change the admin password, sign out other sessions and set the domain from a new Account section, applied without a restart (v3.0.156)

@@ -0,0 +1,86 @@1+import type { Context, Hono } from "hono";2+import { html } from "../pages/html.ts";3+import { plural } from "../pages/layout.ts";4+import { isDomain, saveConfig } from "../server/config.ts";5+import { endOtherSessions, liveSessions } from "../server/login.ts";6+import { type AdminContext, adminPage, formField, notice, textFields } from "./console.ts";7+8+const MIN_PASSWORD = 12;9+10+/**11+ * The Account section (June, 2026-09-30): the admin password, the sessions signed in, and the12+ * domain, each written to kepr.toml by Kepr and applied without a restart.13+ */14+export function registerAccount(app: Hono, ctx: AdminContext): void {15+	app.get("/admin/account", (c) => c.html(accountPage(c, ctx, "")));16+17+	app.post("/admin/account", async (c) => {18+		const fields = await textFields(c);19+		const refuse = (error: string) => c.html(accountPage(c, ctx, error), 400);20+		const save = async (change: Partial<typeof ctx.config>) => {21+			await saveConfig(ctx.configPath, { ...ctx.config, ...change });22+			Object.assign(ctx.config, change);23+		};24+		if (fields.action === "password") {25+			const password = fields.password ?? "";26+			const current = fields.current_password ?? "";27+			if (!(await Bun.password.verify(current, ctx.config.adminPasswordHash))) {28+				return refuse("The current password is not right.");29+			}30+			if (password.length < MIN_PASSWORD) {31+				return refuse(`The new password needs at least ${MIN_PASSWORD} characters.`);32+			}33+			if (password !== fields.confirm) return refuse("The two new passwords differ.");34+			await save({ adminPasswordHash: await Bun.password.hash(password, "argon2id") });35+			// Whoever knew the old password is signed out with it.36+			endOtherSessions(ctx, c);37+		} else if (fields.action === "sessions") {38+			endOtherSessions(ctx, c);39+		} else if (fields.action === "domain") {40+			const domain = (fields.domain ?? "").trim().toLowerCase();41+			if (!isDomain(domain)) {42+				return refuse(43+					"The domain is a bare hostname, such as code.example.com, with an optional :port.",44+				);45+			}46+			await save({ domain });47+		} else {48+			return refuse("Unknown action.");49+		}50+		return c.redirect("/admin/account?saved=1", 303);51+	});52+}53+54+function accountPage(c: Context, ctx: AdminContext, error: string): string {55+	const password = (name: string, label: string, autocomplete: string) =>56+		html`<label class="issues-label" for="account-${name}">${label}</label>57+<input class="issues-input" id="account-${name}" name="${name}" type="password"58+autocomplete="${autocomplete}" required>`;59+	const body = html`${notice(error)}60+<section class="repo-section"><h2 class="section-label mono">password</h2>61+<form class="issues-form" method="post" action="/admin/account">62+${formField(c)}<input type="hidden" name="action" value="password">63+${password("current_password", "current password", "current-password")}64+${password("password", `new password (at least ${MIN_PASSWORD} characters)`, "new-password")}65+${password("confirm", "new password again", "new-password")}66+<p class="issue-meta mono">Changing it signs out every other session.</p>67+<button class="issues-submit" type="submit">change password</button>68+</form></section>69+<section class="repo-section"><h2 class="section-label mono">sessions</h2>70+<p>${plural(liveSessions(ctx), "session")} signed in, this one included. A session lasts 30 days.</p>71+<form method="post" action="/admin/account">72+${formField(c)}<input type="hidden" name="action" value="sessions">73+<button class="issues-submit" type="submit">sign out everywhere else</button>74+</form></section>75+<section class="repo-section"><h2 class="section-label mono">domain</h2>76+<form class="issues-form" method="post" action="/admin/account">77+${formField(c)}<input type="hidden" name="action" value="domain">78+<label class="issues-label" for="account-domain">domain</label>79+<input class="issues-input mono" id="account-domain" name="domain" value="${ctx.domain}"80+autocomplete="off" spellcheck="false" required>81+<p class="issue-meta mono">Where Kepr is reached: pages, feeds and install.sh use it, and the console82+accepts forms only from it. Point the new name at this server first, then save and sign in there.</p>83+<button class="issues-submit" type="submit">save domain</button>84+</form></section>`;85+	return adminPage(c, ctx, "account", body);86+}

