Move all the rest of session management outside sqlauth/fileauth as well.
This may also mean we now require either module loaded, have not checked,
but that is the plan anyway ;)
If there is a special page that should be accessed without being logged
in, add it to page_requires_no_login(). Similar to page_requires_no_config().
Add per-user session timeout setting (under Settings 'Accounts' -> select acc).
There's a small catch-22 with sessions in the sense that we must set the cookie
timeout before we start the session, and thus before we know which user it is,
and thus before we know the preferred maximum session time.
So we set the cookie with a timeout of 86400 (1 day), since we don't really use
the cookie anyway, we use the /api/timeout.php script and the
$_SESSION['last-activity'] and $_SESSION['session_timeout'] variables
This also moves all the session_start() stuff to a single function that is
called only called at two places (in upper layer, not like by sql or file auth)
Settings - Accounts - acc: horizontally align the settings fields.
For table user_meta: ADD CONSTRAINT meta_key_user_id UNIQUE(meta_key,user_id)
So we can use INSERT INTO ... ON DUPLICATE KEY UPDATE ....
at a later stage.
Move RPC config to DB instead of in config.php.
This so later we can easily manage multiple servers etc. and also
simply because it technically is not required to be in config.php ;).
Setup major reshuffle: split up in pre-auth: backend & user creation, and
the rest in post-auth (after user is logged in).
This because:
1) It is safer, the process without a user configured is kept short
2) Easier for the user, so they can have the first step go well,
even if they are stuck at the post-auth step (RPC).
This is even more important if we would later expand the setup step
with more questions/options/etc.
This ALSO mutilates Valware's magnificient on both JS and the dialogs ;P
Minimize config/config.php and put settings in DB. This is work in progress.
config/config.php is no longer meant to be edited by hand and will
only contain the bare minimum of config that needs to be in a file.
All the rest will be in the DB (either SQL or db file).
Various todo items and actual db-based settings read/write untested.
Fix issue in installation page that leads to failed SQL table creation at the end.
We now don't use placeholder but set a value for 127.0.0.1 and port 8600.
TODO: detect if empty in the form and give an error ;)
Make the overview a little tidier as discussed on IRC
this pulls the cards over to the left which I feel looks neater aligned with the sidebar.
also made the cards on each row match the max size to look more aligned
Move footer to leftnav. Only show if screen height >650px.
Suggested by Madriix in https://github.com/unrealircd/unrealircd-webpanel/pull/25
(but done a bit differently by me)
Ideally this 650px would not be hardcoded and it would detect if
the menu would overflow into the "footer", eg if you have X plugins
loaded. But for now this is fine and allows about 3 items more
so we're OK.. for now.
Users: Host/IP column: get rid of "(the same)" stuff, I think users understand ;)
And the same for when services users don't have an IP, just only show the host.
common_api: output at least something every timeout (10) seconds,
otherwise PHP may not notice when the webclient is gone.
Then the process could exist 'forever' and hang Apache after it
has gone through all it threads/processes.
Notifications: only for 'error', 'warn' and 'link'. Later you can customize
what notifications you will want exactly, but pending that.. limit it to that.
Add file_auth plugin, which offers similar functionality to sql_auth
but then with files. Note that the webserver needs to be able to
write to the data/ directory. See config/config.php.sample
The sql auth plugin is better, but this way users have no excuse
not to use any authentication, basically ;D
Add api/common_api.php and use Server-Sent Events, streaming JSON
data on like the overview page to update the User/Channel/.. counts
instead of doing a HTTP request every second like we had before.
The use of api/common_api.php from api/ is quite easy:
require_once('common_api.php');
which takes care of validating the session, closing the session,
disabling output buffering, etc.
And then you use either:
* api_log_loop($sources)
like: api_log_loop(["connect"]);
Or:
* api_timer_loop((int $every_msec, string $method, array|null $params = null)
like: api_timer_loop(1000, "stats.get");
And then all the (streaming) JSON-RPC response data from the server is
streamed back to the client via SSE.
projects / irc / unrealircd / unrealircd-webpanel.git / log
