Refactor admin panel: enhance user management and security features

- Added role-based access control for user management links in admin navigation.
- Improved user account display with a dedicated account link.
- Implemented form submission confirmation for delete actions in the admin interface.
- Introduced a password visibility toggle on the login page.
- Added login throttling to prevent brute-force attacks, recording failed attempts.
- Created a CLI script for creating an admin user, replacing the previous hardcoded admin credentials.
- Updated database schema to support login attempt tracking.
- Enhanced user editing functionality, allowing role changes with restrictions.
- Improved modal handling for user actions, ensuring better focus management.
- Added styles for new account management page and improved modal transitions.
This commit is contained in:
David Dyer committed 2026-10-25 12:58:19 -04:00
1 parent 91ec95a4a9
commit 242c5165e1
21 files changed
+669 -77

No files matched your search

+13 -1
View File
@@ -797,12 +797,15 @@ button.status-badge:disabled {
padding: 1.5rem;
opacity: 0;
pointer-events: none;
transition: opacity 0.2s ease;
visibility: hidden;
transition: opacity 0.2s ease, visibility 0s linear 0.2s;
}
.admin-modal-backdrop.is-open {
opacity: 1;
pointer-events: auto;
visibility: visible;
transition: opacity 0.2s ease, visibility 0s;
}
.admin-modal {
@@ -2166,3 +2169,12 @@ footer a.email:hover {
grid-template-columns: 1fr;
}
}
/* ---------- admin: my account ---------- */
/* One panel, fields in the shared two-column .form-grid (which already
stacks below 47.5em). Capped so the fields don't stretch across the
full dashboard width on large screens. */
.account-panel {
max-width: 56rem;
}
/*# sourceMappingURL=styles.css.map */