enricobuehler
9856c04b75
ci / rust (push) Has been cancelled
Single-user, LAN-reachable-but-gated. The web server is a backend-for-frontend:
- Login: POST /_auth/login {password} checks PUNKTFUNK_UI_PASSWORD (constant-time) and
sets a SEALED session cookie (h3 useSession / AES-GCM). server/middleware/auth.ts gates
every request — pages 302 → /login, /api → 401 — and FAILS CLOSED (503) when
PUNKTFUNK_UI_PASSWORD is unset, so a misconfigured LAN-exposed server admits no one.
- The management API stays loopback-only + token (never LAN-exposed). The proxy
(server/routes/api/[...].ts) injects PUNKTFUNK_MGMT_TOKEN server-side and drops the
browser's cookie before forwarding — the token never reaches the browser, which only
holds the session cookie.
Nitro doesn't auto-scan a server/ dir, so the Nitro plugin gets an explicit scanDirs to
pick up middleware + routes. Client: removed the localStorage token (server injects it);
the fetcher bounces to /login on 401; new /login page (bare, no shell); Settings drops the
token field and gains a Sign-out button; en/de strings.
Validated live end to end: unauth /→302, /api→401; wrong pw→401; right pw→200+cookie;
authed /api/v1/status→200 (proxied, mgmt token injected — the host required it); logout→
session cleared→401. tsc + build green.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
66 lines
2.6 KiB
JSON
66 lines
2.6 KiB
JSON
{
|
|
"$schema": "https://inlang.com/schema/inlang-message-format",
|
|
"app_name": "punktfunk",
|
|
"app_tagline": "Verwaltungskonsole",
|
|
"nav_dashboard": "Übersicht",
|
|
"nav_host": "Host",
|
|
"nav_clients": "Gekoppelte Geräte",
|
|
"nav_pairing": "Kopplung",
|
|
"nav_settings": "Einstellungen",
|
|
"status_title": "Live-Status",
|
|
"status_video": "Video",
|
|
"status_audio": "Audio",
|
|
"status_streaming": "Aktiv",
|
|
"status_idle": "Inaktiv",
|
|
"status_session": "Sitzung",
|
|
"status_no_session": "Keine aktive Sitzung",
|
|
"status_paired_count": "Gekoppelte Geräte",
|
|
"status_pin_pending": "Kopplungs-PIN ausstehend",
|
|
"stream_codec": "Codec",
|
|
"stream_resolution": "Auflösung",
|
|
"stream_fps": "Bildrate",
|
|
"stream_bitrate": "Bitrate",
|
|
"action_stop_session": "Sitzung beenden",
|
|
"action_request_idr": "Keyframe anfordern",
|
|
"action_unpair": "Entkoppeln",
|
|
"host_identity": "Identität",
|
|
"host_hostname": "Hostname",
|
|
"host_local_ip": "Lokale IP",
|
|
"host_version": "Version",
|
|
"host_abi": "ABI-Version",
|
|
"host_codecs": "Codecs",
|
|
"host_ports": "Ports",
|
|
"host_uniqueid": "Eindeutige ID",
|
|
"clients_title": "Gekoppelte Geräte",
|
|
"clients_empty": "Noch keine gekoppelten Geräte.",
|
|
"clients_name": "Name",
|
|
"clients_fingerprint": "Fingerabdruck",
|
|
"clients_unpair_confirm": "Dieses Gerät entkoppeln? Es muss sich erneut koppeln, um zu verbinden.",
|
|
"pairing_title": "Kopplung",
|
|
"pairing_idle": "Keine Kopplung aktiv. Starte die Kopplung in einem Moonlight-Client und gib hier die PIN ein.",
|
|
"pairing_waiting": "Ein Gerät wartet auf Kopplung. Gib die angezeigte PIN ein:",
|
|
"pairing_pin_label": "PIN",
|
|
"pairing_submit": "PIN bestätigen",
|
|
"pairing_success": "Erfolgreich gekoppelt.",
|
|
"pairing_failed": "Kopplung fehlgeschlagen — PIN prüfen und erneut versuchen.",
|
|
"settings_title": "Einstellungen",
|
|
"settings_token_label": "API-Token",
|
|
"settings_token_help": "Bearer-Token für die Verwaltungs-API. Bei einem Loopback-Host ohne Token leer lassen.",
|
|
"settings_language": "Sprache",
|
|
"settings_save": "Speichern",
|
|
"settings_saved": "Gespeichert.",
|
|
"common_loading": "Wird geladen…",
|
|
"common_error": "Etwas ist schiefgelaufen.",
|
|
"common_retry": "Erneut versuchen",
|
|
"common_yes": "Ja",
|
|
"common_cancel": "Abbrechen",
|
|
"common_unauthorized": "Sitzung abgelaufen — Weiterleitung zur Anmeldung…",
|
|
"login_title": "Anmelden",
|
|
"login_subtitle": "Gib das Verwaltungspasswort ein, um fortzufahren.",
|
|
"login_password": "Passwort",
|
|
"login_submit": "Anmelden",
|
|
"login_error": "Falsches Passwort.",
|
|
"login_signing_in": "Anmeldung läuft…",
|
|
"action_logout": "Abmelden"
|
|
}
|