diff --git a/.env.example b/.env.example index 88bcfed..a9b6d93 100644 --- a/.env.example +++ b/.env.example @@ -6,6 +6,12 @@ SECRET_KEY= ADMIN_USERNAME=admin ADMIN_PASSWORD= +# Persist the app database in the mounted ./data directory. +DATABASE_URL=sqlite:////app/data/pipe_survival_0331.db + +# Timezone used when displaying UTC timestamps. +APP_TIMEZONE=Asia/Shanghai + # Default: 16 MiB MAX_UPLOAD_BYTES=16777216 @@ -14,3 +20,6 @@ MODEL_PATH=/app/my_survival_forest_model_quxi-10-0331.joblib # Keep public registration closed by default. ALLOW_REGISTRATION=false + +# Minutes before an admin-generated password reset link expires. +PASSWORD_RESET_TOKEN_MINUTES=30 diff --git a/app/__init__.py b/app/__init__.py index 3d8cc8b..271f3bc 100644 --- a/app/__init__.py +++ b/app/__init__.py @@ -10,6 +10,7 @@ from .extensions import db, login_manager from .models import AppSetting, User from .prediction import FEATURES, load_model from .security import csrf_token, validate_csrf_token +from .time_utils import format_datetime_for_timezone def create_app(config_object: type[Config] = Config, *, load_model_on_start: bool = True) -> Flask: @@ -91,9 +92,13 @@ def register_app_hooks(app: Flask) -> None: def now_year() -> int: return datetime.now().year + def format_datetime(value) -> str: + return format_datetime_for_timezone(value, app.config["APP_TIMEZONE"]) + return { "feature_list": FEATURES, "now_year": now_year, + "format_datetime": format_datetime, "csrf_token": csrf_token, "allow_registration": AppSetting.get_bool( "allow_registration", diff --git a/app/config.py b/app/config.py index 77734d5..6b9d2e8 100644 --- a/app/config.py +++ b/app/config.py @@ -43,6 +43,8 @@ class Config: ALLOW_REGISTRATION = env_bool("ALLOW_REGISTRATION", False) ADMIN_USERNAME = os.environ.get("ADMIN_USERNAME", "admin").strip() or "admin" ADMIN_PASSWORD = os.environ.get("ADMIN_PASSWORD") + APP_TIMEZONE = os.environ.get("APP_TIMEZONE", "Asia/Shanghai").strip() or "Asia/Shanghai" + PASSWORD_RESET_TOKEN_MINUTES = env_int("PASSWORD_RESET_TOKEN_MINUTES", 30) def ensure_dirs() -> None: diff --git a/app/models.py b/app/models.py index 8e39957..8a614f9 100644 --- a/app/models.py +++ b/app/models.py @@ -24,6 +24,25 @@ class User(UserMixin, db.Model): return check_password_hash(self.password_hash, password) +class PasswordResetToken(db.Model): + __tablename__ = "password_reset_tokens" + + id = db.Column(db.Integer, primary_key=True) + user_id = db.Column(db.Integer, db.ForeignKey("users.id"), nullable=False, index=True) + created_by_id = db.Column(db.Integer, db.ForeignKey("users.id"), nullable=False) + token_hash = db.Column(db.String(64), unique=True, nullable=False, index=True) + expires_at = db.Column(db.DateTime, nullable=False) + used_at = db.Column(db.DateTime) + created_at = db.Column(db.DateTime, default=datetime.utcnow, nullable=False) + + user = db.relationship( + "User", + foreign_keys=[user_id], + backref=db.backref("password_reset_tokens", lazy=True), + ) + created_by = db.relationship("User", foreign_keys=[created_by_id]) + + class UploadRecord(db.Model): __tablename__ = "upload_records" diff --git a/app/routes.py b/app/routes.py index c951411..add9fde 100644 --- a/app/routes.py +++ b/app/routes.py @@ -1,7 +1,9 @@ from __future__ import annotations import os -from datetime import datetime +import hashlib +import secrets +from datetime import datetime, timedelta from flask import ( Blueprint, @@ -21,9 +23,10 @@ from sqlalchemy.orm import joinedload from .config import BASE_DIR from .extensions import db -from .models import AppSetting, UploadRecord, User +from .models import AppSetting, PasswordResetToken, UploadRecord, User from .prediction import PredictionError, run_prediction from .security import new_captcha +from .time_utils import format_datetime_for_timezone bp = Blueprint("main", __name__) REFERENCE_PDF_NAME = "20260630标准文本——供水管道健康状态与剩余寿命评估技术导则.pdf" @@ -35,10 +38,55 @@ def render_auth_template(mode: str, status_code: int = 200, captcha: str = ""): return render_template("login.html", mode=mode, captcha=captcha), status_code -def render_login_error(message: str, status_code: int = 400): - flash(message, "error") +def refresh_captcha() -> str: session["captcha"] = new_captcha() - return render_auth_template("login", status_code, session["captcha"]) + return session["captcha"] + + +def render_auth_error(mode: str, message: str, status_code: int = 400): + flash(message, "error") + return render_auth_template(mode, status_code, refresh_captcha()) + + +def captcha_is_valid() -> bool: + captcha_input = request.form.get("captcha", "").strip().upper() + return bool(captcha_input and captcha_input == session.get("captcha", "")) + + +def password_reset_token_hash(token: str) -> str: + return hashlib.sha256(token.encode("utf-8")).hexdigest() + + +def password_reset_expiry() -> datetime: + minutes = max(int(current_app.config["PASSWORD_RESET_TOKEN_MINUTES"]), 1) + return datetime.utcnow() + timedelta(minutes=minutes) + + +def format_app_datetime(value: datetime | None) -> str: + return format_datetime_for_timezone(value, current_app.config["APP_TIMEZONE"]) + + +def active_password_reset_token(token: str) -> PasswordResetToken | None: + reset_token = PasswordResetToken.query.filter_by( + token_hash=password_reset_token_hash(token) + ).first() + if ( + reset_token is None + or reset_token.used_at is not None + or reset_token.expires_at <= datetime.utcnow() + ): + return None + return reset_token + + +def render_password_reset_unavailable(status_code: int = 400): + flash("重置链接无效或已过期,请联系管理员重新生成。", "error") + return render_template( + "password_reset.html", + reset_token=None, + token="", + token_available=False, + ), status_code def require_admin() -> None: @@ -71,6 +119,14 @@ def paginated_uploads(query, endpoint: str): return pagination, None +def password_reset_users(): + return ( + User.query.filter(User.is_admin.is_(False)) + .order_by(User.username.asc(), User.id.asc()) + .all() + ) + + def prediction_result_payload(artifacts, record: UploadRecord) -> dict: image_url = url_for("static", filename=f"images/{artifacts.image_filename}") importance_url = ( @@ -104,19 +160,16 @@ def login(): return redirect(url_for("main.home")) if request.method == "GET": - session["captcha"] = new_captcha() - return render_auth_template("login", captcha=session["captcha"]) + return render_auth_template("login", captcha=refresh_captcha()) username = request.form.get("username", "").strip() password = request.form.get("password", "") - captcha_input = request.form.get("captcha", "").strip().upper() - - if captcha_input != session.get("captcha", ""): - return render_login_error("验证码错误") + if not captcha_is_valid(): + return render_auth_error("login", "验证码错误") user = User.query.filter_by(username=username).first() if not user or not user.check_password(password): - return render_login_error("用户名或密码错误") + return render_auth_error("login", "用户名或密码错误") login_user(user, remember=bool(request.form.get("remember"))) return redirect(url_for("main.home")) @@ -125,32 +178,69 @@ def login(): @bp.route("/register", methods=["GET", "POST"]) def register(): if request.method == "GET": - return render_auth_template("register") - - if not registration_allowed(): - flash("当前未开放自助注册,请联系管理员。", "error") - return render_auth_template("register", 403) + return render_auth_template("register", captcha=refresh_captcha()) username = request.form.get("username", "").strip() password = request.form.get("password", "") + if not captcha_is_valid(): + return render_auth_error("register", "验证码错误") + if not registration_allowed(): + return render_auth_error("register", "当前未开放自助注册,请联系管理员。", 403) + if not username: - flash("用户名不能为空", "error") - return render_auth_template("register", 400) + return render_auth_error("register", "用户名不能为空") if len(password) < 6: - flash("密码至少需要 6 位", "error") - return render_auth_template("register", 400) + return render_auth_error("register", "密码至少需要 6 位") if User.query.filter_by(username=username).first(): - flash("用户名已存在", "error") - return render_auth_template("register", 400) + return render_auth_error("register", "用户名已存在") user = User(username=username, is_admin=False) user.set_password(password) db.session.add(user) db.session.commit() flash("注册成功,请登录", "info") - session["captcha"] = new_captcha() - return render_auth_template("login", captcha=session["captcha"]) + return render_auth_template("login", captcha=refresh_captcha()) + + +@bp.route("/password-reset/", methods=["GET", "POST"]) +def password_reset(token: str): + reset_token = active_password_reset_token(token) + if reset_token is None: + return render_password_reset_unavailable() + + if request.method == "GET": + return render_template( + "password_reset.html", + reset_token=reset_token, + token=token, + token_available=True, + ) + + password = request.form.get("password", "") + password_confirm = request.form.get("password_confirm", "") + if len(password) < 6: + flash("密码至少需要 6 位", "error") + return render_template( + "password_reset.html", + reset_token=reset_token, + token=token, + token_available=True, + ), 400 + if password != password_confirm: + flash("两次输入的密码不一致", "error") + return render_template( + "password_reset.html", + reset_token=reset_token, + token=token, + token_available=True, + ), 400 + + reset_token.user.set_password(password) + reset_token.used_at = datetime.utcnow() + db.session.commit() + flash("密码已重置,请使用新密码登录", "info") + return render_auth_template("login", captcha=refresh_captcha()) @bp.route("/logout", methods=["POST"]) @@ -196,6 +286,7 @@ def admin_dashboard(): "admin.html", pagination=pagination, records=pagination.items, + password_reset_users=password_reset_users(), registration_allowed=registration_allowed(), ) @@ -223,6 +314,43 @@ def update_registration_setting(): return redirect(url_for("main.admin_dashboard")) +@bp.route("/admin/users//password-reset-link", methods=["POST"]) +@login_required +def create_password_reset_link(user_id: int): + require_admin() + + user = db.session.get(User, user_id) + if user is None: + return jsonify({"error": "用户不存在"}), 404 + if user.is_admin: + return jsonify({"error": "管理员账号不支持通过此入口重置密码"}), 403 + + now = datetime.utcnow() + PasswordResetToken.query.filter_by(user_id=user.id, used_at=None).update( + {"used_at": now} + ) + + token = secrets.token_urlsafe(32) + reset_token = PasswordResetToken( + user_id=user.id, + created_by_id=current_user.id, + token_hash=password_reset_token_hash(token), + expires_at=password_reset_expiry(), + ) + db.session.add(reset_token) + db.session.commit() + + return jsonify( + { + "message": f"已生成 {user.username} 的密码重置链接", + "reset_url": url_for("main.password_reset", token=token, _external=True), + "expires_at": format_app_datetime(reset_token.expires_at), + "user_id": user.id, + "username": user.username, + } + ) + + @bp.route("/download//") @login_required def download_file(record_id: int, file_type: str): diff --git a/app/time_utils.py b/app/time_utils.py new file mode 100644 index 0000000..063874e --- /dev/null +++ b/app/time_utils.py @@ -0,0 +1,22 @@ +from __future__ import annotations + +from datetime import datetime, timezone +from zoneinfo import ZoneInfo, ZoneInfoNotFoundError + + +DEFAULT_TIMEZONE = "Asia/Shanghai" + + +def timezone_for_name(name: str | None) -> ZoneInfo: + try: + return ZoneInfo((name or DEFAULT_TIMEZONE).strip() or DEFAULT_TIMEZONE) + except ZoneInfoNotFoundError: + return ZoneInfo(DEFAULT_TIMEZONE) + + +def format_datetime_for_timezone(value: datetime | None, timezone_name: str | None) -> str: + if value is None: + return "-" + if value.tzinfo is None: + value = value.replace(tzinfo=timezone.utc) + return value.astimezone(timezone_for_name(timezone_name)).strftime("%Y-%m-%d %H:%M:%S") diff --git a/docker-compose.yml b/docker-compose.yml index e2b9ab3..5a86235 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -9,6 +9,8 @@ services: SECRET_KEY: ${SECRET_KEY:?Set SECRET_KEY in .env} ADMIN_USERNAME: ${ADMIN_USERNAME:-admin} ADMIN_PASSWORD: ${ADMIN_PASSWORD:?Set ADMIN_PASSWORD in .env} + DATABASE_URL: ${DATABASE_URL:-sqlite:////app/data/pipe_survival_0331.db} + APP_TIMEZONE: ${APP_TIMEZONE:-Asia/Shanghai} MAX_UPLOAD_BYTES: ${MAX_UPLOAD_BYTES:-16777216} MODEL_PATH: ${MODEL_PATH:-/app/my_survival_forest_model_quxi-10-0331.joblib} ALLOW_REGISTRATION: ${ALLOW_REGISTRATION:-false} diff --git a/static/css/app.css b/static/css/app.css index 78d7976..a0f0a15 100644 --- a/static/css/app.css +++ b/static/css/app.css @@ -1,3 +1,3 @@ @font-face{font-family:Material Symbols Outlined;font-style:normal;font-weight:400;font-display:block;src:url(../fonts/material-symbols-outlined.ttf) format("truetype")}*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: } -/*! tailwindcss v3.4.19 | MIT License | https://tailwindcss.com*/*,:after,:before{box-sizing:border-box;border:0 solid #e5e7eb}:after,:before{--tw-content:""}:host,html{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}input:where(:not([type])),input:where([type=date]),input:where([type=datetime-local]),input:where([type=email]),input:where([type=month]),input:where([type=number]),input:where([type=password]),input:where([type=search]),input:where([type=tel]),input:where([type=text]),input:where([type=time]),input:where([type=url]),input:where([type=week]),select,select:where([multiple]),textarea{-webkit-appearance:none;-moz-appearance:none;appearance:none;background-color:#fff;border-color:#6b7280;border-width:1px;border-radius:0;padding:.5rem .75rem;font-size:1rem;line-height:1.5rem;--tw-shadow:0 0 #0000}input:where(:not([type])):focus,input:where([type=date]):focus,input:where([type=datetime-local]):focus,input:where([type=email]):focus,input:where([type=month]):focus,input:where([type=number]):focus,input:where([type=password]):focus,input:where([type=search]):focus,input:where([type=tel]):focus,input:where([type=text]):focus,input:where([type=time]):focus,input:where([type=url]):focus,input:where([type=week]):focus,select:focus,select:where([multiple]):focus,textarea:focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:#2563eb;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow);border-color:#2563eb}input::-moz-placeholder,textarea::-moz-placeholder{color:#6b7280;opacity:1}input::placeholder,textarea::placeholder{color:#6b7280;opacity:1}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-date-and-time-value{min-height:1.5em;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit,::-webkit-datetime-edit-day-field,::-webkit-datetime-edit-hour-field,::-webkit-datetime-edit-meridiem-field,::-webkit-datetime-edit-millisecond-field,::-webkit-datetime-edit-minute-field,::-webkit-datetime-edit-month-field,::-webkit-datetime-edit-second-field,::-webkit-datetime-edit-year-field{padding-top:0;padding-bottom:0}select{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 20 20'%3E%3Cpath stroke='%236b7280' stroke-linecap='round' stroke-linejoin='round' stroke-width='1.5' d='m6 8 4 4 4-4'/%3E%3C/svg%3E");background-position:right .5rem center;background-repeat:no-repeat;background-size:1.5em 1.5em;padding-right:2.5rem;-webkit-print-color-adjust:exact;print-color-adjust:exact}select:where([multiple]),select:where([size]:not([size="1"])){background-image:none;background-position:0 0;background-repeat:unset;background-size:initial;padding-right:.75rem;-webkit-print-color-adjust:unset;print-color-adjust:unset}input:where([type=checkbox]),input:where([type=radio]){-webkit-appearance:none;-moz-appearance:none;appearance:none;padding:0;-webkit-print-color-adjust:exact;print-color-adjust:exact;display:inline-block;vertical-align:middle;background-origin:border-box;-webkit-user-select:none;-moz-user-select:none;user-select:none;flex-shrink:0;height:1rem;width:1rem;color:#2563eb;background-color:#fff;border-color:#6b7280;border-width:1px;--tw-shadow:0 0 #0000}input:where([type=checkbox]){border-radius:0}input:where([type=radio]){border-radius:100%}input:where([type=checkbox]):focus,input:where([type=radio]):focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:2px;--tw-ring-offset-color:#fff;--tw-ring-color:#2563eb;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}input:where([type=checkbox]):checked,input:where([type=radio]):checked{border-color:transparent;background-color:currentColor;background-size:100% 100%;background-position:50%;background-repeat:no-repeat}input:where([type=checkbox]):checked{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Cpath d='M12.207 4.793a1 1 0 0 1 0 1.414l-5 5a1 1 0 0 1-1.414 0l-2-2a1 1 0 0 1 1.414-1.414L6.5 9.086l4.293-4.293a1 1 0 0 1 1.414 0'/%3E%3C/svg%3E")}@media (forced-colors:active) {input:where([type=checkbox]):checked{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=radio]):checked{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Ccircle cx='8' cy='8' r='3'/%3E%3C/svg%3E")}@media (forced-colors:active) {input:where([type=radio]):checked{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=checkbox]):checked:focus,input:where([type=checkbox]):checked:hover,input:where([type=radio]):checked:focus,input:where([type=radio]):checked:hover{border-color:transparent;background-color:currentColor}input:where([type=checkbox]):indeterminate{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 16 16'%3E%3Cpath stroke='%23fff' stroke-linecap='round' stroke-linejoin='round' stroke-width='2' d='M4 8h8'/%3E%3C/svg%3E");border-color:transparent;background-color:currentColor;background-size:100% 100%;background-position:50%;background-repeat:no-repeat}@media (forced-colors:active) {input:where([type=checkbox]):indeterminate{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=checkbox]):indeterminate:focus,input:where([type=checkbox]):indeterminate:hover{border-color:transparent;background-color:currentColor}input:where([type=file]){background:unset;border-color:inherit;border-width:0;border-radius:0;padding:0;font-size:unset;line-height:inherit}input:where([type=file]):focus{outline:1px solid ButtonText;outline:1px auto -webkit-focus-ring-color}body,h1,h2,h3,h4{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif}.material-symbols-outlined{font-family:Material Symbols