Merge pull request #6 from mattintech/feature/entra-id
Add Entra ID Authentication with Role-Based Access Control
This commit is contained in:
@@ -61,13 +61,36 @@
|
||||
<span class="navbar-toggler-icon"></span>
|
||||
</button>
|
||||
<div class="collapse navbar-collapse" id="navbarNav">
|
||||
<ul class="navbar-nav">
|
||||
<ul class="navbar-nav me-auto">
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/">Home</a>
|
||||
</li>
|
||||
{% if session.user and session.user.role == 'admin' %}
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/admin/">Admin</a>
|
||||
<a class="nav-link" href="/settings">Server Settings</a>
|
||||
</li>
|
||||
{% endif %}
|
||||
</ul>
|
||||
<ul class="navbar-nav ms-auto">
|
||||
{% if session.user %}
|
||||
<li class="nav-item dropdown">
|
||||
<a class="nav-link dropdown-toggle" href="#" id="userDropdown" role="button" data-bs-toggle="dropdown">
|
||||
<i class="bi bi-person-circle"></i> {{ session.user.name or session.user.email }}
|
||||
{% if session.user.role == 'admin' %}
|
||||
<span class="badge bg-danger ms-1">Admin</span>
|
||||
{% endif %}
|
||||
</a>
|
||||
<ul class="dropdown-menu dropdown-menu-end">
|
||||
<li><a class="dropdown-item disabled">{{ session.user.email }}</a></li>
|
||||
<li><hr class="dropdown-divider"></li>
|
||||
<li><a class="dropdown-item" href="/auth/logout"><i class="bi bi-box-arrow-right"></i> Logout</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
{% else %}
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/auth/login"><i class="bi bi-box-arrow-in-right"></i> Login</a>
|
||||
</li>
|
||||
{% endif %}
|
||||
</ul>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
32
src/app/templates/unauthorized.html
Normal file
32
src/app/templates/unauthorized.html
Normal file
@@ -0,0 +1,32 @@
|
||||
{% extends "layout.html" %}
|
||||
|
||||
{% block title %}Access Denied - KCAP Demo Server{% endblock %}
|
||||
|
||||
{% block content %}
|
||||
<div class="row justify-content-center mt-5">
|
||||
<div class="col-md-6">
|
||||
<div class="card border-danger">
|
||||
<div class="card-header bg-danger text-white">
|
||||
<h4 class="mb-0"><i class="bi bi-shield-exclamation"></i> Access Denied</h4>
|
||||
</div>
|
||||
<div class="card-body text-center">
|
||||
<i class="bi bi-shield-exclamation" style="font-size: 4rem; color: #dc3545;"></i>
|
||||
<h5 class="mt-3">You don't have permission to access this resource</h5>
|
||||
<p class="text-muted">
|
||||
This page requires special permissions that your account doesn't have.
|
||||
Please contact an administrator if you believe this is an error.
|
||||
</p>
|
||||
<hr>
|
||||
<div class="d-grid gap-2 d-md-block">
|
||||
<a href="/" class="btn btn-primary"><i class="bi bi-house"></i> Go to Home</a>
|
||||
{% if session.user %}
|
||||
<a href="/auth/logout" class="btn btn-outline-secondary"><i class="bi bi-box-arrow-right"></i> Logout</a>
|
||||
{% else %}
|
||||
<a href="/auth/login" class="btn btn-outline-primary"><i class="bi bi-box-arrow-in-right"></i> Login</a>
|
||||
{% endif %}
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
{% endblock %}
|
||||
Reference in New Issue
Block a user