mirror of
https://github.com/skoelle/icloud-contacts-sync.git
synced 2026-09-17 15:30:24 +00:00
web admin mode
This commit is contained in:
+54
-4
@@ -9,12 +9,14 @@ vorgeschalteten Reverse-Proxy mit Authelia, der den eingeloggten
|
||||
Benutzernamen im Remote-User-Header mitschickt."""
|
||||
import json
|
||||
import logging
|
||||
import secrets
|
||||
from datetime import date
|
||||
|
||||
from fastapi import Depends, FastAPI, Query, Request
|
||||
from fastapi.responses import HTMLResponse
|
||||
from fastapi.responses import HTMLResponse, RedirectResponse
|
||||
from fastapi.staticfiles import StaticFiles
|
||||
from fastapi.templating import Jinja2Templates
|
||||
from starlette.middleware.sessions import SessionMiddleware
|
||||
|
||||
import db
|
||||
from api.auth import get_current_user, resolve_account_for_user
|
||||
@@ -25,6 +27,7 @@ logging.basicConfig(level=Config.LOG_LEVEL, format="%(asctime)s [%(levelname)s]
|
||||
logger = logging.getLogger("api")
|
||||
|
||||
app = FastAPI(title="iCloud Contacts Sync – Interne API", version="1.0.0")
|
||||
app.add_middleware(SessionMiddleware, secret_key=secrets.token_hex(32), session_cookie="ics_session")
|
||||
app.mount("/static", StaticFiles(directory="api/static"), name="static")
|
||||
templates = Jinja2Templates(directory="api/templates")
|
||||
|
||||
@@ -46,6 +49,16 @@ def _account_filter_clause(account_name: str | None) -> tuple[str, list]:
|
||||
return "WHERE account = %s", [account_name]
|
||||
|
||||
|
||||
def _resolve_effective_account(request: Request, current_user: str) -> tuple[str | None, bool, bool]:
|
||||
account_name, is_admin = resolve_account_for_user(current_user)
|
||||
if not is_admin:
|
||||
return account_name, False, False
|
||||
show_all = request.session.get("show_all", False)
|
||||
if show_all:
|
||||
return None, True, True
|
||||
return account_name, True, False
|
||||
|
||||
|
||||
@app.get("/api/health")
|
||||
def health():
|
||||
return {"status": "ok"}
|
||||
@@ -178,7 +191,7 @@ def web_dashboard(
|
||||
request: Request,
|
||||
current_user: str = Depends(get_current_user),
|
||||
):
|
||||
account_name, is_admin = resolve_account_for_user(current_user)
|
||||
account_name, is_admin, show_all = _resolve_effective_account(request, current_user)
|
||||
|
||||
with db.get_connection() as conn:
|
||||
contact_count = db.get_contact_count(conn, account_name)
|
||||
@@ -222,6 +235,7 @@ def web_dashboard(
|
||||
"request": request,
|
||||
"current_user": current_user,
|
||||
"is_admin": is_admin,
|
||||
"show_all": show_all,
|
||||
"account_name": account_name or "alle Accounts",
|
||||
"contact_count": contact_count,
|
||||
"upcoming_birthdays": upcoming_birthdays,
|
||||
@@ -233,13 +247,47 @@ def web_dashboard(
|
||||
)
|
||||
|
||||
|
||||
@app.get("/admin", response_class=HTMLResponse)
|
||||
def web_admin(
|
||||
request: Request,
|
||||
current_user: str = Depends(get_current_user),
|
||||
):
|
||||
_, is_admin, _ = resolve_account_for_user(current_user)
|
||||
if not is_admin:
|
||||
return RedirectResponse(url="/", status_code=303)
|
||||
|
||||
show_all = request.session.get("show_all", False)
|
||||
return templates.TemplateResponse(
|
||||
"admin.html",
|
||||
{
|
||||
"request": request,
|
||||
"current_user": current_user,
|
||||
"show_all": show_all,
|
||||
},
|
||||
)
|
||||
|
||||
|
||||
@app.post("/admin/toggle")
|
||||
def admin_toggle(
|
||||
request: Request,
|
||||
current_user: str = Depends(get_current_user),
|
||||
):
|
||||
_, is_admin, _ = resolve_account_for_user(current_user)
|
||||
if not is_admin:
|
||||
return RedirectResponse(url="/", status_code=303)
|
||||
|
||||
show_all = request.session.get("show_all", False)
|
||||
request.session["show_all"] = not show_all
|
||||
