cgalo5758
0b28a9dc29
- Replace gorilla/csrf with net/http CrossOriginProtection - Require valkey-password and add TLS options for session store - End session at /logout and revoke refresh tokens - Re-derive identity and roles from provider every five minutes - Process each Stripe webhook event in its own Temporal workflow - Give each outbox entry its own workflow with Temporal retries - Guard against stale Stripe events with provider timestamps - Derive transport security from base-url scheme
91 lines
3.5 KiB
HTML
91 lines
3.5 KiB
HTML
{{- /* SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Commercial */ -}}
|
|
{{- /* SPDX-FileCopyrightText: 2025-2026 Christian Galo */ -}}
|
|
|
|
<!DOCTYPE html>
|
|
<html lang="en">
|
|
|
|
<head>
|
|
<title>Products - {{ deploymentName }}</title>
|
|
<meta name="description" content="Console for {{ deploymentName }} members">
|
|
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
|
|
<meta name="htmx-config" content='{"includeIndicatorCSS": false, "noSwap": [204, 304, 403, "5xx"], "defaultSettleDelay": 0}'>
|
|
<link href="/static/bootstrap.css" rel="stylesheet">
|
|
<script defer src="/static/bootstrap.bundle.js"></script>
|
|
<script defer src="/static/shell.js"></script>
|
|
<script defer src="/static/htmx.min.js"></script>
|
|
<script defer src="/static/error-handler.js"></script>
|
|
<script defer src="/static/success-toast.js"></script>
|
|
<script defer src="/static/confirm-action-modal.js"></script>
|
|
<script defer src="/static/help-init.js"></script>
|
|
|
|
<link rel="apple-touch-icon" sizes="180x180" href="/static/apple-touch-icon.png">
|
|
<link rel="icon" type="image/png" sizes="32x32" href="/static/favicon-32x32.png">
|
|
<link rel="icon" type="image/png" sizes="16x16" href="/static/favicon-16x16.png">
|
|
<link rel="manifest" href="/static/site.webmanifest">
|
|
|
|
<link href="/static/app.css" rel="stylesheet">
|
|
</head>
|
|
|
|
<body class="d-flex flex-column vh-100">
|
|
{{ template "shell_topbar.html" .Shell }}
|
|
|
|
<div class="d-flex flex-column flex-lg-row flex-grow-1">
|
|
{{ template "shell_rail_member.html" .Shell }}
|
|
|
|
<!-- Main Content (page-anatomy "Every page has one main landmark") -->
|
|
<main id="member-main" class="flex-fill p-4">
|
|
<div class="container-xxl px-0">
|
|
{{ template "pageHeader" .Header }}
|
|
|
|
{{ template "sectionHeader" .EntitlementsHeader }}
|
|
<div class="card mb-3">
|
|
<div class="card-body">
|
|
<!-- Composed on the server (page-anatomy "A page arrives
|
|
complete"); re-fetched only on the entitlements-changed event. -->
|
|
<div hx-get="/partials/member/entitlements" hx-trigger="entitlements-changed from:body" hx-swap="innerHTML">{{ .Entitlements }}</div>
|
|
</div>
|
|
</div>
|
|
|
|
{{ template "sectionHeader" .PlansHeader }}
|
|
<div id="member-plans">{{ .Plans }}</div>
|
|
|
|
<!-- Add-ons: the partial titles itself ("More products" beside
|
|
plans, "Products" standing alone) and hides entirely when the
|
|
catalog has none. -->
|
|
<div>{{ .Addons }}</div>
|
|
</div>
|
|
</main>
|
|
</div>
|
|
|
|
<!-- Toast Container -->
|
|
<div class="toast-container">
|
|
<div id="errorToast" class="toast align-items-center text-bg-danger border-0" role="alert" aria-live="assertive"
|
|
aria-atomic="true">
|
|
<div class="d-flex">
|
|
<div class="toast-body" id="errorToastBody">
|
|
An error occurred. Try again.
|
|
</div>
|
|
<button type="button" class="btn-close btn-close-white me-2 m-auto" data-bs-dismiss="toast"
|
|
aria-label="Close"></button>
|
|
</div>
|
|
</div>
|
|
<div id="successToast" class="toast align-items-center text-bg-success border-0" role="status" aria-live="polite"
|
|
aria-atomic="true">
|
|
<div class="d-flex">
|
|
<div class="toast-body" id="successToastBody">
|
|
Done.
|
|
</div>
|
|
<button type="button" class="btn-close btn-close-white me-2 m-auto" data-bs-dismiss="toast"
|
|
aria-label="Close"></button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
{{ template "shell_confirm_modal.html" . }}
|
|
|
|
</body>
|
|
|
|
</html> |