diff --git a/CHANGELOG.md b/CHANGELOG.md index 1daba71..922db86 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,52 @@ All notable changes to this project will be documented in this file. +## 2.8.0 - 2026-08-16 + +### Added + +- Filtered audit-log CSV export with a dedicated `audit-log.export` permission. +- Canvas Sizes as an individual Content audit category. +- Audit events for slide, template, playlist, and screen changes. +- Audit events for System Settings changes. +- Administration audit events for user and role management. +- Audit logging enablement, category selection, and request metadata controls. +- The extensible audit event storage, retention setting, dedicated audit-log permission, and paginated viewer foundation. +- A Defaults settings section for player and announcement defaults. +- A configurable maximum active session limit that removes the oldest sessions first. +- IP address and user-agent metadata to active sessions. +- The option for users to sign out their other active sessions from My Account. +- Persistent administrator-controlled account locking and unlocking. +- Database-backed login rate limiting with configurable attempts, lockout duration, and tracking scope. +- A permissions-gated System Settings page for announcement icon suggestions, media upload limits and MIME types, session lifetime, and password-change policies. +- Configurable forced password changes for newly created users and administrator password resets. +- The database foundation for key-based application settings, including typed defaults and validation. + +### Changed + +- Updated the API and database documentation and added the Docker publish status badge to the project README. +- Renamed the audit export permission to `audit-log.allow`. +- Made Content and Data Sources audit categories opt-in and excluded automatic data-source refreshes from audit logging. +- Split Content audit logging into individual Slides, Templates, Playlists, Screens, and Announcements categories. +- Renamed the System Settings audit category key from `settings` to `system-settings`. +- Split audit administration events into separate Users and Roles categories. +- Split RSS and API data-source refresh defaults. +- Made the default announcement duration use a value and unit selector, matching announcement forms. +- Replaced password strength presets with customizable length, category, and character requirements. +- Session expiration now uses the configured system setting, and user and role administration is grouped under the Settings area. +- Renamed the system settings permissions to the `system-settings.*` namespace and migrated existing role assignments. +- Added numeric auto-increment identifiers to every table and retained natural or relationship keys as unique constraints. + +## 2.7.6 - 2026-08-15 + +### Changed + +- The announcement icon picker now supports searching the full Bootstrap Icons catalog while still showing the curated suggestion set by default. + +### Fixed + +- The announcement Play/Stop button now refreshes after saving screen-group changes, so Play stays disabled until the announcement actually has targets again. + ## 2.7.5 - 2026-08-15 ### Changed diff --git a/README.md b/README.md index f6fb72d..d8178ab 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,7 @@ # Pulse Signage +[![Publish Docker Image](https://git.lzstealth.com/lzstealth/pulse-signage/actions/workflows/docker-publish.yml/badge.svg?branch=main)](https://git.lzstealth.com/lzstealth/pulse-signage/actions?workflow=docker-publish.yml) + Pulse Signage is a self-hosted digital signage platform for teams that want clear, reliable control over the content on every screen. It gives you one place to publish playlists, slides, announcements, and live updates without handing the workflow to a third-party service. diff --git a/build/package.player.json b/build/package.player.json index c2d703b..8f2dc82 100644 --- a/build/package.player.json +++ b/build/package.player.json @@ -1,6 +1,6 @@ { "name": "pulse-signage-player", - "version": "2.7.5", + "version": "2.8.0", "private": false, "description": "Pulse Signage player application bundle", "engines": { diff --git a/build/package.web.json b/build/package.web.json index d73ad09..a8064be 100644 --- a/build/package.web.json +++ b/build/package.web.json @@ -1,6 +1,6 @@ { "name": "pulse-signage-web", - "version": "2.7.5", + "version": "2.8.0", "private": false, "description": "Pulse Signage web and bridge application bundle", "engines": { diff --git a/docker-compose/.env.example b/docker-compose/.env.example index 9b5241e..b1fb10a 100644 --- a/docker-compose/.env.example +++ b/docker-compose/.env.example @@ -17,7 +17,6 @@ PLAYER_PUBLIC_URL="http://localhost:8081" PLAYER_INTERNAL_URL="http://player:8081" # Web app bootstrap settings -SESSION_MAX_AGE_DAYS=14 DEFAULT_ADMIN_USERNAME="admin" DEFAULT_ADMIN_NAME="Admin" DEFAULT_ADMIN_PASSWORD="password123" diff --git a/docker-compose/README.md b/docker-compose/README.md index c50e5b0..a29aca9 100644 --- a/docker-compose/README.md +++ b/docker-compose/README.md @@ -45,7 +45,6 @@ Key configuration: - `DB_HOST`, `DB_PORT`, `DB_NAME`, `DB_USER`, `DB_PASSWORD` - `PULSE_SIGNAGE_SHARED_SECRET` -- `SESSION_MAX_AGE_DAYS` - `DEFAULT_ADMIN_USERNAME` - `DEFAULT_ADMIN_NAME` - `DEFAULT_ADMIN_PASSWORD` @@ -122,7 +121,6 @@ Important values: - `PLAYER_INTERNAL_URL` - internal URL the web app uses for local player calls - `BRIDGE_INTERNAL_URL` - bridge URL the web app uses for player snapshot and command forwarding - `WEB_INTERNAL_URL` - internal URL the bridge uses to call the web app directly -- `SESSION_MAX_AGE_DAYS` - dashboard session lifetime - `DEFAULT_ADMIN_*` - bootstrap admin account values - `PASSWORD_HASH_ITERATIONS` - password hashing cost - `MYSQL_ROOT_PASSWORD` - root password for the local MySQL container @@ -167,7 +165,6 @@ Leave it blank only if you intentionally want to run without request signing in | `DB_USER` | web, player, bridge, mysql | Database user. | | `DB_PASSWORD` | web, player, bridge, mysql | Database password. | | `MYSQL_ROOT_PASSWORD` | mysql | Root password for the local MySQL container. | -| `SESSION_MAX_AGE_DAYS` | web | Session cookie lifetime. | | `DEFAULT_ADMIN_USERNAME` | web | Bootstrap admin username. | | `DEFAULT_ADMIN_NAME` | web | Bootstrap admin display name. | | `DEFAULT_ADMIN_PASSWORD` | web | Bootstrap admin password. | diff --git a/docker-compose/docker-compose.yml b/docker-compose/docker-compose.yml index 38eb9dd..87a8d15 100644 --- a/docker-compose/docker-compose.yml +++ b/docker-compose/docker-compose.yml @@ -16,7 +16,6 @@ services: DB_PASSWORD: ${DB_PASSWORD:-signage_password} PULSE_SIGNAGE_SHARED_SECRET: ${PULSE_SIGNAGE_SHARED_SECRET:-} BRIDGE_INTERNAL_URL: ${BRIDGE_INTERNAL_URL:-http://player-bridge:8090} - SESSION_MAX_AGE_DAYS: ${SESSION_MAX_AGE_DAYS:-14} DEFAULT_ADMIN_USERNAME: ${DEFAULT_ADMIN_USERNAME:-admin} DEFAULT_ADMIN_NAME: ${DEFAULT_ADMIN_NAME:-Admin} DEFAULT_ADMIN_PASSWORD: ${DEFAULT_ADMIN_PASSWORD:-password123} diff --git a/docs/api.md b/docs/api.md index 157ad07..d1e6ea4 100644 --- a/docs/api.md +++ b/docs/api.md @@ -286,6 +286,8 @@ Response fields: - `id` - `name` - `fade_between_slides` +- `skip_unavailable_rtmp` +- `canvas_id` ### Slide @@ -293,12 +295,9 @@ Response fields: - `title` - `body` - `duration_seconds` -- `schedule_mode` -- `schedule_start_datetime` -- `schedule_end_datetime` -- `schedule_start_time` -- `schedule_end_time` -- `schedule_days_json` +- `use_video_duration` +- `disable_audio` +- `scheduleRules` - `media_url` - `media_type` - `kind` diff --git a/docs/schema.md b/docs/schema.md index 4970c2f..2b4c50f 100644 --- a/docs/schema.md +++ b/docs/schema.md @@ -3,7 +3,7 @@ This app creates and maintains its schema at startup through `src/db/index.js`. The sections below summarize the current tables and their purpose. -Primary keys are `id` unless noted otherwise. Timestamps are stored as `created_at` and `modified_at` when a table supports auditing. +Tables generally use a numeric auto-increment `id` primary key. The relationship table `d_announcement_screens` intentionally uses the composite `(announcement_id, screen_id)` primary key instead. Natural and relationship keys remain as unique constraints where needed. Timestamps are stored as `created_at` and `modified_at` when a table supports auditing. ## Admin @@ -16,7 +16,7 @@ Primary keys are `id` unless noted otherwise. Timestamps are stored as `created_ ### `a_users` -- `id`, `name`, `username`, `password_hash`, `password_salt`, `password_iterations`, `created_at`, `created_by`, `modified_at`, `modified_by` +- `id`, `name`, `username`, `password_hash`, `password_salt`, `password_iterations`, `must_change_password`, `account_locked`, `created_at`, `created_by`, `modified_at`, `modified_by` - `username` is unique. ### `a_roles` @@ -32,24 +32,24 @@ Primary keys are `id` unless noted otherwise. Timestamps are stored as `created_ ### `a_role_permissions` -- `role_id`, `permission_id`, `created_at`, `modified_at` +- `id`, `role_id`, `permission_id`, `created_at`, `modified_at` - Foreign keys: - `role_id` -> `a_roles.id` - `permission_id` -> `a_permissions.id` -- Composite primary key: `(role_id, permission_id)` +- Unique key: `(role_id, permission_id)` ### `a_user_roles` -- `user_id`, `role_id`, `created_at`, `modified_at` +- `id`, `user_id`, `role_id`, `created_at`, `modified_at` - Foreign keys: - `user_id` -> `a_users.id` - `role_id` -> `a_roles.id` -- Composite primary key: `(user_id, role_id)` +- Unique key: `(user_id, role_id)` ### `a_sessions` -- `session_hash`, `user_id`, `expires_at`, `created_at`, `created_by`, `last_used_at`, `modified_by` -- `session_hash` is the primary key. +- `id`, `session_hash`, `user_id`, `ip_address`, `user_agent`, `expires_at`, `created_at`, `created_by`, `last_used_at`, `modified_by` +- `session_hash` is unique. - Foreign key: - `user_id` -> `a_users.id` @@ -116,11 +116,6 @@ Primary keys are `id` unless noted otherwise. Timestamps are stored as `created_ - `d_screens` - screen records and playlist assignment. - `d_onboarding_devices` - device-to-screen bindings and onboarded client names. -## Announcements - -- `d_announcements` - announcement content and display metadata. -- `d_announcement_screens` - announcement-to-screen assignments. - ### `d_players` - `id`, `identifier`, `public_base_url`, `internal_base_url`, `last_seen_at`, `created_at`, `modified_at` @@ -138,11 +133,20 @@ Primary keys are `id` unless noted otherwise. Timestamps are stored as `created_ ### `d_onboarding_devices` -- `device_id`, `client_name`, `screen_id`, `created_at`, `created_by`, `modified_at`, `modified_by` -- `device_id` is the primary key. +- `id`, `device_id`, `client_name`, `screen_id`, `created_at`, `created_by`, `modified_at`, `modified_by` +- `device_id` is unique. - Foreign key: - `screen_id` -> `d_screens.id` with `ON DELETE SET NULL` +## Onboarding + +- The onboarding flow uses `d_onboarding_devices` to bind a device to a screen and persist the client name. + +## Announcements + +- `d_announcements` - announcement content and display metadata. +- `d_announcement_screens` - announcement-to-screen assignments. + ### `d_announcements` - `id`, `message`, `short_label`, `announcement_type`, `color_key`, `icon_key`, `duration_seconds`, `expires_at`, `created_at`, `created_by`, `modified_at`, `modified_by` @@ -154,11 +158,7 @@ Primary keys are `id` unless noted otherwise. Timestamps are stored as `created_ - Foreign keys: - `announcement_id` -> `d_announcements.id` with `ON DELETE CASCADE` - `screen_id` -> `d_screens.id` with `ON DELETE CASCADE` -- Composite primary key: `(announcement_id, screen_id)` - -## Onboarding - -- The onboarding flow uses `d_onboarding_devices` to bind a device to a screen and persist the client name. +- Unique key: `(announcement_id, screen_id)` ## Integrations @@ -201,6 +201,8 @@ Primary keys are `id` unless noted otherwise. Timestamps are stored as `created_ - `o_background_tasks` - queue and history for background jobs. - `o_app_state` - generic app state and version markers stored as key/value pairs. +- `o_app_settings` - administrator-configurable application settings stored by key. +- `o_audit_events` - retained audit events for administrator activity and system changes. ### `o_background_tasks` @@ -209,10 +211,21 @@ Primary keys are `id` unless noted otherwise. Timestamps are stored as `created_ ### `o_app_state` -- `state_key`, `state_value`, `created_at`, `modified_at` -- `state_key` is the primary key. +- `id`, `state_key`, `state_value`, `created_at`, `modified_at` +- `state_key` is unique. - `schema_version` is stored here so startup can detect the previously recorded schema version before deciding whether migrations need to run. +### `o_app_settings` + +- `id`, `setting_key`, `setting_value`, `created_at`, `created_by`, `modified_at`, `modified_by` +- `setting_key` is unique. +- Values are stored as JSON and validated against the application setting definitions in `src/data/app-settings.js`. + +### `o_audit_events` + +- `id`, `occurred_at`, `category`, `event_type`, `actor_user_id`, `target_type`, `target_id`, `target_label`, `ip_address`, `user_agent`, `details_json` +- Indexed by occurrence time, category and event type, actor, and target. + ## Notes - The schema is initialized with `CREATE TABLE IF NOT EXISTS`, so new installs can start from an empty database. @@ -269,14 +282,19 @@ erDiagram } O_APP_STATE { } + O_APP_SETTINGS { + } O_BACKGROUND_TASKS { } + O_AUDIT_EVENTS { + } A_USERS ||--o{ A_USER_ROLES : has A_ROLES ||--o{ A_USER_ROLES : assigned_to A_ROLES ||--o{ A_ROLE_PERMISSIONS : has A_PERMISSIONS ||--o{ A_ROLE_PERMISSIONS : granted_to A_USERS ||--o{ A_SESSIONS : owns + A_USERS ||--o{ O_AUDIT_EVENTS : acts C_CANVAS_SIZES ||--o{ C_TEMPLATES : used_by C_CANVAS_SIZES ||--o{ C_PLAYLISTS : used_by diff --git a/package-lock.json b/package-lock.json index 7d106f5..72a020e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "pulse-signage", - "version": "2.7.5", + "version": "2.8.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "pulse-signage", - "version": "2.7.5", + "version": "2.8.0", "dependencies": { "@sparticuz/chromium": "^149.0.0", "animate.css": "^4.1.1", diff --git a/package.json b/package.json index ca43376..b2b9c31 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "pulse-signage", - "version": "2.7.5", + "version": "2.8.0", "private": false, "description": "Pulse Signage application with MySQL and media storage", "engines": { diff --git a/src/auth.js b/src/auth.js index d93acb3..7de8d3f 100644 --- a/src/auth.js +++ b/src/auth.js @@ -7,21 +7,55 @@ const PASSWORD_KEY_LENGTH = 32; const PASSWORD_DIGEST = 'sha256'; const SESSION_BYTES = 32; -function validatePasswordStrength(password) { +function validatePasswordStrength(password, options) { const value = String(password || ''); + const requirements = options && options.policy + ? getPasswordPolicyPreset(options.policy) + : { + minimumLength: Number(options && options.minimumLength) || 10, + minimumCategories: Number(options && options.minimumCategories) || 3, + requireLowercase: Boolean(options && options.requireLowercase), + requireUppercase: Boolean(options && options.requireUppercase), + requireNumber: Boolean(options && options.requireNumber), + requireSymbol: Boolean(options && options.requireSymbol) + }; const hasLowercase = /[a-z]/.test(value); const hasUppercase = /[A-Z]/.test(value); const hasNumber = /[0-9]/.test(value); const hasSymbol = /[^A-Za-z0-9]/.test(value); const categoryCount = [hasLowercase, hasUppercase, hasNumber, hasSymbol].filter(Boolean).length; - if (value.length < 10 || categoryCount < 3) { - return 'Password must be at least 10 characters and include 3 of: uppercase, lowercase, number, and symbol.'; + const missingRequiredCategory = requirements.requireLowercase && !hasLowercase + || requirements.requireUppercase && !hasUppercase + || requirements.requireNumber && !hasNumber + || requirements.requireSymbol && !hasSymbol; + if (value.length < requirements.minimumLength || categoryCount < requirements.minimumCategories || missingRequiredCategory) { + if (missingRequiredCategory) { + const requiredCategories = []; + if (requirements.requireLowercase) requiredCategories.push('lowercase'); + if (requirements.requireUppercase) requiredCategories.push('uppercase'); + if (requirements.requireNumber) requiredCategories.push('number'); + if (requirements.requireSymbol) requiredCategories.push('symbol'); + return `Password must be at least ${requirements.minimumLength} characters and include ${requiredCategories.join(', ')}.`; + } + if (requirements.minimumCategories === 4) { + return `Password must be at least ${requirements.minimumLength} characters and include uppercase, lowercase, number, and symbol.`; + } + return `Password must be at least ${requirements.minimumLength} characters and include ${requirements.minimumCategories} of: uppercase, lowercase, number, and symbol.`; } return ''; } +function getPasswordPolicyPreset(policy) { + const normalizedPolicy = String(policy || 'standard').trim().toLowerCase(); + return normalizedPolicy === 'strict' + ? { minimumLength: 14, minimumCategories: 4 } + : normalizedPolicy === 'strong' + ? { minimumLength: 12, minimumCategories: 3 } + : { minimumLength: 10, minimumCategories: 3 }; +} + function hashPassword(password, salt) { const safePassword = String(password || ''); const safeSalt = salt || crypto.randomBytes(16).toString('hex'); diff --git a/src/common.js b/src/common.js index 382db83..f28c693 100644 --- a/src/common.js +++ b/src/common.js @@ -27,7 +27,7 @@ const dbBootstrap = require('#src/db/bootstrap'); const data = require('#src/data'); const player = require('#src/player/render'); const listQuery = require('#src/web/lib/list-query'); -const { fetchPlaylistCanvasId, fetchPlaylistCanvasSignature } = require('#src/web/lib/helpers'); +const { fetchPlaylistCanvasId } = require('#src/web/lib/helpers'); module.exports = { createPool: dbCommon.createPool, @@ -63,7 +63,6 @@ module.exports = { getSortDirectionQuery: listQuery.getSortDirectionQuery, fetchPlaylistById: data.fetchPlaylistById, fetchPlaylistCanvasId: fetchPlaylistCanvasId, - fetchPlaylistCanvasSignature: fetchPlaylistCanvasSignature, normalizeDisplayMode: data.normalizeDisplayMode, fetchTimetablesData: data.fetchTimetablesData, fetchTimetableGroupsPage: data.fetchTimetableGroupsPage, diff --git a/src/data/announcement-icons.js b/src/data/announcement-icons.js index 0801d1d..57c4026 100644 --- a/src/data/announcement-icons.js +++ b/src/data/announcement-icons.js @@ -1,55 +1,69 @@ -const ANNOUNCEMENT_ICON_OPTIONS = [ - { value: 'megaphone-fill', label: 'Megaphone' }, - { value: 'megaphone', label: 'Megaphone outline' }, - { value: 'bell-fill', label: 'Bell' }, - { value: 'bell', label: 'Bell outline' }, - { value: 'exclamation-triangle-fill', label: 'Warning' }, - { value: 'exclamation-triangle', label: 'Warning outline' }, - { value: 'info-circle-fill', label: 'Info' }, - { value: 'info-circle', label: 'Info outline' }, - { value: 'check-circle-fill', label: 'Success' }, - { value: 'check-circle', label: 'Success outline' }, - { value: 'lightbulb-fill', label: 'Idea' }, - { value: 'lightbulb', label: 'Idea outline' }, - { value: 'calendar-event-fill', label: 'Calendar' }, - { value: 'calendar-event', label: 'Calendar outline' }, - { value: 'clock-fill', label: 'Clock' }, - { value: 'clock', label: 'Clock outline' }, - { value: 'wifi-off', label: 'Wi-Fi Offline' }, - { value: 'wifi', label: 'Wi-Fi' }, - { value: 'hdd-network', label: 'Network' }, - { value: 'hdd-network-fill', label: 'Network fill' }, - { value: 'speaker-fill', label: 'Speaker' }, - { value: 'speaker', label: 'Speaker outline' }, - { value: 'shield-fill', label: 'Shield' }, - { value: 'shield', label: 'Shield outline' }, - { value: 'collection-play-fill', label: 'Playlist' }, - { value: 'collection-play', label: 'Playlist outline' }, - { value: 'broadcast', label: 'Broadcast' }, - { value: 'broadcast-pin', label: 'Broadcast pin' }, - { value: 'plug-fill', label: 'Plug' }, - { value: 'plug', label: 'Plug outline' }, - { value: 'lightning-charge-fill', label: 'Urgent' }, - { value: 'lightning-charge', label: 'Urgent outline' }, - { value: 'car-front-fill', label: 'Car Front' }, - { value: 'car-front', label: 'Car Front outline' }, - { value: 'lamp-fill', label: 'Lamp' }, - { value: 'lamp', label: 'Lamp outline' }, - { value: 'envelope-fill', label: 'Message' }, - { value: 'envelope', label: 'Message outline' }, - { value: 'people-fill', label: 'Audience' }, - { value: 'people', label: 'Audience outline' }, - { value: 'browser-chrome', label: 'Browser Chrome' }, - { value: 'browser-edge', label: 'Browser Edge' }, - { value: 'browser-firefox', label: 'Browser Firefox' }, - { value: 'browser-safari', label: 'Browser Safari' }, - { value: 'cone', label: 'Cone' }, - { value: 'cone-striped', label: 'Cone striped' }, - { value: 'cup-straw', label: 'Cup straw' }, - { value: 'fire', label: 'Fire' } +const fs = require('fs'); +const path = require('path'); + +const BOOTSTRAP_ICON_CSS_PATH = path.join(__dirname, '..', 'web', 'public', 'adminlte', 'bootstrap-icons', 'css', 'bootstrap-icons.min.css'); + +const DEFAULT_ANNOUNCEMENT_ICON_KEYS = [ + 'megaphone-fill', 'megaphone', 'bell-fill', 'bell', + 'exclamation-triangle-fill', 'exclamation-triangle', 'info-circle-fill', 'info-circle', + 'check-circle-fill', 'check-circle', 'lightbulb-fill', 'lightbulb', + 'calendar-event-fill', 'calendar-event', 'clock-fill', 'clock', + 'wifi-off', 'wifi', 'hdd-network', 'hdd-network-fill', + 'speaker-fill', 'speaker', 'shield-fill', 'shield', + 'collection-play-fill', 'collection-play', 'broadcast', 'broadcast-pin', + 'plug-fill', 'plug', 'lightning-charge-fill', 'lightning-charge', + 'car-front-fill', 'car-front', 'lamp-fill', 'lamp', + 'envelope-fill', 'envelope', 'people-fill', 'people', + 'browser-chrome', 'browser-edge', 'browser-firefox', 'browser-safari', + 'cone', 'cone-striped', 'cup-straw', 'fire' ]; -const ANNOUNCEMENT_ICON_KEYS = ANNOUNCEMENT_ICON_OPTIONS.map(function (option) { +function humanizeBootstrapIconLabel(iconKey) { + return String(iconKey || '') + .trim() + .replace(/[-_]+/g, ' ') + .replace(/\b\w/g, function (character) { + return character.toUpperCase(); + }); +} + +function loadBootstrapIconCatalog() { + try { + const css = fs.readFileSync(BOOTSTRAP_ICON_CSS_PATH, 'utf8'); + const keys = Array.from(new Set((css.match(/\.bi-([a-z0-9-]+)::?before/g) || []).map(function (match) { + return String(match || '') + .replace(/^\.bi-/, '') + .replace(/::?before$/, '') + .trim() + .toLowerCase(); + }).filter(Boolean))); + + return keys.map(function (value) { + return { + value: value, + label: humanizeBootstrapIconLabel(value) + }; + }).sort(function (left, right) { + return left.value.localeCompare(right.value); + }); + } catch (_error) { + return DEFAULT_ANNOUNCEMENT_ICON_KEYS.map(function (value) { + return { value: value, label: humanizeBootstrapIconLabel(value) }; + }); + } +} + +const ANNOUNCEMENT_ICON_CATALOG = loadBootstrapIconCatalog(); +const ANNOUNCEMENT_ICON_OPTIONS = DEFAULT_ANNOUNCEMENT_ICON_KEYS.map(function (value) { + const catalogOption = ANNOUNCEMENT_ICON_CATALOG.find(function (option) { + return option.value === value; + }); + return catalogOption || { value: value, label: humanizeBootstrapIconLabel(value) }; +}); + +const ANNOUNCEMENT_ICON_KEYS = DEFAULT_ANNOUNCEMENT_ICON_KEYS.slice(); + +const ANNOUNCEMENT_ICON_CATALOG_KEYS = ANNOUNCEMENT_ICON_CATALOG.map(function (option) { return option.value; }); @@ -58,17 +72,27 @@ const ANNOUNCEMENT_ICON_LABELS = ANNOUNCEMENT_ICON_OPTIONS.reduce(function (labe return labels; }, Object.create(null)); +ANNOUNCEMENT_ICON_CATALOG.forEach(function (option) { + if (!Object.prototype.hasOwnProperty.call(ANNOUNCEMENT_ICON_LABELS, option.value)) { + ANNOUNCEMENT_ICON_LABELS[option.value] = option.label; + } +}); + const DEFAULT_ANNOUNCEMENT_ICON = 'megaphone-fill'; function normalizeAnnouncementIcon(value) { const normalized = String(value || '').trim().toLowerCase(); - return ANNOUNCEMENT_ICON_KEYS.includes(normalized) ? normalized : DEFAULT_ANNOUNCEMENT_ICON; + return ANNOUNCEMENT_ICON_CATALOG_KEYS.includes(normalized) ? normalized : DEFAULT_ANNOUNCEMENT_ICON; } module.exports = { + DEFAULT_ANNOUNCEMENT_ICON_KEYS, ANNOUNCEMENT_ICON_OPTIONS, ANNOUNCEMENT_ICON_KEYS, + ANNOUNCEMENT_ICON_CATALOG, + ANNOUNCEMENT_ICON_CATALOG_KEYS, ANNOUNCEMENT_ICON_LABELS, DEFAULT_ANNOUNCEMENT_ICON, + humanizeBootstrapIconLabel, normalizeAnnouncementIcon }; \ No newline at end of file diff --git a/src/data/api-sources.js b/src/data/api-sources.js index 5873cab..0262c82 100644 --- a/src/data/api-sources.js +++ b/src/data/api-sources.js @@ -22,10 +22,6 @@ function normalizeAuthMethod(value) { return ['basic', 'bearer', 'api_key_header'].includes(method) ? method : 'none'; } -function getItemsPath(source) { - return String(source && (source.items_path || source.itemsPath) || '').trim(); -} - function buildAuthHeaders(source) { const method = normalizeAuthMethod(source && (source.auth_method || source.authMethod)); const headers = {}; diff --git a/src/data/app-settings.js b/src/data/app-settings.js new file mode 100644 index 0000000..8c1d6e9 --- /dev/null +++ b/src/data/app-settings.js @@ -0,0 +1,199 @@ +const { DEFAULT_ANNOUNCEMENT_ICON_KEYS } = require('./announcement-icons'); + +const SETTING_DEFINITIONS = [ + { key: 'app.name', type: 'string', defaultValue: 'Pulse Signage' }, + { key: 'locale.timezone', type: 'string', defaultValue: 'Europe/London' }, + { key: 'locale.language', type: 'string', defaultValue: 'en' }, + { key: 'ui.theme', type: 'enum', values: ['dark', 'light', 'auto'], defaultValue: 'dark' }, + { key: 'security.session_lifetime_days', type: 'integer', min: 1, defaultValue: 14 }, + { key: 'security.allow_user_session_revocation', type: 'boolean', defaultValue: true }, + { key: 'security.max_active_sessions', type: 'integer', min: 0, defaultValue: 0 }, + { key: 'security.password_min_length', type: 'integer', min: 8, defaultValue: 10 }, + { key: 'security.password_min_categories', type: 'integer', min: 1, defaultValue: 3 }, + { key: 'security.password_require_lowercase', type: 'boolean', defaultValue: false }, + { key: 'security.password_require_uppercase', type: 'boolean', defaultValue: false }, + { key: 'security.password_require_number', type: 'boolean', defaultValue: false }, + { key: 'security.password_require_symbol', type: 'boolean', defaultValue: false }, + { key: 'security.require_password_change_for_new_users', type: 'boolean', defaultValue: true }, + { key: 'security.require_password_change_after_admin_reset', type: 'boolean', defaultValue: true }, + { key: 'security.login_max_attempts', type: 'integer', min: 1, defaultValue: 5 }, + { key: 'security.login_lockout_minutes', type: 'integer', min: 1, defaultValue: 15 }, + { key: 'security.login_rate_limit_scope', type: 'enum', values: ['both', 'username', 'ip'], defaultValue: 'both' }, + { key: 'audit.enabled', type: 'boolean', defaultValue: true }, + { key: 'audit.categories', type: 'string_array', defaultValue: ['authentication', 'security', 'sessions', 'users', 'roles', 'system-settings'] }, + { key: 'audit.include_request_metadata', type: 'boolean', defaultValue: true }, + { key: 'audit.retention_days', type: 'integer', min: 0, defaultValue: 180 }, + { key: 'uploads.image_max_bytes', type: 'integer', min: 1, defaultValue: 100 * 1024 * 1024 }, + { key: 'uploads.video_max_bytes', type: 'integer', min: 1, defaultValue: 1024 * 1024 * 1024 }, + { key: 'uploads.wysiwyg_image_max_bytes', type: 'integer', min: 1, defaultValue: 2 * 1024 * 1024 }, + { key: 'uploads.allowed_mime_types', type: 'string_array', defaultValue: ['image/png', 'image/jpeg', 'image/gif', 'image/webp', 'image/svg+xml', 'video/mp4', 'video/webm', 'video/ogg'] }, + { key: 'uploads.cleanup_days', type: 'integer', min: 0, defaultValue: 30 }, + { key: 'uploads.optimize_images', type: 'boolean', defaultValue: true }, + { key: 'announcements.default_icon', type: 'string', defaultValue: 'megaphone-fill' }, + { key: 'announcements.default_duration_value', type: 'integer', min: 1, defaultValue: 10 }, + { key: 'announcements.default_duration_unit', type: 'enum', values: ['seconds', 'minutes'], defaultValue: 'seconds' }, + { key: 'announcements.suggested_icons', type: 'string_array', defaultValue: DEFAULT_ANNOUNCEMENT_ICON_KEYS.slice() }, + { key: 'player.default_slide_duration_seconds', type: 'integer', min: 1, defaultValue: 10 }, + { key: 'player.default_fade_between_slides', type: 'boolean', defaultValue: true }, + { key: 'player.skip_unavailable_rtmp', type: 'boolean', defaultValue: true } + ,{ key: 'data-sources.rss_default_interval_value', type: 'integer', min: 1, defaultValue: 60 } + ,{ key: 'data-sources.rss_default_interval_unit', type: 'enum', values: ['seconds', 'minutes', 'hours'], defaultValue: 'minutes' } + ,{ key: 'data-sources.api_default_interval_value', type: 'integer', min: 1, defaultValue: 60 } + ,{ key: 'data-sources.api_default_interval_unit', type: 'enum', values: ['seconds', 'minutes', 'hours'], defaultValue: 'minutes' } +]; + +const DEFINITIONS_BY_KEY = new Map(SETTING_DEFINITIONS.map(function (definition) { + return [definition.key, definition]; +})); + +function cloneValue(value) { + if (Array.isArray(value)) { + return value.slice(); + } + return value; +} + +function getAppSettingDefinitions() { + return SETTING_DEFINITIONS.map(function (definition) { + return Object.assign({}, definition, { + values: definition.values ? definition.values.slice() : undefined, + defaultValue: cloneValue(definition.defaultValue) + }); + }); +} + +function getDefaultAppSettings() { + return SETTING_DEFINITIONS.reduce(function (settings, definition) { + settings[definition.key] = cloneValue(definition.defaultValue); + return settings; + }, {}); +} + +function normalizeSettingValue(key, value) { + const definition = DEFINITIONS_BY_KEY.get(String(key || '').trim()); + if (!definition) { + throw new Error('Unknown application setting: ' + key); + } + + if (definition.type === 'string') { + return String(value == null ? '' : value).trim(); + } + + if (definition.type === 'integer') { + const normalized = Number(value); + if (!Number.isInteger(normalized) || normalized < definition.min) { + throw new Error('Invalid value for application setting: ' + definition.key); + } + return normalized; + } + + if (definition.type === 'boolean') { + if (value === true || value === 1 || value === '1' || value === 'true') { + return true; + } + if (value === false || value === 0 || value === '0' || value === 'false') { + return false; + } + throw new Error('Invalid value for application setting: ' + definition.key); + } + + if (definition.type === 'enum') { + const normalized = String(value == null ? '' : value).trim(); + if (!definition.values.includes(normalized)) { + throw new Error('Invalid value for application setting: ' + definition.key); + } + return normalized; + } + + if (definition.type === 'string_array') { + if (!Array.isArray(value)) { + throw new Error('Invalid value for application setting: ' + definition.key); + } + return Array.from(new Set(value.map(function (item) { + return String(item || '').trim(); + }).filter(Boolean))); + } + + throw new Error('Unsupported application setting type: ' + definition.type); +} + +function normalizeAppSettings(settings) { + const input = settings && typeof settings === 'object' ? settings : {}; + return SETTING_DEFINITIONS.reduce(function (normalized, definition) { + const value = Object.prototype.hasOwnProperty.call(input, definition.key) + ? input[definition.key] + : definition.defaultValue; + normalized[definition.key] = normalizeSettingValue(definition.key, value); + return normalized; + }, {}); +} + +function parseStoredValue(value) { + if (typeof value !== 'string') { + return value; + } + try { + return JSON.parse(value); + } catch (_error) { + return value; + } +} + +async function fetchAppSettings(pool) { + const [rows] = await pool.query('SELECT id, setting_key, setting_value FROM o_app_settings ORDER BY setting_key'); + const storedSettings = {}; + (rows || []).forEach(function (row) { + const key = String(row && row.setting_key || '').trim(); + if (DEFINITIONS_BY_KEY.has(key)) { + storedSettings[key] = parseStoredValue(row.setting_value); + } + }); + return normalizeAppSettings(Object.assign({}, getDefaultAppSettings(), storedSettings)); +} + +async function saveAppSettings(pool, settings, modifiedBy) { + const inputSettings = settings && typeof settings === 'object' ? settings : {}; + const normalizedSettings = normalizeAppSettings(inputSettings); + const connection = typeof pool.getConnection === 'function' ? await pool.getConnection() : pool; + const shouldRelease = connection !== pool; + + try { + if (typeof connection.beginTransaction === 'function') { + await connection.beginTransaction(); + } + for (const definition of SETTING_DEFINITIONS) { + if (!Object.prototype.hasOwnProperty.call(inputSettings, definition.key)) { + continue; + } + await connection.query( + `INSERT INTO o_app_settings (setting_key, setting_value, created_by, modified_by) + VALUES (?, ?, ?, ?) + ON DUPLICATE KEY UPDATE setting_value = VALUES(setting_value), modified_by = VALUES(modified_by)`, + [definition.key, JSON.stringify(normalizedSettings[definition.key]), modifiedBy || null, modifiedBy || null] + ); + } + if (typeof connection.commit === 'function') { + await connection.commit(); + } + } catch (error) { + if (typeof connection.rollback === 'function') { + await connection.rollback(); + } + throw error; + } finally { + if (shouldRelease && typeof connection.release === 'function') { + connection.release(); + } + } + + return normalizedSettings; +} + +module.exports = { + getAppSettingDefinitions, + getDefaultAppSettings, + normalizeSettingValue, + normalizeAppSettings, + fetchAppSettings, + saveAppSettings +}; diff --git a/src/data/audit-log.js b/src/data/audit-log.js new file mode 100644 index 0000000..1b5a9a2 --- /dev/null +++ b/src/data/audit-log.js @@ -0,0 +1,102 @@ +const AUDIT_EVENT_CATEGORIES = Object.freeze({ + AUTHENTICATION: 'authentication', + SECURITY: 'security', + SESSIONS: 'sessions', + USERS: 'users', + ROLES: 'roles', + SETTINGS: 'system-settings', + SLIDES: 'slides', + TEMPLATES: 'templates', + PLAYLISTS: 'playlists', + SCREENS: 'screens', + ANNOUNCEMENTS: 'announcements', + CANVAS_SIZES: 'canvas-sizes', + API_SOURCES: 'api-sources', + RSS_FEEDS: 'rss-feeds', + TIMETABLES: 'timetables' +}); +const AUDIT_CATEGORY_KEYS = Object.freeze(Object.values(AUDIT_EVENT_CATEGORIES)); +const AUDIT_CATEGORY_LABELS = Object.freeze({ + authentication: 'Authentication', + security: 'Security', + sessions: 'Sessions', + users: 'Users', + roles: 'Roles', + 'system-settings': 'System Settings', + slides: 'Slides', + templates: 'Templates', + playlists: 'Playlists', + screens: 'Screens', + announcements: 'Announcements', + 'canvas-sizes': 'Canvas Sizes', + 'api-sources': 'API Sources', + 'rss-feeds': 'RSS Feeds', + timetables: 'Timetables' +}); +const { fetchAppSettings } = require('./app-settings'); + +function normalizeDetails(details) { + if (details === undefined || details === null) { + return null; + } + return JSON.stringify(details); +} + +function getRequestMetadata(req) { + const forwardedAddress = String(req && req.headers && req.headers['x-forwarded-for'] || '').split(',')[0].trim(); + return { + ipAddress: forwardedAddress || String(req && req.ip || req && req.socket && req.socket.remoteAddress || '').trim() || null, + userAgent: String(req && req.headers && req.headers['user-agent'] || '').trim() || null + }; +} + +async function recordAuditEvent(pool, event) { + const input = event && typeof event === 'object' ? event : {}; + const category = String(input.category || '').trim().toLowerCase(); + const eventType = String(input.eventType || '').trim().toLowerCase(); + if (!category || !eventType) { + throw new Error('Audit events require a category and event type.'); + } + + await pool.query( + `INSERT INTO o_audit_events + (category, event_type, actor_user_id, target_type, target_id, target_label, ip_address, user_agent, details_json) + VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, + [ + category, + eventType, + Number.isInteger(Number(input.actorUserId)) && Number(input.actorUserId) > 0 ? Number(input.actorUserId) : null, + String(input.targetType || '').trim() || null, + String(input.targetId || '').trim() || null, + String(input.targetLabel || '').trim() || null, + String(input.ipAddress || '').trim() || null, + String(input.userAgent || '').trim() || null, + normalizeDetails(input.details) + ] + ); +} + +async function recordRequestAuditEvent(pool, req, event) { + try { + const settings = await fetchAppSettings(pool); + const category = String(event && event.category || '').trim().toLowerCase(); + const enabledCategories = Array.isArray(settings['audit.categories']) ? settings['audit.categories'] : AUDIT_CATEGORY_KEYS; + if (!settings['audit.enabled'] || !enabledCategories.includes(category)) { + return; + } + const metadata = settings['audit.include_request_metadata'] ? getRequestMetadata(req) : {}; + await recordAuditEvent(pool, Object.assign({}, event, metadata)); + } catch (error) { + // Auditing must not turn a successful login or administration action into a failed request. + console.error('Unable to record audit event:', error.message); + } +} + +module.exports = { + AUDIT_EVENT_CATEGORIES, + AUDIT_CATEGORY_KEYS, + AUDIT_CATEGORY_LABELS, + getRequestMetadata, + recordAuditEvent, + recordRequestAuditEvent +}; \ No newline at end of file diff --git a/src/data/qr-code.js b/src/data/qr-code.js index b4d6411..f1889b3 100644 --- a/src/data/qr-code.js +++ b/src/data/qr-code.js @@ -1,17 +1,6 @@ -const fs = require('fs'); const path = require('path'); const QRCodeStyling = require(path.join(__dirname, '..', 'web', 'public', 'vendor', 'qr-code-styling', 'qr-code-styling.js')); const QR_PNG_WIDTH = 2048; -const QR_STYLING_SCRIPT_PATH = path.join(__dirname, '..', 'web', 'public', 'vendor', 'qr-code-styling', 'qr-code-styling.js'); -const SYSTEM_CHROMIUM_PATHS = [ - process.env.PUPPETEER_EXECUTABLE_PATH, - process.env.CHROMIUM_PATH, - '/usr/bin/chromium', - '/usr/bin/chromium-browser', - '/usr/local/bin/chromium', - '/snap/bin/chromium' -].filter(Boolean); -let qrBrowserPromise = null; function escapeXml(value) { return String(value === undefined || value === null ? '' : value).replace(/[&<>"']/g, function (character) { @@ -340,81 +329,6 @@ function buildQrStylingOptions(source) { }; } -function getQrBrowser() { - if (qrBrowserPromise) { - return qrBrowserPromise; - } - - qrBrowserPromise = (async function () { - const puppeteer = require('puppeteer-core'); - const chromiumModule = require('@sparticuz/chromium'); - const chromium = chromiumModule && typeof chromiumModule.executablePath === 'function' - ? chromiumModule - : chromiumModule && chromiumModule.default && typeof chromiumModule.default.executablePath === 'function' - ? chromiumModule.default - : chromiumModule; - let executablePath = SYSTEM_CHROMIUM_PATHS.find(function (candidate) { - return fs.existsSync(candidate); - }) || ''; - const usingSystemChromium = Boolean(executablePath); - - if (!executablePath && chromium && typeof chromium.executablePath === 'function') { - executablePath = await chromium.executablePath(); - } - - if (!executablePath || !fs.existsSync(executablePath)) { - throw new Error('Chromium executable was not found.'); - } - - return puppeteer.launch({ - args: usingSystemChromium - ? [ - '--no-sandbox', - '--disable-setuid-sandbox', - '--disable-dev-shm-usage', - '--disable-gpu' - ] - : puppeteer.defaultArgs({ - args: chromium && chromium.args ? chromium.args : [], - headless: 'shell' - }), - defaultViewport: usingSystemChromium - ? { width: QR_PNG_WIDTH, height: QR_PNG_WIDTH, deviceScaleFactor: 1 } - : chromium && chromium.defaultViewport ? chromium.defaultViewport : null, - executablePath: executablePath, - headless: usingSystemChromium ? true : 'shell' - }); - })(); - - return qrBrowserPromise; -} - -async function blobToDataUrl(blob) { - if (!blob) { - return ''; - } - - if (typeof blob === 'string') { - return blob; - } - - if (typeof blob.arrayBuffer === 'function') { - const buffer = await blob.arrayBuffer(); - const bytes = new Uint8Array(buffer); - let binary = ''; - for (let index = 0; index < bytes.length; index += 1) { - binary += String.fromCharCode(bytes[index]); - } - return 'data:' + String(blob.type || 'image/png') + ';base64,' + Buffer.from(binary, 'binary').toString('base64'); - } - - if (typeof blob.text === 'function') { - return blob.text(); - } - - return ''; -} - async function createStyledQrCodeDataUrl(value) { const source = value && typeof value === 'object' ? value : { value: value }; const options = buildQrStylingOptions(source); @@ -435,10 +349,6 @@ async function createStyledQrCodeSvg(value) { return renderStyledQrRawData(options, 'svg'); } -async function createQrCodeDataUrlPlain(value) { - return createStyledQrCodeDataUrl(value); -} - async function createQrCodeSvg(value) { return createStyledQrCodeSvg(value); } diff --git a/src/data/slides.js b/src/data/slides.js index 6b5bccf..e0efc6b 100644 --- a/src/data/slides.js +++ b/src/data/slides.js @@ -93,14 +93,6 @@ function sanitizeRichText(html) { }); } -function normalizePlainText(value) { - return String(value === undefined || value === null ? '' : value) - .replace(/<\s*br\s*\/?\s*>/gi, '\n') - .replace(/<[^>]*>/g, '') - .replace(/ /gi, ' ') - .trim(); -} - function stripEditorOnlyMarkup(value) { return String(value || '') .replace(/]*class="[^"]*api-region-sample-preview[^"]*"[^>]*>[\s\S]*?