Files
desktop/system/apps/admin-apps/page.php
Lars Gebhardt-Kusche 8c1ae513ea
All checks were successful
Deploy / deploy-staging (push) Successful in 26s
Deploy / deploy-production (push) Has been skipped
asdasd
2026-06-26 01:31:48 +02:00

537 lines
31 KiB
PHP

<?php
declare(strict_types=1);
require_once dirname(__DIR__, 3) . '/src/App/bootstrap.php';
use App\AdminAppsService;
use ModulesCore\ModuleHttp;
if (session_status() !== PHP_SESSION_ACTIVE) {
session_start();
}
$projectRoot = dirname(__DIR__, 3);
ModuleHttp::requireDesktopAccess($projectRoot);
$currentUser = is_array($_SESSION['desktop_auth']['user'] ?? null) ? $_SESSION['desktop_auth']['user'] : [];
$currentGroups = array_map(
static fn (string $group): string => strtolower(trim($group, '/')),
array_values(array_map('strval', (array) ($currentUser['groups'] ?? [])))
);
$isPartial = !empty($_GET['partial']);
if (!in_array('administrators', $currentGroups, true)) {
http_response_code(403);
$forbidden = '<div class="window-app-shell aa-shell"><div class="window-app-frame aa-frame"><main class="window-app-main aa-main"><div class="window-app-panel aa-panel"><section class="window-app-card aa-card"><p class="aa-message is-error">Kein Zugriff auf Admin Apps.</p></section></div></main></div></div>';
if ($isPartial) {
echo $forbidden;
return;
}
?><!DOCTYPE html>
<html lang="de">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Admin Apps</title>
<link rel="stylesheet" href="/assets/desktop/desktop.css">
<link rel="stylesheet" href="/system-app-assets/index.php?app=admin-apps&path=assets/app.css">
</head>
<body><?= $forbidden ?></body>
</html><?php
return;
}
$csrfToken = (string) ($_SESSION['admin_apps_token'] ?? '');
if ($csrfToken === '') {
$csrfToken = bin2hex(random_bytes(16));
$_SESSION['admin_apps_token'] = $csrfToken;
}
$service = new AdminAppsService($projectRoot);
$messages = [];
$errors = [];
$section = trim((string) ($_GET['section'] ?? $_POST['active_section'] ?? 'overview'));
$allowedSections = ['overview', 'installation', 'widgets', 'integrations'];
if (!in_array($section, $allowedSections, true)) {
$section = 'overview';
}
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$postedToken = (string) ($_POST['csrf_token'] ?? '');
if ($postedToken === '' || !hash_equals($csrfToken, $postedToken)) {
$errors[] = 'Die Formularpruefung ist fehlgeschlagen.';
} else {
$action = (string) ($_POST['action'] ?? '');
try {
if ($action === 'save-gitea') {
$service->saveGiteaConfig([
'base_url' => (string) ($_POST['base_url'] ?? ''),
'token' => (string) ($_POST['token'] ?? ''),
'owner' => (string) ($_POST['owner'] ?? ''),
'repositories' => (string) ($_POST['repositories'] ?? ''),
'poll_idle_seconds' => (string) ($_POST['poll_idle_seconds'] ?? ''),
'poll_running_seconds' => (string) ($_POST['poll_running_seconds'] ?? ''),
'visibility' => (string) ($_POST['visibility'] ?? ''),
]);
$messages[] = 'Gitea-Deploy-Status-Konfiguration gespeichert.';
$section = 'integrations';
} elseif ($action === 'save-app-access') {
$service->saveAppAccess(
(string) ($_POST['app_id'] ?? ''),
array_values(array_map('strval', (array) ($_POST['required_groups'] ?? []))),
!empty($_POST['available_without_login'])
);
$messages[] = 'LDAP-Gruppen fuer die App wurden gespeichert.';
$section = 'overview';
}
} catch (\Throwable $exception) {
$errors[] = $exception->getMessage();
