private/desktop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

asdasd
All checks were successful
Deploy / deploy-staging (push) Successful in 25s
Details
Deploy / deploy-production (push) Has been skipped
Details

Browse Source
This commit is contained in:
Lars Gebhardt-Kusche
2026-06-25 00:17:31 +02:00
parent 46111d8988
commit ac2d95fc56
140 changed files with 1168 additions and 1984 deletions
Download Patch File Download Diff File Expand all files Collapse all files

375
public/admin/cron/index.php
View File

@@ -4,377 +4,6 @@ declare(strict_types=1);
require_once dirname(__DIR__, 3) . '/src/App/bootstrap.php';
use App\ConfigLoader;
use App\CronManagementService;
use App\KeycloakAuth;
use ModulesCore\ModuleRegistry;
use App\AppPaths;
if (session_status() !== PHP_SESSION_ACTIVE) {
session_start();
}
$projectRoot = dirname(__DIR__, 3);
$auth = new KeycloakAuth(ConfigLoader::load($projectRoot, 'keycloak'));
if (!$auth->isAuthenticated()) {
header('Location: /auth/keycloak', true, 302);
exit;
}
$currentUser = is_array($_SESSION['desktop_auth']['user'] ?? null) ? $_SESSION['desktop_auth']['user'] : [];
$currentGroups = array_map(
static fn (string $group): string => strtolower(trim($group, '/')),
array_values(array_map('strval', (array) ($currentUser['groups'] ?? [])))
);
$isPartial = !empty($_GET['partial']);
if (!in_array('administrators', $currentGroups, true)) {
http_response_code(403);
$forbidden = '<div class="window-app-shell cm-shell"><div class="window-app-frame cm-frame"><main class="window-app-main cm-main"><div class="window-app-panel cm-panel"><section class="window-app-card cm-card"><p class="cm-message is-error">Kein Zugriff auf Cron Tool.</p></section></div></main></div></div>';
if ($isPartial) {
echo $forbidden;
return;
}
?><!DOCTYPE html>
<html lang="de">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Cron Tool</title>
<link rel="stylesheet" href="/assets/desktop/desktop.css">
<link rel="stylesheet" href="/assets/apps/cron-management/app.css">
</head>
<body><?= $forbidden ?></body>
</html><?php
return;
}
$csrfToken = (string) ($_SESSION['cron_management_token'] ?? '');
if ($csrfToken === '') {
$csrfToken = bin2hex(random_bytes(16));
$_SESSION['cron_management_token'] = $csrfToken;
}
$baseUrlFallback = ((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http')
. '://'
. ($_SERVER['HTTP_HOST'] ?? 'localhost');
$service = new CronManagementService($projectRoot, new ModuleRegistry($projectRoot . '/modules'));
$messages = [];
$errors = [];
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$postedToken = (string) ($_POST['csrf_token'] ?? '');
if ($postedToken === '' || !hash_equals($csrfToken, $postedToken)) {
$errors[] = 'Die Formularpruefung ist fehlgeschlagen.';
} else {
$action = (string) ($_POST['action'] ?? '');
try {
if ($action === 'save-global') {
$service->saveGlobal([
'base_url' => (string) ($_POST['base_url'] ?? ''),
'default_timezone' => (string) ($_POST['default_timezone'] ?? ''),
], $baseUrlFallback);
$messages[] = 'Globale Cron-Einstellungen gespeichert.';
} elseif ($action === 'regenerate-token') {
$service->regenerateToken($baseUrlFallback);
$messages[] = 'Cron-Token wurde neu erzeugt.';
} elseif ($action === 'run-due') {
$results = $service->runDue($baseUrlFallback);
if ($results === []) {
$messages[] = 'Aktuell war kein Cron-Job faellig.';
} else {
foreach ($results as $result) {
$messages[] = sprintf(
'%s: %s',
(string) ($result['job_key'] ?? 'Cron-Job'),
(string) ($result['message'] ?? '')
);
}
}
} elseif ($action === 'save-job') {
$jobKey = (string) ($_POST['job_key'] ?? '');
$service->saveJob($jobKey, [
'enabled' => !empty($_POST['enabled']),
'cron_expression' => (string) ($_POST['cron_expression'] ?? ''),
'timezone' => (string) ($_POST['timezone'] ?? ''),
