  arnefandCopilot
|
817763887a
|
refactor: replace can_upload boolean with role-based access control
Introduces a three-tier role hierarchy: reader < uploader < admin.
- internal/users/role.go: Role type, roleLevel map, AtLeast(min),
ParseRole() — new roles added by inserting into roleLevel only
- internal/users/store.go: versioned migrations via _schema_version table;
v2 migration adds 'role' column and migrates existing can_upload data;
SetRole() replaces SetUpload(); Session carries Role instead of CanUpload
- internal/web/middleware.go: generic requireRole(minRole) middleware
replaces the ad-hoc requireUpload
- internal/web/handlers.go: upload routes use requireRole(RoleUploader);
listBooks derives canUpload from sess.Role.AtLeast(RoleUploader)
- cmd/admin/main.go: user add --role <reader|uploader|admin>,
user set-role replaces user set-upload
- README, copilot-instructions updated
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
|
2026-08-11 19:43:39 +02:00 |
|
|
arnefandCopilot
|
a66c370de4
|
feat: add authentication and book upload
- Session-based login (username/password, 30-day cookie)
- SQLite user store with bcrypt password hashing (modernc.org/sqlite)
- Per-user upload permission (can_upload flag)
- Admin CLI (cmd/admin) for user management:
user add/list/delete/set-upload
- Upload handler for EPUB/PDF with path-traversal protection
- All routes protected by requireAuth middleware;
/upload additionally requires requireUpload
- Login/logout UI, upload form, logout button in header
- New env var: USERS_DB (default: users.db, gitignored)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
|
2026-08-11 19:11:40 +02:00 |
|
 Arne
|
b163aade71
|
Add ebook metadata, author and cover display
|
2026-08-06 20:40:40 +02:00 |
|
|
arnef
|
060d822654
|
use latest templ and ignore content of books dir
|
2026-08-06 17:18:23 +02:00 |
|
|
Arne
|
8d499c28a7
|
Initial MVP: Go + templ Tolino-optimized ebook library scaffold
|
2026-08-06 06:52:41 +02:00 |
|