asdasd
This commit is contained in:
322
system/apps/user-management/assets/app.css
Normal file
322
system/apps/user-management/assets/app.css
Normal file
@@ -0,0 +1,322 @@
|
||||
#user-management-app {
|
||||
min-height: 100%;
|
||||
color: #0f172a;
|
||||
font-family: "IBM Plex Sans", "Segoe UI", sans-serif;
|
||||
}
|
||||
|
||||
#user-management-app,
|
||||
#user-management-app * {
|
||||
box-sizing: border-box;
|
||||
}
|
||||
|
||||
#user-management-app.is-loading {
|
||||
opacity: 0.7;
|
||||
pointer-events: none;
|
||||
}
|
||||
|
||||
#user-management-app .um-shell,
|
||||
#user-management-app .um-frame,
|
||||
#user-management-app .um-main,
|
||||
#user-management-app .um-panel {
|
||||
min-height: 100%;
|
||||
}
|
||||
|
||||
#user-management-app .um-brand,
|
||||
#user-management-app .um-copy,
|
||||
#user-management-app .um-meta {
|
||||
margin: 0;
|
||||
}
|
||||
|
||||
#user-management-app .um-kicker {
|
||||
margin: 0 0 10px;
|
||||
font-size: 12px;
|
||||
font-weight: 700;
|
||||
letter-spacing: 0.12em;
|
||||
text-transform: uppercase;
|
||||
color: #2563eb;
|
||||
}
|
||||
|
||||
#user-management-app .um-nav-button.is-active {
|
||||
color: #0f172a;
|
||||
}
|
||||
|
||||
#user-management-app .um-side-card,
|
||||
#user-management-app .um-card {
|
||||
display: grid;
|
||||
gap: 14px;
|
||||
}
|
||||
|
||||
#user-management-app .um-side-title,
|
||||
#user-management-app .um-section-title {
|
||||
margin: 0;
|
||||
font-size: 18px;
|
||||
line-height: 1.2;
|
||||
}
|
||||
|
||||
#user-management-app .um-side-metric,
|
||||
#user-management-app .um-summary-item {
|
||||
display: grid;
|
||||
gap: 4px;
|
||||
}
|
||||
|
||||
#user-management-app .um-side-metric span,
|
||||
#user-management-app .um-summary-item span,
|
||||
#user-management-app .um-request-card span,
|
||||
#user-management-app .um-field span,
|
||||
#user-management-app .um-meta,
|
||||
#user-management-app .um-empty,
|
||||
#user-management-app .um-message,
|
||||
#user-management-app .um-checkbox-item p {
|
||||
font-size: 14px;
|
||||
line-height: 1.5;
|
||||
color: #475569;
|
||||
}
|
||||
|
||||
#user-management-app .um-grid {
|
||||
display: grid;
|
||||
gap: 18px;
|
||||
}
|
||||
|
||||
#user-management-app .um-grid--split {
|
||||
grid-template-columns: minmax(280px, 0.95fr) minmax(0, 1.35fr);
|
||||
}
|
||||
|
||||
#user-management-app .um-section-head {
|
||||
display: flex;
|
||||
justify-content: space-between;
|
||||
gap: 16px;
|
||||
align-items: flex-start;
|
||||
}
|
||||
|
||||
#user-management-app .um-request-list,
|
||||
#user-management-app .um-checkbox-grid {
|
||||
display: grid;
|
||||
gap: 12px;
|
||||
}
|
||||
|
||||
#user-management-app .um-request-card {
|
||||
display: grid;
|
||||
gap: 4px;
|
||||
padding: 14px 16px;
|
||||
border: 1px solid rgba(148, 163, 184, 0.24);
|
||||
border-radius: 16px;
|
||||
background: rgba(255, 255, 255, 0.9);
|
||||
color: inherit;
|
||||
text-decoration: none;
|
||||
transition: border-color 0.2s ease, box-shadow 0.2s ease, transform 0.2s ease;
|
||||
}
|
||||
|
||||
#user-management-app .um-request-card:hover,
|
||||
#user-management-app .um-request-card.is-active {
|
||||
border-color: rgba(37, 99, 235, 0.4);
|
||||
box-shadow: inset 0 0 0 1px rgba(37, 99, 235, 0.35);
|
||||
transform: translateY(-1px);
|
||||
}
|
||||
|
||||
#user-management-app .um-request-card strong,
|
||||
#user-management-app .um-checkbox-item strong {
|
||||
font-size: 15px;
|
||||
}
|
||||
|
||||
#user-management-app .um-request-status {
|
||||
font-size: 12px;
|
||||
font-weight: 700;
|
||||
letter-spacing: 0.08em;
|
||||
text-transform: uppercase;
|
||||
color: #1d4ed8;
|
||||
}
|
||||
|
||||
#user-management-app .um-summary-grid {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(auto-fit, minmax(160px, 1fr));
|
||||
gap: 12px;
|
||||
}
|
||||
|
||||
#user-management-app .um-summary-item {
|
||||
padding: 14px 16px;
|
||||
border-radius: 16px;
|
||||
background: rgba(248, 250, 252, 0.9);
|
||||
border: 1px solid rgba(148, 163, 184, 0.18);
|
||||
}
|
||||
|
||||
#user-management-app .um-summary-item strong {
|
||||
font-size: 15px;
|
||||
color: #0f172a;
|
||||
}
|
||||
|
||||
#user-management-app .um-form {
|
||||
display: grid;
|
||||
gap: 16px;
|
||||
}
|
||||
|
||||
#user-management-app .um-field {
|
||||
display: grid;
|
||||
gap: 8px;
|
||||
}
|
||||
|
||||
#user-management-app .um-field input,
|
||||
#user-management-app .um-field textarea {
|
||||
width: 100%;
|
||||
min-height: 46px;