], $baseUrlFallback);
$messages[] = 'Cron-Job gespeichert: ' . $jobKey;
} elseif ($action === 'toggle-job') {
$jobKey = (string) ($_POST['job_key'] ?? '');
$service->saveJob($jobKey, [
'enabled' => !empty($_POST['enabled']),
'cron_expression' => (string) ($_POST['cron_expression'] ?? ''),
'timezone' => (string) ($_POST['timezone'] ?? ''),
], $baseUrlFallback);
$messages[] = 'Status aktualisiert: ' . $jobKey;
} elseif ($action === 'run-now') {
$jobKey = (string) ($_POST['job_key'] ?? '');
$result = $service->runNow($jobKey, $baseUrlFallback);
if (!empty($result['ok'])) {
$messages[] = (string) ($result['message'] ?? 'Cron-Job ausgefuehrt.');
} else {
$errors[] = (string) ($result['message'] ?? 'Cron-Job fehlgeschlagen.');
}
}
} catch (\Throwable $exception) {
$errors[] = $exception->getMessage();
}
}
}
$bootstrap = $service->bootstrap($baseUrlFallback);
$settings = is_array($bootstrap['settings'] ?? null) ? $bootstrap['settings'] : [];
$jobs = is_array($bootstrap['jobs'] ?? null) ? $bootstrap['jobs'] : [];
$h = static fn (?string $value): string => htmlspecialchars($value ?? '', ENT_QUOTES);
ob_start();
?>
<div id="cron-management-app" class="window-app-shell cm-shell">
<div class="window-app-frame cm-frame">
<aside class="window-app-sidebar cm-sidebar">
<div class="window-app-brand cm-brand">
<p class="window-app-kicker cm-kicker">Systemtool</p>
<h1>Cron Tool</h1>
<p class="window-app-copy cm-copy">Zentrale Verwaltung fuer modulweite Cron-Jobs, Zeitplaene und manuelle Testlaeufe.</p>
</div>
<section class="window-app-card cm-card">
<strong class="cm-side-title">Schnellstatus</strong>
<div class="cm-side-metric">
<span>Definierte Jobs</span>
<strong><?= count($jobs) ?></strong>
</div>
<div class="cm-side-metric">
<span>Faellige Jobs</span>
<strong><?= count(array_filter($jobs, static fn (array $job): bool => !empty($job['is_due']))) ?></strong>
</div>
<div class="cm-side-metric">
<span>Standard-Zeitzone</span>
<strong><?= $h((string) ($settings['default_timezone'] ?? 'Europe/Berlin')) ?></strong>
</div>
</section>
</aside>
<main class="window-app-main cm-main">
<div class="window-app-panel cm-panel">
<section class="window-app-hero cm-hero">
<div>
<p class="window-app-kicker cm-kicker">Cron Registry</p>
<h2 class="window-app-title">Globale Scheduler-Verwaltung</h2>
<p class="window-app-copy cm-copy">Module hinterlegen ihre Cron-Endpunkte in der Manifest-Datei. Dieses Systemtool sammelt sie automatisch und verwaltet Zeitplaene zentral.</p>
</div>
<div class="window-app-pill-row cm-pill-row">
<span class="window-app-pill">Base URL: <?= $h((string) ($settings['base_url'] ?? '')) ?></span>
<span class="window-app-pill">Token aktiv</span>
<span class="window-app-pill">Admin only</span>
</div>
</section>
<?php if ($messages !== []): ?>
<section class="window-app-card cm-card">
<div class="cm-message is-success">
<strong>Ergebnis</strong>
<ul class="cm-list">
<?php foreach ($messages as $message): ?>
<li><?= $h($message) ?></li>
<?php endforeach; ?>
</ul>
</div>
</section>
<?php endif; ?>
<?php if ($errors !== []): ?>
<section class="window-app-card cm-card">
<div class="cm-message is-error">
<strong>Bitte pruefen</strong>
<ul class="cm-list">
<?php foreach ($errors as $error): ?>
<li><?= $h($error) ?></li>
<?php endforeach; ?>
</ul>
</div>
</section>
<?php endif; ?>
<section class="window-app-card cm-card">
<div class="cm-section-head">
<div>
<p class="window-app-kicker cm-kicker">Global</p>
<h3 class="cm-section-title">Runner-Einstellungen</h3>
</div>
</div>
<form class="cm-form cm-form--global" method="post" action="/admin/cron/">
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
<input type="hidden" name="action" value="save-global">
<label class="cm-field">
<span>Base URL fuer Cron-Aufrufe</span>
