@jeffusion/bungee-core 5.9.0 → 5.11.0

package/dist/plugins/local-accounts/manifest.json

@@ -47,6 +47,16 @@
         "execution": "control",
         "capability": "self.password"
       },
+      {
+        "path": "/session-policy",
+        "methods": [
+          "GET",
+          "PUT"
+        ],
+        "handler": "sessionPolicy",
+        "execution": "control",
+        "capability": "config.write"
+      },
       {
         "path": "/logout",
         "methods": [
@@ -120,7 +130,25 @@
       "settings.confirmation": "确认新密码",
       "settings.updating": "正在更新…",
       "settings.submit": "修改并重新登录",
-      "settings.logout": "退出当前会话"
+      "settings.logout": "退出当前会话",
+      "session.title": "登录会话",
+      "session.tag": "有效期",
+      "session.description": "保存后仅影响新登录的会话，已有会话保留登录时的设置。时长设为 0 可关闭对应超时。",
+      "session.idle": "空闲超时",
+      "session.absolute": "登录最长有效期",
+      "session.minutes": "分钟",
+      "session.hours": "小时",
+      "session.days": "天",
+      "session.unit": "时长单位",
+      "session.browserNote": "关闭超时不影响退出登录、改密和身份恢复时撤销会话。浏览器仍可能清理 Cookie；正常核验会话时会续期 Cookie，但不会延长登录最长有效期。",
+      "session.loading": "正在读取会话设置",
+      "session.save": "保存会话设置",
+      "session.saving": "正在保存…",
+      "session.saved": "已保存，下次登录生效。",
+      "session.invalid": "请输入非负整数时长；0 表示关闭超时。",
+      "session.conflict": "设置已被其他页面修改。请重新读取后再保存。",
+      "session.failed": "会话设置读取或保存失败。",
+      "session.reload": "重新读取"
     },
     "en": {
       "metadata.name": "Management authentication",
@@ -165,7 +193,25 @@
       "settings.confirmation": "Confirm new password",
       "settings.updating": "Updating…",
       "settings.submit": "Change and sign in again",
-      "settings.logout": "Sign out of current session"
+      "settings.logout": "Sign out of current session",
+      "session.title": "Sign-in sessions",
+      "session.tag": "LIFETIME",
+      "session.description": "Saved settings apply only to new sign-ins. Existing sessions retain their original settings. Set a duration to 0 to disable that timeout.",
+      "session.idle": "Idle timeout",
+      "session.absolute": "Maximum sign-in lifetime",
+      "session.minutes": "Minutes",
+      "session.hours": "Hours",
+      "session.days": "Days",
+      "session.unit": "Duration unit",
+      "session.browserNote": "Disabling timeouts does not prevent sign-out, password changes or identity recovery from revoking sessions. Browsers may still clear cookies. Session verification renews the cookie without extending the maximum sign-in lifetime.",
+      "session.loading": "Loading session settings",
+      "session.save": "Save session settings",
+      "session.saving": "Saving…",
+      "session.saved": "Saved. Applies to your next sign-in.",
+      "session.invalid": "Enter a non-negative whole-number duration. 0 disables the timeout.",
+      "session.conflict": "Another page changed these settings. Reload before saving.",
+      "session.failed": "Could not read or save session settings.",
+      "session.reload": "Reload settings"
     }
   }
 }

