maintenance: allow /partage through gate, fix fragment routing, add visibility table in admin

Extract shared filepond logic into src/FilepondHandler.php class.
Admin filepond endpoints delegate to the handler after AdminAuth check.
New partage filepond endpoints at /partage/actions/filepond/ verify
share_active session flag + CSRF token, no admin auth required.

JS reads filepond-base meta tag to determine endpoint path:
- Admin pages: /admin/actions/filepond (via head.php isAdmin check)
- Partage form: /partage/actions/filepond (explicit meta)

partage/index.php sets share_active = true on form render, cleans up on
successful submit. Partage process endpoint rate-limited to 30/5min per
session. No nginx changes needed — /partage/ location already handles
PHP without auth_basic.
This commit is contained in:
Pontoporeia
2026-05-12 15:19:32 +02:00
parent da153fc604
commit 6f7a02244f
22 changed files with 15010 additions and 532 deletions

View File

@@ -1135,6 +1135,69 @@ th.admin-ap-col {
.admin-import-log__item--error::before { content: '✗'; color: var(--error); }
/* ── Paramètres page (flat, semantic) ──────────────────────────────────── */
.param-access-table {
width: 100%;
border-collapse: separate;
border-spacing: 0;
margin-bottom: var(--space-m);
font-size: var(--step--1);
border: 1px solid var(--border-primary);
border-radius: var(--radius);
overflow: hidden;
}
.param-access-table caption {
caption-side: top;
font-weight: 600;
margin-bottom: var(--space-2xs);
text-align: left;
}
.param-access-table th,
.param-access-table td {
padding: var(--space-2xs) var(--space-s);
text-align: left;
border-bottom: 1px solid var(--border-primary);
}
.param-access-table th:not(:last-child),
.param-access-table td:not(:last-child) {
border-right: 1px solid var(--border-primary);
}
.param-access-table thead th {
background: var(--bg-secondary);
font-weight: 600;
}
.param-access-table thead tr:first-child th:first-child {
border-top-left-radius: var(--radius);
}
.param-access-table thead tr:first-child th:last-child {
border-top-right-radius: var(--radius);
}
.param-access-table tbody tr:last-child td:first-child {
border-bottom-left-radius: var(--radius);
}
.param-access-table tbody tr:last-child td:last-child {
border-bottom-right-radius: var(--radius);
}
.param-access-table tbody tr:last-child td {
border-bottom: none;
}
.param-access-yes {
color: var(--accent-green);
}
.param-access-no {
color: var(--text-secondary);
}
.param-maintenance-row {
display: flex;
align-items: center;