source: Klonkt/src/views/pages/admin.ejs@ fb30b5d

main
Last change on this file since fb30b5d was 61e3daf, checked in by Robin <roboburr@…>, 7 weeks ago

Feature: paid posts slice 1, owner Patreon config (encrypted)

The site owner can connect their OWN Patreon campaign for paid posts
(klonkt-demo-aki), premium-gated in Beheer. Client id/secret, campaign
id and the creator access/refresh token are stored ENCRYPTED at rest
(new CryptoBox AES-256-GCM helper, key from PAID_SECRET), so a database
dump leaks nothing usable; the token auto-refreshes. Separate from
Klonkt Premium's license flow, which is untouched. Degrades gracefully:
without PAID_SECRET the admin page refuses to save rather than storing
plaintext. Nothing patron-facing yet (posts.paid + unlock come in
slices 2 to 4), so no changelog entry.

CryptoBox also carries the cookie-less signed-blob helper (signBlob/
verifyBlob) that slices 3 and 4 reuse for the OAuth state and the
WebAuthn challenge.

Changed files:
src/config/database.js

  • paid_patreon table (site_id PK, secrets encrypted)

src/server.js

  • mount /admin/paid

src/views/pages/admin.ejs

  • "Betaalde posts" button in Beheer

New file:
src/services/CryptoBox.js

  • aes-256-gcm encrypt/decrypt + HMAC signBlob/verifyBlob

src/services/PaidPatreonService.js

  • owner config CRUD (encrypted), token refresh, creatorAccessToken

src/routes/admin-paid.js

  • premium-gated config form (GET/POST/disconnect)

