feat(auth): login, roles, user mgmt, setup wizard, and session guard

- New skald-setup crate: interactive first-run wizard that creates the
  admin user, prompts for encryption choice and password
- Auth system: session-based login/logout with cookie, guard middleware
- Roles API: CRUD for data-driven roles, seeded on first boot
- Users management API: create, list, edit, delete users
- Setup state API: check if first admin has been created
- Frontend: login-page, setup-page, users-page, roles-page, profile-page
  components with corresponding CSS
- Topbar: avatar dropdown with profile link and logout
- Sidebar: nav entries for Users and Roles (admin only)
- Page shell CSS: layout support for the new pages
- build.sh: builds both skald and skald-setup binaries
- run.sh: runs skald-setup before the server loop
- CLAUDE.md: updated workspace layout and build/run docs
This commit is contained in:
2026-07-10 19:19:25 +01:00
parent 178a38357e
commit 7dd77d4ef4
36 changed files with 2660 additions and 27 deletions
+12
View File
@@ -71,6 +71,18 @@ file-viewer-page {
border-right: 1px solid var(--toolbar-border, #e5e9f0);
}
users-page,
roles-page,
profile-page {
display: none; /* toggled by JS */
flex-direction: column;
flex: 1;
min-width: 0;
min-height: 0;
overflow: hidden;
border-right: 1px solid var(--toolbar-border, #e5e9f0);
}
/* ── Workspace placeholder ──────────────────────────────────────────────────── */
.app-workspace {
+107
View File
@@ -0,0 +1,107 @@
.setup-page,
.login-page {
position: fixed;
inset: 0;
z-index: 9999;
display: flex;
align-items: center;
justify-content: center;
background: var(--bs-body-bg);
overflow: auto;
padding: 24px;
}
.setup-card,
.login-card {
width: 100%;
max-width: 440px;
background: var(--card-bg);
border: 1px solid var(--card-border);
border-radius: 8px;
box-shadow: var(--card-shadow);
padding: 36px 32px;
}
.setup-logo,
.login-logo {
text-align: center;
margin-bottom: 24px;
}
.setup-logo img,
.login-logo img {
width: 64px;
height: 64px;
border-radius: 14px;
}
.setup-title,
.login-title {
font-size: 1.5rem;
font-weight: 700;
text-align: center;
margin: 0 0 6px;
}
.setup-subtitle,
.login-subtitle {
text-align: center;
color: var(--placeholder-color);
font-size: .9rem;
margin: 0 0 28px;
}
.setup-error,
.login-error {
background: rgba(220, 53, 69, .1);
border: 1px solid rgba(220, 53, 69, .35);
border-radius: var(--card-radius);
padding: 10px 14px;
margin-bottom: 18px;
font-size: .85rem;
color: #dc3545;
}
.setup-warn {
background: rgba(255, 193, 7, .1);
border: 1px solid rgba(255, 193, 7, .35);
border-radius: var(--card-radius);
padding: 12px 14px;
margin-top: 18px;
font-size: .82rem;
color: var(--bs-secondary-color);
}
.setup-warn strong {
color: #b8860b;
}
[data-bs-theme="dark"] .setup-warn strong {
color: #ffc107;
}
.setup-submit,
.login-submit {
width: 100%;
margin-top: 24px;
}
.setup-spinner,
.login-spinner {
width: 16px;
height: 16px;
border: 2px solid currentColor;
border-right-color: transparent;
border-radius: 50%;
display: inline-block;
animation: setup-spin .65s linear infinite;
vertical-align: -3px;
margin-right: 6px;
}
@keyframes setup-spin {
to { transform: rotate(360deg); }
}
.login-spinner {
animation-name: setup-spin;
}
+89
View File
@@ -69,3 +69,92 @@ app-topbar {
.topbar-copilot-btn i {
font-size: 0.9rem;
}
/* ── Profile avatar + dropdown ─────────────────────────────────────────────── */
.topbar-profile-wrapper {
position: relative;
margin-left: 0.5rem;
}
.topbar-avatar {
display: inline-flex;
align-items: center;
justify-content: center;
width: 26px;
height: 26px;
border: none;
border-radius: 50%;
background: var(--accent);
color: #fff;
font-size: 0.72rem;
font-weight: 700;
cursor: pointer;