return RedirectResponse(url="/admin", status_code=303)
|
||||
|
||||
|
||||
@app.get("/search", response_class=HTMLResponse)
|
||||
def web_search(
|
||||
request: Request,
|
||||
search: str | None = Query(default=None),
|
||||
current_user: str = Depends(get_current_user),
|
||||
):
|
||||
account_name, is_admin = resolve_account_for_user(current_user)
|
||||
account_name, is_admin, show_all = _resolve_effective_account(request, current_user)
|
||||
|
||||
with db.get_connection() as conn:
|
||||
where_clause, params = _account_filter_clause(account_name)
|
||||
@@ -271,6 +319,7 @@ def web_search(
|
||||
"request": request,
|
||||
"current_user": current_user,
|
||||
"is_admin": is_admin,
|
||||
"show_all": show_all,
|
||||
"account_name": account_name or "alle Accounts",
|
||||
"contacts": rows,
|
||||
"search": search or "",
|
||||
@@ -285,7 +334,7 @@ def web_contact(
|
||||
search: str | None = Query(default=None),
|
||||
current_user: str = Depends(get_current_user),
|
||||
):
|
||||
account_name, is_admin = resolve_account_for_user(current_user)
|
||||
account_name, is_admin, show_all = _resolve_effective_account(request, current_user)
|
||||
|
||||
with db.get_connection() as conn:
|
||||
where_clause, params = _account_filter_clause(account_name)
|
||||
@@ -311,6 +360,7 @@ def web_contact(
|
||||
"request": request,
|
||||
"current_user": current_user,
|
||||
"is_admin": is_admin,
|
||||
"show_all": show_all,
|
||||
"contact": contact,
|
||||
"search": search or "",
|
||||
},
|
||||
|
||||
@@ -0,0 +1,177 @@
|
||||
<!-- Copyright (c) 2026 Stefan Koelle (https://stefankoelle.de) -->
|
||||
<!-- Licensed under the MIT License. See LICENSE file in project root for details. -->
|
||||
<!DOCTYPE html>
|
||||
<html lang="de">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<link rel="icon" type="image/svg+xml" href="/static/favicon.svg">
|
||||
<title>Admin – Kontakte</title>
|
||||
<style>
|
||||
* {
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
box-sizing: border-box;
|
||||
}
|
||||
|
||||
body {
|
||||
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
|
||||
background: #f5f5f5;
|
||||
color: #333;
|
||||
line-height: 1.6;
|
||||
overflow-y: scroll;
|
||||
}
|
||||
|
||||
.container {
|
||||
max-width: 800px;
|
||||
margin: 0 auto;
|
||||
padding: 2rem 1rem;
|
||||
}
|
||||
|
||||
h1 {
|
||||
font-size: 1.5rem;
|
||||
margin-bottom: 0.5rem;
|
||||
color: #222;
|
||||
}
|
||||
|
||||
.back-link {
|
||||
display: inline-flex;
|
||||
align-items: center;
|
||||
gap: 0.5rem;
|
||||
color: #0066cc;
|
||||
text-decoration: none;
|
||||
font-size: 0.875rem;
|
||||
margin-bottom: 1.5rem;
|
||||
}
|
||||
|
||||
.back-link:hover {
|
||||
text-decoration: underline;
|
||||
}
|
||||
|
||||
.card {
|
||||
background: #fff;
|
||||
border-radius: 8px;
|
||||
padding: 1.25rem;
|
||||
box-shadow: 0 1px 3px rgba(0,0,0,0.1);
|
||||
margin-bottom: 1.5rem;
|
||||
}
|
||||
|
||||
.card-title {
|
||||
font-size: 0.75rem;
|
||||
font-weight: 600;
|
||||
text-transform: uppercase;
|
||||
letter-spacing: 0.5px;
|
||||
color: #888;
|
||||
margin-bottom: 1rem;
|
||||
}
|
||||
|
||||
.toggle-row {
|
||||
display: flex;
|
||||
justify-content: space-between;
|
||||
align-items: center;
|
||||
padding: 0.75rem;
|
||||
background: #f8f9fa;
|
||||
border-radius: 6px;
|
||||
}
|
||||
|
||||
.toggle-label {
|
||||
font-size: 0.875rem;
|
||||
color: #333;
|
||||
}
|
||||
|
||||
.toggle-sub {
|
||||
font-size: 0.75rem;
|
||||
color: #888;
|
||||
margin-top: 0.25rem;
|
||||
}
|
||||
|
||||
.toggle-switch {
|
||||
position: relative;
|
||||
width: 48px;
|
||||
height: 26px;
|
||||
flex-shrink: 0;
|
||||
}
|
||||
|
||||
.toggle-switch input {
|
||||
opacity: 0;
|
||||
width: 0;
|
||||
height: 0;
|
||||
}
|
||||