Outlined;font-weight:400;font-style:normal;font-size:24px;letter-spacing:normal;text-transform:none;width:1em;height:1em;min-width:1em;flex:0 0 auto;overflow:hidden;word-wrap:normal;direction:ltr;vertical-align:middle;font-variation-settings:"FILL" 0,"wght" 400,"GRAD" 0,"opsz" 24}.material-symbols-outlined,.ui-btn{line-height:1;display:inline-flex;align-items:center;justify-content:center;white-space:nowrap}.ui-btn{box-sizing:border-box;min-height:44px;height:44px;gap:.5rem;border-radius:.375rem;border:1px solid transparent;padding:0 1rem;font-size:.875rem;font-weight:700;transition:background-color .15s ease,border-color .15s ease,color .15s ease,box-shadow .15s ease}.ui-btn-lg{min-height:52px;height:52px;font-size:.875rem}.ui-btn-sm{min-height:40px;height:40px;padding:0 .75rem}.ui-btn-field{min-height:50px;height:50px}.ui-btn-primary{background:#005eb8;color:#fff;box-shadow:0 18px 34px rgba(15,23,42,.06)}.ui-btn-primary:hover{background:#0c4188}.ui-btn-secondary{border-color:#e2e8f0;background:#fff;color:#334155;box-shadow:0 1px 2px rgba(15,23,42,.04)}.ui-btn-secondary:hover{border-color:#005eb8;color:#005eb8}.ui-btn:disabled,.ui-btn[aria-disabled=true]{cursor:not-allowed;box-shadow:none;opacity:.7}.ui-btn-primary:disabled{background:#cbd5e1}.ui-btn .material-symbols-outlined,.ui-btn-icon{width:20px;height:20px;flex:0 0 20px;font-size:20px}.ui-icon-btn{display:inline-flex;width:28px;height:28px;flex:0 0 28px;justify-content:center;transition:background-color .15s ease,color .15s ease}.ui-action-row,.ui-icon-btn{box-sizing:border-box;align-items:center;border-radius:.375rem;line-height:1}.ui-action-row{display:flex;min-height:44px;justify-content:space-between;gap:.75rem;border:1px solid #e2e8f0;padding:0 .75rem;font-size:.875rem;font-weight:700;transition:border-color .15s ease,color .15s ease}.ui-action-row:hover{border-color:#005eb8;color:#005eb8}.spinner{display:inline-flex;width:20px;height:20px;flex:0 0 20px;border-radius:9999px;border:2px solid hsla(0,0%,100%,.35);border-top-color:#fff;animation:spin .75s linear infinite}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border-width:0}.pointer-events-none{pointer-events:none}.static{position:static}.fixed{position:fixed}.absolute{position:absolute}.relative{position:relative}.sticky{position:sticky}.left-1\/2{left:50%}.left-4{left:1rem}.left-7{left:1.75rem}.right-7{right:1.75rem}.top-0{top:0}.top-1\/2{top:50%}.top-20{top:5rem}.top-6{top:1.5rem}.z-30{z-index:30}.z-50{z-index:50}.order-1{order:1}.order-2{order:2}.order-3{order:3}.order-4{order:4}.mx-auto{margin-left:auto;margin-right:auto}.-mr-1{margin-right:-.25rem}.-mt-1{margin-top:-.25rem}.mb-10{margin-bottom:2.5rem}.mb-2{margin-bottom:.5rem}.mb-4{margin-bottom:1rem}.mb-5{margin-bottom:1.25rem}.mb-6{margin-bottom:1.5rem}.mb-7{margin-bottom:1.75rem}.mb-8{margin-bottom:2rem}.mt-1{margin-top:.25rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-4{margin-top:1rem}.mt-5{margin-top:1.25rem}.mt-6{margin-top:1.5rem}.block{display:block}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.hidden{display:none}.h-10{height:2.5rem}.h-14{height:3.5rem}.h-16{height:4rem}.h-8{height:2rem}.h-9{height:2.25rem}.h-\[1040px\]{height:1040px}.h-\[1152px\]{height:1152px}.h-\[460px\]{height:460px}.h-\[50px\]{height:50px}.h-\[520px\]{height:520px}.h-\[calc\(100vh-230px\)\]{height:calc(100vh - 230px)}.h-auto{height:auto}.h-full{height:100%}.h-px{height:1px}.min-h-0{min-height:0}.min-h-\[104px\]{min-height:104px}.min-h-\[520px\]{min-height:520px}.min-h-\[560px\]{min-height:560px}.min-h-\[620px\]{min-height:620px}.min-h-\[760px\]{min-height:760px}.min-h-screen{min-height:100vh}.w-14{width:3.5rem}.w-8{width:2rem}.w-9{width:2.25rem}.w-\[calc\(100vw-2rem\)\]{width:calc(100vw - 2rem)}.w-fit{width:-moz-fit-content;width:fit-content}.w-full{width:100%}.w-px{width:1px}.min-w-0{min-width:0}.min-w-10{min-width:2.5rem}.min-w-\[150px\]{min-width:150px}.min-w-full{min-width:100%}.max-w-3xl{max-width:48rem}.max-w-7xl{max-width:80rem}.max-w-\[120px\]{max-width:120px}.max-w-\[360px\]{max-width:360px}.max-w-\[420px\]{max-width:420px}.max-w-\[430px\]{max-width:430px}.max-w-\[440px\]{max-width:440px}.flex-1{flex:1 1 0%}.shrink-0{flex-shrink:0}.-translate-x-1\/2{--tw-translate-x:-50%}.-translate-x-1\/2,.-translate-y-1\/2{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.-translate-y-1\/2{--tw-translate-y:-50%}.translate-y-0{--tw-translate-y:0px}.translate-y-0,.translate-y-3{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.translate-y-3{--tw-translate-y:0.75rem}.transform{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.cursor-pointer{cursor:pointer}.resize{resize:both}.grid-cols-\[1fr_92px_44px\]{grid-template-columns:1fr 92px 44px}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.items-stretch{align-items:stretch}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-5{gap:1.25rem}.gap-6{gap:1.5rem}.gap-8{gap:2rem}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.75rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem*var(--tw-space-y-reverse))}.space-y-5>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1.25rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.25rem*var(--tw-space-y-reverse))}.divide-y>:not([hidden])~:not([hidden]){--tw-divide-y-reverse:0;border-top-width:calc(1px*(1 - var(--tw-divide-y-reverse)));border-bottom-width:calc(1px*var(--tw-divide-y-reverse))}.divide-line>:not([hidden])~:not([hidden]){--tw-divide-opacity:1;border-color:rgb(226 232 240/var(--tw-divide-opacity,1))}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.truncate{overflow:hidden;text-overflow:ellipsis}.truncate,.whitespace-nowrap{white-space:nowrap}.rounded{border-radius:.25rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-md{border-radius:.375rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-2{border-width:2px}.border-b{border-bottom-width:1px}.border-b-2{border-bottom-width:2px}.border-t{border-top-width:1px}.border-dashed{border-style:dashed}.border-amber-100{--tw-border-opacity:1;border-color:rgb(254 243 199/var(--tw-border-opacity,1))}.border-blue-100{--tw-border-opacity:1;border-color:rgb(219 234 254/var(--tw-border-opacity,1))}.border-blue-200{--tw-border-opacity:1;border-color:rgb(191 219 254/var(--tw-border-opacity,1))}.border-line{--tw-border-opacity:1;border-color:rgb(226 232 240/var(--tw-border-opacity,1))}.border-orange-100{--tw-border-opacity:1;border-color:rgb(255 237 213/var(--tw-border-opacity,1))}.border-outline{--tw-border-opacity:1;border-color:rgb(199 206 216/var(--tw-border-opacity,1))}.border-primary{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.border-red-100{--tw-border-opacity:1;border-color:rgb(254 226 226/var(--tw-border-opacity,1))}.border-red-200{--tw-border-opacity:1;border-color:rgb(254 202 202/var(--tw-border-opacity,1))}.border-red-300{--tw-border-opacity:1;border-color:rgb(252 165 165/var(--tw-border-opacity,1))}.border-slate-200{--tw-border-opacity:1;border-color:rgb(226 232 240/var(--tw-border-opacity,1))}.border-slate-300{--tw-border-opacity:1;border-color:rgb(203 213 225/var(--tw-border-opacity,1))}.border-transparent{border-color:transparent}.bg-\[\#eceff3\]{--tw-bg-opacity:1;background-color:rgb(236 239 243/var(--tw-bg-opacity,1))}.bg-amber-50{--tw-bg-opacity:1;background-color:rgb(255 251 235/var(--tw-bg-opacity,1))}.bg-blue-50{--tw-bg-opacity:1;background-color:rgb(239 246 255/var(--tw-bg-opacity,1))}.bg-blueSoft{--tw-bg-opacity:1;background-color:rgb(234 243 255/var(--tw-bg-opacity,1))}.bg-dangerSoft{--tw-bg-opacity:1;background-color:rgb(255 240 240/var(--tw-bg-opacity,1))}.bg-orange-50{--tw-bg-opacity:1;background-color:rgb(255 247 237/var(--tw-bg-opacity,1))}.bg-page{--tw-bg-opacity:1;background-color:rgb(243 245 248/var(--tw-bg-opacity,1))}.bg-primary{--tw-bg-opacity:1;background-color:rgb(0 94 184/var(--tw-bg-opacity,1))}.bg-red-50{--tw-bg-opacity:1;background-color:rgb(254 242 242/var(--tw-bg-opacity,1))}.bg-slate-100{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.bg-slate-50{--tw-bg-opacity:1;background-color:rgb(248 250 