tabminal 3.0.26 → 3.0.28

package/public/index.html

@@ -489,6 +489,34 @@
             <p id="add-server-error" class="error-message"></p>
         </div>
     </div>
+    <div id="auth-sessions-modal" class="modal" style="display: none;">
+        <div class="modal-content auth-sessions-content">
+            <h2 id="auth-sessions-title">Login sessions</h2>
+            <p id="auth-sessions-description"></p>
+            <div
+                id="auth-sessions-list"
+                class="auth-sessions-list"
+                aria-live="polite"
+            ></div>
+            <p id="auth-sessions-error" class="error-message"></p>
+            <div class="auth-sessions-actions">
+                <button
+                    id="auth-sessions-revoke-others"
+                    class="danger-button"
+                    type="button"
+                >
+                    Log out others
+                </button>
+                <button
+                    id="auth-sessions-close"
+                    class="secondary-button"
+                    type="button"
+                >
+                    Close
+                </button>
+            </div>
+        </div>
+    </div>
     <div id="agent-setup-modal" class="modal" style="display: none;">
         <div class="modal-content agent-setup-content">
             <h2 id="agent-setup-title">Agent setup</h2>

package/public/modules/url-auth.js

@@ -49,8 +49,8 @@ export function isLikelyAccessLoginResponse(response) {
     return false;
 }
 
-export function buildTokenStorageKey(serverId) {
-    return `tabminal_auth_token:${serverId}`;
+export function buildAuthStateStorageKey(serverId) {
+    return `tabminal_auth_state:${serverId}`;
 }
 
 export function makeSessionKey(serverId, sessionId) {
@@ -69,17 +69,20 @@ export function splitSessionKey(sessionKey) {
 }
 
 export async function hashPassword(password) {
+    const normalized = String(password || '');
     if (window.crypto && window.crypto.subtle) {
         try {
-            const msgBuffer = new TextEncoder().encode(password);
-            const hashBuffer = await crypto.subtle.digest('SHA-256', msgBuffer);
-            const hashArray = Array.from(new Uint8Array(hashBuffer));
-            return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');
-        } catch (e) {
-            console.warn('Web Crypto API failed, falling back to JS implementation', e);
+            const message = new TextEncoder().encode(normalized);
+            const buffer = await window.crypto.subtle.digest('SHA-256', message);
+            const bytes = Array.from(new Uint8Array(buffer));
+            return bytes.map((byte) => {
+                return byte.toString(16).padStart(2, '0');
+            }).join('');
+        } catch (error) {
+            console.warn('Web Crypto API failed, falling back to JS SHA-256', error);
         }
     }
-    return sha256Fallback(password);
+    return sha256Fallback(normalized);
 }
 
 function sha256Fallback(ascii) {
@@ -90,43 +93,60 @@ function sha256Fallback(ascii) {
     const mathPow = Math.pow;
     const maxWord = mathPow(2, 32);
     const lengthProperty = 'length';
-    let i, j;
+    let i;
+    let j;
     let result = '';
     const words = [];
     const asciiBitLength = ascii[lengthProperty] * 8;
     let hash = [
-        0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a,
-        0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19
-    ].slice(0);
+        0x6a09e667,
+        0xbb67ae85,
+        0x3c6ef372,
+        0xa54ff53a,
+        0x510e527f,
+        0x9b05688c,
+        0x1f83d9ab,
+        0x5be0cd19
+    ];
     const k = [
-        0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
-        0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
-        0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
-        0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
-        0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
-        0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
-        0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
-        0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
+        0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5,
+        0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+        0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3,
+        0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+        0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc,
+        0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+        0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7,
+        0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+        0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13,
+        0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+        0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3,
+        0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+        0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5,
+        0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+        0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208,
+        0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
     ];
 
     ascii += '\x80';
     while (ascii[lengthProperty] % 64 - 56) ascii += '\x00';
 
-    for (i = 0; i < ascii[lengthProperty]; i++) {
+    for (i = 0; i < ascii[lengthProperty]; i += 1) {
         j = ascii.charCodeAt(i);
         words[i >> 2] |= j << ((3 - i) % 4) * 8;
     }
-    words[words[lengthProperty]] = ((asciiBitLength / maxWord) | 0);
-    words[words[lengthProperty]] = (asciiBitLength);
+    words[words[lengthProperty]] = (asciiBitLength / maxWord) | 0;
+    words[words[lengthProperty]] = asciiBitLength;
 
     for (j = 0; j < words[lengthProperty];) {
         const w = words.slice(j, j += 16);
         const oldHash = hash;
         hash = hash.slice(0, 8);
 
