tajniak81andClaude Opus 4.8
ae6ed4ac1e
Mirror PilotVault's API Server layout and add the superadmin console,
plugin system, runtime PocketBase settings, and user/organization
management. The car domain (cars, service records, parts, sharing) is
carried over unchanged apart from the auth switch.
Layout: main.go -> cmd/server/main.go; module carcontrol/api ->
drivervault/apiserver. internal/api is split by concern (auth, users,
orgs, settings, plugins, status, health, respond).
Auth: replace the server-minted HS256 JWT and the sessions collection
with a PocketBase token proxy. /api/auth/login relays PocketBase's
{token, record}, and every protected request re-resolves that token
against PocketBase, so a role change or deletion takes effect at once
instead of waiting out a token. AUTH_SECRET is obsolete and internal/auth
is gone. Per-device session listing/revocation goes with it: PocketBase
tokens are stateless. Changing a password rotates the user's token key,
which invalidates every token already issued.
Roles: add superadmin alongside user/admin, plus an organizations
collection and users.organization. Admins are scoped to their own
organization; superadmins span all of them. Guards prevent changing your
own role, deleting your own account, an admin touching a superadmin, and
deleting an organization that still has members.
Plugins: new internal/plugins package with one contract over two kinds --
builtin (compiled in) and external (any HTTP service, registered at
runtime with no rebuild). State persists to plugins.json; secrets are
masked on read and preserved when saved back at the mask.
PocketBase settings: /api/admin/pb-config applies a new connection at
runtime and persists it to .env. It deliberately does not require a
working service account, so a wrong or unreachable connection can still
be fixed from the panel.
Panel: rebuilt as the superadmin console -- login gate, status, users,
organizations, PocketBase, plugins, and the endpoint reference.
Clients: update the Web App and Phone App for the PocketBase token shape,
the move of user management to /api/users ({users}/{user} envelopes, with
password resets folded into PATCH), and the removal of sessions. Both now
mirror the server's real guards rather than the old last-admin rule, and
parse PocketBase's field-level error shape.
Config: modern POCKETBASE_*/API_ADDR names with legacy PB_*/PORT
fallbacks, so existing .env files keep working. Also fixes /api/status
probing the Web App on 8090 instead of DriverVault's 5173.
Run scripts/setup-pocketbase.mjs to add the organizations collection and
grow users.role; every client must log in once more.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
66 lines
2.2 KiB
Vue
66 lines
2.2 KiB
Vue
<script setup>
|
|
import { ref, onMounted, onUnmounted } from "vue";
|
|
import { request } from "../api";
|
|
|
|
// /api/status probes PocketBase and the Web App server-side, so the browser
|
|
// never has to reach either directly.
|
|
const status = ref(null);
|
|
const error = ref("");
|
|
let timer = null;
|
|
|
|
async function check() {
|
|
try {
|
|
status.value = await request("/api/status", { auth: false });
|
|
error.value = "";
|
|
} catch (e) {
|
|
status.value = null;
|
|
error.value = e.message || "unreachable";
|
|
}
|
|
}
|
|
|
|
onMounted(() => {
|
|
check();
|
|
timer = setInterval(check, 10000);
|
|
});
|
|
onUnmounted(() => clearInterval(timer));
|
|
|
|
const pillFor = (s) =>
|
|
s === "ok" ? "bg-success-soft text-success" : "bg-danger-soft text-danger";
|
|
</script>
|
|
|
|
<template>
|
|
<div class="dh-card overflow-hidden">
|
|
<div class="flex items-center justify-between border-b border-subtle px-5 py-4">
|
|
<div class="text-base font-bold tracking-[-0.02em] text-strong">Status</div>
|
|
<span v-if="error" class="dh-pill bg-danger-soft text-danger">
|
|
<span class="h-1.5 w-1.5 rounded-full bg-current"></span>unreachable
|
|
</span>
|
|
</div>
|
|
|
|
<div v-if="error" class="px-5 py-4 text-sm text-danger">{{ error }}</div>
|
|
|
|
<table v-else-if="status" class="w-full text-left text-sm">
|
|
<tbody>
|
|
<tr v-for="row in [
|
|
{ key: 'apiServer', label: 'API Server', h: status.apiServer },
|
|
{ key: 'pocketBase', label: 'PocketBase', h: status.pocketBase },
|
|
{ key: 'webApp', label: 'Web App', h: status.webApp },
|
|
]" :key="row.key" class="border-t border-subtle first:border-t-0">
|
|
<td class="px-5 py-3 font-medium text-strong">{{ row.label }}</td>
|
|
<td class="data px-5 py-3 text-xs text-muted">{{ row.h.url || "this process" }}</td>
|
|
<td class="data px-5 py-3 text-right text-xs text-muted">
|
|
{{ row.h.latencyMs != null ? row.h.latencyMs + "ms" : "—" }}
|
|
</td>
|
|
<td class="px-5 py-3 text-right">
|
|
<span class="dh-pill" :class="pillFor(row.h.status)">
|
|
<span class="h-1.5 w-1.5 rounded-full bg-current"></span>{{ row.h.status }}
|
|
</span>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
|
|
<div v-else class="px-5 py-4 text-sm text-muted">Checking…</div>
|
|
</div>
|
|
</template>
|