Compare commits
2
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 schn33fuchs
|
a04c3cd8e2 | ||
|
schn33fuchs
|
ae0176b49a |
@@ -27,3 +27,6 @@ frontend/node_modules/
|
||||
|
||||
/target
|
||||
.antigravitycli/
|
||||
.sqlx/
|
||||
backend/.sqlx/
|
||||
dist/
|
||||
|
||||
Generated
+132
@@ -2,6 +2,12 @@
|
||||
# It is not intended for manual editing.
|
||||
version = 4
|
||||
|
||||
[[package]]
|
||||
name = "adler2"
|
||||
version = "2.0.1"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
|
||||
|
||||
[[package]]
|
||||
name = "allocator-api2"
|
||||
version = "0.2.21"
|
||||
@@ -150,7 +156,9 @@ dependencies = [
|
||||
"axum-extra",
|
||||
"chrono",
|
||||
"dotenv",
|
||||
"hex",
|
||||
"jsonwebtoken",
|
||||
"rand",
|
||||
"serde",
|
||||
"serde_json",
|
||||
"sqlx",
|
||||
@@ -226,12 +234,24 @@ version = "3.20.2"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "5d20789868f4b01b2f2caec9f5c4e0213b41e3e5702a50157d699ae31ced2fcb"
|
||||
|
||||
[[package]]
|
||||
name = "bytemuck"
|
||||
version = "1.25.1"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "d6aedf8ae72766347502cf3cb4f41cf5e9cc37d28bee90f1fdaaae15f9cf9424"
|
||||
|
||||
[[package]]
|
||||
name = "byteorder"
|
||||
version = "1.5.0"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
|
||||
|
||||
[[package]]
|
||||
name = "byteorder-lite"
|
||||
version = "0.1.0"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "8f1fe948ff07f4bd06c30984e69f5b4899c516a3ef74f34df92a2df2ab535495"
|
||||
|
||||
[[package]]
|
||||
name = "bytes"
|
||||
version = "1.11.1"
|
||||
@@ -354,6 +374,15 @@ version = "2.5.0"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "217698eaf96b4a3f0bc4f3662aaa55bdf913cd54d7204591faa790070c6d0853"
|
||||
|
||||
[[package]]
|
||||
name = "crc32fast"
|
||||
version = "1.5.0"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
|
||||
dependencies = [
|
||||
"cfg-if",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "crossbeam-queue"
|
||||
version = "0.3.12"
|
||||
@@ -585,6 +614,15 @@ version = "2.4.1"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "9f1f227452a390804cdb637b74a86990f2a7d7ba4b7d5693aac9b4dd6defd8d6"
|
||||
|
||||
[[package]]
|
||||
name = "fdeflate"
|
||||
version = "0.3.7"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "1e6853b52649d4ac5c0bd02320cddc5ba956bdb407c4b75a2c6b75bf51500f8c"
|
||||
dependencies = [
|
||||
"simd-adler32",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "ff"
|
||||
version = "0.13.1"
|
||||
@@ -607,6 +645,16 @@ version = "0.1.9"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
|
||||
|
||||
[[package]]
|
||||
name = "flate2"
|
||||
version = "1.1.9"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "843fba2746e448b37e26a819579957415c8cef339bf08564fe8b7ddbd959573c"
|
||||
dependencies = [
|
||||
"crc32fast",
|
||||
"miniz_oxide",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "flume"
|
||||
version = "0.11.1"
|
||||
@@ -658,11 +706,14 @@ dependencies = [
|
||||
name = "frontend"
|
||||
version = "0.1.0"
|
||||
dependencies = [
|
||||
"base64",
|
||||
"chrono",
|
||||
"chrono-tz",
|
||||
"dotenv",
|
||||
"gloo 0.12.0",
|
||||
"gloo-net 0.7.0",
|
||||
"gloo-storage 0.4.0",
|
||||
"qrcode-generator",
|
||||
"serde",
|
||||
"serde_json",
|
||||
"theme",
|
||||
@@ -1504,6 +1555,12 @@ dependencies = [
|
||||
"windows-sys 0.61.2",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "html-escape"
|
||||
version = "0.2.14"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "46c1ff2d1cbf39efe5af0900ced8a069b5e61557a17544eb0c4a50239937389e"
|
||||
|
||||
[[package]]
|
||||
name = "http"
|
||||
version = "0.2.12"
|
||||
@@ -1728,6 +1785,19 @@ dependencies = [
|
||||
"icu_properties",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "image"
|
||||