|
||||
.toggle-slider {
|
||||
position: absolute;
|
||||
cursor: pointer;
|
||||
inset: 0;
|
||||
background: #ccc;
|
||||
border-radius: 26px;
|
||||
transition: background 0.2s;
|
||||
}
|
||||
|
||||
.toggle-slider::before {
|
||||
content: "";
|
||||
position: absolute;
|
||||
height: 20px;
|
||||
width: 20px;
|
||||
left: 3px;
|
||||
bottom: 3px;
|
||||
background: #fff;
|
||||
border-radius: 50%;
|
||||
transition: transform 0.2s;
|
||||
}
|
||||
|
||||
.toggle-switch input:checked + .toggle-slider {
|
||||
background: #0066cc;
|
||||
}
|
||||
|
||||
.toggle-switch input:checked + .toggle-slider::before {
|
||||
transform: translateX(22px);
|
||||
}
|
||||
|
||||
.status {
|
||||
margin-top: 1rem;
|
||||
padding: 0.75rem;
|
||||
border-radius: 6px;
|
||||
font-size: 0.875rem;
|
||||
}
|
||||
|
||||
.status-on {
|
||||
background: #d4edda;
|
||||
color: #155724;
|
||||
}
|
||||
|
||||
.status-off {
|
||||
background: #f8f9fa;
|
||||
color: #666;
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="container">
|
||||
<h1><a href="/" style="text-decoration:none;color:inherit;display:inline-flex;align-items:center;gap:0.4rem"><img src="/static/favicon.svg" alt="" style="height:1.5em;width:1.5em;vertical-align:middle">Kontakte</a></h1>
|
||||
<a href="/" class="back-link">← Zurück zur Übersicht</a>
|
||||
|
||||
<div class="card">
|
||||
<div class="card-title">Admin-Einstellungen</div>
|
||||
<form method="post" action="/admin/toggle">
|
||||
<div class="toggle-row">
|
||||
<div>
|
||||
<div class="toggle-label">Alle Accounts anzeigen</div>
|
||||
<div class="toggle-sub">Kontakte aller Benutzer einsehen</div>
|
||||
</div>
|
||||
<label class="toggle-switch">
|
||||
<input type="checkbox" name="show_all" onchange="this.form.submit()" {% if show_all %}checked{% endif %}>
|
||||
<span class="toggle-slider"></span>
|
||||
</label>
|
||||
</div>
|
||||
</form>
|
||||
<div class="status {% if show_all %}status-on{% else %}status-off{% endif %}">
|
||||
{% if show_all %}
|
||||
Aktiv: Du siehst alle Kontakte aller Accounts.
|
||||
{% else %}
|
||||
Inaktiv: Du siehst nur deine eigenen Kontakte.
|
||||
{% endif %}
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
@@ -212,7 +212,7 @@
|
||||
{% if contact.organization %}{{ contact.organization }}{% endif %}
|
||||
</div>
|
||||
{% endif %}
|
||||
{% if is_admin and contact.account %}
|
||||
{% if show_all and contact.account %}
|
||||
<span class="badge badge-account">{{ contact.account }}</span>
|
||||
{% endif %}
|
||||
</div>
|
||||
|
||||
@@ -219,7 +219,7 @@
|
||||
|
||||
<div class="meta">
|
||||
Angemeldet als <strong>{{ current_user }}</strong>
|
||||
{% if is_admin %}(Admin, sieht alle Accounts){% else %}(Account: {{ account_name }}){% endif %}
|
||||
{% if is_admin %}(<a href="/admin" style="color:inherit">Admin</a>{% if show_all %}, sieht alle Accounts{% endif %}){% else %}(Account: {{ account_name }}){% endif %}
|
||||
</div>
|
||||
|
||||
<form class="search-form" method="get" action="/search">
|
||||
|
||||
@@ -162,7 +162,7 @@
|
||||
<h1><a href="/" style="text-decoration:none;color:inherit;display:inline-flex;align-items:center;gap:0.4rem"><img src="/static/favicon.svg" alt="" style="height:1.5em;width:1.5em;vertical-align:middle">Kontakte</a></h1>
|
||||
<div class="meta">
|
||||
Angemeldet als <strong>{{ current_user }}</strong>
|
||||
{% if is_admin %}(Admin, sieht alle Accounts){% else %}(Account: {{ account_name }}){% endif %}
|
||||
{% if is_admin %}(<a href="/admin" style="color:inherit">Admin</a>{% if show_all %}, sieht alle Accounts{% endif %}){% else %}(Account: {{ account_name }}){% endif %}
|
||||
· {{ contacts|length }} Kontakte (max. 200 angezeigt)
|
||||
</div>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user