Merge pull request #6 from mattintech/feature/entra-id

Add Entra ID Authentication with Role-Based Access Control
This commit is contained in:
2025-10-20 19:39:36 -04:00
committed by GitHub
17 changed files with 775 additions and 15 deletions

View File

@@ -61,13 +61,36 @@
<span class="navbar-toggler-icon"></span>
</button>
<div class="collapse navbar-collapse" id="navbarNav">
<ul class="navbar-nav">
<ul class="navbar-nav me-auto">
<li class="nav-item">
<a class="nav-link" href="/">Home</a>
</li>
{% if session.user and session.user.role == 'admin' %}
<li class="nav-item">
<a class="nav-link" href="/admin/">Admin</a>
<a class="nav-link" href="/settings">Server Settings</a>
</li>
{% endif %}
</ul>
<ul class="navbar-nav ms-auto">
{% if session.user %}
<li class="nav-item dropdown">
<a class="nav-link dropdown-toggle" href="#" id="userDropdown" role="button" data-bs-toggle="dropdown">
<i class="bi bi-person-circle"></i> {{ session.user.name or session.user.email }}
{% if session.user.role == 'admin' %}
<span class="badge bg-danger ms-1">Admin</span>
{% endif %}
</a>
<ul class="dropdown-menu dropdown-menu-end">
<li><a class="dropdown-item disabled">{{ session.user.email }}</a></li>
<li><hr class="dropdown-divider"></li>
<li><a class="dropdown-item" href="/auth/logout"><i class="bi bi-box-arrow-right"></i> Logout</a></li>
</ul>
</li>
{% else %}
<li class="nav-item">
<a class="nav-link" href="/auth/login"><i class="bi bi-box-arrow-in-right"></i> Login</a>
</li>
{% endif %}
</ul>
</div>
</div>

View File

@@ -0,0 +1,32 @@
{% extends "layout.html" %}
{% block title %}Access Denied - KCAP Demo Server{% endblock %}
{% block content %}
<div class="row justify-content-center mt-5">
<div class="col-md-6">
<div class="card border-danger">
<div class="card-header bg-danger text-white">
<h4 class="mb-0"><i class="bi bi-shield-exclamation"></i> Access Denied</h4>
</div>
<div class="card-body text-center">
<i class="bi bi-shield-exclamation" style="font-size: 4rem; color: #dc3545;"></i>
<h5 class="mt-3">You don't have permission to access this resource</h5>
<p class="text-muted">
This page requires special permissions that your account doesn't have.
Please contact an administrator if you believe this is an error.
</p>
<hr>
<div class="d-grid gap-2 d-md-block">
<a href="/" class="btn btn-primary"><i class="bi bi-house"></i> Go to Home</a>
{% if session.user %}
<a href="/auth/logout" class="btn btn-outline-secondary"><i class="bi bi-box-arrow-right"></i> Logout</a>
{% else %}
<a href="/auth/login" class="btn btn-outline-primary"><i class="bi bi-box-arrow-in-right"></i> Login</a>
{% endif %}
</div>
</div>
</div>
</div>
</div>
{% endblock %}