<input type="text" name="base_url" value="<?= $h((string) ($settings['base_url'] ?? '')) ?>" placeholder="https://staging.desktop.kusche.berlin">
</label>
<label class="cm-field">
<span>Standard-Zeitzone</span>
<input type="text" name="default_timezone" value="<?= $h((string) ($settings['default_timezone'] ?? 'Europe/Berlin')) ?>" list="timezone-options">
</label>
<div class="cm-token-box">
<strong>Cron-Token</strong>
<code><?= $h((string) ($settings['cron_token'] ?? '')) ?></code>
<p>Der Token wird fuer interne Cron-Aufrufe per `X-Desktop-Cron-Token` genutzt.</p>
</div>
<div class="cm-actions">
<button class="window-app-nav-button cm-primary" type="submit">Globale Einstellungen speichern</button>
</div>
</form>
<form class="cm-inline-form" method="post" action="/admin/cron/">
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
<input type="hidden" name="action" value="regenerate-token">
<button class="window-app-nav-button cm-secondary" type="submit">Cron-Token neu erzeugen</button>
</form>
<form class="cm-inline-form" method="post" action="/admin/cron/">
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
<input type="hidden" name="action" value="run-due">
<button class="window-app-nav-button cm-secondary" type="submit">Faellige Jobs jetzt ausfuehren</button>
</form>
</section>
<section class="window-app-card cm-card">
<div class="cm-section-head">
<div>
<p class="window-app-kicker cm-kicker">Jobs</p>
<h3 class="cm-section-title">Erkannte Modul-Crons</h3>
<p class="cm-copy">Neue Cronjob-Typen entstehen ueber Modul-Metadaten. Ein einzelner Job kann hier angelegt, aktiviert und spaeter bearbeitet werden.</p>
</div>
</div>
<div class="cm-job-list">
<?php foreach ($jobs as $job): ?>
<article class="window-app-card cm-job-card">
<div class="cm-job-head">
<div>
<strong><?= $h((string) ($job['label'] ?? $job['job_key'] ?? 'Cron-Job')) ?></strong>
<p><?= $h((string) ($job['description'] ?? '')) ?></p>
</div>
<div class="cm-job-meta">
<span class="window-app-pill"><?= $h((string) ($job['module_id'] ?? 'module')) ?></span>
<span class="window-app-pill"><?= $h((string) ($job['method'] ?? 'POST')) ?></span>
<?php if (empty($job['configured'])): ?>
<span class="window-app-pill">nicht angelegt</span>
<?php endif; ?>
</div>
</div>
<div class="cm-job-summary">
<div class="cm-job-summary-item">
<span>Status</span>
<strong><?= $h((string) (($job['state']['last_status'] ?? '') ?: ($job['enabled'] ? 'aktiv' : 'inaktiv'))) ?></strong>
</div>
<div class="cm-job-summary-item">
<span>Zeitplan</span>
<strong><?= $h((string) ($job['cron_human'] ?? 'n/a')) ?></strong>
</div>
<div class="cm-job-summary-item">
<span>Naechster Lauf</span>
<strong><?= $h((string) (($job['next_due_at_local'] ?? '') ?: 'n/a')) ?></strong>
</div>
<div class="cm-job-summary-item">
<span>Letzter Erfolg</span>
<strong><?= $h((string) (($job['state_local']['last_success_at'] ?? '') ?: 'n/a')) ?></strong>
</div>
</div>
<div class="cm-job-inline-meta">
<span><strong>Cron</strong> <?= $h((string) ($job['cron_expression'] ?? '')) ?></span>
<span><strong>Zeitzone</strong> <?= $h((string) ($job['timezone'] ?? ($settings['default_timezone'] ?? 'Europe/Berlin'))) ?></span>
<span><strong>Endpoint</strong> <?= $h((string) ($job['endpoint_path'] ?? '')) ?></span>
</div>
<?php if (!empty($job['parse_error'])): ?>
<p class="cm-parse-error">Cron-Fehler: <?= $h((string) $job['parse_error']) ?></p>
<?php endif; ?>
<?php if (!empty($job['state']['last_message'])): ?>
<p class="cm-job-message"><?= $h((string) $job['state']['last_message']) ?></p>
<?php endif; ?>
<div class="cm-job-toolbar">
<form class="cm-inline-form" method="post" action="/admin/cron/">
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
<input type="hidden" name="action" value="toggle-job">
