d8083eb0c0
- Interface PIN: optional session-level auth gate for the main scanner UI
(Settings → Security → Interface PIN). Salted SHA-256 in config.json,
rate-limited (5 attempts/5 min per IP). /view and viewer auth exempt.
New /login page, before_request hook, GET/POST/DELETE /api/interface/pin,
POST /api/interface/pin/verify, POST /api/interface/logout.
- Bulk disposition tagging: Select mode (filter bar "Vælg" button) reveals
per-card checkboxes. Bulk tag bar at bottom of grid; POST /api/db/disposition/bulk.
Disposition stats bar (total · unreviewed · retain · delete · % reviewed)
updates after every save.
- Google Drive delta scan: uses Drive Changes API when delta is enabled.
Per-user token stored as gdrive:{email} in delta.json. Load-then-merge
save avoids racing with concurrent M365 token writes.
- PDF OCR OOM fix: render one page at a time with convert_from_path
(first_page=N, last_page=N). Added _ocr_mem_ok() psutil guard (500 MB
threshold) before each page render across scan_pdf, redact_fitz_pdf,
redact_pdf.
- Email test message translation fix: routes/email.py returns structured
{ok, method, recipients} instead of a hardcoded English string;
scheduler.js builds the translated message client-side.
- Docs: CHANGELOG, README, TODO, MANUAL-EN, MANUAL-DA all updated.
Lang files (en/da/de) extended with bulk, interface PIN, and SMTP keys.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
87 lines
3.6 KiB
HTML
87 lines
3.6 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>GDPRScanner — {{ LANG.get('interface_pin_login_btn', 'Sign in') }}</title>
|
|
<link rel="stylesheet" href="{{ url_for('static', filename='style.css') }}">
|
|
<style>
|
|
body { display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; }
|
|
.pin-card {
|
|
background: var(--surface);
|
|
border: 1px solid var(--border);
|
|
border-radius: 8px;
|
|
padding: 32px 40px;
|
|
width: min(340px, 92vw);
|
|
box-sizing: border-box;
|
|
}
|
|
.pin-card h1 { font-size: 15px; font-weight: 600; margin: 0 0 6px; color: var(--text); }
|
|
.pin-card p { font-size: 12px; color: var(--muted); margin: 0 0 18px; }
|
|
.pin-input {
|
|
width: 100%; box-sizing: border-box;
|
|
font-size: 22px; letter-spacing: .3em; text-align: center;
|
|
padding: 10px 12px; border-radius: 6px;
|
|
border: 1px solid var(--border); background: var(--bg);
|
|
color: var(--text); outline: none; margin-bottom: 12px;
|
|
}
|
|
.pin-input:focus { border-color: var(--accent); }
|
|
.pin-btn {
|
|
width: 100%; padding: 10px; border: none; border-radius: 6px;
|
|
background: var(--accent); color: #fff; font-size: 13px;
|
|
font-weight: 600; cursor: pointer; font-family: var(--sans);
|
|
}
|
|
.pin-btn:disabled { opacity: .5; cursor: default; }
|
|
.pin-error { font-size: 12px; color: var(--danger); margin-top: 8px; min-height: 16px; text-align: center; }
|
|
</style>
|
|
</head>
|
|
<body data-theme="dark">
|
|
<div class="pin-card">
|
|
<h1>GDPRScanner</h1>
|
|
<p>{{ LANG.get('interface_pin_login_desc', 'Enter the interface PIN to continue.') }}</p>
|
|
<input id="pinInput" class="pin-input" type="password" inputmode="numeric"
|
|
maxlength="8" placeholder="••••" autocomplete="off"
|
|
onkeydown="if(event.key==='Enter')submitPin()">
|
|
<button class="pin-btn" id="pinBtn" onclick="submitPin()">{{ LANG.get('interface_pin_login_btn', 'Continue') }}</button>
|
|
<div class="pin-error" id="pinError"></div>
|
|
</div>
|
|
<script>
|
|
const _L = {
|
|
incorrect: {{ LANG.get('interface_pin_err_incorrect', 'Incorrect PIN.') | tojson }},
|
|
tooMany: {{ LANG.get('interface_pin_err_too_many', 'Too many attempts. Try again later.') | tojson }},
|
|
network: {{ LANG.get('interface_pin_err_network', 'Network error. Please try again.') | tojson }}
|
|
};
|
|
async function submitPin() {
|
|
const pin = document.getElementById('pinInput').value.trim();
|
|
if (!pin) return;
|
|
const btn = document.getElementById('pinBtn');
|
|
const err = document.getElementById('pinError');
|
|
btn.disabled = true;
|
|
err.textContent = '';
|
|
try {
|
|
const r = await fetch('/api/interface/pin/verify', {
|
|
method: 'POST',
|
|
headers: {'Content-Type': 'application/json'},
|
|
body: JSON.stringify({pin})
|
|
});
|
|
if (r.ok) {
|
|
const next = new URLSearchParams(window.location.search).get('next') || '/';
|
|
window.location.href = next;
|
|
} else {
|
|
const d = await r.json().catch(() => ({}));
|
|
err.textContent = r.status === 429 ? (d.error || _L.tooMany) : (d.error || _L.incorrect);
|
|
if (r.status !== 429) {
|
|
document.getElementById('pinInput').value = '';
|
|
document.getElementById('pinInput').focus();
|
|
}
|
|
btn.disabled = false;
|
|
}
|
|
} catch(e) {
|
|
err.textContent = _L.network;
|
|
btn.disabled = false;
|
|
}
|
|
}
|
|
document.getElementById('pinInput').focus();
|
|
</script>
|
|
</body>
|
|
</html>
|