34bf5b5ac2
- embedded Go templates + vanilla ES-module JS + hand-written CSS, no build step
- exact §10 beige light / dark design tokens, square edges (radius 2px),
system font stack, visible focus rings
- theme toggle persisted to localStorage and the user profile
- login/register/change-password pages wired to the auth API
- profile page: avatar upload (image-sniffed, old file cleanup), bio,
contacts, arbitrary extra key/value fields, optimistic-concurrency 409
- role-based top navigation with placeholders for later-phase areas
- GET /files/{id} with scope-based access (session) or signed token (§5.1)
- security headers incl. CSP without unsafe-inline scripts
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
25 lines
903 B
HTML
25 lines
903 B
HTML
{{define "content"}}
|
|
<div class="card">
|
|
<h1>Change password</h1>
|
|
{{if .User.MustChangePassword}}
|
|
<p class="hint">You must set a new password before continuing.</p>
|
|
{{end}}
|
|
<div class="error-box" id="error" role="alert"></div>
|
|
<form id="change-password-form" class="mt">
|
|
<div class="field">
|
|
<label for="current">Current password</label>
|
|
<input type="password" id="current" autocomplete="current-password" required>
|
|
</div>
|
|
<div class="field">
|
|
<label for="new">New password</label>
|
|
<input type="password" id="new" autocomplete="new-password" minlength="8" required>
|
|
</div>
|
|
<div class="field">
|
|
<label for="confirm">Confirm new password</label>
|
|
<input type="password" id="confirm" autocomplete="new-password" minlength="8" required>
|
|
</div>
|
|
<button class="btn primary" type="submit">Change password</button>
|
|
</form>
|
|
</div>
|
|
{{end}}
|