<\/pre>/gi, '') diff --git a/src/data/templates.js b/src/data/templates.js index 87f375b..6b12ab1 100644 --- a/src/data/templates.js +++ b/src/data/templates.js @@ -194,43 +194,6 @@ function extractTemplateRegions(body) { return regions; } -function extractGenericRegionContent(region, body, filesByField, existingContent) { - const content = {}; - const current = existingContent && existingContent[region.region_key] && typeof existingContent[region.region_key] === 'object' ? existingContent[region.region_key] : {}; - const suffix = '_' + region.id; - - Object.keys(body || {}).forEach((key) => { - if (!key.startsWith('region_') || !key.endsWith(suffix)) { - return; - } - const field = key.slice('region_'.length, -suffix.length); - if (!field || field === 'type' || field === 'key' || field === 'name' || field === 'label') { - return; - } - content[field] = body[key]; - }); - - Object.keys(filesByField || {}).forEach((fieldName) => { - if (!fieldName.startsWith('region_') || !fieldName.endsWith(suffix)) { - return; - } - const field = fieldName.slice('region_'.length, -suffix.length); - if (!field) { - return; - } - content[field] = `/media/uploads/${filesByField[fieldName].filename}`; - }); - - Object.keys(current).forEach((key) => { - if (content[key] === undefined) { - content[key] = current[key]; - } - }); - - content.type = region.region_type; - return content; -} - function getFilesByField(files) { const map = {}; (files || []).forEach((file) => { diff --git a/src/db/bootstrap.js b/src/db/bootstrap.js index 428bd8d..1f3aaef 100644 --- a/src/db/bootstrap.js +++ b/src/db/bootstrap.js @@ -35,8 +35,6 @@ async function bootstrapDatabase(pool) { ); } - await pool.query('UPDATE a_users SET name = username WHERE name IS NULL OR name = ""'); - await pool.query( `INSERT INTO a_roles (role_key, name, description, created_by, modified_by) VALUES (?, ?, ?, ?, ?) diff --git a/src/db/index.js b/src/db/index.js index f25acf4..357cd35 100644 --- a/src/db/index.js +++ b/src/db/index.js @@ -184,13 +184,14 @@ async function ensureSchema(pool, options) { await pool.query(` CREATE TABLE IF NOT EXISTS d_announcement_screens ( + id BIGINT AUTO_INCREMENT PRIMARY KEY, announcement_id INT NOT NULL, screen_id INT NOT NULL, created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, created_by INT NULL, modified_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, modified_by INT NULL, - PRIMARY KEY (announcement_id, screen_id), + UNIQUE KEY uq_announcement_screens_pair (announcement_id, screen_id), INDEX idx_announcement_screens_screen_id (screen_id), CONSTRAINT fk_announcement_screens_announcement FOREIGN KEY (announcement_id) REFERENCES d_announcements(id) ON DELETE CASCADE, CONSTRAINT fk_announcement_screens_screen FOREIGN KEY (screen_id) REFERENCES d_screens(id) ON DELETE CASCADE @@ -278,7 +279,8 @@ async function ensureSchema(pool, options) { await pool.query(` CREATE TABLE IF NOT EXISTS d_onboarding_devices ( - device_id VARCHAR(128) PRIMARY KEY, + id BIGINT AUTO_INCREMENT PRIMARY KEY, + device_id VARCHAR(128) NOT NULL UNIQUE, client_name VARCHAR(255) NULL, screen_id INT NULL, created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, @@ -297,6 +299,8 @@ async function ensureSchema(pool, options) { password_hash CHAR(64) NOT NULL, password_salt VARCHAR(64) NOT NULL, password_iterations INT NOT NULL, + must_change_password TINYINT(1) NOT NULL DEFAULT 0, + account_locked TINYINT(1) NOT NULL DEFAULT 0, created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, created_by INT NULL, modified_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, @@ -333,13 +337,14 @@ async function ensureSchema(pool, options) { await pool.query(` CREATE TABLE IF NOT EXISTS a_role_permissions ( + id BIGINT AUTO_INCREMENT PRIMARY KEY, role_id INT NOT NULL, permission_id INT NOT NULL, created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, created_by INT NULL, modified_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, modified_by INT NULL, - PRIMARY KEY (role_id, permission_id), + UNIQUE KEY uq_role_permissions_pair (role_id, permission_id), CONSTRAINT fk_role_permissions_role FOREIGN KEY (role_id) REFERENCES a_roles(id) ON DELETE CASCADE, CONSTRAINT fk_role_permissions_permission FOREIGN KEY (permission_id) REFERENCES a_permissions(id) ON DELETE CASCADE ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci @@ -347,13 +352,14 @@ async function ensureSchema(pool, options) { await pool.query(` CREATE TABLE IF NOT EXISTS a_user_roles ( + id BIGINT AUTO_INCREMENT PRIMARY KEY, user_id INT NOT NULL, role_id INT NOT NULL, created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, created_by INT NULL, modified_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, modified_by INT NULL, - PRIMARY KEY (user_id, role_id), + UNIQUE KEY uq_user_roles_pair (user_id, role_id), CONSTRAINT fk_user_roles_user FOREIGN KEY (user_id) REFERENCES a_users(id) ON DELETE CASCADE, CONSTRAINT fk_user_roles_role FOREIGN KEY (role_id) REFERENCES a_roles(id) ON DELETE CASCADE ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci @@ -361,8 +367,11 @@ async function ensureSchema(pool, options) { await pool.query(` CREATE TABLE IF NOT EXISTS a_sessions ( - session_hash CHAR(64) PRIMARY KEY, + id BIGINT AUTO_INCREMENT PRIMARY KEY, + session_hash CHAR(64) NOT NULL UNIQUE, user_id INT NOT NULL, + ip_address VARCHAR(255) NULL, + user_agent VARCHAR(512) NULL, expires_at DATETIME NOT NULL, created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, created_by INT NULL, @@ -372,6 +381,18 @@ async function ensureSchema(pool, options) { ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci `); + await pool.query(` + CREATE TABLE IF NOT EXISTS a_login_attempts ( + id BIGINT AUTO_INCREMENT PRIMARY KEY, + rate_key VARCHAR(600) NOT NULL UNIQUE, + failed_count INT NOT NULL DEFAULT 0, + last_failed_at DATETIME NULL, + locked_until DATETIME NULL, + created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, + modified_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP + ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci + `); + await pool.query(` CREATE TABLE IF NOT EXISTS o_background_tasks ( id BIGINT AUTO_INCREMENT PRIMARY KEY, @@ -393,6 +414,18 @@ async function ensureSchema(pool, options) { ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci `); + await pool.query(` + CREATE TABLE IF NOT EXISTS o_app_settings ( + id BIGINT AUTO_INCREMENT PRIMARY KEY, + setting_key VARCHAR(191) NOT NULL UNIQUE, + setting_value JSON NOT NULL, + created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, + created_by INT NULL, + modified_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, + modified_by INT NULL + ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci + `); + await runMigrations(pool, Object.assign({}, options, { currentVersion: currentVersion })); await recordSchemaVersion(pool, appVersion); } finally { diff --git a/src/db/migrations.js b/src/db/migrations.js index 0f405dd..c438d8f 100644 --- a/src/db/migrations.js +++ b/src/db/migrations.js @@ -385,6 +385,113 @@ const VERSIONED_MIGRATIONS = [ await pool.query('DROP TABLE i_schedule_groups'); } } + }, + { + version: '2.8.0', + label: 'v2.8.0 combined application schema', + run: async function (pool) { + await pool.query(` + CREATE TABLE IF NOT EXISTS o_app_settings ( + id BIGINT AUTO_INCREMENT PRIMARY KEY, + setting_key VARCHAR(191) NOT NULL UNIQUE, + setting_value JSON NOT NULL, + created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, + created_by INT NULL, + modified_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, + modified_by INT NULL + ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci + `); + await pool.query(` + CREATE TABLE IF NOT EXISTS o_app_state ( + id BIGINT AUTO_INCREMENT PRIMARY KEY, + state_key VARCHAR(191) NOT NULL UNIQUE, + state_value MEDIUMTEXT NULL, + created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, + modified_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP + ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci + `); + + const numericIdTables = [ + ['d_announcement_screens', 'uq_announcement_screens_pair', '(announcement_id, screen_id)'], + ['d_onboarding_devices', 'uq_onboarding_devices_device_id', '(device_id)'], + ['a_role_permissions', 'uq_role_permissions_pair', '(role_id, permission_id)'], + ['a_user_roles', 'uq_user_roles_pair', '(user_id, role_id)'], + ['a_sessions', 'uq_sessions_hash', '(session_hash)'], + ['o_app_state', 'uq_app_state_key', '(state_key)'] + ]; + + for (const [tableName, uniqueKeyName, uniqueColumns] of numericIdTables) { + if (!(await tableExists(pool, tableName)) || await columnExists(pool, tableName, 'id')) { + continue; + } + await pool.query('ALTER TABLE ' + tableName + ' DROP PRIMARY KEY, ADD COLUMN id BIGINT NOT NULL AUTO_INCREMENT PRIMARY KEY FIRST, ADD UNIQUE KEY ' + uniqueKeyName + ' ' + uniqueColumns); + } + await ensureColumn(pool, 'a_users', 'must_change_password', 'TINYINT(1) NOT NULL DEFAULT 0', 'password_iterations'); + await pool.query(` + CREATE TABLE IF NOT EXISTS a_login_attempts ( + id BIGINT AUTO_INCREMENT PRIMARY KEY, + rate_key VARCHAR(600) NOT NULL UNIQUE, + failed_count INT NOT NULL DEFAULT 0, + last_failed_at DATETIME NULL, + locked_until DATETIME NULL, + created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, + modified_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP + ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci + `); + await ensureColumn(pool, 'a_users', 'account_locked', 'TINYINT(1) NOT NULL DEFAULT 0', 'must_change_password'); + await ensureColumn(pool, 'a_sessions', 'ip_address', 'VARCHAR(255) NULL', 'user_id'); + await ensureColumn(pool, 'a_sessions', 'user_agent', 'VARCHAR(512) NULL', 'ip_address'); + await pool.query(` + CREATE TABLE IF NOT EXISTS o_audit_events ( + id BIGINT AUTO_INCREMENT PRIMARY KEY, + occurred_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, + category VARCHAR(64) NOT NULL, + event_type VARCHAR(128) NOT NULL, + actor_user_id INT NULL, + target_type VARCHAR(64) NULL, + target_id VARCHAR(191) NULL, + target_label VARCHAR(255) NULL, + ip_address VARCHAR(255) NULL, + user_agent VARCHAR(512) NULL, + details_json JSON NULL, + INDEX idx_audit_events_occurred_at (occurred_at), + INDEX idx_audit_events_category_type (category, event_type), + INDEX idx_audit_events_actor (actor_user_id), + INDEX idx_audit_events_target (target_type, target_id) + ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci + `); + await pool.query( + `INSERT INTO o_app_settings (setting_key, setting_value, created_by, modified_by) + VALUES (?, ?, NULL, NULL) ON DUPLICATE KEY UPDATE setting_value = VALUES(setting_value)`, + ['audit.retention_days', JSON.stringify(30)] + ); + const settings = [ + ['audit.enabled', true], + ['audit.categories', ['authentication', 'security', 'sessions', 'users', 'roles', 'system-settings']], + ['audit.include_request_metadata', true] + ]; + for (const [key, value] of settings) { + await pool.query( + `INSERT INTO o_app_settings (setting_key, setting_value, created_by, modified_by) + VALUES (?, ?, NULL, NULL) ON DUPLICATE KEY UPDATE setting_value = VALUES(setting_value)`, + [key, JSON.stringify(value)] + ); + } + await pool.query( + `INSERT IGNORE INTO a_permissions + (permission_key, name, section_name, description, created_by, modified_by) + VALUES (?, ?, ?, ?, NULL, NULL)`, + ['audit-log.allow', 'Audit log', 'Settings', 'Download filtered audit events.'] + ); + await pool.query( + `INSERT IGNORE INTO a_role_permissions (role_id, permission_id, created_by, modified_by) + SELECT roles.id, permissions.id, NULL, NULL + FROM a_roles roles + CROSS JOIN a_permissions permissions + WHERE roles.role_key = 'administrators' + AND permissions.permission_key = 'audit-log.allow'` + ); + } } ]; @@ -441,7 +548,8 @@ async function detectSchemaVersion(pool) { async function recordSchemaVersion(pool, version) { await pool.query( `CREATE TABLE IF NOT EXISTS ${APP_STATE_TABLE} ( - state_key VARCHAR(191) NOT NULL PRIMARY KEY, + id BIGINT AUTO_INCREMENT PRIMARY KEY, + state_key VARCHAR(191) NOT NULL UNIQUE, state_value MEDIUMTEXT NULL, created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP, modified_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP diff --git a/src/rbac.js b/src/rbac.js index 65df0a2..9f9066b 100644 --- a/src/rbac.js +++ b/src/rbac.js @@ -140,6 +140,24 @@ const PERMISSION_SECTIONS = [ sectionName: 'Settings', order: 40, permissions: [ + { + key: 'system-settings', + order: 70, + name: 'System settings', + permissions: [ + { key: 'read', name: 'Read', description: 'View global application settings.' }, + { key: 'update', name: 'Update', description: 'Update global application settings.' } + ] + }, + { + key: 'audit-log', + order: 60, + name: 'Audit log', + permissions: [ + { key: 'read', name: 'Read', description: 'View security and session audit events.' }, + { key: 'allow', name: 'Allow', description: 'Download filtered audit events.' } + ] + }, { key: 'users', order: 10, diff --git a/src/web.js b/src/web.js index 599123b..aaea239 100644 --- a/src/web.js +++ b/src/web.js @@ -9,6 +9,7 @@ const common = require('./common'); const { verifyPassword, createSessionToken, hashSessionToken, hashPassword, validatePasswordStrength } = require('#src/auth'); const pages = require('#src/web/pages'); const registerMiddleware = require('#src/web/middleware'); +const registerNotFoundHandler = require('#src/web/middleware/not-found'); const { createBackgroundTaskQueue } = require('#src/web/lib/background-tasks/queue'); const { initializeBackgroundTasks } = require('#src/web/lib/background-tasks'); const { createDataSourceTaskService } = require('#src/web/lib/background-tasks/tasks-scheduled/data-source-refresh'); @@ -23,6 +24,8 @@ const { rbacData } = require('#src/web/lib/auth'); const { createPlayerActionService } = require('#src/web/lib/player-actions'); const { isClientNameAvailable, withClientNameReservation } = require('#src/data/client-name-check'); const { createSessionService } = require('#src/web/lib/auth'); +const { fetchAppSettings } = require('#src/data/app-settings'); +const { recordRequestAuditEvent } = require('#src/data/audit-log'); const { hasAnyPermission } = require('#src/rbac'); const { ensureFontLibrary } = require('#src/web/lib/media/font-library'); const { @@ -34,7 +37,6 @@ const { getAuditUserId, getCanvasSignature, fetchPlaylistCanvasId, - fetchPlaylistCanvasSignature, fetchScreensByPlaylistId, fetchScreensBySlideId, fetchScreensByTemplateId, @@ -92,6 +94,14 @@ async function start() { const sessionService = createSessionService({ sessionCookieName: webConfig.sessionCookieName, sessionMaxAgeMs: webConfig.sessionMaxAgeMs, + getConfiguredSessionMaxAgeMs: async function () { + const settings = await fetchAppSettings(pool); + return Number(settings['security.session_lifetime_days']) * 24 * 60 * 60 * 1000; + }, + getConfiguredMaxActiveSessions: async function () { + const settings = await fetchAppSettings(pool); + return Number(settings['security.max_active_sessions']); + }, hashSessionToken: hashSessionToken, createSessionToken: createSessionToken }); @@ -99,6 +109,7 @@ async function start() { const createUserSession = sessionService.createUserSession; const clearSessionCookie = sessionService.clearSessionCookie; const setSessionCookie = sessionService.setSessionCookie; + const getSessionMaxAgeMs = sessionService.getSessionMaxAgeMs; const setAuthMessageCookie = sessionService.setAuthMessageCookie; const consumeAuthMessageCookie = sessionService.consumeAuthMessageCookie; const loadCurrentUser = sessionService.loadCurrentUser; @@ -119,9 +130,11 @@ async function start() { common: common, pages: pages, upload: upload, + mediaDir: webConfig.mediaDir, uploadDir: webConfig.uploadsDir, createUserSession: createUserSession, setSessionCookie: setSessionCookie, + getSessionMaxAgeMs: getSessionMaxAgeMs, clearSessionCookie: clearSessionCookie, setAuthMessageCookie: setAuthMessageCookie, consumeAuthMessageCookie: consumeAuthMessageCookie, @@ -131,6 +144,7 @@ async function start() { sessionCookieName: webConfig.sessionCookieName, formatDashboardDate: formatDashboardDate, getAuditUserId: getAuditUserId, + recordRequestAuditEvent: recordRequestAuditEvent, hashPassword: hashPassword, validatePasswordStrength: validatePasswordStrength, readArrayField: readArrayField, @@ -140,7 +154,6 @@ async function start() { fetchScreensBySlideId: fetchScreensBySlideId, fetchScreensByTemplateId: fetchScreensByTemplateId, fetchPlaylistCanvasId: fetchPlaylistCanvasId, - fetchPlaylistCanvasSignature: fetchPlaylistCanvasSignature, getCanvasSignature: getCanvasSignature, normalizeScheduleMode: normalizeScheduleMode, parseDateTimeLocal: parseDateTimeLocal, @@ -157,7 +170,6 @@ async function start() { }, hasAnyPermission: hasAnyPermission, backgroundTaskQueue: backgroundTaskQueue, - mediaDir: webConfig.mediaDir, uploadSyncService: webBootstrap.uploadSyncService, collectUploadReferencesFromSlide: collectUploadReferencesFromSlide, collectUploadReferencesFromTemplate: collectUploadReferencesFromTemplate, @@ -167,9 +179,15 @@ async function start() { buildDashboardState: webBootstrap.buildDashboardState }); + registerNotFoundHandler(app); + app.use(function (error, req, res, _next) { - console.error(error); const statusCode = Number(error && (error.statusCode || error.status)) || 500; + if (statusCode >= 500) { + console.error(error); + } else if (statusCode >= 400 && statusCode !== 404) { + console.warn(error && error.message ? error.message : 'Request failed.', { statusCode: statusCode }); + } const isXhr = String(req.get && req.get('X-Requested-With') || '').toLowerCase() === 'xmlhttprequest'; const wantsHtml = !isXhr && !String(req.originalUrl || '').startsWith('/api/') && (!req.accepts || req.accepts('html')); diff --git a/src/web/lib/auth/rbac-data.js b/src/web/lib/auth/rbac-data.js index 7c8706f..f0e3354 100644 --- a/src/web/lib/auth/rbac-data.js +++ b/src/web/lib/auth/rbac-data.js @@ -113,7 +113,7 @@ async function fetchRolesForUser(pool, userId) { async function fetchUsersWithRoles(pool) { const [rows] = await pool.query( - `SELECT u.id, u.name, u.username, u.created_at, u.modified_at, + `SELECT u.id, u.name, u.username, u.account_locked, u.created_at, u.modified_at, COALESCE(role_data.role_names, '') AS role_names, COALESCE(role_data.role_ids_csv, '') AS role_ids_csv FROM a_users u @@ -142,7 +142,7 @@ async function fetchUsersWithRolesPage(pool, page, pageSize, searchTerm, sortKey const whereSql = hasExcludedUserId ? 'WHERE u.id <> ?' : ''; const queryArgs = hasExcludedUserId ? [excludedUserId] : []; const paged = await fetchPagedRows(pool, { - selectSql: `SELECT u.id, u.name, u.username, u.created_at, u.modified_at, + selectSql: `SELECT u.id, u.name, u.username, u.account_locked, u.created_at, u.modified_at, COALESCE(role_data.role_names, '') AS role_names, COALESCE(role_data.role_ids_csv, '') AS role_ids_csv FROM a_users u @@ -189,7 +189,7 @@ async function fetchUsersWithRolesPage(pool, page, pageSize, searchTerm, sortKey async function fetchUserWithRoles(pool, userId) { const [rows] = await pool.query( - `SELECT u.id, u.name, u.username, u.created_at, u.modified_at, + `SELECT u.id, u.name, u.username, u.account_locked, u.created_at, u.modified_at, COALESCE(role_data.role_names, '') AS role_names, COALESCE(role_data.role_ids_csv, '') AS role_ids_csv FROM a_users u @@ -216,6 +216,17 @@ async function fetchUserWithRoles(pool, userId) { }); } +async function fetchActiveUserSessions(pool, userId) { + const [rows] = await pool.query( + `SELECT id, ip_address, user_agent, created_at, last_used_at, expires_at + FROM a_sessions + WHERE user_id = ? AND expires_at > NOW() + ORDER BY last_used_at DESC`, + [userId] + ); + return rows || []; +} + async function syncUserRoles(pool, userId, roleIds) { const uniqueRoleIds = Array.from(new Set((Array.isArray(roleIds) ? roleIds : []).map(function (roleId) { return Number(roleId); @@ -273,6 +284,7 @@ module.exports = { fetchUsersWithRoles, fetchUsersWithRolesPage, fetchUserWithRoles, + fetchActiveUserSessions, syncUserRoles, syncRoleUsers, syncRolePermissions diff --git a/src/web/lib/auth/session.js b/src/web/lib/auth/session.js index e8edc08..ec5e859 100644 --- a/src/web/lib/auth/session.js +++ b/src/web/lib/auth/session.js @@ -34,6 +34,8 @@ function normalizeReturnToPath(value, baseUrl) { function createSessionService(options) { const sessionCookieName = String(options && options.sessionCookieName || '').trim(); const sessionMaxAgeMs = Number(options && options.sessionMaxAgeMs); + const getConfiguredSessionMaxAgeMs = options && options.getConfiguredSessionMaxAgeMs; + const getConfiguredMaxActiveSessions = options && options.getConfiguredMaxActiveSessions; const hashSessionToken = options && options.hashSessionToken; const createSessionToken = options && options.createSessionToken; const authMessageCookieName = 'pulse_auth_message'; @@ -88,7 +90,20 @@ function createSessionService(options) { } function setSessionCookie(res, token) { - appendCookieHeader(res, serializeCookie(sessionCookieName, token, { maxAge: sessionMaxAgeMs })); + const hasRequestedMaxAge = arguments.length > 2; + const requestedMaxAgeMs = hasRequestedMaxAge ? Number(arguments[2]) : sessionMaxAgeMs; + const cookieOptions = hasRequestedMaxAge && arguments[2] === null + ? {} + : { maxAge: Number.isFinite(requestedMaxAgeMs) && requestedMaxAgeMs > 0 ? requestedMaxAgeMs : sessionMaxAgeMs }; + appendCookieHeader(res, serializeCookie(sessionCookieName, token, cookieOptions)); + } + + async function getSessionMaxAgeMs() { + const configuredValue = typeof getConfiguredSessionMaxAgeMs === 'function' + ? await getConfiguredSessionMaxAgeMs() + : sessionMaxAgeMs; + const normalizedValue = Number(configuredValue); + return Number.isFinite(normalizedValue) && normalizedValue > 0 ? normalizedValue : sessionMaxAgeMs; } function setAuthMessageCookie(res, message) { @@ -113,7 +128,7 @@ function createSessionService(options) { const tokenHash = hashSessionToken(token); const [rows] = await pool.query( - `SELECT s.user_id, u.id, u.name, u.username + `SELECT s.user_id, u.id, u.name, u.username, u.must_change_password FROM a_sessions s JOIN a_users u ON u.id = s.user_id WHERE s.session_hash = ? @@ -146,6 +161,7 @@ function createSessionService(options) { await pool.query('UPDATE a_sessions SET last_used_at = CURRENT_TIMESTAMP, modified_by = ? WHERE session_hash = ?', [rows[0].user_id, tokenHash]); return Object.assign({}, rows[0], { + mustChangePassword: Boolean(rows[0].must_change_password), roleKeys: roleRows.map(function (row) { return String(row.role_key || '').trim(); }).filter(Boolean), @@ -155,14 +171,34 @@ function createSessionService(options) { }); } - async function createUserSession(pool, userId) { + async function createUserSession(pool, userId, configuredMaxAgeMs, metadata) { const token = createSessionToken(); const tokenHash = hashSessionToken(token); - const expiresAt = new Date(Date.now() + sessionMaxAgeMs); + const maxAgeMs = Number.isFinite(Number(configuredMaxAgeMs)) && Number(configuredMaxAgeMs) > 0 + ? Number(configuredMaxAgeMs) + : await getSessionMaxAgeMs(); + const expiresAt = new Date(Date.now() + maxAgeMs); + const sessionMetadata = metadata && typeof metadata === 'object' ? metadata : {}; await pool.query( - 'INSERT INTO a_sessions (session_hash, user_id, expires_at, created_by, modified_by) VALUES (?, ?, ?, ?, ?)', - [tokenHash, userId, expiresAt, userId, userId] + 'INSERT INTO a_sessions (session_hash, user_id, ip_address, user_agent, expires_at, created_by, modified_by) VALUES (?, ?, ?, ?, ?, ?, ?)', + [tokenHash, userId, String(sessionMetadata.ipAddress || '').slice(0, 255) || null, String(sessionMetadata.userAgent || '').slice(0, 512) || null, expiresAt, userId, userId] ); + + if (typeof getConfiguredMaxActiveSessions === 'function') { + const maxActiveSessions = Number(await getConfiguredMaxActiveSessions()); + if (Number.isInteger(maxActiveSessions) && maxActiveSessions > 0) { + const [sessionRows] = await pool.query( + 'SELECT id, session_hash FROM a_sessions WHERE user_id = ? AND expires_at > NOW() ORDER BY last_used_at ASC, created_at ASC, id ASC', + [userId] + ); + const sessionsToRemove = (sessionRows || []).filter(function (session) { + return session.session_hash !