core: session sudo mode

packages/ui-default/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hydrooj/ui-default",
-  "version": "4.41.3",
+  "version": "4.41.4",
   "author": "undefined <i@undefined.moe>",
   "license": "AGPL-3.0",
   "main": "index.ts",

packages/ui-default/templates/domain_edit.html

@@ -6,21 +6,15 @@
 <div class="section">
   <div class="section__header">
     <h1 class="section__title" data-heading>{{ _('Delete Domain') }}</h1>
+    <div class="section__tools">
+      <form method="POST">
+        <div>
+          <input type="hidden" name="operation" value="delete">
+          <input type="submit" value="{{ _('Delete Domain') }}" class="rounded primary button">
+        </div>
+      </form>
+    </div>
   </div>
-  <div class="section__body">
-    <form method="POST">
-      {{ form.form_text({
-          type:'password',
-          label:'Password',
-          columns:10,
-          name:'password',
-          required:true
-        }) }}
-      <div>
-        <input type="hidden" name="operation" value="delete">
-        <input type="submit" value="{{ _('Delete Domain') }}" class="rounded primary button">
-      </div>
-    </form>
-  </div>
+  <div class="section__body"></div>
 </div>
 {% endblock %}

packages/ui-default/templates/user_sudo.html

@@ -0,0 +1,33 @@
+{% extends "layout/immersive.html" %}
+{% block content %}
+<div class="row"><div class="columns">
+  <div class="immersive--content immersive--center">
+    <h1>{{ _('Confirm Access') }}</h1>
+    <form method="POST">
+      <div class="row"><div class="columns">
+        <label class="inverse material textbox">
+          {{ _('Password') }}
+          <input name="password" type="password" autofocus>
+        </label>
+      </div></div>
+      <div class="row" style="display: none" id="tfa_div"><div class="columns">
+        <label class="inverse material textbox">
+          {{ _('Two Factor Authentication Code') }}
+          <input name="tfa" type="number">
+        </label>
+      </div></div>
+      <div class="row"><div class="columns">
+        <div class="text-center">
+          <input type="submit" value="{{ _('Confirm') }}" class="inverse expanded rounded primary button">
+        </div>
+      </div></div>
+      <div class="row"><div class="columns">
+        <div class="text-center supplementary inverse">
+          <p><strong>Tip:</strong> You are entering <a href="https://docs.github.com/articles/sudo-mode">sudo mode</a>.</p>
+          <p>After you've performed a sudo-protected action, you'll only be asked to re-authenticate again after a few hours of inactivity.</p>
+        </div>
+      </div></div>
+    </form>
+  </div>
+</div></div>
+{% endblock %}

packages/ui-default/templates/user_sudo_redirect.html

@@ -0,0 +1,18 @@
+{% extends "layout/immersive.html" %}
+{% block content %}
+<div class="row"><div class="columns">
+  <div class="immersive--content immersive--center">
+    <h1>{{ _('Confirm Access') }}</h1>
+    <div class="text-center">
+      Redirecting, please wait...
+    </div>
+    <form method="{{ method }}" action="{{ redirect }}" style="visibility:hidden">
+      {% for k, v in args %}
+        <input name="{{ k }}" value="{{ v }}" />
+      {% endfor %}
+      <input type="submit" id="submit" />
+    </form>
+    <script>document.getElementById('submit').click()</script>
+  </div>
+</div></div>
+{% endblock %}