|
||||
padding: 12px 14px;
|
||||
border-radius: 14px;
|
||||
border: 1px solid rgba(148, 163, 184, 0.24);
|
||||
background: rgba(255, 255, 255, 0.95);
|
||||
color: #0f172a;
|
||||
font: inherit;
|
||||
}
|
||||
|
||||
#user-management-app .um-field textarea {
|
||||
min-height: 120px;
|
||||
resize: vertical;
|
||||
}
|
||||
|
||||
#user-management-app .um-user-picker {
|
||||
position: relative;
|
||||
}
|
||||
|
||||
#user-management-app .um-user-picker-list {
|
||||
position: absolute;
|
||||
top: calc(100% + 8px);
|
||||
left: 0;
|
||||
right: 0;
|
||||
z-index: 20;
|
||||
display: grid;
|
||||
gap: 8px;
|
||||
max-height: 320px;
|
||||
overflow: auto;
|
||||
padding: 10px;
|
||||
border: 1px solid rgba(148, 163, 184, 0.24);
|
||||
border-radius: 16px;
|
||||
background: rgba(255, 255, 255, 0.98);
|
||||
box-shadow: 0 20px 44px rgba(15, 23, 42, 0.12);
|
||||
}
|
||||
|
||||
#user-management-app .um-user-picker-list[hidden] {
|
||||
display: none !important;
|
||||
}
|
||||
|
||||
#user-management-app .um-user-picker-option {
|
||||
display: grid;
|
||||
gap: 2px;
|
||||
width: 100%;
|
||||
padding: 12px 14px;
|
||||
border: 1px solid rgba(148, 163, 184, 0.18);
|
||||
border-radius: 14px;
|
||||
background: rgba(248, 250, 252, 0.95);
|
||||
color: #0f172a;
|
||||
text-align: left;
|
||||
font: inherit;
|
||||
cursor: pointer;
|
||||
}
|
||||
|
||||
#user-management-app .um-user-picker-option:hover {
|
||||
border-color: rgba(37, 99, 235, 0.35);
|
||||
box-shadow: inset 0 0 0 1px rgba(37, 99, 235, 0.3);
|
||||
background: #eff6ff;
|
||||
}
|
||||
|
||||
#user-management-app .um-user-picker-option strong {
|
||||
font-size: 14px;
|
||||
}
|
||||
|
||||
#user-management-app .um-user-picker-option span,
|
||||
#user-management-app .um-user-picker-empty {
|
||||
font-size: 13px;
|
||||
line-height: 1.45;
|
||||
color: #475569;
|
||||
}
|
||||
|
||||
#user-management-app .um-user-picker-empty {
|
||||
padding: 8px 4px;
|
||||
}
|
||||
|
||||
#user-management-app .um-fieldset {
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
border: 0;
|
||||
display: grid;
|
||||
gap: 10px;
|
||||
}
|
||||
|
||||
#user-management-app .um-fieldset legend {
|
||||
margin-bottom: 8px;
|
||||
font-size: 14px;
|
||||
font-weight: 700;
|
||||
color: #0f172a;
|
||||
}
|
||||
|
||||
#user-management-app .um-checkbox-item {
|
||||
align-items: flex-start;
|
||||
}
|
||||
|
||||
#user-management-app .um-checkbox-item input {
|
||||
margin-top: 2px;
|
||||
}
|
||||
|
||||
#user-management-app .um-actions {
|
||||
display: flex;
|
||||
flex-wrap: wrap;
|
||||
gap: 10px;
|
||||
align-items: center;
|
||||
}
|
||||
|
||||
#user-management-app .um-primary {
|
||||
display: inline-flex;
|
||||
align-items: center;
|
||||
justify-content: center;
|
||||
min-height: 44px;
|
||||
padding: 10px 16px;
|
||||
border: 0;
|
||||
border-radius: 14px;
|
||||
background: linear-gradient(135deg, #2563eb, #1d4ed8);
|
||||
color: #fff;
|
||||
font: inherit;
|
||||
font-weight: 700;
|
||||
cursor: pointer;
|
||||
}
|
||||
|
||||
#user-management-app .um-secondary,
|
||||
#user-management-app .um-danger {
|
||||
min-height: 42px;
|
||||
}
|
||||
|
||||
#user-management-app .um-danger {
|
||||
border-color: rgba(239, 68, 68, 0.28);
|
||||
color: #b91c1c;
|
||||
}
|
||||
|
||||
#user-management-app .um-message {
|
||||
display: grid;
|
||||
gap: 8px;
|
||||
}
|
||||
|
||||
#user-management-app .um-message strong {
|
||||
font-size: 15px;
|
||||
color: #0f172a;
|
||||
}
|
||||
|
||||
#user-management-app .um-message.is-error {
|
||||
color: #b91c1c;
|
||||
}
|
||||
|
||||
#user-management-app .um-message.is-success {
|
||||
color: #047857;
|
||||
}
|
||||
|
||||
#user-management-app .um-list {
|
||||
margin: 0;
|
||||
padding-left: 18px;
|
||||
}
|
||||
|
||||
@media (max-width: 980px) {
|
||||
#user-management-app .um-grid--split {
|
||||
grid-template-columns: 1fr;
|
||||
}
|
||||
|
||||
#user-management-app .um-section-head,
|
||||
#user-management-app .um-actions {
|
||||
flex-direction: column;
|
||||
align-items: stretch;
|
||||
}
|
||||
}
|
||||
270
system/apps/user-management/assets/app.js
Normal file
270
system/apps/user-management/assets/app.js
Normal file
@@ -0,0 +1,270 @@
|
||||
(() => {
|
||||
const normalizeUrl = (url) => {
|
||||
const next = new URL(url, window.location.origin);
|
||||
next.searchParams.set('partial', '1');
|
||||
return next.toString();
|
||||
};
|
||||
|
||||
const renderError = (host, message) => {
|
||||
host.innerHTML = `