transition: background 0.15s, transform 0.1s;
padding: 0;
}
.topbar-avatar:hover {
background: var(--accent-hover);
}
.topbar-dropdown {
position: absolute;
top: calc(100% + 6px);
right: 0;
min-width: 200px;
background: var(--card-bg);
border: 1px solid var(--card-border);
border-radius: 8px;
box-shadow: var(--card-shadow);
padding: 6px;
z-index: 100;
}
.topbar-dropdown-header {
padding: 8px 10px;
border-bottom: 1px solid var(--card-border);
margin-bottom: 4px;
}
.topbar-dropdown-name {
font-size: 0.85rem;
font-weight: 600;
}
.topbar-dropdown-sub {
font-size: 0.75rem;
color: var(--placeholder-color);
}
.topbar-dropdown-item {
display: flex;
align-items: center;
gap: 8px;
width: 100%;
border: none;
background: none;
color: var(--bs-body-color);
font-size: 0.82rem;
padding: 8px 10px;
border-radius: 5px;
cursor: pointer;
text-align: left;
}
.topbar-dropdown-item:hover {
background: var(--bs-tertiary-bg);
}
.topbar-dropdown-item i {
font-size: 0.9rem;
opacity: 0.7;
}
.topbar-dropdown-logout {
color: #dc3545;
}
.topbar-dropdown-logout:hover {
background: rgba(220, 53, 69, 0.08);
}
+138
View File
@@ -0,0 +1,138 @@
/* ── Users & Roles pages (shared) ───────────────────────────────────────────── */
.um-page {
flex: 1;
flex-direction: column;
min-height: 0;
overflow-y: auto;
padding: 0;
}
.um-header {
display: flex;
align-items: center;
gap: 12px;
padding: 16px 24px 12px;
}
.um-title {
font-size: 1.35rem;
font-weight: 700;
margin: 0;
}
.um-header-right {
margin-left: auto;
display: flex;
align-items: center;
gap: 14px;
}
.um-header-count {
font-size: .82rem;
color: var(--placeholder-color);
}
.um-table-wrap {
padding: 0 24px 24px;
}
.um-table {
width: 100%;
border-collapse: collapse;
font-size: .88rem;
}
.um-table th {
text-align: left;
padding: 8px 12px;
font-weight: 600;
font-size: .78rem;
text-transform: uppercase;
letter-spacing: .03em;
color: var(--placeholder-color);
border-bottom: 1px solid var(--card-border);
}
.um-table td {
padding: 10px 12px;
border-bottom: 1px solid var(--card-border);
}
.um-table tr:hover td {
background: var(--bs-tertiary-bg);
}
.um-badge {
display: inline-block;
padding: 2px 8px;
border-radius: 4px;
font-size: .72rem;
font-weight: 600;
}
.um-badge-encrypted { background: rgba(99, 102, 241, .15); color: #6366f1; }
.um-badge-clear { background: rgba(108, 117, 125, .15); color: #6c757d; }
.um-badge-active { background: rgba(25, 135, 84, .15); color: #198754; }
.um-badge-inactive { background: rgba(220, 53, 69, .15); color: #dc3545; }
.um-actions {
display: flex;
gap: 4px;
justify-content: flex-end;
}
.um-btn-icon {
background: none;
border: none;
padding: 4px 8px;
border-radius: 4px;
cursor: pointer;
color: var(--placeholder-color);
font-size: .95rem;
transition: background .15s, color .15s;
}
.um-btn-icon:hover { background: var(--bs-tertiary-bg); color: var(--bs-body-color); }
.um-btn-icon:disabled { opacity: .3; cursor: not-allowed; }
/* ── Modal form ─────────────────────────────────────────────────────────────── */
.um-modal-overlay {
position: fixed;
inset: 0;
z-index: 10000;
background: rgba(0, 0, 0, .4);
display: flex;
align-items: center;
justify-content: center;
padding: 24px;
}
.um-modal {
width: 100%;
max-width: 460px;
background: var(--card-bg);
border: 1px solid var(--card-border);
border-radius: 8px;
box-shadow: var(--card-shadow);
}
.um-modal-header {
display: flex;
align-items: center;
gap: 8px;
padding: 16px 20px;
border-bottom: 1px solid var(--card-border);
font-weight: 600;
font-size: 1rem;
}
.um-modal-body { padding: 20px; }
.um-modal-footer { padding: 12px 20px; display: flex; justify-content: flex-end; gap: 8px; }
.um-empty {
text-align: center;
padding: 48px 24px;
color: var(--placeholder-color);
}