@jheavenknows/bluerouter 2.0.56 → 2.0.57

package/app/.next-cli-build/static/chunks/app/(dashboard)/dashboard/profile/page-14b5f9dc67610cff.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[3471],{7973:(e,a,s)=>{Promise.resolve().then(s.bind(s,64561))},64561:(e,a,s)=>{"use strict";s.r(a),s.d(a,{default:()=>p});var t=s(95155),l=s(12115);let r="(|(sAMAccountName={{username}})(userPrincipalName={{username}})(mail={{username}}))";function d({status:e}){if(!e?.message)return null;let a="error"===e.type?"text-red-600 bg-red-50 border-red-200":"text-green-700 bg-green-50 border-green-200";return(0,t.jsx)("div",{className:`mt-3 rounded-xl border px-4 py-3 text-sm ${a}`,children:e.message})}function o({icon:e,title:a,desc:s,children:l}){return(0,t.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-6 shadow-sm",children:[(0,t.jsxs)("div",{className:"mb-5 flex items-start gap-3",children:[e&&(0,t.jsx)("span",{className:"material-symbols-outlined text-primary",children:e}),(0,t.jsxs)("div",{children:[(0,t.jsx)("h2",{className:"text-xl font-bold text-text-main",children:a}),s&&(0,t.jsx)("p",{className:"mt-1 text-sm text-text-muted",children:s})]})]}),l]})}function i({label:e,hint:a,children:s}){return(0,t.jsxs)("label",{className:"block",children:[(0,t.jsx)("span",{className:"mb-1 block text-sm font-semibold text-text-main",children:e}),s,a&&(0,t.jsx)("span",{className:"mt-1 block text-xs text-text-muted",children:a})]})}function n(e){return(0,t.jsx)("input",{...e,className:`w-full rounded-xl border border-border bg-background px-3 py-2 text-sm outline-none focus:border-primary ${e.className||""}`})}function c({title:e,desc:a,checked:s,onChange:l,disabled:r}){return(0,t.jsxs)("div",{className:"flex items-start justify-between gap-4 rounded-xl border border-border bg-background px-4 py-3",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("div",{className:"text-sm font-semibold text-text-main",children:e}),a&&(0,t.jsx)("div",{className:"mt-1 text-xs text-text-muted",children:a})]}),(0,t.jsx)("button",{type:"button",disabled:r,onClick:()=>l(!s),className:`relative mt-0.5 h-6 w-11 rounded-full transition disabled:opacity-50 ${s?"bg-primary":"bg-border"}`,children:(0,t.jsx)("span",{className:`absolute top-0.5 h-5 w-5 rounded-full bg-white transition ${s?"left-5":"left-0.5"}`})})]})}function p(){let[e,a]=(0,l.useState)({}),[s,p]=(0,l.useState)(!0),[u,m]=(0,l.useState)({current:"",new:"",confirm:""}),[b,x]=(0,l.useState)({type:"",message:""}),[h,g]=(0,l.useState)(!1),[y,v]=(0,l.useState)(!1),[j,w]=(0,l.useState)({type:"",message:""}),f=(0,l.useRef)(null),[D,A]=(0,l.useState)("admin"),[N,C]=(0,l.useState)({type:"",message:""}),[U,L]=(0,l.useState)({ldapEnabled:!1,ldapUrl:"",ldapBindDn:"",ldapBindPassword:"",ldapUserBaseDn:"",ldapUserSearchFilter:r,ldapUserNameAttribute:"sAMAccountName",ldapUserDisplayAttribute:"displayName",ldapUserEmailAttribute:"mail",ldapLoginAllowedGroupDn:"",ldapAdminGroupDn:"",ldapMonitorAdminGroupDn:"",ldapNestedGroups:!0,ldapAllowedUsers:[],ldapTlsRejectUnauthorized:!0,ldapConnectTimeoutMs:8e3}),[S,k]=(0,l.useState)({type:"",message:""}),[P,I]=(0,l.useState)(!1),[O,G]=(0,l.useState)(!1),[B,M]=(0,l.useState)(""),[E,T]=(0,l.useState)([]),[R,F]=(0,l.useState)(!1),[_,$]=(0,l.useState)({authMode:"password",oidcIssuerUrl:"",oidcClientId:"",oidcScopes:"openid profile email",oidcLoginLabel:"Sign in with OIDC"}),[V,q]=(0,l.useState)(""),[z,J]=(0,l.useState)({type:"",message:""}),[K,H]=(0,l.useState)(!1),[W,Q]=(0,l.useState)(!1),[X,Y]=(0,l.useState)({type:"",message:""}),Z=async()=>{p(!0);try{let e=await fetch("/api/settings",{cache:"no-store"}),s=await e.json();a(s),A(s.localLoginUsername||"admin"),L({ldapEnabled:!0===s.ldapEnabled,ldapUrl:s.ldapUrl||"",ldapBindDn:s.ldapBindDn||"",ldapBindPassword:"",ldapUserBaseDn:s.ldapUserBaseDn||s.ldapBaseDn||"",ldapUserSearchFilter:s.ldapUserSearchFilter||r,ldapUserNameAttribute:s.ldapUserNameAttribute||"sAMAccountName",ldapUserDisplayAttribute:s.ldapUserDisplayAttribute||"displayName",ldapUserEmailAttribute:s.ldapUserEmailAttribute||"mail",ldapLoginAllowedGroupDn:s.ldapLoginAllowedGroupDn||"",ldapAdminGroupDn:s.ldapAdminGroupDn||"",ldapMonitorAdminGroupDn:s.ldapMonitorAdminGroupDn||"",ldapNestedGroups:!1!==s.ldapNestedGroups,ldapAllowedUsers:Array.isArray(s.ldapAllowedUsers)?s.ldapAllowedUsers:[],ldapTlsRejectUnauthorized:!1!==s.ldapTlsRejectUnauthorized,ldapConnectTimeoutMs:s.ldapConnectTimeoutMs||8e3}),$({authMode:s.authMode||"password",oidcIssuerUrl:s.oidcIssuerUrl||"",oidcClientId:s.oidcClientId||"",oidcScopes:s.oidcScopes||"openid profile email",oidcLoginLabel:s.oidcLoginLabel||"Sign in with OIDC"}),("oidc"===s.authMode||"both"===s.authMode)&&Q(!0)}catch(e){console.log("Failed to fetch settings:",e)}finally{p(!1)}};(0,l.useEffect)(()=>{Z()},[]);let ee=async e=>{let s=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)}),t=await s.json().catch(()=>({}));if(!s.ok)throw Error(t.error||"Failed to save settings");return a(e=>({...e,...t})),t},ea=async s=>{Y({type:"",message:""});let t=!1!==e.sidebarAdvancedToolsVisible;a(e=>({...e,sidebarAdvancedToolsVisible:s}));try{let e=await ee({sidebarAdvancedToolsVisible:s}),t=!1!