Add user system, login/register pages, and reader management dashboard
This commit is contained in:
copilot-swe-agent[bot]
GitHub
parent
85ca136c5a
commit
633b0a79a0
3
migrations/0002_add_users.sql
Normal file
3
migrations/0002_add_users.sql
Normal file
|
|
@ -0,0 +1,3 @@
|
|||
CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, username TEXT UNIQUE NOT NULL, password TEXT NOT NULL, created_at DATETIME DEFAULT CURRENT_TIMESTAMP);
|
||||
|
||||
ALTER TABLE places ADD COLUMN ownerId INTEGER REFERENCES users(id);
|
||||
10
package-lock.json
generated
10
package-lock.json
generated
|
|
@ -9,6 +9,7 @@
|
|||
"version": "1.0.0",
|
||||
"license": "ISC",
|
||||
"dependencies": {
|
||||
"bcryptjs": "^3.0.3",
|
||||
"colors": "^1.4.0",
|
||||
"dotenv": "^17.3.1",
|
||||
"express": "^5.2.1",
|
||||
|
|
@ -178,6 +179,15 @@
|
|||
],
|
||||
"license": "MIT"
|
||||
},
|
||||
"node_modules/bcryptjs": {
|
||||
"version": "3.0.3",
|
||||
"resolved": "https://registry.npmjs.org/bcryptjs/-/bcryptjs-3.0.3.tgz",
|
||||
"integrity": "sha512-GlF5wPWnSa/X5LKM1o0wz0suXIINz1iHRLvTS+sLyi7XPbe5ycmYI3DlZqVGZZtDgl4DmasFg7gOB3JYbphV5g==",
|
||||
"license": "BSD-3-Clause",
|
||||
"bin": {
|
||||
"bcrypt": "bin/bcrypt"
|
||||
}
|
||||
},
|
||||
"node_modules/bindings": {
|
||||
"version": "1.5.0",
|
||||
"resolved": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz",
|
||||
|
|
|
|||
|
|
@ -1,5 +1,6 @@
|
|||
{
|
||||
"dependencies": {
|
||||
"bcryptjs": "^3.0.3",
|
||||
"colors": "^1.4.0",
|
||||
"dotenv": "^17.3.1",
|
||||
"express": "^5.2.1",
|
||||
|
|
|
|||
306
public/css/style.css
Normal file
306
public/css/style.css
Normal file
|
|
@ -0,0 +1,306 @@
|
|||
:root {
|
||||
--bg: #0f1115;
|
||||
--panel: #171a21;
|
||||
--border: #262b36;
|
||||
--text: #e6e9ef;
|
||||
--muted: #8b93a7;
|
||||
--accent: #4f7cff;
|
||||
--accent-hover: #6a90ff;
|
||||
--danger: #e5484d;
|
||||
--success: #3ecf8e;
|
||||
}
|
||||
|
||||
* {
|
||||
box-sizing: border-box;
|
||||
}
|
||||
|
||||
body {
|
||||
margin: 0;
|
||||
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
|
||||
background: var(--bg);
|
||||
color: var(--text);
|
||||
}
|
||||
|
||||
.auth-wrapper {
|
||||
min-height: 100vh;
|
||||
display: flex;
|
||||
align-items: center;
|
||||
justify-content: center;
|
||||
padding: 24px;
|
||||
}
|
||||
|
||||
.auth-card {
|
||||
width: 100%;
|
||||
max-width: 380px;
|
||||
background: var(--panel);
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 12px;
|
||||
padding: 32px;
|
||||
}
|
||||
|
||||
.auth-card h1 {
|
||||
margin: 0 0 4px;
|
||||
font-size: 22px;
|
||||
}
|
||||
|
||||
.auth-card p.subtitle {
|
||||
margin: 0 0 24px;
|
||||
color: var(--muted);
|
||||
font-size: 14px;
|
||||
}
|
||||
|
||||
label {
|
||||
display: block;
|
||||
font-size: 13px;
|
||||
margin-bottom: 6px;
|
||||
color: var(--muted);
|
||||
}
|
||||
|
||||
input {
|
||||
width: 100%;
|
||||
padding: 10px 12px;
|
||||
margin-bottom: 16px;
|
||||
border-radius: 8px;
|
||||
border: 1px solid var(--border);
|
||||
background: #0f1115;
|
||||
color: var(--text);
|
||||
font-size: 14px;
|
||||
}
|
||||
|
||||
input:focus {
|
||||
outline: none;
|
||||
border-color: var(--accent);
|
||||
}
|
||||
|
||||
button {
|
||||
cursor: pointer;
|
||||
border: none;
|
||||
border-radius: 8px;
|
||||
font-size: 14px;
|
||||
font-weight: 600;
|
||||
padding: 10px 16px;
|
||||
}
|
||||
|
||||
button.primary {
|
||||
width: 100%;
|
||||
background: var(--accent);
|
||||
color: #fff;
|
||||
}
|
||||
|
||||
button.primary:hover {
|
||||
background: var(--accent-hover);
|
||||
}
|
||||
|
||||
button.secondary {
|
||||
background: transparent;
|
||||
border: 1px solid var(--border);
|
||||
color: var(--text);
|
||||
}
|
||||
|
||||
button.danger {
|
||||
background: var(--danger);
|
||||
color: #fff;
|
||||
}
|
||||
|
||||
.error {
|
||||
background: rgba(229, 72, 77, 0.12);
|
||||
border: 1px solid rgba(229, 72, 77, 0.4);
|
||||
color: #ff9a9c;
|
||||
padding: 8px 12px;
|
||||
border-radius: 8px;
|
||||
font-size: 13px;
|
||||
margin-bottom: 16px;
|
||||
display: none;
|
||||
}
|
||||
|
||||
.error.visible {
|
||||
display: block;
|
||||
}
|
||||
|
||||
.switch-link {
|
||||
text-align: center;
|
||||
margin-top: 16px;
|
||||
font-size: 13px;
|
||||
color: var(--muted);
|
||||
}
|
||||
|
||||
.switch-link a {
|
||||
color: var(--accent);
|
||||
text-decoration: none;
|
||||
}
|
||||
|
||||
/* Dashboard */
|
||||
.app-shell {