== tokenHash; + }).slice(0, Math.max(0, sessionRows.length - maxActiveSessions)); + for (const session of sessionsToRemove) { + await pool.query('DELETE FROM a_sessions WHERE id = ? AND user_id = ?', [session.id, userId]); + } + } + } return token; } @@ -184,6 +220,7 @@ function createSessionService(options) { consumeAuthMessageCookie: consumeAuthMessageCookie, loadCurrentUser: loadCurrentUser, createUserSession: createUserSession, + getSessionMaxAgeMs: getSessionMaxAgeMs, requireAuth: requireAuth, getRequestOrigin: getRequestOrigin }; diff --git a/src/web/lib/background-tasks/tasks-scheduled/audit-log-sweep.js b/src/web/lib/background-tasks/tasks-scheduled/audit-log-sweep.js new file mode 100644 index 0000000..397a06c --- /dev/null +++ b/src/web/lib/background-tasks/tasks-scheduled/audit-log-sweep.js @@ -0,0 +1,34 @@ +const { fetchAppSettings } = require('#src/data/app-settings'); + +const TASK = { + key: 'audit-log-sweep', + title: 'Audit log cleanup', + category: 'cleanup', + intervalMs: 24 * 60 * 60 * 1000 +}; + +function registerAuditLogSweepTask(options) { + const backgroundTaskQueue = options && options.backgroundTaskQueue; + const pool = options && options.pool; + if (!backgroundTaskQueue || !pool) { + throw new Error('registerAuditLogSweepTask requires audit cleanup dependencies.'); + } + backgroundTaskQueue.registerRecurringTask({ + key: TASK.key, + title: TASK.title, + category: TASK.category, + intervalMs: TASK.intervalMs, + metadata: {}, + run: async function () { + const settings = await fetchAppSettings(pool); + const retentionDays = Number(settings['audit.retention_days']); + if (!Number.isInteger(retentionDays) || retentionDays <= 0) { + return; + } + const cutoff = new Date(Date.now() - retentionDays * 24 * 60 * 60 * 1000); + await pool.query('DELETE FROM o_audit_events WHERE occurred_at < ?', [cutoff]); + } + }); +} + +module.exports = { registerAuditLogSweepTask }; \ No newline at end of file diff --git a/src/web/lib/background-tasks/tasks-scheduled/expired-session-sweep.js b/src/web/lib/background-tasks/tasks-scheduled/expired-session-sweep.js new file mode 100644 index 0000000..b5f2e31 --- /dev/null +++ b/src/web/lib/background-tasks/tasks-scheduled/expired-session-sweep.js @@ -0,0 +1,31 @@ +const TASK = { + key: 'expired-session-sweep', + title: 'Expired session cleanup', + category: 'cleanup', + trigger: 'scheduled recurring task, hourly', + purpose: 'remove expired authentication sessions and their metadata.', + taskType: 'recurring-run', + intervalMs: 60 * 60 * 1000 +}; + +function registerExpiredSessionSweepTask(options) { + const backgroundTaskQueue = options && options.backgroundTaskQueue; + const pool = options && options.pool; + + if (!backgroundTaskQueue || !pool) { + throw new Error('registerExpiredSessionSweepTask requires the session cleanup dependencies.'); + } + + backgroundTaskQueue.registerRecurringTask({ + key: TASK.key, + title: TASK.title, + category: TASK.category, + intervalMs: TASK.intervalMs, + metadata: {}, + run: async function () { + await pool.query('DELETE FROM a_sessions WHERE expires_at <= NOW()'); + } + }); +} + +module.exports = { registerExpiredSessionSweepTask }; \ No newline at end of file diff --git a/src/web/lib/config.js b/src/web/lib/config.js index 408a9dd..161a4af 100644 --- a/src/web/lib/config.js +++ b/src/web/lib/config.js @@ -9,8 +9,7 @@ function createWebConfig() { const bridgeInternalUrl = (process.env.BRIDGE_INTERNAL_URL || 'http://player-bridge:8090').replace(/\/$/, ''); const webInternalUrl = (process.env.WEB_INTERNAL_URL || `http://127.0.0.1:${Number(process.env.WEB_PORT || 8080)}`).replace(/\/$/, ''); const sessionCookieName = 'digital_signage_session'; - const sessionMaxAgeDays = Number(process.env.SESSION_MAX_AGE_DAYS || 14); - const sessionMaxAgeMs = (Number.isFinite(sessionMaxAgeDays) && sessionMaxAgeDays > 0 ? sessionMaxAgeDays : 14) * 24 * 60 * 60 * 1000; + const sessionMaxAgeMs = 14 * 24 * 60 * 60 * 1000; const port = Number(process.env.WEB_PORT || 8080); const dataSourceStartupRefreshStaggerMs = Math.max(100, Number(process.env.DATA_SOURCE_STARTUP_REFRESH_STAGGER_MS || 250)); diff --git a/src/web/lib/helpers.js b/src/web/lib/helpers.js index cd6e6ec..f8bf5ae 100644 --- a/src/web/lib/helpers.js +++ b/src/web/lib/helpers.js @@ -198,7 +198,6 @@ module.exports = { getAuditUserId: getAuditUserId, getCanvasSignature: getCanvasSignature, fetchPlaylistCanvasId: fetchPlaylistCanvasId, - fetchPlaylistCanvasSignature: fetchPlaylistCanvasId, fetchScreensByPlaylistId: fetchScreensByPlaylistId, fetchScreensBySlideId: fetchScreensBySlideId, fetchScreensByTemplateId: fetchScreensByTemplateId, diff --git a/src/web/middleware.js b/src/web/middleware.js index bc4c989..942d60b 100644 --- a/src/web/middleware.js +++ b/src/web/middleware.js @@ -33,6 +33,11 @@ module.exports = function registerMiddleware(app, deps) { return next(); } - return requireAuth(req, res, next); + return requireAuth(req, res, function () { + if (req.currentUser && req.currentUser.mustChangePassword && req.path !== '/account' && req.path !== '/account/password' && req.path !== '/account/sessions/revoke' && req.path !== '/logout') { + return res.redirect('/account?message=' + encodeURIComponent('Please change your password before continuing.')); + } + next(); + }); }); }; \ No newline at end of file diff --git a/src/web/middleware/not-found.js b/src/web/middleware/not-found.js new file mode 100644 index 0000000..36217ab --- /dev/null +++ b/src/web/middleware/not-found.js @@ -0,0 +1,9 @@ +// Forward unmatched requests to the shared error-page handler. + +module.exports = function registerNotFoundHandler(app) { + app.use(function (_req, _res, next) { + const error = new Error('Page not found.'); + error.statusCode = 404; + next(error); + }); +}; diff --git a/src/web/pages/index.js b/src/web/pages/index.js index 3261098..39fafad 100644 --- a/src/web/pages/index.js +++ b/src/web/pages/index.js @@ -9,6 +9,7 @@ function routePath(...segments) { module.exports = { renderLoginPage: require(routePath('auth', 'login')), renderAccountPage: require(routePath('account', 'password')), + renderSettingsPage: require(routePath('settings', 'index')), renderAboutPage: require(routePath('settings', 'about', 'index')), renderUsersPage: require(routePath('settings', 'users', 'list')), renderUsersAddPage: require(routePath('settings', 'users', 'add')), diff --git a/src/web/public/adminlte/bootstrap-icons/css/bootstrap-icons.min.css b/src/web/public/adminlte/bootstrap-icons/css/bootstrap-icons.min.css index dadd6dc..706a5c8 100644 --- a/src/web/public/adminlte/bootstrap-icons/css/bootstrap-icons.min.css +++ b/src/web/public/adminlte/bootstrap-icons/css/bootstrap-icons.min.css @@ -1,5 +1,5 @@ /*! - * Bootstrap Icons v1.11.3 (https://icons.getbootstrap.com/) + * Bootstrap Icons v1.13.1 (https://icons.getbootstrap.com/) * Copyright 2019-2024 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/icons/blob/main/LICENSE) - */@font-face{font-display:block;font-family:bootstrap-icons;src:url("fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6") format("woff2"),url("fonts/bootstrap-icons.woff?dd67030699838ea613ee6dbda90effa6") format("woff")}.bi::before,[class*=" bi-"]::before,[class^=bi-]::before{display:inline-block;font-family:bootstrap-icons!important;font-style:normal;font-weight:400!important;font-variant:normal;text-transform:none;line-height:1;vertical-align:-.125em;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.bi-123::before{content:"\f67f"}.bi-alarm-fill::before{content:"\f101"}.bi-alarm::before{content:"\f102"}.bi-align-bottom::before{content:"\f103"}.bi-align-center::before{content:"\f104"}.bi-align-end::before{content:"\f105"}.bi-align-middle::before{content:"\f106"}.bi-align-start::before{content:"\f107"}.bi-align-top::before{content:"\f108"}.bi-alt::before{content:"\f109"}.bi-app-indicator::before{content:"\f10a"}.bi-app::before{content:"\f10b"}.bi-archive-fill::before{content:"\f10c"}.bi-archive::before{content:"\f10d"}.bi-arrow-90deg-down::before{content:"\f10e"}.bi-arrow-90deg-left::before{content:"\f10f"}.bi-arrow-90deg-right::before{content:"\f110"}.bi-arrow-90deg-up::before{content:"\f111"}.bi-arrow-bar-down::before{content:"\f112"}.bi-arrow-bar-left::before{content:"\f113"}.bi-arrow-bar-right::before{content:"\f114"}.bi-arrow-bar-up::before{content:"\f115"}.bi-arrow-clockwise::before{content:"\f116"}.bi-arrow-counterclockwise::before{content:"\f117"}.bi-arrow-down-circle-fill::before{content:"\f118"}.bi-arrow-down-circle::before{content:"\f119"}.bi-arrow-down-left-circle-fill::before{content:"\f11a"}.bi-arrow-down-left-circle::before{content:"\f11b"}.bi-arrow-down-left-square-fill::before{content:"\f11c"}.bi-arrow-down-left-square::before{content:"\f11d"}.bi-arrow-down-left::before{content:"\f11e"}.bi-arrow-down-right-circle-fill::before{content:"\f11f"}.bi-arrow-down-right-circle::before{content:"\f120"}.bi-arrow-down-right-square-fill::before{content:"\f121"}.bi-arrow-down-right-square::before{content:"\f122"}.bi-arrow-down-right::before{content:"\f123"}.bi-arrow-down-short::before{content:"\f124"}.bi-arrow-down-square-fill::before{content:"\f125"}.bi-arrow-down-square::before{content:"\f126"}.bi-arrow-down-up::before{content:"\f127"}.bi-arrow-down::before{content:"\f128"}.bi-arrow-left-circle-fill::before{content:"\f129"}.bi-arrow-left-circle::before{content:"\f12a"}.bi-arrow-left-right::before{content:"\f12b"}.bi-arrow-left-short::before{content:"\f12c"}.bi-arrow-left-square-fill::before{content:"\f12d"}.bi-arrow-left-square::before{content:"\f12e"}.bi-arrow-left::before{content:"\f12f"}.bi-arrow-repeat::before{content:"\f130"}.bi-arrow-return-left::before{content:"\f131"}.bi-arrow-return-right::before{content:"\f132"}.bi-arrow-right-circle-fill::before{content:"\f133"}.bi-arrow-right-circle::before{content:"\f134"}.bi-arrow-right-short::before{content:"\f135"}.bi-arrow-right-square-fill::before{content:"\f136"}.bi-arrow-right-square::before{content:"\f137"}.bi-arrow-right::before{content:"\f138"}.bi-arrow-up-circle-fill::before{content:"\f139"}.bi-arrow-up-circle::before{content:"\f13a"}.bi-arrow-up-left-circle-fill::before{content:"\f13b"}.bi-arrow-up-left-circle::before{content:"\f13c"}.bi-arrow-up-left-square-fill::before{content:"\f13d"}.bi-arrow-up-left-square::before{content:"\f13e"}.bi-arrow-up-left::before{content:"\f13f"}.bi-arrow-up-right-circle-fill::before{content:"\f140"}.bi-arrow-up-right-circle::before{content:"\f141"}.bi-arrow-up-right-square-fill::before{content:"\f142"}.bi-arrow-up-right-square::before{content:"\f143"}.bi-arrow-up-right::before{content:"\f144"}.bi-arrow-up-short::before{content:"\f145"}.bi-arrow-up-square-fill::before{content:"\f146"}.bi-arrow-up-square::before{content:"\f147"}.bi-arrow-up::before{content:"\f148"}.bi-arrows-angle-contract::before{content:"\f149"}.bi-arrows-angle-expand::before{content:"\f14a"}.bi-arrows-collapse::before{content:"\f14b"}.bi-arrows-expand::before{content:"\f14c"}.bi-arrows-fullscreen::before{content:"\f14d"}.bi-arrows-move::before{content:"\f14e"}.bi-aspect-ratio-fill::before{content:"\f14f"}.bi-aspect-ratio::before{content:"\f150"}.bi-asterisk::before{content:"\f151"}.bi-at::before{content:"\f152"}.bi-award-fill::before{content:"\f153"}.bi-award::before{content:"\f154"}.bi-back::before{content:"\f155"}.bi-backspace-fill::before{content:"\f156"}.bi-backspace-reverse-fill::before{content:"\f157"}.bi-backspace-reverse::before{content:"\f158"}.bi-backspace::before{content:"\f159"}.bi-badge-3d-fill::before{content:"\f15a"}.bi-badge-3d::before{content:"\f15b"}.bi-badge-4k-fill::before{content:"\f15c"}.bi-badge-4k::before{content:"\f15d"}.bi-badge-8k-fill::before{content:"\f15e"}.bi-badge-8k::before{content:"\f15f"}.bi-badge-ad-fill::before{content:"\f160"}.bi-badge-ad::before{content:"\f161"}.bi-badge-ar-fill::before{content:"\f162"}.bi-badge-ar::before{content:"\f163"}.bi-badge-cc-fill::before{content:"\f164"}.bi-badge-cc::before{content:"\f165"}.bi-badge-hd-fill::before{content:"\f166"}.bi-badge-hd::before{content:"\f167"}.bi-badge-tm-fill::before{content:"\f168"}.bi-badge-tm::before{content:"\f169"}.bi-badge-vo-fill::before{content:"\f16a"}.bi-badge-vo::before{content:"\f16b"}.bi-badge-vr-fill::before{content:"\f16c"}.bi-badge-vr::before{content:"\f16d"}.bi-badge-wc-fill::before{content:"\f16e"}.bi-badge-wc::before{content:"\f16f"}.bi-bag-check-fill::before{content:"\f170"}.bi-bag-check::before{content:"\f171"}.bi-bag-dash-fill::before{content:"\f172"}.bi-bag-dash::before{content:"\f173"}.bi-bag-fill::before{content:"\f174"}.bi-bag-plus-fill::before{content:"\f175"}.bi-bag-plus::before{content:"\f176"}.bi-bag-x-fill::before{content:"\f177"}.bi-bag-x::before{content:"\f178"}.bi-bag::before{content:"\f179"}.bi-bar-chart-fill::before{content:"\f17a"}.bi-bar-chart-line-fill::before{content:"\f17b"}.bi-bar-chart-line::before{content:"\f17c"}.bi-bar-chart-steps::before{content:"\f17d"}.bi-bar-chart::before{content:"\f17e"}.bi-basket-fill::before{content:"\f17f"}.bi-basket::before{content:"\f180"}.bi-basket2-fill::before{content:"\f181"}.bi-basket2::before{content:"\f182"}.bi-basket3-fill::before{content:"\f183"}.bi-basket3::before{content:"\f184"}.bi-battery-charging::before{content:"\f185"}.bi-battery-full::before{content:"\f186"}.bi-battery-half::before{content:"\f187"}.bi-battery::before{content:"\f188"}.bi-bell-fill::before{content:"\f189"}.bi-bell::before{content:"\f18a"}.bi-bezier::before{content:"\f18b"}.bi-bezier2::before{content:"\f18c"}.bi-bicycle::before{content:"\f18d"}.bi-binoculars-fill::before{content:"\f18e"}.bi-binoculars::before{content:"\f18f"}.bi-blockquote-left::before{content:"\f190"}.bi-blockquote-right::before{content:"\f191"}.bi-book-fill::before{content:"\f192"}.bi-book-half::before{content:"\f193"}.bi-book::before{content:"\f194"}.bi-bookmark-check-fill::before{content:"\f195"}.bi-bookmark-check::before{content:"\f196"}.bi-bookmark-dash-fill::before{content:"\f197"}.bi-bookmark-dash::before{content:"\f198"}.bi-bookmark-fill::before{content:"\f199"}.bi-bookmark-heart-fill::before{content:"\f19a"}.bi-bookmark-heart::before{content:"\f19b"}.bi-bookmark-plus-fill::before{content:"\f19c"}.bi-bookmark-plus::before{content:"\f19d"}.bi-bookmark-star-fill::before{content:"\f19e"}.bi-bookmark-star::before{content:"\f19f"}.bi-bookmark-x-fill::before{content:"\f1a0"}.bi-bookmark-x::before{content:"\f1a1"}.bi-bookmark::before{content:"\f1a2"}.bi-bookmarks-fill::before{content:"\f1a3"}.bi-bookmarks::before{content:"\f1a4"}.bi-bookshelf::before{content:"\f1a5"}.bi-bootstrap-fill::before{content:"\f1a6"}.bi-bootstrap-reboot::before{content:"\f1a7"}.bi-bootstrap::before{content:"\f1a8"}.bi-border-all::before{content:"\f1a9"}.bi-border-bottom::before{content:"\f1aa"}.bi-border-center::before{content:"\f1ab"}.bi-border-inner::before{content:"\f1ac"}.bi-border-left::before{content:"\f1ad"}.bi-border-middle::before{content:"\f1ae"}.bi-border-outer::before{content:"\f1af"}.bi-border-right::before{content:"\f1b0"}.bi-border-style::before{content:"\f1b1"}.bi-border-top::before{content:"\f1b2"}.bi-border-width::before{content:"\f1b3"}.bi-border::before{content:"\f1b4"}.bi-bounding-box-circles::before{content:"\f1b5"}.bi-bounding-box::before{content:"\f1b6"}.bi-box-arrow-down-left::before{content:"\f1b7"}.bi-box-arrow-down-right::before{content:"\f1b8"}.bi-box-arrow-down::before{content:"\f1b9"}.bi-box-arrow-in-down-left::before{content:"\f1ba"}.bi-box-arrow-in-down-right::before{content:"\f1bb"}.bi-box-arrow-in-down::before{content:"\f1bc"}.bi-box-arrow-in-left::before{content:"\f1bd"}.bi-box-arrow-in-right::before{content:"\f1be"}.bi-box-arrow-in-up-left::before{content:"\f1bf"}.bi-box-arrow-in-up-right::before{content:"\f1c0"}.bi-box-arrow-in-up::before{content:"\f1c1"}.bi-box-arrow-left::before{content:"\f1c2"}.bi-box-arrow-right::before{content:"\f1c3"}.bi-box-arrow-up-left::before{content:"\f1c4"}.bi-box-arrow-up-right::before{content:"\f1c5"}.bi-box-arrow-up::before{content:"\f1c6"}.bi-box-seam::before{content:"\f1c7"}.bi-box::before{content:"\f1c8"}.bi-braces::before{content:"\f1c9"}.bi-bricks::before{content:"\f1ca"}.bi-briefcase-fill::before{content:"\f1cb"}.bi-briefcase::before{content:"\f1cc"}.bi-brightness-alt-high-fill::before{content:"\f1cd"}.bi-brightness-alt-high::before{content:"\f1ce"}.bi-brightness-alt-low-fill::before{content:"\f1cf"}.bi-brightness-alt-low::before{content:"\f1d0"}.bi-brightness-high-fill::before{content:"\f1d1"}.bi-brightness-high::before{content:"\f1d2"}.bi-brightness-low-fill::before{content:"\f1d3"}.bi-brightness-low::before{content:"\f1d4"}.bi-broadcast-pin::before{content:"\f1d5"}.bi-broadcast::before{content:"\f1d6"}.bi-brush-fill::before{content:"\f1d7"}.bi-brush::before{content:"\f1d8"}.bi-bucket-fill::before{content:"\f1d9"}.bi-bucket::before{content:"\f1da"}.bi-bug-fill::before{content:"\f1db"}.bi-bug::before{content:"\f1dc"}.bi-building::before{content:"\f1dd"}.bi-bullseye::before{content:"\f1de"}.bi-calculator-fill::before{content:"\f1df"}.bi-calculator::before{content:"\f1e0"}.bi-calendar-check-fill::before{content:"\f1e1"}.bi-calendar-check::before{content:"\f1e2"}.bi-calendar-date-fill::before{content:"\f1e3"}.bi-calendar-date::before{content:"\f1e4"}.bi-calendar-day-fill::before{content:"\f1e5"}.bi-calendar-day::before{content:"\f1e6"}.bi-calendar-event-fill::before{content:"\f1e7"}.bi-calendar-event::before{content:"\f1e8"}.bi-calendar-fill::before{content:"\f1e9"}.bi-calendar-minus-fill::before{content:"\f1ea"}.bi-calendar-minus::before{content:"\f1eb"}.bi-calendar-month-fill::before{content:"\f1ec"}.bi-calendar-month::before{content:"\f1ed"}.bi-calendar-plus-fill::before{content:"\f1ee"}.bi-calendar-plus::before{content:"\f1ef"}.bi-calendar-range-fill::before{content:"\f1f0"}.bi-calendar-range::before{content:"\f1f1"}.bi-calendar-week-fill::before{content:"\f1f2"}.bi-calendar-week::before{content:"\f1f3"}.bi-calendar-x-fill::before{content:"\f1f4"}.bi-calendar-x::before{content:"\f1f5"}.bi-calendar::before{content:"\f1f6"}.bi-calendar2-check-fill::before{content:"\f1f7"}.bi-calendar2-check::before{content:"\f1f8"}.bi-calendar2-date-fill::before{content:"\f1f9"}.bi-calendar2-date::before{content:"\f1fa"}.bi-calendar2-day-fill::before{content:"\f1fb"}.bi-calendar2-day::before{content:"\f1fc"}.bi-calendar2-event-fill::before{content:"\f1fd"}.bi-calendar2-event::before{content:"\f1fe"}.bi-calendar2-fill::before{content:"\f1ff"}