Samir Boulahtit
cbfbbb4654
## Customer Authentication Fixes - Fix get_current_customer_api to properly decode customer tokens (was using User model) - Add _validate_customer_token() helper for shared customer token validation - Add vendor validation: token.vendor_id must match request URL vendor - Block admin/vendor tokens from shop endpoints (type != "customer") - Update get_current_customer_optional to use proper customer token validation - Customer auth functions now return Customer object (not User) ## Shop Orders API - Update orders.py to receive Customer directly from auth dependency - Remove broken get_customer_from_user() helper - Use VendorNotFoundException instead of HTTPException ## Shop Error Pages - Fix all error templates (400, 401, 403, 404, 422, 429, 500, 502, generic) - Templates were using undefined CSS classes (.btn, .status-code, etc.) - Now properly extend base.html and override specific blocks - Use Tailwind utility classes for consistent styling ## Documentation - Update docs/api/authentication.md with new Customer return types - Document vendor validation security features - Update docs/api/authentication-quick-reference.md examples 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
23 lines
946 B
HTML
23 lines
946 B
HTML
{# app/templates/shop/errors/401.html #}
|
|
{# 401 Unauthorized error page - prompts login #}
|
|
{% extends "shop/errors/base.html" %}
|
|
|
|
{% block icon %}🔐{% endblock %}
|
|
|
|
{% block title %}401 - Authentication Required{% endblock %}
|
|
|
|
{% block action_buttons %}
|
|
<a href="{{ base_url }}shop/account/login"
|
|
class="inline-flex items-center px-8 py-4 rounded-xl font-semibold text-white bg-theme-primary hover:opacity-90 hover:-translate-y-0.5 transition-all shadow-lg">
|
|
Log In
|
|
</a>
|
|
<a href="{{ base_url }}shop/account/register"
|
|
class="inline-flex items-center px-8 py-4 rounded-xl font-semibold text-theme-primary border-2 border-theme-primary hover:bg-theme-primary hover:text-white hover:-translate-y-0.5 transition-all">
|
|
Create Account
|
|
</a>
|
|
{% endblock %}
|
|
|
|
{% block support_link %}
|
|
Don't have an account? <a href="{{ base_url }}shop/account/register" class="text-theme-primary font-semibold hover:underline">Sign up now</a>
|
|
{% endblock %}
|