version = "0.25.10"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "85ab80394333c02fe689eaf900ab500fbd0c2213da414687ebf995a65d5a6104"
|
||||
dependencies = [
|
||||
"bytemuck",
|
||||
"byteorder-lite",
|
||||
"moxcms",
|
||||
"num-traits",
|
||||
"png",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "implicit-clone"
|
||||
version = "0.4.9"
|
||||
@@ -1915,6 +1985,16 @@ version = "0.3.17"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
|
||||
|
||||
[[package]]
|
||||
name = "miniz_oxide"
|
||||
version = "0.8.9"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
|
||||
dependencies = [
|
||||
"adler2",
|
||||
"simd-adler32",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "mio"
|
||||
version = "1.2.0"
|
||||
@@ -1926,6 +2006,16 @@ dependencies = [
|
||||
"windows-sys 0.61.2",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "moxcms"
|
||||
version = "0.8.1"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "bb85c154ba489f01b25c0d36ae69a87e4a1c73a72631fc6c0eb6dde34a73e44b"
|
||||
dependencies = [
|
||||
"num-traits",
|
||||
"pxfm",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "native-tls"
|
||||
version = "0.2.18"
|
||||
@@ -2242,6 +2332,19 @@ version = "0.2.3"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "b4596b6d070b27117e987119b4dac604f3c58cfb0b191112e24771b2faeac1a6"
|
||||
|
||||
[[package]]
|
||||
name = "png"
|
||||
version = "0.18.1"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "60769b8b31b2a9f263dae2776c37b1b28ae246943cf719eb6946a1db05128a61"
|
||||
dependencies = [
|
||||
"bitflags",
|
||||
"crc32fast",
|
||||
"fdeflate",
|
||||
"flate2",
|
||||
"miniz_oxide",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "potential_utf"
|
||||
version = "0.1.5"
|
||||
@@ -2354,6 +2457,29 @@ dependencies = [
|
||||
"wasm-bindgen-futures",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "pxfm"
|
||||
version = "0.1.30"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "d55d956fa96f5ec02be2e13af0e20391a5aa83d6a074e3ad368959d0fab299ea"
|
||||
|
||||
[[package]]
|
||||
name = "qrcode-generator"
|
||||
version = "5.0.0"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "faf0051849b5465059b75f59d388c7318aad6554701b74ecf02afc2573b0306c"
|
||||
dependencies = [
|
||||
"html-escape",
|
||||
"image",
|
||||
"qrcodegen",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "qrcodegen"
|
||||
version = "1.8.0"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "4339fc7a1021c9c1621d87f5e3505f2805c8c105420ba2f2a4df86814590c142"
|
||||
|
||||
[[package]]
|
||||
name = "quote"
|
||||
version = "1.0.45"
|
||||
@@ -2684,6 +2810,12 @@ dependencies = [
|
||||
"rand_core",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "simd-adler32"
|
||||
version = "0.3.10"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
checksum = "3a219298ac11a56ea9a6d2120044824d6f01aeb034955e7af7bc16858527deea"
|
||||
|
||||
[[package]]
|
||||
name = "simple_asn1"
|
||||
version = "0.6.4"
|
||||
|
||||
@@ -17,3 +17,5 @@ argon2 = "0.5.3"
|
||||
time = "0.3.47"
|
||||
tower = "0.5.3"
|
||||
tower-http = { version = "0.6.8", features = ["cors"] }
|
||||
rand = '0.8'
|
||||
hex = '0.4'
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
DROP TABLE qr_codes;
|
||||
@@ -0,0 +1,8 @@
|
||||
CREATE TABLE qr_codes (
|
||||
id INT GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
|
||||
user_id SMALLINT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
|
||||
token_hash VARCHAR(255) NOT NULL UNIQUE,
|
||||
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
|
||||
);
|
||||
|
||||
CREATE INDEX idx_qr_token_hash ON qr_codes(token_hash);
|
||||
@@ -3,4 +3,5 @@
|
||||
//! It serves as a central point for managing the logic that responds to various
|
||||
//! HTTP requests, categorizing handlers by their domain (e.g., authentication, tickets).
