docnest 0.1.10 → 0.1.11

package/README.md

@@ -77,7 +77,7 @@ export default defineConfig({
 授权只有一道关口，没有账号、密码组合或角色体系。首次启动时，`passphrase` 会初始化到由
 `stateFile` 指定的本地授权状态文件；状态文件只保存带随机盐的口令哈希，不保存明文口令。
 按极简模式约定，前端会把可回填的口令永久保存到浏览器 `localStorage`（不写入 URL）；每次打开或刷新文档页面，前端都会把当前缓存的口令交给后台重新校验。校验失败会回到口令页，校验成功才会继续打开当前页面；输入页会保留跳转前的目标地址，错误口令会停留在输入页。由于 `localStorage` 是浏览器本地明文存储，请只在受信任的浏览器环境使用此模式。
-`localStorageKey` 可选，用于为不同宿主项目隔离浏览器存储键。右上角的“修改口令”可以动态更新口令，修改后会清除本地缓存并使所有现有会话立即失效，必须使用新口令重新进入。
+`localStorageKey` 可选，用于为不同宿主项目隔离浏览器存储键。内置授权不提供“修改口令”或“退出”按钮；需要更换口令时，停止服务、删除 `stateFile`，修改配置中的 `passphrase` 后重新启动。
 建议把 `.docnest/` 加入宿主项目的 `.gitignore`，并为口令状态文件设置仅当前用户可读写的权限。
 
 授权开启但既没有状态文件，也没有初始 `passphrase` 时，DocNest 会拒绝启动，避免意外以空口令开放文档。

package/dist/auth.d.ts

@@ -12,7 +12,5 @@ export type DocNestAuthManager = {
     verifyPassphrase: (passphrase: string) => boolean;
     createSession: (passphrase: string) => string | null;
     authenticateSession: (token: string | undefined) => boolean;
-    revokeSession: (token: string | undefined) => void;
-    changePassphrase: (currentPassphrase: string, nextPassphrase: string) => boolean;
 };
 export declare function createAuthManager(config: DocNestAuthConfig): DocNestAuthManager;

package/dist/auth.js

@@ -130,11 +130,9 @@ function createAuthManager(config) {
             verifyPassphrase: () => true,
             createSession: () => null,
             authenticateSession: () => true,
-            revokeSession: () => undefined,
-            changePassphrase: () => false,
         };
     }
-    let state = readOrCreateState(config);
+    const state = readOrCreateState(config);
     function verifyPassphrase(passphrase) {
         return matchesHash(passphrase, state);
     }
@@ -163,19 +161,6 @@ function createAuthManager(config) {
         session.expiresAt = Date.now() + sessionMaxAgeSeconds * 1000;
         return true;
     }
-    function revokeSession(token) {
-        if (token)
-            sessions.delete(token);
-    }
-    function changePassphrase(currentPassphrase, nextPassphrase) {
-        if (!verifyPassphrase(currentPassphrase))
-            return false;
-        assertPassphrase(nextPassphrase, '新授权口令');
-        state = createState(nextPassphrase);
-        writeState(config.stateFile, state);
-        sessions.clear();
-        return true;
-    }
     return {
         enabled,
         stateFile: config.stateFile,
@@ -184,7 +169,5 @@ function createAuthManager(config) {
         verifyPassphrase,
         createSession,
         authenticateSession,
-        revokeSession,
-        changePassphrase,
     };
 }

package/dist/server.js

@@ -297,10 +297,7 @@ function renderLoginPage(res, nextPath, error, status = 200) {
 app.get('/login', (req, res) => {
     if (!BUILT_IN_AUTH_ENABLED)
         return res.redirect('/');
-    const message = req.query.changed
-        ? '口令已更新，请使用新口令重新进入。'
-        : '';
-    return renderLoginPage(res, req.query.next, message);
+    return renderLoginPage(res, req.query.next, '');
 });
 app.post('/auth/verify', (req, res) => {
     if (!BUILT_IN_AUTH_ENABLED)
@@ -323,29 +320,6 @@ app.post('/auth/login', (req, res) => {
     setAuthCookie(res, token);
     return res.redirect(nextPath);
 });
-app.post('/auth/logout', (req, res) => {
-    AUTH_MANAGER.revokeSession(readAuthToken(req));
-    clearAuthCookie(res);
-    return res.redirect('/login');
-});
-app.post('/auth/change-password', (req, res) => {
-    if (!BUILT_IN_AUTH_ENABLED || !AUTH_MANAGER.authenticateSession(readAuthToken(req))) {
-        return res.status(401).json({ ok: false, error: '当前会话未授权。' });
-    }
-    try {
-        const changed = AUTH_MANAGER.changePassphrase(String(req.body?.currentPassphrase || ''), String(req.body?.nextPassphrase || ''));
-        if (!changed)
-            return res.status(401).json({ ok: false, error: '当前口令不正确。' });
-        clearAuthCookie(res);
-        return res.json({ ok: true });
-    }
-    catch (error) {
-        return res.status(400).json({
-            ok: false,
-            error: error instanceof Error ? error.message : '新口令无效。',
-        });
-    }
-});
 function documentAuthMiddleware(req, res, next) {
     if (!BUILT_IN_AUTH_ENABLED)
         return next();

