paskia 0.8.0__tar.gz → 0.8.1__tar.gz

{paskia-0.8.0 → paskia-0.8.1}/PKG-INFO

@@ -1,14 +1,15 @@
 Metadata-Version: 2.4
 Name: paskia
-Version: 0.8.0
+Version: 0.8.1
 Summary: Passkey Auth made easy: all sites and APIs can be guarded even without any changes on the protected site.
 Project-URL: Homepage, https://git.zi.fi/LeoVasanko/paskia
 Project-URL: Repository, https://github.com/LeoVasanko/paskia
 Author: Leo Vasanko
 Keywords: FastAPI,auth_request,forward_auth
-Requires-Python: >=3.10
+Requires-Python: >=3.11
 Requires-Dist: aiofiles>=25.1.0
 Requires-Dist: base64url>=1.0.0
+Requires-Dist: fastapi-vue>=0.3.0
 Requires-Dist: fastapi[standard]>=0.104.1
 Requires-Dist: jsondiff>=2.2.1
 Requires-Dist: msgspec>=0.20.0

{paskia-0.8.0 → paskia-0.8.1}/paskia/_version.py

@@ -28,7 +28,7 @@ version_tuple: VERSION_TUPLE
 commit_id: COMMIT_ID
 __commit_id__: COMMIT_ID
 
-__version__ = version = '0.8.0'
-__version_tuple__ = version_tuple = (0, 8, 0)
+__version__ = version = '0.8.1'
+__version_tuple__ = version_tuple = (0, 8, 1)
 
 __commit_id__ = commit_id = None

{paskia-0.8.0 → paskia-0.8.1}/paskia/config.py

@@ -22,4 +22,3 @@ class PaskiaConfig:
     host: str | None = None
     port: int | None = None
     uds: str | None = None
-    devmode: bool = False

{paskia-0.8.0 → paskia-0.8.1}/paskia/db/__init__.py

@@ -166,6 +166,7 @@ __all__ = [
     "remove_permission_from_organization",
     "remove_permission_from_role",
     "rename_permission",
+    "set_session_host",
     "update_credential_sign_count",
     "update_organization_name",
     "update_permission",