|
||||
display: flex;
|
||||
min-height: 100vh;
|
||||
}
|
||||
|
||||
.sidebar {
|
||||
width: 260px;
|
||||
background: var(--panel);
|
||||
border-right: 1px solid var(--border);
|
||||
padding: 24px 16px;
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
}
|
||||
|
||||
.sidebar h2 {
|
||||
font-size: 16px;
|
||||
margin: 0 0 24px;
|
||||
}
|
||||
|
||||
.sidebar .user-info {
|
||||
color: var(--muted);
|
||||
font-size: 13px;
|
||||
margin-bottom: 8px;
|
||||
}
|
||||
|
||||
.place-list {
|
||||
list-style: none;
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
flex: 1;
|
||||
overflow-y: auto;
|
||||
}
|
||||
|
||||
.place-list li {
|
||||
padding: 10px 12px;
|
||||
border-radius: 8px;
|
||||
cursor: pointer;
|
||||
font-size: 14px;
|
||||
margin-bottom: 4px;
|
||||
color: var(--muted);
|
||||
}
|
||||
|
||||
.place-list li:hover {
|
||||
background: rgba(255, 255, 255, 0.04);
|
||||
}
|
||||
|
||||
.place-list li.active {
|
||||
background: rgba(79, 124, 255, 0.15);
|
||||
color: var(--text);
|
||||
}
|
||||
|
||||
.main {
|
||||
flex: 1;
|
||||
padding: 32px 40px;
|
||||
overflow-y: auto;
|
||||
}
|
||||
|
||||
.main-header {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
justify-content: space-between;
|
||||
margin-bottom: 24px;
|
||||
}
|
||||
|
||||
.main-header h1 {
|
||||
margin: 0;
|
||||
font-size: 20px;
|
||||
}
|
||||
|
||||
.card {
|
||||
background: var(--panel);
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 12px;
|
||||
padding: 20px;
|
||||
margin-bottom: 20px;
|
||||
}
|
||||
|
||||
.card h3 {
|
||||
margin-top: 0;
|
||||
}
|
||||
|
||||
.readers-grid {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(auto-fill, minmax(260px, 1fr));
|
||||
gap: 16px;
|
||||
}
|
||||
|
||||
.reader-card {
|
||||
background: #0f1115;
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 10px;
|
||||
padding: 16px;
|
||||
}
|
||||
|
||||
.reader-card .reader-name {
|
||||
font-weight: 600;
|
||||
margin-bottom: 4px;
|
||||
}
|
||||
|
||||
.reader-card .reader-id {
|
||||
color: var(--muted);
|
||||
font-size: 12px;
|
||||
margin-bottom: 12px;
|
||||
}
|
||||
|
||||
.reader-card .field {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
justify-content: space-between;
|
||||
margin-bottom: 8px;
|
||||
font-size: 13px;
|
||||
}
|
||||
|
||||
.reader-card .field input[type="number"],
|
||||
.reader-card .field select {
|
||||
width: 90px;
|
||||
margin: 0;
|
||||
padding: 6px 8px;
|
||||
}
|
||||
|
||||
.reader-card .actions {
|
||||
display: flex;
|
||||
gap: 8px;
|
||||
margin-top: 12px;
|
||||
}
|
||||
|
||||
.badge {
|
||||
display: inline-block;
|
||||
padding: 2px 8px;
|
||||
border-radius: 999px;
|
||||
font-size: 11px;
|
||||
font-weight: 600;
|
||||
}
|
||||
|
||||
.badge.on {
|
||||
background: rgba(62, 207, 142, 0.15);
|
||||
color: var(--success);
|
||||
}
|
||||
|
||||
.badge.off {
|
||||
background: rgba(229, 72, 77, 0.15);
|
||||
color: var(--danger);
|
||||
}
|
||||
|
||||
.empty-state {
|
||||
color: var(--muted);
|
||||
font-size: 14px;
|
||||
text-align: center;
|
||||
padding: 40px 0;
|
||||
}
|
||||
|
||||
.inline-form {
|
||||
display: flex;
|
||||
gap: 8px;
|
||||
flex-wrap: wrap;
|
||||
align-items: flex-end;
|
||||
}
|
||||
|
||||
.inline-form .field-group {
|
||||
flex: 1;
|
||||
min-width: 140px;
|
||||
}
|
||||
|
||||
.inline-form .field-group label {
|
||||
margin-bottom: 4px;
|
||||
}
|
||||
|
||||
.inline-form input {
|
||||
margin-bottom: 0;
|
||||
}
|
||||
|
||||
.hidden {
|
||||
display: none !important;
|
||||
}
|
||||
66
public/dashboard.html
Normal file
66
public/dashboard.html
Normal file
|
|
@ -0,0 +1,66 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Dashboard - NOTXCS</title>
|
||||
<link rel="stylesheet" href="/css/style.css">
|
||||
</head>
|
||||
<body>
|
||||
<div class="app-shell">
|
||||
<aside class="sidebar">
|
||||
<h2>NOTXCS</h2>
|
||||
<div class="user-info">Signed in as <strong id="username-display"></strong></div>
|
||||
<button class="secondary" id="logout-btn" style="margin-bottom: 16px;">Log out</button>
|
||||
|
||||
<ul class="place-list" id="place-list"></ul>
|
||||
|
||||
<div class="card" style="margin-top: 16px;">
|
||||
<h3 style="margin-top:0;font-size:14px;">Add place</h3>
|
||||
<form id="add-place-form">
|
||||
<label for="place-id">Place ID</label>
|
||||
<input type="text" id="place-id" required>
|
||||
<label for="place-api-key">API Key</label>