package/docnest.config.example.mjs

@@ -34,10 +34,10 @@ export default defineConfig({
   auth: {
     // 极简单口令授权；关闭时文档中心保持本地开放。
     enabled: false,
-    // 仅首次启动且授权状态文件不存在时使用，之后可在页面内修改。
+    // 仅首次启动且授权状态文件不存在时使用；更换口令需手动删除状态文件后重启。
     passphrase: '',
     stateFile: '.docnest/auth.json',
-    // 前端 localStorage 的键；口令会永久保存在浏览器本地，直到用户退出或修改口令。
+    // 前端 localStorage 的键；口令会永久保存在浏览器本地，直到手动清除或口令失效。
     localStorageKey: 'my-project:auth-passphrase',
     sessionTtlMinutes: 24 * 60,
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "docnest",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "可复用的本地 Markdown 文档中心",
   "repository": {
     "type": "git",

package/server/static/css/styles.css

@@ -5778,43 +5778,6 @@ html.docnest-auth-pending::before {
   font-size: 0.9rem;
 }
 
-.auth-actions {
-  display: inline-flex;
-  align-items: center;
-  gap: 0.4rem;
-}
-
-.auth-logout-form {
-  display: inline-flex;
-  margin: 0;
-}
-
-.auth-change-password-btn,
-.auth-logout-btn {
-  white-space: nowrap;
-}
-
-.auth-modal[hidden] {
-  display: none;
-}
-
-.auth-modal {
-  position: fixed;
-  inset: 0;
-  z-index: 1000;
-  display: grid;
-  place-items: center;
-  padding: 1.25rem;
-}
-
-.auth-modal-backdrop {
-  position: absolute;
-  inset: 0;
-  background: rgba(10, 16, 24, 0.42);
-  backdrop-filter: blur(4px);
-}
-
-.auth-modal-card,
 .auth-login-card {
   position: relative;
   z-index: 1;
@@ -5825,25 +5788,11 @@ html.docnest-auth-pending::before {
   box-shadow: 0 24px 70px rgba(17, 29, 40, 0.2);
 }
 
-.auth-modal-card {
-  width: min(100%, 440px);
-  padding: 1.5rem;
-}
-
-.auth-modal-header {
-  display: flex;
-  align-items: flex-start;
-  justify-content: space-between;
-  gap: 1rem;
-}
-
-.auth-modal-header h2,
 .auth-login-card h1 {
   margin: 0;
   color: var(--linear-text, #18212a);
 }
 
-.auth-modal-eyebrow,
 .auth-login-eyebrow {
   margin: 0 0 0.35rem;
   color: var(--linear-accent, #267c83);
@@ -5852,35 +5801,12 @@ html.docnest-auth-pending::before {
   letter-spacing: 0.12em;
 }
 
-.auth-modal-close {
-  width: 2rem;
-  height: 2rem;
-  padding: 0;
-  border: 0;
-  border-radius: 999px;
-  color: var(--linear-text-muted, #63727f);
-  background: transparent;
-  font-size: 1.5rem;
-  line-height: 1;
-  cursor: pointer;
-}
-
-.auth-modal-close:hover {
-  background: var(--linear-bg-subtle, #eef2f5);
-}
-
-.auth-modal-help,
 .auth-login-description,
 .auth-login-note {
   color: var(--linear-text-muted, #63727f);
   line-height: 1.6;
 }
 
-.auth-modal-help {
-  margin: 1rem 0 1.25rem;
-  font-size: 0.875rem;
-}
-
 .auth-form {
   display: grid;
   gap: 0.9rem;
@@ -5920,15 +5846,7 @@ html.docnest-auth-pending::before {
   font-size: 0.875rem;
 }
 
-.auth-modal-actions {
-  display: flex;
-  justify-content: flex-end;
-  gap: 0.6rem;
-  margin-top: 0.25rem;
-}
-
-.auth-primary-btn,
-.auth-secondary-btn {
+.auth-primary-btn {
   min-height: 2.5rem;
   padding: 0.55rem 0.95rem;
   border-radius: 8px;
@@ -5943,12 +5861,6 @@ html.docnest-auth-pending::before {
   background: var(--linear-accent, #267c83);
 }
 
-.auth-secondary-btn {
-  border: 1px solid var(--linear-border, #d7dee5);
-  color: var(--linear-text, #18212a);
-  background: var(--linear-bg-subtle, #eef2f5);
-}
-
 .auth-page {
   min-height: 100vh;
   display: grid;
@@ -6010,16 +5922,3 @@ html.docnest-auth-pending::before {
   font-size: 0.75rem;
   text-align: center;
 }
-
-@media (max-width: 768px) {
-  .auth-actions {
-    gap: 0.25rem;
-  }
-
-  .auth-change-password-btn,
-  .auth-logout-btn {
-    min-width: 44px;
-    padding-inline: 0.5rem;
-    font-size: 0.75rem;
-  }
-}

package/server/static/js/core/auth.js

@@ -92,78 +92,6 @@
     document.documentElement.classList.remove('docnest-auth-pending');
   }
 
