Kyle DammannandClaude Opus 5.5
ef9deaeff7
- Django 5.2 + PostgreSQL 17 via docker compose (app + db, volumes, healthcheck on /healthz, test profile running pytest against Postgres) - Custom e-mail user model with user/admin roles - Invitation-only registration with single-use, hashed, expiring links - Admin area: invitations, role changes, deactivation, password reset via one-time link or temporary password (forced change on login) - First admin created from ADMIN_EMAIL/ADMIN_PASSWORD on startup - Login rate limiting per e-mail and IP (DB-backed, worker-safe) - Proxy middleware honouring X-Forwarded-* only from TRUSTED_PROXIES, optional CLIENT_IP_HEADER (e.g. CF-Connecting-IP) - Security headers (CSP, HSTS, Permissions-Policy), secure __Host- cookies - Mobile-first German UI, CLAUDE.md, README, init-env script - 65 tests for auth, permissions, proxy handling and rate limiting Co-Authored-By: Claude Opus 5.5 <[email protected]>
17 lines
648 B
HTML
17 lines
648 B
HTML
{% extends "base.html" %}
|
||
{% block title %}{{ title }}{% endblock %}
|
||
{% block content %}
|
||
<div class="narrow">
|
||
<h1>{{ title }}</h1>
|
||
<div class="card">
|
||
<label for="secret-value">Nur jetzt sichtbar – bitte kopieren:</label>
|
||
<div class="copyrow">
|
||
<input id="secret-value" type="text" value="{{ value }}" readonly>
|
||
<button type="button" class="button" data-copy="#secret-value">Kopieren</button>
|
||
</div>
|
||
<p class="muted">{{ hint }}</p>
|
||
</div>
|
||
<p><a href="{% url 'accounts:admin_users' %}">Zurück zur Nutzerverwaltung</a> · <a href="{% url 'accounts:admin_invitations' %}">Einladungen</a></p>
|
||
</div>
|
||
{% endblock %}
|