Paddy
7ce42324da
The frontend half of the calendar auth cutover (step 4 of docs/calendar-auth-migration.md in the API repo). This app now shares one identity with the tickets, feedback and admin apps. Every call carries the session cookie via withCredentials rather than appending sessionId/sessionKey to the URL, so there is no credential left in api.service.ts at all - that was DEFERRED_SECURITY.md item 1. The login and registration forms are gone. Accounts exist only by invitation from the admin app, so both were one redirect; sign-out ends the session for all four apps and returns here, so doing it by accident costs one click. 401 and 403 are deliberately not collapsed. Only 401 goes to the login page: redirecting on 403 produces a loop where signing in succeeds and lands straight back on the refusal, and doing it for an unreachable API produces the same loop with no way out. Both of those now render a message instead. src/app/models/session.ts and the unrouted LoginComponent are dead but left in place; removing files is a separate decision. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
57 lines
2.4 KiB
HTML
57 lines
2.4 KiB
HTML
<!--
|
|
No sign-in form and no registration form: accounts live in the admin app and
|
|
the session is one cookie shared by all four apps. What is left here is a
|
|
link to the right place, plus the two states that must not turn into a
|
|
redirect loop - see `failure` in the component.
|
|
-->
|
|
<div *ngIf="!isLoggedIn && failure === null" class="form-container">
|
|
<p>Signing you in…</p>
|
|
<button (click)="signIn()">Go to sign-in</button>
|
|
</div>
|
|
<div *ngIf="failure === 'denied'" class="form-container">
|
|
<p>This account does not have access to the calendar.</p>
|
|
<p>Ask an administrator to grant it in the admin app, then reload.</p>
|
|
<button (click)="reload()">Reload</button>
|
|
<button (click)="logout()">Sign out</button>
|
|
</div>
|
|
<div *ngIf="failure === 'unavailable'" class="form-container">
|
|
<p>The administration service cannot be reached right now.</p>
|
|
<button (click)="reload()">Reload</button>
|
|
</div>
|
|
<div *ngIf="isLoggedIn && failure === null">
|
|
<span>Logged in as {{getUserName()}}</span>
|
|
<span> </span>
|
|
<button (click)="logout()">Logout</button>
|
|
<span> | </span>
|
|
<span>Calendar: </span>
|
|
<select [(ngModel)]="selectedCalendar" (change)="handleCalendarChange()">
|
|
<option value="" disabled selected hidden>Select calendar</option>
|
|
<option value="public">Public</option>
|
|
<option value="members">Internal - Members</option>
|
|
<option value="choir">Internal - Choir</option>
|
|
<option value="management">Internal - Management</option>
|
|
<option value="birthdays">Internal - Birthdays</option>
|
|
</select>
|
|
<span> | </span>
|
|
<span>Filter: </span>
|
|
<select [(ngModel)]="eventFilter" (change)="getEvents()">
|
|
<option value="all">All Events</option>
|
|
<option value="future">Future Events only</option>
|
|
<option value="past">Past Events only</option>
|
|
</select>
|
|
<span> | </span>
|
|
<span>Sorting: </span>
|
|
<select [(ngModel)]="eventSorting" (change)="sortEvents()">
|
|
<option value="start_asc">Start Date - Ascending</option>
|
|
<option value="start_desc">Start Date - Descending</option>
|
|
<option value="created_asc">Created Date - Ascending</option>
|
|
<option value="created_desc">Created Date - Descending</option>
|
|
</select>
|
|
<span> | </span>
|
|
<button (click)="getEvents()">Reload Events</button>
|
|
<div style="height: 1em;"></div>
|
|
<div id="events-table">
|
|
<app-events-table [events]="this.events" [selectedCalendar]="getCalendarId(selectedCalendar)"></app-events-table>
|
|
</div>
|
|
</div>
|