|
||||
<div class="window-app-shell um-shell">
|
||||
<div class="window-app-frame um-frame">
|
||||
<main class="window-app-main um-main">
|
||||
<div class="window-app-panel um-panel">
|
||||
<section class="window-app-card um-card">
|
||||
<p class="um-message is-error">${String(message || 'User Management konnte nicht geladen werden.')}</p>
|
||||
</section>
|
||||
</div>
|
||||
</main>
|
||||
</div>
|
||||
</div>
|
||||
`;
|
||||
};
|
||||
|
||||
const escapeHtml = (value) => String(value ?? '')
|
||||
.replaceAll('&', '&')
|
||||
.replaceAll('<', '<')
|
||||
.replaceAll('>', '>')
|
||||
.replaceAll('"', '"')
|
||||
.replaceAll("'", ''');
|
||||
|
||||
const bindUserPickers = (host) => {
|
||||
const dataNode = host.querySelector('#um-existing-users-data');
|
||||
if (!(dataNode instanceof HTMLScriptElement)) {
|
||||
return;
|
||||
}
|
||||
|
||||
let users = [];
|
||||
try {
|
||||
const decoded = JSON.parse(dataNode.textContent || '[]');
|
||||
if (Array.isArray(decoded)) {
|
||||
users = decoded;
|
||||
}
|
||||
} catch (_error) {
|
||||
users = [];
|
||||
}
|
||||
|
||||
const normalizedUsers = users.map((user) => ({
|
||||
username: String(user?.username || ''),
|
||||
display_name: String(user?.display_name || ''),
|
||||
email: String(user?.email || ''),
|
||||
group_dns: Array.isArray(user?.group_dns) ? user.group_dns.map((group) => String(group || '')) : [],
|
||||
search: [
|
||||
String(user?.username || ''),
|
||||
String(user?.display_name || ''),
|
||||
String(user?.email || ''),
|
||||
].join(' ').toLowerCase(),
|
||||
})).filter((user) => user.username !== '');
|
||||
|
||||
const closeAll = () => {
|
||||
host.querySelectorAll('[data-user-picker-list]').forEach((list) => {
|
||||
list.setAttribute('hidden', 'hidden');
|
||||
list.innerHTML = '';
|
||||
});
|
||||
};
|
||||
|
||||
host.querySelectorAll('[data-user-picker]').forEach((picker) => {
|
||||
const input = picker.querySelector('[data-user-picker-input]');
|
||||
const list = picker.querySelector('[data-user-picker-list]');
|
||||
if (!(input instanceof HTMLInputElement) || !(list instanceof HTMLElement)) {
|
||||
return;
|
||||
}
|
||||
|
||||
if (input.dataset.umPickerBound === '1') {
|
||||
return;
|
||||
}
|
||||
input.dataset.umPickerBound = '1';
|
||||
|
||||
const syncGroupSelection = (username) => {
|
||||
const normalizedUsername = String(username || '').trim().toLowerCase();
|
||||
host.querySelectorAll('input[name="manual_group_dns[]"]').forEach((checkbox) => {
|
||||
if (!(checkbox instanceof HTMLInputElement)) {
|
||||
return;
|
||||
}
|
||||
|
||||
checkbox.checked = false;
|
||||
});
|
||||
|
||||
if (normalizedUsername === '') {
|
||||
return;
|
||||
}
|
||||
|
||||
const user = normalizedUsers.find((entry) => entry.username.toLowerCase() === normalizedUsername);
|
||||
if (!user) {
|
||||
return;
|
||||
}
|
||||
|
||||
const selectedGroups = new Set(user.group_dns);
|
||||
host.querySelectorAll('input[name="manual_group_dns[]"]').forEach((checkbox) => {
|
||||
if (!(checkbox instanceof HTMLInputElement)) {
|
||||
return;
|
||||
}
|
||||
|
||||
checkbox.checked = selectedGroups.has(checkbox.value);
|
||||
});
|
||||
};
|
||||
|
||||
const renderMatches = () => {
|
||||
const needle = input.value.trim().toLowerCase();
|
||||
const matches = normalizedUsers
|
||||
.filter((user) => needle === '' || user.search.includes(needle))
|
||||
.slice(0, needle === '' ? 80 : 25);
|
||||
|
||||
list.innerHTML = '';
|
||||
if (matches.length === 0) {
|
||||
list.innerHTML = '<div class="um-user-picker-empty">Keine passenden Benutzer gefunden.</div>';
|
||||
list.hidden = false;
|
||||
return;
|
||||
}
|
||||
|
||||
list.innerHTML = matches.map((user) => `
|
||||
<button class="um-user-picker-option" type="button" data-user-picker-value="${escapeHtml(user.username)}">
|
||||
<strong>${escapeHtml(user.username)}</strong>
|
||||
<span>${escapeHtml(user.display_name || 'Ohne Anzeigename')}</span>
|
||||
<span>${escapeHtml(user.email || 'Keine E-Mail')}</span>
|
||||
</button>
|
||||
`).join('');
|
||||
list.hidden = false;
|
||||
};
|
||||
|
||||
input.addEventListener('focus', renderMatches);
|
||||
input.addEventListener('input', renderMatches);
|
||||
|
||||
list.addEventListener('click', (event) => {
|
||||
const option = event.target.closest('[data-user-picker-value]');
|
||||
if (!(option instanceof HTMLElement)) {
|
||||
return;
|
||||
}
|
||||
|
||||
input.value = String(option.dataset.userPickerValue || '');
|
||||