==e.sidebarAdvancedToolsVisible;a(e=>({...e,sidebarAdvancedToolsVisible:t})),window.dispatchEvent(new CustomEvent("bluerouter:sidebar-advanced-tools",{detail:{visible:t}})),Y({type:"success",message:t?"Advanced tools are visible in the sidebar.":"Advanced tools are hidden from the sidebar."})}catch(e){a(e=>({...e,sidebarAdvancedToolsVisible:t})),window.dispatchEvent(new CustomEvent("bluerouter:sidebar-advanced-tools",{detail:{visible:t}})),Y({type:"error",message:e.message||"Failed to save sidebar setting."})}},es=async e=>{e.preventDefault(),C({type:"",message:""});try{let e=await ee({localLoginUsername:D});A(e.localLoginUsername||D||"admin"),C({type:"success",message:"Local account name saved."})}catch(e){C({type:"error",message:e.message})}},et=async e=>{if(e.preventDefault(),u.new!==u.confirm)return void x({type:"error",message:"Passwords do not match"});g(!0),x({type:"",message:""});try{await ee({currentPassword:u.current,newPassword:u.new}),x({type:"success",message:"Password updated successfully"}),m({current:"",new:"",confirm:""})}catch(e){x({type:"error",message:e.message||"Failed to update password"})}finally{g(!1)}},el=async()=>{v(!0),w({type:"",message:""});try{let e=await fetch("/api/settings/database");if(!e.ok){let a=await e.json().catch(()=>({}));throw Error(a.error||"Failed to export database")}let a=await e.json(),s=JSON.stringify(a,null,2),t=new Blob([s],{type:"application/json"}),l=URL.createObjectURL(t),r=document.createElement("a"),d=new Date().toISOString().replace(/[.:]/g,"-");r.href=l,r.download=`bluerouter-backup-${d}.json`,document.body.appendChild(r),r.click(),document.body.removeChild(r),URL.revokeObjectURL(l),w({type:"success",message:"Database backup downloaded."})}catch(e){w({type:"error",message:e.message||"Failed to export database."})}finally{v(!1)}},er=async e=>{let a=e.target.files?.[0];if(a){v(!0),w({type:"",message:""});try{let e=await a.text(),s=JSON.parse(e),t=await fetch("/api/settings/database",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(s)}),l=await t.json().catch(()=>({}));if(!t.ok)throw Error(l.error||"Failed to import database");await Z(),w({type:"success",message:"Database imported successfully."})}catch(e){w({type:"error",message:e.message||"Invalid backup file."})}finally{f.current&&(f.current.value=""),v(!1)}}},ed=(e,a)=>L(s=>({...s,[e]:a})),eo=async e=>{e?.preventDefault?.(),I(!0),k({type:"",message:""});try{let e={...U,ldapBaseDn:U.ldapUserBaseDn,ldapAllowedUsers:U.ldapAllowedUsers};e.ldapBindPassword||delete e.ldapBindPassword;let a=await ee(e);L(e=>({...e,ldapBindPassword:"",ldapEnabled:!0===a.ldapEnabled,ldapUserBaseDn:a.ldapUserBaseDn||a.ldapBaseDn||e.ldapUserBaseDn,ldapLoginAllowedGroupDn:a.ldapLoginAllowedGroupDn||"",ldapAdminGroupDn:a.ldapAdminGroupDn||"",ldapMonitorAdminGroupDn:a.ldapMonitorAdminGroupDn||"",ldapNestedGroups:!1!==a.ldapNestedGroups,ldapAllowedUsers:Array.isArray(a.ldapAllowedUsers)?a.ldapAllowedUsers:e.ldapAllowedUsers})),k({type:"success",message:"LDAP settings saved."})}catch(e){k({type:"error",message:e.message||"Failed to save LDAP settings"})}finally{I(!1)}},ei=async()=>{G(!0),k({type:"",message:""});try{await eo();let e=await fetch("/api/auth/ldap/test",{method:"POST"}),a=await e.json().catch(()=>({}));e.ok&&a.ok?k({type:"success",message:a.message||"LDAP connection OK."}):k({type:"error",message:a.error||"LDAP test failed."})}catch(e){k({type:"error",message:e.message||"LDAP test failed."})}finally{G(!1)}},en=async()=>{F(!0),k({type:"",message:""});try{await eo();let e=await fetch(`/api/auth/ldap/users?q=${encodeURIComponent(B)}`,{cache:"no-store"}),a=await e.json().catch(()=>({}));e.ok?(T(a.users||[]),k({type:"success",message:`Loaded ${(a.users||[]).length} LDAP user(s).`})):k({type:"error",message:a.error||"Failed to load LDAP users."})}catch(e){k({type:"error",message:e.message||"Failed to load LDAP users."})}finally{F(!1)}},ec=e=>{let a=String(e||"").trim();a&&L(e=>{let s=new Set(e.ldapAllowedUsers||[]);return s.has(a)?s.delete(a):s.add(a),{...e,ldapAllowedUsers:[...s]}})},ep=async(a=_.authMode||"password")=>{let s=_.oidcIssuerUrl.trim(),t=_.oidcClientId.trim(),l=_.oidcScopes.trim(),r=_.oidcLoginLabel.trim(),d=V.trim();if("password"!==a&&(!s||!t||!d)&&!e.oidcConfigured)return void J({type:"error",message:"Issuer URL, client ID, and client secret are required to enable OIDC."});H(!0),J({type:"",message:""});try{let e={authMode:a,oidcIssuerUrl:s,oidcClientId:t,oidcScopes:l||"openid profile email",oidcLoginLabel:r||"Sign in with OIDC"};d&&(e.oidcClientSecret=d);let o=await ee(e);$({authMode:o.authMode||a,oidcIssuerUrl:o.oidcIssuerUrl||s,oidcClientId:o.oidcClientId||t,oidcScopes:o.oidcScopes||l||"openid profile email",oidcLoginLabel:o.oidcLoginLabel||r||"Sign in with OIDC"}),q(""),J({type:"success",message:"OIDC settings saved."})}catch(e){J({type:"error",message:e.message||"Failed to save OIDC settings"})}finally{H(!1)}};return s?(0,t.jsx)("div",{className:"p-8 text-text-muted",children:"Loading settings..."}):(0,t.jsxs)("div",{className:"mx-auto max-w-6xl space-y-6 p-6",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("h1",{className:"text-3xl font-bold text-text-main",children:"Settings"}),(0,t.jsx)("p",{className:"mt-1 text-text-muted",children:"Configure local dashboard login, LDAP/Active Directory login, and OIDC login."