.bi-calendar2-minus-fill::before{content:"\f200"}.bi-calendar2-minus::before{content:"\f201"}.bi-calendar2-month-fill::before{content:"\f202"}.bi-calendar2-month::before{content:"\f203"}.bi-calendar2-plus-fill::before{content:"\f204"}.bi-calendar2-plus::before{content:"\f205"}.bi-calendar2-range-fill::before{content:"\f206"}.bi-calendar2-range::before{content:"\f207"}.bi-calendar2-week-fill::before{content:"\f208"}.bi-calendar2-week::before{content:"\f209"}.bi-calendar2-x-fill::before{content:"\f20a"}.bi-calendar2-x::before{content:"\f20b"}.bi-calendar2::before{content:"\f20c"}.bi-calendar3-event-fill::before{content:"\f20d"}.bi-calendar3-event::before{content:"\f20e"}.bi-calendar3-fill::before{content:"\f20f"}.bi-calendar3-range-fill::before{content:"\f210"}.bi-calendar3-range::before{content:"\f211"}.bi-calendar3-week-fill::before{content:"\f212"}.bi-calendar3-week::before{content:"\f213"}.bi-calendar3::before{content:"\f214"}.bi-calendar4-event::before{content:"\f215"}.bi-calendar4-range::before{content:"\f216"}.bi-calendar4-week::before{content:"\f217"}.bi-calendar4::before{content:"\f218"}.bi-camera-fill::before{content:"\f219"}.bi-camera-reels-fill::before{content:"\f21a"}.bi-camera-reels::before{content:"\f21b"}.bi-camera-video-fill::before{content:"\f21c"}.bi-camera-video-off-fill::before{content:"\f21d"}.bi-camera-video-off::before{content:"\f21e"}.bi-camera-video::before{content:"\f21f"}.bi-camera::before{content:"\f220"}.bi-camera2::before{content:"\f221"}.bi-capslock-fill::before{content:"\f222"}.bi-capslock::before{content:"\f223"}.bi-card-checklist::before{content:"\f224"}.bi-card-heading::before{content:"\f225"}.bi-card-image::before{content:"\f226"}.bi-card-list::before{content:"\f227"}.bi-card-text::before{content:"\f228"}.bi-caret-down-fill::before{content:"\f229"}.bi-caret-down-square-fill::before{content:"\f22a"}.bi-caret-down-square::before{content:"\f22b"}.bi-caret-down::before{content:"\f22c"}.bi-caret-left-fill::before{content:"\f22d"}.bi-caret-left-square-fill::before{content:"\f22e"}.bi-caret-left-square::before{content:"\f22f"}.bi-caret-left::before{content:"\f230"}.bi-caret-right-fill::before{content:"\f231"}.bi-caret-right-square-fill::before{content:"\f232"}.bi-caret-right-square::before{content:"\f233"}.bi-caret-right::before{content:"\f234"}.bi-caret-up-fill::before{content:"\f235"}.bi-caret-up-square-fill::before{content:"\f236"}.bi-caret-up-square::before{content:"\f237"}.bi-caret-up::before{content:"\f238"}.bi-cart-check-fill::before{content:"\f239"}.bi-cart-check::before{content:"\f23a"}.bi-cart-dash-fill::before{content:"\f23b"}.bi-cart-dash::before{content:"\f23c"}.bi-cart-fill::before{content:"\f23d"}.bi-cart-plus-fill::before{content:"\f23e"}.bi-cart-plus::before{content:"\f23f"}.bi-cart-x-fill::before{content:"\f240"}.bi-cart-x::before{content:"\f241"}.bi-cart::before{content:"\f242"}.bi-cart2::before{content:"\f243"}.bi-cart3::before{content:"\f244"}.bi-cart4::before{content:"\f245"}.bi-cash-stack::before{content:"\f246"}.bi-cash::before{content:"\f247"}.bi-cast::before{content:"\f248"}.bi-chat-dots-fill::before{content:"\f249"}.bi-chat-dots::before{content:"\f24a"}.bi-chat-fill::before{content:"\f24b"}.bi-chat-left-dots-fill::before{content:"\f24c"}.bi-chat-left-dots::before{content:"\f24d"}.bi-chat-left-fill::before{content:"\f24e"}.bi-chat-left-quote-fill::before{content:"\f24f"}.bi-chat-left-quote::before{content:"\f250"}.bi-chat-left-text-fill::before{content:"\f251"}.bi-chat-left-text::before{content:"\f252"}.bi-chat-left::before{content:"\f253"}.bi-chat-quote-fill::before{content:"\f254"}.bi-chat-quote::before{content:"\f255"}.bi-chat-right-dots-fill::before{content:"\f256"}.bi-chat-right-dots::before{content:"\f257"}.bi-chat-right-fill::before{content:"\f258"}.bi-chat-right-quote-fill::before{content:"\f259"}.bi-chat-right-quote::before{content:"\f25a"}.bi-chat-right-text-fill::before{content:"\f25b"}.bi-chat-right-text::before{content:"\f25c"}.bi-chat-right::before{content:"\f25d"}.bi-chat-square-dots-fill::before{content:"\f25e"}.bi-chat-square-dots::before{content:"\f25f"}.bi-chat-square-fill::before{content:"\f260"}.bi-chat-square-quote-fill::before{content:"\f261"}.bi-chat-square-quote::before{content:"\f262"}.bi-chat-square-text-fill::before{content:"\f263"}.bi-chat-square-text::before{content:"\f264"}.bi-chat-square::before{content:"\f265"}.bi-chat-text-fill::before{content:"\f266"}.bi-chat-text::before{content:"\f267"}.bi-chat::before{content:"\f268"}.bi-check-all::before{content:"\f269"}.bi-check-circle-fill::before{content:"\f26a"}.bi-check-circle::before{content:"\f26b"}.bi-check-square-fill::before{content:"\f26c"}.bi-check-square::before{content:"\f26d"}.bi-check::before{content:"\f26e"}.bi-check2-all::before{content:"\f26f"}.bi-check2-circle::before{content:"\f270"}.bi-check2-square::before{content:"\f271"}.bi-check2::before{content:"\f272"}.bi-chevron-bar-contract::before{content:"\f273"}.bi-chevron-bar-down::before{content:"\f274"}.bi-chevron-bar-expand::before{content:"\f275"}.bi-chevron-bar-left::before{content:"\f276"}.bi-chevron-bar-right::before{content:"\f277"}.bi-chevron-bar-up::before{content:"\f278"}.bi-chevron-compact-down::before{content:"\f279"}.bi-chevron-compact-left::before{content:"\f27a"}.bi-chevron-compact-right::before{content:"\f27b"}.bi-chevron-compact-up::before{content:"\f27c"}.bi-chevron-contract::before{content:"\f27d"}.bi-chevron-double-down::before{content:"\f27e"}.bi-chevron-double-left::before{content:"\f27f"}.bi-chevron-double-right::before{content:"\f280"}.bi-chevron-double-up::before{content:"\f281"}.bi-chevron-down::before{content:"\f282"}.bi-chevron-expand::before{content:"\f283"}.bi-chevron-left::before{content:"\f284"}.bi-chevron-right::before{content:"\f285"}.bi-chevron-up::before{content:"\f286"}.bi-circle-fill::before{content:"\f287"}.bi-circle-half::before{content:"\f288"}.bi-circle-square::before{content:"\f289"}.bi-circle::before{content:"\f28a"}.bi-clipboard-check::before{content:"\f28b"}.bi-clipboard-data::before{content:"\f28c"}.bi-clipboard-minus::before{content:"\f28d"}.bi-clipboard-plus::before{content:"\f28e"}.bi-clipboard-x::before{content:"\f28f"}.bi-clipboard::before{content:"\f290"}.bi-clock-fill::before{content:"\f291"}.bi-clock-history::before{content:"\f292"}.bi-clock::before{content:"\f293"}.bi-cloud-arrow-down-fill::before{content:"\f294"}.bi-cloud-arrow-down::before{content:"\f295"}.bi-cloud-arrow-up-fill::before{content:"\f296"}.bi-cloud-arrow-up::before{content:"\f297"}.bi-cloud-check-fill::before{content:"\f298"}.bi-cloud-check::before{content:"\f299"}.bi-cloud-download-fill::before{content:"\f29a"}.bi-cloud-download::before{content:"\f29b"}.bi-cloud-drizzle-fill::before{content:"\f29c"}.bi-cloud-drizzle::before{content:"\f29d"}.bi-cloud-fill::before{content:"\f29e"}.bi-cloud-fog-fill::before{content:"\f29f"}.bi-cloud-fog::before{content:"\f2a0"}.bi-cloud-fog2-fill::before{content:"\f2a1"}.bi-cloud-fog2::before{content:"\f2a2"}.bi-cloud-hail-fill::before{content:"\f2a3"}.bi-cloud-hail::before{content:"\f2a4"}.bi-cloud-haze-fill::before{content:"\f2a6"}.bi-cloud-haze::before{content:"\f2a7"}.bi-cloud-haze2-fill::before{content:"\f2a8"}.bi-cloud-lightning-fill::before{content:"\f2a9"}.bi-cloud-lightning-rain-fill::before{content:"\f2aa"}.bi-cloud-lightning-rain::before{content:"\f2ab"}.bi-cloud-lightning::before{content:"\f2ac"}.bi-cloud-minus-fill::before{content:"\f2ad"}.bi-cloud-minus::before{content:"\f2ae"}.bi-cloud-moon-fill::before{content:"\f2af"}.bi-cloud-moon::before{content:"\f2b0"}.bi-cloud-plus-fill::before{content:"\f2b1"}.bi-cloud-plus::before{content:"\f2b2"}.bi-cloud-rain-fill::before{content:"\f2b3"}.bi-cloud-rain-heavy-fill::before{content:"\f2b4"}.bi-cloud-rain-heavy::before{content:"\f2b5"}.bi-cloud-rain::before{content:"\f2b6"}.bi-cloud-slash-fill::before{content:"\f2b7"}.bi-cloud-slash::before{content:"\f2b8"}.bi-cloud-sleet-fill::before{content:"\f2b9"}.bi-cloud-sleet::before{content:"\f2ba"}.bi-cloud-snow-fill::before{content:"\f2bb"}.bi-cloud-snow::before{content:"\f2bc"}.bi-cloud-sun-fill::before{content:"\f2bd"}.bi-cloud-sun::before{content:"\f2be"}.bi-cloud-upload-fill::before{content:"\f2bf"}.bi-cloud-upload::before{content:"\f2c0"}.bi-cloud::before{content:"\f2c1"}.bi-clouds-fill::before{content:"\f2c2"}.bi-clouds::before{content:"\f2c3"}.bi-cloudy-fill::before{content:"\f2c4"}.bi-cloudy::before{content:"\f2c5"}.bi-code-slash::before{content:"\f2c6"}.bi-code-square::before{content:"\f2c7"}.bi-code::before{content:"\f2c8"}.bi-collection-fill::before{content:"\f2c9"}.bi-collection-play-fill::before{content:"\f2ca"}.bi-collection-play::before{content:"\f2cb"}.bi-collection::before{content:"\f2cc"}.bi-columns-gap::before{content:"\f2cd"}.bi-columns::before{content:"\f2ce"}.bi-command::before{content:"\f2cf"}.bi-compass-fill::before{content:"\f2d0"}.bi-compass::before{content:"\f2d1"}.bi-cone-striped::before{content:"\f2d2"}.bi-cone::before{content:"\f2d3"}.bi-controller::before{content:"\f2d4"}.bi-cpu-fill::before{content:"\f2d5"}.bi-cpu::before{content:"\f2d6"}.bi-credit-card-2-back-fill::before{content:"\f2d7"}.bi-credit-card-2-back::before{content:"\f2d8"}.bi-credit-card-2-front-fill::before{content:"\f2d9"}.bi-credit-card-2-front::before{content:"\f2da"}.bi-credit-card-fill::before{content:"\f2db"}.bi-credit-card::before{content:"\f2dc"}.bi-crop::before{content:"\f2dd"}.bi-cup-fill::before{content:"\f2de"}.bi-cup-straw::before{content:"\f2df"}.bi-cup::before{content:"\f2e0"}.bi-cursor-fill::before{content:"\f2e1"}.bi-cursor-text::before{content:"\f2e2"}.bi-cursor::before{content:"\f2e3"}.bi-dash-circle-dotted::before{content:"\f2e4"}.bi-dash-circle-fill::before{content:"\f2e5"}.bi-dash-circle::before{content:"\f2e6"}.bi-dash-square-dotted::before{content:"\f2e7"}.bi-dash-square-fill::before{content:"\f2e8"}.bi-dash-square::before{content:"\f2e9"}.bi-dash::before{content:"\f2ea"}.bi-diagram-2-fill::before{content:"\f2eb"}.bi-diagram-2::before{content:"\f2ec"}.bi-diagram-3-fill::before{content:"\f2ed"}.bi-diagram-3::before{content:"\f2ee"}.bi-diamond-fill::before{content:"\f2ef"}.bi-diamond-half::before{content:"\f2f0"}.bi-diamond::before{content:"\f2f1"}.bi-dice-1-fill::before{content:"\f2f2"}.bi-dice-1::before{content:"\f2f3"}.bi-dice-2-fill::before{content:"\f2f4"}.bi-dice-2::before{content:"\f2f5"}.bi-dice-3-fill::before{content:"\f2f6"}.bi-dice-3::before{content:"\f2f7"}.bi-dice-4-fill::before{content:"\f2f8"}.bi-dice-4::before{content:"\f2f9"}.bi-dice-5-fill::before{content:"\f2fa"}.bi-dice-5::before{content:"\f2fb"}.bi-dice-6-fill::before{content:"\f2fc"}.bi-dice-6::before{content:"\f2fd"}.bi-disc-fill::before{content:"\f2fe"}.bi-disc::before{content:"\f2ff"}.bi-discord::before{content:"\f300"}.bi-display-fill::before{content:"\f301"}.bi-display::before{content:"\f302"}.bi-distribute-horizontal::before{content:"\f303"}.bi-distribute-vertical::before{content:"\f304"}.bi-door-closed-fill::before{content:"\f305"}.bi-door-closed::before{content:"\f306"}.bi-door-open-fill::before{content:"\f307"}.bi-door-open::before{content:"\f308"}.bi-dot::before{content:"\f309"}.bi-download::before{content:"\f30a"}.bi-droplet-fill::before{content:"\f30b"}.bi-droplet-half::before{content:"\f30c"}.bi-droplet::before{content:"\f30d"}.bi-earbuds::before{content:"\f30e"}.bi-easel-fill::before{content:"\f30f"}.bi-easel::before{content:"\f310"}.bi-egg-fill::before{content:"\f311"}.bi-egg-fried::before{content:"\f312"}.bi-egg::before{content:"\f313"}.bi-eject-fill::before{content:"\f314"}.bi-eject::before{content:"\f315"}.bi-emoji-angry-fill::before{content:"\f316"}.bi-emoji-angry::before{content:"\f317"}.bi-emoji-dizzy-fill::before{content:"\f318"}.bi-emoji-dizzy::before{content:"\f319"}.bi-emoji-expressionless-fill::before{content:"\f31a"}.bi-emoji-expressionless::before{content:"\f31b"}.bi-emoji-frown-fill::before{content:"\f31c"}.bi-emoji-frown::before{content:"\f31d"}.bi-emoji-heart-eyes-fill::before{content:"\f31e"}.bi-emoji-heart-eyes::before{content:"\f31f"}.bi-emoji-laughing-fill::before{content:"\f320"}.bi-emoji-laughing::before{content:"\f321"}.bi-emoji-neutral-fill::before{content:"\f322"}.bi-emoji-neutral::before{content:"\f323"}.bi-emoji-smile-fill::before{content:"\f324"}.bi-emoji-smile-upside-down-fill::before{content:"\f325"}.bi-emoji-smile-upside-down::before{content:"\f326"}.bi-emoji-smile::before{content:"\f327"}.bi-emoji-sunglasses-fill::before{content:"\f328"}.bi-emoji-sunglasses::before{content:"\f329"}.bi-emoji-wink-fill::before{content:"\f32a"}.bi-emoji-wink::before{content:"\f32b"}.bi-envelope-fill::before{content:"\f32c"}.bi-envelope-open-fill::before{content:"\f32d"}.bi-envelope-open::before{content:"\f32e"}.bi-envelope::before{content:"\f32f"}.bi-eraser-fill::before{content:"\f330"}.bi-eraser::before{content:"\f331"}.bi-exclamation-circle-fill::before{content:"\f332"}.bi-exclamation-circle::before{content:"\f333"}.bi-exclamation-diamond-fill::before{content:"\f334"}.bi-exclamation-diamond::before{content:"\f335"}.bi-exclamation-octagon-fill::before{content:"\f336"}.bi-exclamation-octagon::before{content:"\f337"}.bi-exclamation-square-fill::before{content:"\f338"}.bi-exclamation-square::before{content:"\f339"}.bi-exclamation-triangle-fill::before{content:"\f33a"}.bi-exclamation-triangle::before{content:"\f33b"}.bi-exclamation::before{content:"\f33c"}.bi-exclude::before{content:"\f33d"}.bi-eye-fill::before{content:"\f33e"}.bi-eye-slash-fill::before{content:"\f33f"}.bi-eye-slash::before{content:"\f340"}.bi-eye::before{content:"\f341"}.bi-eyedropper::before{content:"\f342"}.bi-eyeglasses::before{content:"\f343"}.bi-facebook::before{content:"\f344"}.bi-file-arrow-down-fill::before{content:"\f345"}.bi-file-arrow-down::before{content:"\f346"}.bi-file-arrow-up-fill::before{content:"\f347"}.bi-file-arrow-up::before{content:"\f348"}.bi-file-bar-graph-fill::before{content:"\f349"}.bi-file-bar-graph::before{content:"\f34a"}.bi-file-binary-fill::before{content:"\f34b"}.bi-file-binary::before{content:"\f34c"}.bi-file-break-fill::before{content:"\f34d"}.bi-file-break::before{content:"\f34e"}.bi-file-check-fill::before{content:"\f34f"}.bi-file-check::before{content:"\f350"}.bi-file-code-fill::before{content:"\f351"}.bi-file-code::before{content:"\f352"}.bi-file-diff-fill::before{content:"\f353"}.bi-file-diff::before{content:"\f354"}.bi-file-earmark-arrow-down-fill::before{content:"\f355"}.bi-file-earmark-arrow-down::before{content:"\f356"}.bi-file-earmark-arrow-up-fill::before{content:"\f357"}.bi-file-earmark-arrow-up::before{content:"\f358"}.bi-file-earmark-bar-graph-fill::before{content:"\f359"}.bi-file-earmark-bar-graph::before{content:"\f35a"}.bi-file-earmark-binary-fill::before{content:"\f35b"}.bi-file-earmark-binary::before{content:"\f35c"}.bi-file-earmark-break-fill::before{content:"\f35d"}.bi-file-earmark-break::before{content:"\f35e"}.bi-file-earmark-check-fill::before{content:"\f35f"}.bi-file-earmark-check::before{content:"\f360"}.bi-file-earmark-code-fill::before{content:"\f361"}.bi-file-earmark-code::before{content:"\f362"}.bi-file-earmark-diff-fill::before{content:"\f363"}.bi-file-earmark-diff::before{content:"\f364"}.bi-file-earmark-easel-fill::before{content:"\f365"}.bi-file-earmark-easel::before{content:"\f366"}.bi-file-earmark-excel-fill::before{content:"\f367"}.bi-file-earmark-excel::before{content:"\f368"}.bi-file-earmark-fill::before{content:"\f369"}.bi-file-earmark-font-fill::before{content:"\f36a"}.bi-file-earmark-font::before{content:"\f36b"}.bi-file-earmark-image-fill::before{content:"\f36c"}.bi-file-earmark-image::before{content:"\f36d"}.bi-file-earmark-lock-fill::before{content:"\f36e"}.bi-file-earmark-lock::before{content:"\f36f"}.bi-file-earmark-lock2-fill::before{content:"\f370"}.bi-file-earmark-lock2::before{content:"\f371"}.bi-file-earmark-medical-fill::before{content:"\f372"}.bi-file-earmark-medical::before{content:"\f373"}.bi-file-earmark-minus-fill::before{content:"\f374"}.bi-file-earmark-minus::before{content:"\f375"}.bi-file-earmark-music-fill::before{content:"\f376"}.bi-file-earmark-music::before{content:"\f377"}.bi-file-earmark-person-fill::before{content:"\f378"}.bi-file-earmark-person::before{content:"\f379"}.bi-file-earmark-play-fill::before{content:"\f37a"}.bi-file-earmark-play::before{content:"\f37b"}.bi-file-earmark-plus-fill::before{content:"\f37c"}.bi-file-earmark-plus::before{content:"\f37d"}.bi-file-earmark-post-fill::before{content:"\f37e"}.bi-file-earmark-post::before{content:"\f37f"}.bi-file-earmark-ppt-fill::before{content:"\f380"}.bi-file-earmark-ppt::before{content:"\f381"}.bi-file-earmark-richtext-fill::before{content:"\f382"}.bi-file-earmark-richtext::before{content:"\f383"}.bi-file-earmark-ruled-fill::before{content:"\f384"}.bi-file-earmark-ruled::before{content:"\f385"}.bi-file-earmark-slides-fill::before{content:"\f386"}.bi-file-earmark-slides::before{content:"\f387"}.bi-file-earmark-spreadsheet-fill::before{content:"\f388"}.bi-file-earmark-spreadsheet::before{content:"\f389"}.bi-file-earmark-text-fill::before{content:"\f38a"}.bi-file-earmark-text::before{content:"\f38b"}.bi-file-earmark-word-fill::before{content:"\f38c"}.bi-file-earmark-word::before{content:"\f38d"}.bi-file-earmark-x-fill::before{content:"\f38e"}.bi-file-earmark-x::before{content:"\f38f"}.bi-file-earmark-zip-fill::before{content:"\f390"}.bi-file-earmark-zip::before{content:"\f391"}.bi-file-earmark::before{content:"\f392"}.bi-file-easel-fill::before{content:"\f393"}.bi-file-easel::before{content:"\f394"}.bi-file-excel-fill::before{content:"\f395"}.bi-file-excel::before{content:"\f396"}.bi-file-fill::before{content:"\f397"}.bi-file-font-fill::before{content:"\f398"}.bi-file-font::before{content:"\f399"}.bi-file-image-fill::before{content:"\f39a"}.bi-file-image::before{content:"\f39b"}.bi-file-lock-fill::before{content:"\f39c"}.bi-file-lock::before{content:"\f39d"}.bi-file-lock2-fill::before{content:"\f39e"}.bi-file-lock2::before{content:"\f39f"}.bi-file-medical-fill::before{content:"\f3a0"}.bi-file-medical::before{content:"\f3a1"}.bi-file-minus-fill::before{content:"\f3a2"}.bi-file-minus::before{content:"\f3a3"}.bi-file-music-fill::before{content:"\f3a4"}.bi-file-music::before{content:"\f3a5"}.bi-file-person-fill::before{content:"\f3a6"}.bi-file-person::before{content:"\f3a7"}.bi-file-play-fill::before{content:"\f3a8"}.bi-file-play::before{content:"\f3a9"}.bi-file-plus-fill::before{content:"\f3aa"}.bi-file-plus::before{content:"\f3ab"}.bi-file-post-fill::before{content:"\f3ac"}.bi-file-post::before{content:"\f3ad"}.bi-file-ppt-fill::before{content:"\f3ae"}.bi-file-ppt::before{content:"\f3af"}.bi-file-richtext-fill::before{content:"\f3b0"}.bi-file-richtext::before{content:"\f3b1"}.bi-file-ruled-fill::before{content:"\f3b2"}.bi-file-ruled::before{content:"\f3b3"}.bi-file-slides-fill::before{content:"\f3b4"}.bi-file-slides::before{content:"\f3b5"}.bi-file-spreadsheet-fill::before{content:"\f3b6"}.bi-file-spreadsheet::before{content:"\f3b7"}.bi-file-text-fill::before{content:"\f3b8"}.bi-file-text::before{content:"\f3b9"}.bi-file-word-fill::before{content:"\f3ba"}.bi-file-word::before{content:"\f3bb"}.bi-file-x-fill::before{content:"\f3bc"}.bi-file-x::before{content:"\f3bd"}.bi-file-zip-fill::before{content:"\f3be"}.bi-file-zip::before{content:"\f3bf"}.bi-file::before{content:"\f3c0"}.bi-files-alt::before{content:"\f3c1"}.bi-files::before{content:"\f3c2"}.bi-film::before{content:"\f3c3"}.bi-filter-circle-fill::before{content:"\f3c4"}.bi-filter-circle::before{content:"\f3c5"}.bi-filter-left::before{content:"\f3c6"}.bi-filter-right::before{content:"\f3c7"}.bi-filter-square-fill::before{content:"\f3c8"}.bi-filter-square::before{content:"\f3c9"}.bi-filter::before{content:"\f3ca"}.bi-flag-fill::before{content:"\f3cb"}.bi-flag::before{content:"\f3cc"}.bi-flower1::before{content:"\f3cd"}.bi-flower2::before{content:"\f3ce"}.bi-flower3::before{content:"\f3cf"}.bi-folder-check::before{content:"\f3d0"}.bi-folder-fill::before{content:"\f3d1"}.bi-folder-minus::before{content:"\f3d2"}.bi-folder-plus::before{content:"\f3d3"}.bi-folder-symlink-fill::before{content:"\f3d4"}.bi-folder-symlink::before{content:"\f3d5"}.bi-folder-x::before{content:"\f3d6"}.bi-folder::before{content:"\f3d7"}.bi-folder2-open::before{content:"\f3d8"}.bi-folder2::before{content:"\f3d9"}.bi-fonts::before{content:"\f3da"}.bi-forward-fill::before{content:"\f3db"}.bi-forward::before{content:"\f3dc"}.bi-front::before{content:"\f3dd"}.bi-fullscreen-exit::before{content:"\f3de"}.bi-fullscreen::before{content:"\f3df"}.bi-funnel-fill::before{content:"\f3e0"}.bi-funnel::before{content:"\f3e1"}.bi-gear-fill::before{content:"\f3e2"}.bi-gear-wide-connected::before{content:"\f3e3"}.bi-gear-wide::before{content:"\f3e4"}.bi-gear::before{content:"\f3e5"}.bi-gem::before{content:"\f3e6"}.bi-geo-alt-fill::before{content:"\f3e7"}.bi-geo-alt::before{content:"\f3e8"}.bi-geo-fill::before{content:"\f3e9"}.bi-geo::before{content:"\f3ea"}.bi-gift-fill::before{content:"\f3eb"}.bi-gift::before{content:"\f3ec"}.bi-github::before{content:"\f3ed"}.bi-globe::before{content:"\f3ee"}.bi-globe2::before{content:"\f3ef"}.bi-google::before{content:"\f3f0