2019-09-14 18:36:23 -04:00
<!DOCTYPE html>
< html lang = "en" >
< head >
< title > Buckler< / title >
2019-09-25 12:51:36 -04:00
< link rel = "stylesheet" type = "text/css" href = "/static/buckler.css" >
2019-09-20 19:24:12 -04:00
< script >
var users_perms = {{ users_json|safe }};
< / script >
< script type = "text/javascript" src = "/static/buckler.js" > < / script >
2019-09-25 12:51:36 -04:00
< script > window . onload = load ; < / script >
2019-09-25 15:12:58 -04:00
< meta name = "viewport" content = "width=device-width, initial-scale=0.8" >
< meta name = "description" content = "A small shield for web applications." >
2019-09-14 18:36:23 -04:00
< / head >
< body >
2019-09-20 19:24:12 -04:00
< header >
2019-09-25 15:12:58 -04:00
< object id = "logo" title = "Buckler logo" data = "/static/buckler_icon.svg" > < / object >
2019-09-20 19:24:12 -04:00
< h1 > Buckler< / h1 >
< / header >
< main >
2019-09-24 19:34:20 -04:00
< section >
2019-09-25 12:51:36 -04:00
< h2 > Available Sites< / h2 >
< article >
< hr >
< ul id = "avail_sites" >
{% for site in avail_sites %}
< li > < a href = "{{ site['url'] }}" > {{ site['name'] }}< / a > < / li >
{% endfor %}
< / ul >
< / article >
2019-09-24 19:34:20 -04:00
< / section >
2019-09-20 19:24:12 -04:00
{% if request['session']['admin'] %}
2019-09-24 19:34:20 -04:00
< section >
2019-09-27 13:57:00 -04:00
< h2 > Admin Panel< / h2 >
2019-09-25 15:00:29 -04:00
< article style = "display: none;" >
2019-10-17 13:38:40 -04:00
< hr >
2019-09-27 13:57:00 -04:00
< section class = "sub_section" >
< h3 > User Permissions< / h3 >
< article style = "display: none;" >
< hr >
< table id = "users" >
< thead >
< tr >
< th > User< / th >
{% for app in apps %}
< th > {{ app['name'] }}< / th >
{% endfor %}
< th > < / th >
< / tr >
< / thead >
< tbody >
{% for username, values in users.items() %}
< tr >
< td > {{ username }}< / td >
{% for name, value in values.items() %}
< td > < input aria-label = "{{ username }}-{{ name }}" data-app-name = {{ name } } type = "checkbox" onchange = "perm_change(this.parentElement.parentElement)" { % if value % } checked { % endif % } > < / td >
{% endfor %}
2019-10-17 13:38:40 -04:00
< td > < input type = "submit" value = "Save" onclick = "submit_user_perms(this.parentElement.parentElement)" > < / td >
2019-09-27 13:57:00 -04:00
< / tr >
{% endfor %}
< / tbody >
< / table >
< / article >
< / section >
2019-10-17 13:38:40 -04:00
< br >
2019-09-29 13:25:07 -04:00
< section class = "sub_section" >
< h3 > Invite New User< / h3 >
< article style = "display: none;" >
< hr >
< form method = "post" enctype = "application/x-www-form-urlencoded" >
< input name = "form_name" type = "hidden" value = "invite_user" >
< label for = "new_user_email" > Email< / label >
< input id = "new_user_email" name = "email" type = "email" >
< p > < input type = "submit" value = "Submit" >
2019-10-17 13:47:25 -04:00
< / form >
< / article >
< / section >
< br >
< section class = "sub_section" >
< h3 > Add New App< / h3 >
< article style = "display: none;" >
< hr >
< form method = "post" enctype = "application/x-www-form-urlencoded" >
< input name = "form_name" type = "hidden" value = "new_app" >
< table id = "new_app" class = "no_borders" >
< tr >
< td > < label for = "new_app_name" > App Name< / label > < / td >
< td > < input id = "new_app_name" name = "app_name" type = "text" > < / td >
< / tr >
< tr >
< td > < label for = "new_app_url" > App URL< / label > < / td >
< td > < input id = "new_app_url" name = "app_url" type = "text" > < / td >
< / tr >
< tr >
< td > < label for = "new_app_key" > App Key< / label > < / td >
< td > < input id = "new_app_key" name = "app_key" type = "password" > < / td >
< / tr >
< / table >