<input type="hidden" name="job_key" value="<?= $h((string) ($job['job_key'] ?? '')) ?>">
<input type="hidden" name="enabled" value="<?= empty($job['enabled']) ? '1' : '0' ?>">
<input type="hidden" name="cron_expression" value="<?= $h((string) ($job['cron_expression'] ?? '0 * * * *')) ?>">
<input type="hidden" name="timezone" value="<?= $h((string) ($job['timezone'] ?? ($settings['default_timezone'] ?? 'Europe/Berlin'))) ?>">
<button class="window-app-nav-button cm-secondary" type="submit"><?= !empty($job['enabled']) ? 'Deaktivieren' : 'Aktivieren' ?></button>
</form>
<form class="cm-inline-form" method="post" action="/admin/cron/">
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
<input type="hidden" name="action" value="run-now">
<input type="hidden" name="job_key" value="<?= $h((string) ($job['job_key'] ?? '')) ?>">
<button class="window-app-nav-button cm-secondary" type="submit">Jetzt ausfuehren</button>
</form>
<button class="window-app-nav-button cm-secondary" type="button" data-cm-edit-toggle="job-<?= $h((string) ($job['job_key'] ?? '')) ?>"><?= empty($job['configured']) ? 'Cronjob anlegen' : 'Bearbeiten' ?></button>
</div>
<form class="cm-form cm-form--job" method="post" action="/admin/cron/" data-cm-edit-target="job-<?= $h((string) ($job['job_key'] ?? '')) ?>" hidden>
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
<input type="hidden" name="action" value="save-job">
<input type="hidden" name="job_key" value="<?= $h((string) ($job['job_key'] ?? '')) ?>">
<input type="hidden" name="enabled" value="<?= !empty($job['enabled']) ? '1' : '0' ?>">
<label class="cm-field">
<span>Cron-Ausdruck</span>
<input type="text" name="cron_expression" value="<?= $h((string) ($job['cron_expression'] ?? '0 * * * *')) ?>">
</label>
<label class="cm-field">
<span>Zeitzone</span>
<input type="text" name="timezone" value="<?= $h((string) ($job['timezone'] ?? ($settings['default_timezone'] ?? 'Europe/Berlin'))) ?>" list="timezone-options">
</label>
<div class="cm-actions">
<button class="window-app-nav-button cm-primary" type="submit">Zeitplan speichern</button>
<button class="window-app-nav-button cm-secondary" type="button" data-cm-edit-close="job-<?= $h((string) ($job['job_key'] ?? '')) ?>">Abbrechen</button>
</div>
</form>
</article>
<?php endforeach; ?>
<?php if ($jobs === []): ?>
<div class="cm-empty">Aktuell wurden noch keine Cron-Jobs aus Modulen registriert.</div>
<?php endif; ?>
</div>
</section>
</div>
</main>
</div>
</div>
<datalist id="timezone-options">
<?php foreach (DateTimeZone::listIdentifiers() as $timezone): ?>
<option value="<?= $h($timezone) ?>"></option>
<?php endforeach; ?>
</datalist>
<?php
$pageContent = (string) ob_get_clean();
if ($isPartial) {
echo $pageContent;
return;
}
?><!DOCTYPE html>
<html lang="de">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Cron Tool</title>
<link rel="stylesheet" href="/assets/desktop/desktop.css">
<link rel="stylesheet" href="/assets/apps/cron-management/app.css">
</head>
<body>
<?= $pageContent ?>
<script src="/assets/apps/cron-management/app.js"></script>
<script>
window.initCronManagementApp?.(document.getElementById('cron-management-app'), { standalone: true });
</script>
</body>
</html>
require AppPaths::systemAppPath(dirname(__DIR__, 3), 'cron-management') . '/page.php';

439
public/admin/users/index.php
View File

@@ -4,441 +4,6 @@ declare(strict_types=1);
require_once dirname(__DIR__, 3) . '/src/App/bootstrap.php';
use App\AccountGate;
use App\ConfigLoader;
use App\RegistrationService;
use ModulesCore\ModuleHttp;
use App\AppPaths;
if (session_status() !== PHP_SESSION_ACTIVE) {
session_start();
}
$projectRoot = dirname(__DIR__, 3);
ModuleHttp::requireDesktopAccess($projectRoot);
$accountGate = new AccountGate(ConfigLoader::load($projectRoot, 'registration'));