|
||||
<input type="text" id="place-api-key" required>
|
||||
<button type="submit" class="primary">Add place</button>
|
||||
</form>
|
||||
</div>
|
||||
</aside>
|
||||
|
||||
<main class="main">
|
||||
<div id="no-place" class="empty-state">
|
||||
Select or create a place from the sidebar to manage its readers.
|
||||
</div>
|
||||
|
||||
<div id="place-view" class="hidden">
|
||||
<div class="main-header">
|
||||
<h1 id="place-title"></h1>
|
||||
<button class="danger" id="delete-place-btn">Delete place</button>
|
||||
</div>
|
||||
|
||||
<div class="card">
|
||||
<h3>Add reader</h3>
|
||||
<form id="add-reader-form" class="inline-form">
|
||||
<div class="field-group">
|
||||
<label for="reader-id">Reader ID</label>
|
||||
<input type="text" id="reader-id" required>
|
||||
</div>
|
||||
<div class="field-group">
|
||||
<label for="reader-name">Name</label>
|
||||
<input type="text" id="reader-name" required>
|
||||
</div>
|
||||
<button type="submit" class="primary">Add reader</button>
|
||||
</form>
|
||||
</div>
|
||||
|
||||
<div class="card">
|
||||
<h3>Readers</h3>
|
||||
<div id="readers-empty" class="empty-state hidden">No readers yet for this place.</div>
|
||||
<div class="readers-grid" id="readers-grid"></div>
|
||||
</div>
|
||||
</div>
|
||||
</main>
|
||||
</div>
|
||||
<script src="/js/dashboard.js"></script>
|
||||
</body>
|
||||
</html>
|
||||
14
public/index.html
Normal file
14
public/index.html
Normal file
|
|
@ -0,0 +1,14 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<title>NOTXCS</title>
|
||||
<script>
|
||||
fetch('/auth/me').then(r => r.json()).then(data => {
|
||||
window.location.replace(data.success ? '/dashboard.html' : '/login.html');
|
||||
}).catch(() => window.location.replace('/login.html'));
|
||||
</script>
|
||||
</head>
|
||||
<body>
|
||||
</body>
|
||||
</html>
|
||||
188
public/js/dashboard.js
Normal file
188
public/js/dashboard.js
Normal file
|
|
@ -0,0 +1,188 @@
|
|||
let currentPlaceId = null;
|
||||
let places = [];
|
||||
|
||||
async function api(path, options = {}) {
|
||||
const res = await fetch(path, {
|
||||
headers: { 'Content-Type': 'application/json' },
|
||||
...options
|
||||
});
|
||||
const data = await res.json().catch(() => ({ success: false, message: 'Invalid response from server' }));
|
||||
if (res.status === 401) {
|
||||
window.location.href = '/login.html';
|
||||
throw new Error('Not authenticated');
|
||||
}
|
||||
return data;
|
||||
}
|
||||
|
||||
async function init() {
|
||||
const me = await api('/auth/me');
|
||||
if (!me.success) {
|
||||
window.location.href = '/login.html';
|
||||
return;
|
||||
}
|
||||
document.getElementById('username-display').textContent = me.user.username;
|
||||
|
||||
await loadPlaces();
|
||||
}
|
||||
|
||||
async function loadPlaces() {
|
||||
const data = await api('/dashboard/places');
|
||||
places = data.places || [];
|
||||
renderPlaceList();
|
||||
}
|
||||
|
||||
function renderPlaceList() {
|
||||
const list = document.getElementById('place-list');
|
||||
list.innerHTML = '';
|
||||
|
||||
places.forEach((place) => {
|
||||
const li = document.createElement('li');
|
||||
li.textContent = place.id;
|
||||
li.className = place.id === currentPlaceId ? 'active' : '';
|
||||
li.addEventListener('click', () => selectPlace(place.id));
|
||||
list.appendChild(li);
|
||||
});
|
||||
}
|
||||
|
||||
async function selectPlace(placeId) {
|
||||
currentPlaceId = placeId;
|
||||
renderPlaceList();
|
||||
|
||||
const data = await api(`/dashboard/places/${encodeURIComponent(placeId)}`);
|
||||
if (!data.success) return;
|
||||
|
||||
document.getElementById('no-place').classList.add('hidden');
|
||||
document.getElementById('place-view').classList.remove('hidden');
|
||||
document.getElementById('place-title').textContent = placeId;
|
||||
|
||||
renderReaders(data.accessPoints || []);
|
||||
}
|
||||
|
||||
function renderReaders(accessPoints) {
|
||||
const grid = document.getElementById('readers-grid');
|
||||
const empty = document.getElementById('readers-empty');
|
||||
grid.innerHTML = '';
|
||||
|
||||
if (accessPoints.length === 0) {
|
||||
empty.classList.remove('hidden');
|
||||
return;
|
||||
}
|
||||
empty.classList.add('hidden');
|
||||
|
||||
accessPoints.forEach((ap) => {
|
||||
const card = document.createElement('div');
|
||||
card.className = 'reader-card';
|
||||
card.innerHTML = `
|
||||
<div class="reader-name">${escapeHtml(ap.name)}</div>