}
}
}
$bootstrap = $service->bootstrap(true);
$apps = is_array($bootstrap['apps'] ?? null) ? $bootstrap['apps'] : [];
$widgets = is_array($bootstrap['widgets'] ?? null) ? $bootstrap['widgets'] : [];
$stats = is_array($bootstrap['stats'] ?? null) ? $bootstrap['stats'] : [];
$meta = is_array($bootstrap['meta'] ?? null) ? $bootstrap['meta'] : [];
$availableGroups = is_array($meta['available_groups'] ?? null) ? $meta['available_groups'] : [];
$gitea = is_array($bootstrap['gitea'] ?? null) ? $bootstrap['gitea'] : [];
$giteaConfig = is_array($gitea['config'] ?? null) ? $gitea['config'] : [];
$giteaDiagnostics = is_array($gitea['diagnostics'] ?? null) ? $gitea['diagnostics'] : [];
$h = static fn (?string $value): string => htmlspecialchars($value ?? '', ENT_QUOTES);
$sectionUrl = static fn (string $targetSection): string => '/admin/apps/?section=' . rawurlencode($targetSection);
$sectionMeta = [
'overview' => [
'label' => 'Apps',
'title' => 'Apps und Bereitstellung',
'description' => 'Apps sind allgemeine Anwendungen. Sie koennen als Menue-App, Tray-App, Widget-Quelle oder mit optionalem Desktop-Icon auftreten.',
'nav' => 'Bestand und Installationsweg pruefen.',
],
'installation' => [
'label' => 'Installation',
'title' => 'Installationswege fuer Apps',
'description' => 'Installierbare Fach-Apps liegen unter custom/apps/. Upload- und Importwege werden hier als naechster Ausbauschritt vorbereitet.',
'nav' => 'ZIP-, Verzeichnis- und Server-Workflow beschreiben.',
],
'widgets' => [
'label' => 'Widgets',
'title' => 'Widgets und Quellen',
'description' => 'Widgets sind kleine Desktop-Bereiche ohne klassische Fensterfunktionen. Sie koennen eigenstaendig oder Teil einer App sein.',
'nav' => 'Widget-Quellen und Bedeutung pruefen.',
],
'integrations' => [
'label' => 'Integrationen',
'title' => 'Gitea-Deploy-Status',
'description' => 'Erste echte Admin-Einstellung fuer das Deploy-Status-Addon inklusive Environment-Datei und Tray-Sichtbarkeit.',
'nav' => 'Addon-Konfiguration bearbeiten.',
],
];
ob_start();
?>
<div id="admin-apps-app" class="window-app-shell aa-shell">
<div class="window-app-frame aa-frame">
<aside class="window-app-sidebar aa-sidebar">
<div class="window-app-brand aa-brand">
<p class="window-app-kicker aa-kicker">Administration</p>
<h1>Admin Apps</h1>
<p class="window-app-copy aa-copy">Zentrale Verwaltungs-App fuer Desktop-Apps, Widgets und erste Integrations-Einstellungen.</p>
</div>
<div class="window-app-nav-list aa-nav-list">
<?php foreach ($sectionMeta as $sectionId => $metaItem): ?>
<a class="window-app-nav-button aa-nav-button<?= $section === $sectionId ? ' is-active' : '' ?>" href="<?= $h($sectionUrl($sectionId)) ?>">
<strong><?= $h($metaItem['label']) ?></strong>
<span class="window-app-meta aa-meta"><?= $h($metaItem['nav']) ?></span>
</a>
<?php endforeach; ?>
</div>
<section class="window-app-card aa-card">
<strong class="aa-side-title">Schnellstatus</strong>
<div class="aa-side-metric">
<span>Environment</span>
<strong><?= $h((string) ($meta['environment'] ?? 'local')) ?></strong>
</div>
<div class="aa-side-metric">
<span>Apps gesamt</span>
<strong><?= (int) ($stats['apps_total'] ?? 0) ?></strong>
</div>
<div class="aa-side-metric">
<span>Widgets</span>
<strong><?= (int) ($stats['widgets_total'] ?? 0) ?></strong>
</div>
<div class="aa-side-metric">