list.hidden = true;
|
||||
list.innerHTML = '';
|
||||
syncGroupSelection(input.value);
|
||||
input.dispatchEvent(new Event('change', { bubbles: true }));
|
||||
});
|
||||
|
||||
input.addEventListener('change', () => {
|
||||
syncGroupSelection(input.value);
|
||||
});
|
||||
|
||||
if (input.value.trim() !== '') {
|
||||
syncGroupSelection(input.value);
|
||||
}
|
||||
});
|
||||
|
||||
if (!host.dataset.umPickerOutsideBound) {
|
||||
host.dataset.umPickerOutsideBound = '1';
|
||||
document.addEventListener('click', (event) => {
|
||||
if (!(event.target instanceof Node) || !host.contains(event.target)) {
|
||||
closeAll();
|
||||
return;
|
||||
}
|
||||
|
||||
const insidePicker = event.target instanceof Element && event.target.closest('[data-user-picker]');
|
||||
if (!insidePicker) {
|
||||
closeAll();
|
||||
}
|
||||
});
|
||||
}
|
||||
};
|
||||
|
||||
const bindInteractions = (host, loadRoute) => {
|
||||
host.querySelectorAll('a[href]').forEach((link) => {
|
||||
if (link.dataset.umBound === '1') {
|
||||
return;
|
||||
}
|
||||
|
||||
const href = String(link.getAttribute('href') || '');
|
||||
if (!href.startsWith('/admin/users/')) {
|
||||
return;
|
||||
}
|
||||
|
||||
link.dataset.umBound = '1';
|
||||
link.addEventListener('click', (event) => {
|
||||
event.preventDefault();
|
||||
loadRoute(href);
|
||||
});
|
||||
});
|
||||
|
||||
host.querySelectorAll('form[action]').forEach((form) => {
|
||||
if (form.dataset.umBound === '1') {
|
||||
return;
|
||||
}
|
||||
|
||||
const action = String(form.getAttribute('action') || '');
|
||||
if (!action.startsWith('/admin/users/')) {
|
||||
return;
|
||||
}
|
||||
|
||||
form.dataset.umBound = '1';
|
||||
form.addEventListener('submit', async (event) => {
|
||||
event.preventDefault();
|
||||
|
||||
try {
|
||||
host.classList.add('is-loading');
|
||||
const response = await fetch(normalizeUrl(action), {
|
||||
method: 'POST',
|
||||
credentials: 'same-origin',
|
||||
body: new FormData(form),
|
||||
});
|
||||
|
||||
const html = await response.text();
|
||||
if (!response.ok) {
|
||||
throw new Error(`HTTP ${response.status}`);
|
||||
}
|
||||
|
||||
host.innerHTML = html;
|
||||
bindInteractions(host, loadRoute);
|
||||
bindUserPickers(host);
|
||||
} catch (error) {
|
||||
renderError(host, error?.message || 'Formular konnte nicht verarbeitet werden.');
|
||||
} finally {
|
||||
host.classList.remove('is-loading');
|
||||
}
|
||||
});
|
||||
});
|
||||
};
|
||||
|
||||
window.initUserManagementApp = function initUserManagementApp(host, options = {}) {
|
||||
if (!(host instanceof Element)) {
|
||||
return;
|
||||
}
|
||||
|
||||
if (host.dataset.umAppBound === '1') {
|
||||
return;
|
||||
}
|
||||
|
||||
host.dataset.umAppBound = '1';
|
||||
|
||||
const entryRoute = String(options.entryRoute || '/admin/users/');
|
||||
const loadRoute = async (route) => {
|
||||
try {
|
||||
host.classList.add('is-loading');
|
||||
const response = await fetch(normalizeUrl(route), {
|
||||
credentials: 'same-origin',
|
||||
headers: { Accept: 'text/html' },
|
||||
});
|
||||
const html = await response.text();
|
||||
if (!response.ok) {
|
||||
throw new Error(`HTTP ${response.status}`);
|
||||
}
|
||||
|
||||
host.innerHTML = html;
|
||||
bindInteractions(host, loadRoute);
|
||||
bindUserPickers(host);
|
||||
} catch (error) {
|
||||
renderError(host, error?.message || 'User Management konnte nicht geladen werden.');
|
||||
} finally {
|
||||
host.classList.remove('is-loading');
|
||||
}
|
||||
};
|
||||
|
||||
if (options.standalone) {
|
||||
bindInteractions(host, loadRoute);
|
||||
bindUserPickers(host);
|
||||
return;
|
||||
}
|
||||
|
||||
loadRoute(entryRoute);
|
||||
};
|
||||
})();
|
||||
444
system/apps/user-management/page.php
Normal file
444
system/apps/user-management/page.php
Normal file
@@ -0,0 +1,444 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
require_once dirname(__DIR__, 3) . '/src/App/bootstrap.php';
|
||||
|
||||
use App\AccountGate;
|
||||
use App\ConfigLoader;
|
||||
use App\RegistrationService;
|
||||
use ModulesCore\ModuleHttp;
|
||||
|
||||
if (session_status() !== PHP_SESSION_ACTIVE) {
|
||||
session_start();
|
||||
}
|
||||
|
||||
$projectRoot = dirname(__DIR__, 3);
|
||||
ModuleHttp::requireDesktopAccess($projectRoot);
|
||||
|
||||
$accountGate = new AccountGate(ConfigLoader::load($projectRoot, 'registration'));
|
||||
$registration = new RegistrationService($projectRoot, ConfigLoader::load($projectRoot, 'registration'));
|
||||
|
||||