"}.bi-graph-down::before{content:"\f3f1"}.bi-graph-up::before{content:"\f3f2"}.bi-grid-1x2-fill::before{content:"\f3f3"}.bi-grid-1x2::before{content:"\f3f4"}.bi-grid-3x2-gap-fill::before{content:"\f3f5"}.bi-grid-3x2-gap::before{content:"\f3f6"}.bi-grid-3x2::before{content:"\f3f7"}.bi-grid-3x3-gap-fill::before{content:"\f3f8"}.bi-grid-3x3-gap::before{content:"\f3f9"}.bi-grid-3x3::before{content:"\f3fa"}.bi-grid-fill::before{content:"\f3fb"}.bi-grid::before{content:"\f3fc"}.bi-grip-horizontal::before{content:"\f3fd"}.bi-grip-vertical::before{content:"\f3fe"}.bi-hammer::before{content:"\f3ff"}.bi-hand-index-fill::before{content:"\f400"}.bi-hand-index-thumb-fill::before{content:"\f401"}.bi-hand-index-thumb::before{content:"\f402"}.bi-hand-index::before{content:"\f403"}.bi-hand-thumbs-down-fill::before{content:"\f404"}.bi-hand-thumbs-down::before{content:"\f405"}.bi-hand-thumbs-up-fill::before{content:"\f406"}.bi-hand-thumbs-up::before{content:"\f407"}.bi-handbag-fill::before{content:"\f408"}.bi-handbag::before{content:"\f409"}.bi-hash::before{content:"\f40a"}.bi-hdd-fill::before{content:"\f40b"}.bi-hdd-network-fill::before{content:"\f40c"}.bi-hdd-network::before{content:"\f40d"}.bi-hdd-rack-fill::before{content:"\f40e"}.bi-hdd-rack::before{content:"\f40f"}.bi-hdd-stack-fill::before{content:"\f410"}.bi-hdd-stack::before{content:"\f411"}.bi-hdd::before{content:"\f412"}.bi-headphones::before{content:"\f413"}.bi-headset::before{content:"\f414"}.bi-heart-fill::before{content:"\f415"}.bi-heart-half::before{content:"\f416"}.bi-heart::before{content:"\f417"}.bi-heptagon-fill::before{content:"\f418"}.bi-heptagon-half::before{content:"\f419"}.bi-heptagon::before{content:"\f41a"}.bi-hexagon-fill::before{content:"\f41b"}.bi-hexagon-half::before{content:"\f41c"}.bi-hexagon::before{content:"\f41d"}.bi-hourglass-bottom::before{content:"\f41e"}.bi-hourglass-split::before{content:"\f41f"}.bi-hourglass-top::before{content:"\f420"}.bi-hourglass::before{content:"\f421"}.bi-house-door-fill::before{content:"\f422"}.bi-house-door::before{content:"\f423"}.bi-house-fill::before{content:"\f424"}.bi-house::before{content:"\f425"}.bi-hr::before{content:"\f426"}.bi-hurricane::before{content:"\f427"}.bi-image-alt::before{content:"\f428"}.bi-image-fill::before{content:"\f429"}.bi-image::before{content:"\f42a"}.bi-images::before{content:"\f42b"}.bi-inbox-fill::before{content:"\f42c"}.bi-inbox::before{content:"\f42d"}.bi-inboxes-fill::before{content:"\f42e"}.bi-inboxes::before{content:"\f42f"}.bi-info-circle-fill::before{content:"\f430"}.bi-info-circle::before{content:"\f431"}.bi-info-square-fill::before{content:"\f432"}.bi-info-square::before{content:"\f433"}.bi-info::before{content:"\f434"}.bi-input-cursor-text::before{content:"\f435"}.bi-input-cursor::before{content:"\f436"}.bi-instagram::before{content:"\f437"}.bi-intersect::before{content:"\f438"}.bi-journal-album::before{content:"\f439"}.bi-journal-arrow-down::before{content:"\f43a"}.bi-journal-arrow-up::before{content:"\f43b"}.bi-journal-bookmark-fill::before{content:"\f43c"}.bi-journal-bookmark::before{content:"\f43d"}.bi-journal-check::before{content:"\f43e"}.bi-journal-code::before{content:"\f43f"}.bi-journal-medical::before{content:"\f440"}.bi-journal-minus::before{content:"\f441"}.bi-journal-plus::before{content:"\f442"}.bi-journal-richtext::before{content:"\f443"}.bi-journal-text::before{content:"\f444"}.bi-journal-x::before{content:"\f445"}.bi-journal::before{content:"\f446"}.bi-journals::before{content:"\f447"}.bi-joystick::before{content:"\f448"}.bi-justify-left::before{content:"\f449"}.bi-justify-right::before{content:"\f44a"}.bi-justify::before{content:"\f44b"}.bi-kanban-fill::before{content:"\f44c"}.bi-kanban::before{content:"\f44d"}.bi-key-fill::before{content:"\f44e"}.bi-key::before{content:"\f44f"}.bi-keyboard-fill::before{content:"\f450"}.bi-keyboard::before{content:"\f451"}.bi-ladder::before{content:"\f452"}.bi-lamp-fill::before{content:"\f453"}.bi-lamp::before{content:"\f454"}.bi-laptop-fill::before{content:"\f455"}.bi-laptop::before{content:"\f456"}.bi-layer-backward::before{content:"\f457"}.bi-layer-forward::before{content:"\f458"}.bi-layers-fill::before{content:"\f459"}.bi-layers-half::before{content:"\f45a"}.bi-layers::before{content:"\f45b"}.bi-layout-sidebar-inset-reverse::before{content:"\f45c"}.bi-layout-sidebar-inset::before{content:"\f45d"}.bi-layout-sidebar-reverse::before{content:"\f45e"}.bi-layout-sidebar::before{content:"\f45f"}.bi-layout-split::before{content:"\f460"}.bi-layout-text-sidebar-reverse::before{content:"\f461"}.bi-layout-text-sidebar::before{content:"\f462"}.bi-layout-text-window-reverse::before{content:"\f463"}.bi-layout-text-window::before{content:"\f464"}.bi-layout-three-columns::before{content:"\f465"}.bi-layout-wtf::before{content:"\f466"}.bi-life-preserver::before{content:"\f467"}.bi-lightbulb-fill::before{content:"\f468"}.bi-lightbulb-off-fill::before{content:"\f469"}.bi-lightbulb-off::before{content:"\f46a"}.bi-lightbulb::before{content:"\f46b"}.bi-lightning-charge-fill::before{content:"\f46c"}.bi-lightning-charge::before{content:"\f46d"}.bi-lightning-fill::before{content:"\f46e"}.bi-lightning::before{content:"\f46f"}.bi-link-45deg::before{content:"\f470"}.bi-link::before{content:"\f471"}.bi-linkedin::before{content:"\f472"}.bi-list-check::before{content:"\f473"}.bi-list-nested::before{content:"\f474"}.bi-list-ol::before{content:"\f475"}.bi-list-stars::before{content:"\f476"}.bi-list-task::before{content:"\f477"}.bi-list-ul::before{content:"\f478"}.bi-list::before{content:"\f479"}.bi-lock-fill::before{content:"\f47a"}.bi-lock::before{content:"\f47b"}.bi-mailbox::before{content:"\f47c"}.bi-mailbox2::before{content:"\f47d"}.bi-map-fill::before{content:"\f47e"}.bi-map::before{content:"\f47f"}.bi-markdown-fill::before{content:"\f480"}.bi-markdown::before{content:"\f481"}.bi-mask::before{content:"\f482"}.bi-megaphone-fill::before{content:"\f483"}.bi-megaphone::before{content:"\f484"}.bi-menu-app-fill::before{content:"\f485"}.bi-menu-app::before{content:"\f486"}.bi-menu-button-fill::before{content:"\f487"}.bi-menu-button-wide-fill::before{content:"\f488"}.bi-menu-button-wide::before{content:"\f489"}.bi-menu-button::before{content:"\f48a"}.bi-menu-down::before{content:"\f48b"}.bi-menu-up::before{content:"\f48c"}.bi-mic-fill::before{content:"\f48d"}.bi-mic-mute-fill::before{content:"\f48e"}.bi-mic-mute::before{content:"\f48f"}.bi-mic::before{content:"\f490"}.bi-minecart-loaded::before{content:"\f491"}.bi-minecart::before{content:"\f492"}.bi-moisture::before{content:"\f493"}.bi-moon-fill::before{content:"\f494"}.bi-moon-stars-fill::before{content:"\f495"}.bi-moon-stars::before{content:"\f496"}.bi-moon::before{content:"\f497"}.bi-mouse-fill::before{content:"\f498"}.bi-mouse::before{content:"\f499"}.bi-mouse2-fill::before{content:"\f49a"}.bi-mouse2::before{content:"\f49b"}.bi-mouse3-fill::before{content:"\f49c"}.bi-mouse3::before{content:"\f49d"}.bi-music-note-beamed::before{content:"\f49e"}.bi-music-note-list::before{content:"\f49f"}.bi-music-note::before{content:"\f4a0"}.bi-music-player-fill::before{content:"\f4a1"}.bi-music-player::before{content:"\f4a2"}.bi-newspaper::before{content:"\f4a3"}.bi-node-minus-fill::before{content:"\f4a4"}.bi-node-minus::before{content:"\f4a5"}.bi-node-plus-fill::before{content:"\f4a6"}.bi-node-plus::before{content:"\f4a7"}.bi-nut-fill::before{content:"\f4a8"}.bi-nut::before{content:"\f4a9"}.bi-octagon-fill::before{content:"\f4aa"}.bi-octagon-half::before{content:"\f4ab"}.bi-octagon::before{content:"\f4ac"}.bi-option::before{content:"\f4ad"}.bi-outlet::before{content:"\f4ae"}.bi-paint-bucket::before{content:"\f4af"}.bi-palette-fill::before{content:"\f4b0"}.bi-palette::before{content:"\f4b1"}.bi-palette2::before{content:"\f4b2"}.bi-paperclip::before{content:"\f4b3"}.bi-paragraph::before{content:"\f4b4"}.bi-patch-check-fill::before{content:"\f4b5"}.bi-patch-check::before{content:"\f4b6"}.bi-patch-exclamation-fill::before{content:"\f4b7"}.bi-patch-exclamation::before{content:"\f4b8"}.bi-patch-minus-fill::before{content:"\f4b9"}.bi-patch-minus::before{content:"\f4ba"}.bi-patch-plus-fill::before{content:"\f4bb"}.bi-patch-plus::before{content:"\f4bc"}.bi-patch-question-fill::before{content:"\f4bd"}.bi-patch-question::before{content:"\f4be"}.bi-pause-btn-fill::before{content:"\f4bf"}.bi-pause-btn::before{content:"\f4c0"}.bi-pause-circle-fill::before{content:"\f4c1"}.bi-pause-circle::before{content:"\f4c2"}.bi-pause-fill::before{content:"\f4c3"}.bi-pause::before{content:"\f4c4"}.bi-peace-fill::before{content:"\f4c5"}.bi-peace::before{content:"\f4c6"}.bi-pen-fill::before{content:"\f4c7"}.bi-pen::before{content:"\f4c8"}.bi-pencil-fill::before{content:"\f4c9"}.bi-pencil-square::before{content:"\f4ca"}.bi-pencil::before{content:"\f4cb"}.bi-pentagon-fill::before{content:"\f4cc"}.bi-pentagon-half::before{content:"\f4cd"}.bi-pentagon::before{content:"\f4ce"}.bi-people-fill::before{content:"\f4cf"}.bi-people::before{content:"\f4d0"}.bi-percent::before{content:"\f4d1"}.bi-person-badge-fill::before{content:"\f4d2"}.bi-person-badge::before{content:"\f4d3"}.bi-person-bounding-box::before{content:"\f4d4"}.bi-person-check-fill::before{content:"\f4d5"}.bi-person-check::before{content:"\f4d6"}.bi-person-circle::before{content:"\f4d7"}.bi-person-dash-fill::before{content:"\f4d8"}.bi-person-dash::before{content:"\f4d9"}.bi-person-fill::before{content:"\f4da"}.bi-person-lines-fill::before{content:"\f4db"}.bi-person-plus-fill::before{content:"\f4dc"}.bi-person-plus::before{content:"\f4dd"}.bi-person-square::before{content:"\f4de"}.bi-person-x-fill::before{content:"\f4df"}.bi-person-x::before{content:"\f4e0"}.bi-person::before{content:"\f4e1"}.bi-phone-fill::before{content:"\f4e2"}.bi-phone-landscape-fill::before{content:"\f4e3"}.bi-phone-landscape::before{content:"\f4e4"}.bi-phone-vibrate-fill::before{content:"\f4e5"}.bi-phone-vibrate::before{content:"\f4e6"}.bi-phone::before{content:"\f4e7"}.bi-pie-chart-fill::before{content:"\f4e8"}.bi-pie-chart::before{content:"\f4e9"}.bi-pin-angle-fill::before{content:"\f4ea"}.bi-pin-angle::before{content:"\f4eb"}.bi-pin-fill::before{content:"\f4ec"}.bi-pin::before{content:"\f4ed"}.bi-pip-fill::before{content:"\f4ee"}.bi-pip::before{content:"\f4ef"}.bi-play-btn-fill::before{content:"\f4f0"}.bi-play-btn::before{content:"\f4f1"}.bi-play-circle-fill::before{content:"\f4f2"}.bi-play-circle::before{content:"\f4f3"}.bi-play-fill::before{content:"\f4f4"}.bi-play::before{content:"\f4f5"}.bi-plug-fill::before{content:"\f4f6"}.bi-plug::before{content:"\f4f7"}.bi-plus-circle-dotted::before{content:"\f4f8"}.bi-plus-circle-fill::before{content:"\f4f9"}.bi-plus-circle::before{content:"\f4fa"}.bi-plus-square-dotted::before{content:"\f4fb"}.bi-plus-square-fill::before{content:"\f4fc"}.bi-plus-square::before{content:"\f4fd"}.bi-plus::before{content:"\f4fe"}.bi-power::before{content:"\f4ff"}.bi-printer-fill::before{content:"\f500"}.bi-printer::before{content:"\f501"}.bi-puzzle-fill::before{content:"\f502"}.bi-puzzle::before{content:"\f503"}.bi-question-circle-fill::before{content:"\f504"}.bi-question-circle::before{content:"\f505"}.bi-question-diamond-fill::before{content:"\f506"}.bi-question-diamond::before{content:"\f507"}.bi-question-octagon-fill::before{content:"\f508"}.bi-question-octagon::before{content:"\f509"}.bi-question-square-fill::before{content:"\f50a"}.bi-question-square::before{content:"\f50b"}.bi-question::before{content:"\f50c"}.bi-rainbow::before{content:"\f50d"}.bi-receipt-cutoff::before{content:"\f50e"}.bi-receipt::before{content:"\f50f"}.bi-reception-0::before{content:"\f510"}.bi-reception-1::before{content:"\f511"}.bi-reception-2::before{content:"\f512"}.bi-reception-3::before{content:"\f513"}.bi-reception-4::before{content:"\f514"}.bi-record-btn-fill::before{content:"\f515"}.bi-record-btn::before{content:"\f516"}.bi-record-circle-fill::before{content:"\f517"}.bi-record-circle::before{content:"\f518"}.bi-record-fill::before{content:"\f519"}.bi-record::before{content:"\f51a"}.bi-record2-fill::before{content:"\f51b"}.bi-record2::before{content:"\f51c"}.bi-reply-all-fill::before{content:"\f51d"}.bi-reply-all::before{content:"\f51e"}.bi-reply-fill::before{content:"\f51f"}.bi-reply::before{content:"\f520"}.bi-rss-fill::before{content:"\f521"}.bi-rss::before{content:"\f522"}.bi-rulers::before{content:"\f523"}.bi-save-fill::before{content:"\f524"}.bi-save::before{content:"\f525"}.bi-save2-fill::before{content:"\f526"}.bi-save2::before{content:"\f527"}.bi-scissors::before{content:"\f528"}.bi-screwdriver::before{content:"\f529"}.bi-search::before{content:"\f52a"}.bi-segmented-nav::before{content:"\f52b"}.bi-server::before{content:"\f52c"}.bi-share-fill::before{content:"\f52d"}.bi-share::before{content:"\f52e"}.bi-shield-check::before{content:"\f52f"}.bi-shield-exclamation::before{content:"\f530"}.bi-shield-fill-check::before{content:"\f531"}.bi-shield-fill-exclamation::before{content:"\f532"}.bi-shield-fill-minus::before{content:"\f533"}.bi-shield-fill-plus::before{content:"\f534"}.bi-shield-fill-x::before{content:"\f535"}.bi-shield-fill::before{content:"\f536"}.bi-shield-lock-fill::before{content:"\f537"}.bi-shield-lock::before{content:"\f538"}.bi-shield-minus::before{content:"\f539"}.bi-shield-plus::before{content:"\f53a"}.bi-shield-shaded::before{content:"\f53b"}.bi-shield-slash-fill::before{content:"\f53c"}.bi-shield-slash::before{content:"\f53d"}.bi-shield-x::before{content:"\f53e"}.bi-shield::before{content:"\f53f"}.bi-shift-fill::before{content:"\f540"}.bi-shift::before{content:"\f541"}.bi-shop-window::before{content:"\f542"}.bi-shop::before{content:"\f543"}.bi-shuffle::before{content:"\f544"}.bi-signpost-2-fill::before{content:"\f545"}.bi-signpost-2::before{content:"\f546"}.bi-signpost-fill::before{content:"\f547"}.bi-signpost-split-fill::before{content:"\f548"}.bi-signpost-split::before{content:"\f549"}.bi-signpost::before{content:"\f54a"}.bi-sim-fill::before{content:"\f54b"}.bi-sim::before{content:"\f54c"}.bi-skip-backward-btn-fill::before{content:"\f54d"}.bi-skip-backward-btn::before{content:"\f54e"}.bi-skip-backward-circle-fill::before{content:"\f54f"}.bi-skip-backward-circle::before{content:"\f550"}.bi-skip-backward-fill::before{content:"\f551"}.bi-skip-backward::before{content:"\f552"}.bi-skip-end-btn-fill::before{content:"\f553"}.bi-skip-end-btn::before{content:"\f554"}.bi-skip-end-circle-fill::before{content:"\f555"}.bi-skip-end-circle::before{content:"\f556"}.bi-skip-end-fill::before{content:"\f557"}.bi-skip-end::before{content:"\f558"}.bi-skip-forward-btn-fill::before{content:"\f559"}.bi-skip-forward-btn::before{content:"\f55a"}.bi-skip-forward-circle-fill::before{content:"\f55b"}.bi-skip-forward-circle::before{content:"\f55c"}.bi-skip-forward-fill::before{content:"\f55d"}.bi-skip-forward::before{content:"\f55e"}.bi-skip-start-btn-fill::before{content:"\f55f"}.bi-skip-start-btn::before{content:"\f560"}.bi-skip-start-circle-fill::before{content:"\f561"}.bi-skip-start-circle::before{content:"\f562"}.bi-skip-start-fill::before{content:"\f563"}.bi-skip-start::before{content:"\f564"}.bi-slack::before{content:"\f565"}.bi-slash-circle-fill::before{content:"\f566"}.bi-slash-circle::before{content:"\f567"}.bi-slash-square-fill::before{content:"\f568"}.bi-slash-square::before{content:"\f569"}.bi-slash::before{content:"\f56a"}.bi-sliders::before{content:"\f56b"}.bi-smartwatch::before{content:"\f56c"}.bi-snow::before{content:"\f56d"}.bi-snow2::before{content:"\f56e"}.bi-snow3::before{content:"\f56f"}.bi-sort-alpha-down-alt::before{content:"\f570"}.bi-sort-alpha-down::before{content:"\f571"}.bi-sort-alpha-up-alt::before{content:"\f572"}.bi-sort-alpha-up::before{content:"\f573"}.bi-sort-down-alt::before{content:"\f574"}.bi-sort-down::before{content:"\f575"}.bi-sort-numeric-down-alt::before{content:"\f576"}.bi-sort-numeric-down::before{content:"\f577"}.bi-sort-numeric-up-alt::before{content:"\f578"}.bi-sort-numeric-up::before{content:"\f579"}.bi-sort-up-alt::before{content:"\f57a"}.bi-sort-up::before{content:"\f57b"}.bi-soundwave::before{content:"\f57c"}.bi-speaker-fill::before{content:"\f57d"}.bi-speaker::before{content:"\f57e"}.bi-speedometer::before{content:"\f57f"}.bi-speedometer2::before{content:"\f580"}.bi-spellcheck::before{content:"\f581"}.bi-square-fill::before{content:"\f582"}.bi-square-half::before{content:"\f583"}.bi-square::before{content:"\f584"}.bi-stack::before{content:"\f585"}.bi-star-fill::before{content:"\f586"}.bi-star-half::before{content:"\f587"}.bi-star::before{content:"\f588"}.bi-stars::before{content:"\f589"}.bi-stickies-fill::before{content:"\f58a"}.bi-stickies::before{content:"\f58b"}.bi-sticky-fill::before{content:"\f58c"}.bi-sticky::before{content:"\f58d"}.bi-stop-btn-fill::before{content:"\f58e"}.bi-stop-btn::before{content:"\f58f"}.bi-stop-circle-fill::before{content:"\f590"}.bi-stop-circle::before{content:"\f591"}.bi-stop-fill::before{content:"\f592"}.bi-stop::before{content:"\f593"}.bi-stoplights-fill::before{content:"\f594"}.bi-stoplights::before{content:"\f595"}.bi-stopwatch-fill::before{content:"\f596"}.bi-stopwatch::before{content:"\f597"}.bi-subtract::before{content:"\f598"}.bi-suit-club-fill::before{content:"\f599"}.bi-suit-club::before{content:"\f59a"}.bi-suit-diamond-fill::before{content:"\f59b"}.bi-suit-diamond::before{content:"\f59c"}.bi-suit-heart-fill::before{content:"\f59d"}.bi-suit-heart::before{content:"\f59e"}.bi-suit-spade-fill::before{content:"\f59f"}.bi-suit-spade::before{content:"\f5a0"}.bi-sun-fill::before{content:"\f5a1"}.bi-sun::before{content:"\f5a2"}.bi-sunglasses::before{content:"\f5a3"}.bi-sunrise-fill::before{content:"\f5a4"}.bi-sunrise::before{content:"\f5a5"}.bi-sunset-fill::before{content:"\f5a6"}.bi-sunset::before{content:"\f5a7"}.bi-symmetry-horizontal::before{content:"\f5a8"}.bi-symmetry-vertical::before{content:"\f5a9"}.bi-table::before{content:"\f5aa"}.bi-tablet-fill::before{content:"\f5ab"}.bi-tablet-landscape-fill::before{content:"\f5ac"}.bi-tablet-landscape::before{content:"\f5ad"}.bi-tablet::before{content:"\f5ae"}.bi-tag-fill::before{content:"\f5af"}.bi-tag::before{content:"\f5b0"}.bi-tags-fill::before{content:"\f5b1"}.bi-tags::before{content:"\f5b2"}.bi-telegram::before{content:"\f5b3"}.bi-telephone-fill::before{content:"\f5b4"}.bi-telephone-forward-fill::before{content:"\f5b5"}.bi-telephone-forward::before{content:"\f5b6"}.bi-telephone-inbound-fill::before{content:"\f5b7"}.bi-telephone-inbound::before{content:"\f5b8"}.bi-telephone-minus-fill::before{content:"\f5b9"}.bi-telephone-minus::before{content:"\f5ba"}.bi-telephone-outbound-fill::before{content:"\f5bb"}.bi-telephone-outbound::before{content:"\f5bc"}.bi-telephone-plus-fill::before{content:"\f5bd"}.bi-telephone-plus::before{content:"\f5be"}.bi-telephone-x-fill::before{content:"\f5bf"}.bi-telephone-x::before{content:"\f5c0"}.bi-telephone::before{content:"\f5c1"}.bi-terminal-fill::before{content:"\f5c2"}.bi-terminal::before{content:"\f5c3"}.bi-text-center::before{content:"\f5c4"}.bi-text-indent-left::before{content:"\f5c5"}.bi-text-indent-right::before{content:"\f5c6"}.bi-text-left::before{content:"\f5c7"}.bi-text-paragraph::before{content:"\f5c8"}.bi-text-right::before{content:"\f5c9"}.bi-textarea-resize::before{content:"\f5ca"}.bi-textarea-t::before{content:"\f5cb"}.bi-textarea::before{content:"\f5cc"}.bi-thermometer-half::before{content:"\f5cd"}.bi-thermometer-high::before{content:"\f5ce"}.bi-thermometer-low::before{content:"\f5cf"}.bi-thermometer-snow::before{content:"\f5d0"}.bi-thermometer-sun::before{content:"\f5d1"}.bi-thermometer::before{content:"\f5d2"}.bi-three-dots-vertical::before{content:"\f5d3"}.bi-three-dots::before{content:"\f5d4"}.bi-toggle-off::before{content:"\f5d5"}.bi-toggle-on::before{content:"\f5d6"}.bi-toggle2-off::before{content:"\f5d7"}.bi-toggle2-on::before{content:"\f5d8"}.bi-toggles::before{content:"\f5d9"}.bi-toggles2::before{content:"\f5da"}.bi-tools::before{content:"\f5db"}.bi-tornado::before{content:"\f5dc"}.bi-trash-fill::before{content:"\f5dd"}.bi-trash::before{content:"\f5de"}.bi-trash2-fill::before{content:"\f5df"}.bi-trash2::before{content:"\f5e0"}.bi-tree-fill::before{content:"\f5e1"}.bi-tree::before{content:"\f5e2"}.bi-triangle-fill::before{content:"\f5e3"}.bi-triangle-half::before{content:"\f5e4"}.bi-triangle::before{content:"\f5e5"}.bi-trophy-fill::before{content:"\f5e6"}.bi-trophy::before{content:"\f5e7"}.bi-tropical-storm::before{content:"\f5e8"}.bi-truck-flatbed::before{content:"\f5e9"}.bi-truck::before{content:"\f5ea"}.bi-tsunami::before{content:"\f5eb"}.bi-tv-fill::before{content:"\f5ec"}.bi-tv::before{content:"\f5ed"}.bi-twitch::before{content:"\f5ee"}.bi-twitter::before{content:"\f5ef"}.bi-type-bold::before{content:"\f5f0"}.bi-type-h1::before{content:"\f5f1"}.bi-type-h2::before{content:"\f5f2"}.bi-type-h3::before{content:"\f5f3"}.bi-type-italic::before{content:"\f5f4"}.bi-type-strikethrough::before{content:"\f5f5"}.bi-type-underline::before{content:"\f5f6"}.bi-type::before{content:"\f5f7"}.bi-ui-checks-grid::before{content:"\f5f8"}.bi-ui-checks::before{content:"\f5f9"}.bi-ui-radios-grid::before{content:"\f5fa"}.bi-ui-radios::before{content:"\f5fb"}.bi-umbrella-