Use Basic HTTP Login
diff --git a/networkUtils.js b/networkUtils.js
index 90f42fe..6ecd10d 100644
--- a/networkUtils.js
+++ b/networkUtils.js
@@ -1,33 +1,31 @@
-export function sendRequest(url, method = "GET", data = null) {
- console.log("Sending request to:", url, "with method:", method);
+export function sendRequest(url, method = "GET", data = null, customHeaders = {}) {
const options = {
method,
- credentials: 'include', // include cookies in requests
+ credentials: 'include',
headers: {}
};
+ // Merge custom headers
+ Object.assign(options.headers, customHeaders);
+
// If data is provided and is not FormData, assume JSON.
if (data && !(data instanceof FormData)) {
- options.headers["Content-Type"] = "application/json";
+ if (!options.headers["Content-Type"]) {
+ options.headers["Content-Type"] = "application/json";
+ }
options.body = JSON.stringify(data);
} else if (data instanceof FormData) {
- // For FormData, don't set the Content-Type header; the browser will handle it.
options.body = data;
}
return fetch(url, options)
.then(response => {
- console.log("Response status:", response.status);
if (!response.ok) {
return response.text().then(text => {
throw new Error(`HTTP error ${response.status}: ${text}`);
});
}
- // Clone the response so we can safely fall back if JSON parsing fails.
const clonedResponse = response.clone();
- return response.json().catch(() => {
- console.warn("Response is not JSON, returning as text");
- return clonedResponse.text();
- });
+ return response.json().catch(() => clonedResponse.text());
});
}
\ No newline at end of file
diff --git a/resources/dark-admin-panel.png b/resources/dark-admin-panel.png
new file mode 100644
index 0000000..e22976f
Binary files /dev/null and b/resources/dark-admin-panel.png differ
diff --git a/styles.css b/styles.css
index fc7ce67..4b1ec85 100644
--- a/styles.css
+++ b/styles.css
@@ -2012,4 +2012,39 @@ body.dark-mode .card {
.custom-folder-card-body {
padding-top: 5px !important;
padding-right: 0 !important;
+}
+
+#addUserModal,
+#removeUserModal {
+ z-index: 5000 !important;
+}
+
+#customConfirmModal {
+ z-index: 6000 !important;
+}
+
+/* Default (light mode) for admin panel content */
+.admin-panel-content {
+ background: #fff;
+ color: #000;
+}
+
+/* Dark mode overrides for admin panel content */
+body.dark-mode .admin-panel-content {
+ background: #2c2c2c; /* dark background */
+ color: #e0e0e0; /* light text */
+ border: 1px solid #444;
+}
+
+/* Optionally, adjust input, label, etc. for dark mode */
+body.dark-mode .admin-panel-content input,
+body.dark-mode .admin-panel-content select,
+body.dark-mode .admin-panel-content textarea {
+ background: #3a3a3a;
+ color: #e0e0e0;
+ border: 1px solid #555;
+}
+
+body.dark-mode .admin-panel-content label {
+ color: #e0e0e0;
}
\ No newline at end of file
diff --git a/updateConfig.php b/updateConfig.php
new file mode 100644
index 0000000..f8ec09c
--- /dev/null
+++ b/updateConfig.php
@@ -0,0 +1,82 @@
+ 'Unauthorized access.']);
+ exit;
+}
+
+// Validate CSRF token.
+$receivedToken = '';
+if (isset($_SERVER['HTTP_X_CSRF_TOKEN'])) {
+ $receivedToken = trim($_SERVER['HTTP_X_CSRF_TOKEN']);
+} else {
+ $headers = array_change_key_case(getallheaders(), CASE_LOWER);
+ $receivedToken = isset($headers['x-csrf-token']) ? trim($headers['x-csrf-token']) : '';
+}
+if (!isset($_SESSION['csrf_token']) || $receivedToken !== $_SESSION['csrf_token']) {
+ http_response_code(403);
+ echo json_encode(['error' => 'Invalid CSRF token.']);
+ exit;
+}
+
+// Retrieve and decode JSON input.
+$input = file_get_contents('php://input');
+$data = json_decode($input, true);
+if (!is_array($data)) {
+ http_response_code(400);
+ echo json_encode(['error' => 'Invalid input.']);
+ exit;
+}
+
+// Validate and sanitize OIDC configuration.
+$oidc = isset($data['oidc']) ? $data['oidc'] : [];
+$oidcProviderUrl = isset($oidc['providerUrl']) ? filter_var($oidc['providerUrl'], FILTER_SANITIZE_URL) : '';
+$oidcClientId = isset($oidc['clientId']) ? trim($oidc['clientId']) : '';
+$oidcClientSecret = isset($oidc['clientSecret']) ? trim($oidc['clientSecret']) : '';
+$oidcRedirectUri = isset($oidc['redirectUri']) ? filter_var($oidc['redirectUri'], FILTER_SANITIZE_URL) : '';
+
+if (!$oidcProviderUrl || !$oidcClientId || !$oidcClientSecret || !$oidcRedirectUri) {
+ http_response_code(400);
+ echo json_encode(['error' => 'Incomplete OIDC configuration.']);
+ exit;
+}
+
+// Validate login option booleans.
+$disableFormLogin = isset($data['disableFormLogin']) ? filter_var($data['disableFormLogin'], FILTER_VALIDATE_BOOLEAN) : false;
+$disableBasicAuth = isset($data['disableBasicAuth']) ? filter_var($data['disableBasicAuth'], FILTER_VALIDATE_BOOLEAN) : false;
+$disableOIDCLogin = isset($data['disableOIDCLogin']) ? filter_var($data['disableOIDCLogin'], FILTER_VALIDATE_BOOLEAN) : false;
+
+// Prepare configuration array.
+$configUpdate = [
+ 'oidc' => [
+ 'providerUrl' => $oidcProviderUrl,
+ 'clientId' => $oidcClientId,
+ 'clientSecret' => $oidcClientSecret,
+ 'redirectUri' => $oidcRedirectUri,
+ ],
+ 'loginOptions' => [
+ 'disableFormLogin' => $disableFormLogin,
+ 'disableBasicAuth' => $disableBasicAuth,
+ 'disableOIDCLogin' => $disableOIDCLogin,
+ ]
+];
+
+// Define the configuration file path.
+$configFile = USERS_DIR . 'adminConfig.json';
+
+// Convert and encrypt configuration.
+$plainTextConfig = json_encode($configUpdate, JSON_PRETTY_PRINT);
+$encryptedContent = encryptData($plainTextConfig, $encryptionKey);
+if (file_put_contents($configFile, $encryptedContent, LOCK_EX) === false) {
+ http_response_code(500);
+ echo json_encode(['error' => 'Failed to update configuration.']);
+ exit;
+}
+
+echo json_encode(['success' => 'Configuration updated successfully.']);
+?>
\ No newline at end of file