src/views/pages/admin-paid.ejs

  • the form + status

test/paid-patreon.test.js

  • crypto roundtrip, no-plaintext-in-DB, refresh, blob signing

docs/paid-posts-design.md, docs/privacy-betaalde-posts.md

  • concurrency property documented

-robo
Co-Authored-By: Claude Opus 4.8 <noreply@…>

  • Property mode set to 100644
File size: 10.9 KB
RevLine 
[7bc636b]1<div class="container admin-page">
[91c0a39]2 <h1><%= t('admin.title') %></h1>
[475eeda]3 <%
4 var _premOn = (typeof premiumEnabled !== 'undefined' && premiumEnabled);
5 var _premActive = _premOn && (typeof isPremium !== 'undefined' && isPremium);
6 var _premCls = _premActive ? 'on' : (_premOn ? 'off' : 'free');
7 var _premLbl = _premActive ? ('★ ' + t('adash.prem_active'))
8 : (_premOn ? ('⚠ ' + t('adash.prem_unlinked'))
9 : t('adash.prem_layeroff'));
10 %>
11 <a class="prem-badge <%= _premCls %>" href="/admin/settings" title="<%= t('admin.b_settings') %>"><%= _premLbl %></a>
12 <style>
13 .prem-badge{display:inline-flex;align-items:center;gap:.35rem;font-size:.78rem;font-weight:700;letter-spacing:.02em;padding:.3rem .85rem;border-radius:999px;text-decoration:none;border:1px solid transparent;margin:.1rem 0 .3rem}
14 .prem-badge.on{background:rgba(232,176,75,.16);color:var(--accent);border-color:rgba(232,176,75,.45)}
15 .prem-badge.off{background:rgba(239,68,68,.12);color:#ef9a9a;border-color:rgba(239,68,68,.35)}
16 .prem-badge.free{background:var(--paper-2);color:var(--ink-muted);border-color:var(--rule)}
17 .prem-badge:hover{filter:brightness(1.08)}
18 </style>
[6351545]19 <% if (tenancy === 'hub') { %>
[91c0a39]20 <p class="admin-tagline"><%= t('admin.tagline_hub') %></p>
[6351545]21 <% } else { %>
[91c0a39]22 <p class="admin-tagline"><%= t('admin.tagline_solo') %></p>
[6351545]23 <% } %>
[7bc636b]24
[69b509d]25 <nav class="admin-quick-links" aria-label="<%= t('nav.admin') %>">
[6351545]26 <% if (tenancy === 'hub') { %>
[91c0a39]27 <a href="/admin/sites" class="btn"><%= t('admin.b_sites') %></a>
28 <a href="/admin/users" class="btn"><%= t('admin.b_users') %></a>
[f24b795]29 <a href="/admin/media" class="btn"><%= t('admin.b_media') %></a>
[cb01666]30 <% if (typeof audioEnabled === 'undefined' || audioEnabled) { %>
[91c0a39]31 <a href="/admin/playlists" class="btn"><%= t('admin.b_playlists') %></a>
[cb01666]32 <% } %>
[91c0a39]33 <% if (primarySite) { %><a href="/admin/seo" class="btn"><%= t('admin.b_seo') %></a><% } %>
34 <a href="/admin/settings" class="btn"><%= t('admin.b_settings') %></a>
[6351545]35 <% } else { %>
[91c0a39]36 <a href="/posts/new" class="btn"><%= t('admin.b_newpost') %></a>
[f24b795]37 <a href="/admin/media" class="btn"><%= t('admin.b_media') %></a>
[6351545]38 <% if (primarySite) { %>
[91c0a39]39 <a href="/admin/sites/<%= primarySite.slug %>/edit" class="btn"><%= t('admin.b_look') %></a>
[bdc3c1e]40 <% } else { %>
[91c0a39]41 <a href="/admin/sites/new" class="btn"><%= t('admin.b_makesite') %></a>
[6351545]42 <% } %>
[91c0a39]43 <% if (primarySite) { %><a href="/admin/seo" class="btn"><%= t('admin.b_seo') %></a><% } %>
44 <a href="/admin/settings" class="btn"><%= t('admin.b_settings') %></a>
[6351545]45 <% } %>
[d549549]46 <% if (typeof premiumUnlocked === 'undefined' || premiumUnlocked) { %>
[91c0a39]47 <a href="/admin/stats" class="btn"><%= t('admin.b_stats') %></a>
[61e3daf]48 <a href="/admin/paid" class="btn">Betaalde posts</a>
[91c0a39]49 <a href="/admin/newsletter" class="btn"><%= t('admin.b_newsletter') %></a>
50 <% if (tenancy !== 'hub' && primarySite) { %><a href="/pers" class="btn" target="_blank"><%= t('admin.b_perskit') %></a><% } %>
51 <% if (tenancy !== 'hub' && primarySite) { %><a href="/downloads" class="btn" target="_blank"><%= t('admin.b_downloads') %></a><% } %>
52 <% if (tenancy !== 'hub' && primarySite) { %><a href="/links" class="btn" target="_blank"><%= t('admin.b_linkbio') %></a><% } %>
53 <a href="/admin/shows" class="btn"><%= t('admin.b_agenda') %></a>
[d549549]54 <% } %>
[16e99e5]55 <%# Fediverse pages (News / Notifications / My replies / Blocking) are reached via the