$currentUser = is_array($_SESSION['desktop_auth']['user'] ?? null) ? $_SESSION['desktop_auth']['user'] : [];
|
||||
$currentGroups = array_map(
|
||||
static fn (string $group): string => strtolower(trim($group, '/')),
|
||||
array_values(array_map('strval', (array) ($currentUser['groups'] ?? [])))
|
||||
);
|
||||
$isPartial = !empty($_GET['partial']);
|
||||
|
||||
if (!in_array('administrators', $currentGroups, true)) {
|
||||
http_response_code(403);
|
||||
$forbidden = '<div class="window-app-shell um-shell"><div class="window-app-frame um-frame"><main class="window-app-main um-main"><div class="window-app-panel um-panel"><section class="window-app-card um-card"><p class="um-message is-error">Kein Zugriff auf User Management.</p></section></div></main></div></div>';
|
||||
if ($isPartial) {
|
||||
echo $forbidden;
|
||||
return;
|
||||
}
|
||||
|
||||
?><!DOCTYPE html>
|
||||
<html lang="de">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>User Management</title>
|
||||
<link rel="stylesheet" href="/assets/desktop/desktop.css">
|
||||
<link rel="stylesheet" href="/system-app-assets/index.php?app=user-management&path=assets/app.css">
|
||||
</head>
|
||||
<body><?= $forbidden ?></body>
|
||||
</html><?php
|
||||
return;
|
||||
}
|
||||
|
||||
$csrfToken = (string) ($_SESSION['user_management_token'] ?? '');
|
||||
if ($csrfToken === '') {
|
||||
$csrfToken = bin2hex(random_bytes(16));
|
||||
$_SESSION['user_management_token'] = $csrfToken;
|
||||
}
|
||||
|
||||
$section = trim((string) ($_GET['section'] ?? $_POST['active_section'] ?? 'pending'));
|
||||
$allowedSections = ['pending', 'users', 'reset'];
|
||||
if (!in_array($section, $allowedSections, true)) {
|
||||
$section = 'pending';
|
||||
}
|
||||
|
||||
$messages = [];
|
||||
$errors = [];
|
||||
$selectedId = trim((string) ($_GET['id'] ?? $_POST['selected_id'] ?? ''));
|
||||
$manualUsername = trim((string) ($_POST['manual_username'] ?? ''));
|
||||
$manualResetUsername = trim((string) ($_POST['reset_username'] ?? ''));
|
||||
$manualResetPassword = (string) ($_POST['reset_password'] ?? '');
|
||||
|
||||
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
$postedToken = (string) ($_POST['csrf_token'] ?? '');
|
||||
|
||||
if ($postedToken === '' || !hash_equals($csrfToken, $postedToken)) {
|
||||
$errors[] = 'Die Formularpruefung ist fehlgeschlagen.';
|
||||
} else {
|
||||
$action = (string) ($_POST['action'] ?? '');
|
||||
|
||||
if ($action === 'approve-registration') {
|
||||
$groupDns = array_values(array_filter(array_map('strval', (array) ($_POST['group_dns'] ?? []))));
|
||||
$memberOfList = implode(PHP_EOL, $groupDns);
|
||||
$result = $registration->approve($selectedId, [
|
||||
'member_of_list' => $memberOfList,
|
||||
'admin_note' => (string) ($_POST['admin_note'] ?? ''),
|
||||
], (string) ($currentUser['username'] ?? 'administrator'));
|
||||
|
||||
if (($result['success'] ?? false) !== true) {
|
||||
$errors = array_merge($errors, array_values(array_map('strval', (array) ($result['errors'] ?? []))));
|
||||
} else {
|
||||
$messages[] = 'Registrierung wurde freigeschaltet.';
|
||||
}
|
||||
$section = 'pending';
|
||||
} elseif ($action === 'deactivate-user') {
|
||||
$result = $registration->deactivateUser($manualUsername);
|
||||
if (($result['success'] ?? false) === true) {
|
||||
$messages[] = (string) ($result['message'] ?? '');
|
||||
} else {
|
||||
$errors[] = (string) ($result['message'] ?? '');
|
||||
}
|
||||
$section = 'users';
|
||||
} elseif ($action === 'activate-user') {
|
||||
$groupDns = array_values(array_filter(array_map('strval', (array) ($_POST['manual_group_dns'] ?? []))));
|
||||
$result = $registration->activateExistingUser($manualUsername, $groupDns);
|
||||
if (($result['success'] ?? false) === true) {
|
||||
$messages[] = (string) ($result['message'] ?? '');
|
||||
} else {
|
||||
$errors[] = (string) ($result['message'] ?? '');
|
||||
}
|
||||
$section = 'users';
|
||||
} elseif ($action === 'send-reset-mail') {
|
||||
$origin = ((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http') . '://' . ($_SERVER['HTTP_HOST'] ?? 'localhost');
|
||||
$result = $registration->sendPasswordReset($manualResetUsername, $origin);
|
||||
if (($result['success'] ?? false) === true) {
|
||||
$messages[] = (string) ($result['message'] ?? '');
|
||||
} else {
|
||||
$errors[] = (string) ($result['message'] ?? '');
|
||||
}
|
||||
$section = 'reset';
|
||||
} elseif ($action === 'set-password') {
|
||||
