Samir Boulahtit
6735d99df2
Implement secure customer authentication system with dedicated JWT tokens, separate from admin/vendor authentication. Backend Changes: - Add customer JWT token support in deps.py - New get_current_customer_from_cookie_or_header dependency - Validates customer-specific tokens with type checking - Returns Customer object instead of User for shop routes - Extend AuthService with customer token support - Add verify_password() method - Add create_access_token_with_data() for custom token payloads - Update CustomerService authentication - Generate customer-specific JWT tokens with type="customer" - Use vendor-scoped customer lookup - Enhance exception handler - Sanitize validation errors to prevent password leaks in logs - Fix shop login redirect to support multi-access routing - Improve vendor context detection from Referer header - Consistent "path" detection method for cookie path logic Schema Changes: - Rename UserLogin.username to email_or_username for flexibility - Update field validators accordingly API Changes: - Update admin/vendor auth endpoints to use email_or_username - Customer auth already uses email field correctly Route Changes: - Update shop account routes to use Customer dependency - Add /account redirect (without trailing slash) - Change parameter names from current_user to current_customer Frontend Changes: - Update login forms to use email_or_username in API calls - Change button text from "Log in" to "Sign in" for consistency - Improve loading spinner layout with flexbox Security Improvements: - Customer tokens scoped to vendor_id - Token type validation prevents cross-context token usage - Password inputs redacted from validation error logs 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
123 lines
7.1 KiB
HTML
123 lines
7.1 KiB
HTML
{# app/templates/admin/login.html #}
|
|
<!DOCTYPE html>
|
|
<html :class="{ 'theme-dark': dark }" x-data="adminLogin()" lang="en">
|
|
<head>
|
|
<meta charset="UTF-8" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
<title>Admin Login - Multi-Tenant Platform</title>
|
|
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet" />
|
|
<link rel="stylesheet" href="{{ url_for('static', path='admin/css/tailwind.output.css') }}" />
|
|
<style>
|
|
[x-cloak] { display: none !important; }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="flex items-center min-h-screen p-6 bg-gray-50 dark:bg-gray-900" x-cloak>
|
|
<div class="flex-1 h-full max-w-4xl mx-auto overflow-hidden bg-white rounded-lg shadow-xl dark:bg-gray-800">
|
|
<div class="flex flex-col overflow-y-auto md:flex-row">
|
|
<div class="h-32 md:h-auto md:w-1/2">
|
|
<img aria-hidden="true" class="object-cover w-full h-full dark:hidden"
|
|
src="{{ url_for('static', path='admin/img/login-office.jpeg') }}" alt="Office" />
|
|
<img aria-hidden="true" class="hidden object-cover w-full h-full dark:block"
|
|
src="{{ url_for('static', path='admin/img/login-office-dark.jpeg') }}" alt="Office" />
|
|
</div>
|
|
<div class="flex items-center justify-center p-6 sm:p-12 md:w-1/2">
|
|
<div class="w-full">
|
|
<h1 class="mb-4 text-xl font-semibold text-gray-700 dark:text-gray-200">
|
|
Admin Login
|
|
</h1>
|
|
|
|
<!-- Alert Messages -->
|
|
<div x-show="error" x-text="error"
|
|
class="px-4 py-3 mb-4 text-sm text-red-700 bg-red-100 rounded-lg dark:bg-red-200 dark:text-red-800"
|
|
x-transition></div>
|
|
|
|
<div x-show="success" x-text="success"
|
|
class="px-4 py-3 mb-4 text-sm text-green-700 bg-green-100 rounded-lg dark:bg-green-200 dark:text-green-800"
|
|
x-transition></div>
|
|
|
|
<!-- Login Form -->
|
|
<form @submit.prevent="handleLogin">
|
|
<label class="block text-sm">
|
|
<span class="text-gray-700 dark:text-gray-400">Username</span>
|
|
<input x-model="credentials.username"
|
|
:disabled="loading"
|
|
@input="clearErrors"
|
|
class="block w-full mt-1 text-sm dark:border-gray-600 dark:bg-gray-700 focus:border-purple-400 focus:outline-none focus:shadow-outline-purple dark:text-gray-300 dark:focus:shadow-outline-gray form-input"
|
|
:class="{ 'border-red-600': errors.username }"
|
|
placeholder="Enter your username"
|
|
autocomplete="username"
|
|
required />
|
|
<span x-show="errors.username" x-text="errors.username"
|
|
class="text-xs text-red-600 dark:text-red-400"></span>
|
|
</label>
|
|
|
|
<label class="block mt-4 text-sm">
|
|
<span class="text-gray-700 dark:text-gray-400">Password</span>
|
|
<input x-model="credentials.password"
|
|
:disabled="loading"
|
|
@input="clearErrors"
|
|
class="block w-full mt-1 text-sm dark:border-gray-600 dark:bg-gray-700 focus:border-purple-400 focus:outline-none focus:shadow-outline-purple dark:text-gray-300 dark:focus:shadow-outline-gray form-input"
|
|
:class="{ 'border-red-600': errors.password }"
|
|
placeholder="***************"
|
|
type="password"
|
|
autocomplete="current-password"
|
|
required />
|
|
<span x-show="errors.password" x-text="errors.password"
|
|
class="text-xs text-red-600 dark:text-red-400"></span>
|
|
</label>
|
|
|
|
<button type="submit" :disabled="loading"
|
|
class="block w-full px-4 py-2 mt-4 text-sm font-medium leading-5 text-center text-white transition-colors duration-150 bg-purple-600 border border-transparent rounded-lg active:bg-purple-600 hover:bg-purple-700 focus:outline-none focus:shadow-outline-purple disabled:opacity-50 disabled:cursor-not-allowed">
|
|
<span x-show="!loading">Sign in</span>
|
|
<span x-show="loading" class="flex items-center justify-center">
|
|
<svg class="inline w-4 h-4 mr-2 animate-spin" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24">
|
|
<circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4"></circle>
|
|
<path class="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z"></path>
|
|
</svg>
|
|
Signing in...
|
|
</span>
|
|
</button>
|
|
</form>
|
|
|
|
<hr class="my-8" />
|
|
|
|
<p class="mt-4">
|
|
<a class="text-sm font-medium text-purple-600 dark:text-purple-400 hover:underline"
|
|
href="#">
|
|
Forgot your password?
|
|
</a>
|
|
</p>
|
|
<p class="mt-2">
|
|
<a class="text-sm font-medium text-gray-600 dark:text-gray-400 hover:underline"
|
|
href="/">
|
|
← Back to Platform
|
|
</a>
|
|
</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Scripts - ORDER MATTERS! -->
|
|
|
|
<!-- 1. Log Configuration -->
|
|
<script src="{{ url_for('static', path='shared/js/log-config.js') }}"></script>
|
|
|
|
<!-- 2. Icons -->
|
|
<script src="{{ url_for('static', path='shared/js/icons.js') }}"></script>
|
|
|
|
<!-- 3. Utils -->
|
|
<script src="{{ url_for('static', path='shared/js/utils.js') }}"></script>
|
|
|
|
<!-- 4. API Client -->
|
|
<script src="{{ url_for('static', path='shared/js/api-client.js') }}"></script>
|
|
|
|
<!-- 5. Alpine.js v3 -->
|
|
<script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.14.0/dist/cdn.min.js"></script>
|
|
|
|
<!-- 6. Login Logic -->
|
|
<script src="{{ url_for('static', path='admin/js/login.js') }}"></script>
|
|
</body>
|
|
</html> |