fill::before{content:"\f5fc"}.bi-umbrella::before{content:"\f5fd"}.bi-union::before{content:"\f5fe"}.bi-unlock-fill::before{content:"\f5ff"}.bi-unlock::before{content:"\f600"}.bi-upc-scan::before{content:"\f601"}.bi-upc::before{content:"\f602"}.bi-upload::before{content:"\f603"}.bi-vector-pen::before{content:"\f604"}.bi-view-list::before{content:"\f605"}.bi-view-stacked::before{content:"\f606"}.bi-vinyl-fill::before{content:"\f607"}.bi-vinyl::before{content:"\f608"}.bi-voicemail::before{content:"\f609"}.bi-volume-down-fill::before{content:"\f60a"}.bi-volume-down::before{content:"\f60b"}.bi-volume-mute-fill::before{content:"\f60c"}.bi-volume-mute::before{content:"\f60d"}.bi-volume-off-fill::before{content:"\f60e"}.bi-volume-off::before{content:"\f60f"}.bi-volume-up-fill::before{content:"\f610"}.bi-volume-up::before{content:"\f611"}.bi-vr::before{content:"\f612"}.bi-wallet-fill::before{content:"\f613"}.bi-wallet::before{content:"\f614"}.bi-wallet2::before{content:"\f615"}.bi-watch::before{content:"\f616"}.bi-water::before{content:"\f617"}.bi-whatsapp::before{content:"\f618"}.bi-wifi-1::before{content:"\f619"}.bi-wifi-2::before{content:"\f61a"}.bi-wifi-off::before{content:"\f61b"}.bi-wifi::before{content:"\f61c"}.bi-wind::before{content:"\f61d"}.bi-window-dock::before{content:"\f61e"}.bi-window-sidebar::before{content:"\f61f"}.bi-window::before{content:"\f620"}.bi-wrench::before{content:"\f621"}.bi-x-circle-fill::before{content:"\f622"}.bi-x-circle::before{content:"\f623"}.bi-x-diamond-fill::before{content:"\f624"}.bi-x-diamond::before{content:"\f625"}.bi-x-octagon-fill::before{content:"\f626"}.bi-x-octagon::before{content:"\f627"}.bi-x-square-fill::before{content:"\f628"}.bi-x-square::before{content:"\f629"}.bi-x::before{content:"\f62a"}.bi-youtube::before{content:"\f62b"}.bi-zoom-in::before{content:"\f62c"}.bi-zoom-out::before{content:"\f62d"}.bi-bank::before{content:"\f62e"}.bi-bank2::before{content:"\f62f"}.bi-bell-slash-fill::before{content:"\f630"}.bi-bell-slash::before{content:"\f631"}.bi-cash-coin::before{content:"\f632"}.bi-check-lg::before{content:"\f633"}.bi-coin::before{content:"\f634"}.bi-currency-bitcoin::before{content:"\f635"}.bi-currency-dollar::before{content:"\f636"}.bi-currency-euro::before{content:"\f637"}.bi-currency-exchange::before{content:"\f638"}.bi-currency-pound::before{content:"\f639"}.bi-currency-yen::before{content:"\f63a"}.bi-dash-lg::before{content:"\f63b"}.bi-exclamation-lg::before{content:"\f63c"}.bi-file-earmark-pdf-fill::before{content:"\f63d"}.bi-file-earmark-pdf::before{content:"\f63e"}.bi-file-pdf-fill::before{content:"\f63f"}.bi-file-pdf::before{content:"\f640"}.bi-gender-ambiguous::before{content:"\f641"}.bi-gender-female::before{content:"\f642"}.bi-gender-male::before{content:"\f643"}.bi-gender-trans::before{content:"\f644"}.bi-headset-vr::before{content:"\f645"}.bi-info-lg::before{content:"\f646"}.bi-mastodon::before{content:"\f647"}.bi-messenger::before{content:"\f648"}.bi-piggy-bank-fill::before{content:"\f649"}.bi-piggy-bank::before{content:"\f64a"}.bi-pin-map-fill::before{content:"\f64b"}.bi-pin-map::before{content:"\f64c"}.bi-plus-lg::before{content:"\f64d"}.bi-question-lg::before{content:"\f64e"}.bi-recycle::before{content:"\f64f"}.bi-reddit::before{content:"\f650"}.bi-safe-fill::before{content:"\f651"}.bi-safe2-fill::before{content:"\f652"}.bi-safe2::before{content:"\f653"}.bi-sd-card-fill::before{content:"\f654"}.bi-sd-card::before{content:"\f655"}.bi-skype::before{content:"\f656"}.bi-slash-lg::before{content:"\f657"}.bi-translate::before{content:"\f658"}.bi-x-lg::before{content:"\f659"}.bi-safe::before{content:"\f65a"}.bi-apple::before{content:"\f65b"}.bi-microsoft::before{content:"\f65d"}.bi-windows::before{content:"\f65e"}.bi-behance::before{content:"\f65c"}.bi-dribbble::before{content:"\f65f"}.bi-line::before{content:"\f660"}.bi-medium::before{content:"\f661"}.bi-paypal::before{content:"\f662"}.bi-pinterest::before{content:"\f663"}.bi-signal::before{content:"\f664"}.bi-snapchat::before{content:"\f665"}.bi-spotify::before{content:"\f666"}.bi-stack-overflow::before{content:"\f667"}.bi-strava::before{content:"\f668"}.bi-wordpress::before{content:"\f669"}.bi-vimeo::before{content:"\f66a"}.bi-activity::before{content:"\f66b"}.bi-easel2-fill::before{content:"\f66c"}.bi-easel2::before{content:"\f66d"}.bi-easel3-fill::before{content:"\f66e"}.bi-easel3::before{content:"\f66f"}.bi-fan::before{content:"\f670"}.bi-fingerprint::before{content:"\f671"}.bi-graph-down-arrow::before{content:"\f672"}.bi-graph-up-arrow::before{content:"\f673"}.bi-hypnotize::before{content:"\f674"}.bi-magic::before{content:"\f675"}.bi-person-rolodex::before{content:"\f676"}.bi-person-video::before{content:"\f677"}.bi-person-video2::before{content:"\f678"}.bi-person-video3::before{content:"\f679"}.bi-person-workspace::before{content:"\f67a"}.bi-radioactive::before{content:"\f67b"}.bi-webcam-fill::before{content:"\f67c"}.bi-webcam::before{content:"\f67d"}.bi-yin-yang::before{content:"\f67e"}.bi-bandaid-fill::before{content:"\f680"}.bi-bandaid::before{content:"\f681"}.bi-bluetooth::before{content:"\f682"}.bi-body-text::before{content:"\f683"}.bi-boombox::before{content:"\f684"}.bi-boxes::before{content:"\f685"}.bi-dpad-fill::before{content:"\f686"}.bi-dpad::before{content:"\f687"}.bi-ear-fill::before{content:"\f688"}.bi-ear::before{content:"\f689"}.bi-envelope-check-fill::before{content:"\f68b"}.bi-envelope-check::before{content:"\f68c"}.bi-envelope-dash-fill::before{content:"\f68e"}.bi-envelope-dash::before{content:"\f68f"}.bi-envelope-exclamation-fill::before{content:"\f691"}.bi-envelope-exclamation::before{content:"\f692"}.bi-envelope-plus-fill::before{content:"\f693"}.bi-envelope-plus::before{content:"\f694"}.bi-envelope-slash-fill::before{content:"\f696"}.bi-envelope-slash::before{content:"\f697"}.bi-envelope-x-fill::before{content:"\f699"}.bi-envelope-x::before{content:"\f69a"}.bi-explicit-fill::before{content:"\f69b"}.bi-explicit::before{content:"\f69c"}.bi-git::before{content:"\f69d"}.bi-infinity::before{content:"\f69e"}.bi-list-columns-reverse::before{content:"\f69f"}.bi-list-columns::before{content:"\f6a0"}.bi-meta::before{content:"\f6a1"}.bi-nintendo-switch::before{content:"\f6a4"}.bi-pc-display-horizontal::before{content:"\f6a5"}.bi-pc-display::before{content:"\f6a6"}.bi-pc-horizontal::before{content:"\f6a7"}.bi-pc::before{content:"\f6a8"}.bi-playstation::before{content:"\f6a9"}.bi-plus-slash-minus::before{content:"\f6aa"}.bi-projector-fill::before{content:"\f6ab"}.bi-projector::before{content:"\f6ac"}.bi-qr-code-scan::before{content:"\f6ad"}.bi-qr-code::before{content:"\f6ae"}.bi-quora::before{content:"\f6af"}.bi-quote::before{content:"\f6b0"}.bi-robot::before{content:"\f6b1"}.bi-send-check-fill::before{content:"\f6b2"}.bi-send-check::before{content:"\f6b3"}.bi-send-dash-fill::before{content:"\f6b4"}.bi-send-dash::before{content:"\f6b5"}.bi-send-exclamation-fill::before{content:"\f6b7"}.bi-send-exclamation::before{content:"\f6b8"}.bi-send-fill::before{content:"\f6b9"}.bi-send-plus-fill::before{content:"\f6ba"}.bi-send-plus::before{content:"\f6bb"}.bi-send-slash-fill::before{content:"\f6bc"}.bi-send-slash::before{content:"\f6bd"}.bi-send-x-fill::before{content:"\f6be"}.bi-send-x::before{content:"\f6bf"}.bi-send::before{content:"\f6c0"}.bi-steam::before{content:"\f6c1"}.bi-terminal-dash::before{content:"\f6c3"}.bi-terminal-plus::before{content:"\f6c4"}.bi-terminal-split::before{content:"\f6c5"}.bi-ticket-detailed-fill::before{content:"\f6c6"}.bi-ticket-detailed::before{content:"\f6c7"}.bi-ticket-fill::before{content:"\f6c8"}.bi-ticket-perforated-fill::before{content:"\f6c9"}.bi-ticket-perforated::before{content:"\f6ca"}.bi-ticket::before{content:"\f6cb"}.bi-tiktok::before{content:"\f6cc"}.bi-window-dash::before{content:"\f6cd"}.bi-window-desktop::before{content:"\f6ce"}.bi-window-fullscreen::before{content:"\f6cf"}.bi-window-plus::before{content:"\f6d0"}.bi-window-split::before{content:"\f6d1"}.bi-window-stack::before{content:"\f6d2"}.bi-window-x::before{content:"\f6d3"}.bi-xbox::before{content:"\f6d4"}.bi-ethernet::before{content:"\f6d5"}.bi-hdmi-fill::before{content:"\f6d6"}.bi-hdmi::before{content:"\f6d7"}.bi-usb-c-fill::before{content:"\f6d8"}.bi-usb-c::before{content:"\f6d9"}.bi-usb-fill::before{content:"\f6da"}.bi-usb-plug-fill::before{content:"\f6db"}.bi-usb-plug::before{content:"\f6dc"}.bi-usb-symbol::before{content:"\f6dd"}.bi-usb::before{content:"\f6de"}.bi-boombox-fill::before{content:"\f6df"}.bi-displayport::before{content:"\f6e1"}.bi-gpu-card::before{content:"\f6e2"}.bi-memory::before{content:"\f6e3"}.bi-modem-fill::before{content:"\f6e4"}.bi-modem::before{content:"\f6e5"}.bi-motherboard-fill::before{content:"\f6e6"}.bi-motherboard::before{content:"\f6e7"}.bi-optical-audio-fill::before{content:"\f6e8"}.bi-optical-audio::before{content:"\f6e9"}.bi-pci-card::before{content:"\f6ea"}.bi-router-fill::before{content:"\f6eb"}.bi-router::before{content:"\f6ec"}.bi-thunderbolt-fill::before{content:"\f6ef"}.bi-thunderbolt::before{content:"\f6f0"}.bi-usb-drive-fill::before{content:"\f6f1"}.bi-usb-drive::before{content:"\f6f2"}.bi-usb-micro-fill::before{content:"\f6f3"}.bi-usb-micro::before{content:"\f6f4"}.bi-usb-mini-fill::before{content:"\f6f5"}.bi-usb-mini::before{content:"\f6f6"}.bi-cloud-haze2::before{content:"\f6f7"}.bi-device-hdd-fill::before{content:"\f6f8"}.bi-device-hdd::before{content:"\f6f9"}.bi-device-ssd-fill::before{content:"\f6fa"}.bi-device-ssd::before{content:"\f6fb"}.bi-displayport-fill::before{content:"\f6fc"}.bi-mortarboard-fill::before{content:"\f6fd"}.bi-mortarboard::before{content:"\f6fe"}.bi-terminal-x::before{content:"\f6ff"}.bi-arrow-through-heart-fill::before{content:"\f700"}.bi-arrow-through-heart::before{content:"\f701"}.bi-badge-sd-fill::before{content:"\f702"}.bi-badge-sd::before{content:"\f703"}.bi-bag-heart-fill::before{content:"\f704"}.bi-bag-heart::before{content:"\f705"}.bi-balloon-fill::before{content:"\f706"}.bi-balloon-heart-fill::before{content:"\f707"}.bi-balloon-heart::before{content:"\f708"}.bi-balloon::before{content:"\f709"}.bi-box2-fill::before{content:"\f70a"}.bi-box2-heart-fill::before{content:"\f70b"}.bi-box2-heart::before{content:"\f70c"}.bi-box2::before{content:"\f70d"}.bi-braces-asterisk::before{content:"\f70e"}.bi-calendar-heart-fill::before{content:"\f70f"}.bi-calendar-heart::before{content:"\f710"}.bi-calendar2-heart-fill::before{content:"\f711"}.bi-calendar2-heart::before{content:"\f712"}.bi-chat-heart-fill::before{content:"\f713"}.bi-chat-heart::before{content:"\f714"}.bi-chat-left-heart-fill::before{content:"\f715"}.bi-chat-left-heart::before{content:"\f716"}.bi-chat-right-heart-fill::before{content:"\f717"}.bi-chat-right-heart::before{content:"\f718"}.bi-chat-square-heart-fill::before{content:"\f719"}.bi-chat-square-heart::before{content:"\f71a"}.bi-clipboard-check-fill::before{content:"\f71b"}.bi-clipboard-data-fill::before{content:"\f71c"}.bi-clipboard-fill::before{content:"\f71d"}.bi-clipboard-heart-fill::before{content:"\f71e"}.bi-clipboard-heart::before{content:"\f71f"}.bi-clipboard-minus-fill::before{content:"\f720"}.bi-clipboard-plus-fill::before{content:"\f721"}.bi-clipboard-pulse::before{content:"\f722"}.bi-clipboard-x-fill::before{content:"\f723"}.bi-clipboard2-check-fill::before{content:"\f724"}.bi-clipboard2-check::before{content:"\f725"}.bi-clipboard2-data-fill::before{content:"\f726"}.bi-clipboard2-data::before{content:"\f727"}.bi-clipboard2-fill::before{content:"\f728"}.bi-clipboard2-heart-fill::before{content:"\f729"}.bi-clipboard2-heart::before{content:"\f72a"}.bi-clipboard2-minus-fill::before{content:"\f72b"}.bi-clipboard2-minus::before{content:"\f72c"}.bi-clipboard2-plus-fill::before{content:"\f72d"}.bi-clipboard2-plus::before{content:"\f72e"}.bi-clipboard2-pulse-fill::before{content:"\f72f"}.bi-clipboard2-pulse::before{content:"\f730"}.bi-clipboard2-x-fill::before{content:"\f731"}.bi-clipboard2-x::before{content:"\f732"}.bi-clipboard2::before{content:"\f733"}.bi-emoji-kiss-fill::before{content:"\f734"}.bi-emoji-kiss::before{content:"\f735"}.bi-envelope-heart-fill::before{content:"\f736"}.bi-envelope-heart::before{content:"\f737"}.bi-envelope-open-heart-fill::before{content:"\f738"}.bi-envelope-open-heart::before{content:"\f739"}.bi-envelope-paper-fill::before{content:"\f73a"}.bi-envelope-paper-heart-fill::before{content:"\f73b"}.bi-envelope-paper-heart::before{content:"\f73c"}.bi-envelope-paper::before{content:"\f73d"}.bi-filetype-aac::before{content:"\f73e"}.bi-filetype-ai::before{content:"\f73f"}.bi-filetype-bmp::before{content:"\f740"}.bi-filetype-cs::before{content:"\f741"}.bi-filetype-css::before{content:"\f742"}.bi-filetype-csv::before{content:"\f743"}.bi-filetype-doc::before{content:"\f744"}.bi-filetype-docx::before{content:"\f745"}.bi-filetype-exe::before{content:"\f746"}.bi-filetype-gif::before{content:"\f747"}.bi-filetype-heic::before{content:"\f748"}.bi-filetype-html::before{content:"\f749"}.bi-filetype-java::before{content:"\f74a"}.bi-filetype-jpg::before{content:"\f74b"}.bi-filetype-js::before{content:"\f74c"}.bi-filetype-jsx::before{content:"\f74d"}.bi-filetype-key::before{content:"\f74e"}.bi-filetype-m4p::before{content:"\f74f"}.bi-filetype-md::before{content:"\f750"}.bi-filetype-mdx::before{content:"\f751"}.bi-filetype-mov::before{content:"\f752"}.bi-filetype-mp3::before{content:"\f753"}.bi-filetype-mp4::before{content:"\f754"}.bi-filetype-otf::before{content:"\f755"}.bi-filetype-pdf::before{content:"\f756"}.bi-filetype-php::before{content:"\f757"}.bi-filetype-png::before{content:"\f758"}.bi-filetype-ppt::before{content:"\f75a"}.bi-filetype-psd::before{content:"\f75b"}.bi-filetype-py::before{content:"\f75c"}.bi-filetype-raw::before{content:"\f75d"}.bi-filetype-rb::before{content:"\f75e"}.bi-filetype-sass::before{content:"\f75f"}.bi-filetype-scss::before{content:"\f760"}.bi-filetype-sh::before{content:"\f761"}.bi-filetype-svg::before{content:"\f762"}.bi-filetype-tiff::before{content:"\f763"}.bi-filetype-tsx::before{content:"\f764"}.bi-filetype-ttf::before{content:"\f765"}.bi-filetype-txt::before{content:"\f766"}.bi-filetype-wav::before{content:"\f767"}.bi-filetype-woff::before{content:"\f768"}.bi-filetype-xls::before{content:"\f76a"}.bi-filetype-xml::before{content:"\f76b"}.bi-filetype-yml::before{content:"\f76c"}.bi-heart-arrow::before{content:"\f76d"}.bi-heart-pulse-fill::before{content:"\f76e"}.bi-heart-pulse::before{content:"\f76f"}.bi-heartbreak-fill::before{content:"\f770"}.bi-heartbreak::before{content:"\f771"}.bi-hearts::before{content:"\f772"}.bi-hospital-fill::before{content:"\f773"}.bi-hospital::before{content:"\f774"}.bi-house-heart-fill::before{content:"\f775"}.bi-house-heart::before{content:"\f776"}.bi-incognito::before{content:"\f777"}.bi-magnet-fill::before{content:"\f778"}.bi-magnet::before{content:"\f779"}.bi-person-heart::before{content:"\f77a"}.bi-person-hearts::before{content:"\f77b"}.bi-phone-flip::before{content:"\f77c"}.bi-plugin::before{content:"\f77d"}.bi-postage-fill::before{content:"\f77e"}.bi-postage-heart-fill::before{content:"\f77f"}.bi-postage-heart::before{content:"\f780"}.bi-postage::before{content:"\f781"}.bi-postcard-fill::before{content:"\f782"}.bi-postcard-heart-fill::before{content:"\f783"}.bi-postcard-heart::before{content:"\f784"}.bi-postcard::before{content:"\f785"}.bi-search-heart-fill::before{content:"\f786"}.bi-search-heart::before{content:"\f787"}.bi-sliders2-vertical::before{content:"\f788"}.bi-sliders2::before{content:"\f789"}.bi-trash3-fill::before{content:"\f78a"}.bi-trash3::before{content:"\f78b"}.bi-valentine::before{content:"\f78c"}.bi-valentine2::before{content:"\f78d"}.bi-wrench-adjustable-circle-fill::before{content:"\f78e"}.bi-wrench-adjustable-circle::before{content:"\f78f"}.bi-wrench-adjustable::before{content:"\f790"}.bi-filetype-json::before{content:"\f791"}.bi-filetype-pptx::before{content:"\f792"}.bi-filetype-xlsx::before{content:"\f793"}.bi-1-circle-fill::before{content:"\f796"}.bi-1-circle::before{content:"\f797"}.bi-1-square-fill::before{content:"\f798"}.bi-1-square::before{content:"\f799"}.bi-2-circle-fill::before{content:"\f79c"}.bi-2-circle::before{content:"\f79d"}.bi-2-square-fill::before{content:"\f79e"}.bi-2-square::before{content:"\f79f"}.bi-3-circle-fill::before{content:"\f7a2"}.bi-3-circle::before{content:"\f7a3"}.bi-3-square-fill::before{content:"\f7a4"}.bi-3-square::before{content:"\f7a5"}.bi-4-circle-fill::before{content:"\f7a8"}.bi-4-circle::before{content:"\f7a9"}.bi-4-square-fill::before{content:"\f7aa"}.bi-4-square::before{content:"\f7ab"}.bi-5-circle-fill::before{content:"\f7ae"}.bi-5-circle::before{content:"\f7af"}.bi-5-square-fill::before{content:"\f7b0"}.bi-5-square::before{content:"\f7b1"}.bi-6-circle-fill::before{content:"\f7b4"}.bi-6-circle::before{content:"\f7b5"}.bi-6-square-fill::before{content:"\f7b6"}.bi-6-square::before{content:"\f7b7"}.bi-7-circle-fill::before{content:"\f7ba"}.bi-7-circle::before{content:"\f7bb"}.bi-7-square-fill::before{content:"\f7bc"}.bi-7-square::before{content:"\f7bd"}.bi-8-circle-fill::before{content:"\f7c0"}.bi-8-circle::before{content:"\f7c1"}.bi-8-square-fill::before{content:"\f7c2"}.bi-8-square::before{content:"\f7c3"}.bi-9-circle-fill::before{content:"\f7c6"}.bi-9-circle::before{content:"\f7c7"}.bi-9-square-fill::before{content:"\f7c8"}.bi-9-square::before{content:"\f7c9"}.bi-airplane-engines-fill::before{content:"\f7ca"}.bi-airplane-engines::before{content:"\f7cb"}.bi-airplane-fill::before{content:"\f7cc"}.bi-airplane::before{content:"\f7cd"}.bi-alexa::before{content:"\f7ce"}.bi-alipay::before{content:"\f7cf"}.bi-android::before{content:"\f7d0"}.bi-android2::before{content:"\f7d1"}.bi-box-fill::before{content:"\f7d2"}.bi-box-seam-fill::before{content:"\f7d3"}.bi-browser-chrome::before{content:"\f7d4"}.bi-browser-edge::before{content:"\f7d5"}.bi-browser-firefox::before{content:"\f7d6"}.bi-browser-safari::before{content:"\f7d7"}.bi-c-circle-fill::before{content:"\f7da"}.bi-c-circle::before{content:"\f7db"}.bi-c-square-fill::before{content:"\f7dc"}.bi-c-square::before{content:"\f7dd"}.bi-capsule-pill::before{content:"\f7de"}.bi-capsule::before{content:"\f7df"}.bi-car-front-fill::before{content:"\f7e0"}.bi-car-front::before{content:"\f7e1"}.bi-cassette-fill::before{content:"\f7e2"}.bi-cassette::before{content:"\f7e3"}.bi-cc-circle-fill::before{content:"\f7e6"}.bi-cc-circle::before{content:"\f7e7"}.bi-cc-square-fill::before{content:"\f7e8"}.bi-cc-square::before{content:"\f7e9"}.bi-cup-hot-fill::before{content:"\f7ea"}.bi-cup-hot::before{content:"\f7eb"}.bi-currency-rupee::before{content:"\f7ec"}.bi-dropbox::before{content:"\f7ed"}.bi-escape::before{content:"\f7ee"}.bi-fast-forward-btn-fill::before{content:"\f7ef"}.bi-fast-forward-btn::before{content:"\f7f0"}.bi-fast-forward-circle-fill::before{content:"\f7f1"}.bi-fast-forward-circle::before{content:"\f7f2"}.bi-fast-forward-fill::before{content:"\f7f3"}.bi-fast-forward::before{content:"\f7f4"}.bi-filetype-sql::before{content:"\f7f5"}.bi-fire::before{content:"\f7f6"}.bi-google-play::before{content:"\f7f7"}.bi-h-circle-fill::before{content:"\f7fa"}.bi-h-circle::before{content:"\f7fb"}.bi-h-square-fill::before{content:"\f7fc"}.bi-h-square::before{content:"\f7fd"}.bi-indent::before{content:"\f7fe"}.bi-lungs-fill::before{content:"\f7ff"}.bi-lungs::before{content:"\f800"}.bi-microsoft-teams::before{content:"\f801"}.bi-p-circle-fill::before{content:"\f804"}.bi-p-circle::before{content:"\f805"}.bi-p-square-fill::before{content:"\f806"}.bi-p-square::before{content:"\f807"}.bi-pass-fill::before{content:"\f808"}.bi-pass::before{content:"\f809"}.bi-prescription::before{content:"\f80a"}.bi-prescription2::before{content:"\f80b"}.bi-r-circle-fill::before{content:"\f80e"}.bi-r-circle::before{content:"\f80f"}.bi-r-square-fill::before{content:"\f810"}.bi-r-square::before{content:"\f811"}.bi-repeat-1::before{content:"\f812"}.bi-repeat::before{content:"\f813"}.bi-rewind-btn-fill::before{content:"\f814"}.bi-rewind-btn::before{content:"\f815"}.bi-rewind-circle-fill::before{content:"\f816"}.bi-rewind-circle::before{content:"\f817"}.bi-rewind-fill::before{content:"\f818"}.bi-rewind::before{content:"\f819"}.bi-train-freight-front-fill::before{content:"\f81a"}.bi-train-freight-front::before{content:"\f81b"}.bi-train-front-fill::before{content:"\f81c"}.bi-train-front::before{content:"\f81d"}.bi-train-lightrail-front-fill::before{content:"\f81e"}.bi-train-lightrail-front::before{content:"\f81f"}.bi-truck-front-fill::before{content:"\f820"}.bi-truck-front::before{content:"\f821"}.bi-ubuntu::before{content:"\f822"}.bi-unindent::before{content:"\f823"}.bi-unity::before{content:"\f824"}.bi-universal-access-circle::before{content:"\f825"}.bi-universal-access::before{content:"\f826"}.bi-virus::before{content:"\f827"}.bi-virus2::before{content:"\f828"}.bi-wechat::before{content:"\f829"}.bi-yelp::before{content:"\f82a"}.bi-sign-stop-fill::before{content:"\f82b"}.bi-sign-stop-lights-fill::before{content:"\f82c"}.bi-sign-stop-lights::before{content:"\f82d"}.bi-sign-stop::before{content:"\f82e"}.bi-sign-turn-left-fill::before{content:"\f82f"}.bi-sign-turn-left::before{content:"\f830"}.bi-sign