fa/breadcrumb-the-shire
1
0
Fork 1
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
Files
2429588256df30284ecfa66e39729aae64571dd3
breadcrumb-the-shire/templates/login.phtml

73 lines
2.4 KiB
PHTML
Raw Normal View History

baseline
2026-02-04 23:31:53 +01:00
<?php
use MintyPHP\Buffer;
$defaultTitle = appTitle();
$primaryVars = appPrimaryCssVars();
$theme = appDefaultTheme();
big restructure
2026-02-11 19:28:12 +01:00
$pageTitle = $defaultTitle;
ob_start();
Buffer::get('title');
$bufferTitle = trim((string) ob_get_clean());
if ($bufferTitle !== '') {
$pageTitle = $bufferTitle . ' - ' . $defaultTitle;
}
feat: extend module platform with UI slots, runtime components, CLI tooling and {{userId}} search support Completes the generic module platform that enables modules to contribute UI elements, runtime JS components, and search resources without any core hardcoding. New generic UI slot types: - topbar.right_item: module-contributed topbar buttons - layout.body_end_template: module-contributed dialog/overlay templates - layout.head_style: module-contributed global CSS - runtime.component: declarative JS component registration with phase ordering New infrastructure: - ModuleAutoloader: PSR-4 autoloading for module-local PHP classes - ModuleRuntimePageBuilder: symlinks module pages into runtime directory - ModuleRuntimeAssetPublisher: publishes module CSS/JS to web/modules/ - ModulePermissionSynchronizer: syncs module permissions to DB - CLI scripts: module-runtime-sync, module-build, module-migrate, module-permissions-sync, module-assets-sync - {{userId}} placeholder in SearchDataService for user-scoped search queries - Component runtime with phased initialization (early/default/late) - AppContainer.protectExistingBindings() to prevent module→core overwrites - Architecture tests: ModuleStructureContractTest, CoreTemplateIsolationTest, FrontendComponentRuntimeContractTest, AppContainerIsolationContractTest Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-18 22:19:56 +01:00
$loginComponentConfig = [
'components' => [
'flashAutoDismiss' => [
fix: toast visibility — opaque backgrounds and flash scope matching with query strings Two bugs in the toast redesign: 1. Variant backgrounds (success/warning/info/error) used rgba with 12-20% opacity, making toasts semi-transparent over page content. Fixed by layering the tint over a solid background via linear-gradient compositing. 2. Flash messages with scoped paths including query strings (e.g. edit pages with ?return=...) were not matched by Flash::peek(Request::path()) since path() strips the query. Added fallback to pathWithQuery() matching. Also moved flash partial before JS init scripts to ensure DOM is present when the component runtime mounts. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-19 19:58:15 +01:00
'selector' => '.notice[data-flash-timeout]',
feat: extend module platform with UI slots, runtime components, CLI tooling and {{userId}} search support Completes the generic module platform that enables modules to contribute UI elements, runtime JS components, and search resources without any core hardcoding. New generic UI slot types: - topbar.right_item: module-contributed topbar buttons - layout.body_end_template: module-contributed dialog/overlay templates - layout.head_style: module-contributed global CSS - runtime.component: declarative JS component registration with phase ordering New infrastructure: - ModuleAutoloader: PSR-4 autoloading for module-local PHP classes - ModuleRuntimePageBuilder: symlinks module pages into runtime directory - ModuleRuntimeAssetPublisher: publishes module CSS/JS to web/modules/ - ModulePermissionSynchronizer: syncs module permissions to DB - CLI scripts: module-runtime-sync, module-build, module-migrate, module-permissions-sync, module-assets-sync - {{userId}} placeholder in SearchDataService for user-scoped search queries - Component runtime with phased initialization (early/default/late) - AppContainer.protectExistingBindings() to prevent module→core overwrites - Architecture tests: ModuleStructureContractTest, CoreTemplateIsolationTest, FrontendComponentRuntimeContractTest, AppContainerIsolationContractTest Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-18 22:19:56 +01:00
],
'passwordHints' => [
'selector' => '[data-password-hints]',
],
'passwordToggle' => [
'selector' => 'input[type="password"]',
],
'loginErrorFocus' => [
'selector' => '.notice[data-variant="error"][role="alert"][tabindex="-1"]',
],
'loginSubmitLock' => [
'selector' => 'form[data-login-submit-lock="1"]',
],
],
];
baseline
2026-02-04 23:31:53 +01:00
?>
<!DOCTYPE html>
feat(auth): harden login flows and finalize quality-check coverage
2026-03-07 22:54:33 +01:00
<html
data-theme="<?php e($theme); ?>"
feat(security): add Content-Security-Policy headers with strict script-src Eliminate all inline scripts to enable script-src 'self' without 'unsafe-inline', providing strong XSS mitigation via CSP. Inline script removal: - login.phtml: replace inline APP_ASSET_BASE with data-asset-base attribute + app-boot.js (matching default.phtml pattern) - api-docs: extract SwaggerUI init to js/pages/admin-api-docs-index.js - docs: extract checkbox enablement to js/pages/admin-docs-index.js - language-switcher: replace onchange handler with data-auto-submit attribute + js/components/app-auto-submit.js event listener CSP policy (dev + prod nginx): default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; base-uri 'self'; frame-ancestors 'none'; manifest-src 'self' Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 19:24:10 +01:00
data-asset-base="<?php e(asset('')); ?>"
feat(auth): harden login flows and finalize quality-check coverage
2026-03-07 22:54:33 +01:00
data-password-toggle-show-label="<?php e(t('Show password')); ?>"