})]}),(0,t.jsxs)(o,{icon:"view_sidebar",title:"Sidebar tools",desc:"Show or hide advanced dashboard tools to keep the sidebar clean.",children:[(0,t.jsx)(c,{title:"Show Advanced tools",desc:"When disabled, Media / Web, AI Traffic Gateway, CLI Tools, Proxy Pools, Skills, Console Log and Translator are hidden from the sidebar. Core admin pages remain visible.",checked:!1!==e.sidebarAdvancedToolsVisible,onChange:ea}),(0,t.jsx)(d,{status:X})]}),(0,t.jsx)(o,{icon:"shield",title:"Dashboard Login",desc:"Local account remains available even when LDAP is enabled.",children:(0,t.jsxs)("div",{className:"grid gap-6 lg:grid-cols-2",children:[(0,t.jsxs)("form",{onSubmit:es,className:"space-y-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Local account"}),(0,t.jsx)(i,{label:"Local username",children:(0,t.jsx)(n,{value:D,onChange:e=>A(e.target.value)})}),(0,t.jsx)("button",{className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white",children:"Save account"}),(0,t.jsx)(d,{status:N})]}),(0,t.jsxs)("form",{onSubmit:et,className:"space-y-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Local password"}),e.hasPassword&&(0,t.jsx)(i,{label:"Current password",children:(0,t.jsx)(n,{type:"password",value:u.current,onChange:e=>m({...u,current:e.target.value}),required:!0})}),(0,t.jsx)(i,{label:"New password",children:(0,t.jsx)(n,{type:"password",value:u.new,onChange:e=>m({...u,new:e.target.value}),required:!0})}),(0,t.jsx)(i,{label:"Confirm password",children:(0,t.jsx)(n,{type:"password",value:u.confirm,onChange:e=>m({...u,confirm:e.target.value}),required:!0})}),(0,t.jsx)("button",{disabled:h,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:e.hasPassword?"Update Password":"Set Password"}),(0,t.jsx)(d,{status:b})]})]})}),(0,t.jsxs)(o,{icon:"database",title:"Database Backup",desc:"Export or restore the local bluerouter configuration database.",children:[(0,t.jsxs)("div",{className:"flex flex-wrap items-center gap-3",children:[(0,t.jsx)("button",{onClick:el,disabled:y,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:"Download Backup"}),(0,t.jsx)("button",{onClick:()=>f.current?.click(),disabled:y,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main hover:border-primary/50 disabled:opacity-50",children:"Import Backup"}),(0,t.jsx)("input",{ref:f,type:"file",accept:"application/json",className:"hidden",onChange:er})]}),(0,t.jsx)(d,{status:j})]}),(0,t.jsx)(o,{icon:"corporate_fare",title:"LDAP / Active Directory Login",desc:"Search users from a User Base DN, restrict login by group DN, and grant admin by group DN. The old Selected LDAP users list is kept as a manual admin list.",children:(0,t.jsxs)("form",{onSubmit:eo,className:"space-y-5",children:[(0,t.jsx)("div",{className:"flex flex-wrap gap-3",children:(0,t.jsx)("button",{type:"button",onClick:()=>ed("ldapEnabled",!U.ldapEnabled),className:`rounded-xl px-3 py-2 text-sm font-semibold ${U.ldapEnabled?"bg-primary text-white":"border border-border text-text-muted"}`,children:U.ldapEnabled?"Enabled":"Disabled"})}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(i,{label:"LDAP URL",children:(0,t.jsx)(n,{value:U.ldapUrl,onChange:e=>ed("ldapUrl",e.target.value),placeholder:"ldap://dc01.company.local:389"})}),(0,t.jsx)(i,{label:"LDAP User Base DN",hint:"OU/container/domain where user objects are searched. Do not use a group DN here.",children:(0,t.jsx)(n,{value:U.ldapUserBaseDn,onChange:e=>ed("ldapUserBaseDn",e.target.value),placeholder:"OU=Users,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(i,{label:"LDAP Bind DN",children:(0,t.jsx)(n,{value:U.ldapBindDn,onChange:e=>ed("ldapBindDn",e.target.value),placeholder:"CN=svc-bluerouter,OU=Service Accounts,DC=company,DC=local"})}),(0,t.jsx)(i,{label:"LDAP Bind Password",children:(0,t.jsx)(n,{type:"password",value:U.ldapBindPassword,onChange:e=>ed("ldapBindPassword",e.target.value),placeholder:e.ldapHasBindPassword?"Saved — leave blank to keep":"Service account password"})}),(0,t.jsx)(i,{label:"LDAP Login Allowed Group DN",hint:"Only members of this group can log in. Leave blank to allow any valid LDAP user.",children:(0,t.jsx)(n,{value:U.ldapLoginAllowedGroupDn,onChange:e=>ed("ldapLoginAllowedGroupDn",e.target.value),placeholder:"CN=Apikeys_Groups,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(i,{label:"LDAP Admin Group DN",hint:"Members of this group get full admin dashboard access.",children:(0,t.jsx)(n,{value:U.ldapAdminGroupDn,onChange:e=>ed("ldapAdminGroupDn",e.target.value),placeholder:"CN=BlueRouter_Admins,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(i,{label:"LDAP Monitor Admin Group DN",hint:"Members can use only Endpoint, API Keys, Usage, Analytics, Quota Tracker and Prompt Logs with admin-like permissions inside those tabs.",children:(0,t.jsx)(n,{value:U.ldapMonitorAdminGroupDn,onChange:e=>ed("ldapMonitorAdminGroupDn",e.target.value),placeholder:"CN=BlueRouter_Monitor_Admins,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})})]}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(i,{label:"User search filter",hint:"Use {{username}} placeholder.",children:(0,t.jsx)(n,{value:U.ldapUserSearchFilter,onChange:e=>ed("ldapUserSearchFilter",e.target.value)})}),(0,t.jsx)(i,{label:"Login group mode",hint:"Nested groups uses AD matching rule 1.2.840.113556.1.4.1941.",children:(0,t.jsx)(c,{title:"Nested