Nexus upgrade design and refresh

partials/landingpages/modules/setup.php

@@ -69,9 +69,16 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
     }
 
     modules()->saveSettings($moduleName, $payload);
+    modules()->saveAuth($moduleName, [
+        'required' => isset($_POST['auth_required']),
+        'users' => (string)($_POST['auth_users'] ?? ''),
+        'groups' => (string)($_POST['auth_groups'] ?? ''),
+    ]);
     $notice = 'Setup gespeichert.';
     $current = array_replace_recursive($current, $payload);
+    $module = modules()->get($moduleName) ?: $module;
 }
+$authConfig = is_array($module['auth'] ?? null) ? $module['auth'] : ['required' => false, 'users' => [], 'groups' => []];
 ?>
 <div class="card">
   <div class="pill">Setup</div>
@@ -122,6 +129,23 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
       </label>
     <?php endforeach; ?>
 
+    <div class="card" style="padding:14px; background:var(--panel-2); display:grid; gap:12px;">
+      <strong>Modulzugriff</strong>
+      <label class="muted" style="display:flex; align-items:center; gap:10px;">
+        <input type="checkbox" name="auth_required" value="1" <?= !empty($authConfig['required']) ? 'checked' : '' ?>>
+        <span>Login fuer dieses Modul erforderlich</span>
+      </label>
+      <label class="muted" style="display:grid; gap:6px;">
+        <span>Erlaubte Benutzer</span>
+        <textarea name="auth_users" rows="3" placeholder="Keycloak-Sub, Benutzername oder E-Mail, je Zeile oder Komma"><?= e(implode("\n", is_array($authConfig['users'] ?? null) ? $authConfig['users'] : [])) ?></textarea>
+      </label>
+      <label class="muted" style="display:grid; gap:6px;">
+        <span>Erlaubte Gruppen</span>
+        <textarea name="auth_groups" rows="3" placeholder="/admin oder mining-users, je Zeile oder Komma"><?= e(implode("\n", is_array($authConfig['groups'] ?? null) ? $authConfig['groups'] : [])) ?></textarea>
+      </label>
+      <small class="muted">Wenn Login aktiv ist und Benutzer/Gruppen leer bleiben, darf jeder eingeloggte Benutzer das Modul oeffnen.</small>
+    </div>
+
     <div style="display:flex; gap:10px;">
       <button class="cta-button" type="submit">Speichern</button>
       <a class="nav-link" href="/modules">Zurück</a>