Ricardo MonlaandClaude Sonnet 4.6
ead1bf8ffc
- login.html: página de acceso con diseño Quiet Wealth (sin popup del browser) - api/login.php: endpoint POST para iniciar sesión, GET ?action=logout para cerrarla - auth.php: valida sesión PHP ($_SESSION) en lugar de HTTP Basic Auth - ui.js: apiFetch() intercepta 401 y redirige a login.html automáticamente - Todos los fetch() en dashboard, add y historial migrados a apiFetch() - Eliminado docker/htpasswd y auth_basic de NGINX Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
28 lines
821 B
PHP
28 lines
821 B
PHP
<?php
|
|
require_once __DIR__ . '/config.php';
|
|
session_start();
|
|
header('Content-Type: application/json');
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
|
$data = json_decode(file_get_contents('php://input'), true);
|
|
if (isset($data['user'], $data['pass'])
|
|
&& $data['user'] === AUTH_USER
|
|
&& $data['pass'] === AUTH_PASS) {
|
|
$_SESSION['qw_auth'] = true;
|
|
echo json_encode(['status' => 'success']);
|
|
} else {
|
|
http_response_code(401);
|
|
echo json_encode(['status' => 'error', 'message' => 'Usuario o contraseña incorrectos']);
|
|
}
|
|
exit;
|
|
}
|
|
|
|
if (($_GET['action'] ?? '') === 'logout') {
|
|
session_destroy();
|
|
echo json_encode(['status' => 'success']);
|
|
exit;
|
|
}
|
|
|
|
http_response_code(405);
|
|
echo json_encode(['status' => 'error', 'message' => 'Método no permitido']);
|