biss/Life-OS
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(database): use per-user admin passwords

Browse Source
This commit is contained in:
Codex committed 2026-09-28 19:03:19 +08:00
1 parent 33e80a566e
commit 9862348d70
17 files changed
+188 -38
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

public/db-admin.js
+49 -8
View File
@@ -3,7 +3,7 @@
const KINDS = ['memories', 'goals', 'tasks', 'museum', 'profile', 'settings', 'system'];
const text = (key, values) => LifeI18n.t(`db.${key}`, values);
const escape = value => String(value ?? '').replace(/[&<>"']/g, char => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[char]));
let session = null, expiresAt = 0, kind = 'memories', page = 0, rows = [], total = 0, selected = null, creating = false, error = '', notice = '', draft = null, draftId = null;
let session = null, expiresAt = 0, configured = null, checking = false, changeMode = false, kind = 'memories', page = 0, rows = [], total = 0, selected = null, creating = false, error = '', notice = '', draft = null, draftId = null;
const current = () => document.querySelector('#content-database');
async function api(path, options = {}) {
@@ -13,19 +13,20 @@
}
});
const result = await response.json();
if (response.status === 401 && path !== 'login') { session = null; expiresAt = 0; error = text('sessionExpired'); render(current()); }
if (response.status === 401 && !['login', 'setup', 'password'].includes(path)) { session = null; expiresAt = 0; error = text('sessionExpired'); render(current()); }
if (!response.ok) throw new Error(result.error || text('requestFailed'));
return result;
}
function login(node) {
node.innerHTML = `<div class="db-intro"><div class="eyebrow">LIFE OS / D1</div><h1>${text('title')}</h1><p class="sub">${text('loginBody')}</p><form class="db-login">
node.innerHTML = `<div class="db-intro"><div class="eyebrow">LIFE OS / D1</div><h1>${configured ? text('title') : text('setupTitle')}</h1><p class="sub">${configured ? text('loginBody') : text('setupBody')}</p><form class="db-login">
<label>${text('server')}<input value="Life OS / D1" readonly aria-readonly="true"></label>
<label>${text('username')}<input name="username" value="lifeos-admin" readonly aria-readonly="true"></label>
<label>${text('password')}<input name="password" type="password" autocomplete="off" required minlength="20"></label>
<label>${configured ? text('password') : text('newPassword')}<input name="password" type="password" autocomplete="${configured ? 'current-password' : 'new-password'}" required minlength="12" maxlength="256"></label>
${configured ? '' : `<label>${text('confirmPassword')}<input name="confirmPassword" type="password" autocomplete="new-password" required minlength="12" maxlength="256"></label>`}
<div class="db-warning" role="alert"><strong>${text('warningTitle')}</strong><p>${text('warningBody')}</p></div>
<label class="db-ack"><input type="checkbox" name="acknowledged" required> <span>${text('acknowledge')}</span></label>
<div class="actions"><button class="primary" type="submit">${text('login')}</button></div>
<div class="actions"><button class="primary" type="submit">${configured ? text('login') : text('setPassword')}</button></div>
${error ? `<p class="db-error" role="alert">${escape(error)}</p>` : ''}
</form></div>`;
node.querySelector('form').addEventListener('submit', async event => {
@@ -33,17 +34,40 @@
const form = event.currentTarget, button = form.querySelector('button[type=submit]');
button.disabled = true; error = '';
try {
const result = await api('login', { method: 'POST', body: JSON.stringify({
if (!configured && form.elements.password.value !== form.elements.confirmPassword.value) throw new Error(text('passwordMismatch'));
const result = await api(configured ? 'login' : 'setup', { method: 'POST', body: JSON.stringify({
username: form.elements.username.value, password: form.elements.password.value,
acknowledged: form.elements.acknowledged.checked
}) });
form.elements.password.value = '';
session = result.token; expiresAt = result.expiresAt; notice = text('connected');
configured = true; session = result.token; expiresAt = result.expiresAt; notice = text('connected');
await load(); render(current());
} catch (cause) { error = cause.message; render(current()); }
finally { button.disabled = false; }
});
}
function changePassword(node) {
