Sergey Vanyushkin
0cb706e54b
- Add auth routes: /auth/login, /auth/callback, /auth/logout - Add OAuth2 flow with Keycloak using HTTP-only cookies - Add web auth dependencies with role checking - Add profile page (read-only) at /web/profile - Update header with user menu (sign in/out, profile) - Filter posts based on user permissions (hide drafts from guests) - Conditionally show/hide create/edit/delete buttons - Add authorization rules documentation to AGENTS.md - Secure post editing/deletion endpoints with auth checks - Add can_edit, can_delete flags to templates
74 lines
3.8 KiB
HTML
74 lines
3.8 KiB
HTML
{% extends "base.html" %}
|
|
|
|
{% block title %}{{ post.title }} - Blog{% endblock %}
|
|
{% block meta_description %}{{ post.content.value[:160] }}{% endblock %}
|
|
|
|
{% block content %}
|
|
<article class="post-detail" data-testid="post-detail">
|
|
<header class="post-detail-header" data-testid="post-detail-header">
|
|
<h1 class="post-detail-title" data-testid="post-detail-title">{{ post.title }}</h1>
|
|
|
|
<div class="post-detail-meta" data-testid="post-detail-meta">
|
|
<span class="post-card-meta-item" data-testid="post-detail-author">
|
|
<span class="avatar avatar-sm" data-testid="post-detail-author-avatar">{{ post.author_id[0]|upper }}</span>
|
|
<span data-testid="post-detail-author-name">{{ post.author_id }}</span>
|
|
</span>
|
|
<span class="post-card-meta-item" data-testid="post-detail-date">
|
|
{{ post.created_at.strftime('%B %d, %Y') }}
|
|
</span>
|
|
{% if post.published %}
|
|
<span class="badge badge-success" data-testid="post-detail-status">Published</span>
|
|
{% else %}
|
|
<span class="badge" data-testid="post-detail-status">Draft</span>
|
|
{% endif %}
|
|
</div>
|
|
</header>
|
|
|
|
<div class="post-detail-content" data-testid="post-detail-content">
|
|
{{ post.content.value|nl2br }}
|
|
</div>
|
|
|
|
<footer class="post-detail-footer" data-testid="post-detail-footer">
|
|
<div class="post-detail-tags" data-testid="post-detail-tags">
|
|
{% for tag in post.tags %}
|
|
<span class="tag" data-testid="post-detail-tag-{{ loop.index }}">{{ tag }}</span>
|
|
{% endfor %}
|
|
</div>
|
|
|
|
<div class="divider" data-testid="post-detail-divider"></div>
|
|
|
|
<div class="flex justify-between items-center" data-testid="post-detail-actions">
|
|
<a href="/" class="btn" data-testid="btn-back-to-posts">
|
|
<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg" style="margin-right: 0.5rem;">
|
|
<path d="M10 12L6 8L10 4" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>
|
|
</svg>
|
|
Back to posts
|
|
</a>
|
|
|
|
{% if can_edit or can_delete %}
|
|
<div class="flex gap-2" data-testid="post-detail-edit-actions">
|
|
{% if can_edit %}
|
|
<a href="/posts/{{ post.id }}/edit" class="btn" data-testid="btn-edit-post">
|
|
<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg" style="margin-right: 0.5rem;">
|
|
<path d="M11 2L14 5M2 14L3 10L12 1L15 4L6 13L2 14Z" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>
|
|
</svg>
|
|
Edit
|
|
</a>
|
|
{% endif %}
|
|
{% if can_delete %}
|
|
<form action="/posts/{{ post.id }}/delete" method="POST" style="display: inline;" data-testid="form-delete-post">
|
|
<button type="submit" class="btn btn-danger" data-testid="btn-delete-post" onclick="return confirm('Are you sure you want to delete this post?');">
|
|
<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg" style="margin-right: 0.5rem;">
|
|
<path d="M2 4h12M6 4V2a2 2 0 012-2h0a2 2 0 012 2v2m3 0v10a2 2 0 01-2 2H5a2 2 0 01-2-2V4h9z" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>
|
|
</svg>
|
|
Delete
|
|
</button>
|
|
</form>
|
|
{% endif %}
|
|
</div>
|
|
{% endif %}
|
|
</div>
|
|
</footer>
|
|
</article>
|
|
{% endblock %}
|