Stage 2, step 3. Written by Sonnet, reviewed by Opus.
- Six pages named after their mockups: out-domains, out-domain,
out-domain-settings, out-app, out-app-created, out-domain-delete,
with typed page data (view/outbound.go, outbound_app.go), fixtures
and tests. The engine pages dashboard, domain_detail and
domain_delete are gone with their templates and are off
legacy_pages.txt. GET .../settings has its own handler.
- Handlers pass typed data; routes, POST targets, field names,
validation, authorization (both roles, another tenant's id is a 404)
and Cache-Control: no-store on the password page are unchanged.
- Kit, attribute only: Action.Confirm writes data-confirm on a POST
action's form (panel.js already reads it).
- test/e2e/panel_client.go scrapes the new markup (copy fields, the
application row's Edit link). Not run: no Docker here.
Fixes found on the way
- Report address of a domain that follows another user's default: the
select had one "inherit" option, selected, so saving the form
untouched moved the domain to whoever saved it. It now offers that
user's default as "keep" (selected, saves nothing) and "My default
instead" as the change, as the mockup draws it; "keep" on a domain
that does not follow someone else is refused.
- panel.js: syncShowWhen stopped at the first matching rule, so the
auto-limit fields were never toggled with the limit mode. Every
matching rule applies now.
Differences from the mockups, for the owner:
- application rows carry Edit only. New password and Delete are POSTs,
and the kit has no link-styled POST control for a table row; both are
in the application page's head with a confirmation. Drawing them in
the row needs a design: change (as Sign out was);
- the application login is read-only on edit (the handler refuses a
rename); the submit says Create application on the empty form;
- multiplier bounds are the store's 1.5-5, default 2.5;
- "Recalculate" buttons exist where the stored limit is automatic;
- a domain administrator has no add box and no Delete; Delete domain is
global-only on the domain page and on settings;
- a fourth record, Report authorization, appears when the report
address is on another domain; record states missing / weak / not
checked are tags with the explanation under the value;
- refusals are the kit flash above the first box, and those of the
settings forms now show on the settings page; successful saves still
redirect to the domain page;
- the export checkbox is ticked by default, as drawn.
Evidence
- docs/assets/panel-redesign/evidence/out-domains.png, out-domain.png,
out-domain-settings.png, out-app.png, out-app-created.png,
out-domain-delete.png: 1440 px wide, headless Edge, real templates
served locally with their fixtures - NOT from the container (no
Docker on this machine). Taken before the report-address fix, which
does not change what the fixture renders.
- panel/audit.js on the six pages at 1440 and 1280 (text inside
[hidden] blocks skipped): 866 texts checked, problems: [].
- go test -count=1 ./internal/web/...
ok internal/web
ok internal/web/auth
ok internal/web/handlers
ok internal/web/validate
ok internal/web/view
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
85 lines
5.3 KiB
HTML
85 lines
5.3 KiB
HTML
{{/* Domain settings (mockup out-domain-settings.html): the things set once and
|
||
rarely touched. Each box is its own form with its own POST and none of them
|
||
asks for the others' fields; a refusal comes back as the flash above them.
|
||
The delete entry is the global role's. */}}
|
||
{{define "content"}}
|
||
{{template "page_head" .Head}}
|
||
{{if .Flash}}{{template "flash" .Flash}}{{end}}
|
||
|
||
<div class="columns">
|
||
<div class="column is-6">
|
||
{{template "box_open" .Reports}}
|
||
{{template "body_open"}}
|
||
<form class="sp-form" method="post" action="{{.ReportsAction}}">
|
||
<div class="field"><label class="label" for="rua">Aggregate reports (rua=)</label>
|
||
<div class="control"><div class="select is-fullwidth"><select id="rua" name="dmarc_rua_mode" data-custom-mode="custom">{{$sel := .RuaSelected}}{{range .RuaOptions}}
|
||
<option value="{{.Value}}"{{if eq .Value $sel}} selected{{end}}>{{.Label}}</option>{{end}}
|
||
</select></div></div>
|
||
<p class="help">{{template "inline" .RuaHelp}}</p></div>
|
||
<div class="field" data-custom-address><label class="label" for="rua_email">Custom report address</label>
|
||