package/dist/plugins/local-accounts/ui/Settings.svelte

@@ -4,15 +4,62 @@
   import { onMount } from 'svelte';
   import { requestPluginControl } from '$api/client';
   import { logout } from '$stores/auth';
-  import { PanelCard, LoadingIndicator } from '$components/industrial';
+  import { PanelCard, LoadingIndicator, BSelect } from '$components/industrial';
+  import { Input } from '$components/ui/input';
+  import { Button } from '$components/ui/button';
   import { accountError } from '$components/domain/plugin/activation-state';
   const t = (key: string) => $isLoading ? '' : getPluginText(key, 'local-accounts', (id, options) => $_(id, options));
   const core = (key: string, values: Record<string, string> = {}) => $isLoading ? '' : $_(key, { values });
   let { pluginName = 'local-accounts' }: { pluginName?: string; apiBase?: string } = $props();
   let administrator = $state<{id:string;username:string;requiresPasswordChange?:boolean} | null>(null);
   let currentPassword = $state(''), password = $state(''), confirmation = $state(''), error = $state(''), detail = $state(''), busy = $state(false), loading = $state(true);
+  type SessionPolicy = {idleTimeoutMinutes: number; absoluteTimeoutMinutes: number};
+  type PolicyResult = {version: number; policy: SessionPolicy};
+  const factors: Record<string, number> = {minutes: 1, hours: 60, days: 1440};
+  const maxMinutes = Math.floor(Number.MAX_SAFE_INTEGER / 60_000);
+  let durations = $state<{key: keyof SessionPolicy; label: string; value: number | undefined; unit: string}[]>([
+    {key: 'idleTimeoutMinutes', label: 'session.idle', value: 30, unit: 'minutes'},
+    {key: 'absoluteTimeoutMinutes', label: 'session.absolute', value: 8, unit: 'hours'},
+  ]);
+  let policyVersion = $state<number | null>(null), savedPolicy = $state<SessionPolicy | null>(null);
+  let policyLoading = $state(true), policyBusy = $state(false), policyError = $state(''), policyDetail = $state(''), policySaved = $state(false);
+  let units = $derived(['minutes', 'hours', 'days'].map(unit => ({value: unit, label: t('session.' + unit)})));
+  let draftPolicy = $derived(Object.fromEntries(durations.map(field => [field.key, field.value === undefined ? NaN : field.value * factors[field.unit]!])) as SessionPolicy);
+  let validPolicy = $derived(durations.every(field => Number.isSafeInteger(field.value) && field.value! >= 0)
+    && Object.values(draftPolicy).every(value => Number.isSafeInteger(value) && value >= 0 && value <= maxMinutes));
+  let policyDirty = $derived(savedPolicy !== null && (draftPolicy.idleTimeoutMinutes !== savedPolicy.idleTimeoutMinutes || draftPolicy.absoluteTimeoutMinutes !== savedPolicy.absoluteTimeoutMinutes));
+  function applyPolicy(result: PolicyResult) {
+    policyVersion = result.version; savedPolicy = result.policy;
+    for (const field of durations) {
+      const minutes = result.policy[field.key];
+      field.unit = minutes > 0 && minutes % 1440 === 0 ? 'days' : minutes > 0 && minutes % 60 === 0 ? 'hours' : 'minutes';
+      field.value = minutes / factors[field.unit]!;
+    }
+  }
+  function policyFailure(e: unknown) {
+    const result = accountError(e); policyDetail = result.detail;
+    policyError = result.detail === 'version_conflict' ? 'session.conflict' : result.detail === 'invalid_session_policy' ? 'session.invalid' : 'session.failed';
+  }
+  async function loadPolicy() {
+    if (policyBusy) return;
+    policyLoading = true; policyError = ''; policyDetail = ''; policySaved = false;
+    try { applyPolicy(await requestPluginControl<PolicyResult>(pluginName, '/session-policy', 'GET')); }
+    catch (e) { policyFailure(e); }
+    finally { policyLoading = false; }
+  }
+  async function savePolicy(event: SubmitEvent) {
+    event.preventDefault(); if (policyBusy || policyLoading || policyVersion === null) return;
+    if (!validPolicy) { policyError = 'session.invalid'; return; }
+    policyBusy = true; policyError = ''; policyDetail = ''; policySaved = false;
+    try {
+      applyPolicy(await requestPluginControl<PolicyResult>(pluginName, '/session-policy', 'PUT', {version: policyVersion, policy: draftPolicy}));
+      policySaved = true;
+    } catch (e) { policyFailure(e); }
+    finally { policyBusy = false; }
+  }
   function failure(e: unknown) { const result = accountError(e); error = result.key; detail = result.detail; }
   onMount(() => { void requestPluginControl<{administrator: typeof administrator}>(pluginName, '/self', 'GET').then(result => { administrator = result.administrator; }).catch(failure).finally(() => { loading = false; }); });
+  onMount(() => { void loadPolicy(); });
   async function change(event: SubmitEvent) {
     event.preventDefault(); if (busy) return;
     if (password !== confirmation) { failure(new Error('password_confirmation')); return; }
@@ -32,6 +79,31 @@
   <PanelCard title={t('settings.accountTitle')} tag={t('settings.accountTag')}>
     {#if loading}<LoadingIndicator label={t('settings.loading')} height="sm" />{:else if administrator}<p class="text-sm text-zinc-200">{administrator.username}</p><p class="text-sm text-zinc-400 mt-2">{t('settings.accountDescription')}</p>{/if}
   </PanelCard>
+  <PanelCard title={t('session.title')} tag={t('session.tag')}>
+    <p class="text-sm text-zinc-400 mb-4">{t('session.description')}</p>
+    {#if policyLoading}<LoadingIndicator label={t('session.loading')} height="sm" />{:else}
+      <form class="space-y-3" onsubmit={savePolicy} aria-busy={policyBusy} data-testid="session-policy-form">
+        <div class="grid grid-cols-1 sm:grid-cols-2 gap-4">
+          {#each durations as field (field.key)}
+            <div class="grid gap-1 min-w-0">
+              <label class="nx-field-label" for={'session-' + field.key}>{t(field.label)}</label>
+              <div class="flex items-center gap-2">
+                <Input id={'session-' + field.key} type="number" min={0} max={Math.floor(maxMinutes / factors[field.unit]!)} step={1} required bind:value={field.value} disabled={policyBusy || policyVersion === null} class="min-w-0 flex-1" />
+                <BSelect bind:value={field.unit} options={units} ariaLabel={t(field.label) + ' · ' + t('session.unit')} width="6rem" disabled={policyBusy || policyVersion === null} />
+              </div>
+            </div>
+          {/each}
+        </div>
+        <p class="text-sm text-zinc-400">{t('session.browserNote')}</p>
+        <div class="flex flex-wrap gap-2">
+          <Button type="submit" disabled={policyBusy || policyVersion === null || !policyDirty || !validPolicy}>{policyBusy ? t('session.saving') : t('session.save')}</Button>
+          {#if policyError}<Button type="button" variant="ghost" onclick={loadPolicy} disabled={policyBusy}>{t('session.reload')}</Button>{/if}
+        </div>
+        {#if policySaved && !policyDirty}<p role="status" class="text-sm text-emerald-400">{t('session.saved')}</p>{/if}
+      </form>
+    {/if}
+    {#if policyError}<p role="alert" class="text-sm text-red-400 mt-3">{t(policyError)}</p><details class="text-sm text-zinc-400"><summary>{core('pluginActivation.technicalDetails')}</summary><pre class="whitespace-pre-wrap break-all">{policyDetail}</pre></details>{/if}
+  </PanelCard>
   <PanelCard title={t('settings.passwordTitle')} tag={t('settings.passwordTag')}>
     <p class="text-sm text-zinc-400 mb-4">{t('settings.passwordDescription')}</p>
     <form class="space-y-3" onsubmit={change} aria-busy={busy}>