<span>Admin-only</span>
<strong><?= (int) ($stats['admin_only_apps'] ?? 0) ?></strong>
</div>
</section>
</aside>
<main class="window-app-main aa-main">
<div class="window-app-panel aa-panel">
<section class="window-app-hero aa-hero">
<div>
<p class="window-app-kicker aa-kicker">Admin Registry</p>
<h2 class="window-app-title"><?= $h($sectionMeta[$section]['title']) ?></h2>
<p class="window-app-copy aa-copy"><?= $h($sectionMeta[$section]['description']) ?></p>
</div>
<div class="window-app-pill-row aa-pill-row">
<span class="window-app-pill">Administrators only</span>
<span class="window-app-pill">Desktop Auth</span>
<span class="window-app-pill">Section: <?= $h($sectionMeta[$section]['label']) ?></span>
</div>
</section>
<?php if ($messages !== []): ?>
<section class="window-app-card aa-card">
<div class="aa-message is-success">
<strong>Ergebnis</strong>
<ul class="aa-list">
<?php foreach ($messages as $message): ?>
<li><?= $h($message) ?></li>
<?php endforeach; ?>
</ul>
</div>
</section>
<?php endif; ?>
<?php if ($errors !== []): ?>
<section class="window-app-card aa-card">
<div class="aa-message is-error">
<strong>Bitte pruefen</strong>
<ul class="aa-list">
<?php foreach ($errors as $error): ?>
<li><?= $h($error) ?></li>
<?php endforeach; ?>
</ul>
</div>
</section>
<?php endif; ?>
<?php if ($section === 'overview'): ?>
<section class="aa-grid aa-grid--stats">
<article class="window-app-card aa-card aa-stat-card">
<span>Installierbare Apps</span>
<strong><?= (int) ($stats['installable_apps'] ?? 0) ?></strong>
</article>
<article class="window-app-card aa-card aa-stat-card">
<span>Systemtools</span>
<strong><?= (int) ($stats['system_tools'] ?? 0) ?></strong>
</article>
<article class="window-app-card aa-card aa-stat-card">
<span>Core-Apps</span>
<strong><?= (int) (($stats['apps_total'] ?? 0) - ($stats['installable_apps'] ?? 0) - ($stats['system_tools'] ?? 0)) ?></strong>
</article>
</section>
<section class="window-app-card aa-card">
<div class="aa-section-head">
<div>
<p class="window-app-kicker aa-kicker">Registry</p>
<h3 class="aa-section-title">Desktop-Apps</h3>
</div>
</div>
<div class="aa-table-wrap">
<table class="aa-table">
<thead>
<tr>
<th>Titel</th>
<th>Scope</th>
<th>Typ</th>
<th>LDAP-Gruppen</th>
<th>Route</th>
<th>Flags</th>
</tr>
</thead>
<tbody>
<?php foreach ($apps as $app): ?>
<tr>
<td>
<strong><?= $h((string) ($app['title'] ?? '')) ?></strong>
<div class="aa-table-copy"><?= $h((string) ($app['summary'] ?? '')) ?></div>
</td>
<td><?= $h((string) ($app['app_scope'] ?? '')) ?></td>
<td><?= $h(!empty($app['installable']) ? 'Custom App' : 'System') ?></td>
<td>
<form class="aa-inline-access-form" method="post" action="/admin/apps/">
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
<input type="hidden" name="action" value="save-app-access">
<input type="hidden" name="active_section" value="overview">
<input type="hidden" name="app_id" value="<?= $h((string) ($app['app_id'] ?? '')) ?>">
<p class="aa-inline-access-current"><?= $h((string) ($app['required_groups_display'] ?? '')) ?></p>
<label class="aa-inline-access-toggle">
<input
type="checkbox"
name="available_without_login"
value="1"
<?= !empty($app['available_without_login']) ? 'checked' : '' ?>
>
<span>Auch ohne Login auf dem Logoff-Desktop anzeigen</span>
</label>
<?php if ($availableGroups !== []): ?>