< input type = "submit" value = "Submit" >
2019-09-29 13:25:07 -04:00
< / form >
< / article >
< / section >
2019-09-25 12:51:36 -04:00
< / article >
2019-09-24 19:34:20 -04:00
< / section >
2019-09-20 19:24:12 -04:00
{% endif %}
2019-09-24 19:34:20 -04:00
< section >
2019-09-25 12:51:36 -04:00
< h2 > Change Password< / h2 >
2019-09-25 15:00:29 -04:00
< article style = "display: none;" >
2019-09-25 12:51:36 -04:00
< hr >
2019-09-29 13:25:07 -04:00
< form method = "post" enctype = "application/x-www-form-urlencoded" >
< input name = "form_name" type = "hidden" value = "change_password" >
< table id = "change_password" class = "no_borders" >
2019-09-27 13:53:36 -04:00
< tr >
< td > < label for = "current_password" > Current password< / label > < / td >
< td > < input id = "current_password" name = "current_password" type = "password" > < / td >
< / tr >
< tr >
< td > < label for = "new_password" > New password< / label > < / td >
< td > < input id = "new_password" name = "new_password" type = "password" > < / td >
< / tr >
< tr >
< td > < label for = "verify_password" > Verify password< / label > < / td >
< td > < input id = "verify_password" name = "verify_password" type = "password" > < / td >
< / tr >
< / table >
2019-09-25 12:51:36 -04:00
< input type = "submit" value = "Submit" >
< / form >
< / article >
2019-09-24 19:34:20 -04:00
< / section >
< section >
2019-09-25 12:51:36 -04:00
< h2 > Security Keys< / h2 >
2019-09-25 15:00:29 -04:00
< article style = "display: none;" >
2019-09-25 12:51:36 -04:00
< hr >
{% if fido2_keys %}
2019-09-29 13:25:07 -04:00
< form method = "POST" enctype = "application/x-www-form-urlencoded" >
< input name = "form_name" type = "hidden" value = "delete_key" >
2019-09-26 18:29:39 -04:00
< table id = "security_keys" >
< thead >
< tr >
< th > Nick< / th >
< th > Delete< / th >
< / tr >
< / thead >
< tbody >
{% for key in fido2_keys %}
< tr >
< td > {{ key['nick'] }}< / td >
< td > < input aria-label = "Delete {{ key['nick'] }}" id = "fido-{{ key['id'] }}" name = "fido-{{ key['id'] }}" type = "checkbox" > < / td >
< / tr >
{% endfor %}
< / tbody >
< / table >
< input type = "submit" value = "Delete" >
< / form >
2019-09-25 12:51:36 -04:00
{% else %}
< span > No registered keys.< / span >
{% endif %}
< br > < a href = "./add_key" > Add key< / a >
< / article >
2019-09-24 19:34:20 -04:00
< / section >
2019-09-25 15:00:29 -04:00
< section >
< h2 > Active Sessions< / h2 >
< article style = "display: none;" >
< hr >
2019-09-29 13:25:07 -04:00
< form method = "POST" enctype = "application/x-www-form-urlencoded" >
< input name = "form_name" type = "hidden" value = "delete_session" >
2019-09-26 18:44:00 -04:00
< table id = "active_sessions" >
< thead >
< tr >
< th > Session ID< / th >
< th > IP Address< / th >
2019-09-26 19:15:46 -04:00
< th > Created< / th >
< th > Last Used< / th >
2019-09-26 18:44:00 -04:00
< th > Delete< / th >
< / tr >
< / thead >
< tbody >
{% for session in active_sessions %}
< tr >
< td > < code > {{ session['id'][:5] }}...{{ session['id'][-5:] }}< / code > < / td >
< td > {{ session['ip_address'] }}< / td >
2019-09-26 19:15:46 -04:00
< td > {{ session['date_created'].strftime('%Y-%m-%d %H:%M') }}< / td >
< td > {{ session['last_used'].strftime('%Y-%m-%d %H:%M') }}< / td >
2019-09-26 18:44:00 -04:00
< td > < input aria-label = "Delete {{ session['id'][:5] }}...{{ session['id'][-5:] }}" id = "session-{{ session['id'] }}" name = "session-{{ session['id'] }}" type = "checkbox" > < / td >
< / tr >
{% endfor %}
< / tbody >
< / table >
< input type = "submit" value = "Delete" >
< / form >
2019-09-25 15:00:29 -04:00
< / article >
< / section >
2019-09-20 19:24:12 -04:00
< / main >
2019-09-14 18:36:23 -04:00
< / body >
< / html >
