Changeset 70679063 in Klonkt for src/routes/auth.js

Timestamp:

06/19/2026 07:57:15 AM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

b919a67

Parents:

9b3e12c

Message:

fix: download toggle without page reload + clear explanation page on Google admin login

1) Admin→Audio: the "download-for-email" toggle (⬇) was a form POST with redirect →

full page reload on every click (player + scroll reset). Now AJAX via the existing
/admin/audio/api/:id (accepts downloadable), button state updated in-place, no
reload. (Old POST route stays as an unused fallback.)

2) /auth/login did not show the query error (error:null) → message only appeared in

the URL. Now ?error= is rendered, and the "Google address belongs to an admin"
case gets its own clear explanation block (gerr=admin): why it is rejected + the
two paths (admin = password, fan = different Google account).

Co-Authored-By: Claude <noreply@…>

File:

• src/routes/auth.js (modified) (2 diffs)

src/routes/auth.js

@@ -52 +52 @@
     pageTitle: 'Inloggen',
     bodyClass: 'on-special on-auth',
-    error: null,
+    error: req.query.error || null,
+    gerr: req.query.gerr || null, // foutcode voor een rijkere uitleg (bv. 'admin')
     success: req.query.success || null,
     username: '',
@@ -275 +276 @@
       // beheerder, dan moet diegene met wachtwoord inloggen (geen Google-bypass).
       if (user.role === 'god' || user.role === 'admin') {
-        return fail('Dit adres hoort bij een beheerder — log in met je wachtwoord.');
+        // Eigen, duidelijke uitleg-pagina (zie auth-login.ejs) i.p.v. een kale melding.
+        return res.redirect('/auth/login?gerr=admin');
       }
       // Bestaande luisteraar: koppel google_sub/avatar als die ontbreken; weiger