Files
rustguac/static
Dave Kempe c750053856 Bug fixes: no-duplicate active-session click + hide Sessions for viewers
Connections
- Clicking an active session card used to POST /connect for entries
  with an address_book_entry, which minted a new session every time.
  Confirmed in the log: a web-session owner clicked back to their
  active card after a shadow join and got two duplicate sessions.
- Now the click just opens s.client_url — which attaches to the
  existing session. Dormant VDI containers below still need /connect
  (no live session to attach to), so that branch is untouched.

Tokens page
- Operator/viewer roles saw the Sessions nav link on the Tokens page
  (every other page correctly hid it for level < 3). Clicking it
  redirected straight back out because sessions.html rejects level < 3.
- Added the same hide-on-level-<3 logic as the other pages; also
  reveal the Reports link for level >= 3 in the same pass.
2026-04-18 21:56:20 +10:00
..
2026-02-06 14:38:53 +11:00