group membership",desc:"Recommended for Active Directory nested groups.",checked:U.ldapNestedGroups,onChange:e=>ed("ldapNestedGroups",e)})}),(0,t.jsx)(i,{label:"Username attribute",children:(0,t.jsx)(n,{value:U.ldapUserNameAttribute,onChange:e=>ed("ldapUserNameAttribute",e.target.value)})}),(0,t.jsx)(i,{label:"Display attribute",children:(0,t.jsx)(n,{value:U.ldapUserDisplayAttribute,onChange:e=>ed("ldapUserDisplayAttribute",e.target.value)})}),(0,t.jsx)(i,{label:"Email attribute",children:(0,t.jsx)(n,{value:U.ldapUserEmailAttribute,onChange:e=>ed("ldapUserEmailAttribute",e.target.value)})}),(0,t.jsx)(i,{label:"Connect timeout ms",children:(0,t.jsx)(n,{type:"number",value:U.ldapConnectTimeoutMs,onChange:e=>ed("ldapConnectTimeoutMs",e.target.value)})})]}),(0,t.jsx)(c,{title:"Reject invalid TLS certificates",desc:"Disable only for test/self-signed LDAP TLS.",checked:U.ldapTlsRejectUnauthorized,onChange:e=>ed("ldapTlsRejectUnauthorized",e)}),(0,t.jsxs)("div",{className:"rounded-2xl border border-border bg-background p-4",children:[(0,t.jsxs)("div",{className:"mb-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Manual admin users / LDAP owner list"}),(0,t.jsx)("p",{className:"mt-1 text-xs text-text-muted",children:"Users loaded here come from Login Allowed Group DN when set. Selected users are also treated as manual admins for backward compatibility."})]}),(0,t.jsxs)("div",{className:"mb-3 flex gap-2",children:[(0,t.jsx)(n,{value:B,onChange:e=>M(e.target.value),placeholder:"Search users..."}),(0,t.jsx)("button",{type:"button",onClick:en,disabled:R,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main disabled:opacity-50",children:R?"Loading...":"Load users"})]}),E.length>0&&(0,t.jsx)("div",{className:"max-h-72 overflow-auto rounded-xl border border-border",children:E.map(e=>{let a=U.ldapAllowedUsers.includes(e.username);return(0,t.jsxs)("button",{type:"button",onClick:()=>ec(e.username),className:`flex w-full items-center justify-between gap-3 border-b border-border px-3 py-2 text-left text-sm last:border-b-0 ${a?"bg-primary/10":"bg-background hover:bg-surface"}`,children:[(0,t.jsxs)("span",{children:[(0,t.jsx)("span",{className:"font-semibold text-text-main",children:e.displayName||e.username}),(0,t.jsxs)("span",{className:"ml-2 text-text-muted",children:[e.username,e.email?` \xb7 ${e.email}`:""]})]}),(0,t.jsx)("span",{className:"material-symbols-outlined text-primary",children:a?"check_circle":"radio_button_unchecked"})]},e.dn||e.username)})}),(0,t.jsxs)("div",{className:"mt-3",children:[(0,t.jsxs)("div",{className:"mb-2 text-sm font-semibold text-text-main",children:["Selected manual admin users (",U.ldapAllowedUsers.length,")"]}),0===U.ldapAllowedUsers.length?(0,t.jsx)("div",{className:"text-sm text-text-muted",children:"No users selected."}):(0,t.jsx)("div",{className:"flex flex-wrap gap-2",children:U.ldapAllowedUsers.map(e=>(0,t.jsxs)("button",{type:"button",onClick:()=>ec(e),className:"rounded-full border border-primary/30 bg-primary/10 px-3 py-1 text-xs text-primary",children:[e," \xd7"]},e))})]})]}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-3",children:[(0,t.jsx)("button",{type:"button",onClick:ei,disabled:O,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main disabled:opacity-50",children:O?"Testing...":"Save & test LDAP"}),(0,t.jsx)("button",{type:"submit",disabled:P,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:P?"Saving...":"Save LDAP settings"})]}),(0,t.jsx)(d,{status:S})]})}),(0,t.jsxs)(o,{icon:"lock_open",title:"OIDC Dashboard Login",desc:"oidc"===e.authMode?"OIDC active":"both"===e.authMode?"Password + OIDC active":"Optional SSO via Authentik/Keycloak/Google",children:[(0,t.jsx)("button",{type:"button",onClick:()=>Q(e=>!e),className:"mb-4 rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main",children:W?"Hide OIDC settings":"Show OIDC settings"}),W&&(0,t.jsxs)("div",{className:"space-y-4",children:[(0,t.jsx)("div",{className:"grid gap-3 md:grid-cols-3",children:[{value:"password",title:"Password/LDAP",desc:"Keep local and LDAP login."},{value:"oidc",title:"OIDC only",desc:"Disable local/LDAP login when configured."},{value:"both",title:"Both",desc:"Allow either OIDC or local/LDAP."}].map(e=>{let a=_.authMode===e.value;return(0,t.jsxs)("button",{type:"button",onClick:()=>$(a=>({...a,authMode:e.value})),className:`rounded-xl border p-3 text-left ${a?"border-primary bg-primary/10":"border-border bg-background hover:border-primary/40"}`,children:[(0,t.jsx)("div",{className:"font-semibold text-text-main",children:e.title}),(0,t.jsx)("div",{className:"mt-1 text-xs text-text-muted",children:e.desc})]},e.value)})}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(i,{label:"Issuer URL",children:(0,t.jsx)(n,{value:_.oidcIssuerUrl,onChange:e=>$({..._,oidcIssuerUrl:e.target.value})})}),(0,t.jsx)(i,{label:"Client ID",children:(0,t.jsx)(n,{value:_.oidcClientId,onChange:e=>$({..._,oidcClientId:e.target.value})})}),(0,t.jsx)(i,{label:"Client Secret",children:(0,t.jsx)(n,{type:"password",value:V,onChange:e=>q(e.target.value),placeholder:e.oidcConfigured?"Saved — leave blank to keep":"Client secret"})}),(0,t.jsx)(i,{label:"Scopes",children:(0,t.jsx)(n,{value:_.oidcScopes,onChange:e=>$({..._,oidcScopes:e.target.value})})}),(0,t.jsx)(i,{label:"Login label",children:(0,t.jsx)(n,{value:_.oidcLoginLabel,onChange:e=>$({..._,oidcLoginLabel:e.target.value})})})]}),(0,t.jsx)("button",{type:"button",onClick:()=>ep(),disabled:K,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:K?"Saving...":"Save OIDC settings"}),(0,t.jsx)(d,{status:z})]})]})]})}}},e=>{e.O(0,[8441,3794,7358],()=>e(e.s=7973)),_N_E=e.O()}]);