56 "Fediverse" nav button + the bell + the tabbed section — not duplicated here. %>
[91c0a39]57 <a href="/admin/updates" class="btn"><%= t('admin.b_updates') %></a>
58 <a href="/admin/handleiding" class="btn"><%= t('admin.b_help') %></a>
[7bc636b]59 </nav>
60
61 <div class="admin-stats">
[6351545]62 <% if (tenancy === 'hub') { %>
[91c0a39]63 <div class="stat-card"><div class="stat-num"><%= stats.users %></div><div class="stat-label"><%= t('admin.st_users') %></div></div>
64 <div class="stat-card"><div class="stat-num"><%= stats.sites %></div><div class="stat-label"><%= t('admin.st_sites') %></div></div>
[6351545]65 <% } %>
[91c0a39]66 <div class="stat-card"><div class="stat-num"><%= stats.posts %></div><div class="stat-label"><%= t('admin.st_posts') %></div></div>
67 <div class="stat-card"><div class="stat-num"><%= stats.published %></div><div class="stat-label"><%= t('admin.st_published') %></div></div>
[7bc636b]68 </div>
69
[f45fc82]70 <% if (typeof posts !== 'undefined' && posts && posts.length) { %>
71 <% var _drafts = posts.filter(function(p){ return p.isDraft; }).length; %>
[91c0a39]72 <h2><%= t('admin.sec_posts') %><% if (_drafts) { %> <span class="pl-draftcount"><%= _drafts %> <%= t('admin.draft').toLowerCase() %><%= _drafts === 1 ? '' : 's' %></span><% } %></h2>
[f45fc82]73 <ul class="post-admin-list">
74 <% posts.forEach(function(p) { %>
75 <li class="pal-row<%= p.isDraft ? ' is-draft' : '' %>">
76 <a class="pal-title" href="<%= p.editUrl %>">
[91c0a39]77 <% if (p.isDraft) { %><span class="pal-badge"><%= t('admin.draft') %></span><% } %>
[f45fc82]78 <span class="pal-name"><%= p.title || '(zonder titel)' %></span>
79 </a>
80 <span class="pal-actions">
[91c0a39]81 <a class="pal-link" href="<%= p.editUrl %>"><%= t('admin.edit') %></a>
82 <% if (!p.isDraft) { %><a class="pal-link" href="<%= p.viewUrl %>"><%= t('admin.view') %></a><% } %>
[f45fc82]83 </span>
84 </li>
85 <% }); %>
86 </ul>
87 <% } %>
88
[7bc636b]89 <% if (sites && sites.length) { %>
[91c0a39]90 <h2><%= t('admin.sec_sites') %></h2>
[7bc636b]91 <table class="admin-table">
92 <thead>
[91c0a39]93 <tr><th><%= t('admin.th_slug') %></th><th><%= t('admin.th_title') %></th><th><%= t('admin.th_owner') %></th><th><%= t('admin.th_created') %></th></tr>
[7bc636b]94 </thead>
95 <tbody>
96 <% sites.forEach(function(s) { %>
97 <tr>
98 <td><code><%= s.slug %></code></td>
99 <td><%= s.title %></td>
100 <td><%= s.owner_username || '—' %></td>
101 <td><%= formatDate(s.created_at) %></td>
102 </tr>
103 <% }); %>
104 </tbody>
105 </table>
106 <% } %>
107
108 <% if (users && users.length) { %>
[91c0a39]109 <h2><%= t('admin.sec_users') %></h2>
[7bc636b]110 <table class="admin-table">
111 <thead>
[91c0a39]112 <tr><th><%= t('admin.th_username') %></th><th><%= t('admin.th_email') %></th><th><%= t('admin.th_role') %></th><th><%= t('admin.th_joined') %></th></tr>
[7bc636b]113 </thead>
114 <tbody>
115 <% users.forEach(function(u) { %>
116 <tr>
117 <td><%= u.username %></td>
118 <td><%= u.email %></td>
119 <td><span class="role-pill role-<%= u.role %>"><%= u.role %></span></td>
120 <td><%= formatDate(u.created_at) %></td>
121 </tr>
122 <% }); %>
123 </tbody>
124 </table>
125 <% } %>
126
127</div>
128
129<style>
130.admin-page { max-width: 1000px; margin: 3rem auto; padding: 0 1rem; }
131.admin-page h1 { font-family: var(--font-display, serif); font-size: 2rem; margin: 0 0 0.25rem; }
132.admin-page h2 { font-family: var(--font-display, serif); font-size: 1.4rem; margin: 2rem 0 0.75rem; }
133.admin-tagline { color: var(--ink-muted); margin: 0 0 2rem; }
134.admin-tagline em { font-style: normal; opacity: 0.7; }
135
[f45fc82]136/* Posts/concepten-lijst */
137.pl-draftcount { font-family: var(--font-ui, system-ui); font-size: 0.8rem; font-weight: 700; color: var(--accent); background: color-mix(in srgb, var(--accent) 14%, transparent); padding: 0.1rem 0.55rem; border-radius: 99px; vertical-align: middle; }
138.post-admin-list { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 0.4rem; }
