8650704316
Backend: - AuthManager (api/auth_manager.py): server-side user store with bcrypt password hashing, account lockout after 5 failed attempts (15 min), and atomic file writes - AuthRoutes (api/auth_routes.py): Blueprint at /api/auth/* — login, logout, me, change-password, admin reset-password, list-users - app.py: register auth_bp blueprint; add enforce_auth before_request hook (401 for unauthenticated, 403 for wrong role; only active when auth store has users so pre-auth tests remain green); instantiate AuthManager; update POST /api/peers to require password >= 10 chars and auto-provision email + calendar + files + auth accounts with full rollback on any failure; extend DELETE /api/peers to tear down all four service accounts; add /api/peer/dashboard and /api/peer/services peer-scoped routes; fix is_local_request to also trust the last X-Forwarded-For entry appended by the reverse proxy (Caddy) - Role-based access: admin for /api/* (except /api/auth/* which is public and /api/peer/* which is peer-only) - setup_cell.py: generate and print initial admin password, store in .admin_initial_password with 0600 permissions; cleaned up on first admin login Frontend: - AuthContext.jsx: React context with login/logout/me state and Axios interceptor for automatic 401 redirect - PrivateRoute.jsx: route guard component - Login.jsx: login page with error handling and must-change-password redirect - AccountSettings.jsx: change-password form for any authenticated user - PeerDashboard.jsx: peer-role landing page (IP, service list) - MyServices.jsx: peer service links page - App.jsx, Sidebar.jsx: AuthContext integration, logout button, PrivateRoute wrappers, peer-role routing - Peers.jsx, WireGuard.jsx, api.js: auth-aware API calls Tests: 100 new auth tests all pass (test_auth_manager, test_auth_routes, test_route_protection, test_peer_provisioning). Fix pre-existing test failures: update WireGuard test keys to valid 44-char base64 format (test_wireguard_manager, test_peer_wg_integration), add password field and service manager mocks to test_api_endpoints peer tests, add auth helpers to conftest.py. Full suite: 845 passed, 0 failures. Fixed: .admin_initial_password security cleanup on bootstrap, username minimum length (3 chars enforced by USERNAME_RE regex) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
178 lines
7.2 KiB
React
178 lines
7.2 KiB
React
import { useState } from 'react';
|
|
import { Link, useLocation } from 'react-router-dom';
|
|
import { X, LogOut } from 'lucide-react';
|
|
import { clsx } from 'clsx';
|
|
import { useAuth } from '../contexts/AuthContext';
|
|
|
|
function Sidebar({ navigation, isOnline }) {
|
|
const [sidebarOpen, setSidebarOpen] = useState(false);
|
|
const location = useLocation();
|
|
const auth = useAuth();
|
|
const { logout, user } = auth || {};
|
|
|
|
return (
|
|
<>
|
|
{/* Mobile sidebar */}
|
|
<div className={clsx(
|
|
'fixed inset-0 z-50 lg:hidden',
|
|
sidebarOpen ? 'block' : 'hidden'
|
|
)}>
|
|
<div className="fixed inset-0 bg-gray-900/80" onClick={() => setSidebarOpen(false)} />
|
|
|
|
<div className="fixed inset-y-0 left-0 z-50 w-72 bg-white">
|
|
<div className="flex h-full flex-col gap-y-5 overflow-y-auto px-6 py-4">
|
|
<div className="flex h-16 shrink-0 items-center">
|
|
<h1 className="text-xl font-semibold text-gray-900">
|
|
Personal Internet Cell
|
|
</h1>
|
|
<button
|
|
type="button"
|
|
className="ml-auto"
|
|
onClick={() => setSidebarOpen(false)}
|
|
>
|
|
<X className="h-6 w-6" />
|
|
</button>
|
|
</div>
|
|
<nav className="flex flex-1 flex-col">
|
|
<ul role="list" className="flex flex-1 flex-col gap-y-7">
|
|
<li>
|
|
<ul role="list" className="-mx-2 space-y-1">
|
|
{navigation.map((item) => (
|
|
<li key={item.name}>
|
|
<Link
|
|
to={item.href}
|
|
className={clsx(
|
|
location.pathname === item.href