data-password-toggle-hide-label="<?php e(t('Hide password')); ?>"
<?php if ($primaryVars !== ''): ?>style="<?php e($primaryVars); ?>" <?php endif; ?>>
baseline
2026-02-04 23:31:53 +01:00
<head>
feat(security): add Content-Security-Policy headers with strict script-src Eliminate all inline scripts to enable script-src 'self' without 'unsafe-inline', providing strong XSS mitigation via CSP. Inline script removal: - login.phtml: replace inline APP_ASSET_BASE with data-asset-base attribute + app-boot.js (matching default.phtml pattern) - api-docs: extract SwaggerUI init to js/pages/admin-api-docs-index.js - docs: extract checkbox enablement to js/pages/admin-docs-index.js - language-switcher: replace onchange handler with data-auto-submit attribute + js/components/app-auto-submit.js event listener CSP policy (dev + prod nginx): default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; base-uri 'self'; frame-ancestors 'none'; manifest-src 'self' Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 19:24:10 +01:00
<script src="<?php e(assetVersion('js/app-boot.js')); ?>"></script>
baseline
2026-02-04 23:31:53 +01:00
<base href="<?php e(localeBase()); ?>">
big restructure
2026-02-11 19:28:12 +01:00
<title><?php e($pageTitle); ?></title>
baseline
2026-02-04 23:31:53 +01:00
<meta property="og:site_name" content="<?php e($defaultTitle); ?>">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="icon" type="image/png" sizes="32x32" href="<?php e(appFaviconUrl('favicon-32x32.png')); ?>">
<link rel="icon" type="image/png" sizes="16x16" href="<?php e(appFaviconUrl('favicon-16x16.png')); ?>">
<link rel="apple-touch-icon" href="<?php e(appFaviconUrl('apple-touch-icon.png')); ?>">
<link rel="manifest" href="<?php e(asset('favicon/site.webmanifest')); ?>">
add composer-unused, comprehensive docs, and project restructure - Add icanhazstring/composer-unused as dev dependency for dependency hygiene checks - Add German documentation (docs/) covering architecture, conventions, workflows, and developer checklists - Add API layer (ApiAuth, ApiBootstrap, ApiResponse), audit, scheduler, custom fields, and SSO services - Add Microsoft OIDC SSO, API token management, and user lifecycle features - Add swagger-ui vendor integration and OpenAPI spec - Add production Docker setup and bin/ scripts - Update composer dependencies, config, templates, and frontend assets throughout Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-22 15:27:35 +01:00
<?php renderTemplateStyles('login'); ?>
<?php renderPageStyles(); ?>
baseline
2026-02-04 23:31:53 +01:00
</head>
<body>
login improvements
2026-03-06 21:59:41 +01:00
<main class="login-main">
<div class="container-small login-content-container">
baseline
2026-02-04 23:31:53 +01:00
<?php Buffer::get('html'); ?>
</div>
</main>
<?php require __DIR__ . '/partials/app-footer.phtml'; ?>
refactor(css): remove animated login gradient Strip the heavy animated multi-layer radial gradient from the login page. Removes: - ani-gradient keyframes and 40 @property declarations - Light and dark theme gradient rules - Empty #gradient div from login template - prefers-reduced-motion override that only served the gradient The login page now uses the plain app background color consistently.
2026-04-24 19:00:38 +02:00
feat: extend module platform with UI slots, runtime components, CLI tooling and {{userId}} search support Completes the generic module platform that enables modules to contribute UI elements, runtime JS components, and search resources without any core hardcoding. New generic UI slot types: - topbar.right_item: module-contributed topbar buttons - layout.body_end_template: module-contributed dialog/overlay templates - layout.head_style: module-contributed global CSS - runtime.component: declarative JS component registration with phase ordering New infrastructure: - ModuleAutoloader: PSR-4 autoloading for module-local PHP classes - ModuleRuntimePageBuilder: symlinks module pages into runtime directory - ModuleRuntimeAssetPublisher: publishes module CSS/JS to web/modules/ - ModulePermissionSynchronizer: syncs module permissions to DB - CLI scripts: module-runtime-sync, module-build, module-migrate, module-permissions-sync, module-assets-sync - {{userId}} placeholder in SearchDataService for user-scoped search queries - Component runtime with phased initialization (early/default/late) - AppContainer.protectExistingBindings() to prevent module→core overwrites - Architecture tests: ModuleStructureContractTest, CoreTemplateIsolationTest, FrontendComponentRuntimeContractTest, AppContainerIsolationContractTest Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-18 22:19:56 +01:00
<script type="application/json" id="page-config-login-components"><?php gridJsonForJs($loginComponentConfig); ?></script>
Consolidate settings normalization tests
2026-03-19 19:43:55 +01:00
<?php require __DIR__ . '/partials/app-flash.phtml'; ?>
fix: toast visibility — opaque backgrounds and flash scope matching with query strings Two bugs in the toast redesign: 1. Variant backgrounds (success/warning/info/error) used rgba with 12-20% opacity, making toasts semi-transparent over page content. Fixed by layering the tint over a solid background via linear-gradient compositing. 2. Flash messages with scoped paths including query strings (e.g. edit pages with ?return=...) were not matched by Flash::peek(Request::path()) since path() strips the query. Added fallback to pathWithQuery() matching. Also moved flash partial before JS init scripts to ensure DOM is present when the component runtime mounts. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-19 19:58:15 +01:00
<script type="module" src="<?php e(assetVersion('js/app-login-init.js')); ?>"></script>
baseline
2026-02-04 23:31:53 +01:00
</body>
</html>
Reference in New Issue Copy Permalink