Files
BetterDesk/web-nodejs/views/users.ejs
T
Knienartowicz 787caf8958 fix(auth): bind accounts to auth provider local/LDAP/OIDC (#148)
Add auth_provider attribute (local/ldap/oidc) to User model across SQLite and PostgreSQL with automatic migration (existing accounts default to local). Rewrite login to be provider-bound: LDAP-backed accounts never fall through to local password verification, OIDC accounts reject password login, and LDAP/OIDC provisioning stores an unusable random local password instead of the provider password. LDAP/OIDC accounts always re-apply provider role mapping on every login so a matching local account can no longer override AD-mapped permissions. Guard handleUpdateUser against setting a local password on non-local accounts. Propagate auth_provider through the Node.js sync layer and panel API, add a Provider column with badges in the users table, hide local password reset for provider-managed accounts, and add EN/PL i18n keys.

This commit was made possible thanks to Insolve.
2026-06-01 09:06:53 +02:00

135 lines
6.4 KiB
HTML

<%- include('layouts/main', {
title: _('nav.users'),
pageStyles: ['users'],
pageScripts: ['users'],
currentPage: 'users',
breadcrumb: [{ label: _('nav.users') }],
body: `
<!-- Users Header -->
<div class="users-header">
<div class="page-title">
<h1>${_('users.title')}</h1>
<p class="subtitle">${_('users.subtitle')}</p>
</div>
<div class="page-actions">
<button class="btn btn-primary" id="add-user-btn">
<span class="material-icons">person_add</span>
${_('users.add_user')}
</button>
</div>
</div>
<!-- Security Tips Card -->
<div class="security-tips-card">
<div class="security-tips-header">
<span class="material-icons">security</span>
<h3>${_('users.security_tips_title')}</h3>
</div>
<ul class="security-tips-list">
<li><span class="material-icons">check_circle</span> ${_('users.tip_strong_passwords')}</li>
<li><span class="material-icons">check_circle</span> ${_('users.tip_unique_accounts')}</li>
<li><span class="material-icons">check_circle</span> ${_('users.tip_viewer_role')}</li>
<li><span class="material-icons">check_circle</span> ${_('users.tip_audit_logs')}</li>
</ul>
</div>
<!-- User Groups Manager -->
<div class="user-groups-card" id="user-groups">
<div class="user-groups-card-header">
<div>
<h3>${_('users.user_groups')}</h3>
<p>${_('users.user_groups_hint')}</p>
</div>
<button class="btn btn-secondary" id="add-user-group-btn">
<span class="material-icons">group_add</span>
${_('users.create_user_group')}
</button>
</div>
<div class="user-groups-manager-list" id="user-groups-manager-list">
<div class="empty-state-inline">${_('users.loading_user_groups')}</div>
</div>
</div>
<!-- Users Table -->
<div class="users-table-container">
<div class="table-wrapper">
<table class="users-table table" id="users-table">
<thead>
<tr>
<th>${_('users.username')}</th>
<th>${_('users.role')}</th>
<th>${_('users.provider')}</th>
<th>${_('users.column_organizations')}</th>
<th>${_('users.created')}</th>
<th>${_('users.last_login')}</th>
<th>${_('users.actions')}</th>
</tr>
</thead>
<tbody id="users-tbody">
<tr class="loading-row">
<td colspan="6" style="text-align: center; padding: 40px;">
<span class="skeleton skeleton-text" style="width: 200px;"></span>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<!-- Empty state -->
<div class="users-empty hidden" id="users-empty">
<span class="material-icons users-empty-icon">group</span>
<h3 class="users-empty-title">${_('users.empty_title')}</h3>
<p class="users-empty-text">${_('users.empty_text')}</p>
</div>
<!-- Add/Edit User Modal Template -->
<template id="user-form-template">
<form id="user-form" class="user-form">
<div class="form-group">
<label for="user-username">${_('users.username')}</label>
<input type="text" id="user-username" name="username" class="form-input"
pattern="[a-zA-Z0-9_]{3,32}" required
placeholder="${_('users.username_placeholder')}">
<span class="form-hint">${_('users.username_hint')}</span>
</div>
<div class="form-group">
<label for="user-password">${_('users.password')}</label>
<div class="password-input-wrapper">
<input type="password" id="user-password" name="password" class="form-input"
minlength="8" placeholder="${_('users.password_placeholder')}">
<button type="button" class="btn-icon toggle-password" tabindex="-1">
<span class="material-icons">visibility</span>
</button>
</div>
<div class="password-strength" id="password-strength"></div>
<span class="form-hint">${_('users.password_hint')}</span>
</div>
<div class="form-group">
<label for="user-role">${_('users.server_role_label')}</label>
<select id="user-role" name="role" class="form-select">
<option value="viewer">${_('users.role_viewer')}</option>
<option value="operator">${_('users.role_operator')}</option>
<option value="admin">${_('users.role_admin')}</option>
<option value="global_admin">${_('users.role_global_admin')}</option>
<option value="server_admin">${_('users.role_server_admin')}</option>
<option value="super_admin">${_('users.role_super_admin')}</option>
<option value="pro">${_('users.role_pro')}</option>
</select>
<span class="form-hint">${_('users.role_hint')}</span>
</div>
<div class="form-group">
<label>${_('users.user_groups')}</label>
<div class="user-groups-list" id="user-groups-list">
<div class="empty-state-inline">${_('users.loading_user_groups')}</div>
</div>
<span class="form-hint">${_('users.user_groups_hint')}</span>
</div>
</form>
</template>
`
}) %>