paskia-0.8.1/paskia/fastapi/__main__.py

@@ -0,0 +1,239 @@
+import argparse
+import asyncio
+import json
+import logging
+import os
+from urllib.parse import urlparse
+
+import uvicorn
+from fastapi_vue.hostutil import parse_endpoint
+from uvicorn import Config, Server
+
+from paskia import globals as _globals
+from paskia.bootstrap import bootstrap_if_needed
+from paskia.config import PaskiaConfig
+from paskia.fastapi import app as fastapi_app
+from paskia.fastapi import reset as reset_cmd
+from paskia.util import startupbox
+from paskia.util.hostutil import normalize_origin
+
+DEFAULT_PORT = 4401
+
+EPILOG = """\
+Examples:
+  paskia                      # localhost:4401
+  paskia :8080                # All interfaces, port 8080
+  paskia unix:/tmp/paskia.sock
+  paskia reset [user]         # Generate passkey reset link
+"""
+
+
+def is_subdomain(sub: str, domain: str) -> bool:
+    """Check if sub is a subdomain of domain (or equal)."""
+    sub_parts = sub.lower().split(".")
+    domain_parts = domain.lower().split(".")
+    if len(sub_parts) < len(domain_parts):
+        return False
+    return sub_parts[-len(domain_parts) :] == domain_parts
+
+
+def validate_auth_host(auth_host: str, rp_id: str) -> None:
+    """Validate that auth_host is a subdomain of rp_id."""
+    parsed = urlparse(auth_host if "://" in auth_host else f"//{auth_host}")
+    host = parsed.hostname or parsed.path
+    if not host:
+        raise SystemExit(f"Invalid auth-host: '{auth_host}'")
+    if not is_subdomain(host, rp_id):
+        raise SystemExit(
+            f"auth-host '{auth_host}' is not a subdomain of rp-id '{rp_id}'"
+        )
+
+
+def add_common_options(p: argparse.ArgumentParser) -> None:
+    p.add_argument(
+        "--rp-id", default="localhost", help="Relying Party ID (default: localhost)"
+    )
+    p.add_argument("--rp-name", help="Relying Party name (default: same as rp-id)")
+    p.add_argument(
+        "--origin",
+        action="append",
+        dest="origins",
+        metavar="URL",
+        help="Allowed origin URL(s). May be specified multiple times. If any are specified, only those origins are permitted for WebSocket authentication.",
+    )
+    p.add_argument(
+        "--auth-host",
+        help=(
+            "Dedicated host (optionally with scheme/port) to serve the auth UI at the root,"
+            " e.g. auth.example.com or https://auth.example.com"
+        ),
+    )
+
+
+def main():
+    # Configure logging to remove the "ERROR:root:" prefix
+    logging.basicConfig(level=logging.INFO, format="%(message)s", force=True)
+
+    parser = argparse.ArgumentParser(
+        prog="paskia",
+        description="Paskia authentication server",
+        formatter_class=argparse.RawDescriptionHelpFormatter,
+        epilog=EPILOG,
+    )
+
+    # Primary argument: either host:port or "reset" subcommand
+    parser.add_argument(
+        "hostport",
+        nargs="?",
+        help=(
+            "Endpoint (default: localhost:4401). Forms: host[:port] | :port | "
+            "[ipv6][:port] | ipv6 | unix:/path.sock | 'reset' for credential reset"
+        ),
+    )
+    parser.add_argument(
+        "reset_query",
+        nargs="?",
+        help="For 'reset' command: user UUID or substring of display name",
+    )
+    add_common_options(parser)
+
+    args = parser.parse_args()
+
+    # Detect "reset" subcommand (first positional is "reset")
+    is_reset = args.hostport == "reset"
+
+    if is_reset:
+        endpoints = []
+    else:
+        # Parse endpoint using fastapi_vue.hostutil
+        endpoints = parse_endpoint(args.hostport, DEFAULT_PORT)
+
+    # Extract host/port/uds from first endpoint for config display and site_url
+    ep = endpoints[0] if endpoints else {}
+    host = ep.get("host")
+    port = ep.get("port")
+    uds = ep.get("uds")
+
+    # Collect and normalize origins, handle auth_host
+    origins = [normalize_origin(o) for o in (getattr(args, "origins", None) or [])]
+    if args.auth_host:
+        # Normalize auth_host with scheme
+        if "://" not in args.auth_host:
+            args.auth_host = f"https://{args.auth_host}"
+
+        validate_auth_host(args.auth_host, args.rp_id)
+
+        # If origins are configured, ensure auth_host is included at top
+        if origins:
+            # Insert auth_host at the beginning
+            origins.insert(0, args.auth_host)
+
+    # Remove duplicates while preserving order
+    seen = set()
+    origins = [x for x in origins if not (x in seen or seen.add(x))]
+
+    # Compute site_url and site_path for reset links
+    # Priority: PASKIA_SITE_URL (explicit) > auth_host > first origin with localhost > http://localhost:port
+    explicit_site_url = os.environ.get("PASKIA_SITE_URL")
+    if explicit_site_url:
+        # Explicit site URL from devserver or deployment config
+        site_url = explicit_site_url.rstrip("/")
+        site_path = "/" if args.auth_host else "/auth/"
+    elif args.auth_host:
+        site_url = args.auth_host.rstrip("/")
+        site_path = "/"
+    elif origins:
+        # Find localhost origin if rp_id is localhost, else use first origin
+        localhost_origin = (
+            next((o for o in origins if "://localhost" in o), None)
+            if args.rp_id == "localhost"
+            else None
+        )
+        site_url = (localhost_origin or origins[0]).rstrip("/")
+        site_path = "/auth/"
+    elif args.rp_id == "localhost" and port:
+        # Dev mode: use http with port
+        site_url = f"http://localhost:{port}"
+        site_path = "/auth/"
+    else:
+        site_url = f"https://{args.rp_id}"
+        site_path = "/auth/"
+
+    # Build runtime configuration
+    config = PaskiaConfig(
+        rp_id=args.rp_id,
+        rp_name=args.rp_name or None,
+        origins=origins or None,
+        auth_host=args.auth_host or None,
+        site_url=site_url,
+        site_path=site_path,
+        host=host,
+        port=port,
+        uds=uds,
+    )
+
+    # Export configuration via single JSON env variable for worker processes
+    config_json = {
+        "rp_id": config.rp_id,
+        "rp_name": config.rp_name,
+        "origins": config.origins,
+        "auth_host": config.auth_host,
+        "site_url": config.site_url,
+        "site_path": config.site_path,
+    }
+    os.environ["PASKIA_CONFIG"] = json.dumps(config_json)
+
+    # Initialize globals (without bootstrap yet)
+    asyncio.run(
+        _globals.init(
+            rp_id=config.rp_id,
+            rp_name=config.rp_name,
+            origins=config.origins,
+            bootstrap=False,
+        )
+    )
+
+    # Print startup configuration
+    startupbox.print_startup_config(config)
+
+    # Bootstrap after startup box is printed
+    asyncio.run(bootstrap_if_needed())
+
+    # Handle reset command (no server start)
+    if is_reset:
+        exit_code = reset_cmd.run(args.reset_query)
+        raise SystemExit(exit_code)
+
+    # Dev mode: enable reload when FASTAPI_VUE_FRONTEND_URL is set
+    devmode = bool(os.environ.get("FASTAPI_VUE_FRONTEND_URL"))
+
+    run_kwargs: dict = {
+        "log_level": "info",
+    }
+
+    if devmode:
+        # Security: dev mode must run on localhost:4402 to prevent
+        # accidental public exposure of the Vite dev server
+        if host != "localhost" or port != 4402:
+            raise SystemExit(f"Dev mode requires localhost:4402, got {host}:{port}")
+        run_kwargs["reload"] = True
+        run_kwargs["reload_dirs"] = ["paskia"]
+        # Suppress uvicorn startup messages in dev mode
+        run_kwargs["log_level"] = "warning"
+
+    if len(endpoints) > 1:
+        # Run separate servers for multiple endpoints (e.g. IPv4 + IPv6)
+        async def serve_all():
+            async with asyncio.TaskGroup() as tg:
+                for ep in endpoints:
+                    tg.create_task(
+                        Server(Config(app=fastapi_app, **run_kwargs, **ep)).serve()
+                    )
+
+        asyncio.run(serve_all())
+    else:
+        uvicorn.run("paskia.fastapi:app", **run_kwargs, **endpoints[0])
+
+
+if __name__ == "__main__":
+    main()