|
|
? 'bg-primary-50 text-primary-600'
|
|
: 'text-gray-700 hover:text-primary-600 hover:bg-primary-50',
|
|
'group flex gap-x-3 rounded-md p-2 text-sm leading-6 font-semibold'
|
|
)}
|
|
onClick={() => setSidebarOpen(false)}
|
|
>
|
|
<item.icon
|
|
className={clsx(
|
|
location.pathname === item.href ? 'text-primary-600' : 'text-gray-400 group-hover:text-primary-600',
|
|
'h-6 w-6 shrink-0'
|
|
)}
|
|
aria-hidden="true"
|
|
/>
|
|
{item.name}
|
|
</Link>
|
|
</li>
|
|
))}
|
|
</ul>
|
|
</li>
|
|
<li className="mt-auto">
|
|
{logout && (
|
|
<button
|
|
onClick={logout}
|
|
className="flex items-center gap-2 text-sm text-gray-600 hover:text-gray-900 transition-colors w-full"
|
|
>
|
|
<LogOut className="h-4 w-4" />
|
|
Sign out{user ? ` (${user.username})` : ''}
|
|
</button>
|
|
)}
|
|
</li>
|
|
</ul>
|
|
</nav>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
{/* Desktop sidebar */}
|
|
<div className="hidden lg:fixed lg:inset-y-0 lg:z-50 lg:flex lg:w-72 lg:flex-col">
|
|
<div className="flex grow flex-col gap-y-5 overflow-y-auto border-r border-gray-200 bg-white px-6 pb-4">
|
|
<div className="flex h-16 shrink-0 items-center">
|
|
<h1 className="text-xl font-semibold text-gray-900">
|
|
Personal Internet Cell
|
|
</h1>
|
|
</div>
|
|
<nav className="flex flex-1 flex-col">
|
|
<ul role="list" className="flex flex-1 flex-col gap-y-7">
|
|
<li>
|
|
<ul role="list" className="-mx-2 space-y-1">
|
|
{navigation.map((item) => (
|
|
<li key={item.name}>
|
|
<Link
|
|
to={item.href}
|
|
className={clsx(
|
|
location.pathname === item.href
|
|
? 'bg-primary-50 text-primary-600'
|
|
: 'text-gray-700 hover:text-primary-600 hover:bg-primary-50',
|
|
'group flex gap-x-3 rounded-md p-2 text-sm leading-6 font-semibold'
|
|
)}
|
|
>
|
|
<item.icon
|
|
className={clsx(
|
|
location.pathname === item.href ? 'text-primary-600' : 'text-gray-400 group-hover:text-primary-600',
|
|
'h-6 w-6 shrink-0'
|
|
)}
|
|
aria-hidden="true"
|
|
/>
|
|
{item.name}
|
|
</Link>
|
|
</li>
|
|
))}
|
|
</ul>
|
|
</li>
|
|
<li className="mt-auto">
|
|
<div className="flex items-center justify-between gap-x-2">
|
|
<div className="flex items-center gap-x-2">
|
|
<div className={clsx(
|
|
'h-2 w-2 rounded-full',
|
|
isOnline ? 'bg-success-500' : 'bg-danger-500'
|
|
)} />
|
|
<span className="text-xs text-gray-500">
|
|
{isOnline ? 'Connected' : 'Disconnected'}
|
|
</span>
|
|
</div>
|
|
{logout && (
|
|
<button
|
|
onClick={logout}
|
|
className="flex items-center gap-1 text-xs text-gray-500 hover:text-gray-700 transition-colors"
|
|
title="Sign out"
|
|
>
|
|
<LogOut className="h-3.5 w-3.5" />
|
|
Sign out
|
|
</button>
|
|
)}
|
|
</div>
|
|
{user && (
|
|
<p className="text-xs text-gray-400 mt-1 truncate">{user.username}</p>
|
|
)}
|
|
</li>
|
|
</ul>
|
|
</nav>
|
|
</div>
|
|
</div>
|
|
|
|
{/* Mobile menu button */}
|
|
<div className="sticky top-0 z-40 flex items-center gap-x-6 bg-white px-4 py-4 shadow-sm sm:px-6 lg:hidden">
|
|
<button
|
|
type="button"
|
|
className="-m-2.5 p-2.5 text-gray-700 lg:hidden"
|
|
onClick={() => setSidebarOpen(true)}
|
|
>
|
|
<span className="sr-only">Open sidebar</span>
|
|
<svg className="h-6 w-6" fill="none" viewBox="0 0 24 24" strokeWidth="1.5" stroke="currentColor">
|
|
<path strokeLinecap="round" strokeLinejoin="round" d="M3.75 6.75h16.5M3.75 12h16.5m-16.5 5.25h16.5" />
|
|
</svg>
|
|
</button>
|
|
<div className="flex-1 text-sm font-semibold leading-6 text-gray-900">
|
|
Personal Internet Cell
|
|
</div>
|
|
<div className="flex items-center gap-x-2">
|
|
<div className={clsx(
|
|
'h-2 w-2 rounded-full',
|
|
isOnline ? 'bg-success-500' : 'bg-danger-500'
|
|
)} />
|
|
<span className="text-xs text-gray-500">
|
|
{isOnline ? 'Connected' : 'Disconnected'}
|
|
</span>
|
|
</div>
|
|
</div>
|
|
</>
|
|
);
|
|
}
|
|
|
|
export default Sidebar; |