@@ -0,0 +1,105 @@1+// Covers the console's Account section (June, 2026-09-30): the admin password, other sessions and2+// the domain, all changed without touching kepr.toml by hand, and applied without a restart.3+4+import { beforeAll, describe, expect, test } from "bun:test";5+import { join } from "node:path";6+import { createApp } from "../src/server/app.ts";7+import { loadConfig, saveConfig } from "../src/server/config.ts";8+import { Browser, type Instance, instance, PASSWORD } from "./browser.ts";9+import { makeRepos } from "./fixture.ts";10+11+const NEW_PASSWORD = "a much longer passphrase now";12+13+describe("the Account section", () => {14+	let inst: Instance;15+	let operator: Browser;16+	let configPath: string;17+	const change = (fields: Record<string, string>) =>18+		operator.post("/admin/account", { action: "password", ...fields });19+20+	beforeAll(async () => {21+		const repos = await makeRepos(["app"]);22+		inst = await instance(repos.bucketDir);23+		configPath = join(inst.dataDir, "kepr.toml");24+		await saveConfig(configPath, inst.config);25+		inst.app = createApp(inst.config, inst.kepr, undefined, configPath);26+		operator = new Browser(inst.app);27+		await operator.signIn();28+	});29+30+	test("lists the sections's forms and never the hash", async () => {31+		const page = await (await operator.get("/admin/account")).text();32+		expect(page).toContain('name="current_password"');33+		expect(page).toContain('value="kepr.example"');34+		expect(page).not.toContain("$argon2id$");35+	});36+37+	test("refuses a wrong current password, a short one, or a mismatch", async () => {38+		const cases: [Record<string, string>, string][] = [39+			[40+				{ current_password: "wrong", password: NEW_PASSWORD, confirm: NEW_PASSWORD },41+				"The current password is not right.",42+			],43+			[44+				{ current_password: PASSWORD, password: "short", confirm: "short" },45+				"at least 12 characters",46+			],47+			[48+				{ current_password: PASSWORD, password: NEW_PASSWORD, confirm: "different" },49+				"The two new passwords differ.",50+			],51+		];52+		for (const [fields, error] of cases) {53+			const response = await change(fields);54+			expect(response.status).toBe(400);55+			expect(await response.text()).toContain(error);56+		}57+		expect(58+			await Bun.password.verify(PASSWORD, (await loadConfig(configPath)).adminPasswordHash),59+		).toBe(true);60+	});61+62+	test("a new password is saved, works at once, and signs every other session out", async () => {63+		const other = new Browser(inst.app, "198.51.100.9");64+		await other.signIn();65+		const response = await change({66+			current_password: PASSWORD,67+			password: NEW_PASSWORD,68+			confirm: NEW_PASSWORD,69+		});70+		expect(response.status).toBe(303);71+		const saved = await loadConfig(configPath);72+		expect(await Bun.password.verify(NEW_PASSWORD, saved.adminPasswordHash)).toBe(true);73+		expect((await other.get("/admin")).status).toBe(401);74+		expect((await operator.get("/admin")).status).toBe(200);75+		expect((await new Browser(inst.app, "198.51.100.10").signIn(PASSWORD)).status).toBe(401);76+		expect((await new Browser(inst.app, "198.51.100.11").signIn(NEW_PASSWORD)).status).toBe(303);77+	});78+79+	test("signing out everywhere else keeps only this session", async () => {80+		const other = new Browser(inst.app, "198.51.100.12");81+		await other.signIn(NEW_PASSWORD);82+		expect(await (await operator.get("/admin/account")).text()).toMatch(83+			/[2-9] sessions? signed in/,84+		);85+		expect((await operator.post("/admin/account", { action: "sessions" })).status).toBe(303);86+		expect((await other.get("/admin")).status).toBe(401);87+		expect((await operator.get("/admin")).status).toBe(200);88+	});89+90+	test("the domain is checked, saved, and used at once", async () => {91+		const bad = await operator.post("/admin/account", { action: "domain", domain: "not a domain" });92+		expect(bad.status).toBe(400);93+		const moved = await operator.post("/admin/account", {94+			action: "domain",95+			domain: "code.example",96+		});97+		expect(moved.status).toBe(303);98+		expect((await loadConfig(configPath)).domain).toBe("code.example");99+		const origin = "https://code.example";100+		expect((await operator.post("/admin/sync", {}, origin)).status).toBe(303);101+		expect((await operator.post("/admin/sync", {})).status).toBe(403);102+		const page = await (await operator.get("/admin/account")).text();103+		expect(page).toContain('<link rel="canonical" href="https://code.example/admin/account">');104+	});105+});