{paskia-0.8.0 → paskia-0.8.1}/paskia/fastapi/admin.py

@@ -10,12 +10,12 @@ from paskia.authsession import EXPIRES, reset_expires
 from paskia.fastapi import authz
 from paskia.fastapi.session import AUTH_COOKIE
 from paskia.util import (
-    frontend,
     hostutil,
     passphrase,
     permutil,
     querysafe,
     useragent,
+    vitedev,
 )
 
 app = FastAPI()
@@ -77,7 +77,7 @@ async def general_exception_handler(_request, exc: Exception):  # pragma: no cov
 
 @app.get("/")
 async def adminapp(request: Request, auth=AUTH_COOKIE):
-    return Response(*await frontend.read("/auth/admin/index.html"))
+    return Response(*await vitedev.read("/auth/admin/index.html"))
 
 
 # -------------------- Organizations --------------------

{paskia-0.8.0 → paskia-0.8.1}/paskia/fastapi/api.py

@@ -23,7 +23,7 @@ from paskia.authsession import (
 from paskia.fastapi import authz, session, user
 from paskia.fastapi.session import AUTH_COOKIE, AUTH_COOKIE_NAME
 from paskia.globals import passkey as global_passkey
-from paskia.util import frontend, hostutil, htmlutil, passphrase, userinfo
+from paskia.util import hostutil, htmlutil, passphrase, userinfo, vitedev
 
 bearer_auth = HTTPBearer(auto_error=True)
 
@@ -180,7 +180,7 @@ async def forward_authentication(
         if wants_html:
             # Browser request - return full-page HTML with metadata
             data_attrs = {"mode": e.mode, **e.metadata}
-            html = (await frontend.read("/int/forward/index.html"))[0]
+            html = (await vitedev.read("/int/forward/index.html"))[0]
             html = htmlutil.patch_html_data_attrs(html, **data_attrs)
             return Response(
                 html, status_code=e.status_code, media_type="text/html; charset=UTF-8"