<details class="aa-inline-access-details">
<summary>Bearbeiten</summary>
<div class="aa-inline-access-groups">
<?php foreach ($availableGroups as $group): ?>
<label class="aa-inline-access-option">
<input
type="checkbox"
name="required_groups[]"
value="<?= $h((string) ($group['id'] ?? '')) ?>"
<?= in_array((string) ($group['id'] ?? ''), array_values(array_map('strval', (array) ($app['required_groups'] ?? []))), true) ? 'checked' : '' ?>
>
<span>
<strong><?= $h((string) ($group['label'] ?? '')) ?></strong>
<small><?= $h((string) ($group['id'] ?? '')) ?></small>
</span>
</label>
<?php endforeach; ?>
</div>
<button class="window-app-button aa-primary aa-inline-access-submit" type="submit">Speichern</button>
</details>
<?php else: ?>
<p class="aa-table-copy">Keine LDAP-Gruppen gefunden.</p>
<?php endif; ?>
</form>
</td>
<td><code><?= $h((string) ($app['entry_route'] ?? '')) ?></code></td>
<td>
<div class="aa-flag-list">
<?php if (!empty($app['show_on_desktop'])): ?><span class="window-app-pill">Desktop</span><?php endif; ?>
<?php if (!empty($app['supports_widget'])): ?><span class="window-app-pill">Widget</span><?php endif; ?>
<?php if (!empty($app['supports_tray'])): ?><span class="window-app-pill">Tray</span><?php endif; ?>
<?php if (!empty($app['enabled_by_default'])): ?><span class="window-app-pill">Default</span><?php endif; ?>
<?php if (!empty($app['available_without_login'])): ?><span class="window-app-pill">Logoff Desktop</span><?php endif; ?>
<?php if (!empty($app['admin_only'])): ?><span class="window-app-pill">Admin only</span><?php endif; ?>
</div>
</td>
</tr>
<?php endforeach; ?>
</tbody>
</table>
</div>
</section>
<section class="window-app-card aa-card">
<div class="aa-section-head">
<div>
<p class="window-app-kicker aa-kicker">Installation</p>
<h3 class="aa-section-title">Aktueller Installationsweg</h3>
<p class="aa-copy">Neue Apps koennen aktuell als Modul-Verzeichnis unter <code>custom/apps/</code> abgelegt werden. Ein eigener Upload-Bereich fuer ZIP-Dateien oder Verzeichnisse ist noch offen und wird als naechster Ausbauschritt vorbereitet.</p>
</div>
</div>
</section>
<section class="window-app-card aa-card">
<div class="aa-section-head">
<div>
<p class="window-app-kicker aa-kicker">Flags</p>
<h3 class="aa-section-title">Bedeutung der Flags</h3>
<p class="aa-copy"><strong>Default</strong> bedeutet: Die App wird fuer neue Benutzer oder fuer Benutzer ohne explizite Auswahl initial vorausgewaehlt. <strong>Logoff Desktop</strong> bedeutet: Die App darf bereits ohne Login auf der offenen Desktop-Oberflaeche erscheinen, sofern sie als Desktop-App darstellbar ist.</p>
<p class="aa-copy">Gespeichert wird in <?= $h((string) ($meta['app_access_config_path'] ?? '')) ?>. Dort liegen sowohl LDAP-Gruppen als auch die Freigabe fuer den offenen Desktop.</p>
</div>
</div>
</section>
<?php endif; ?>
<?php if ($section === 'installation'): ?>
<section class="aa-grid aa-grid--stats">
<article class="window-app-card aa-card aa-stat-card">
<span>Installierbare Apps</span>
<strong><?= (int) ($stats['installable_apps'] ?? 0) ?></strong>
</article>
<article class="window-app-card aa-card aa-stat-card">
<span>Systemtools</span>
<strong><?= (int) ($stats['system_tools'] ?? 0) ?></strong>
</article>
</section>
<section class="window-app-card aa-card">
<div class="aa-section-head">
<div>