-  function initChangePassword() {
-    var modal = document.getElementById('auth-change-password-modal');
-    var openButton = document.getElementById('auth-change-password-btn');
-    var form = document.getElementById('auth-change-password-form');
-    var error = document.getElementById('auth-change-password-error');
-    if (!modal || !openButton || !form) return;
-
-    var closeButtons = modal.querySelectorAll('[data-auth-close]');
-
-    function setError(message) {
-      if (!error) return;
-      error.textContent = message || '';
-      error.hidden = !message;
-    }
-
-    function closeModal() {
-      modal.hidden = true;
-      setError('');
-      form.reset();
-    }
-
-    openButton.addEventListener('click', function () {
-      modal.hidden = false;
-      var firstInput = form.querySelector('input');
-      if (firstInput) firstInput.focus();
-    });
-
-    closeButtons.forEach(function (button) {
-      button.addEventListener('click', closeModal);
-    });
-
-    form.addEventListener('submit', async function (event) {
-      event.preventDefault();
-      setError('');
-      var formData = new FormData(form);
-      var nextPassphrase = String(formData.get('nextPassphrase') || '');
-      var confirmPassphrase = String(formData.get('confirmPassphrase') || '');
-      if (nextPassphrase !== confirmPassphrase) {
-        setError('两次输入的新口令不一致。');
-        return;
-      }
-
-      try {
-        var response = await fetch('/auth/change-password', {
-          method: 'POST',
-          credentials: 'same-origin',
-          headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
-          body: JSON.stringify({
-            currentPassphrase: String(formData.get('currentPassphrase') || ''),
-            nextPassphrase: nextPassphrase,
-          }),
-        });
-        var result = await response.json().catch(function () { return {}; });
-        if (!response.ok || !result.ok) {
-          throw new Error(result.error || '修改口令失败，请重试。');
-        }
-        clearPassphrase();
-        window.location.assign('/login?changed=1');
-      } catch (requestError) {
-        setError(requestError instanceof Error ? requestError.message : '修改口令失败，请重试。');
-      }
-    });
-  }
-
-  function initLogout() {
-    document.querySelectorAll('.auth-logout-form').forEach(function (form) {
-      form.addEventListener('submit', function () {
-        clearPassphrase();
-      });
-    });
-  }
-
   function initLoginPage() {
     var form = document.querySelector('.auth-login-form');
     var error = document.querySelector('.auth-login-form .auth-form-error');
@@ -211,8 +139,6 @@
         return;
       }
       removePendingState();
-      initChangePassword();
-      initLogout();
     });
   }
 

package/server/views/partials/header.ejs

@@ -54,52 +54,10 @@
           <span class="theme-icon" aria-hidden="true">A</span>
           <span class="theme-text">跟随系统</span>
         </button>
-        <% if (docsAuthEnabled) { %>
-          <div class="auth-actions" aria-label="文档授权">
-            <button id="auth-change-password-btn" class="header-action-btn auth-change-password-btn" type="button">
-              修改口令
-            </button>
-            <form action="/auth/logout" method="post" class="auth-logout-form">
-              <button class="header-action-btn auth-logout-btn" type="submit">退出</button>
-            </form>
-          </div>
-        <% } %>
       </div>
     </div>
   </div>
 </header>
 <% if (docsAuthEnabled) { %>
-  <div class="auth-modal" id="auth-change-password-modal" hidden>
-    <div class="auth-modal-backdrop" data-auth-close></div>
-    <section class="auth-modal-card" role="dialog" aria-modal="true" aria-labelledby="auth-change-password-title">
-      <div class="auth-modal-header">
-        <div>
-          <p class="auth-modal-eyebrow">DOCUMENT ACCESS</p>
-          <h2 id="auth-change-password-title">修改授权口令</h2>
-        </div>
-        <button type="button" class="auth-modal-close" data-auth-close aria-label="关闭">×</button>
-      </div>
-      <p class="auth-modal-help">修改后所有已打开的文档会退出授权，需要使用新口令重新进入。</p>
-      <form id="auth-change-password-form" class="auth-form">
-        <label>
-          当前口令
-          <input type="password" name="currentPassphrase" autocomplete="current-password" required>
-        </label>
-        <label>
-          新口令
-          <input type="password" name="nextPassphrase" autocomplete="new-password" required>
-        </label>
-        <label>
-          确认新口令
-          <input type="password" name="confirmPassphrase" autocomplete="new-password" required>
-        </label>
-        <p class="auth-form-error" id="auth-change-password-error" role="alert" hidden></p>
-        <div class="auth-modal-actions">
-          <button type="button" class="auth-secondary-btn" data-auth-close>取消</button>
-          <button type="submit" class="auth-primary-btn">保存新口令</button>
-        </div>
-      </form>
-    </section>
-  </div>
   <script src="/static/js/core/auth.js?v=<%= typeof assetVersion !== 'undefined' ? assetVersion : 'dev' %>"></script>
 <% } %>