|
||||
<div class="reader-id">${escapeHtml(ap.id)}</div>
|
||||
<div class="field">
|
||||
<span>Enabled</span>
|
||||
<input type="checkbox" data-field="enabled" ${ap.enabled ? 'checked' : ''}>
|
||||
</div>
|
||||
<div class="field">
|
||||
<span>Armed</span>
|
||||
<input type="checkbox" data-field="armState" ${ap.armState ? 'checked' : ''}>
|
||||
</div>
|
||||
<div class="field">
|
||||
<span>Unlock time (s)</span>
|
||||
<input type="number" data-field="unlockTime" value="${ap.unlockTime}" min="0">
|
||||
</div>
|
||||
<div class="actions">
|
||||
<button class="secondary save-btn">Save</button>
|
||||
<button class="danger delete-btn">Delete</button>
|
||||
</div>
|
||||
`;
|
||||
|
||||
card.querySelector('.save-btn').addEventListener('click', () => saveReader(ap.id, card));
|
||||
card.querySelector('.delete-btn').addEventListener('click', () => deleteReader(ap.id));
|
||||
|
||||
grid.appendChild(card);
|
||||
});
|
||||
}
|
||||
|
||||
function escapeHtml(str) {
|
||||
const div = document.createElement('div');
|
||||
div.textContent = str;
|
||||
return div.innerHTML;
|
||||
}
|
||||
|
||||
async function saveReader(readerId, card) {
|
||||
const enabled = card.querySelector('[data-field="enabled"]').checked;
|
||||
const armState = card.querySelector('[data-field="armState"]').checked ? 1 : 0;
|
||||
const unlockTime = parseInt(card.querySelector('[data-field="unlockTime"]').value, 10) || 0;
|
||||
|
||||
await api(`/dashboard/places/${encodeURIComponent(currentPlaceId)}/access-points/${encodeURIComponent(readerId)}`, {
|
||||
method: 'PUT',
|
||||
body: JSON.stringify({ enabled, armState, unlockTime })
|
||||
});
|
||||
selectPlace(currentPlaceId);
|
||||
}
|
||||
|
||||
async function deleteReader(readerId) {
|
||||
if (!confirm(`Delete reader "${readerId}"?`)) return;
|
||||
await api(`/dashboard/places/${encodeURIComponent(currentPlaceId)}/access-points/${encodeURIComponent(readerId)}`, {
|
||||
method: 'DELETE'
|
||||
});
|
||||
selectPlace(currentPlaceId);
|
||||
}
|
||||
|
||||
document.getElementById('add-place-form').addEventListener('submit', async (e) => {
|
||||
e.preventDefault();
|
||||
const id = document.getElementById('place-id').value.trim();
|
||||
const apiKey = document.getElementById('place-api-key').value.trim();
|
||||
if (!id || !apiKey) return;
|
||||
|
||||
const data = await api('/dashboard/places', {
|
||||
method: 'POST',
|
||||
body: JSON.stringify({ id, apiKey })
|
||||
});
|
||||
|
||||
if (data.success) {
|
||||
document.getElementById('place-id').value = '';
|
||||
document.getElementById('place-api-key').value = '';
|
||||
await loadPlaces();
|
||||
selectPlace(id);
|
||||
} else {
|
||||
alert(data.message || 'Failed to add place');
|
||||
}
|
||||
});
|
||||
|
||||
document.getElementById('add-reader-form').addEventListener('submit', async (e) => {
|
||||
e.preventDefault();
|
||||
if (!currentPlaceId) return;
|
||||
|
||||
const id = document.getElementById('reader-id').value.trim();
|
||||
const name = document.getElementById('reader-name').value.trim();
|
||||
if (!id || !name) return;
|
||||
|
||||
const data = await api(`/dashboard/places/${encodeURIComponent(currentPlaceId)}/access-points`, {
|
||||
method: 'POST',
|
||||
body: JSON.stringify({ id, name })
|
||||
});
|
||||
|
||||
if (data.success) {
|
||||
document.getElementById('reader-id').value = '';
|
||||
document.getElementById('reader-name').value = '';
|
||||
selectPlace(currentPlaceId);
|
||||
} else {
|
||||
alert(data.message || 'Failed to add reader');
|
||||
}
|
||||
});
|
||||
|
||||
document.getElementById('delete-place-btn').addEventListener('click', async () => {
|
||||
if (!currentPlaceId) return;
|
||||
if (!confirm(`Delete place "${currentPlaceId}" and all of its readers?`)) return;
|
||||
|
||||
await api(`/dashboard/places/${encodeURIComponent(currentPlaceId)}`, { method: 'DELETE' });
|
||||
currentPlaceId = null;
|
||||
document.getElementById('place-view').classList.add('hidden');
|
||||
document.getElementById('no-place').classList.remove('hidden');
|
||||
await loadPlaces();
|
||||
});
|
||||
|
||||
document.getElementById('logout-btn').addEventListener('click', async () => {
|
||||
await api('/auth/logout', { method: 'POST' });
|
||||
window.location.href = '/login.html';
|
||||
});
|
||||
|
||||
init();
|
||||
28
public/js/login.js
Normal file
28
public/js/login.js
Normal file
|
|
@ -0,0 +1,28 @@
