security hardening + drafts/attachments

This commit is contained in:
2026-02-21 19:10:56 -05:00
parent 1dc99eb681
commit a0105956e4
35 changed files with 4928 additions and 0 deletions

View File

@@ -0,0 +1,45 @@
<!doctype html>
<html>
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>Mastermind — Change Password</title>
<style>
body{font-family:system-ui,-apple-system,Segoe UI,Roboto,Arial,sans-serif;margin:0;background:#0b0f14;color:#e8eef7}
header{background:#111824;border-bottom:1px solid #233043;padding:14px 16px;position:sticky;top:0}
main{max-width:700px;margin:0 auto;padding:16px}
.card{background:#111824;border:1px solid #233043;border-radius:12px;padding:14px;margin:12px 0}
label{display:block;margin:10px 0 6px;color:#a9b7c6}
input{width:100%;padding:12px;border-radius:10px;border:1px solid #233043;background:#0e1520;color:#e8eef7}
button{padding:12px 14px;border-radius:10px;border:1px solid #233043;background:#1c2a3d;color:#e8eef7;margin-top:12px;width:100%}
a{color:#7cc4ff;text-decoration:none}
.muted{color:#a9b7c6;font-size:13px;line-height:1.4}
</style>
</head>
<body>
<header>
<div style="display:flex;justify-content:space-between;align-items:center;gap:10px">
<div style="font-weight:700">Change Password</div>
<div style="display:flex;gap:10px">
<a href="/">Dashboard</a>
<a href="/logout">Logout</a>
</div>
</div>
</header>
<main>
<div class="card">
<p class="muted">This changes your <b>local</b> password (SSO passwords are managed by Google/Microsoft). If you dont have a local identity yet, this will create one.</p>
<form method="post" action="/account/password">
<label>Current password (leave blank if you have no local password yet)</label>
<input name="currentPassword" type="password" />
<label>New password</label>
<input name="newPassword" type="password" required />
<label>Confirm new password</label>
<input name="confirmPassword" type="password" required />
<button type="submit">Update password</button>
</form>
</div>
</main>
</body>
</html>