8b9d916265
Backend: - AppConfig, AppError, AppState modules for shared infrastructure - JWT creation/verification with HS256 (jsonwebtoken crate) - Session management: SHA-256 token hashing, DB-backed sessions - Auth middleware: AuthUser, RequireHost, RequireAdmin extractors - POST /api/v1/join: name-only registration, 4-digit PIN + bcrypt hash - POST /api/v1/recover: PIN-based recovery with 3-attempt lockout (15 min) - POST /api/v1/admin/login: bcrypt password verification - DELETE /api/v1/session: logout (session invalidation) - Migration 006: user PIN lockout columns (failed_pin_attempts, pin_locked_until) - Models: Event, User (with role enum), Session with all CRUD methods Frontend: - api.ts: typed fetch wrapper with automatic Bearer token injection - auth.ts: JWT/PIN localStorage management with Svelte store - /join: name entry form with PIN display modal and copy button - /recover: name + PIN recovery form with saved PIN pre-fill - /feed: placeholder gallery page with logout - Root layout: auth initialization on mount - Root page: redirect to /join or /feed based on auth state All responses use German language strings as specified. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
38 lines
871 B
Svelte
38 lines
871 B
Svelte
<script lang="ts">
|
|
import { goto } from '$app/navigation';
|
|
import { getToken, clearAuth } from '$lib/auth';
|
|
import { api } from '$lib/api';
|
|
import { onMount } from 'svelte';
|
|
|
|
onMount(() => {
|
|
if (!getToken()) {
|
|
goto('/join');
|
|
}
|
|
});
|
|
|
|
async function handleLogout() {
|
|
try {
|
|
await api.delete('/session');
|
|
} catch {
|
|
// Ignore errors — clear local state regardless
|
|
}
|
|
clearAuth();
|
|
goto('/join');
|
|
}
|
|
</script>
|
|
|
|
<div class="min-h-screen bg-gray-50 p-4">
|
|
<div class="mx-auto max-w-2xl">
|
|
<div class="mb-6 flex items-center justify-between">
|
|
<h1 class="text-xl font-bold text-gray-900">Galerie</h1>
|
|
<button
|
|
onclick={handleLogout}
|
|
class="rounded-md bg-gray-200 px-3 py-1 text-sm text-gray-700 hover:bg-gray-300"
|
|
>
|
|
Abmelden
|
|
</button>
|
|
</div>
|
|
<p class="text-gray-600">Die Galerie wird bald hier angezeigt.</p>
|
|
</div>
|
|
</div>
|