$registration = new RegistrationService($projectRoot, ConfigLoader::load($projectRoot, 'registration'));
$currentUser = is_array($_SESSION['desktop_auth']['user'] ?? null) ? $_SESSION['desktop_auth']['user'] : [];
$currentGroups = array_map(
static fn (string $group): string => strtolower(trim($group, '/')),
array_values(array_map('strval', (array) ($currentUser['groups'] ?? [])))
);
$isPartial = !empty($_GET['partial']);
if (!in_array('administrators', $currentGroups, true)) {
http_response_code(403);
$forbidden = '<div class="window-app-shell um-shell"><div class="window-app-frame um-frame"><main class="window-app-main um-main"><div class="window-app-panel um-panel"><section class="window-app-card um-card"><p class="um-message is-error">Kein Zugriff auf User Management.</p></section></div></main></div></div>';
if ($isPartial) {
echo $forbidden;
return;
}
?><!DOCTYPE html>
<html lang="de">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>User Management</title>
<link rel="stylesheet" href="/assets/desktop/desktop.css">
<link rel="stylesheet" href="/assets/apps/user-management/app.css">
</head>
<body><?= $forbidden ?></body>
</html><?php
return;
}
$csrfToken = (string) ($_SESSION['user_management_token'] ?? '');
if ($csrfToken === '') {
$csrfToken = bin2hex(random_bytes(16));
$_SESSION['user_management_token'] = $csrfToken;
}
$section = trim((string) ($_GET['section'] ?? $_POST['active_section'] ?? 'pending'));
$allowedSections = ['pending', 'users', 'reset'];
if (!in_array($section, $allowedSections, true)) {
$section = 'pending';
}
$messages = [];
$errors = [];
$selectedId = trim((string) ($_GET['id'] ?? $_POST['selected_id'] ?? ''));
$manualUsername = trim((string) ($_POST['manual_username'] ?? ''));
$manualResetUsername = trim((string) ($_POST['reset_username'] ?? ''));
$manualResetPassword = (string) ($_POST['reset_password'] ?? '');
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$postedToken = (string) ($_POST['csrf_token'] ?? '');
if ($postedToken === '' || !hash_equals($csrfToken, $postedToken)) {
$errors[] = 'Die Formularpruefung ist fehlgeschlagen.';
} else {
$action = (string) ($_POST['action'] ?? '');
if ($action === 'approve-registration') {
$groupDns = array_values(array_filter(array_map('strval', (array) ($_POST['group_dns'] ?? []))));
$memberOfList = implode(PHP_EOL, $groupDns);
$result = $registration->approve($selectedId, [
'member_of_list' => $memberOfList,
'admin_note' => (string) ($_POST['admin_note'] ?? ''),
], (string) ($currentUser['username'] ?? 'administrator'));
if (($result['success'] ?? false) !== true) {
$errors = array_merge($errors, array_values(array_map('strval', (array) ($result['errors'] ?? []))));
} else {
$messages[] = 'Registrierung wurde freigeschaltet.';
}
$section = 'pending';
} elseif ($action === 'deactivate-user') {
$result = $registration->deactivateUser($manualUsername);
if (($result['success'] ?? false) === true) {
$messages[] = (string) ($result['message'] ?? '');
} else {
$errors[] = (string) ($result['message'] ?? '');
}
$section = 'users';
} elseif ($action === 'activate-user') {
$groupDns = array_values(array_filter(array_map('strval', (array) ($_POST['manual_group_dns'] ?? []))));
$result = $registration->activateExistingUser($manualUsername, $groupDns);
if (($result['success'] ?? false) === true) {
$messages[] = (string) ($result['message'] ?? '');
} else {
$errors[] = (string) ($result['message'] ?? '');
}
$section = 'users';
} elseif ($action === 'send-reset-mail') {
$origin = ((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http') . '://' . ($_SERVER['HTTP_HOST'] ?? 'localhost');
$result = $registration->sendPasswordReset($manualResetUsername, $origin);
if (($result['success'] ?? false) === true) {