252/var(--tw-bg-opacity,1))}.bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity,1))}.bg-white\/95{background-color:hsla(0,0%,100%,.95)}.object-contain{-o-object-fit:contain;object-fit:contain}.p-10{padding:2.5rem}.p-3{padding:.75rem}.p-3\.5{padding:.875rem}.p-4{padding:1rem}.p-5{padding:1.25rem}.p-6{padding:1.5rem}.px-0{padding-left:0;padding-right:0}.px-16{padding-left:4rem;padding-right:4rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-2\.5{padding-left:.625rem;padding-right:.625rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-5{padding-left:1.25rem;padding-right:1.25rem}.px-7{padding-left:1.75rem;padding-right:1.75rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-12{padding-top:3rem;padding-bottom:3rem}.py-14{padding-top:3.5rem;padding-bottom:3.5rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-3\.5{padding-top:.875rem;padding-bottom:.875rem}.py-4{padding-top:1rem;padding-bottom:1rem}.py-6{padding-top:1.5rem;padding-bottom:1.5rem}.py-8{padding-top:2rem;padding-bottom:2rem}.pl-11{padding-left:2.75rem}.pr-1{padding-right:.25rem}.pr-12{padding-right:3rem}.pr-4{padding-right:1rem}.pt-0\.5{padding-top:.125rem}.text-left{text-align:left}.text-center{text-align:center}.text-2xl{font-size:1.5rem;line-height:2rem}.text-3xl{font-size:1.875rem;line-height:2.25rem}.text-4xl{font-size:2.25rem;line-height:2.5rem}.text-5xl{font-size:3rem;line-height:1}.text-\[11px\]{font-size:11px}.text-\[12px\]{font-size:12px}.text-\[13px\]{font-size:13px}.text-\[15px\]{font-size:15px}.text-\[16px\]{font-size:16px}.text-\[18px\]{font-size:18px}.text-\[26px\]{font-size:26px}.text-\[28px\]{font-size:28px}.text-\[32px\]{font-size:32px}.text-\[44px\]{font-size:44px}.text-\[52px\]{font-size:52px}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-black{font-weight:900}.font-bold{font-weight:700}.font-extrabold{font-weight:800}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.italic{font-style:italic}.leading-5{line-height:1.25rem}.leading-6{line-height:1.5rem}.leading-7{line-height:1.75rem}.leading-\[1\.5\]{line-height:1.5}.tracking-\[0\.12em\]{letter-spacing:.12em}.tracking-\[0\.18em\]{letter-spacing:.18em}.tracking-tight{letter-spacing:-.025em}.text-amber-600{--tw-text-opacity:1;color:rgb(217 119 6/var(--tw-text-opacity,1))}.text-blue-600{--tw-text-opacity:1;color:rgb(37 99 235/var(--tw-text-opacity,1))}.text-dangerText{--tw-text-opacity:1;color:rgb(220 38 38/var(--tw-text-opacity,1))}.text-orange-600{--tw-text-opacity:1;color:rgb(234 88 12/var(--tw-text-opacity,1))}.text-primary{--tw-text-opacity:1;color:rgb(0 94 184/var(--tw-text-opacity,1))}.text-slate-400{--tw-text-opacity:1;color:rgb(148 163 184/var(--tw-text-opacity,1))}.text-slate-500{--tw-text-opacity:1;color:rgb(100 116 139/var(--tw-text-opacity,1))}.text-slate-600{--tw-text-opacity:1;color:rgb(71 85 105/var(--tw-text-opacity,1))}.text-successText{--tw-text-opacity:1;color:rgb(22 163 74/var(--tw-text-opacity,1))}.text-textMain{--tw-text-opacity:1;color:rgb(15 23 42/var(--tw-text-opacity,1))}.text-textSub{--tw-text-opacity:1;color:rgb(100 116 139/var(--tw-text-opacity,1))}.text-white{--tw-text-opacity:1;color:rgb(255 255 255/var(--tw-text-opacity,1))}.text-white\/50{color:hsla(0,0%,100%,.5)}.text-white\/75{color:hsla(0,0%,100%,.75)}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.opacity-0{opacity:0}.opacity-100{opacity:1}.opacity-50{opacity:.5}.shadow-\[0_18px_45px_rgba\(15\2c 23\2c 42\2c \.16\)\]{--tw-shadow:0 18px 45px rgba(15,23,42,.16);--tw-shadow-colored:0 18px 45px var(--tw-shadow-color)}.shadow-\[0_18px_45px_rgba\(15\2c 23\2c 42\2c \.16\)\],.shadow-panel{box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.shadow-panel{--tw-shadow:0 1px 2px rgba(15,23,42,.04);--tw-shadow-colored:0 1px 2px var(--tw-shadow-color)}.outline{outline-style:solid}.ring-4{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(4px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}.ring-red-100{--tw-ring-opacity:1;--tw-ring-color:rgb(254 226 226/var(--tw-ring-opacity,1))}.backdrop-blur{--tw-backdrop-blur:blur(8px);-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.transition{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,-webkit-backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter,-webkit-backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-all{transition-property:all;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.duration-200{transition-duration:.2s}.ease-out{transition-timing-function:cubic-bezier(0,0,.2,1)}@keyframes spin{to{transform:rotate(1turn)}}.hover\:border-primary:hover{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.hover\:bg-blue-50\/50:hover{background-color:rgba(239,246,255,.5)}.hover\:bg-slate-100:hover{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.hover\:bg-slate-50:hover{--tw-bg-opacity:1;background-color:rgb(248 250 252/var(--tw-bg-opacity,1))}.hover\:text-primary:hover{--tw-text-opacity:1;color:rgb(0 94 184/var(--tw-text-opacity,1))}.hover\:text-slate-700:hover{--tw-text-opacity:1;color:rgb(51 65 85/var(--tw-text-opacity,1))}.focus\:border-primary:focus{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.focus\:ring-0:focus{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}.focus\:ring-primary:focus{--tw-ring-opacity:1;--tw-ring-color:rgb(0 94 184/var(--tw-ring-opacity,1))}.disabled\:cursor-not-allowed:disabled{cursor:not-allowed}.disabled\:bg-slate-100:disabled{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.disabled\:text-slate-400:disabled{--tw-text-opacity:1;color:rgb(148 163 184/var(--tw-text-opacity,1))}@media (min-width:640px){.sm\:left-12{left:3rem}.sm\:right-12{right:3rem}.sm\:top-24{top:6rem}.sm\:inline{display:inline}.sm\:flex{display:flex}.sm\:flex-row{flex-direction:row}.sm\:items-start{align-items:flex-start}.sm\:items-center{align-items:center}.sm\:justify-between{justify-content:space-between}.sm\:p-6{padding:1.5rem}.sm\:px-12{padding-left:3rem;padding-right:3rem}.sm\:px-6{padding-left:1.5rem;padding-right:1.5rem}.sm\:text-4xl{font-size:2.25rem;line-height:2.5rem}}@media (min-width:768px){.md\:flex{display:flex}.md\:hidden{display:none}.md\:flex-row{flex-direction:row}.md\:items-center{align-items:center}.md\:justify-between{justify-content:space-between}.md\:px-14{padding-left:3.5rem;padding-right:3.5rem}}@media (min-width:1024px){.lg\:col-start-1{grid-column-start:1}.lg\:col-start-2{grid-column-start:2}.lg\:row-start-1{grid-row-start:1}.lg\:row-start-2{grid-row-start:2}.lg\:flex{display:flex}.lg\:hidden{display:none}.lg\:grid-cols-\[1\.4fr_1fr\]{grid-template-columns:1.4fr 1fr}.lg\:grid-cols-\[minmax\(0\2c 1fr\)_360px\]{grid-template-columns:minmax(0,1fr) 360px}.lg\:flex-row{flex-direction:row}.lg\:items-end{align-items:flex-end}.lg\:justify-between{justify-content:space-between}.lg\:px-8{padding-left:2rem;padding-right:2rem}.lg\:py-8{padding-top:2rem;padding-bottom:2rem}.lg\:text-\[40px\]{font-size:40px}}@media (min-width:1280px){.xl\:left-auto{left:auto}.xl\:right-auto{right:auto}.xl\:w-\[320px\]{width:320px}} \ No newline at end of file +/*! tailwindcss v3.4.19 | MIT License | https://tailwindcss.com*/*,:after,:before{box-sizing:border-box;border:0 solid #e5e7eb}:after,:before{--tw-content:""}:host,html{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}input:where(:not([type])),input:where([type=date]),input:where([type=datetime-local]),input:where([type=email]),input:where([type=month]),input:where([type=number]),input:where([type=password]),input:where([type=search]),input:where([type=tel]),input:where([type=text]),input:where([type=time]),input:where([type=url]),input:where([type=week]),select,select:where([multiple]),textarea{-webkit-appearance:none;-moz-appearance:none;appearance:none;background-color:#fff;border-color:#6b7280;border-width:1px;border-radius:0;padding:.5rem .75rem;font-size:1rem;line-height:1.5rem;--tw-shadow:0 0 #0000}input:where(:not([type])):focus,input:where([type=date]):focus,input:where([type=datetime-local]):focus,input:where([type=email]):focus,input:where([type=month]):focus,input:where([type=number]):focus,input:where([type=password]):focus,input:where([type=search]):focus,input:where([type=tel]):focus,input:where([type=text]):focus,input:where([type=time]):focus,input:where([type=url]):focus,input:where([type=week]):focus,select:focus,select:where([multiple]):focus,textarea:focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:#2563eb;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow);border-color:#2563eb}input::-moz-placeholder,textarea::-moz-placeholder{color:#6b7280;opacity:1}input::placeholder,textarea::placeholder{color:#6b7280;opacity:1}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-date-and-time-value{min-height:1.5em;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit,::-webkit-datetime-edit-day-field,::-webkit-datetime-edit-hour-field,::-webkit-datetime-edit-meridiem-field,::-webkit-datetime-edit-millisecond-field,::-webkit-datetime-edit-minute-field,::-webkit-datetime-edit-month-field,::-webkit-datetime-edit-second-field,::-webkit-datetime-edit-year-field{padding-top:0;padding-bottom:0}select{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 20 20'%3E%3Cpath stroke='%236b7280' stroke-linecap='round' stroke-linejoin='round' stroke-width='1.5' d='m6 8 4 4 4-4'/%3E%3C/svg%3E");background-position:right .5rem center;background-repeat:no-repeat;background-size:1.5em 1.5em;padding-right:2.5rem;-webkit-print-color-adjust:exact;print-color-adjust:exact}select:where([multiple]),select:where([size]:not([size="1"])){background-image:none;background-position:0 0;background-repeat:unset;background-size:initial;padding-right:.75rem;-webkit-print-color-adjust:unset;print-color-adjust:unset}input:where([type=checkbox]),input:where([type=radio]){-webkit-appearance:none;-moz-appearance:none;appearance:none;padding:0;-webkit-print-color-adjust:exact;print-color-adjust:exact;display:inline-block;vertical-align:middle;background-origin:border-box;-webkit-user-select:none;-moz-user-select:none;user-select:none;flex-shrink:0;height:1rem;width:1rem;color:#2563eb;background-color:#fff;border-color:#6b7280;border-width:1px;--tw-shadow:0 0 #0000}input:where([type=checkbox]){border-radius:0}input:where([type=radio]){border-radius:100%}input:where([type=checkbox]):focus,input:where([type=radio]):focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:2px;--tw-ring-offset-color:#fff;--tw-ring-color:#2563eb;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}input:where([type=checkbox]):checked,input:where([type=radio]):checked{border-color:transparent;background-color:currentColor;background-size:100% 100%;background-position:50%;background-repeat:no-repeat}input:where([type=checkbox]):checked{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Cpath d='M12.207 4.793a1 1 0 0 1 0 1.414l-5 5a1 1 0 0 1-1.414 0l-2-2a1 1 0 0 1 1.414-1.414L6.5 9.086l4.293-4.293a1 1 0 0 1 1.414 0'/%3E%3C/svg%3E")}@media (forced-colors:active) {input:where([type=checkbox]):checked{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=radio]):checked{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Ccircle cx='8' cy='8' r='3'/%3E%3C/svg%3E")}@media (forced-colors:active) {input:where([type=radio]):checked{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=checkbox]):checked:focus,input:where([type=checkbox]):checked:hover,input:where([type=radio]):checked:focus,input:where([type=radio]):checked:hover{border-color:transparent;background-color:currentColor}input:where([type=checkbox]):indeterminate{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 16 16'%3E%3Cpath stroke='%23fff' stroke-linecap='round' stroke-linejoin='round' stroke-width='2' d='M4 8h8'/%3E%3C/svg%3E");border-color:transparent;background-color:currentColor;background-size:100% 100%;background-position:50%;background-repeat:no-repeat}@media (forced-colors:active) {input:where([type=checkbox]):indeterminate{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=checkbox]):indeterminate:focus,input:where([type=checkbox]):indeterminate:hover{border-color:transparent;background-color:currentColor}input:where([type=file]){background:unset;border-color:inherit;border-width:0;border-radius:0;padding:0;font-size:unset;line-height:inherit}input:where([type=file]):focus{outline:1px solid ButtonText;outline:1px auto -webkit-focus-ring-color}body,h1,h2,h3,h4{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif}.material-symbols-outlined{font-family:Material Symbols Outlined;font-weight:400;font-style:normal;font-size:24px;letter-spacing:normal;text-transform:none;width:1em;height:1em;min-width:1em;flex:0 0 auto;overflow:hidden;word-wrap:normal;direction:ltr;vertical-align:middle;font-variation-settings:"FILL" 0,"wght" 400,"GRAD" 0,"opsz" 24}.material-symbols-outlined,.ui-btn{line-height:1;display:inline-flex;align-items:center;justify-content:center;white-space:nowrap}.ui-btn{box-sizing:border-box;min-height:44px;height:44px;gap:.5rem;border-radius:.375rem;border:1px solid transparent;padding:0 1rem;font-size:.875rem;font-weight:700;transition:background-color .15s ease,border-color .15s ease,color .15s ease,box-shadow .15s ease}.ui-btn-lg{min-height:52px;height:52px;font-size:.875rem}.ui-btn-sm{min-height:40px;height:40px;padding:0 .75rem}.ui-btn-compact{min-height:34px;height:34px;padding:0 .65rem;gap:.35rem;font-size:.8125rem}.ui-btn-field{min-height:50px;height:50px}.ui-btn-primary{background:#005eb8;color:#fff;box-shadow:0 18px 34px rgba(15,23,42,.06)}.ui-btn-primary:hover{background:#0c4188}.ui-btn-secondary{border-color:#e2e8f0;background:#fff;color:#334155;box-shadow:0 1px 2px rgba(15,23,42,.04)}.ui-btn-secondary:hover{border-color:#005eb8;color:#005eb8}.ui-btn:disabled,.ui-btn[aria-disabled=true]{cursor:not-allowed;box-shadow:none;opacity:.7}.ui-btn-primary:disabled{background:#cbd5e1}.ui-btn .material-symbols-outlined,.ui-btn-icon{width:20px;height:20px;flex:0 0 20px;font-size:20px}.ui-icon-btn{display:inline-flex;width:28px;height:28px;flex:0 0 28px;justify-content:center;transition:background-color .15s ease,color .15s ease}.ui-action-row,.ui-icon-btn{box-sizing:border-box;align-items:center;border-radius:.375rem;line-height:1}.ui-action-row{display:flex;min-height:44px;justify-content:space-between;gap:.75rem;border:1px solid #e2e8f0;padding:0 .75rem;font-size:.875rem;font-weight:700;transition:border-color .15s ease,color .15s ease}.ui-action-row:hover{border-color:#005eb8;color:#005eb8}.spinner{display:inline-flex;width:20px;height:20px;flex:0 0 20px;border-radius:9999px;border:2px solid hsla(0,0%,100%,.35);border-top-color:#fff;animation:spin .75s linear infinite}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border-width:0}.pointer-events-none{pointer-events:none}.static{position:static}.fixed{position:fixed}.absolute{position:absolute}.relative{position:relative}.sticky{position:sticky}.left-1\/2{left:50%}.left-4{left:1rem}.left-7{left:1.75rem}.right-7{right:1.75rem}.top-0{top:0}.top-1\/2{top:50%}.top-20{top:5rem}.top-6{top:1.5rem}.z-30{z-index:30}.z-50{z-index:50}.order-1{order:1}.order-2{order:2}.order-3{order:3}.order-4{order:4}.mx-auto{margin-left:auto;margin-right:auto}.-mr-1{margin-right:-.25rem}.-mt-1{margin-top:-.25rem}.mb-10{margin-bottom:2.5rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-5{margin-bottom:1.25rem}.mb-6{margin-bottom:1.5rem}.mb-7{margin-bottom:1.75rem}.mb-8{margin-bottom:2rem}.mt-1{margin-top:.25rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-4{margin-top:1rem}.mt-5{margin-top:1.25rem}.mt-6{margin-top:1.5rem}.block{display:block}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.hidden{display:none}.h-10{height:2.5rem}.h-14{height:3.5rem}.h-16{height:4rem}.h-8{height:2rem}.h-9{height:2.25rem}.h-\[460px\]{height:460px}.h-\[50px\]{height:50px}.h-\[520px\]{height:520px}.h-\[710px\]{height:710px}.h-\[900px\]{height:900px}.h-\[calc\(100vh-230px\)\]{height:calc(100vh - 230px)}.h-auto{height:auto}.h-full{height:100%}.h-px{height:1px}.min-h-0{min-height:0}.min-h-\[520px\]{min-height:520px}.min-h-\[560px\]{min-height:560px}.min-h-\[620px\]{min-height:620px}.min-h-\[76px\]{min-height:76px}.min-h-screen{min-height:100vh}.w-14{width:3.5rem}.w-8{width:2rem}.w-9{width:2.25rem}.w-\[calc\(100vw-2rem\)\]{width:calc(100vw - 2rem)}.w-fit{width:-moz-fit-content;width:fit-content}.w-full{width:100%}.w-px{width:1px}.min-w-0{min-width:0}.min-w-10{min-width:2.5rem}.min-w-\[150px\]{min-width:150px}.min-w-full{min-width:100%}.max-w-3xl{max-width:48rem}.max-w-7xl{max-width:80rem}.max-w-\[120px\]{max-width:120px}.max-w-\[360px\]{max-width:360px}.max-w-\[420px\]{max-width:420px}.max-w-\[430px\]{max-width:430px}.max-w-\[440px\]{max-width:440px}.flex-1{flex:1 1 0%}.shrink-0{flex-shrink:0}.-translate-x-1\/2{--tw-translate-x:-50%}.-translate-x-1\/2,.-translate-y-1\/2{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.-translate-y-1\/2{--tw-translate-y:-50%}.translate-y-0{--tw-translate-y:0px}.translate-y-0,.translate-y-3{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.translate-y-3{--tw-translate-y:0.75rem}.transform{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.cursor-pointer{cursor:pointer}.resize{resize:both}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-\[1fr_92px_44px\]{grid-template-columns:1fr 92px 44px}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.items-stretch{align-items:stretch}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-5{gap:1.25rem}.gap-6{gap:1.5rem}.gap-8{gap:2rem}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.75rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem*var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem*var(--tw-space-y-reverse))}.space-y-5>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1.25rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.25rem*var(--tw-space-y-reverse))}.divide-y>:not([hidden])~:not([hidden]){--tw-divide-y-reverse:0;border-top-width:calc(1px*(1 - var(--tw-divide-y-reverse)));border-bottom-width:calc(1px*var(--tw-divide-y-reverse))}.divide-line>:not([hidden])~:not([hidden]){--tw-divide-opacity:1;border-color:rgb(226 232 240/var(--tw-divide-opacity,1))}.overflow-auto{overflow:auto}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.truncate{overflow:hidden;text-overflow:ellipsis}.truncate,.whitespace-nowrap{white-space:nowrap}.rounded{border-radius:.25rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-md{border-radius:.375rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-2{border-width:2px}.border-b{border-bottom-width:1px}.border-b-2{border-bottom-width:2px}.border-t{border-top-width:1px}.border-dashed{border-style:dashed}.border-amber-100{--tw-border-opacity:1;border-color:rgb(254 243 199/var(--tw-border-opacity,1))}.border-blue-100{--tw-border-opacity:1;border-color:rgb(219 234 254/var(--tw-border-opacity,1))}.border-blue-200{--tw-border-opacity:1;border-color:rgb(191 219 254/var(--tw-border-opacity,1))}.border-line{--tw-border-opacity:1;border-color:rgb(226 232 240/var(--tw-border-opacity,1))}.border-orange-100{--tw-border-opacity:1;border-color:rgb(255 237 213/var(--tw-border-opacity,1))}.border-outline{--tw-border-opacity:1;border-color:rgb(199 206 216/var(--tw-border-opacity,1))}.border-primary{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.border-red-100{--tw-border-opacity:1;border-color:rgb(254 226 