|
|||
document.getElementById('login-form').addEventListener('submit', async (e) => {
|
||||
e.preventDefault();
|
||||
const errorEl = document.getElementById('error');
|
||||
errorEl.classList.remove('visible');
|
||||
|
||||
const username = document.getElementById('username').value.trim();
|
||||
const password = document.getElementById('password').value;
|
||||
|
||||
try {
|
||||
const res = await fetch('/auth/login', {
|
||||
method: 'POST',
|
||||
headers: { 'Content-Type': 'application/json' },
|
||||
body: JSON.stringify({ username, password })
|
||||
});
|
||||
const data = await res.json();
|
||||
|
||||
if (!data.success) {
|
||||
errorEl.textContent = data.message || 'Login failed';
|
||||
errorEl.classList.add('visible');
|
||||
return;
|
||||
}
|
||||
|
||||
window.location.href = '/dashboard.html';
|
||||
} catch (err) {
|
||||
errorEl.textContent = 'Unable to reach the server. Please try again.';
|
||||
errorEl.classList.add('visible');
|
||||
}
|
||||
});
|
||||
28
public/js/register.js
Normal file
28
public/js/register.js
Normal file
|
|
@ -0,0 +1,28 @@
|
|||
document.getElementById('register-form').addEventListener('submit', async (e) => {
|
||||
e.preventDefault();
|
||||
const errorEl = document.getElementById('error');
|
||||
errorEl.classList.remove('visible');
|
||||
|
||||
const username = document.getElementById('username').value.trim();
|
||||
const password = document.getElementById('password').value;
|
||||
|
||||
try {
|
||||
const res = await fetch('/auth/register', {
|
||||
method: 'POST',
|
||||
headers: { 'Content-Type': 'application/json' },
|
||||
body: JSON.stringify({ username, password })
|
||||
});
|
||||
const data = await res.json();
|
||||
|
||||
if (!data.success) {
|
||||
errorEl.textContent = data.message || 'Registration failed';
|
||||
errorEl.classList.add('visible');
|
||||
return;
|
||||
}
|
||||
|
||||
window.location.href = '/dashboard.html';
|
||||
} catch (err) {
|
||||
errorEl.textContent = 'Unable to reach the server. Please try again.';
|
||||
errorEl.classList.add('visible');
|
||||
}
|
||||
});
|
||||
29
public/login.html
Normal file
29
public/login.html
Normal file
|
|
@ -0,0 +1,29 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Login - NOTXCS</title>
|
||||
<link rel="stylesheet" href="/css/style.css">
|
||||
</head>
|
||||
<body>
|
||||
<div class="auth-wrapper">
|
||||
<div class="auth-card">
|
||||
<h1>Welcome back</h1>
|
||||
<p class="subtitle">Sign in to manage your readers and settings.</p>
|
||||
<div id="error" class="error"></div>
|
||||
<form id="login-form">
|
||||
<label for="username">Username</label>
|
||||
<input type="text" id="username" name="username" autocomplete="username" required>
|
||||
|
||||
<label for="password">Password</label>
|
||||
<input type="password" id="password" name="password" autocomplete="current-password" required>
|
||||
|
||||
<button type="submit" class="primary">Log in</button>
|
||||
</form>
|
||||
<p class="switch-link">Don't have an account? <a href="/register.html">Register</a></p>
|
||||
</div>
|
||||
</div>
|
||||
<script src="/js/login.js"></script>
|
||||
</body>
|
||||
</html>
|
||||
29
public/register.html
Normal file
29
public/register.html
Normal file
|
|
@ -0,0 +1,29 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Register - NOTXCS</title>
|
||||
<link rel="stylesheet" href="/css/style.css">
|
||||
</head>
|
||||
<body>
|
||||
<div class="auth-wrapper">
|
||||
<div class="auth-card">
|
||||
<h1>Create an account</h1>
|
||||
<p class="subtitle">Register to start managing your readers.</p>
|
||||
<div id="error" class="error"></div>
|
||||
<form id="register-form">
|
||||
<label for="username">Username</label>
|
||||
<input type="text" id="username" name="username" autocomplete="username" minlength="3" required>
|
||||
|
||||
<label for="password">Password</label>
|
||||
<input type="password" id="password" name="password" autocomplete="new-password" minlength="6" required>
|
||||
|
||||
<button type="submit" class="primary">Register</button>
|
||||
</form>
|
||||
<p class="switch-link">Already have an account? <a href="/login.html">Log in</a></p>
|
||||
</div>
|
||||
</div>
|
||||
<script src="/js/register.js"></script>
|
||||
</body>
|
||||
</html>
|
||||
87
routes/auth.js
Normal file
87
routes/auth.js
Normal file
|
|
@ -0,0 +1,87 @@
|
|||
const express = require('express');
|
||||
const bcrypt = require('bcryptjs');