139.pal-row { display: flex; align-items: center; justify-content: space-between; gap: 1rem; padding: 0.7rem 0.9rem; border: 1px solid var(--rule); border-radius: 10px; background: var(--paper-2); transition: border-color 120ms; }
140.pal-row:hover { border-color: var(--accent); }
141.pal-row.is-draft { border-left: 3px solid var(--accent); }
142.pal-title { display: inline-flex; align-items: center; gap: 0.6rem; min-width: 0; color: var(--ink); text-decoration: none; font-weight: 600; }
143.pal-title:hover { color: var(--accent); }
144.pal-name { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
145.pal-badge { flex-shrink: 0; font-size: 0.68rem; font-weight: 700; text-transform: uppercase; letter-spacing: 0.05em; color: var(--accent); background: color-mix(in srgb, var(--accent) 14%, transparent); padding: 0.1rem 0.5rem; border-radius: 99px; }
146.pal-actions { display: flex; gap: 0.75rem; flex-shrink: 0; }
147.pal-link { color: var(--ink-muted); font-size: 0.85rem; text-decoration: none; white-space: nowrap; }
148.pal-link:hover { color: var(--accent); text-decoration: underline; }
149
[7bc636b]150/* Quick-links grid — mobile-first.
151 auto-fit + minmax means: as many equal columns as fit, each at least 140px.
152 Mobile (~360-440px): 2 per row.
153 Tablet (~480-700px): 3 per row.
154 Desktop (≥ ~720px): all 5 in a single row. */
155.admin-quick-links {
156 display: grid;
157 grid-template-columns: repeat(auto-fit, minmax(140px, 1fr));
158 gap: 0.5rem;
159 margin: 0 0 1.5rem;
160 padding: 0;
161}
162.admin-quick-links .btn {
163 justify-content: center;
164 padding: 0.7rem 0.9rem;
165 font-weight: 600;
166 text-align: center;
167}
168.admin-quick-links .btn:hover {
169 background: color-mix(in srgb, var(--accent) 8%, var(--paper-2));
170 border-color: var(--accent);
171}
172
173.admin-stats {
174 display: grid;
175 grid-template-columns: repeat(auto-fit, minmax(140px, 1fr));
176 gap: 0.75rem;
177 margin-bottom: 1rem;
178}
179.stat-card {
180 background: var(--paper-2);
181 border: 1px solid var(--rule);
182 border-radius: 8px;
183 padding: 1rem 1.25rem;
184 text-align: center;
185}
186.stat-num {
187 font-size: 2rem;
188 font-weight: 700;
189 color: var(--accent);
190 line-height: 1;
191 font-family: var(--font-display, serif);
192}
193.stat-label {
194 color: var(--ink-muted);
195 font-size: 0.85rem;
196 text-transform: uppercase;
197 letter-spacing: 0.05em;
198 margin-top: 0.25rem;
199}
200
201.admin-table {
202 width: 100%;
203 border-collapse: collapse;
204 background: var(--paper-2);
205 border: 1px solid var(--rule);
206 border-radius: 8px;
207 overflow: hidden;
208}
209.admin-table th, .admin-table td {
210 padding: 0.6rem 0.9rem;
211 text-align: left;
212 border-bottom: 1px solid var(--rule);
213}
214.admin-table th {
215 background: var(--paper);
216 font-weight: 600;
217 font-size: 0.85rem;
218 text-transform: uppercase;
219 letter-spacing: 0.05em;
220 color: var(--ink-muted);
221}
222.admin-table tr:last-child td { border-bottom: 0; }
223.admin-table code { background: var(--paper); padding: 0.1rem 0.4rem; border-radius: 3px; font-size: 0.85rem; }
224
225.role-pill {
226 display: inline-block;
227 padding: 0.1rem 0.5rem;
228 border-radius: 10px;
229 font-size: 0.75rem;
230 text-transform: uppercase;
231 letter-spacing: 0.05em;
232 background: var(--paper);
233 color: var(--ink-muted);
234}
235.role-pill.role-god { background: var(--accent); color: white; }
236.role-pill.role-admin { background: var(--paper); color: var(--accent); border: 1px solid var(--accent); }
237
238.admin-todo {
239 margin: 2rem 0 0;
240 padding: 0.75rem 1rem;
241 background: var(--paper-2);
242 border-left: 3px solid var(--accent);
243 border-radius: 4px;
244 font-size: 0.9rem;
245 color: var(--ink-muted);
246}
247
248@media (max-width: 600px) {
249 .admin-table { font-size: 0.85rem; }
250 .admin-table th, .admin-table td { padding: 0.45rem 0.6rem; }
251}
252</style>
Note: See TracBrowser for help on using the repository browser.