226/var(--tw-border-opacity,1))}.border-red-200{--tw-border-opacity:1;border-color:rgb(254 202 202/var(--tw-border-opacity,1))}.border-red-300{--tw-border-opacity:1;border-color:rgb(252 165 165/var(--tw-border-opacity,1))}.border-slate-200{--tw-border-opacity:1;border-color:rgb(226 232 240/var(--tw-border-opacity,1))}.border-slate-300{--tw-border-opacity:1;border-color:rgb(203 213 225/var(--tw-border-opacity,1))}.border-transparent{border-color:transparent}.bg-\[\#eceff3\]{--tw-bg-opacity:1;background-color:rgb(236 239 243/var(--tw-bg-opacity,1))}.bg-amber-50{--tw-bg-opacity:1;background-color:rgb(255 251 235/var(--tw-bg-opacity,1))}.bg-blue-50{--tw-bg-opacity:1;background-color:rgb(239 246 255/var(--tw-bg-opacity,1))}.bg-blueSoft{--tw-bg-opacity:1;background-color:rgb(234 243 255/var(--tw-bg-opacity,1))}.bg-dangerSoft{--tw-bg-opacity:1;background-color:rgb(255 240 240/var(--tw-bg-opacity,1))}.bg-orange-50{--tw-bg-opacity:1;background-color:rgb(255 247 237/var(--tw-bg-opacity,1))}.bg-page{--tw-bg-opacity:1;background-color:rgb(243 245 248/var(--tw-bg-opacity,1))}.bg-primary{--tw-bg-opacity:1;background-color:rgb(0 94 184/var(--tw-bg-opacity,1))}.bg-red-50{--tw-bg-opacity:1;background-color:rgb(254 242 242/var(--tw-bg-opacity,1))}.bg-slate-100{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.bg-slate-50{--tw-bg-opacity:1;background-color:rgb(248 250 252/var(--tw-bg-opacity,1))}.bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity,1))}.bg-white\/95{background-color:hsla(0,0%,100%,.95)}.object-contain{-o-object-fit:contain;object-fit:contain}.p-10{padding:2.5rem}.p-3{padding:.75rem}.p-3\.5{padding:.875rem}.p-4{padding:1rem}.p-5{padding:1.25rem}.p-6{padding:1.5rem}.px-0{padding-left:0;padding-right:0}.px-16{padding-left:4rem;padding-right:4rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-2\.5{padding-left:.625rem;padding-right:.625rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-5{padding-left:1.25rem;padding-right:1.25rem}.px-7{padding-left:1.75rem;padding-right:1.75rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-12{padding-top:3rem;padding-bottom:3rem}.py-14{padding-top:3.5rem;padding-bottom:3.5rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-3\.5{padding-top:.875rem;padding-bottom:.875rem}.py-4{padding-top:1rem;padding-bottom:1rem}.py-6{padding-top:1.5rem;padding-bottom:1.5rem}.py-8{padding-top:2rem;padding-bottom:2rem}.pl-11{padding-left:2.75rem}.pr-1{padding-right:.25rem}.pr-12{padding-right:3rem}.pr-4{padding-right:1rem}.pt-0\.5{padding-top:.125rem}.text-left{text-align:left}.text-center{text-align:center}.text-2xl{font-size:1.5rem;line-height:2rem}.text-3xl{font-size:1.875rem;line-height:2.25rem}.text-4xl{font-size:2.25rem;line-height:2.5rem}.text-5xl{font-size:3rem;line-height:1}.text-\[11px\]{font-size:11px}.text-\[12px\]{font-size:12px}.text-\[13px\]{font-size:13px}.text-\[15px\]{font-size:15px}.text-\[16px\]{font-size:16px}.text-\[18px\]{font-size:18px}.text-\[26px\]{font-size:26px}.text-\[28px\]{font-size:28px}.text-\[32px\]{font-size:32px}.text-\[44px\]{font-size:44px}.text-\[52px\]{font-size:52px}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-black{font-weight:900}.font-bold{font-weight:700}.font-extrabold{font-weight:800}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.italic{font-style:italic}.leading-5{line-height:1.25rem}.leading-6{line-height:1.5rem}.leading-7{line-height:1.75rem}.leading-\[1\.5\]{line-height:1.5}.tracking-\[0\.12em\]{letter-spacing:.12em}.tracking-\[0\.18em\]{letter-spacing:.18em}.tracking-tight{letter-spacing:-.025em}.text-amber-600{--tw-text-opacity:1;color:rgb(217 119 6/var(--tw-text-opacity,1))}.text-blue-600{--tw-text-opacity:1;color:rgb(37 99 235/var(--tw-text-opacity,1))}.text-dangerText{--tw-text-opacity:1;color:rgb(220 38 38/var(--tw-text-opacity,1))}.text-orange-600{--tw-text-opacity:1;color:rgb(234 88 12/var(--tw-text-opacity,1))}.text-primary{--tw-text-opacity:1;color:rgb(0 94 184/var(--tw-text-opacity,1))}.text-slate-400{--tw-text-opacity:1;color:rgb(148 163 184/var(--tw-text-opacity,1))}.text-slate-500{--tw-text-opacity:1;color:rgb(100 116 139/var(--tw-text-opacity,1))}.text-slate-600{--tw-text-opacity:1;color:rgb(71 85 105/var(--tw-text-opacity,1))}.text-successText{--tw-text-opacity:1;color:rgb(22 163 74/var(--tw-text-opacity,1))}.text-textMain{--tw-text-opacity:1;color:rgb(15 23 42/var(--tw-text-opacity,1))}.text-textSub{--tw-text-opacity:1;color:rgb(100 116 139/var(--tw-text-opacity,1))}.text-white{--tw-text-opacity:1;color:rgb(255 255 255/var(--tw-text-opacity,1))}.text-white\/50{color:hsla(0,0%,100%,.5)}.text-white\/75{color:hsla(0,0%,100%,.75)}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.opacity-0{opacity:0}.opacity-100{opacity:1}.opacity-50{opacity:.5}.shadow-\[0_18px_45px_rgba\(15\2c 23\2c 42\2c \.16\)\]{--tw-shadow:0 18px 45px rgba(15,23,42,.16);--tw-shadow-colored:0 18px 45px var(--tw-shadow-color)}.shadow-\[0_18px_45px_rgba\(15\2c 23\2c 42\2c \.16\)\],.shadow-panel{box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.shadow-panel{--tw-shadow:0 1px 2px rgba(15,23,42,.04);--tw-shadow-colored:0 1px 2px var(--tw-shadow-color)}.outline{outline-style:solid}.ring-4{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(4px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}.ring-red-100{--tw-ring-opacity:1;--tw-ring-color:rgb(254 226 226/var(--tw-ring-opacity,1))}.backdrop-blur{--tw-backdrop-blur:blur(8px);-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.transition{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,-webkit-backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter,-webkit-backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-all{transition-property:all;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.duration-200{transition-duration:.2s}.ease-out{transition-timing-function:cubic-bezier(0,0,.2,1)}@keyframes spin{to{transform:rotate(1turn)}}.hover\:border-primary:hover{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.hover\:bg-blue-50\/50:hover{background-color:rgba(239,246,255,.5)}.hover\:bg-slate-100:hover{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.hover\:bg-slate-50:hover{--tw-bg-opacity:1;background-color:rgb(248 250 252/var(--tw-bg-opacity,1))}.hover\:text-primary:hover{--tw-text-opacity:1;color:rgb(0 94 184/var(--tw-text-opacity,1))}.hover\:text-primaryDeep:hover{--tw-text-opacity:1;color:rgb(12 65 136/var(--tw-text-opacity,1))}.hover\:text-slate-700:hover{--tw-text-opacity:1;color:rgb(51 65 85/var(--tw-text-opacity,1))}.focus\:border-primary:focus{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.focus\:ring-0:focus{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}.focus\:ring-primary:focus{--tw-ring-opacity:1;--tw-ring-color:rgb(0 94 184/var(--tw-ring-opacity,1))}.disabled\:cursor-not-allowed:disabled{cursor:not-allowed}.disabled\:bg-slate-100:disabled{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.disabled\:text-slate-400:disabled{--tw-text-opacity:1;color:rgb(148 163 184/var(--tw-text-opacity,1))}@media (min-width:640px){.sm\:left-12{left:3rem}.sm\:right-12{right:3rem}.sm\:top-24{top:6rem}.sm\:inline{display:inline}.sm\:flex{display:flex}.sm\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.sm\:flex-row{flex-direction:row}.sm\:items-start{align-items:flex-start}.sm\:items-center{align-items:center}.sm\:justify-between{justify-content:space-between}.sm\:p-6{padding:1.5rem}.sm\:px-12{padding-left:3rem;padding-right:3rem}.sm\:px-6{padding-left:1.5rem;padding-right:1.5rem}.sm\:text-4xl{font-size:2.25rem;line-height:2.5rem}}@media (min-width:768px){.md\:flex{display:flex}.md\:hidden{display:none}.md\:w-auto{width:auto}.md\:grid-cols-\[minmax\(0\2c 1fr\)_auto\]{grid-template-columns:minmax(0,1fr) auto}.md\:flex-nowrap{flex-wrap:nowrap}.md\:items-center{align-items:center}.md\:px-14{padding-left:3.5rem;padding-right:3.5rem}}@media (min-width:1024px){.lg\:col-start-1{grid-column-start:1}.lg\:col-start-2{grid-column-start:2}.lg\:row-start-1{grid-row-start:1}.lg\:row-start-2{grid-row-start:2}.lg\:flex{display:flex}.lg\:hidden{display:none}.lg\:grid-cols-\[1\.4fr_1fr\]{grid-template-columns:1.4fr 1fr}.lg\:grid-cols-\[minmax\(0\2c 1fr\)_360px\]{grid-template-columns:minmax(0,1fr) 360px}.lg\:flex-row{flex-direction:row}.lg\:items-end{align-items:flex-end}.lg\:justify-between{justify-content:space-between}.lg\:px-8{padding-left:2rem;padding-right:2rem}.lg\:py-8{padding-top:2rem;padding-bottom:2rem}.lg\:text-\[40px\]{font-size:40px}}@media (min-width:1280px){.xl\:left-auto{left:auto}.xl\:right-auto{right:auto}.xl\:w-\[320px\]{width:320px}} \ No newline at end of file diff --git a/static/css/app.src.css b/static/css/app.src.css index 25647fd..7fd9d23 100644 --- a/static/css/app.src.css +++ b/static/css/app.src.css @@ -77,6 +77,14 @@ padding: 0 .75rem; } + .ui-btn-compact { + min-height: 34px; + height: 34px; + padding: 0 .65rem; + gap: .35rem; + font-size: .8125rem; + } + .ui-btn-field { min-height: 50px; height: 50px; diff --git a/templates/admin.html b/templates/admin.html index 7e0f587..ed421f7 100644 --- a/templates/admin.html +++ b/templates/admin.html @@ -8,7 +8,7 @@

