admin/changemaker.lite
1
0
Fork 0
Code Issues Packages Projects Releases 35 Wiki Activity

Bunch of updates for temp users and logging securely.

Browse Source
This commit is contained in:
admin
2025-08-19 12:09:19 -06:00
parent c220ef265a
commit d96d76d104
9 changed files with 170 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files

52
map/app/public/js/auth.js
View File

@@ -25,6 +25,27 @@ export async function checkAuth() {
currentUser = data.user;
currentUser.userType = data.user.userType || 'user'; // Ensure userType is set
// IMMEDIATE console blocking for all non-admin users - before any other code runs
if (currentUser.userType !== 'admin') {
const noop = () => {};
setTimeout(() => {
console.log = noop;
console.debug = noop;
console.info = noop;
console.warn = noop;
console.error = noop;
console.trace = noop;
console.dir = noop;
console.dirxml = noop;
console.group = noop;
console.groupEnd = noop;
console.time = noop;
console.timeEnd = noop;
console.assert = noop;
console.profile = noop;
}, 1000); // Give 1 second for initialization logs, then block
}
// Authentication successful - show the app
document.body.classList.remove('authenticating');
document.body.classList.add('authenticated');
@@ -43,9 +64,19 @@ export async function checkAuth() {
export function updateUserInterface() {
if (!currentUser) return;
/* NEW – add a body class we can target with CSS */
document.body.classList.toggle('temp-user', currentUser.userType === 'temp');
document.body.classList.toggle('admin-user', currentUser.isAdmin === true);
// CRITICAL: Add body class for temp users FIRST
if (currentUser.userType === 'temp') {
document.body.classList.add('temp-user');
} else {
document.body.classList.remove('temp-user');
}
// Also add admin class for consistency
if (currentUser.isAdmin === true) {
document.body.classList.add('admin-user');
} else {
document.body.classList.remove('admin-user');
}
// ----- existing code that manipulates DOM -----
// Update user email in both desktop and mobile
@@ -119,6 +150,21 @@ export function updateUserInterface() {
if (currentUser.isAdmin) {
addAdminLinks();
}
// CRITICAL: Final check to hide delete buttons for temp users
if (currentUser.userType === 'temp') {
// Use setTimeout to ensure this runs after all other DOM operations
setTimeout(() => {
const deleteButtons = document.querySelectorAll('#delete-location-btn, .delete-location-btn, .btn-danger[id*="delete"]');
deleteButtons.forEach(btn => {
btn.style.display = 'none';
btn.style.visibility = 'hidden';
btn.disabled = true;
btn.classList.add('temp-hidden');
btn.setAttribute('hidden', 'true');
});
}, 100);
}
}
function addAdminLinks() {

21
map/app/public/js/location-manager.js
View File

@@ -413,13 +413,26 @@ export function openEditForm(location) {
document.getElementById('edit-location-lng').value = location.longitude || '';
document.getElementById('edit-geo-location').value = location['Geo-Location'] || '';
// Show/hide delete button based on user type
// Hide delete button for temp users - use multiple approaches
const deleteBtn = document.getElementById('delete-location-btn');
if (deleteBtn) {
if (currentUser?.userType === 'temp') {
if (deleteBtn) {
// Check both currentUser and body class to ensure restriction
const isTemp = currentUser?.userType === 'temp' || document.body.classList.contains('temp-user');
if (isTemp) {
deleteBtn.style.display = 'none';
deleteBtn.style.visibility = 'hidden';
deleteBtn.disabled = true;
deleteBtn.classList.add('temp-hidden');
deleteBtn.setAttribute('hidden', 'true');
// Remove the button from DOM completely for temp users
deleteBtn.remove();
} else {
deleteBtn.style.display = '';
deleteBtn.style.display = 'inline-block';
deleteBtn.style.visibility = 'visible';
deleteBtn.disabled = false;
deleteBtn.classList.remove('temp-hidden');
deleteBtn.removeAttribute('hidden');
}
}

106
map/app/public/js/main.js
View File

@@ -37,8 +37,8 @@ document.addEventListener('DOMContentLoaded', async () => {
console.log('Authentication confirmed, initializing application...');
// Setup temp user security measures after authentication
setupTempUserSecurity();
// Setup temp user security measures immediately after authentication
await setupUserSecurity();
// Then initialize the map
updateLoadingMessage('Initializing map...');
@@ -177,63 +177,55 @@ async function initializeUnifiedSearch() {
}
}
// Setup security measures for temp users
function setupTempUserSecurity() {
// Setup security measures for non-admin users
async function setupUserSecurity() {
// Import currentUser from auth module
import('./auth.js').then(authModule => {
const { currentUser } = authModule;
const { currentUser } = await import('./auth.js');
if (currentUser?.userType !== 'admin') {
// Override console methods for all non-admin users
const noop = () => {};
console.log = noop;
console.debug = noop;
console.info = noop;
console.warn = noop;
console.error = noop;
console.trace = noop;
console.dir = noop;
console.dirxml = noop;
console.group = noop;
console.groupEnd = noop;
console.time = noop;
console.timeEnd = noop;
console.assert = noop;
console.profile = noop;
}
// Additional temp user specific restrictions
if (currentUser?.userType === 'temp') {
// Disable right-click context menu
document.addEventListener('contextmenu', (e) => {
e.preventDefault();
return false;
});
if (currentUser?.userType === 'temp') {
console.log('Applying temp user security measures...');
// Disable right-click context menu
document.addEventListener('contextmenu', (e) => {
// Disable common keyboard shortcuts for developer tools
document.addEventListener('keydown', (e) => {
// F12
if (e.keyCode === 123) {
e.preventDefault();
return false;
});
// Basic developer tools detection
const devtools = { open: false };
let devtoolsTimer = setInterval(() => {
// Detect if developer tools are open by checking window dimensions
if (window.outerHeight - window.innerHeight > 200 ||
window.outerWidth - window.innerWidth > 200) {
if (!devtools.open) {
console.clear();
console.log('Access to developer tools is restricted for temporary accounts.');
console.log('Please contact an administrator for full access.');
}
devtools.open = true;
} else {
devtools.open = false;
}
}, 1000);
// Clear interval on page unload
window.addEventListener('beforeunload', () => {
if (devtoolsTimer) {
clearInterval(devtoolsTimer);
}
});
// Disable common keyboard shortcuts for developer tools
document.addEventListener('keydown', (e) => {
// F12
if (e.keyCode === 123) {
e.preventDefault();
return false;
}
// Ctrl+Shift+I, Ctrl+Shift+J, Ctrl+U
if (e.ctrlKey && e.shiftKey && (e.keyCode === 73 || e.keyCode === 74)) {
e.preventDefault();
return false;
}
// Ctrl+U (view source)
if (e.ctrlKey && e.keyCode === 85) {
e.preventDefault();
return false;
}
});
}
});
}
// Ctrl+Shift+I, Ctrl+Shift+J, Ctrl+U
if (e.ctrlKey && e.shiftKey && (e.keyCode === 73 || e.keyCode === 74)) {
e.preventDefault();
return false;
}
// Ctrl+U (view source)
if (e.ctrlKey && e.keyCode === 85) {
e.preventDefault();
return false;
}
});
}
}