|
||||
pub mod auth;
|
||||
pub mod qr;
|
||||
pub mod ticket;
|
||||
|
||||
@@ -0,0 +1,130 @@
|
||||
use std::sync::Arc;
|
||||
|
||||
use argon2::{Argon2, PasswordHash, PasswordHasher, PasswordVerifier, password_hash::SaltString};
|
||||
use axum::{
|
||||
Json,
|
||||
extract::{Query, State},
|
||||
http::{StatusCode, header::SET_COOKIE},
|
||||
response::{Html, IntoResponse, Response},
|
||||
};
|
||||
use jsonwebtoken::{EncodingKey, Header};
|
||||
use rand::{RngCore, thread_rng};
|
||||
use serde::{Deserialize, Serialize};
|
||||
use sqlx::Row;
|
||||
|
||||
use crate::{AppState, cookie::jwt::encode_token};
|
||||
|
||||
#[derive(Serialize)]
|
||||
pub struct QrCodeResponse {
|
||||
pub raw_token: String,
|
||||
}
|
||||
|
||||
#[derive(Serialize, Deserialize)]
|
||||
pub struct AuthQuery {
|
||||
pub token: String,
|
||||
}
|
||||
|
||||
#[derive(Deserialize)]
|
||||
pub struct GenerateQrRequest {
|
||||
pub user_id: i16,
|
||||
}
|
||||
|
||||
pub async fn generate_qr_token(
|
||||
State(data): State<Arc<AppState>>,
|
||||
Json(payload): Json<GenerateQrRequest>,
|
||||
) -> Result<impl IntoResponse, StatusCode> {
|
||||
let mut token_bytes = [0u8; 32];
|
||||
thread_rng().fill_bytes(&mut token_bytes);
|
||||
let raw_token = hex::encode(token_bytes);
|
||||
|
||||
let salt = SaltString::generate(&mut thread_rng());
|
||||
|
||||
let argon2 = Argon2::default();
|
||||
let token_hash = argon2
|
||||
.hash_password(raw_token.as_bytes(), &salt)
|
||||
.map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?
|
||||
.to_string();
|
||||
|
||||
sqlx::query("INSERT INTO qr_codes (user_id, token_hash) VALUES ($1, $2)")
|
||||
.bind(payload.user_id)
|
||||
.bind(token_hash)
|
||||
.execute(&data.db)
|
||||
.await
|
||||
.map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?;
|
||||
|
||||
Ok((StatusCode::CREATED, Json(QrCodeResponse { raw_token })))
|
||||
}
|
||||
|
||||
pub async fn validate_qr_token(
|
||||
State(data): State<Arc<AppState>>,
|
||||
Query(params): Query<AuthQuery>,
|
||||
) -> Response {
|
||||
let active_tokens_res = sqlx::query("SELECT user_id, token_hash FROM qr_codes")
|
||||
.fetch_all(&data.db)
|
||||
.await;
|
||||
|
||||
let active_tokens = match active_tokens_res {
|
||||
Ok(tokens) => tokens,
|
||||
Err(_) => return StatusCode::INTERNAL_SERVER_ERROR.into_response(),
|
||||
};
|
||||
|
||||
let mut authenticated_user_id: Option<i16> = None;
|
||||
let argon2 = Argon2::default();
|
||||
|
||||
for record in active_tokens {
|
||||
let user_id: i16 = record.get("user_id");
|
||||
let token_hash: String = record.get("token_hash");
|
||||
|
||||
if let Ok(parsed_hash) = PasswordHash::new(&token_hash) {
|
||||
if argon2
|
||||
.verify_password(params.token.as_bytes(), &parsed_hash)
|
||||
.is_ok()
|
||||
{
|
||||
authenticated_user_id = Some(user_id);
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if let Some(user_id) = authenticated_user_id {
|
||||
let base_origin = data.env.origin.trim_end_matches('/');
|
||||
|
||||
let header = Header::default();
|
||||
let id_str = user_id.to_string();
|
||||
let secret_bytes = data.env.token_secret.as_bytes();
|
||||
let encoding_key = EncodingKey::from_secret(secret_bytes);
|
||||
|
||||
let token = encode_token(&header, id_str, &encoding_key);
|
||||
|
||||
let cookie_value = format!(
|
||||
"token={}; Path=/; HttpOnly; SameSite=Lax; Max-Age=3600",
