tonymandClaude Fable 5.1
42eeb8a289
The server fills the OTM link into login.html from OTM_SSO_AUDIENCE (the route itself has been mounted since 0.4.0); without the env the block stays hidden and the password form is unchanged. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014LCQmFvKshyAJsE8C3B5ET
70 lines
3.9 KiB
HTML
70 lines
3.9 KiB
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>🌙 Studio Notebook — sign in</title>
|
|
<style>
|
|
:root { --bg: #fdf7f2; --card: #fff; --ink: #4a3b47; --plum: #8d6b94; --plum-deep: #6e4f78;
|
|
--blush-deep: #c98da8; --line: #eddfe3; }
|
|
* { margin: 0; padding: 0; box-sizing: border-box; }
|
|
body { font-family: "Avenir Next", "Nunito", "Trebuchet MS", sans-serif; background: var(--bg);
|
|
color: var(--ink); min-height: 100vh; display: grid; place-items: center; }
|
|
.card { background: var(--card); border: 1.5px solid var(--line); border-radius: 20px;
|
|
padding: 34px 36px; width: min(92vw, 380px); box-shadow: 0 4px 16px rgba(141,107,148,0.1); }
|
|
h1 { font-family: Georgia, serif; font-size: 24px; color: var(--plum-deep); margin-bottom: 4px; }
|
|
.sub { color: #9c8698; font-size: 14px; font-style: italic; font-family: Georgia, serif; margin-bottom: 22px; }
|
|
label { display: block; font-size: 12px; font-weight: 700; color: var(--blush-deep);
|
|
text-transform: uppercase; letter-spacing: 0.08em; margin: 14px 0 5px; }
|
|
input { width: 100%; border: 1.5px solid var(--line); border-radius: 12px; padding: 12px 15px;
|
|
font-size: 15px; background: var(--bg); color: var(--ink); font-family: inherit; }
|
|
button { width: 100%; margin-top: 22px; border: none; border-radius: 12px; padding: 13px;
|
|
font-size: 15px; font-weight: 700; cursor: pointer; background: var(--plum); color: #fff; font-family: inherit; }
|
|
.err { color: #b3556b; font-size: 13.5px; margin-top: 12px; min-height: 18px; }
|
|
.otm { display: none; margin-top: 14px; text-align: center; }
|
|
.otm a { display: block; border: 1.5px solid var(--plum); border-radius: 12px; padding: 12px;
|
|
color: var(--plum-deep); font-weight: 700; text-decoration: none; }
|
|
.otm a:hover { background: var(--bg); }
|
|
.or { color: #9c8698; font-size: 12px; margin-top: 16px; text-align: center; }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="card">
|
|
<h1>🌙 Studio Notebook</h1>
|
|
<div class="sub">welcome back to the studio</div>
|
|
<form id="f">
|
|
<label>Email</label><input type="email" id="email" autocomplete="username" required>
|
|
<label>Password</label><input type="password" id="password" autocomplete="current-password" required>
|
|
<button type="submit">Sign in</button>
|
|
<div class="err" id="err"></div>
|
|
</form>
|
|
<!-- Sign in with OTM: one OTM account opens every OTM surface. The server
|
|
fills in the link (it knows this studio's audience); left empty, the
|
|
block stays hidden and the password form is the only way in. -->
|
|
<div class="otm" id="otm">
|
|
<div class="or">or</div>
|
|
<a href="__OTM_SSO_URL__">Sign in with OTM</a>
|
|
</div>
|
|
</div>
|
|
<script>
|
|
// ?reason=… arrives when an OTM "Log in as admin" link didn't take
|
|
const REASONS = { not_enabled: "OTM sign-in isn't set up for this studio yet",
|
|
invalid_token: "that sign-in link isn't valid", link_already_used: "that sign-in link was already used — ask for a fresh one",
|
|
no_admin: "there's no owner account here to sign in as", no_account: "no studio account matches your OTM account yet",
|
|
server_error: "something went wrong — try again" };
|
|
const otm = document.getElementById("otm");
|
|
if (otm.querySelector("a").getAttribute("href").startsWith("https://")) otm.style.display = "block";
|
|
const reason = new URLSearchParams(location.search).get("reason");
|
|
if (typeof REASONS[reason] === "string") document.getElementById("err").textContent = REASONS[reason];
|
|
|
|
document.getElementById("f").addEventListener("submit", async (e) => {
|
|
e.preventDefault();
|
|
const r = await fetch("/api/login", { method: "POST", headers: { "content-type": "application/json" },
|
|
body: JSON.stringify({ email: email.value, password: password.value }) }).then((x) => x.json());
|
|
if (r.ok) location.href = "/";
|
|
else document.getElementById("err").textContent = r.error || "sign-in failed";
|
|
});
|
|
</script>
|
|
</body>
|
|
</html>
|