Files
StarPunk/templates/admin/dashboard.html
Phil Skentelbery 0cca8169ce feat: Implement Phase 4 Web Interface with bugfixes (v0.5.2)
## Phase 4: Web Interface Implementation

Implemented complete web interface with public and admin routes,
templates, CSS, and development authentication.

### Core Features

**Public Routes**:
- Homepage with recent published notes
- Note permalinks with microformats2
- Server-side rendering (Jinja2)

**Admin Routes**:
- Login via IndieLogin
- Dashboard with note management
- Create, edit, delete notes
- Protected with @require_auth decorator

**Development Authentication**:
- Dev login bypass for local testing (DEV_MODE only)
- Security safeguards per ADR-011
- Returns 404 when disabled

**Templates & Frontend**:
- Base layouts (public + admin)
- 8 HTML templates with microformats2
- Custom responsive CSS (114 lines)
- Error pages (404, 500)

### Bugfixes (v0.5.1 → v0.5.2)

1. **Cookie collision fix (v0.5.1)**:
   - Renamed auth cookie from "session" to "starpunk_session"
   - Fixed redirect loop between dev login and admin dashboard
   - Flask's session cookie no longer conflicts with auth

2. **HTTP 404 error handling (v0.5.1)**:
   - Update route now returns 404 for nonexistent notes
   - Delete route now returns 404 for nonexistent notes
   - Follows ADR-012 HTTP Error Handling Policy
   - Pattern consistency across all admin routes

3. **Note model enhancement (v0.5.2)**:
   - Exposed deleted_at field from database schema
   - Enables soft deletion verification in tests
   - Follows ADR-013 transparency principle

### Architecture

**New ADRs**:
- ADR-011: Development Authentication Mechanism
- ADR-012: HTTP Error Handling Policy
- ADR-013: Expose deleted_at Field in Note Model

**Standards Compliance**:
- Uses uv for Python environment
- Black formatted, Flake8 clean
- Follows git branching strategy
- Version incremented per versioning strategy

### Test Results

- 405/406 tests passing (99.75%)
- 87% code coverage
- All security tests passing
- Manual testing confirmed working

### Documentation

- Complete implementation reports in docs/reports/
- Architecture reviews in docs/reviews/
- Design documents in docs/design/
- CHANGELOG updated for v0.5.2

### Files Changed

**New Modules**:
- starpunk/dev_auth.py
- starpunk/routes/ (public, admin, auth, dev_auth)

**Templates**: 10 files (base, pages, admin, errors)
**Static**: CSS and optional JavaScript
**Tests**: 4 test files for routes and templates
**Docs**: 20+ architectural and implementation documents

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-18 23:01:53 -07:00

72 lines
2.2 KiB
HTML

{% extends "admin/base.html" %}
{% block title %}Dashboard - StarPunk Admin{% endblock %}
{% block admin_content %}
<div class="dashboard">
<h2>All Notes</h2>
<div class="dashboard-actions">
<a href="{{ url_for('admin.new_note_form') }}" class="button button-primary">
+ New Note
</a>
</div>
{% if notes %}
<table class="note-table">
<thead>
<tr>
<th>Content</th>
<th>Created</th>
<th>Status</th>
<th>Actions</th>
</tr>
</thead>
<tbody>
{% for note in notes %}
<tr>
<td class="note-content-preview">
<div class="note-excerpt">
{{ note.content[:100] }}{% if note.content|length > 100 %}...{% endif %}
</div>
<small class="note-slug">{{ note.slug }}</small>
</td>
<td class="note-date">
{{ note.created_at.strftime('%b %d, %Y') }}
</td>
<td class="note-status">
{% if note.published %}
<span class="status-badge status-published">Published</span>
{% else %}
<span class="status-badge status-draft">Draft</span>
{% endif %}
</td>
<td class="note-actions">
{% if note.published %}
<a href="{{ url_for('public.note', slug=note.slug) }}" class="button button-small" target="_blank">
View
</a>
{% endif %}
<a href="{{ url_for('admin.edit_note_form', note_id=note.id) }}" class="button button-small">
Edit
</a>
<form action="{{ url_for('admin.delete_note_submit', note_id=note.id) }}" method="POST" class="delete-form" onsubmit="return confirm('Are you sure you want to delete this note?');">
<input type="hidden" name="confirm" value="yes">
<button type="submit" class="button button-small button-danger">Delete</button>
</form>
</td>
</tr>
{% endfor %}
</tbody>
</table>
{% else %}
<div class="empty-state">
<p>No notes yet. Create your first note!</p>
<a href="{{ url_for('admin.new_note_form') }}" class="button button-primary">
Create First Note
</a>
</div>
{% endif %}
</div>
{% endblock %}