
</script>
|
</script>
|
||||||
|
|
||||||
{#if showCamera}
|
|
||||||
<CameraCapture
|
|
||||||
oncapture={handleCapture}
|
|
||||||
onclose={() => (showCamera = false)}
|
|
||||||
/>
|
|
||||||
{/if}
|
|
||||||
|
|
||||||
<div class="min-h-screen bg-gray-50 p-4">
|
<div class="min-h-screen bg-gray-50 p-4">
|
||||||
<div class="mx-auto max-w-lg">
|
<div class="mx-auto max-w-lg">
|
||||||
<div class="mb-6 flex items-center justify-between">
|
<div class="mb-6 flex items-center justify-between">
|
||||||
@@ -57,39 +40,23 @@
|
|||||||
</div>
|
</div>
|
||||||
|
|
||||||
<div class="rounded-lg border border-gray-200 bg-white p-4">
|
<div class="rounded-lg border border-gray-200 bg-white p-4">
|
||||||
<div class="grid grid-cols-2 gap-3">
|
<label
|
||||||
<!-- File picker -->
|
class="flex cursor-pointer flex-col items-center justify-center rounded-lg border-2 border-dashed border-gray-300 bg-gray-50 p-8 transition hover:border-blue-400 hover:bg-blue-50"
|
||||||
<label
|
>
|
||||||
class="flex cursor-pointer flex-col items-center justify-center rounded-lg border-2 border-dashed border-gray-300 bg-gray-50 p-6 transition hover:border-blue-400 hover:bg-blue-50"
|
<svg class="mb-2 h-10 w-10 text-gray-400" fill="none" viewBox="0 0 24 24" stroke="currentColor">
|
||||||
>
|
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M12 16V4m0 0l-4 4m4-4l4 4M4 20h16" />
|
||||||
<svg class="mb-2 h-8 w-8 text-gray-400" fill="none" viewBox="0 0 24 24" stroke="currentColor">
|
</svg>
|
||||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M12 16V4m0 0l-4 4m4-4l4 4M4 20h16" />
|
<span class="text-sm font-medium text-gray-600">Fotos oder Videos auswählen</span>
|
||||||
</svg>
|
<span class="mt-1 text-xs text-gray-400">Mehrere Dateien möglich</span>
|
||||||
<span class="text-center text-sm font-medium text-gray-600">Galerie</span>
|
<input
|
||||||
<span class="mt-1 text-center text-xs text-gray-400">Mehrere Dateien</span>
|
bind:this={fileInput}
|
||||||
<input
|
type="file"
|
||||||
bind:this={fileInput}
|
accept="image/*,video/*"
|
||||||
type="file"
|
multiple
|
||||||
accept="image/*,video/*"
|
class="hidden"
|
||||||
multiple
|
onchange={handleFiles}
|
||||||
class="hidden"
|
/>
|
||||||
onchange={handleFiles}
|
</label>
|
||||||
/>
|
|
||||||
</label>
|
|
||||||
|
|
||||||
<!-- Camera button -->
|
|
||||||
<button
|
|
||||||
onclick={() => (showCamera = true)}
|
|
||||||
class="flex flex-col items-center justify-center rounded-lg border-2 border-dashed border-gray-300 bg-gray-50 p-6 transition hover:border-blue-400 hover:bg-blue-50"
|
|
||||||
>
|
|
||||||
<svg class="mb-2 h-8 w-8 text-gray-400" fill="none" viewBox="0 0 24 24" stroke="currentColor">
|
|
||||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M3 9a2 2 0 012-2h.93a2 2 0 001.664-.89l.812-1.22A2 2 0 0110.07 4h3.86a2 2 0 011.664.89l.812 1.22A2 2 0 0018.07 7H19a2 2 0 012 2v9a2 2 0 01-2 2H5a2 2 0 01-2-2V9z" />
|
|
||||||
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M15 13a3 3 0 11-6 0 3 3 0 016 0z" />
|
|
||||||
</svg>
|
|
||||||
<span class="text-sm font-medium text-gray-600">Kamera</span>
|
|
||||||
<span class="mt-1 text-xs text-gray-400">Foto & Video</span>
|
|
||||||
</button>
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<div class="mt-4 space-y-3">
|
<div class="mt-4 space-y-3">
|
||||||
<input
|
<input
|
||||||
|
|||||||
Reference in New Issue
Block a user