feat: session-cookie login/logout + three-tier roles (superadmin/admin/viewer) with read-only UI + remove pink theme

Browse Source

- cookie-based auth (/login /logout) replacing Basic Auth for UI, enabling logout
- roles: superadmin (account management only), admin (full except accounts), viewer/audit (read-only status+cluster, export logs)
- readonly accounts hide edit buttons (added remote node, group ops, canvas layout/save/import, cluster manage, install) instead of greying them
- auditors see status+cluster only; ordinary admins lose the accounts nav; last-admin guard covers superadmin
- remove pink theme entirely (switcher, [data-theme=pink], leftover localStorage), keep white/blue

...

This commit is contained in:

jianf

2026-08-20 09:08:07 +08:00

parent b39bd427fa

commit f29ec81e4a

27 changed files with 1195 additions and 724 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

38

internal/httpapi/dist/assets/index-C5WLVFP2.js → internal/httpapi/dist/assets/index-CbqC9m-j.js vendored

File diff suppressed because one or more lines are too long

2

internal/httpapi/dist/assets/index-CL42Ur3_.css → internal/httpapi/dist/assets/index-RFHYrCiX.css vendored

File diff suppressed because one or more lines are too long