<div class="control"><input class="input" id="rua_email" name="dmarc_rua_email" type="email" value="{{.RuaCustom}}" placeholder="reports@your-mail-domain.com" autocomplete="off" autocapitalize="none" spellcheck="false"></div></div>
|
||
<button type="submit" class="button is-primary">Save report address</button>
|
||
</form>
|
||
{{template "body_close"}}
|
||
{{template "box_close"}}
|
||
|
||
{{template "box_open" .Export}}
|
||
{{template "body_open"}}
|
||
<p class="mb-3">One file with the DKIM key and every application's password hash — import it on another SelfPost and the published DNS needs no change. <strong>The file is a secret.</strong></p>
|
||
<form class="sp-form" method="post" action="{{.ExportAction}}">
|
||
<div class="field"><label class="checkbox"><input type="checkbox" name="encrypt" value="1"{{if .Encrypt}} checked{{end}} data-encrypt-toggle> Encrypt with a password (<code>.spde</code>)</label></div>
|
||
<div data-encrypt-fields>
|
||
<div class="sp-pair">
|
||
<div class="field"><label class="label" for="encpw">Password</label><div class="control"><input class="input" id="encpw" name="password" type="password" autocomplete="new-password" minlength="{{.PasswordMin}}" placeholder="at least {{.PasswordMin}} characters"></div></div>
|
||
<div class="field"><label class="label" for="encpw2">Repeat password</label><div class="control"><input class="input" id="encpw2" name="password_confirm" type="password" autocomplete="new-password"></div></div>
|
||
</div>
|
||
<p class="help mb-3">Keep this password: SelfPost does not store it, and the file cannot be opened without it.</p>
|
||
</div>
|
||
<button type="submit" class="button"><i class="ti ti-download"></i>Export domain</button>
|
||
</form>
|
||
{{template "body_close"}}
|
||
{{template "box_close"}}
|
||
</div>
|
||
|
||
<div class="column is-6">
|
||
{{template "box_open" .Limit}}
|
||
{{template "body_open"}}
|
||
<form class="sp-form mb-3" id="rate-limit" method="post" action="{{.LimitAction}}">
|
||
<div class="field"><label class="label" for="mode">Limit mode</label>
|
||
<div class="control"><div class="select is-fullwidth"><select id="mode" name="mode" data-ratelimit-mode>
|
||
<option value="manual"{{if not .Rate.Auto}} selected{{end}}>Manual</option>
|
||
<option value="auto"{{if .Rate.Auto}} selected{{end}}>Auto (from statistics)</option>
|
||
</select></div></div></div>
|
||
<div data-manual-fields>
|
||
<div class="sp-pair">
|
||
<div class="field"><label class="label" for="max">Messages (max {{.Rate.L1Messages}})</label><div class="control"><input class="input" id="max" name="max_messages" type="number" min="1" max="{{.Rate.L1Messages}}" value="{{.Rate.MaxMessages}}" placeholder="{{.Rate.L1Messages}}"></div></div>
|
||
<div class="field"><label class="label" for="win">Window, s</label><div class="control"><input class="input" id="win" name="window_seconds" type="number" min="1" value="{{.Rate.Window}}"></div></div>
|
||
</div>
|
||
<p class="help mb-3">Leave the message limit empty to use level 1 only.</p>
|
||
</div>
|
||
<div data-auto-fields>
|
||
<div class="field"><label class="label" for="mult">Multiplier ({{.Rate.MinMultiplier}}–{{.Rate.MaxMultiplier}}, default {{.Rate.DefaultMultiplier}})</label>
|
||
<div class="control"><input class="input" id="mult" name="auto_multiplier" type="number" min="{{.Rate.MinMultiplier}}" max="{{.Rate.MaxMultiplier}}" step="0.1" value="{{.Rate.Multiplier}}"></div>
|
||
<p class="help">{{template "inline" .Rate.AutoHelp}}</p></div>
|
||
</div>
|
||
</form>
|
||
<div class="buttons">
|
||
<button type="submit" class="button is-primary" form="rate-limit">Save limit</button>
|
||
{{if .Rate.Auto}}<form method="post" action="{{.RecalcAction}}"><button type="submit" class="button">Recalculate now</button></form>{{end}}
|
||
{{if .Rate.Active}}<form method="post" action="{{.LimitAction}}" data-confirm="Remove the domain rate limit? Only the global level-1 limit will apply."><input type="hidden" name="clear" value="1"><button type="submit" class="button is-danger is-light">Remove limit</button></form>{{end}}
|
||
</div>
|
||
<p class="sp-muted mt-4">{{template "inline" .LimitNote}}</p>
|
||
{{template "body_close"}}
|
||
{{template "box_close"}}
|
||
{{if .CanDelete}}
|
||
{{template "box_open" .Delete}}
|
||
{{template "body_open"}}
|
||
<p class="mb-3">{{template "inline" .DeleteText}}</p>
|
||
{{template "action" .DeleteLink}}
|
||
{{template "body_close"}}
|
||
{{template "box_close"}}
|
||
{{end}}
|
||
</div>
|
||
</div>
|
||
{{end}}
|