|
||||
token
|
||||
);
|
||||
|
||||
let redirect_html = format!(
|
||||
r#"<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<meta http-equiv="refresh" content="0; url={}/" />
|
||||
<script type="text/javascript">
|
||||
window.location.href = "{}/"
|
||||
</script>
|
||||
<title>Redirecting...</title>
|
||||
</head>
|
||||
<body>
|
||||
<p>Authenticated! Redirecting you to the dashboard...</p>
|
||||
</body>
|
||||
</html>"#,
|
||||
base_origin, base_origin
|
||||
);
|
||||
|
||||
let mut response = Html(redirect_html).into_response();
|
||||
if let Ok(header_value) = axum::http::HeaderValue::from_str(&cookie_value) {
|
||||
response.headers_mut().insert(SET_COOKIE, header_value);
|
||||
}
|
||||
|
||||
response
|
||||
} else {
|
||||
StatusCode::UNAUTHORIZED.into_response()
|
||||
}
|
||||
}
|
||||
+23
-5
@@ -1,7 +1,10 @@
|
||||
use std::sync::Arc;
|
||||
|
||||
use axum::{
|
||||
Router, middleware,
|
||||
Router,
|
||||
http::StatusCode,
|
||||
middleware,
|
||||
response::IntoResponse,
|
||||
routing::{get, post},
|
||||
};
|
||||
|
||||
@@ -10,13 +13,22 @@ use crate::{
|
||||
cookie::validation::{validate_admin, validate_token},
|
||||
handlers::{
|
||||
auth::{
|
||||
check_admin_exists, create_user, delete_user, get_current_user, get_user_by_id, get_users, login, logout,
|
||||
setup_initial_admin, update_user,
|
||||
check_admin_exists, create_user, delete_user, get_current_user, get_user_by_id,
|
||||
get_users, login, logout, setup_initial_admin, update_user,
|
||||
},
|
||||
qr::{generate_qr_token, validate_qr_token},
|
||||
ticket::{create_ticket, delete_ticket, edit_ticket, get_ticket_by_id, get_tickets},
|
||||
},
|
||||
};
|
||||
|
||||
async fn debug_fallback_handler(uri: axum::http::Uri) -> impl IntoResponse {
|
||||
println!(
|
||||
"[BACKEND DEBUG] Axum Fallback triggered! Unmatched request path: {}",
|
||||
uri
|
||||
);
|
||||
(StatusCode::NOT_FOUND, "Backend route not found")
|
||||
}
|
||||
|
||||
/// Creates the complete router with all API endpoints.
|
||||
///
|
||||
/// The router is organized in layers for proper middleware application. Uses [`AppState`]
|
||||
@@ -63,6 +75,7 @@ pub fn create_router(state: Arc<AppState>) -> Router {
|
||||
"/api/users/{id}",
|
||||
get(get_user_by_id).delete(delete_user).patch(update_user),
|
||||
)
|
||||
.route("/api/generate_qr", post(generate_qr_token))
|
||||
.layer(middleware::from_fn_with_state(
|
||||
state.clone(),
|
||||
validate_admin,
|
||||
@@ -79,10 +92,15 @@ pub fn create_router(state: Arc<AppState>) -> Router {
|
||||
validate_token,
|
||||
));
|
||||
|
||||
Router::new()
|
||||
.merge(protected_routes)
|
||||
let public_routes = Router::new()
|
||||
.route("/api/login", post(login))
|
||||
.route("/api/check-admin", get(check_admin_exists))
|
||||
.route("/api/setup-admin", post(setup_initial_admin))
|
||||
.route("/api/qr_login", get(validate_qr_token));
|
||||
|
||||
Router::new()
|
||||
.merge(protected_routes)
|
||||
.merge(public_routes)
|
||||
.fallback(debug_fallback_handler)
|
||||
.with_state(state)
|
||||
}
|
||||
|
||||
@@ -27,3 +27,6 @@ chrono = { workspace = true }
|
||||
chrono-tz = "0.10.4"
|
||||
wasm-bindgen = "0.2.120"
|
||||
theme = { version = "0.0.3", features = ["yew"] }
|
||||
qrcode-generator = "5.0.0"
|
||||
base64 = '0.22'
|
||||
dotenv = '0.15.0'
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
[serve]
