Files
member-console/internal/embeds/templates/billing.html
T
cgalo5758 0b28a9dc29 Remediate security audit findings
- Replace gorilla/csrf with net/http CrossOriginProtection
- Require valkey-password and add TLS options for session store
- End session at /logout and revoke refresh tokens
- Re-derive identity and roles from provider every five minutes
- Process each Stripe webhook event in its own Temporal workflow
- Give each outbox entry its own workflow with Temporal retries
- Guard against stale Stripe events with provider timestamps
- Derive transport security from base-url scheme
2026-09-09 13:25:43 -05:00

81 lines
3.0 KiB
HTML

{{- /* SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Commercial */ -}}
{{- /* SPDX-FileCopyrightText: 2025-2026 Christian Galo */ -}}
<!DOCTYPE html>
<html lang="en">
<head>
<title>Billing - {{ deploymentName }}</title>
<meta name="description" content="Console for {{ deploymentName }} members">
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="htmx-config" content='{"includeIndicatorCSS": false, "noSwap": [204, 304, 403, "5xx"], "defaultSettleDelay": 0}'>
<link href="/static/bootstrap.css" rel="stylesheet">
<script defer src="/static/bootstrap.bundle.js"></script>
<script defer src="/static/shell.js"></script>
<script defer src="/static/htmx.min.js"></script>
<script defer src="/static/error-handler.js"></script>
<script defer src="/static/success-toast.js"></script>
<script defer src="/static/confirm-action-modal.js"></script>
<script defer src="/static/help-init.js"></script>
<link rel="apple-touch-icon" sizes="180x180" href="/static/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/static/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/static/favicon-16x16.png">
<link rel="manifest" href="/static/site.webmanifest">
<link href="/static/app.css" rel="stylesheet">
</head>
<body class="d-flex flex-column vh-100">
{{ template "shell_topbar.html" .Shell }}
<div class="d-flex flex-column flex-lg-row flex-grow-1">
{{ template "shell_rail_member.html" .Shell }}
<!-- Main Content (page-anatomy "Every page has one main landmark") -->
<main id="member-main" class="flex-fill p-4">
<div class="container-xxl px-0">
{{ template "pageHeader" .Header }}
<!-- Composed on the server (page-anatomy "A page arrives complete");
the id stays the swap target, and the region titles itself
(Invoices list or one invoice's detail) so the heading follows
the swap. -->
<div id="billing-content">{{ .Invoices }}</div>
</div>
</main>
</div>
<!-- Toast Container -->
<div class="toast-container">
<div id="errorToast" class="toast align-items-center text-bg-danger border-0" role="alert" aria-live="assertive"
aria-atomic="true">
<div class="d-flex">
<div class="toast-body" id="errorToastBody">
An error occurred. Try again.
</div>
<button type="button" class="btn-close btn-close-white me-2 m-auto" data-bs-dismiss="toast"
aria-label="Close"></button>
</div>
</div>
<div id="successToast" class="toast align-items-center text-bg-success border-0" role="status" aria-live="polite"
aria-atomic="true">
<div class="d-flex">
<div class="toast-body" id="successToastBody">
Done.
</div>
<button type="button" class="btn-close btn-close-white me-2 m-auto" data-bs-dismiss="toast"
aria-label="Close"></button>
</div>
</div>
</div>
{{ template "shell_confirm_modal.html" . }}
</body>
</html>