Felix KemmlerandClaude Sonnet 5
e9e96a57dc
Extends omsorgCore with full CRUD for Facility/Contract/Order plus configurable value lists and an audit trail, and wires the omsorgapp frontend up to the new facilities, settings, and audit-log modules; includes a sidebar active-nav-item highlight. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
78 lines
2.9 KiB
PHP
78 lines
2.9 KiB
PHP
<?php
|
||
require_once __DIR__ . '/../lib/auth.php';
|
||
require_once __DIR__ . '/../lib/layout.php';
|
||
require_login();
|
||
|
||
$forced = isset($_GET['forced']);
|
||
$error = '';
|
||
$policy = omsorgcore_password_policy(_omsorgcore_config());
|
||
$minLength = $policy['ok'] ? (int) $policy['data']['minLength'] : 8;
|
||
|
||
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||
verify_csrf();
|
||
|
||
$current = $_POST['current_password'] ?? '';
|
||
$new = $_POST['new_password'] ?? '';
|
||
$repeat = $_POST['new_password_repeat'] ?? '';
|
||
|
||
if (strlen($new) < $minLength) {
|
||
$error = "Das neue Passwort muss mindestens {$minLength} Zeichen lang sein.";
|
||
} elseif ($new !== $repeat) {
|
||
$error = 'Die Passwörter stimmen nicht überein.';
|
||
} else {
|
||
$result = omsorgcore_change_password(_omsorgcore_config(), $_SESSION['omsorgcore_access_token'], $current, $new);
|
||
|
||
if ($result['ok']) {
|
||
// Erfolgreicher Wechsel widerruft serverseitig alle Sessions (siehe
|
||
// UserService.ChangeOwnPasswordAsync) - lokal ausloggen statt weiterzumachen.
|
||
$_SESSION = [];
|
||
if (ini_get('session.use_cookies')) {
|
||
$p = session_get_cookie_params();
|
||
setcookie(session_name(), '', time() - 42000, $p['path'], $p['domain'], $p['secure'], $p['httponly']);
|
||
}
|
||
session_destroy();
|
||
header('Location: ../index.php?pwchanged=1');
|
||
exit;
|
||
}
|
||
|
||
$error = $result['status'] === 401
|
||
? 'Aktuelles Passwort ist falsch.'
|
||
: (is_string($result['data'] ?? null) ? $result['data'] : 'Passwort konnte nicht geändert werden.');
|
||
}
|
||
}
|
||
|
||
layout_start('Einstellungen – Mitarbeiter-App', 'settings');
|
||
?>
|
||
<h1 class="main-title">Einstellungen</h1>
|
||
|
||
<?php if ($forced): ?>
|
||
<p class="hint" style="margin:0 0 22px">Für diesen Account wurde ein initiales Passwort vergeben. Bitte lege jetzt dein eigenes Passwort fest, bevor du weiterarbeiten kannst.</p>
|
||
<?php endif; ?>
|
||
|
||
<div class="glass" style="max-width:420px;padding:24px">
|
||
<h2 style="font-family:'KindelSerif',Georgia,serif;font-size:1.3rem;margin:0 0 18px">Passwort ändern</h2>
|
||
|
||
<?php if ($error): ?>
|
||
<div class="error" style="margin-bottom:16px"><?= e($error) ?></div>
|
||
<?php endif; ?>
|
||
|
||
<form method="post">
|
||
<?= csrf_field() ?>
|
||
<label>
|
||
Aktuelles Passwort
|
||
<input type="password" name="current_password" autocomplete="current-password" required autofocus>
|
||
</label>
|
||
<label>
|
||
Neues Passwort
|
||
<input type="password" name="new_password" autocomplete="new-password" required minlength="<?= (int) $minLength ?>">
|
||
</label>
|
||
<label>
|
||
Neues Passwort wiederholen
|
||
<input type="password" name="new_password_repeat" autocomplete="new-password" required minlength="<?= (int) $minLength ?>">
|
||
</label>
|
||
<button type="submit" class="btn" style="width:100%;margin-top:6px">Passwort ändern</button>
|
||
</form>
|
||
</div>
|
||
<?php
|
||
layout_end();
|