$messages[] = (string) ($result['message'] ?? '');
} else {
$errors[] = (string) ($result['message'] ?? '');
}
$section = 'reset';
} elseif ($action === 'set-password') {
if (strlen($manualResetPassword) < 12) {
$errors[] = 'Das neue Passwort muss mindestens 12 Zeichen lang sein.';
} else {
$result = $registration->setUserPassword($manualResetUsername, $manualResetPassword);
if (($result['success'] ?? false) === true) {
$messages[] = (string) ($result['message'] ?? '');
} else {
$errors[] = (string) ($result['message'] ?? '');
}
}
$section = 'reset';
}
}
}
$pendingRequests = $registration->pendingApprovals();
$availableGroups = $registration->availableGroups();
$existingUsers = $registration->searchExistingUsers('', 250);
$selectedExistingUser = null;
if ($manualUsername !== '') {
foreach ($existingUsers as $existingUser) {
if (strtolower((string) ($existingUser['username'] ?? '')) === strtolower($manualUsername)) {
$selectedExistingUser = $existingUser;
break;
}
}
}
$selected = $selectedId !== ''
? $registration->find($selectedId)
: ($pendingRequests[0] ?? null);
if ($selectedId === '' && is_array($selected) && isset($selected['id'])) {
$selectedId = (string) $selected['id'];
}
$h = static fn (?string $value): string => htmlspecialchars($value ?? '', ENT_QUOTES);
$sectionUrl = static function (string $targetSection, string $requestId = ''): string {
$query = ['section' => $targetSection];
if ($requestId !== '') {
$query['id'] = $requestId;
}
return '/admin/users/?' . http_build_query($query, '', '&', PHP_QUERY_RFC3986);
};
$sectionMeta = [
'pending' => [
'label' => 'Freischaltungen',
'title' => 'Offene Registrierungen',
'description' => 'Neue Registrierungen pruefen, Gruppen zuweisen und Freischaltungen sauber dokumentieren.',
'nav' => 'Anfragen sichten und direkt freigeben.',
],
'users' => [
'label' => 'Benutzerstatus',
'title' => 'Bestehende Benutzer',
'description' => 'LDAP-Benutzer aktivieren, deaktivieren und Gruppen fuer die Desktop-Nutzung zuweisen.',
'nav' => 'Aktivierung und Sperrung vorhandener Konten.',
],
'reset' => [
'label' => 'Passwort-Reset',
'title' => 'Passwortverwaltung',
'description' => 'Reset-Mails ausloesen oder ein Passwort direkt als Administrator setzen.',
'nav' => 'Ruecksetzen oder direkt neu vergeben.',
],
];
ob_start();
?>
<div id="user-management-app" class="window-app-shell um-shell">
<div class="window-app-frame um-frame">
<aside class="window-app-sidebar um-sidebar">
<div class="window-app-brand um-brand">
<p class="window-app-kicker um-kicker">Administration</p>
<h1>User Management</h1>
<p class="window-app-copy um-copy">Freischaltungen, Benutzerstatus und Passwort-Reset im gemeinsamen Desktop-Standard.</p>
</div>
<div class="window-app-nav-list um-nav-list">
<?php foreach ($sectionMeta as $sectionId => $meta): ?>
<a class="window-app-nav-button um-nav-button<?= $section === $sectionId ? ' is-active' : '' ?>" href="<?= $h($sectionUrl($sectionId, $sectionId === 'pending' ? $selectedId : '')) ?>">
<strong><?= $h($meta['label']) ?></strong>
<span class="window-app-meta um-meta"><?= $h($meta['nav']) ?></span>
</a>
<?php endforeach; ?>
</div>
<section class="window-app-card um-side-card">
<strong class="um-side-title">Schnellstatus</strong>
<div class="um-side-metric">
<span>Offene Anfragen</span>
<strong><?= count($pendingRequests) ?></strong>
</div>
<div class="um-side-metric">
<span>Admin</span>
<strong><?= $h((string) ($currentUser['username'] ?? 'administrator')) ?></strong>
</div>
</section>
</aside>
<main class="window-app-main um-main">
<div class="window-app-panel um-panel">
<section class="window-app-hero um-hero">
<div>
<p class="window-app-kicker um-kicker">User Management</p>
<h2 class="window-app-title"><?= $h($sectionMeta[$section]['title']) ?></h2>