管理台

-

管理系统注册状态,查看所有用户的上传文件和预测结果。

+

管理系统注册状态、密码重置链接,查看所有用户的上传文件和预测结果。

arrow_back @@ -38,7 +38,62 @@
-
+
+
+
+

用户密码重置

+

为普通用户生成一次性重置链接,旧链接会自动失效。

+
+ 共 {{ password_reset_users|length }} 位普通用户 +
+ +
+ + + + + + + + + + {% for user in password_reset_users %} + + + + + + {% else %} + + + + {% endfor %} + +
用户创建时间操作
{{ user.username }}{{ user.created_at.strftime('%Y-%m-%d %H:%M:%S') if user.created_at else '-' }} +
+ + +
+
暂无普通用户
+
+
+ +

上传记录

@@ -47,7 +102,7 @@ {% endif %}
-
+
@@ -125,5 +180,59 @@ } }); })(); + + (() => { + const panel = document.getElementById('resetLinkPanel'); + const value = document.getElementById('resetLinkValue'); + const expires = document.getElementById('resetLinkExpires'); + const copy = document.getElementById('resetLinkCopy'); + + if (!panel || !value || !expires || !copy) return; + + document.querySelectorAll('[data-reset-link-form]').forEach((form) => { + const submit = form.querySelector('button[type="submit"]'); + const submitText = submit?.lastChild; + + form.addEventListener('submit', async (event) => { + event.preventDefault(); + if (submit) submit.disabled = true; + if (submitText) submitText.textContent = '生成中'; + + try { + const response = await fetch(form.action, { + method: 'POST', + body: new FormData(form), + headers: { 'X-Requested-With': 'XMLHttpRequest' }, + }); + const data = await response.json(); + + if (!response.ok) { + window.showAppNotification?.(data.error || '生成失败,请刷新页面后重试。', 'error', '生成失败'); + return; + } + + value.value = data.reset_url; + expires.textContent = `有效期至 ${data.expires_at}`; + panel.classList.remove('hidden'); + window.showAppNotification?.(data.message, 'info'); + } catch (error) { + window.showAppNotification?.('请求失败,请检查后端服务是否正常。', 'error', '生成失败'); + } finally { + if (submit) submit.disabled = false; + if (submitText) submitText.textContent = '生成重置链接'; + } + }); + }); + + copy.addEventListener('click', async () => { + value.select(); + try { + await navigator.clipboard.writeText(value.value); + } catch (error) { + document.execCommand('copy'); + } + window.showAppNotification?.('重置链接已复制', 'info'); + }); + })(); {% endblock %} diff --git a/templates/history.html b/templates/history.html index 85be932..cc27c5e 100644 --- a/templates/history.html +++ b/templates/history.html @@ -16,7 +16,7 @@ -
+

上传记录

@@ -25,23 +25,23 @@ {% endif %}
-
+
{% for record in records %} -
-
-
{{ record.original_filename }}
-
+
+
+
{{ record.original_filename }}
+
{{ record.upload_time.strftime('%Y-%m-%d %H:%M:%S') }} 记录 #{{ record.id }}
-
- +
+ description 原始文件 - + download 预测结果 diff --git a/templates/login.html b/templates/login.html index 80dac28..71f264a 100644 --- a/templates/login.html +++ b/templates/login.html @@ -150,7 +150,7 @@ water_drop 供水管道健康评估系统
-

系统门户

+

系统门户

登录 @@ -171,7 +171,7 @@
- 找回密码 +
lock @@ -207,7 +207,7 @@ {% else %} -
+
@@ -226,6 +226,19 @@
+
+ +
+
+ verified_user + +
+
{{ captcha }}
+ + refresh + +
+
+
+
+
+ water_drop + 供水管道健康评估系统 +
+
+ lock_reset +
+

重置密码

+

+ {% if token_available %} + 为账号 {{ reset_token.user.username }} 设置新密码。 + {% else %} + 当前链接不可用,请联系管理员重新生成一次性重置链接。 + {% endif %} +