{paskia-0.8.0 → paskia-0.8.1}/paskia/fastapi/mainapp.py

@@ -5,11 +5,18 @@ from pathlib import Path
 
 from fastapi import FastAPI, HTTPException, Request, Response
 from fastapi.responses import FileResponse, RedirectResponse
-from fastapi.staticfiles import StaticFiles
+from fastapi_vue import Frontend
 
 from paskia.fastapi import admin, api, auth_host, ws
 from paskia.fastapi.session import AUTH_COOKIE
-from paskia.util import frontend, hostutil, passphrase
+from paskia.util import hostutil, passphrase, vitedev
+
+# Vue Frontend static files
+frontend = Frontend(
+    Path(__file__).with_name("frontend-build"),
+    cached=["/auth/assets/"],
+)
+
 
 # Path to examples/index.html when running from source tree
 _EXAMPLES_DIR = Path(__file__).parent.parent.parent / "examples"
@@ -43,10 +50,11 @@ async def lifespan(app: FastAPI):  # pragma: no cover - startup path
         raise
 
     # Restore info level logging after startup (suppressed during uvicorn init in dev mode)
-    if frontend.is_dev_mode():
+    if frontend.devmode:
         logging.getLogger("uvicorn").setLevel(logging.INFO)
         logging.getLogger("uvicorn.access").setLevel(logging.INFO)
 
+    await frontend.load()
     yield
 
 
@@ -59,19 +67,11 @@ app.mount("/auth/api/admin/", admin.app)
 app.mount("/auth/api/", api.app)
 app.mount("/auth/ws/", ws.app)
 
-# In dev mode (PASKIA_DEVMODE=1), Vite serves assets directly; skip static files mount
-if not frontend.is_dev_mode():
-    app.mount(
-        "/auth/assets/",
-        StaticFiles(directory=frontend.file("auth", "assets")),
-        name="assets",
-    )
-
 
 @app.get("/auth/restricted/")
 async def restricted_view():
     """Serve the restricted/authentication UI for iframe embedding."""
-    return Response(*await frontend.read("/auth/restricted/index.html"))
+    return Response(*await vitedev.read("/auth/restricted/index.html"))
 
 
 # Navigable URLs are defined here. We support both / and /auth/ as the base path
@@ -86,7 +86,7 @@ async def frontapp(request: Request, response: Response, auth=AUTH_COOKIE):
     The frontend handles mode detection (host mode vs full profile) based on settings.
     Access control is handled via APIs.
     """
-    return Response(*await frontend.read("/auth/index.html"))
+    return Response(*await vitedev.read("/auth/index.html"))
 
 
 @app.get("/admin", include_in_schema=False)
@@ -128,4 +128,8 @@ async def token_link(token: str):
     if not passphrase.is_well_formed(token):
         raise HTTPException(status_code=404)
 
-    return Response(*await frontend.read("/int/reset/index.html"))
+    return Response(*await vitedev.read("/int/reset/index.html"))
+
+
+# Final catch-all route for frontend files (keep at end of file)
+frontend.route(app, "/")

{paskia-0.8.0 → paskia-0.8.1}/pyproject.toml

@@ -22,8 +22,9 @@ dependencies = [
     "jsondiff>=2.2.1",
     "msgspec>=0.20.0",
     "aiofiles>=25.1.0",
+    "fastapi-vue>=0.3.0",
 ]
-requires-python = ">=3.10"
+requires-python = ">=3.11"
 
 [project.urls]
 Homepage = "https://git.zi.fi/LeoVasanko/paskia"
@@ -99,3 +100,5 @@ paskia-migrate = "paskia.migrate:main"
 [tool.hatch.build]
 artifacts = ["paskia/frontend-build"]
 targets.sdist.hooks.custom.path = "scripts/build-frontend.py"
+packages = ["paskia"]
+only-packages = true

paskia-0.8.0/caddy/Caddyfile

@@ -1,25 +0,0 @@
-localhost {
-	# Setup the authentication site at /auth/
-	import auth/setup
-	# Only users with myapp:reports and auth admin permissions
-	handle_path /reports {
-		import auth/require perm=myapp:reports&perm=auth:admin
-		respond "Reports area (protected) for {http.request.header.remote-org-name}" 200
-	}
-	# Public paths (no auth)
-	@public path /favicon.ico /.well-known/*
-	handle @public {
-		root * /var/www/
-        file_server
-	}
-	# Respond with user's display name
-	handle_path /hello {
-		import auth/require ""
-		respond "Hello, {http.request.header.remote-name}! Your permissions: {http.request.header.remote-groups}" 200
-	}
-	# Default route, requires authentication but no authorization
-	handle {
-		import auth/require ""
-		reverse_proxy :3000
-	}
-}

