2 Commits

Author	SHA1	Message	Date
serversdown	f760e81309	style(portal): live-console location page, polished access splash, light/dark toggle ... - Location page rebuilt as a monitoring console: Leq hero readout (mono, level- colored, auto-flips with theme), instrument strip for Lp/Lmax/L1/L10, refined dark Chart.js (mono ticks, thin lines), panel-styled alert history, polished pause overlay. All live-stream/chart/alert JS hooks preserved. - Access page → centered branded splash. - Light/Dark toggle: CSS-variable theme system (structure + level/metric accent colors flip), header sun/moon button, localStorage + no-flash boot script, smooth body transition. On toggle, a 'portal-theme' event re-skins the Chart.js trace and swaps Leaflet tiles (CARTO dark <-> light) + recolors map dots. All JS hook IDs intact (verified); both themes validated to parse + balance. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-11 20:10:29 +00:00
serversdown	6c048a9c30	feat(portal): M1 auth gate — signed magic-URL session + get_current_client ... backend/portal_auth.py: stdlib HMAC-signed session cookie carrying the access- token id (re-validated against the DB each request, so revoke kills live sessions), hash_token, resolve_token, and the get_current_client dependency (raises PortalAuthError). SECRET_KEY env (insecure dev default + warning). routers/portal.py: /portal/enter/{token} mints the cookie -> /portal; /logout; /access; /portal home stub. main.py registers the router + a PortalAuthError handler (HTML access page for pages, 401 JSON for /portal/api/*). Portal shell templates (base, access_required, overview stub), branded dark. Verified: cookie round-trip + tamper/garbage rejection, token resolution (valid/bad), get_current_client (valid/no-cookie/revoked) — 8/8 against a temp DB. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-10 21:36:09 +00:00