|
||||
const router = express.Router();
|
||||
|
||||
let db;
|
||||
|
||||
module.exports = (dbInit) => {
|
||||
db = dbInit;
|
||||
return router;
|
||||
};
|
||||
|
||||
router.post('/register', (req, res) => {
|
||||
const { username, password } = req.body || {};
|
||||
|
||||
if (!username || !password) {
|
||||
return res.status(400).json({ success: false, message: "Username and password are required" });
|
||||
}
|
||||
|
||||
if (typeof username !== 'string' || typeof password !== 'string' || username.trim().length < 3 || password.length < 6) {
|
||||
return res.status(400).json({ success: false, message: "Username must be at least 3 characters and password at least 6 characters" });
|
||||
}
|
||||
|
||||
db.get(`SELECT id FROM users WHERE username = ?`, [username], (err, existing) => {
|
||||
if (err) {
|
||||
console.error('Failed to check for existing user:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
|
||||
if (existing) {
|
||||
return res.status(409).json({ success: false, message: "Username is already taken" });
|
||||
}
|
||||
|
||||
const hash = bcrypt.hashSync(password, 10);
|
||||
db.run(`INSERT INTO users (username, password) VALUES (?, ?)`, [username, hash], function (err) {
|
||||
if (err) {
|
||||
console.error('Failed to create user:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
|
||||
req.session.userId = this.lastID;
|
||||
req.session.username = username;
|
||||
res.json({ success: true, user: { id: this.lastID, username } });
|
||||
});
|
||||
});
|
||||
});
|
||||
|
||||
router.post('/login', (req, res) => {
|
||||
const { username, password } = req.body || {};
|
||||
|
||||
if (!username || !password) {
|
||||
return res.status(400).json({ success: false, message: "Username and password are required" });
|
||||
}
|
||||
|
||||
db.get(`SELECT * FROM users WHERE username = ?`, [username], (err, user) => {
|
||||
if (err) {
|
||||
console.error('Failed to retrieve user:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
|
||||
if (!user || !bcrypt.compareSync(password, user.password)) {
|
||||
return res.status(401).json({ success: false, message: "Invalid username or password" });
|
||||
}
|
||||
|
||||
req.session.userId = user.id;
|
||||
req.session.username = user.username;
|
||||
res.json({ success: true, user: { id: user.id, username: user.username } });
|
||||
});
|
||||
});
|
||||
|
||||
router.post('/logout', (req, res) => {
|
||||
req.session.destroy((err) => {
|
||||
if (err) {
|
||||
console.error('Failed to destroy session:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.clearCookie('connect.sid');
|
||||
res.json({ success: true });
|
||||
});
|
||||
});
|
||||
|
||||
router.get('/me', (req, res) => {
|
||||
if (!req.session.userId) {
|
||||
return res.status(401).json({ success: false, message: "Not authenticated" });
|
||||
}
|
||||
res.json({ success: true, user: { id: req.session.userId, username: req.session.username } });
|
||||
});
|
||||
|
||||
259
routes/dashboard.js
Normal file
259
routes/dashboard.js
Normal file
|
|
@ -0,0 +1,259 @@
|
|||
const express = require('express');
|
||||
const router = express.Router();
|
||||
|
||||
let db;
|
||||
|
||||
module.exports = (dbInit) => {
|
||||
db = dbInit;
|
||||
return router;
|
||||
};
|
||||
|
||||
function requireAuth(req, res, next) {
|
||||
if (!req.session || !req.session.userId) {
|
||||
return res.status(401).json({ success: false, message: "Not authenticated" });
|
||||
}
|
||||
next();
|
||||
}
|
||||
|
||||
function loadOwnedPlace(req, res, next) {
|
||||
const { placeId } = req.params;
|
||||
db.get(`SELECT * FROM places WHERE id = ? AND ownerId = ?`, [placeId, req.session.userId], (err, place) => {
|
||||
if (err) {
|
||||
console.error('Failed to retrieve place:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
if (!place) {
|
||||
return res.status(404).json({ success: false, message: "Place not found" });
|
||||
}
|
||||
req.place = place;
|
||||
next();
|
||||
});
|
||||
}
|
||||
|
||||
router.use(requireAuth);
|
||||
|
||||
// List places owned by the current user
|
||||
router.get('/places', (req, res) => {
|
||||
db.all(`SELECT * FROM places WHERE ownerId = ?`, [req.session.userId], (err, places) => {
|
||||
if (err) {
|
||||
console.error('Failed to retrieve places:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.json({ success: true, places });
|
||||
});
|
||||
});
|
||||
|
||||
// Create a new place