paskia-0.8.0/caddy/Caddyfile.dev

@@ -1,10 +0,0 @@
-localhost {
-	# Forwards API by caddy, bypassing the Vite dev proxy
-	# Avoids bug https://github.com/oven-sh/bun/issues/9882
-	handle /api/* {
-		reverse_proxy :4402   # directly to backend
-	}
-	handle {
-		reverse_proxy :4403   # vite dev server
-	}
-}

paskia-0.8.0/caddy/auth/require

@@ -1,20 +0,0 @@
-# Permission to use within your endpoints that need authentication/authorization
-# Argument is mandatory and provides a query string to /auth/api/forward
-#   "" means just authentication
-#   perm=yourservice:login to require specific permission
-forward_auth {$AUTH_UPSTREAM:localhost:4401} {
-    uri /auth/api/forward?{args[0]}
-    header_up Connection keep-alive  # Much higher performance
-    header_up -Upgrade  # Disable Upgrade: WebSocket
-    copy_headers {
-        Remote-User
-        Remote-Name
-        Remote-Groups
-        Remote-Org
-        Remote-Org-Name
-        Remote-Role
-        Remote-Role-Name
-        Remote-Session-Expires
-        Remote-Credential
-    }
-}

paskia-0.8.0/caddy/auth/setup

@@ -1,6 +0,0 @@
-# Setup auth service at /auth/ and remove any Remote-* headers sent by client (for security)
-header -Remote-*
-@auth_api path /auth /auth/*
-handle @auth_api {
-    reverse_proxy {$AUTH_UPSTREAM::4401}
-}