|
||||
# The address to serve on LAN.
|
||||
addresses = ["127.0.0.1","192.168.2.157"] #,"10.150.9.7"]
|
||||
addresses = ["127.0.0.1"] #,"10.150.9.7"]
|
||||
# The address to serve on WAN.
|
||||
# address = "0.0.0.0"
|
||||
# The port to serve on.
|
||||
|
||||
+1
-1
@@ -5,7 +5,7 @@
|
||||
<link data-trunk rel="rust" data-bin="bin" />
|
||||
<link data-trunk rel="scss" href="src/styles/main.scss" />
|
||||
<link data-trunk rel="icon" href="src/assets/favicon.ico" type="image/x-icon" />
|
||||
<link data-trunk rel="copy-dir" href="src/assets" />
|
||||
<link data-trunk rel="copy-dir" href="src/assets" data-target-path="assets" />
|
||||
<meta charset="utf-8" />
|
||||
<title>Yew App</title>
|
||||
</head>
|
||||
|
||||
@@ -138,7 +138,6 @@ fn sidebar_shell(props: &SidebarShellProps) -> Html {
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/// Props for the AdminCheckWrapper component.
|
||||
#[derive(Properties, PartialEq)]
|
||||
pub struct AdminCheckWrapperProps {
|
||||
|
||||
@@ -136,6 +136,6 @@ pub fn denied_component() -> Html {
|
||||
#[component(Icon)]
|
||||
pub fn icon_component() -> Html {
|
||||
html! {
|
||||
<img src="assets/csg.png" class="csg-icon" />
|
||||
<img src="/assets/csg.png" class="csg-icon" />
|
||||
}
|
||||
}
|
||||
|
||||
@@ -6,6 +6,7 @@
|
||||
//! By re-exporting them here, other parts of the application can import page
|
||||
//! components more conveniently using `crate::pages::*`.
|
||||
pub mod basic_pages;
|
||||
pub mod qr;
|
||||
pub mod setup;
|
||||
pub mod sidebar;
|
||||
pub mod ticket;
|
||||
|
||||
@@ -0,0 +1,118 @@
|
||||
use base64::{Engine, engine::general_purpose::STANDARD};
|
||||
use gloo_net::http::Request;
|
||||
use serde::{Deserialize, Serialize};
|
||||
use yew::prelude::*;
|
||||
|
||||
#[derive(Deserialize, Clone)]
|
||||
struct QrResponse {
|
||||
raw_token: String,
|
||||
}
|
||||
#[derive(Properties, PartialEq)]
|
||||
pub struct QrManagerProps {
|
||||
pub user_id: i16,
|
||||
}
|
||||
|
||||
#[derive(Serialize)]
|
||||
pub struct QrPayload {
|
||||
user_id: i16,
|
||||
}
|
||||
|
||||
#[function_component(QrManager)]
|
||||
pub fn qr_manager(props: &QrManagerProps) -> Html {
|
||||
let qr_image_data = use_state(|| None::<String>);
|
||||
let error_message = use_state(|| None::<String>);
|
||||
let user_id = props.user_id;
|
||||
|
||||
let on_generate_click = {
|
||||
let qr_image_data = qr_image_data.clone();
|
||||
let error_message = error_message.clone();
|
||||
|
||||
Callback::from(move |_| {
|
||||
let qr_image_data = qr_image_data.clone();
|
||||
let error_message = error_message.clone();
|
||||
|
||||
wasm_bindgen_futures::spawn_local(async move {
|
||||
let payload = QrPayload { user_id };
|
||||
|
||||
match Request::post("/api/generate_qr")
|
||||
.json(&payload)
|
||||
.unwrap()
|
||||
.send()
|
||||
.await
|
||||
{
|
||||
Ok(response) if response.ok() => {
|
||||
if let Ok(data) = response.json::<QrResponse>().await {