|
||||
router.post('/places', (req, res) => {
|
||||
const { id, apiKey, settings } = req.body || {};
|
||||
if (!id || !apiKey) {
|
||||
return res.status(400).json({ success: false, message: "Place id and apiKey are required" });
|
||||
}
|
||||
|
||||
db.get(`SELECT id FROM places WHERE id = ?`, [id], (err, existing) => {
|
||||
if (err) {
|
||||
console.error('Failed to check for existing place:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
if (existing) {
|
||||
return res.status(409).json({ success: false, message: "A place with that id already exists" });
|
||||
}
|
||||
|
||||
db.run(`INSERT INTO places (id, apiKey, settings, ownerId) VALUES (?, ?, ?, ?)`, [id, apiKey, settings || '{}', req.session.userId], (err) => {
|
||||
if (err) {
|
||||
console.error('Failed to create place:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.json({ success: true, place: { id, apiKey, settings: settings || '{}', ownerId: req.session.userId } });
|
||||
});
|
||||
});
|
||||
});
|
||||
|
||||
// Get a single place with its access points (readers)
|
||||
router.get('/places/:placeId', loadOwnedPlace, (req, res) => {
|
||||
db.all(`SELECT * FROM access_points WHERE placeId = ?`, [req.place.id], (err, accessPoints) => {
|
||||
if (err) {
|
||||
console.error('Failed to retrieve access points:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.json({ success: true, place: req.place, accessPoints });
|
||||
});
|
||||
});
|
||||
|
||||
// Update a place's apiKey/settings
|
||||
router.put('/places/:placeId', loadOwnedPlace, (req, res) => {
|
||||
const apiKey = req.body.apiKey !== undefined ? req.body.apiKey : req.place.apiKey;
|
||||
const settings = req.body.settings !== undefined ? req.body.settings : req.place.settings;
|
||||
|
||||
db.run(`UPDATE places SET apiKey = ?, settings = ? WHERE id = ?`, [apiKey, settings, req.place.id], (err) => {
|
||||
if (err) {
|
||||
console.error('Failed to update place:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.json({ success: true });
|
||||
});
|
||||
});
|
||||
|
||||
// Delete a place (and its readers/acl entries)
|
||||
router.delete('/places/:placeId', loadOwnedPlace, (req, res) => {
|
||||
db.all(`SELECT id FROM access_points WHERE placeId = ?`, [req.place.id], (err, accessPoints) => {
|
||||
if (err) {
|
||||
console.error('Failed to retrieve access points:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
|
||||
const apIds = accessPoints.map(ap => ap.id);
|
||||
const deleteAclAndAp = (cb) => {
|
||||
if (apIds.length === 0) return cb();
|
||||
const placeholders = apIds.map(() => '?').join(',');
|
||||
db.run(`DELETE FROM acl WHERE accessPoint IN (${placeholders})`, apIds, (err) => {
|
||||
if (err) return cb(err);
|
||||
db.run(`DELETE FROM access_points WHERE placeId = ?`, [req.place.id], cb);
|
||||
});
|
||||
};
|
||||
|
||||
deleteAclAndAp((err) => {
|
||||
if (err) {
|
||||
console.error('Failed to delete readers for place:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
|
||||
db.run(`DELETE FROM places WHERE id = ?`, [req.place.id], (err) => {
|
||||
if (err) {
|
||||
console.error('Failed to delete place:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.json({ success: true });
|
||||
});
|
||||
});
|
||||
});
|
||||
});
|
||||
|
||||
function loadOwnedAccessPoint(req, res, next) {
|
||||
db.get(`SELECT * FROM access_points WHERE id = ? AND placeId = ?`, [req.params.accessPointId, req.place.id], (err, ap) => {
|
||||
if (err) {
|
||||
console.error('Failed to retrieve reader:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
if (!ap) {
|
||||
return res.status(404).json({ success: false, message: "Reader not found" });
|
||||
}
|
||||
req.accessPoint = ap;
|
||||
next();
|
||||
});
|
||||
}
|
||||
|
||||
// Create a new reader (access point) for a place
|
||||
router.post('/places/:placeId/access-points', loadOwnedPlace, (req, res) => {
|
||||
const { id, name } = req.body || {};
|
||||
if (!id || !name) {
|
||||
return res.status(400).json({ success: false, message: "Reader id and name are required" });
|
||||
}
|
||||
|
||||
const enabled = req.body.enabled !== undefined ? (req.body.enabled ? 1 : 0) : 1;
|
||||
const unlockTime = req.body.unlockTime !== undefined ? req.body.unlockTime : 8;
|
||||
const armState = req.body.armState !== undefined ? req.body.armState : 1;
|
||||
|
||||
db.get(`SELECT id FROM access_points WHERE id = ?`, [id], (err, existing) => {