if (strlen($manualResetPassword) < 12) {
|
||||
$errors[] = 'Das neue Passwort muss mindestens 12 Zeichen lang sein.';
|
||||
} else {
|
||||
$result = $registration->setUserPassword($manualResetUsername, $manualResetPassword);
|
||||
if (($result['success'] ?? false) === true) {
|
||||
$messages[] = (string) ($result['message'] ?? '');
|
||||
} else {
|
||||
$errors[] = (string) ($result['message'] ?? '');
|
||||
}
|
||||
}
|
||||
$section = 'reset';
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
$pendingRequests = $registration->pendingApprovals();
|
||||
$availableGroups = $registration->availableGroups();
|
||||
$existingUsers = $registration->searchExistingUsers('', 250);
|
||||
$selectedExistingUser = null;
|
||||
if ($manualUsername !== '') {
|
||||
foreach ($existingUsers as $existingUser) {
|
||||
if (strtolower((string) ($existingUser['username'] ?? '')) === strtolower($manualUsername)) {
|
||||
$selectedExistingUser = $existingUser;
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
$selected = $selectedId !== ''
|
||||
? $registration->find($selectedId)
|
||||
: ($pendingRequests[0] ?? null);
|
||||
|
||||
if ($selectedId === '' && is_array($selected) && isset($selected['id'])) {
|
||||
$selectedId = (string) $selected['id'];
|
||||
}
|
||||
|
||||
$h = static fn (?string $value): string => htmlspecialchars($value ?? '', ENT_QUOTES);
|
||||
$sectionUrl = static function (string $targetSection, string $requestId = ''): string {
|
||||
$query = ['section' => $targetSection];
|
||||
if ($requestId !== '') {
|
||||
$query['id'] = $requestId;
|
||||
}
|
||||
|
||||
return '/admin/users/?' . http_build_query($query, '', '&', PHP_QUERY_RFC3986);
|
||||
};
|
||||
|
||||
$sectionMeta = [
|
||||
'pending' => [
|
||||
'label' => 'Freischaltungen',
|
||||
'title' => 'Offene Registrierungen',
|
||||
'description' => 'Neue Registrierungen pruefen, Gruppen zuweisen und Freischaltungen sauber dokumentieren.',
|
||||
'nav' => 'Anfragen sichten und direkt freigeben.',
|
||||
],
|
||||
'users' => [
|
||||
'label' => 'Benutzerstatus',
|
||||
'title' => 'Bestehende Benutzer',
|
||||
'description' => 'LDAP-Benutzer aktivieren, deaktivieren und Gruppen fuer die Desktop-Nutzung zuweisen.',
|
||||
'nav' => 'Aktivierung und Sperrung vorhandener Konten.',
|
||||
],
|
||||
'reset' => [
|
||||
'label' => 'Passwort-Reset',
|
||||
'title' => 'Passwortverwaltung',
|
||||
'description' => 'Reset-Mails ausloesen oder ein Passwort direkt als Administrator setzen.',
|
||||
'nav' => 'Ruecksetzen oder direkt neu vergeben.',
|
||||
],
|
||||
];
|
||||
|
||||
ob_start();
|
||||
?>
|
||||
<div id="user-management-app" class="window-app-shell um-shell">
|
||||
<div class="window-app-frame um-frame">
|
||||
<aside class="window-app-sidebar um-sidebar">
|
||||
<div class="window-app-brand um-brand">
|
||||
<p class="window-app-kicker um-kicker">Administration</p>
|
||||
<h1>User Management</h1>
|
||||
<p class="window-app-copy um-copy">Freischaltungen, Benutzerstatus und Passwort-Reset im gemeinsamen Desktop-Standard.</p>
|
||||
</div>
|
||||
|
||||
<div class="window-app-nav-list um-nav-list">
|
||||
<?php foreach ($sectionMeta as $sectionId => $meta): ?>
|
||||
<a class="window-app-nav-button um-nav-button<?= $section === $sectionId ? ' is-active' : '' ?>" href="<?= $h($sectionUrl($sectionId, $sectionId === 'pending' ? $selectedId : '')) ?>">
|
||||
<strong><?= $h($meta['label']) ?></strong>
|
||||
<span class="window-app-meta um-meta"><?= $h($meta['nav']) ?></span>
|
||||
</a>
|
||||
<?php endforeach; ?>
|
||||
</div>
|
||||
|
||||
<section class="window-app-card um-side-card">
|
||||
<strong class="um-side-title">Schnellstatus</strong>
|
||||
<div class="um-side-metric">
|
||||
<span>Offene Anfragen</span>
|
||||
<strong><?= count($pendingRequests) ?></strong>
|
||||
</div>
|
||||
<div class="um-side-metric">
|
||||
<span>Admin</span>
|
||||
<strong><?= $h((string) ($currentUser['username'] ?? 'administrator')) ?></strong>
|
||||
</div>
|
||||
</section>
|
||||
</aside>
|
||||
|
||||
<main class="window-app-main um-main">
|
||||
<div class="window-app-panel um-panel">
|
||||
<section class="window-app-hero um-hero">
|
||||
<div>
|
||||
<p class="window-app-kicker um-kicker">User Management</p>
|
||||
<h2 class="window-app-title"><?= $h($sectionMeta[$section]['title']) ?></h2>
|
||||
<p class="window-app-copy um-copy"><?= $h($sectionMeta[$section]['description']) ?></p>
|
||||
</div>
|
||||
<div class="window-app-pill-row um-pill-row">
|
||||