<p class="window-app-copy um-copy"><?= $h($sectionMeta[$section]['description']) ?></p>
</div>
<div class="window-app-pill-row um-pill-row">
<span class="window-app-pill">Administrators only</span>
<span class="window-app-pill">Desktop Auth</span>
<span class="window-app-pill">Section: <?= $h($sectionMeta[$section]['label']) ?></span>
</div>
</section>
<?php if ($messages !== []): ?>
<section class="window-app-card um-card">
<div class="um-message is-success">
<strong>Ergebnis</strong>
<ul class="um-list">
<?php foreach ($messages as $message): ?>
<li><?= $h($message) ?></li>
<?php endforeach; ?>
</ul>
</div>
</section>
<?php endif; ?>
<?php if ($errors !== []): ?>
<section class="window-app-card um-card">
<div class="um-message is-error">
<strong>Bitte pruefen</strong>
<ul class="um-list">
<?php foreach ($errors as $error): ?>
<li><?= $h($error) ?></li>
<?php endforeach; ?>
</ul>
</div>
</section>
<?php endif; ?>
<script id="um-existing-users-data" type="application/json"><?= json_encode($existingUsers, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) ?></script>
<?php if ($section === 'pending'): ?>
<div class="window-app-grid um-grid um-grid--split">
<section class="window-app-card um-card">
<div class="um-section-head">
<div>
<p class="window-app-kicker um-kicker">Queue</p>
<h3 class="um-section-title">Wartende Registrierungen</h3>
</div>
<span class="window-app-meta um-meta"><?= count($pendingRequests) ?> offen</span>
</div>
<div class="um-request-list">
<?php if ($pendingRequests === []): ?>
<div class="um-empty">Aktuell gibt es keine offenen Registrierungen.</div>
<?php else: ?>
<?php foreach ($pendingRequests as $request): ?>
<a class="um-request-card<?= (($selected['id'] ?? '') === ($request['id'] ?? '')) ? ' is-active' : '' ?>" href="<?= $h($sectionUrl('pending', (string) ($request['id'] ?? ''))) ?>">
<strong><?= $h((string) ($request['username'] ?? '')) ?></strong>
<span><?= $h((string) ($request['email'] ?? '')) ?></span>
<span class="um-request-status"><?= $h((string) ($request['status'] ?? 'pending')) ?></span>
</a>
<?php endforeach; ?>
<?php endif; ?>
</div>
</section>
<section class="window-app-card um-card">
<div class="um-section-head">
<div>
<p class="window-app-kicker um-kicker">Approval</p>
<h3 class="um-section-title">Freischaltung</h3>
</div>
</div>
<?php if (is_array($selected)): ?>
<div class="um-summary-grid">
<div class="um-summary-item"><span>Benutzer</span><strong><?= $h((string) ($selected['username'] ?? '')) ?></strong></div>
<div class="um-summary-item"><span>E-Mail</span><strong><?= $h((string) ($selected['email'] ?? '')) ?></strong></div>
<div class="um-summary-item"><span>Status</span><strong><?= $h((string) ($selected['status'] ?? '')) ?></strong></div>
</div>
<form class="um-form" method="post" action="/admin/users/">
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
<input type="hidden" name="selected_id" value="<?= $h((string) ($selected['id'] ?? '')) ?>">
<input type="hidden" name="action" value="approve-registration">
<input type="hidden" name="active_section" value="pending">
<fieldset class="um-fieldset">
<legend>Gruppen fuer Freischaltung</legend>
<div class="um-checkbox-grid">
<?php foreach ($availableGroups as $group): ?>
<label class="window-app-item um-checkbox-item">
<input type="checkbox" name="group_dns[]" value="<?= $h((string) ($group['dn'] ?? '')) ?>">
<span class="window-app-item-main">
<strong><?= $h((string) ($group['label'] ?? '')) ?></strong>
<p><?= $h((string) ($group['dn'] ?? '')) ?></p>
</span>
</label>
<?php endforeach; ?>
</div>
</fieldset>
<label class="um-field">
<span>Admin-Notiz</span>
<textarea name="admin_note" rows="4"></textarea>
</label>
<div class="um-actions">
<button class="window-app-nav-button um-primary" type="submit">Freischaltung bestaetigen</button>
