|
|
9246f75fdd
|
Feat: Polish Angular UI with cohesive design system
Introduces a shared CSS custom property token layer and applies it
across all five views (library, upload, detail, login, app shell).
Each view now has intentional loading, empty, and error states.
- styles.css: 13 design tokens on :root; shimmer skeleton animation
- Library: 150ms-debounced skeleton loading, empty state with /upload
link, error card with retry, card hover lift, broken-image fallback
- Upload: token-styled drop-zone, Uploading… spinner, 4s success
banner, distinct validation vs. network error messages
- Detail: image skeleton, network error card (separate from 404
not-found card), Owner actions panel, danger tag error styling,
broken-image fallback
- Login: vertically centred surface card, danger field/server errors,
Signing in… disabled button
- App shell: 48px fixed header, app name left, sign-out right, no
reflow on auth state change
- All 24 ESLint errors resolved (including pre-existing auth spec
issues); ng build and ng lint pass clean
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-05-03 20:03:56 +00:00 |
|
|
|
5fbbc1e67f
|
Feat: Implement JWT bearer token authentication
Protects image upload, delete, and tag-update endpoints behind
Bearer token auth. Public read endpoints remain open. Angular SPA
gains a login page, auth interceptor, and route guard for /upload.
- JWTAuthProvider (HS256, sub/iat/exp, secrets.compare_digest)
- POST /api/v1/auth/token login endpoint
- require_auth FastAPI dependency on all write routes
- AuthService, LoginComponent, authInterceptor, authGuard
- Detail page hides write controls for unauthenticated visitors
- 43 unit tests passing; integration tests require Docker stack
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-05-03 19:12:38 +00:00 |
|