paskia-0.8.0/coverage-api/.gitignore

@@ -1,2 +0,0 @@
-# Created by coverage.py
-*

paskia-0.8.0/coverage-api/class_index.html

@@ -1,148 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
-    <title>Coverage report</title>
-    <link rel="icon" sizes="32x32" href="favicon_32_cb_58284776.png">
-    <link rel="stylesheet" href="style_cb_8432e98f.css" type="text/css">
-    <script src="coverage_html_cb_bcae5fc4.js" defer></script>
-</head>
-<body class="indexfile">
-<header>
-    <div class="content">
-        <h1>Coverage report:
-            <span class="pc_cov">92%</span>
-        </h1>
-        <aside id="help_panel_wrapper">
-            <input id="help_panel_state" type="checkbox">
-            <label for="help_panel_state">
-                <img id="keyboard_icon" src="keybd_closed_cb_ce680311.png" alt="Show/hide keyboard shortcuts">
-            </label>
-            <div id="help_panel">
-                <p class="legend">Shortcuts on this page</p>
-                <div class="keyhelp">
-                    <p>
-                        <kbd>f</kbd>
-                        <kbd>n</kbd>
-                        <kbd>s</kbd>
-                        <kbd>m</kbd>
-                        <kbd>x</kbd>
-                        <kbd>b</kbd>
-                        <kbd>p</kbd>
-                        <kbd>c</kbd>
-                        &nbsp; change column sorting
-                    </p>
-                    <p>
-                        <kbd>[</kbd>
-                        <kbd>]</kbd>
-                        &nbsp; prev/next file
-                    </p>
-                    <p>
-                        <kbd>?</kbd> &nbsp; show/hide this help
-                    </p>
-                </div>
-            </div>
-        </aside>
-        <form id="filter_container">
-            <input id="filter" type="text" value="" placeholder="filter...">
-            <div>
-                <input id="hide100" type="checkbox" >
-                <label for="hide100">hide covered</label>
-            </div>
-        </form>
-        <h2>
-                <a class="button" href="index.html">Files</a>
-                <a class="button" href="function_index.html">Functions</a>
-                <a class="button current">Classes</a>
-        </h2>
-        <p class="text">
-            <a class="nav" href="https://coverage.readthedocs.io/en/7.12.0">coverage.py v7.12.0</a>,
-            created at 2025-12-06 04:39 +0000
-        </p>
-    </div>
-</header>
-<main id="index">
-    <table class="index" data-sortable>
-        <thead>
-            <tr class="tablehead grouphead">
-                <th class="spacer">&nbsp;</th>
-                <th class="spacer">&nbsp;</th>
-                <th class="spacer">&nbsp;</th>
-                <th class="left" colspan="4">Statements</th>
-                <th class="spacer">&nbsp;</th>
-                <th class="left" colspan="3">Branches</th>
-                <th class="spacer">&nbsp;</th>
-                <th>Total</th>
-            </tr>
-            <tr class="tablehead" title="Click to sort">
-                <th id="file" class="name" aria-sort="none" data-shortcut="f">File<span class="arrows"></span></th>
-                <th id="region" class="name" aria-sort="none" data-default-sort-order="ascending" data-shortcut="n">class<span class="arrows"></span></th>
-                <th class="spacer">&nbsp;</th>
-                <th id="statements_coverage" aria-sort="none" data-default-sort-order="descending">coverage<span class="arrows"></span></th>
-                <th id="statements" aria-sort="none" data-default-sort-order="descending" data-shortcut="s">statements<span class="arrows"></span></th>
-                <th id="missing" aria-sort="none" data-default-sort-order="descending" data-shortcut="m">missing<span class="arrows"></span></th>
-                <th id="excluded" aria-sort="none" data-default-sort-order="descending" data-shortcut="x">excluded<span class="arrows"></span></th>
-                <th class="spacer">&nbsp;</th>
-                <th id="branches_coverage" aria-sort="none" data-default-sort-order="descending">coverage<span class="arrows"></span></th>
-                <th id="branches" aria-sort="none" data-default-sort-order="descending" data-shortcut="b">branches<span class="arrows"></span></th>
-                <th id="partial" aria-sort="none" data-default-sort-order="descending" data-shortcut="p">partial<span class="arrows"></span></th>
-                <th class="spacer">&nbsp;</th>
-                <th id="coverage" aria-sort="none" data-shortcut="c">coverage<span class="arrows"></span></th>
-            </tr>
-        </thead>
-        <tbody>
-            <tr class="region">
-                <td class="name"><a href="z_c9b2e809a7925623_api_py.html">paskia&#8201;/&#8201;fastapi&#8201;/&#8201;api.py</a></td>
-                <td class="name"><a href="z_c9b2e809a7925623_api_py.html"><data value=''><span class='no-noun'>(no class)</span></data></a></td>
-                <td class="spacer">&nbsp;</td>
-                <td data-ratio="105 113">93%</td>
-                <td>113</td>
-                <td>8</td>
-                <td>4</td>
-                <td class="spacer">&nbsp;</td>
-                <td data-ratio="19 22">86%</td>
-                <td>22</td>
-                <td>3</td>
-                <td class="spacer">&nbsp;</td>
-                <td data-ratio="124 135">92%</td>
-            </tr>
-        </tbody>
-        <tfoot>
-            <tr class="total">
-                <td class="name">Total</td>
-                <td class="name">&nbsp;</td>
-                <td class="spacer">&nbsp;</td>
-                <td data-ratio="105 113">93%</td>
-                <td>113</td>
-                <td>8</td>
-                <td>4</td>
-                <td class="spacer">&nbsp;</td>
-                <td data-ratio="19 22">86%</td>
-                <td>22</td>
-                <td>3</td>
-                <td class="spacer">&nbsp;</td>
-                <td data-ratio="124 135">92%</td>
-            </tr>
-        </tfoot>
-    </table>
-    <p id="no_rows">
-        No items found using the specified filter.
-    </p>
-</main>
-<footer>
-    <div class="content">
-        <p>
-            <a class="nav" href="https://coverage.readthedocs.io/en/7.12.0">coverage.py v7.12.0</a>,
-            created at 2025-12-06 04:39 +0000
-        </p>
-    </div>
-    <aside class="hidden">
-        <a id="prevFileLink" class="nav" href=""></a>
-        <a id="nextFileLink" class="nav" href=""></a>
-        <button type="button" class="button_prev_file" data-shortcut="["></button>
-        <button type="button" class="button_next_file" data-shortcut="]"></button>
-        <button type="button" class="button_show_hide_help" data-shortcut="?"></button>
-    </aside>
-</footer>
-</body>
-</html>