NEW FEATURE: Password Change Form on Admin Dashboard TEMPLATE CHANGES (admin.ctml): - Added 'Account Security' section after System Status - Password change form with: - Current password field - New password field (min 8 characters) - Confirm password field - Submit button - Message display area for feedback JAVASCRIPT CHANGES (admin.js): - changeAdminPassword(event) function - Validates passwords match - Validates minimum length (8 chars) - Calls /api/asteroid/user/change-password - Shows success/error messages - Clears form on success - showPasswordMessage(message, type) helper - Displays success/error messages - Auto-hides success messages after 5 seconds USER EXPERIENCE: 1. Admin logs in with default password (asteroid123) 2. Sees 'Account Security' section at top of dashboard 3. Fills in current password and new password 4. Clicks 'Change Password' 5. Gets immediate feedback 6. Password is changed - use new password on next login This makes it easy for admins to change the default password without needing REPL access or curl commands. Ref: TODO.org Problem 4 - Security improvements |
||
|---|---|---|
| .. | ||
| partial | ||
| admin.ctml | ||
| audio-player-frame.ctml | ||
| frameset-wrapper.ctml | ||
| front-page-content.ctml | ||
| front-page.ctml | ||
| login.ctml | ||
| player-content.ctml | ||
| player.ctml | ||
| popout-player.ctml | ||
| profile.ctml | ||
| register.ctml | ||
| users.ctml | ||