- data/users.json store; existing single account migrates to first admin - Roles: admin (settings, import, users) and viewer (read-only, own password) - Live role/disabled lookup; per-user session epoch so password changes, resets and disabling sign that user out everywhere - Login brute-force lockout (5 fails -> 5 min), constant-time unknown-user check - /api/users CRUD with last-admin and self-lockout safeguards - Account page (own password + admin user management); role-aware header - Min password length 8; recovery token resets the primary admin and clears lockouts Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
48 lines
2.7 KiB
HTML
48 lines
2.7 KiB
HTML
<!DOCTYPE html>
|
||
<html lang="en">
|
||
<head>
|
||
<meta charset="UTF-8">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||
<title>Station Dashboard — Create Account</title>
|
||
<style>
|
||
*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
|
||
:root {
|
||
--ink: #1a1a1a; --paper: #f5f2ec; --paper-dark: #ece7db;
|
||
--border: #b9ae9b; --accent: #c25a2a; --mono: 'Segoe UI Rounded', 'Trebuchet MS', sans-serif;
|
||
}
|
||
@media (prefers-color-scheme: dark) {
|
||
:root { --ink: #ece7dc; --paper: #191510; --paper-dark: #201c16; --border: #3a342a; --accent: #e07848; }
|
||
}
|
||
html, body { min-height: 100%; background: var(--paper); color: var(--ink); font-family: var(--mono); display: flex; align-items: center; justify-content: center; }
|
||
.card { background: var(--paper-dark); border: 1px solid var(--border); border-radius: 16px; padding: 2.5rem 2rem; width: min(380px, 94vw); }
|
||
h1 { font-size: 1.4rem; margin-bottom: 0.25rem; }
|
||
.sub { color: var(--border); font-size: 0.85rem; margin-bottom: 2rem; }
|
||
label { display: block; font-size: 0.85rem; margin-bottom: 0.35rem; opacity: 0.7; }
|
||
input { width: 100%; padding: 0.6rem 0.8rem; background: var(--paper); border: 1px solid var(--border); border-radius: 8px; color: var(--ink); font-size: 1rem; font-family: var(--mono); margin-bottom: 1rem; }
|
||
input:focus { outline: 2px solid var(--accent); }
|
||
button { width: 100%; padding: 0.7rem; background: var(--accent); color: #fff; border: none; border-radius: 8px; font-size: 1rem; font-family: var(--mono); cursor: pointer; font-weight: 600; }
|
||
button:hover { opacity: 0.88; }
|
||
.error { background: rgba(194,90,42,0.15); border: 1px solid var(--accent); border-radius: 8px; padding: 0.6rem 0.8rem; margin-bottom: 1rem; font-size: 0.9rem; color: var(--accent); }
|
||
.note { margin-top: 1rem; font-size: 0.8rem; opacity: 0.55; text-align: center; }
|
||
</style>
|
||
</head>
|
||
<body>
|
||
<div class="card">
|
||
<h1>Create Dashboard Account</h1>
|
||
<p class="sub">First-time setup — create your admin account</p>
|
||
<div id="err" class="error" style="display:none">Username must be 3–32 letters, numbers, . _ - and the password at least 8 characters.</div>
|
||
<form method="POST" action="/dashboard/setup">
|
||
<label>Username</label>
|
||
<input name="username" pattern="[A-Za-z0-9._\-]{3,32}" autocapitalize="none" type="text" autocomplete="username" autofocus required>
|
||
<label>Password</label>
|
||
<input name="password" type="password" autocomplete="new-password" required minlength="8">
|
||
<button type="submit">Create Account</button>
|
||
</form>
|
||
<p class="note">This account protects your station dashboard. Store these credentials somewhere safe.</p>
|
||
</div>
|
||
<script>
|
||
if (location.search.includes('error=1')) document.getElementById('err').style.display = 'block';
|
||
</script>
|
||
</body>
|
||
</html>
|