<span class="window-app-pill">Administrators only</span>
|
||||
<span class="window-app-pill">Desktop Auth</span>
|
||||
<span class="window-app-pill">Section: <?= $h($sectionMeta[$section]['label']) ?></span>
|
||||
</div>
|
||||
</section>
|
||||
|
||||
<?php if ($messages !== []): ?>
|
||||
<section class="window-app-card um-card">
|
||||
<div class="um-message is-success">
|
||||
<strong>Ergebnis</strong>
|
||||
<ul class="um-list">
|
||||
<?php foreach ($messages as $message): ?>
|
||||
<li><?= $h($message) ?></li>
|
||||
<?php endforeach; ?>
|
||||
</ul>
|
||||
</div>
|
||||
</section>
|
||||
<?php endif; ?>
|
||||
|
||||
<?php if ($errors !== []): ?>
|
||||
<section class="window-app-card um-card">
|
||||
<div class="um-message is-error">
|
||||
<strong>Bitte pruefen</strong>
|
||||
<ul class="um-list">
|
||||
<?php foreach ($errors as $error): ?>
|
||||
<li><?= $h($error) ?></li>
|
||||
<?php endforeach; ?>
|
||||
</ul>
|
||||
</div>
|
||||
</section>
|
||||
<?php endif; ?>
|
||||
|
||||
<script id="um-existing-users-data" type="application/json"><?= json_encode($existingUsers, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) ?></script>
|
||||
|
||||
<?php if ($section === 'pending'): ?>
|
||||
<div class="window-app-grid um-grid um-grid--split">
|
||||
<section class="window-app-card um-card">
|
||||
<div class="um-section-head">
|
||||
<div>
|
||||
<p class="window-app-kicker um-kicker">Queue</p>
|
||||
<h3 class="um-section-title">Wartende Registrierungen</h3>
|
||||
</div>
|
||||
<span class="window-app-meta um-meta"><?= count($pendingRequests) ?> offen</span>
|
||||
</div>
|
||||
|
||||
<div class="um-request-list">
|
||||
<?php if ($pendingRequests === []): ?>
|
||||
<div class="um-empty">Aktuell gibt es keine offenen Registrierungen.</div>
|
||||
<?php else: ?>
|
||||
<?php foreach ($pendingRequests as $request): ?>
|
||||
<a class="um-request-card<?= (($selected['id'] ?? '') === ($request['id'] ?? '')) ? ' is-active' : '' ?>" href="<?= $h($sectionUrl('pending', (string) ($request['id'] ?? ''))) ?>">
|
||||
<strong><?= $h((string) ($request['username'] ?? '')) ?></strong>
|
||||
<span><?= $h((string) ($request['email'] ?? '')) ?></span>
|
||||
<span class="um-request-status"><?= $h((string) ($request['status'] ?? 'pending')) ?></span>
|
||||
</a>
|
||||
<?php endforeach; ?>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
</section>
|
||||
|
||||
<section class="window-app-card um-card">
|
||||
<div class="um-section-head">
|
||||
<div>
|
||||
<p class="window-app-kicker um-kicker">Approval</p>
|
||||
<h3 class="um-section-title">Freischaltung</h3>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<?php if (is_array($selected)): ?>
|
||||
<div class="um-summary-grid">
|
||||
<div class="um-summary-item"><span>Benutzer</span><strong><?= $h((string) ($selected['username'] ?? '')) ?></strong></div>
|
||||
<div class="um-summary-item"><span>E-Mail</span><strong><?= $h((string) ($selected['email'] ?? '')) ?></strong></div>
|
||||
<div class="um-summary-item"><span>Status</span><strong><?= $h((string) ($selected['status'] ?? '')) ?></strong></div>
|
||||
</div>
|
||||
|
||||
<form class="um-form" method="post" action="/admin/users/">
|
||||
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
|
||||
<input type="hidden" name="selected_id" value="<?= $h((string) ($selected['id'] ?? '')) ?>">
|
||||
<input type="hidden" name="action" value="approve-registration">
|
||||
<input type="hidden" name="active_section" value="pending">
|
||||
|
||||
<fieldset class="um-fieldset">
|
||||
<legend>Gruppen fuer Freischaltung</legend>
|
||||
<div class="um-checkbox-grid">
|
||||
<?php foreach ($availableGroups as $group): ?>
|
||||
<label class="window-app-item um-checkbox-item">
|
||||
<input type="checkbox" name="group_dns[]" value="<?= $h((string) ($group['dn'] ?? '')) ?>">
|
||||
<span class="window-app-item-main">
|
||||
<strong><?= $h((string) ($group['label'] ?? '')) ?></strong>
|
||||
<p><?= $h((string) ($group['dn'] ?? '')) ?></p>
|
||||
</span>
|
||||
</label>
|
||||
<?php endforeach; ?>
|
||||
</div>
|
||||
</fieldset>
|
||||
|
||||
<label class="um-field">
|
||||
<span>Admin-Notiz</span>
|
||||
<textarea name="admin_note" rows="4"></textarea>
|
||||
</label>
|
||||
|
||||
<div class="um-actions">
|
||||
<button class="window-app-nav-button um-primary" type="submit">Freischaltung bestaetigen</button>
|
||||
</div>
|
||||
</form>
|
||||
<?php else: ?>
|
||||
<div class="um-empty">Keine Anfrage ausgewaehlt.</div>