-        for (i = 0; i < 64; i++) {
-            const w15 = w[i - 15], w2 = w[i - 2];
-            const a = hash[0], e = hash[4];
+        for (i = 0; i < 64; i += 1) {
+            const w15 = w[i - 15];
+            const w2 = w[i - 2];
+            const a = hash[0];
+            const e = hash[4];
             const temp1 = hash[7]
                 + (rightRotate(e, 6) ^ rightRotate(e, 11) ^ rightRotate(e, 25))
                 + ((e & hash[5]) ^ ((~e) & hash[6]))
@@ -136,23 +156,25 @@ function sha256Fallback(ascii) {
                     + (rightRotate(w15, 7) ^ rightRotate(w15, 18) ^ (w15 >>> 3))
                     + w[i - 7]
                     + (rightRotate(w2, 17) ^ rightRotate(w2, 19) ^ (w2 >>> 10))
-                ) | 0
-                );
-            const temp2 = (rightRotate(a, 2) ^ rightRotate(a, 13) ^ rightRotate(a, 22))
-                + ((a & hash[1]) ^ (a & hash[2]) ^ (hash[1] & hash[2]));
+                ) | 0);
+            const temp2 = (
+                rightRotate(a, 2)
+                ^ rightRotate(a, 13)
+                ^ rightRotate(a, 22)
+            ) + ((a & hash[1]) ^ (a & hash[2]) ^ (hash[1] & hash[2]));
             hash = [(temp1 + temp2) | 0].concat(hash);
             hash[4] = (hash[4] + temp1) | 0;
         }
 
-        for (i = 0; i < 8; i++) {
+        for (i = 0; i < 8; i += 1) {
             hash[i] = (hash[i] + oldHash[i]) | 0;
         }
     }
 
-    for (i = 0; i < 8; i++) {
-        for (j = 3; j + 1; j--) {
+    for (i = 0; i < 8; i += 1) {
+        for (j = 3; j + 1; j -= 1) {
             const b = (hash[i] >> (j * 8)) & 255;
-            result += ((b < 16) ? 0 : '') + b.toString(16);
+            result += ((b < 16) ? '0' : '') + b.toString(16);
         }
     }
     return result;

package/public/styles.css

@@ -481,6 +481,10 @@ body {
     transition: background-color 0.2s ease, border-color 0.2s ease;
 }
 
+.server-row.has-auth-sessions .server-main-button {
+    padding-right: 42px;
+}
+
 .server-main-button:hover {
     background-color: var(--bg-surface);
 }
@@ -538,6 +542,50 @@ body {
     transform: translateY(1px);
 }
 
+.server-auth-button {
+    position: absolute;
+    top: 4px;
+    right: 4px;
+    width: 28px;
+    height: 28px;
+    border-radius: 4px;
+    border: 1px solid rgba(255, 255, 255, 0.2);
+    background-color: rgba(0, 0, 0, 0.6);
+    backdrop-filter: blur(4px);
+    -webkit-backdrop-filter: blur(4px);
+    color: var(--text-highlight);
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: 0;
+    opacity: 0.72;
+    z-index: 10;
+    cursor: pointer;
+    transition: all 0.2s ease;
+    font-size: 14px;
+    line-height: 1;
+}
+
+.server-auth-button svg {
+    width: 15px;
+    height: 15px;
+}
+
+.server-row:hover .server-auth-button,
+.server-row:focus-within .server-auth-button {
+    opacity: 1;
+}
+
+.server-auth-button:hover {
+    background-color: rgba(0, 0, 0, 0.8);
+    border-color: rgba(255, 255, 255, 0.4);
+    color: var(--text-highlight);
+}
+
+.server-auth-button:active {
+    transform: translateY(1px);
+}
+
 .server-action-text {
     display: block;
     color: var(--text-muted);
@@ -1203,6 +1251,71 @@ body {
     min-width: 120px;
 }
 
+.auth-sessions-content {
+    max-width: 620px;
+    text-align: left;
+}
+
+.auth-sessions-list {
+    display: flex;
+    flex-direction: column;
+    gap: 0.75rem;
+    max-height: min(50vh, 420px);
+    overflow-y: auto;
+    margin: 1rem 0;
+    padding-right: 0.25rem;
+}
+
+.auth-session-row {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: 1rem;
+    padding: 0.8rem;
+    border: 1px solid var(--border-color);
+    border-radius: 8px;
+    background-color: rgba(255, 255, 255, 0.03);
+}
+
+.auth-session-row.current {
+    border-color: var(--accent-color);
+}
+
+.auth-session-info {
+    min-width: 0;
+}
+
+.auth-session-title {
+    color: var(--text-highlight);
+    font-weight: 700;
+    margin-bottom: 0.35rem;
+}
+
+.auth-session-meta,
+.auth-session-empty {
+    color: var(--text-dim);
+    font-size: 0.82rem;
+    line-height: 1.45;
+}
+
+.auth-session-revoke {
+    width: auto !important;
+    min-width: 92px;
+    flex: 0 0 auto;
+}
+
+.auth-sessions-actions {
+    display: flex;
+    justify-content: flex-end;
+    gap: 0.75rem;
+    margin-top: 1rem;
+}
+
+.auth-sessions-actions button {
+    width: auto;
+    min-width: 130px;
+}
+
 .agent-setup-content {
     max-width: 520px;
     text-align: left;