|
||||
// Point scanned link to the public login endpoint with the token
|
||||
let target_url = format!(
|
||||
"{}/api/qr_login?token={}",
|
||||
std::env::var("ORIGIN")
|
||||
.ok()
|
||||
.unwrap_or("http://localhost:8000".to_string()),
|
||||
data.raw_token
|
||||
);
|
||||
|
||||
match qrcode_generator::to_png_to_vec(
|
||||
target_url,
|
||||
qrcode_generator::QrCodeEcc::Medium,
|
||||
250,
|
||||
) {
|
||||
Ok(png_bytes) => {
|
||||
let base64_png = format!(
|
||||
"data:image/png;base64,{}",
|
||||
STANDARD.encode(&png_bytes)
|
||||
);
|
||||
qr_image_data.set(Some(base64_png));
|
||||
error_message.set(None);
|
||||
}
|
||||
Err(_) => {
|
||||
error_message
|
||||
.set(Some("Failed to render QR graphic.".to_string()));
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
_ => {
|
||||
error_message.set(Some(
|
||||
"Failed to generate token. Are you logged in as an admin?".to_string(),
|
||||
));
|
||||
}
|
||||
}
|
||||
});
|
||||
})
|
||||
};
|
||||
|
||||
html! {
|
||||
<div style="text-align: center; padding: 15px; border: 1px dashed #ccc; border-radius: 6px;">
|
||||
<h4>{"Permanent Login Access"}</h4>
|
||||
<p style="font-size: 0.85em; color: #555;">
|
||||
{ format!("Generate a permanent bypass login QR code for User #{}", user_id) }
|
||||
</p>
|
||||
|
||||
<button
|
||||
onclick={on_generate_click}
|
||||
style="padding: 8px 16px; background-color: #28a745; color: white; border: none; border-radius: 4px; cursor: pointer; font-weight: bold;"
|
||||
>
|
||||
{"Generate QR Code"}
|
||||
</button>
|
||||
|
||||
{ if let Some(ref err) = *error_message {
|
||||
html! { <p style="color: #dc3545; margin-top: 10px; font-size: 0.9em;">{err}</p> }
|
||||
} else {
|
||||
html! {}
|
||||
}}
|
||||
|
||||
{ if let Some(ref qr_src) = *qr_image_data {
|
||||
html! {
|
||||
<div style="margin-top: 15px;">
|
||||
<img src={qr_src.clone()} alt="Login QR Code" style="border: 1px solid #ddd; padding: 8px; background: white;" />
|
||||
<p style="font-size: 0.8em; color: #dc3545; font-weight: bold; margin-top: 8px;">
|
||||
{"Warn the user to keep this QR code secure!"}
|
||||
</p>
|
||||
</div>
|
||||
}
|
||||
} else {
|
||||
html! {}
|
||||
}}
|
||||
</div>
|
||||
}
|
||||
}
|
||||
@@ -185,7 +185,7 @@ pub fn register_component() -> Html {
|
||||
Ok(response) => {
|
||||
let text = response.text().await.unwrap_or_else(|_| "Unbekannt".into());
|
||||
status.set(Some(text));
|
||||
},
|
||||
}
|
||||
Err(err) => status.set(Some(format!("Netzwerkfehler: {}", err))),
|
||||
}
|
||||
});
|
||||
@@ -688,7 +688,8 @@ pub fn user_by_id_component(props: &UserProps) -> Html {
|
||||
<p><strong>{ "Ist Admin: " }</strong>{ u.is_admin }</p>
|
||||
</div>
|
||||
|
||||
<h1>{ format!("User #{}", u.id) }</h1>
|
||||
<crate::pages::qr::QrManager user_id={u.id}/>
|
||||
|
||||
<form onsubmit={onsubmit}>
|
||||
<div>
|
||||
<label>{ "Vorname" }
|
||||
|
||||
Reference in New Issue
Block a user