|
||||
<?php endif; ?>
|
||||
</section>
|
||||
</div>
|
||||
<?php elseif ($section === 'users'): ?>
|
||||
<section class="window-app-card um-card">
|
||||
<div class="um-section-head">
|
||||
<div>
|
||||
<p class="window-app-kicker um-kicker">Existing User</p>
|
||||
<h3 class="um-section-title">Bestehenden Benutzer verwalten</h3>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<form class="um-form" method="post" action="/admin/users/">
|
||||
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
|
||||
<input type="hidden" name="active_section" value="users">
|
||||
|
||||
<label class="um-field">
|
||||
<span>Benutzername</span>
|
||||
<div class="um-user-picker" data-user-picker>
|
||||
<input type="text" name="manual_username" value="<?= $h($manualUsername) ?>" required autocomplete="off" data-user-picker-input>
|
||||
<div class="um-user-picker-list" data-user-picker-list hidden></div>
|
||||
</div>
|
||||
</label>
|
||||
|
||||
<fieldset class="um-fieldset">
|
||||
<legend>Gruppen fuer Aktivierung</legend>
|
||||
<div class="um-checkbox-grid">
|
||||
<?php foreach ($availableGroups as $group): ?>
|
||||
<?php
|
||||
$groupDn = (string) ($group['dn'] ?? '');
|
||||
$selectedGroupDns = array_values(array_map('strval', (array) ($selectedExistingUser['group_dns'] ?? [])));
|
||||
$isChecked = in_array($groupDn, $selectedGroupDns, true);
|
||||
?>
|
||||
<label class="window-app-item um-checkbox-item">
|
||||
<input type="checkbox" name="manual_group_dns[]" value="<?= $h($groupDn) ?>" <?= $isChecked ? 'checked' : '' ?>>
|
||||
<span class="window-app-item-main">
|
||||
<strong><?= $h((string) ($group['label'] ?? '')) ?></strong>
|
||||
<p><?= $h($groupDn) ?></p>
|
||||
</span>
|
||||
</label>
|
||||
<?php endforeach; ?>
|
||||
</div>
|
||||
</fieldset>
|
||||
|
||||
<div class="um-actions">
|
||||
<button class="window-app-nav-button um-primary" type="submit" name="action" value="activate-user">Benutzer aktivieren</button>
|
||||
<button class="window-app-nav-button um-danger" type="submit" name="action" value="deactivate-user">Benutzer deaktivieren</button>
|
||||
</div>
|
||||
</form>
|
||||
</section>
|
||||
<?php else: ?>
|
||||
<section class="window-app-card um-card">
|
||||
<div class="um-section-head">
|
||||
<div>
|
||||
<p class="window-app-kicker um-kicker">Reset</p>
|
||||
<h3 class="um-section-title">Passwort zuruecksetzen</h3>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<form class="um-form" method="post" action="/admin/users/">
|
||||
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
|
||||
<input type="hidden" name="active_section" value="reset">
|
||||
|
||||
<label class="um-field">
|
||||
<span>Benutzername</span>
|
||||
<div class="um-user-picker" data-user-picker>
|
||||
<input type="text" name="reset_username" value="<?= $h($manualResetUsername) ?>" required autocomplete="off" data-user-picker-input>
|
||||
<div class="um-user-picker-list" data-user-picker-list hidden></div>
|
||||
</div>
|
||||
</label>
|
||||
|
||||
<label class="um-field">
|
||||
<span>Neues Passwort fuer direkten Reset</span>
|
||||
<input type="password" name="reset_password" value="" placeholder="Optional fuer direkten Admin-Reset">
|
||||
</label>
|
||||
|
||||
<div class="um-actions">
|
||||
<button class="window-app-nav-button um-secondary" type="submit" name="action" value="send-reset-mail">Reset-Mail senden</button>
|
||||
<button class="window-app-nav-button um-primary" type="submit" name="action" value="set-password">Passwort direkt setzen</button>
|
||||
</div>
|
||||
</form>
|
||||
</section>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
</main>
|
||||
</div>
|
||||
</div>
|
||||
<?php
|
||||
$pageContent = (string) ob_get_clean();
|
||||
|
||||
if ($isPartial) {
|
||||
echo $pageContent;
|
||||
return;
|
||||
}
|
||||
?><!DOCTYPE html>
|
||||
<html lang="de">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>User Management</title>
|
||||
<link rel="stylesheet" href="/assets/desktop/desktop.css">
|
||||
<link rel="stylesheet" href="/system-app-assets/index.php?app=user-management&path=assets/app.css">
|
||||
</head>
|
||||
<body>
|
||||
<?= $pageContent ?>
|
||||
<script src="/system-app-assets/index.php?app=user-management&path=assets/app.js"></script>
|
||||
<script>
|
||||
window.initUserManagementApp?.(document.getElementById('user-management-app'), { standalone: true });
|
||||
</script>
|
||||
</body>
|
||||
</html>
|
||||
Reference in New Issue
Block a user