Owner accounts: auth, password reset, CRM dashboard visibility (#19)

Flask-session login scoped to one client_id (never a request param), self-service + operator-triggered password reset via single-use tokens, and an Owner accounts tab on the CRM dashboard. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-03 17:00:37 +02:00
parent 644c99ee30
commit 59c35ce39f
14 changed files with 635 additions and 0 deletions
@@ -0,0 +1,51 @@
+<!DOCTYPE html>
+<html lang="de">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <meta name="robots" content="noindex" />
+  <title>Passwort zurücksetzen</title>
+  <style>
+    :root {
+      --brand: #0f8a7e;
+      --bg: #fff; --ink: #16302f; --muted: #5d716f; --line: #e3eae9;
+      --danger: #b3261e; --danger-bg: #fdecea;
+    }
+    * { box-sizing: border-box; }
+    body { margin: 0; font-family: system-ui, -apple-system, Segoe UI, Roboto, sans-serif;
+      background: var(--bg); color: var(--ink); padding: 20px; max-width: 380px; }
+    h1 { font-size: 1.2rem; margin: 0 0 18px; }
+    label { display: block; font-size: .82rem; color: var(--muted); margin-bottom: 5px; }
+    input[type=password] { width: 100%; padding: 9px 12px; border: 1px solid var(--line);
+      border-radius: 9px; font: inherit; font-size: .9rem; }
+    .field { margin-bottom: 14px; }
+    .btn { background: var(--brand); color: #fff; border: 0; border-radius: 9px;
+      padding: 11px 20px; font: inherit; font-size: .92rem; font-weight: 600; cursor: pointer;
+      width: 100%; }
+    .error { background: var(--danger-bg); color: var(--danger); border-radius: 9px;
+      padding: 10px 14px; font-size: .88rem; margin-bottom: 14px; }
+    .card { border: 1px solid var(--line); border-radius: 12px; padding: 20px; background: #f6faf9; }
+    .muted { color: var(--muted); font-size: .85rem; }
+    a { color: var(--brand); }
+  </style>
+</head>
+<body>
+  <h1>Passwort zurücksetzen</h1>
+  {% if done %}
+  <div class="card">
+    <p>Ihr Passwort wurde geändert.</p>
+    <p class="muted"><a href="{{ url_for('owner_auth.login') }}">Jetzt anmelden</a></p>
+  </div>
+  {% else %}
+  {% if error %}<div class="error">{{ error }}</div>{% endif %}
+  <form method="post">
+    <div class="field">
+      <label for="password">Neues Passwort</label>
+      <input type="password" id="password" name="password" required minlength="8"
+             autocomplete="new-password" />
+    </div>
+    <button class="btn" type="submit">Passwort speichern</button>
+  </form>
+  {% endif %}
+</body>
+</html>