<p class="window-app-kicker aa-kicker">Installationswege</p>
<h3 class="aa-section-title">Aktueller und geplanter Ablauf</h3>
<p class="aa-copy">Installierbare Apps liegen im Projekt unter <code>custom/apps/</code>. Der Desktop erkennt neue Module automatisch ueber deren Desktop-Metadaten.</p>
</div>
</div>
<div class="aa-grid">
<article class="window-app-card aa-card aa-inline-card">
<strong>1. Manuell ueber den Server</strong>
<p>Ein Modul-Verzeichnis wird nach <code>custom/apps/&lt;app&gt;/</code> kopiert. Das ist der aktuell gueltige produktive Weg.</p>
</article>
<article class="window-app-card aa-card aa-inline-card">
<strong>2. Verzeichnis-Upload</strong>
<p>Ein Browser-Upload fuer ein vorbereitetes Modul-Verzeichnis ist fachlich vorgesehen, aber noch nicht implementiert.</p>
</article>
<article class="window-app-card aa-card aa-inline-card">
<strong>3. ZIP-Upload</strong>
<p>Ein ZIP-Import mit Entpacken und Validierung ist vorgesehen, benoetigt aber noch einen dedizierten Installations-Workflow.</p>
</article>
</div>
</section>
<?php endif; ?>
<?php if ($section === 'widgets'): ?>
<section class="window-app-card aa-card">
<div class="aa-section-head">
<div>
<p class="window-app-kicker aa-kicker">Widget Registry</p>
<h3 class="aa-section-title">Alle Widgets</h3>
<p class="aa-copy">Globale Widgets und modulbasierte Widgets werden hier gemeinsam sichtbar. Fachlich sind Widgets kleine Desktop-Elemente; technisch werden sie aktuell noch uebergangsweise im rechten Infobereich gerendert.</p>
</div>
</div>
<div class="aa-table-wrap">
<table class="aa-table">
<thead>
<tr>
<th>Widget</th>
<th>Zone</th>
<th>Quelle</th>
<th>Launch-App</th>
<th>Status-API</th>
</tr>
</thead>
<tbody>
<?php foreach ($widgets as $widget): ?>
<tr>
<td>
<strong><?= $h((string) ($widget['title'] ?? '')) ?></strong>
<div class="aa-table-copy"><?= $h((string) ($widget['summary'] ?? '')) ?></div>
</td>
<td><?= $h((string) ($widget['zone'] ?? 'sidebar')) ?></td>
<td>
<code><?= $h((string) (($widget['source_app_id'] ?? '') !== '' ? $widget['source_app_id'] : 'global')) ?></code>
<?php if (($widget['source_module_id'] ?? '') !== ''): ?>
<div class="aa-table-copy">Modul: <?= $h((string) $widget['source_module_id']) ?></div>
<?php endif; ?>
</td>
<td><code><?= $h((string) ($widget['launch_app_id'] ?? '')) ?></code></td>
<td><code><?= $h((string) ($widget['status_api'] ?? '')) ?></code></td>
</tr>
<?php endforeach; ?>
</tbody>
</table>
</div>
</section>
<?php endif; ?>
<?php if ($section === 'integrations'): ?>
<section class="window-app-card aa-card">
<div class="aa-section-head">
<div>
<p class="window-app-kicker aa-kicker">Addon</p>
<h3 class="aa-section-title">Gitea-Deploy-Status</h3>
<p class="aa-copy">Die Werte werden in der aktuellen Environment-Datei gespeichert und beim Deploy in das gemischte `config/`-Verzeichnis uebernommen.</p>
</div>
</div>
<form class="aa-form aa-form--gitea" method="post" action="/admin/apps/">
<input type="hidden" name="csrf_token" value="<?= $h($csrfToken) ?>">
<input type="hidden" name="action" value="save-gitea">
<input type="hidden" name="active_section" value="integrations">
<div class="aa-form-grid">
<label class="aa-field">
<span>Gitea API Base URL</span>
<input type="text" name="base_url" value="<?= $h((string) ($giteaConfig['base_url'] ?? '')) ?>" placeholder="https://gitea.example.tld/api/v1">