node.innerHTML = `<div class="db-intro"><div class="eyebrow">LIFE OS / D1</div><h1>${text('changePassword')}</h1><form class="db-login">
<label>${text('currentPassword')}<input name="currentPassword" type="password" autocomplete="current-password" required></label>
<label>${text('newPassword')}<input name="newPassword" type="password" autocomplete="new-password" required minlength="12" maxlength="256"></label>
<label>${text('confirmPassword')}<input name="confirmPassword" type="password" autocomplete="new-password" required minlength="12" maxlength="256"></label>
<div class="actions"><button class="primary" type="submit">${text('changePassword')}</button><button class="secondary" type="button">${text('cancel')}</button></div>
${error ? `<p class="db-error" role="alert">${escape(error)}</p>` : ''}
</form></div>`;
node.querySelector('button[type=button]').addEventListener('click', () => { changeMode = false; error = ''; render(current()); });
node.querySelector('form').addEventListener('submit', async event => {
event.preventDefault();
const form = event.currentTarget;
try {
if (form.elements.newPassword.value !== form.elements.confirmPassword.value) throw new Error(text('passwordMismatch'));
const result = await api('password', { method: 'POST', body: JSON.stringify({
currentPassword: form.elements.currentPassword.value, newPassword: form.elements.newPassword.value
}) });
form.reset(); session = result.token; expiresAt = result.expiresAt; changeMode = false;
notice = text('passwordChanged'); error = ''; render(current());
} catch (cause) { error = cause.message; render(current()); }
});
}
async function load() {
if (!session) return;
@@ -66,7 +90,7 @@
}
function workspace(node) {
node.innerHTML = `<div class="db-shell"><header class="db-head"><div><div class="eyebrow">D1 / ${text('ownData')}</div><h1>${text('title')}</h1><p class="sub">${text('directMode')}</p></div><button class="secondary" data-action="logout">${text('logout')}</button></header>
node.innerHTML = `<div class="db-shell"><header class="db-head"><div><div class="eyebrow">D1 / ${text('ownData')}</div><h1>${text('title')}</h1><p class="sub">${text('directMode')}</p></div><div class="actions"><button class="secondary" data-action="password">${text('changePassword')}</button><button class="secondary" data-action="logout">${text('logout')}</button></div></header>
<div class="db-toolbar"><div class="db-tables" role="tablist" aria-label="${text('tables')}">${KINDS.map(item => `<button role="tab" aria-selected="${kind === item}" class="${kind === item ? 'active' : ''}" data-kind="${item}">${text(item)}</button>`).join('')}</div>
<button class="secondary" data-action="refresh">${text('refresh')}</button><button class="primary" data-action="new">${text('newRecord')}</button></div>
${notice ? `<p class="db-notice" role="status">${escape(notice)}</p>` : ''}${error ? `<p class="db-error" role="alert">${escape(error)}</p>` : ''}
@@ -87,6 +111,7 @@
const action = button.dataset.action;
if (action === 'reload') { location.reload(); return; }
if (action === 'logout') { try { await api('logout', { method: 'POST' }); } catch {} session = null; selected = null; notice = ''; render(current()); return; }
if (action === 'password') { changeMode = true; error = ''; render(current()); return; }
if (action === 'new') { creating = true; selected = null; draft = null; draftId = null; render(current()); return; }
if (action === 'cancel') { creating = false; draft = null; draftId = null; render(current()); return; }
if (action === 'delete') { await remove(); return; }
@@ -128,7 +153,23 @@
}
function render(node) {
if (!node) return;
if (configured === null) {
node.innerHTML = `<div class="db-intro"><p class="sub">${text('checking')}</p></div>`;
if (!checking) {
checking = true;
api('config').then(result => { configured = result.configured; error = ''; })
.catch(cause => { configured = 'unavailable'; error = cause.message; })
.finally(() => { checking = false; render(current()); });
}
return;
}
if (configured === 'unavailable') {
node.innerHTML = `<div class="db-intro"><p class="db-error" role="alert">${escape(error)}</p><button class="secondary">${text('refresh')}</button></div>`;
node.querySelector('button').addEventListener('click', () => { configured = null; render(current()); });
return;
}
if (!session || expiresAt <= Date.now()) { session = null; login(node); }
else if (changeMode) changePassword(node);
else workspace(node);
}
window.databaseApp = render;