Implement WP-0009-T04: Control Plane interactive UI on whynot-design
Builds the Control Plane's browser UI (login, dashboard, Phase
registration, Development Credit entry/proposal/review, credential
admin, audit log) as a FastAPI + Jinja2 app over the already-finished
T03 backend, rather than from scratch — whynot-design's Lit web
components are vendored as static assets (source commit 4b62cffc,
v0.4.1), with lit itself resolved via an esm.sh CDN import map.
Session auth re-checks the credential token against the database on
every request rather than trusting the session cookie's cached rights,
so a mid-session revocation takes effect immediately.
9 new Docker-gated HTTP-level tests via FastAPI's TestClient (no
browser-automation tool available, so real rendering of the <wn-*>
components was never visually verified). All four WP-0009 tasks are
now done; workplan marked finished.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-30 15:43:16 +02:00
|
|
|
{% extends "base.html" %}
|
|
|
|
|
{% block title %}Credentials — Target Revenue Control Plane{% endblock %}
|
|
|
|
|
{% block content %}
|
|
|
|
|
<wn-page-header>
|
|
|
|
|
<span slot="title">Manage credentials (Admin)</span>
|
|
|
|
|
</wn-page-header>
|
|
|
|
|
|
|
|
|
|
{% if new_token %}
|
|
|
|
|
<wn-banner variant="warning">
|
|
|
|
|
New credential issued for <strong>{{ new_token_label }}</strong>. Copy it now —
|
|
|
|
|
it will not be shown again: <code>{{ new_token }}</code>
|
|
|
|
|
</wn-banner>
|
|
|
|
|
{% endif %}
|
|
|
|
|
|
|
|
|
|
<h3>Issue a new credential</h3>
|
2026-08-06 21:41:59 +02:00
|
|
|
<form class="wn-form" method="post" action="{{ root_path }}/admin/credentials">
|
|
|
|
|
<label>Credential label (human name)
|
|
|
|
|
<input name="credential_label" required>
|
|
|
|
|
</label>
|
|
|
|
|
<label>Rights
|
|
|
|
|
<select name="rights">
|
Implement WP-0009-T04: Control Plane interactive UI on whynot-design
Builds the Control Plane's browser UI (login, dashboard, Phase
registration, Development Credit entry/proposal/review, credential
admin, audit log) as a FastAPI + Jinja2 app over the already-finished
T03 backend, rather than from scratch — whynot-design's Lit web
components are vendored as static assets (source commit 4b62cffc,
v0.4.1), with lit itself resolved via an esm.sh CDN import map.
Session auth re-checks the credential token against the database on
every request rather than trusting the session cookie's cached rights,
so a mid-session revocation takes effect immediately.
9 new Docker-gated HTTP-level tests via FastAPI's TestClient (no
browser-automation tool available, so real rendering of the <wn-*>
components was never visually verified). All four WP-0009 tasks are
now done; workplan marked finished.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-30 15:43:16 +02:00
|
|
|
<option value="viewer">viewer</option>
|
|
|
|
|
<option value="contributor">contributor</option>
|
|
|
|
|
<option value="operator">operator</option>
|
|
|
|
|
<option value="admin">admin</option>
|
2026-08-06 21:41:59 +02:00
|
|
|
</select>
|
|
|
|
|
</label>
|
|
|
|
|
<button type="submit">Issue credential</button>
|
Implement WP-0009-T04: Control Plane interactive UI on whynot-design
Builds the Control Plane's browser UI (login, dashboard, Phase
registration, Development Credit entry/proposal/review, credential
admin, audit log) as a FastAPI + Jinja2 app over the already-finished
T03 backend, rather than from scratch — whynot-design's Lit web
components are vendored as static assets (source commit 4b62cffc,
v0.4.1), with lit itself resolved via an esm.sh CDN import map.
Session auth re-checks the credential token against the database on
every request rather than trusting the session cookie's cached rights,
so a mid-session revocation takes effect immediately.
9 new Docker-gated HTTP-level tests via FastAPI's TestClient (no
browser-automation tool available, so real rendering of the <wn-*>
components was never visually verified). All four WP-0009 tasks are
now done; workplan marked finished.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-30 15:43:16 +02:00
|
|
|
</form>
|
|
|
|
|
|
|
|
|
|
<h3>Revoke a credential</h3>
|
2026-08-06 21:41:59 +02:00
|
|
|
<form class="wn-form" method="post" action="{{ root_path }}/admin/credentials/revoke">
|
|
|
|
|
<label>Token to revoke
|
|
|
|
|
<input name="token" required>
|
|
|
|
|
</label>
|
|
|
|
|
<button type="submit" class="secondary">Revoke</button>
|
Implement WP-0009-T04: Control Plane interactive UI on whynot-design
Builds the Control Plane's browser UI (login, dashboard, Phase
registration, Development Credit entry/proposal/review, credential
admin, audit log) as a FastAPI + Jinja2 app over the already-finished
T03 backend, rather than from scratch — whynot-design's Lit web
components are vendored as static assets (source commit 4b62cffc,
v0.4.1), with lit itself resolved via an esm.sh CDN import map.
Session auth re-checks the credential token against the database on
every request rather than trusting the session cookie's cached rights,
so a mid-session revocation takes effect immediately.
9 new Docker-gated HTTP-level tests via FastAPI's TestClient (no
browser-automation tool available, so real rendering of the <wn-*>
components was never visually verified). All four WP-0009 tasks are
now done; workplan marked finished.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-30 15:43:16 +02:00
|
|
|
</form>
|
|
|
|
|
{% endblock %}
|