|
||||
if (err) {
|
||||
console.error('Failed to check for existing reader:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
if (existing) {
|
||||
return res.status(409).json({ success: false, message: "A reader with that id already exists" });
|
||||
}
|
||||
|
||||
db.run(
|
||||
`INSERT INTO access_points (id, placeId, name, enabled, unlockTime, armState) VALUES (?, ?, ?, ?, ?, ?)`,
|
||||
[id, req.place.id, name, enabled, unlockTime, armState],
|
||||
(err) => {
|
||||
if (err) {
|
||||
console.error('Failed to create reader:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.json({ success: true });
|
||||
}
|
||||
);
|
||||
});
|
||||
});
|
||||
|
||||
// Update a reader's settings
|
||||
router.put('/places/:placeId/access-points/:accessPointId', loadOwnedPlace, loadOwnedAccessPoint, (req, res) => {
|
||||
const ap = req.accessPoint;
|
||||
const name = req.body.name !== undefined ? req.body.name : ap.name;
|
||||
const enabled = req.body.enabled !== undefined ? (req.body.enabled ? 1 : 0) : ap.enabled;
|
||||
const unlockTime = req.body.unlockTime !== undefined ? req.body.unlockTime : ap.unlockTime;
|
||||
const armState = req.body.armState !== undefined ? req.body.armState : ap.armState;
|
||||
const readyData = req.body.readyData !== undefined ? req.body.readyData : ap.readyData;
|
||||
const disarmedData = req.body.disarmedData !== undefined ? req.body.disarmedData : ap.disarmedData;
|
||||
const grantedData = req.body.grantedData !== undefined ? req.body.grantedData : ap.grantedData;
|
||||
const deniedData = req.body.deniedData !== undefined ? req.body.deniedData : ap.deniedData;
|
||||
|
||||
db.run(
|
||||
`UPDATE access_points SET name = ?, enabled = ?, unlockTime = ?, armState = ?, readyData = ?, disarmedData = ?, grantedData = ?, deniedData = ? WHERE id = ?`,
|
||||
[name, enabled, unlockTime, armState, readyData, disarmedData, grantedData, deniedData, ap.id],
|
||||
(err) => {
|
||||
if (err) {
|
||||
console.error('Failed to update reader:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.json({ success: true });
|
||||
}
|
||||
);
|
||||
});
|
||||
|
||||
// Delete a reader
|
||||
router.delete('/places/:placeId/access-points/:accessPointId', loadOwnedPlace, loadOwnedAccessPoint, (req, res) => {
|
||||
db.run(`DELETE FROM acl WHERE accessPoint = ?`, [req.accessPoint.id], (err) => {
|
||||
if (err) {
|
||||
console.error('Failed to delete ACL entries for reader:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
db.run(`DELETE FROM access_points WHERE id = ?`, [req.accessPoint.id], (err) => {
|
||||
if (err) {
|
||||
console.error('Failed to delete reader:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.json({ success: true });
|
||||
});
|
||||
});
|
||||
});
|
||||
|
||||
// List ACL entries for a reader
|
||||
router.get('/places/:placeId/access-points/:accessPointId/acl', loadOwnedPlace, loadOwnedAccessPoint, (req, res) => {
|
||||
db.all(`SELECT * FROM acl WHERE accessPoint = ?`, [req.accessPoint.id], (err, entries) => {
|
||||
if (err) {
|
||||
console.error('Failed to retrieve ACL entries:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.json({ success: true, acl: entries });
|
||||
});
|
||||
});
|
||||
|
||||
// Add an ACL entry for a reader
|
||||
router.post('/places/:placeId/access-points/:accessPointId/acl', loadOwnedPlace, loadOwnedAccessPoint, (req, res) => {
|
||||
const { type, data } = req.body || {};
|
||||
if (type === undefined || !data) {
|
||||
return res.status(400).json({ success: false, message: "ACL type and data are required" });
|
||||
}
|
||||
|
||||
db.run(`INSERT INTO acl (accessPoint, type, data) VALUES (?, ?, ?)`, [req.accessPoint.id, type, data], function (err) {
|
||||
if (err) {
|
||||
console.error('Failed to create ACL entry:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.json({ success: true, id: this.lastID });
|
||||
});
|
||||
});
|
||||
|
||||
// Delete an ACL entry
|
||||
router.delete('/places/:placeId/access-points/:accessPointId/acl/:aclId', loadOwnedPlace, loadOwnedAccessPoint, (req, res) => {
|
||||
db.run(`DELETE FROM acl WHERE id = ? AND accessPoint = ?`, [req.params.aclId, req.accessPoint.id], (err) => {
|
||||
if (err) {
|
||||
console.error('Failed to delete ACL entry:', err.message);
|
||||
return res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
res.json({ success: true });
|
||||
});
|
||||
});
|
||||
|
||||
Loading…
Reference in a new issue