</div>
</form>
<?php else: ?>
<div class="um-empty">Keine Anfrage ausgewaehlt.</div>
<?php endif; ?>
</section>
</div>
<?php elseif ($section === 'users'): ?>
<section class="window-app-card um-card">
<div class="um-section-head">
<div>
<p class="window-app-kicker um-kicker">Existing User</p>
<h3 class="um-section-title">Bestehenden Benutzer verwalten</h3>
</div>
</div>
<form class="um-form" method="post" action="/admin/users/">
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
<input type="hidden" name="active_section" value="users">
<label class="um-field">
<span>Benutzername</span>
<div class="um-user-picker" data-user-picker>
<input type="text" name="manual_username" value="<?= $h($manualUsername) ?>" required autocomplete="off" data-user-picker-input>
<div class="um-user-picker-list" data-user-picker-list hidden></div>
</div>
</label>
<fieldset class="um-fieldset">
<legend>Gruppen fuer Aktivierung</legend>
<div class="um-checkbox-grid">
<?php foreach ($availableGroups as $group): ?>
<?php
$groupDn = (string) ($group['dn'] ?? '');
$selectedGroupDns = array_values(array_map('strval', (array) ($selectedExistingUser['group_dns'] ?? [])));
$isChecked = in_array($groupDn, $selectedGroupDns, true);
?>
<label class="window-app-item um-checkbox-item">
<input type="checkbox" name="manual_group_dns[]" value="<?= $h($groupDn) ?>" <?= $isChecked ? 'checked' : '' ?>>
<span class="window-app-item-main">
<strong><?= $h((string) ($group['label'] ?? '')) ?></strong>
<p><?= $h($groupDn) ?></p>
</span>
</label>
<?php endforeach; ?>
</div>
</fieldset>
<div class="um-actions">
<button class="window-app-nav-button um-primary" type="submit" name="action" value="activate-user">Benutzer aktivieren</button>
<button class="window-app-nav-button um-danger" type="submit" name="action" value="deactivate-user">Benutzer deaktivieren</button>
</div>
</form>
</section>
<?php else: ?>
<section class="window-app-card um-card">
<div class="um-section-head">
<div>
<p class="window-app-kicker um-kicker">Reset</p>
<h3 class="um-section-title">Passwort zuruecksetzen</h3>
</div>
</div>
<form class="um-form" method="post" action="/admin/users/">
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
<input type="hidden" name="active_section" value="reset">
<label class="um-field">
<span>Benutzername</span>
<div class="um-user-picker" data-user-picker>
<input type="text" name="reset_username" value="<?= $h($manualResetUsername) ?>" required autocomplete="off" data-user-picker-input>
<div class="um-user-picker-list" data-user-picker-list hidden></div>
</div>
</label>
<label class="um-field">
<span>Neues Passwort fuer direkten Reset</span>
<input type="password" name="reset_password" value="" placeholder="Optional fuer direkten Admin-Reset">
</label>
<div class="um-actions">
<button class="window-app-nav-button um-secondary" type="submit" name="action" value="send-reset-mail">Reset-Mail senden</button>
<button class="window-app-nav-button um-primary" type="submit" name="action" value="set-password">Passwort direkt setzen</button>
</div>
</form>
</section>
<?php endif; ?>
</div>
</main>
</div>
</div>
<?php
$pageContent = (string) ob_get_clean();
if ($isPartial) {
echo $pageContent;
return;
}
?><!DOCTYPE html>
<html lang="de">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>User Management</title>
<link rel="stylesheet" href="/assets/desktop/desktop.css">
<link rel="stylesheet" href="/assets/apps/user-management/app.css">
</head>
<body>
<?= $pageContent ?>
<script src="/assets/apps/user-management/app.js"></script>
<script>
window.initUserManagementApp?.(document.getElementById('user-management-app'), { standalone: true });
</script>
</body>
</html>
require AppPaths::systemAppPath(dirname(__DIR__, 3), 'user-management') . '/page.php';