feat: add local admin authentication

2026-08-15 09:33:27 +02:00
parent 93232a809e
commit da6b94ca2f
10 changed files with 173 additions and 0 deletions
--- a/app/web/routes.py
+++ b/app/web/routes.py
@@ -0,0 +1,39 @@
+from fastapi import APIRouter, Form, Request
+from fastapi.responses import HTMLResponse, RedirectResponse
+from fastapi.templating import Jinja2Templates
+
+from app.auth.admin import password_matches, require_admin
+from app.auth.csrf import ensure_csrf_token, validate_csrf
+
+router = APIRouter()
+templates = Jinja2Templates(directory="app/web/templates")
+
+
+@router.get("/login", response_class=HTMLResponse)
+def login_page(request: Request):
+    return templates.TemplateResponse(request, "login.html", {"csrf_token": ensure_csrf_token(request)})
+
+
+@router.post("/login")
+def login(
+    request: Request,
+    password: str = Form(...),
+    csrf_token: str = Form(...),
+):
+    validate_csrf(request, csrf_token)
+    settings = request.app.state.settings
+    if not password_matches(password, settings.admin_password):
+        return templates.TemplateResponse(
+            request,
+            "login.html",
+            {"csrf_token": ensure_csrf_token(request), "error": "Invalid password"},
+            status_code=401,
+        )
+    request.session["admin_authenticated"] = True
+    return RedirectResponse("/", status_code=303)
+
+
+@router.get("/", response_class=HTMLResponse)
+def dashboard(request: Request):
+    require_admin(request)
+    return templates.TemplateResponse(request, "dashboard.html", {"csrf_token": ensure_csrf_token(request), "users": []})
--- a/app/web/templates/base.html
+++ b/app/web/templates/base.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<html lang="en">
+<head>
+    <meta charset="utf-8">
+    <title>{% block title %}MyWhoosh Garmin Sync{% endblock %}</title>
+</head>
+<body>
+    {% block content %}{% endblock %}
+</body>
+</html>
--- a/app/web/templates/dashboard.html
+++ b/app/web/templates/dashboard.html
@@ -0,0 +1,12 @@
+{% extends "base.html" %}
+
+{% block title %}Dashboard - MyWhoosh Garmin Sync{% endblock %}
+
+{% block content %}
+<h1>Dashboard</h1>
+<ul>
+    {% for user in users %}
+    <li>{{ user }}</li>
+    {% endfor %}
+</ul>
+{% endblock %}
--- a/app/web/templates/login.html
+++ b/app/web/templates/login.html
@@ -0,0 +1,16 @@
+{% extends "base.html" %}
+
+{% block title %}Login - MyWhoosh Garmin Sync{% endblock %}
+
+{% block content %}
+<h1>Admin Login</h1>
+{% if error %}
+<p class="error">{{ error }}</p>
+{% endif %}
+<form method="post" action="/login">
+    <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
+    <label for="password">Password</label>
+    <input type="password" id="password" name="password" required autofocus>
+    <button type="submit">Log in</button>
+</form>
+{% endblock %}