</label>
<label class="aa-field">
<span>Owner oder Organisation</span>
<input type="text" name="owner" value="<?= $h((string) ($giteaConfig['owner'] ?? '')) ?>" placeholder="private">
</label>
<label class="aa-field">
<span>Idle Polling (Sek.)</span>
<input type="number" min="1" name="poll_idle_seconds" value="<?= $h((string) ($giteaConfig['poll_idle_seconds'] ?? '5')) ?>">
</label>
<label class="aa-field">
<span>Running Polling (Sek.)</span>
<input type="number" min="1" name="poll_running_seconds" value="<?= $h((string) ($giteaConfig['poll_running_seconds'] ?? '3')) ?>">
</label>
<label class="aa-field aa-field--full">
<span>Token</span>
<input type="password" name="token" value="<?= $h((string) ($giteaConfig['token'] ?? '')) ?>" placeholder="Persoenlicher API-Token">
</label>
<label class="aa-field aa-field--full">
<span>Repositories</span>
<textarea name="repositories" rows="5" placeholder="owner/repo&#10;owner/zweites-repo"><?= $h(implode("\n", array_values(array_map('strval', (array) ($giteaConfig['repositories'] ?? []))))) ?></textarea>
</label>
<label class="aa-field">
<span>Tray-Sichtbarkeit</span>
<select name="visibility">
<?php foreach (['admins' => 'Nur Admins', 'all' => 'Alle Benutzer', 'disabled' => 'Deaktiviert'] as $value => $label): ?>
<option value="<?= $h($value) ?>"<?= (string) ($giteaConfig['visibility'] ?? 'admins') === $value ? ' selected' : '' ?>><?= $h($label) ?></option>
<?php endforeach; ?>
</select>
</label>
<div class="window-app-card aa-card aa-inline-card">
<strong>Aktuelle Datei</strong>
<code><?= $h((string) ($meta['gitea_config_path'] ?? '')) ?></code>
<p>Der Tray ist fuer den aktuellen Benutzer <?= !empty($gitea['tray_visible_for_current_user']) ? 'sichtbar' : 'nicht sichtbar' ?>.</p>
</div>
</div>
<div class="aa-actions">
<button class="window-app-nav-button aa-primary" type="submit">Gitea-Einstellungen speichern</button>
</div>
</form>
</section>
<section class="aa-grid aa-grid--diag">
<article class="window-app-card aa-card aa-diag-card">
<span>Konfiguriert</span>
<strong><?= !empty($giteaDiagnostics['configured']) ? 'Ja' : 'Nein' ?></strong>
</article>
<article class="window-app-card aa-card aa-diag-card">
<span>Token vorhanden</span>
<strong><?= !empty($giteaDiagnostics['token_present']) ? 'Ja' : 'Nein' ?></strong>
</article>
<article class="window-app-card aa-card aa-diag-card">
<span>Repos konfiguriert</span>
<strong><?= count((array) ($giteaDiagnostics['repositories_configured'] ?? [])) ?></strong>
</article>
<article class="window-app-card aa-card aa-diag-card">
<span>Visibility</span>
<strong><?= $h((string) ($giteaDiagnostics['visibility'] ?? 'admins')) ?></strong>
</article>
</section>
<?php endif; ?>
</div>
</main>
</div>
</div>
<?php
$content = ob_get_clean();
if ($isPartial) {
echo $content;
return;
}
?><!DOCTYPE html>
<html lang="de">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Admin Apps</title>
<link rel="stylesheet" href="/assets/desktop/desktop.css">
<link rel="stylesheet" href="/system-app-assets/index.php?app=admin-apps&path=assets/app.css">
</head>
<body style="margin:0;background:#d7dde5;">
<?= $content ?>
<script src="/system-app-assets/index.php?app=admin-apps&path=assets/app.js"></script>
<script>
window.initAdminAppsApp?.(document.getElementById('admin-apps-app'), { standalone: true });
</script>
</body>
</html>