+ + {% if token_available %} + + +
+ +
+ lock + + +
+
+ +
+ +
+ lock + + +
+
+ +
+
链接有效期至
{{ format_datetime(reset_token.expires_at) }}
+ +
+ + {% else %} + + {% endif %} +
+
+ + {% endwith %} + + + diff --git a/tests/test_auth_registration.py b/tests/test_auth_registration.py index 26e0d42..9bf55f5 100644 --- a/tests/test_auth_registration.py +++ b/tests/test_auth_registration.py @@ -4,11 +4,12 @@ import re import unittest from datetime import datetime, timedelta from tempfile import TemporaryDirectory +from urllib.parse import urlparse from app import create_app from app.config import Config from app.extensions import db -from app.models import AppSetting, UploadRecord, User +from app.models import AppSetting, PasswordResetToken, UploadRecord, User class RegistrationRoutesTest(unittest.TestCase): @@ -28,12 +29,13 @@ class RegistrationRoutesTest(unittest.TestCase): self.assertIsNotNone(match) return match.group(1).decode() - def create_user(self, app, username: str, password: str, *, is_admin: bool = False) -> None: + def create_user(self, app, username: str, password: str, *, is_admin: bool = False) -> int: with app.app_context(): user = User(username=username, is_admin=is_admin) user.set_password(password) db.session.add(user) db.session.commit() + return user.id def add_upload_records(self, app, username: str, count: int) -> None: with app.app_context(): @@ -69,6 +71,31 @@ class RegistrationRoutesTest(unittest.TestCase): ) self.assertEqual(login_response.status_code, 302) + def login_attempt(self, client, username: str, password: str): + response = client.get("/login") + token = self.csrf_token_from(response.data) + with client.session_transaction() as session: + captcha = session["captcha"] + + return client.post( + "/login", + data={ + "csrf_token": token, + "username": username, + "password": password, + "captcha": captcha, + }, + ) + + def create_reset_link(self, app, client, user_id: int) -> str: + token = self.csrf_token_from(client.get("/admin").data) + response = client.post( + f"/admin/users/{user_id}/password-reset-link", + data={"csrf_token": token}, + ) + self.assertEqual(response.status_code, 200) + return urlparse(response.get_json()["reset_url"]).path + def test_login_page_always_shows_register_entry_when_registration_is_closed(self) -> None: with TemporaryDirectory() as temp_dir: app = self.create_test_app(temp_dir, allow_registration=False) @@ -89,7 +116,44 @@ class RegistrationRoutesTest(unittest.TestCase): self.assertIn("当前未开放自助注册", html) self.assertIn("disabled", html) + def test_register_page_shows_captcha(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=True) + client = app.test_client() + + response = client.get("/register") + html = response.get_data(as_text=True) + with client.session_transaction() as session: + captcha = session["captcha"] + + self.assertEqual(response.status_code, 200) + self.assertIn('name="captcha"', html) + self.assertIn(captcha, html) + def test_register_post_does_not_create_user_when_registration_is_closed(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=False) + client = app.test_client() + token = self.csrf_token_from(client.get("/register").data) + with client.session_transaction() as session: + captcha = session["captcha"] + + response = client.post( + "/register", + data={ + "csrf_token": token, + "username": "new-user", + "password": "secret123", + "captcha": captcha, + }, + ) + + self.assertEqual(response.status_code, 403) + self.assertIn("当前未开放自助注册", response.get_data(as_text=True)) + with app.app_context(): + self.assertIsNone(User.query.filter_by(username="new-user").first()) + + def test_register_post_checks_captcha_before_registration_setting(self) -> None: with TemporaryDirectory() as temp_dir: app = self.create_test_app(temp_dir, allow_registration=False) client = app.test_client() @@ -97,11 +161,37 @@ class RegistrationRoutesTest(unittest.TestCase): response = client.post( "/register", - data={"csrf_token": token, "username": "new-user", "password": "secret123"}, + data={ + "csrf_token": token, + "username": "new-user", + "password": "secret123", + "captcha": "WRONG", + }, ) - self.assertEqual(response.status_code, 403) - self.assertIn("当前未开放自助注册", response.get_data(as_text=True)) + self.assertEqual(response.status_code, 400) + self.assertIn("验证码错误", response.get_data(as_text=True)) + with app.app_context(): + self.assertIsNone(User.query.filter_by(username="new-user").first()) + + def test_register_post_rejects_wrong_captcha(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=True) + client = app.test_client() + token = self.csrf_token_from(client.get("/register").data) + + response = client.post( + "/register", + data={ + "csrf_token": token, + "username": "new-user", + "password": "secret123", + "captcha": "WRONG", + }, + ) + + self.assertEqual(response.status_code, 400) + self.assertIn("验证码错误", response.get_data(as_text=True)) with app.app_context(): self.assertIsNone(User.query.filter_by(username="new-user").first()) @@ -110,10 +200,17 @@ class RegistrationRoutesTest(unittest.TestCase): app = self.create_test_app(temp_dir, allow_registration=True) client = app.test_client() token = self.csrf_token_from(client.get("/register").data) + with client.session_transaction() as session: + captcha = session["captcha"] response = client.post( "/register", - data={"csrf_token": token, "username": "new-user", "password": "secret123"}, + data={ + "csrf_token": token, + "username": "new-user", + "password": "secret123", + "captcha": captcha, + }, ) self.assertEqual(response.status_code, 200) @@ -164,6 +261,225 @@ class RegistrationRoutesTest(unittest.TestCase): with app.app_context(): self.assertFalse(AppSetting.get_bool("allow_registration", True)) + def test_admin_can_create_password_reset_link_for_regular_user(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=False) + self.create_user(app, "admin", "secret123", is_admin=True) + user_id = self.create_user(app, "alice", "oldpass") + client = app.test_client() + self.login(client, "admin", "secret123") + + token = self.csrf_token_from(client.get("/admin").data) + response = client.post( + f"/admin/users/{user_id}/password-reset-link", + data={"csrf_token": token}, + ) + data = response.get_json() + + self.assertEqual(response.status_code, 200) + self.assertIn("/password-reset/", data["reset_url"]) + self.assertEqual(data["username"], "alice") + with app.app_context(): + self.assertEqual(PasswordResetToken.query.count(), 1) + + def test_admin_password_reset_section_lists_registered_users_without_uploads(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=True) + self.create_user(app, "admin", "secret123", is_admin=True) + client = app.test_client() + + register_page = client.get("/register") + token = self.csrf_token_from(register_page.data) + with client.session_transaction() as session: + captcha = session["captcha"] + register_response = client.post( + "/register", + data={ + "csrf_token": token, + "username": "registered-user", + "password": "secret123", + "captcha": captcha, + }, + ) + self.assertEqual(register_response.status_code, 200) + + self.login(client, "admin", "secret123") + admin_page = client.get("/admin").get_data(as_text=True) + + self.assertIn("用户密码重置", admin_page) + self.assertIn("registered-user", admin_page) + self.assertIn("生成重置链接", admin_page) + + def test_password_reset_link_requires_admin(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=False) + user_id = self.create_user(app, "alice", "oldpass") + client = app.test_client() + token = self.csrf_token_from(client.get("/login").data) + + anonymous_response = client.post( + f"/admin/users/{user_id}/password-reset-link", + data={"csrf_token": token}, + ) + + self.assertEqual(anonymous_response.status_code, 302) + + self.login(client, "alice", "oldpass") + token = self.csrf_token_from(client.get("/home").data) + user_response = client.post( + f"/admin/users/{user_id}/password-reset-link", + data={"csrf_token": token}, + ) + + self.assertEqual(user_response.status_code, 403) + + def test_admin_cannot_create_password_reset_link_for_admin_user(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=False) + admin_id = self.create_user(app, "admin", "secret123", is_admin=True) + client = app.test_client() + self.login(client, "admin", "secret123") + token = self.csrf_token_from(client.get("/admin").data) + + response = client.post( + f"/admin/users/{admin_id}/password-reset-link", + data={"csrf_token": token}, + ) + + self.assertEqual(response.status_code, 403) + self.assertIn("管理员账号", response.get_json()["error"]) + + def test_password_reset_changes_password_and_consumes_link(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=False) + self.create_user(app, "admin", "secret123", is_admin=True) + user_id = self.create_user(app, "alice", "oldpass") + admin_client = app.test_client() + self.login(admin_client, "admin", "secret123") + reset_path = self.create_reset_link(app, admin_client, user_id) + + client = app.test_client() + reset_page = client.get(reset_path) + token = self.csrf_token_from(reset_page.data) + response = client.post( + reset_path, + data={ + "csrf_token": token, + "password": "newpass123", + "password_confirm": "newpass123", + }, + ) + + self.assertEqual(response.status_code, 200) + self.assertIn("密码已重置", response.get_data(as_text=True)) + self.assertEqual(self.login_attempt(client, "alice", "oldpass").status_code, 400) + self.assertEqual(self.login_attempt(client, "alice", "newpass123").status_code, 302) + self.assertEqual(client.get(reset_path).status_code, 400) + with app.app_context(): + reset_token = PasswordResetToken.query.one() + self.assertIsNotNone(reset_token.used_at) + + def test_password_reset_page_displays_expiry_in_configured_timezone(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=False) + self.create_user(app, "admin", "secret123", is_admin=True) + user_id = self.create_user(app, "alice", "oldpass") + admin_client = app.test_client() + self.login(admin_client, "admin", "secret123") + reset_path = self.create_reset_link(app, admin_client, user_id) + + with app.app_context(): + reset_token = PasswordResetToken.query.one() + reset_token.expires_at = datetime(2027, 1, 1, 0, 0, 0) + db.session.commit() + + response = app.test_client().get(reset_path) + + self.assertEqual(response.status_code, 200) + self.assertIn("2027-01-01 08:00:00", response.get_data(as_text=True)) + + def test_expired_password_reset_link_cannot_change_password(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=False) + self.create_user(app, "admin", "secret123", is_admin=True) + user_id = self.create_user(app, "alice", "oldpass") + admin_client = app.test_client() + self.login(admin_client, "admin", "secret123") + reset_path = self.create_reset_link(app, admin_client, user_id) + + with app.app_context(): + reset_token = PasswordResetToken.query.one() + reset_token.expires_at = datetime.utcnow() - timedelta(minutes=1) + db.session.commit() + + client = app.test_client() + token = self.csrf_token_from(client.get("/login").data) + response = client.post( + reset_path, + data={ + "csrf_token": token, + "password": "newpass123", + "password_confirm": "newpass123", + }, + ) + + self.assertEqual(response.status_code, 400) + self.assertEqual(self.login_attempt(client, "alice", "oldpass").status_code, 302) + + def test_new_password_reset_link_invalidates_previous_link(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=False) + self.create_user(app, "admin", "secret123", is_admin=True) + user_id = self.create_user(app, "alice", "oldpass") + client = app.test_client() + self.login(client, "admin", "secret123") + + first_path = self.create_reset_link(app, client, user_id) + second_path = self.create_reset_link(app, client, user_id) + + self.assertEqual(client.get(first_path).status_code, 400) + self.assertEqual(client.get(second_path).status_code, 200) + + def test_password_reset_validation_does_not_consume_link(self) -> None: + with TemporaryDirectory() as temp_dir: + app = self.create_test_app(temp_dir, allow_registration=False) + self.create_user(app, "admin", "secret123", is_admin=True) + user_id = self.create_user(app, "alice", "oldpass") + admin_client = app.test_client() + self.login(admin_client, "admin", "secret123") + reset_path = self.create_reset_link(app, admin_client, user_id) + + client = app.test_client() + reset_page = client.get(reset_path) + token = self.csrf_token_from(reset_page.data) + short_response = client.post( + reset_path, + data={ + "csrf_token": token, + "password": "short", + "password_confirm": "short", + }, + ) + + self.assertEqual(short_response.status_code, 400) + + reset_page = client.get(reset_path) + token = self.csrf_token_from(reset_page.data) + mismatch_response = client.post( + reset_path, + data={ + "csrf_token": token, + "password": "newpass123", + "password_confirm": "different", + }, + ) + + self.assertEqual(mismatch_response.status_code, 400) + self.assertEqual(client.get(reset_path).status_code, 200) + with app.app_context(): + reset_token = PasswordResetToken.query.one() + self.assertIsNone(reset_token.used_at) + def test_history_page_paginates_upload_records(self) -> None: with TemporaryDirectory() as temp_dir: app = self.create_test_app(temp_dir, allow_registration=False)