package/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bluerouter-app",
-  "version": "2.0.56",
+  "version": "2.0.57",
   "description": "Router web dashboard",
   "private": false,
   "scripts": {

package/package.json

@@ -1,6 +1,6 @@
 {
  "name": "@jheavenknows/bluerouter",
- "version": "2.0.56",
+ "version": "2.0.57",
  "description": "Bluerouter CLI - Start and manage Bluerouter server",
  "bin": {
   "bluerouter": "./cli.js"

package/app/.next-cli-build/static/chunks/app/(dashboard)/dashboard/profile/page-677e8d2d39fe85c9.js

@@ -1 +0,0 @@
-(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[3471],{7973:(e,a,s)=>{Promise.resolve().then(s.bind(s,64561))},64561:(e,a,s)=>{"use strict";s.r(a),s.d(a,{default:()=>p});var t=s(95155),l=s(12115);let r="(|(sAMAccountName={{username}})(userPrincipalName={{username}})(mail={{username}}))";function d({status:e}){if(!e?.message)return null;let a="error"===e.type?"text-red-600 bg-red-50 border-red-200":"text-green-700 bg-green-50 border-green-200";return(0,t.jsx)("div",{className:`mt-3 rounded-xl border px-4 py-3 text-sm ${a}`,children:e.message})}function o({icon:e,title:a,desc:s,children:l}){return(0,t.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-6 shadow-sm",children:[(0,t.jsxs)("div",{className:"mb-5 flex items-start gap-3",children:[e&&(0,t.jsx)("span",{className:"material-symbols-outlined text-primary",children:e}),(0,t.jsxs)("div",{children:[(0,t.jsx)("h2",{className:"text-xl font-bold text-text-main",children:a}),s&&(0,t.jsx)("p",{className:"mt-1 text-sm text-text-muted",children:s})]})]}),l]})}function n({label:e,hint:a,children:s}){return(0,t.jsxs)("label",{className:"block",children:[(0,t.jsx)("span",{className:"mb-1 block text-sm font-semibold text-text-main",children:e}),s,a&&(0,t.jsx)("span",{className:"mt-1 block text-xs text-text-muted",children:a})]})}function i(e){return(0,t.jsx)("input",{...e,className:`w-full rounded-xl border border-border bg-background px-3 py-2 text-sm outline-none focus:border-primary ${e.className||""}`})}function c({title:e,desc:a,checked:s,onChange:l,disabled:r}){return(0,t.jsxs)("div",{className:"flex items-start justify-between gap-4 rounded-xl border border-border bg-background px-4 py-3",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("div",{className:"text-sm font-semibold text-text-main",children:e}),a&&(0,t.jsx)("div",{className:"mt-1 text-xs text-text-muted",children:a})]}),(0,t.jsx)("button",{type:"button",disabled:r,onClick:()=>l(!s),className:`relative mt-0.5 h-6 w-11 rounded-full transition disabled:opacity-50 ${s?"bg-primary":"bg-border"}`,children:(0,t.jsx)("span",{className:`absolute top-0.5 h-5 w-5 rounded-full bg-white transition ${s?"left-5":"left-0.5"}`})})]})}function p(){let[e,a]=(0,l.useState)({}),[s,p]=(0,l.useState)(!0),[u,m]=(0,l.useState)({current:"",new:"",confirm:""}),[x,b]=(0,l.useState)({type:"",message:""}),[h,g]=(0,l.useState)(!1),[y,j]=(0,l.useState)(!1),[w,v]=(0,l.useState)({type:"",message:""}),D=(0,l.useRef)(null),[f,A]=(0,l.useState)("admin"),[N,C]=(0,l.useState)({type:"",message:""}),[U,L]=(0,l.useState)({ldapEnabled:!1,ldapUrl:"",ldapBindDn:"",ldapBindPassword:"",ldapUserBaseDn:"",ldapUserSearchFilter:r,ldapUserNameAttribute:"sAMAccountName",ldapUserDisplayAttribute:"displayName",ldapUserEmailAttribute:"mail",ldapLoginAllowedGroupDn:"",ldapAdminGroupDn:"",ldapMonitorAdminGroupDn:"",ldapNestedGroups:!0,ldapAllowedUsers:[],ldapTlsRejectUnauthorized:!0,ldapConnectTimeoutMs:8e3}),[S,k]=(0,l.useState)({type:"",message:""}),[P,I]=(0,l.useState)(!1),[O,G]=(0,l.useState)(!1),[B,M]=(0,l.useState)(""),[E,T]=(0,l.useState)([]),[R,F]=(0,l.useState)(!1),[_,$]=(0,l.useState)({authMode:"password",oidcIssuerUrl:"",oidcClientId:"",oidcScopes:"openid profile email",oidcLoginLabel:"Sign in with OIDC"}),[q,z]=(0,l.useState)(""),[J,K]=(0,l.useState)({type:"",message:""}),[H,Q]=(0,l.useState)(!1),[V,W]=(0,l.useState)(!1),X=async()=>{p(!0);try{let e=await fetch("/api/settings",{cache:"no-store"}),s=await e.json();a(s),A(s.localLoginUsername||"admin"),L({ldapEnabled:!0===s.ldapEnabled,ldapUrl:s.ldapUrl||"",ldapBindDn:s.ldapBindDn||"",ldapBindPassword:"",ldapUserBaseDn:s.ldapUserBaseDn||s.ldapBaseDn||"",ldapUserSearchFilter:s.ldapUserSearchFilter||r,ldapUserNameAttribute:s.ldapUserNameAttribute||"sAMAccountName",ldapUserDisplayAttribute:s.ldapUserDisplayAttribute||"displayName",ldapUserEmailAttribute:s.ldapUserEmailAttribute||"mail",ldapLoginAllowedGroupDn:s.ldapLoginAllowedGroupDn||"",ldapAdminGroupDn:s.ldapAdminGroupDn||"",ldapMonitorAdminGroupDn:s.ldapMonitorAdminGroupDn||"",ldapNestedGroups:!1!==s.ldapNestedGroups,ldapAllowedUsers:Array.isArray(s.ldapAllowedUsers)?s.ldapAllowedUsers:[],ldapTlsRejectUnauthorized:!1!==s.ldapTlsRejectUnauthorized,ldapConnectTimeoutMs:s.ldapConnectTimeoutMs||8e3}),$({authMode:s.authMode||"password",oidcIssuerUrl:s.oidcIssuerUrl||"",oidcClientId:s.oidcClientId||"",oidcScopes:s.oidcScopes||"openid profile email",oidcLoginLabel:s.oidcLoginLabel||"Sign in with OIDC"}),("oidc"===s.authMode||"both"===s.authMode)&&W(!0)}catch(e){console.log("Failed to fetch settings:",e)}finally{p(!1)}};(0,l.useEffect)(()=>{X()},[]);let Y=async e=>{let s=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)}),t=await s.json().catch(()=>({}));if(!s.ok)throw Error(t.error||"Failed to save settings");return a(e=>({...e,...t})),t},Z=async e=>{e.preventDefault(),C({type:"",message:""});try{let e=await Y({localLoginUsername:f});A(e.localLoginUsername||f||"admin"),C({type:"success",message:"Local account name saved."})}catch(e){C({type:"error",message:e.message})}},ee=async e=>{if(e.preventDefault(),u.new!==u.confirm)return void b({type:"error",message:"Passwords do not match"});g(!0),b({type:"",message:""});try{await Y({currentPassword:u.current,newPassword:u.new}),b({type:"success",message:"Password updated successfully"}),m({current:"",new:"",confirm:""})}catch(e){b({type:"error",message:e.message||"Failed to update password"})}finally{g(!1)}},ea=async()=>{j(!0),v({type:"",message:""});try{let e=await fetch("/api/settings/database");if(!e.ok){let a=await e.json().catch(()=>({}));throw Error(a.error||"Failed to export database")}let a=await e.json(),s=JSON.stringify(a,null,2),t=new Blob([s],{type:"application/json"}),l=URL.createObjectURL(t),r=document.createElement("a"),d=new Date().toISOString().replace(/[.:]/g,"-");r.href=l,r.download=`bluerouter-backup-${d}.json`,document.body.appendChild(r),r.click(),document.body.removeChild(r),URL.revokeObjectURL(l),v({type:"success",message:"Database backup downloaded."})}catch(e){v({type:"error",message:e.message||"Failed to export database."})}finally{j(!1)}},es=async e=>{let a=e.target.files?.[0];if(a){j(!0),v({type:"",message:""});try{let e=await a.text(),s=JSON.parse(e),t=await fetch("/api/settings/database",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(s)}),l=await t.json().catch(()=>({}));if(!t.ok)throw Error(l.error||"Failed to import database");await X(),v({type:"success",message:"Database imported successfully."})}catch(e){v({type:"error",message:e.message||"Invalid backup file."})}finally{D.current&&(D.current.value=""),j(!1)}}},et=(e,a)=>L(s=>({...s,[e]:a})),el=async e=>{e?.preventDefault?.(),I(!0),k({type:"",message:""});try{let e={...U,ldapBaseDn:U.ldapUserBaseDn,ldapAllowedUsers:U.ldapAllowedUsers};e.ldapBindPassword||delete e.ldapBindPassword;let a=await Y(e);L(e=>({...e,ldapBindPassword:"",ldapEnabled:!0===a.ldapEnabled,ldapUserBaseDn:a.ldapUserBaseDn||a.ldapBaseDn||e.ldapUserBaseDn,ldapLoginAllowedGroupDn:a.ldapLoginAllowedGroupDn||"",ldapAdminGroupDn:a.ldapAdminGroupDn||"",ldapMonitorAdminGroupDn:a.ldapMonitorAdminGroupDn||"",ldapNestedGroups:!1!==a.ldapNestedGroups,ldapAllowedUsers:Array.isArray(a.ldapAllowedUsers)?a.ldapAllowedUsers:e.ldapAllowedUsers})),k({type:"success",message:"LDAP settings saved."})}catch(e){k({type:"error",message:e.message||"Failed to save LDAP settings"})}finally{I(!1)}},er=async()=>{G(!0),k({type:"",message:""});try{await el();let e=await fetch("/api/auth/ldap/test",{method:"POST"}),a=await e.json().catch(()=>({}));e.ok&&a.ok?k({type:"success",message:a.message||"LDAP connection OK."}):k({type:"error",message:a.error||"LDAP test failed."})}catch(e){k({type:"error",message:e.message||"LDAP test failed."})}finally{G(!1)}},ed=async()=>{F(!0),k({type:"",message:""});try{await el();let e=await fetch(`/api/auth/ldap/users?q=${encodeURIComponent(B)}`,{cache:"no-store"}),a=await e.json().catch(()=>({}));e.ok?(T(a.users||[]),k({type:"success",message:`Loaded ${(a.users||[]).length} LDAP user(s).`})):k({type:"error",message:a.error||"Failed to load LDAP users."})}catch(e){k({type:"error",message:e.message||"Failed to load LDAP users."})}finally{F(!1)}},eo=e=>{let a=String(e||"").trim();a&&L(e=>{let s=new Set(e.ldapAllowedUsers||[]);return s.has(a)?s.delete(a):s.add(a),{...e,ldapAllowedUsers:[...s]}})},en=async(a=_.authMode||"password")=>{let s=_.oidcIssuerUrl.trim(),t=_.oidcClientId.trim(),l=_.oidcScopes.trim(),r=_.oidcLoginLabel.trim(),d=q.trim();if("password"!==a&&(!s||!t||!d)&&!e.oidcConfigured)return void K({type:"error",message:"Issuer URL, client ID, and client secret are required to enable OIDC."});Q(!0),K({type:"",message:""});try{let e={authMode:a,oidcIssuerUrl:s,oidcClientId:t,oidcScopes:l||"openid profile email",oidcLoginLabel:r||"Sign in with OIDC"};d&&(e.oidcClientSecret=d);let o=await Y(e);$({authMode:o.authMode||a,oidcIssuerUrl:o.oidcIssuerUrl||s,oidcClientId:o.oidcClientId||t,oidcScopes:o.oidcScopes||l||"openid profile email",oidcLoginLabel:o.oidcLoginLabel||r||"Sign in with OIDC"}),z(""),K({type:"success",message:"OIDC settings saved."})}catch(e){K({type:"error",message:e.message||"Failed to save OIDC settings"})}finally{Q(!1)}};return s?(0,t.jsx)("div",{className:"p-8 text-text-muted",children:"Loading settings..."}):(0,t.jsxs)("div",{className:"mx-auto max-w-6xl space-y-6 p-6",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("h1",{className:"text-3xl font-bold text-text-main",children:"Settings"}),(0,t.jsx)("p",{className:"mt-1 text-text-muted",children:"Configure local dashboard login, LDAP/Active Directory login, and OIDC login."})]}),(0,t.jsx)(o,{icon:"shield",title:"Dashboard Login",desc:"Local account remains available even when LDAP is enabled.",children:(0,t.jsxs)("div",{className:"grid gap-6 lg:grid-cols-2",children:[(0,t.jsxs)("form",{onSubmit:Z,className:"space-y-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Local account"}),(0,t.jsx)(n,{label:"Local username",children:(0,t.jsx)(i,{value:f,onChange:e=>A(e.target.value)})}),(0,t.jsx)("button",{className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white",children:"Save account"}),(0,t.jsx)(d,{status:N})]}),(0,t.jsxs)("form",{onSubmit:ee,className:"space-y-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Local password"}),e.hasPassword&&(0,t.jsx)(n,{label:"Current password",children:(0,t.jsx)(i,{type:"password",value:u.current,onChange:e=>m({...u,current:e.target.value}),required:!0})}),(0,t.jsx)(n,{label:"New password",children:(0,t.jsx)(i,{type:"password",value:u.new,onChange:e=>m({...u,new:e.target.value}),required:!0})}),(0,t.jsx)(n,{label:"Confirm password",children:(0,t.jsx)(i,{type:"password",value:u.confirm,onChange:e=>m({...u,confirm:e.target.value}),required:!0})}),(0,t.jsx)("button",{disabled:h,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:e.hasPassword?"Update Password":"Set Password"}),(0,t.jsx)(d,{status:x})]})]})}),(0,t.jsxs)(o,{icon:"database",title:"Database Backup",desc:"Export or restore the local bluerouter configuration database.",children:[(0,t.jsxs)("div",{className:"flex flex-wrap items-center gap-3",children:[(0,t.jsx)("button",{onClick:ea,disabled:y,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:"Download Backup"}),(0,t.jsx)("button",{onClick:()=>D.current?.click(),disabled:y,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main hover:border-primary/50 disabled:opacity-50",children:"Import Backup"}),(0,t.jsx)("input",{ref:D,type:"file",accept:"application/json",className:"hidden",onChange:es})]}),(0,t.jsx)(d,{status:w})]}),(0,t.jsx)(o,{icon:"corporate_fare",title:"LDAP / Active Directory Login",desc:"Search users from a User Base DN, restrict login by group DN, and grant admin by group DN. The old Selected LDAP users list is kept as a manual admin list.",children:(0,t.jsxs)("form",{onSubmit:el,className:"space-y-5",children:[(0,t.jsx)("div",{className:"flex flex-wrap gap-3",children:(0,t.jsx)("button",{type:"button",onClick:()=>et("ldapEnabled",!U.ldapEnabled),className:`rounded-xl px-3 py-2 text-sm font-semibold ${U.ldapEnabled?"bg-primary text-white":"border border-border text-text-muted"}`,children:U.ldapEnabled?"Enabled":"Disabled"})}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(n,{label:"LDAP URL",children:(0,t.jsx)(i,{value:U.ldapUrl,onChange:e=>et("ldapUrl",e.target.value),placeholder:"ldap://dc01.company.local:389"})}),(0,t.jsx)(n,{label:"LDAP User Base DN",hint:"OU/container/domain where user objects are searched. Do not use a group DN here.",children:(0,t.jsx)(i,{value:U.ldapUserBaseDn,onChange:e=>et("ldapUserBaseDn",e.target.value),placeholder:"OU=Users,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(n,{label:"LDAP Bind DN",children:(0,t.jsx)(i,{value:U.ldapBindDn,onChange:e=>et("ldapBindDn",e.target.value),placeholder:"CN=svc-bluerouter,OU=Service Accounts,DC=company,DC=local"})}),(0,t.jsx)(n,{label:"LDAP Bind Password",children:(0,t.jsx)(i,{type:"password",value:U.ldapBindPassword,onChange:e=>et("ldapBindPassword",e.target.value),placeholder:e.ldapHasBindPassword?"Saved — leave blank to keep":"Service account password"})}),(0,t.jsx)(n,{label:"LDAP Login Allowed Group DN",hint:"Only members of this group can log in. Leave blank to allow any valid LDAP user.",children:(0,t.jsx)(i,{value:U.ldapLoginAllowedGroupDn,onChange:e=>et("ldapLoginAllowedGroupDn",e.target.value),placeholder:"CN=Apikeys_Groups,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(n,{label:"LDAP Admin Group DN",hint:"Members of this group get full admin dashboard access.",children:(0,t.jsx)(i,{value:U.ldapAdminGroupDn,onChange:e=>et("ldapAdminGroupDn",e.target.value),placeholder:"CN=BlueRouter_Admins,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(n,{label:"LDAP Monitor Admin Group DN",hint:"Members can use only Endpoint, API Keys, Usage, Analytics, Quota Tracker and Prompt Logs with admin-like permissions inside those tabs.",children:(0,t.jsx)(i,{value:U.ldapMonitorAdminGroupDn,onChange:e=>et("ldapMonitorAdminGroupDn",e.target.value),placeholder:"CN=BlueRouter_Monitor_Admins,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})})]}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(n,{label:"User search filter",hint:"Use {{username}} placeholder.",children:(0,t.jsx)(i,{value:U.ldapUserSearchFilter,onChange:e=>et("ldapUserSearchFilter",e.target.value)})}),(0,t.jsx)(n,{label:"Login group mode",hint:"Nested groups uses AD matching rule 1.2.840.113556.1.4.1941.",children:(0,t.jsx)(c,{title:"Nested group membership",desc:"Recommended for Active Directory nested groups.",checked:U.ldapNestedGroups,onChange:e=>et("ldapNestedGroups",e)})}),(0,t.jsx)(n,{label:"Username attribute",children:(0,t.jsx)(i,{value:U.ldapUserNameAttribute,onChange:e=>et("ldapUserNameAttribute",e.target.value)})}),(0,t.jsx)(n,{label:"Display attribute",children:(0,t.jsx)(i,{value:U.ldapUserDisplayAttribute,onChange:e=>et("ldapUserDisplayAttribute",e.target.value)})}),(0,t.jsx)(n,{label:"Email attribute",children:(0,t.jsx)(i,{value:U.ldapUserEmailAttribute,onChange:e=>et("ldapUserEmailAttribute",e.target.value)})}),(0,t.jsx)(n,{label:"Connect timeout ms",children:(0,t.jsx)(i,{type:"number",value:U.ldapConnectTimeoutMs,onChange:e=>et("ldapConnectTimeoutMs",e.target.value)})})]}),(0,t.jsx)(c,{title:"Reject invalid TLS certificates",desc:"Disable only for test/self-signed LDAP TLS.",checked:U.ldapTlsRejectUnauthorized,onChange:e=>et("ldapTlsRejectUnauthorized",e)}),(0,t.jsxs)("div",{className:"rounded-2xl border border-border bg-background p-4",children:[(0,t.jsxs)("div",{className:"mb-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Manual admin users / LDAP owner list"}),(0,t.jsx)("p",{className:"mt-1 text-xs text-text-muted",children:"Users loaded here come from Login Allowed Group DN when set. Selected users are also treated as manual admins for backward compatibility."})]}),(0,t.jsxs)("div",{className:"mb-3 flex gap-2",children:[(0,t.jsx)(i,{value:B,onChange:e=>M(e.target.value),placeholder:"Search users..."}),(0,t.jsx)("button",{type:"button",onClick:ed,disabled:R,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main disabled:opacity-50",children:R?"Loading...":"Load users"})]}),E.length>0&&(0,t.jsx)("div",{className:"max-h-72 overflow-auto rounded-xl border border-border",children:E.map(e=>{let a=U.ldapAllowedUsers.includes(e.username);return(0,t.jsxs)("button",{type:"button",onClick:()=>eo(e.username),className:`flex w-full items-center justify-between gap-3 border-b border-border px-3 py-2 text-left text-sm last:border-b-0 ${a?"bg-primary/10":"bg-background hover:bg-surface"}`,children:[(0,t.jsxs)("span",{children:[(0,t.jsx)("span",{className:"font-semibold text-text-main",children:e.displayName||e.username}),(0,t.jsxs)("span",{className:"ml-2 text-text-muted",children:[e.username,e.email?` \xb7 ${e.email}`:""]})]}),(0,t.jsx)("span",{className:"material-symbols-outlined text-primary",children:a?"check_circle":"radio_button_unchecked"})]},e.dn||e.username)})}),(0,t.jsxs)("div",{className:"mt-3",children:[(0,t.jsxs)("div",{className:"mb-2 text-sm font-semibold text-text-main",children:["Selected manual admin users (",U.ldapAllowedUsers.length,")"]}),0===U.ldapAllowedUsers.length?(0,t.jsx)("div",{className:"text-sm text-text-muted",children:"No users selected."}):(0,t.jsx)("div",{className:"flex flex-wrap gap-2",children:U.ldapAllowedUsers.map(e=>(0,t.jsxs)("button",{type:"button",onClick:()=>eo(e),className:"rounded-full border border-primary/30 bg-primary/10 px-3 py-1 text-xs text-primary",children:[e," \xd7"]},e))})]})]}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-3",children:[(0,t.jsx)("button",{type:"button",onClick:er,disabled:O,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main disabled:opacity-50",children:O?"Testing...":"Save & test LDAP"}),(0,t.jsx)("button",{type:"submit",disabled:P,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:P?"Saving...":"Save LDAP settings"})]}),(0,t.jsx)(d,{status:S})]})}),(0,t.jsxs)(o,{icon:"lock_open",title:"OIDC Dashboard Login",desc:"oidc"===e.authMode?"OIDC active":"both"===e.authMode?"Password + OIDC active":"Optional SSO via Authentik/Keycloak/Google",children:[(0,t.jsx)("button",{type:"button",onClick:()=>W(e=>!e),className:"mb-4 rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main",children:V?"Hide OIDC settings":"Show OIDC settings"}),V&&(0,t.jsxs)("div",{className:"space-y-4",children:[(0,t.jsx)("div",{className:"grid gap-3 md:grid-cols-3",children:[{value:"password",title:"Password/LDAP",desc:"Keep local and LDAP login."},{value:"oidc",title:"OIDC only",desc:"Disable local/LDAP login when configured."},{value:"both",title:"Both",desc:"Allow either OIDC or local/LDAP."}].map(e=>{let a=_.authMode===e.value;return(0,t.jsxs)("button",{type:"button",onClick:()=>$(a=>({...a,authMode:e.value})),className:`rounded-xl border p-3 text-left ${a?"border-primary bg-primary/10":"border-border bg-background hover:border-primary/40"}`,children:[(0,t.jsx)("div",{className:"font-semibold text-text-main",children:e.title}),(0,t.jsx)("div",{className:"mt-1 text-xs text-text-muted",children:e.desc})]},e.value)})}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(n,{label:"Issuer URL",children:(0,t.jsx)(i,{value:_.oidcIssuerUrl,onChange:e=>$({..._,oidcIssuerUrl:e.target.value})})}),(0,t.jsx)(n,{label:"Client ID",children:(0,t.jsx)(i,{value:_.oidcClientId,onChange:e=>$({..._,oidcClientId:e.target.value})})}),(0,t.jsx)(n,{label:"Client Secret",children:(0,t.jsx)(i,{type:"password",value:q,onChange:e=>z(e.target.value),placeholder:e.oidcConfigured?"Saved — leave blank to keep":"Client secret"})}),(0,t.jsx)(n,{label:"Scopes",children:(0,t.jsx)(i,{value:_.oidcScopes,onChange:e=>$({..._,oidcScopes:e.target.value})})}),(0,t.jsx)(n,{label:"Login label",children:(0,t.jsx)(i,{value:_.oidcLoginLabel,onChange:e=>$({..._,oidcLoginLabel:e.target.value})})})]}),(0,t.jsx)("button",{type:"button",onClick:()=>en(),disabled:H,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:H?"Saving...":"Save OIDC settings"}),(0,t.jsx)(d,{status:J})]})]})]})}}},e=>{e.O(0,[8441,3794,7358],()=>e(e.s=7973)),_N_E=e.O()}]);