-turn-right-fill::before{content:"\f831"}.bi-sign-turn-right::before{content:"\f832"}.bi-sign-turn-slight-left-fill::before{content:"\f833"}.bi-sign-turn-slight-left::before{content:"\f834"}.bi-sign-turn-slight-right-fill::before{content:"\f835"}.bi-sign-turn-slight-right::before{content:"\f836"}.bi-sign-yield-fill::before{content:"\f837"}.bi-sign-yield::before{content:"\f838"}.bi-ev-station-fill::before{content:"\f839"}.bi-ev-station::before{content:"\f83a"}.bi-fuel-pump-diesel-fill::before{content:"\f83b"}.bi-fuel-pump-diesel::before{content:"\f83c"}.bi-fuel-pump-fill::before{content:"\f83d"}.bi-fuel-pump::before{content:"\f83e"}.bi-0-circle-fill::before{content:"\f83f"}.bi-0-circle::before{content:"\f840"}.bi-0-square-fill::before{content:"\f841"}.bi-0-square::before{content:"\f842"}.bi-rocket-fill::before{content:"\f843"}.bi-rocket-takeoff-fill::before{content:"\f844"}.bi-rocket-takeoff::before{content:"\f845"}.bi-rocket::before{content:"\f846"}.bi-stripe::before{content:"\f847"}.bi-subscript::before{content:"\f848"}.bi-superscript::before{content:"\f849"}.bi-trello::before{content:"\f84a"}.bi-envelope-at-fill::before{content:"\f84b"}.bi-envelope-at::before{content:"\f84c"}.bi-regex::before{content:"\f84d"}.bi-text-wrap::before{content:"\f84e"}.bi-sign-dead-end-fill::before{content:"\f84f"}.bi-sign-dead-end::before{content:"\f850"}.bi-sign-do-not-enter-fill::before{content:"\f851"}.bi-sign-do-not-enter::before{content:"\f852"}.bi-sign-intersection-fill::before{content:"\f853"}.bi-sign-intersection-side-fill::before{content:"\f854"}.bi-sign-intersection-side::before{content:"\f855"}.bi-sign-intersection-t-fill::before{content:"\f856"}.bi-sign-intersection-t::before{content:"\f857"}.bi-sign-intersection-y-fill::before{content:"\f858"}.bi-sign-intersection-y::before{content:"\f859"}.bi-sign-intersection::before{content:"\f85a"}.bi-sign-merge-left-fill::before{content:"\f85b"}.bi-sign-merge-left::before{content:"\f85c"}.bi-sign-merge-right-fill::before{content:"\f85d"}.bi-sign-merge-right::before{content:"\f85e"}.bi-sign-no-left-turn-fill::before{content:"\f85f"}.bi-sign-no-left-turn::before{content:"\f860"}.bi-sign-no-parking-fill::before{content:"\f861"}.bi-sign-no-parking::before{content:"\f862"}.bi-sign-no-right-turn-fill::before{content:"\f863"}.bi-sign-no-right-turn::before{content:"\f864"}.bi-sign-railroad-fill::before{content:"\f865"}.bi-sign-railroad::before{content:"\f866"}.bi-building-add::before{content:"\f867"}.bi-building-check::before{content:"\f868"}.bi-building-dash::before{content:"\f869"}.bi-building-down::before{content:"\f86a"}.bi-building-exclamation::before{content:"\f86b"}.bi-building-fill-add::before{content:"\f86c"}.bi-building-fill-check::before{content:"\f86d"}.bi-building-fill-dash::before{content:"\f86e"}.bi-building-fill-down::before{content:"\f86f"}.bi-building-fill-exclamation::before{content:"\f870"}.bi-building-fill-gear::before{content:"\f871"}.bi-building-fill-lock::before{content:"\f872"}.bi-building-fill-slash::before{content:"\f873"}.bi-building-fill-up::before{content:"\f874"}.bi-building-fill-x::before{content:"\f875"}.bi-building-fill::before{content:"\f876"}.bi-building-gear::before{content:"\f877"}.bi-building-lock::before{content:"\f878"}.bi-building-slash::before{content:"\f879"}.bi-building-up::before{content:"\f87a"}.bi-building-x::before{content:"\f87b"}.bi-buildings-fill::before{content:"\f87c"}.bi-buildings::before{content:"\f87d"}.bi-bus-front-fill::before{content:"\f87e"}.bi-bus-front::before{content:"\f87f"}.bi-ev-front-fill::before{content:"\f880"}.bi-ev-front::before{content:"\f881"}.bi-globe-americas::before{content:"\f882"}.bi-globe-asia-australia::before{content:"\f883"}.bi-globe-central-south-asia::before{content:"\f884"}.bi-globe-europe-africa::before{content:"\f885"}.bi-house-add-fill::before{content:"\f886"}.bi-house-add::before{content:"\f887"}.bi-house-check-fill::before{content:"\f888"}.bi-house-check::before{content:"\f889"}.bi-house-dash-fill::before{content:"\f88a"}.bi-house-dash::before{content:"\f88b"}.bi-house-down-fill::before{content:"\f88c"}.bi-house-down::before{content:"\f88d"}.bi-house-exclamation-fill::before{content:"\f88e"}.bi-house-exclamation::before{content:"\f88f"}.bi-house-gear-fill::before{content:"\f890"}.bi-house-gear::before{content:"\f891"}.bi-house-lock-fill::before{content:"\f892"}.bi-house-lock::before{content:"\f893"}.bi-house-slash-fill::before{content:"\f894"}.bi-house-slash::before{content:"\f895"}.bi-house-up-fill::before{content:"\f896"}.bi-house-up::before{content:"\f897"}.bi-house-x-fill::before{content:"\f898"}.bi-house-x::before{content:"\f899"}.bi-person-add::before{content:"\f89a"}.bi-person-down::before{content:"\f89b"}.bi-person-exclamation::before{content:"\f89c"}.bi-person-fill-add::before{content:"\f89d"}.bi-person-fill-check::before{content:"\f89e"}.bi-person-fill-dash::before{content:"\f89f"}.bi-person-fill-down::before{content:"\f8a0"}.bi-person-fill-exclamation::before{content:"\f8a1"}.bi-person-fill-gear::before{content:"\f8a2"}.bi-person-fill-lock::before{content:"\f8a3"}.bi-person-fill-slash::before{content:"\f8a4"}.bi-person-fill-up::before{content:"\f8a5"}.bi-person-fill-x::before{content:"\f8a6"}.bi-person-gear::before{content:"\f8a7"}.bi-person-lock::before{content:"\f8a8"}.bi-person-slash::before{content:"\f8a9"}.bi-person-up::before{content:"\f8aa"}.bi-scooter::before{content:"\f8ab"}.bi-taxi-front-fill::before{content:"\f8ac"}.bi-taxi-front::before{content:"\f8ad"}.bi-amd::before{content:"\f8ae"}.bi-database-add::before{content:"\f8af"}.bi-database-check::before{content:"\f8b0"}.bi-database-dash::before{content:"\f8b1"}.bi-database-down::before{content:"\f8b2"}.bi-database-exclamation::before{content:"\f8b3"}.bi-database-fill-add::before{content:"\f8b4"}.bi-database-fill-check::before{content:"\f8b5"}.bi-database-fill-dash::before{content:"\f8b6"}.bi-database-fill-down::before{content:"\f8b7"}.bi-database-fill-exclamation::before{content:"\f8b8"}.bi-database-fill-gear::before{content:"\f8b9"}.bi-database-fill-lock::before{content:"\f8ba"}.bi-database-fill-slash::before{content:"\f8bb"}.bi-database-fill-up::before{content:"\f8bc"}.bi-database-fill-x::before{content:"\f8bd"}.bi-database-fill::before{content:"\f8be"}.bi-database-gear::before{content:"\f8bf"}.bi-database-lock::before{content:"\f8c0"}.bi-database-slash::before{content:"\f8c1"}.bi-database-up::before{content:"\f8c2"}.bi-database-x::before{content:"\f8c3"}.bi-database::before{content:"\f8c4"}.bi-houses-fill::before{content:"\f8c5"}.bi-houses::before{content:"\f8c6"}.bi-nvidia::before{content:"\f8c7"}.bi-person-vcard-fill::before{content:"\f8c8"}.bi-person-vcard::before{content:"\f8c9"}.bi-sina-weibo::before{content:"\f8ca"}.bi-tencent-qq::before{content:"\f8cb"}.bi-wikipedia::before{content:"\f8cc"}.bi-alphabet-uppercase::before{content:"\f2a5"}.bi-alphabet::before{content:"\f68a"}.bi-amazon::before{content:"\f68d"}.bi-arrows-collapse-vertical::before{content:"\f690"}.bi-arrows-expand-vertical::before{content:"\f695"}.bi-arrows-vertical::before{content:"\f698"}.bi-arrows::before{content:"\f6a2"}.bi-ban-fill::before{content:"\f6a3"}.bi-ban::before{content:"\f6b6"}.bi-bing::before{content:"\f6c2"}.bi-cake::before{content:"\f6e0"}.bi-cake2::before{content:"\f6ed"}.bi-cookie::before{content:"\f6ee"}.bi-copy::before{content:"\f759"}.bi-crosshair::before{content:"\f769"}.bi-crosshair2::before{content:"\f794"}.bi-emoji-astonished-fill::before{content:"\f795"}.bi-emoji-astonished::before{content:"\f79a"}.bi-emoji-grimace-fill::before{content:"\f79b"}.bi-emoji-grimace::before{content:"\f7a0"}.bi-emoji-grin-fill::before{content:"\f7a1"}.bi-emoji-grin::before{content:"\f7a6"}.bi-emoji-surprise-fill::before{content:"\f7a7"}.bi-emoji-surprise::before{content:"\f7ac"}.bi-emoji-tear-fill::before{content:"\f7ad"}.bi-emoji-tear::before{content:"\f7b2"}.bi-envelope-arrow-down-fill::before{content:"\f7b3"}.bi-envelope-arrow-down::before{content:"\f7b8"}.bi-envelope-arrow-up-fill::before{content:"\f7b9"}.bi-envelope-arrow-up::before{content:"\f7be"}.bi-feather::before{content:"\f7bf"}.bi-feather2::before{content:"\f7c4"}.bi-floppy-fill::before{content:"\f7c5"}.bi-floppy::before{content:"\f7d8"}.bi-floppy2-fill::before{content:"\f7d9"}.bi-floppy2::before{content:"\f7e4"}.bi-gitlab::before{content:"\f7e5"}.bi-highlighter::before{content:"\f7f8"}.bi-marker-tip::before{content:"\f802"}.bi-nvme-fill::before{content:"\f803"}.bi-nvme::before{content:"\f80c"}.bi-opencollective::before{content:"\f80d"}.bi-pci-card-network::before{content:"\f8cd"}.bi-pci-card-sound::before{content:"\f8ce"}.bi-radar::before{content:"\f8cf"}.bi-send-arrow-down-fill::before{content:"\f8d0"}.bi-send-arrow-down::before{content:"\f8d1"}.bi-send-arrow-up-fill::before{content:"\f8d2"}.bi-send-arrow-up::before{content:"\f8d3"}.bi-sim-slash-fill::before{content:"\f8d4"}.bi-sim-slash::before{content:"\f8d5"}.bi-sourceforge::before{content:"\f8d6"}.bi-substack::before{content:"\f8d7"}.bi-threads-fill::before{content:"\f8d8"}.bi-threads::before{content:"\f8d9"}.bi-transparency::before{content:"\f8da"}.bi-twitter-x::before{content:"\f8db"}.bi-type-h4::before{content:"\f8dc"}.bi-type-h5::before{content:"\f8dd"}.bi-type-h6::before{content:"\f8de"}.bi-backpack-fill::before{content:"\f8df"}.bi-backpack::before{content:"\f8e0"}.bi-backpack2-fill::before{content:"\f8e1"}.bi-backpack2::before{content:"\f8e2"}.bi-backpack3-fill::before{content:"\f8e3"}.bi-backpack3::before{content:"\f8e4"}.bi-backpack4-fill::before{content:"\f8e5"}.bi-backpack4::before{content:"\f8e6"}.bi-brilliance::before{content:"\f8e7"}.bi-cake-fill::before{content:"\f8e8"}.bi-cake2-fill::before{content:"\f8e9"}.bi-duffle-fill::before{content:"\f8ea"}.bi-duffle::before{content:"\f8eb"}.bi-exposure::before{content:"\f8ec"}.bi-gender-neuter::before{content:"\f8ed"}.bi-highlights::before{content:"\f8ee"}.bi-luggage-fill::before{content:"\f8ef"}.bi-luggage::before{content:"\f8f0"}.bi-mailbox-flag::before{content:"\f8f1"}.bi-mailbox2-flag::before{content:"\f8f2"}.bi-noise-reduction::before{content:"\f8f3"}.bi-passport-fill::before{content:"\f8f4"}.bi-passport::before{content:"\f8f5"}.bi-person-arms-up::before{content:"\f8f6"}.bi-person-raised-hand::before{content:"\f8f7"}.bi-person-standing-dress::before{content:"\f8f8"}.bi-person-standing::before{content:"\f8f9"}.bi-person-walking::before{content:"\f8fa"}.bi-person-wheelchair::before{content:"\f8fb"}.bi-shadows::before{content:"\f8fc"}.bi-suitcase-fill::before{content:"\f8fd"}.bi-suitcase-lg-fill::before{content:"\f8fe"}.bi-suitcase-lg::before{content:"\f8ff"}.bi-suitcase::before{content:"\f900"}.bi-suitcase2-fill::before{content:"\f901"}.bi-suitcase2::before{content:"\f902"}.bi-vignette::before{content:"\f903"} \ No newline at end of file + */@font-face{font-display:block;font-family:bootstrap-icons;src:url("fonts/bootstrap-icons.woff2?e34853135f9e39acf64315236852cd5a") format("woff2"),url("fonts/bootstrap-icons.woff?e34853135f9e39acf64315236852cd5a") format("woff")}.bi::before,[class*=" bi-"]::before,[class^=bi-]::before{display:inline-block;font-family:bootstrap-icons!important;font-style:normal;font-weight:400!important;font-variant:normal;text-transform:none;line-height:1;vertical-align:-.125em;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.bi-123::before{content:"\f67f"}.bi-alarm-fill::before{content:"\f101"}.bi-alarm::before{content:"\f102"}.bi-align-bottom::before{content:"\f103"}.bi-align-center::before{content:"\f104"}.bi-align-end::before{content:"\f105"}.bi-align-middle::before{content:"\f106"}.bi-align-start::before{content:"\f107"}.bi-align-top::before{content:"\f108"}.bi-alt::before{content:"\f109"}.bi-app-indicator::before{content:"\f10a"}.bi-app::before{content:"\f10b"}.bi-archive-fill::before{content:"\f10c"}.bi-archive::before{content:"\f10d"}.bi-arrow-90deg-down::before{content:"\f10e"}.bi-arrow-90deg-left::before{content:"\f10f"}.bi-arrow-90deg-right::before{content:"\f110"}.bi-arrow-90deg-up::before{content:"\f111"}.bi-arrow-bar-down::before{content:"\f112"}.bi-arrow-bar-left::before{content:"\f113"}.bi-arrow-bar-right::before{content:"\f114"}.bi-arrow-bar-up::before{content:"\f115"}.bi-arrow-clockwise::before{content:"\f116"}.bi-arrow-counterclockwise::before{content:"\f117"}.bi-arrow-down-circle-fill::before{content:"\f118"}.bi-arrow-down-circle::before{content:"\f119"}.bi-arrow-down-left-circle-fill::before{content:"\f11a"}.bi-arrow-down-left-circle::before{content:"\f11b"}.bi-arrow-down-left-square-fill::before{content:"\f11c"}.bi-arrow-down-left-square::before{content:"\f11d"}.bi-arrow-down-left::before{content:"\f11e"}.bi-arrow-down-right-circle-fill::before{content:"\f11f"}.bi-arrow-down-right-circle::before{content:"\f120"}.bi-arrow-down-right-square-fill::before{content:"\f121"}.bi-arrow-down-right-square::before{content:"\f122"}.bi-arrow-down-right::before{content:"\f123"}.bi-arrow-down-short::before{content:"\f124"}.bi-arrow-down-square-fill::before{content:"\f125"}.bi-arrow-down-square::before{content:"\f126"}.bi-arrow-down-up::before{content:"\f127"}.bi-arrow-down::before{content:"\f128"}.bi-arrow-left-circle-fill::before{content:"\f129"}.bi-arrow-left-circle::before{content:"\f12a"}.bi-arrow-left-right::before{content:"\f12b"}.bi-arrow-left-short::before{content:"\f12c"}.bi-arrow-left-square-fill::before{content:"\f12d"}.bi-arrow-left-square::before{content:"\f12e"}.bi-arrow-left::before{content:"\f12f"}.bi-arrow-repeat::before{content:"\f130"}.bi-arrow-return-left::before{content:"\f131"}.bi-arrow-return-right::before{content:"\f132"}.bi-arrow-right-circle-fill::before{content:"\f133"}.bi-arrow-right-circle::before{content:"\f134"}.bi-arrow-right-short::before{content:"\f135"}.bi-arrow-right-square-fill::before{content:"\f136"}.bi-arrow-right-square::before{content:"\f137"}.bi-arrow-right::before{content:"\f138"}.bi-arrow-up-circle-fill::before{content:"\f139"}.bi-arrow-up-circle::before{content:"\f13a"}.bi-arrow-up-left-circle-fill::before{content:"\f13b"}.bi-arrow-up-left-circle::before{content:"\f13c"}.bi-arrow-up-left-square-fill::before{content:"\f13d"}.bi-arrow-up-left-square::before{content:"\f13e"}.bi-arrow-up-left::before{content:"\f13f"}.bi-arrow-up-right-circle-fill::before{content:"\f140"}.bi-arrow-up-right-circle::before{content:"\f141"}.bi-arrow-up-right-square-fill::before{content:"\f142"}.bi-arrow-up-right-square::before{content:"\f143"}.bi-arrow-up-right::before{content:"\f144"}.bi-arrow-up-short::before{content:"\f145"}.bi-arrow-up-square-fill::before{content:"\f146"}.bi-arrow-up-square::before{content:"\f147"}.bi-arrow-up::before{content:"\f148"}.bi-arrows-angle-contract::before{content:"\f149"}.bi-arrows-angle-expand::before{content:"\f14a"}.bi-arrows-collapse::before{content:"\f14b"}.bi-arrows-expand::before{content:"\f14c"}.bi-arrows-fullscreen::before{content:"\f14d"}.bi-arrows-move::before{content:"\f14e"}.bi-aspect-ratio-fill::before{content:"\f14f"}.bi-aspect-ratio::before{content:"\f150"}.bi-asterisk::before{content:"\f151"}.bi-at::before{content:"\f152"}.bi-award-fill::before{content:"\f153"}.bi-award::before{content:"\f154"}.bi-back::before{content:"\f155"}.bi-backspace-fill::before{content:"\f156"}.bi-backspace-reverse-fill::before{content:"\f157"}.bi-backspace-reverse::before{content:"\f158"}.bi-backspace::before{content:"\f159"}.bi-badge-3d-fill::before{content:"\f15a"}.bi-badge-3d::before{content:"\f15b"}.bi-badge-4k-fill::before{content:"\f15c"}.bi-badge-4k::before{content:"\f15d"}.bi-badge-8k-fill::before{content:"\f15e"}.bi-badge-8k::before{content:"\f15f"}.bi-badge-ad-fill::before{content:"\f160"}.bi-badge-ad::before{content:"\f161"}.bi-badge-ar-fill::before{content:"\f162"}.bi-badge-ar::before{content:"\f163"}.bi-badge-cc-fill::before{content:"\f164"}.bi-badge-cc::before{content:"\f165"}.bi-badge-hd-fill::before{content:"\f166"}.bi-badge-hd::before{content:"\f167"}.bi-badge-tm-fill::before{content:"\f168"}.bi-badge-tm::before{content:"\f169"}.bi-badge-vo-fill::before{content:"\f16a"}.bi-badge-vo::before{content:"\f16b"}.bi-badge-vr-fill::before{content:"\f16c"}.bi-badge-vr::before{content:"\f16d"}.bi-badge-wc-fill::before{content:"\f16e"}.bi-badge-wc::before{content:"\f16f"}.bi-bag-check-fill::before{content:"\f170"}.bi-bag-check::before{content:"\f171"}.bi-bag-dash-fill::before{content:"\f172"}.bi-bag-dash::before{content:"\f173"}.bi-bag-fill::before{content:"\f174"}.bi-bag-plus-fill::before{content:"\f175"}.bi-bag-plus::before{content:"\f176"}.bi-bag-x-fill::before{content:"\f177"}.bi-bag-x::before{content:"\f178"}.bi-bag::before{content:"\f179"}.bi-bar-chart-fill::before{content:"\f17a"}.bi-bar-chart-line-fill::before{content:"\f17b"}.bi-bar-chart-line::before{content:"\f17c"}.bi-bar-chart-steps::before{content:"\f17d"}.bi-bar-chart::before{content:"\f17e"}.bi-basket-fill::before{content:"\f17f"}.bi-basket::before{content:"\f180"}.bi-basket2-fill::before{content:"\f181"}.bi-basket2::before{content:"\f182"}.bi-basket3-fill::before{content:"\f183"}.bi-basket3::before{content:"\f184"}.bi-battery-charging::before{content:"\f185"}.bi-battery-full::before{content:"\f186"}.bi-battery-half::before{content:"\f187"}.bi-battery::before{content:"\f188"}.bi-bell-fill::before{content:"\f189"}.bi-bell::before{content:"\f18a"}.bi-bezier::before{content:"\f18b"}.bi-bezier2::before{content:"\f18c"}.bi-bicycle::before{content:"\f18d"}.bi-binoculars-fill::before{content:"\f18e"}.bi-binoculars::before{content:"\f18f"}.bi-blockquote-left::before{content:"\f190"}.bi-blockquote-right::before{content:"\f191"}.bi-book-fill::before{content:"\f192"}.bi-book-half::before{content:"\f193"}.bi-book::before{content:"\f194"}.bi-bookmark-check-fill::before{content:"\f195"}.bi-bookmark-check::before{content:"\f196"}.bi-bookmark-dash-fill::before{content:"\f197"}.bi-bookmark-dash::before{content:"\f198"}.bi-bookmark-fill::before{content:"\f199"}.bi-bookmark-heart-fill::before{content:"\f19a"}.bi-bookmark-heart::before{content:"\f19b"}.bi-bookmark-plus-fill::before{content:"\f19c"}.bi-bookmark-plus::before{content:"\f19d"}.bi-bookmark-star-fill::before{content:"\f19e"}.bi-bookmark-star::before{content:"\f19f"}.bi-bookmark-x-fill::before{content:"\f1a0"}.bi-bookmark-x::before{content:"\f1a1"}.bi-bookmark::before{content:"\f1a2"}.bi-bookmarks-fill::before{content:"\f1a3"}.bi-bookmarks::before{content:"\f1a4"}.bi-bookshelf::before{content:"\f1a5"}.bi-bootstrap-fill::before{content:"\f1a6"}.bi-bootstrap-reboot::before{content:"\f1a7"}.bi-bootstrap::before{content:"\f1a8"}.bi-border-all::before{content:"\f1a9"}.bi-border-bottom::before{content:"\f1aa"}.bi-border-center::before{content:"\f1ab"}.bi-border-inner::before{content:"\f1ac"}.bi-border-left::before{content:"\f1ad"}.bi-border-middle::before{content:"\f1ae"}.bi-border-outer::before{content:"\f1af"}.bi-border-right::before{content:"\f1b0"}.bi-border-style::before{content:"\f1b1"}.bi-border-top::before{content:"\f1b2"}.bi-border-width::before{content:"\f1b3"}.bi-border::before{content:"\f1b4"}.bi-bounding-box-circles::before{content:"\f1b5"}.bi-bounding-box::before{content:"\f1b6"}.bi-box-arrow-down-left::before{content:"\f1b7"}.bi-box-arrow-down-right::before{content:"\f1b8"}.bi-box-arrow-down::before{content:"\f1b9"}.bi-box-arrow-in-down-left::before{content:"\f1ba"}.bi-box-arrow-in-down-right::before{content:"\f1bb"}.bi-box-arrow-in-down::before{content:"\f1bc"}.bi-box-arrow-in-left::before{content:"\f1bd"}.bi-box-arrow-in-right::before{content:"\f1be"}.bi-box-arrow-in-up-left::before{content:"\f1bf"}.bi-box-arrow-in-up-right::before{content:"\f1c0"}.bi-box-arrow-in-up::before{content:"\f1c1"}.bi-box-arrow-left::before{content:"\f1c2"}.bi-box-arrow-right::before{content:"\f1c3"}.bi-box-arrow-up-left::before{content:"\f1c4"}.bi-box-arrow-up-right::before{content:"\f1c5"}.bi-box-arrow-up::before{content:"\f1c6"}.bi-box-seam::before{content:"\f1c7"}.bi-box::before{content:"\f1c8"}.bi-braces::before{content:"\f1c9"}.bi-bricks::before{content:"\f1ca"}.bi-briefcase-fill::before{content:"\f1cb"}.bi-briefcase::before{content:"\f1cc"}.bi-brightness-alt-high-fill::before{content:"\f1cd"}.bi-brightness-alt-high::before{content:"\f1ce"}.bi-brightness-alt-low-fill::before{content:"\f1cf"}.bi-brightness-alt-low::before{content:"\f1d0"}.bi-brightness-high-fill::before{content:"\f1d1"}.bi-brightness-high::before{content:"\f1d2"}.bi-brightness-low-fill::before{content:"\f1d3"}.bi-brightness-low::before{content:"\f1d4"}.bi-broadcast-pin::before{content:"\f1d5"}.bi-broadcast::before{content:"\f1d6"}.bi-brush-fill::before{content:"\f1d7"}.bi-brush::before{content:"\f1d8"}.bi-bucket-fill::before{content:"\f1d9"}.bi-bucket::before{content:"\f1da"}.bi-bug-fill::before{content:"\f1db"}.bi-bug::before{content:"\f1dc"}.bi-building::before{content:"\f1dd"}.bi-bullseye::before{content:"\f1de"}.bi-calculator-fill::before{content:"\f1df"}.bi-calculator::before{content:"\f1e0"}.bi-calendar-check-fill::before{content:"\f1e1"}.bi-calendar-check::before{content:"\f1e2"}.bi-calendar-date-fill::before{content:"\f1e3"}.bi-calendar-date::before{content:"\f1e4"}.bi-calendar-day-fill::before{content:"\f1e5"}.bi-calendar-day::before{content:"\f1e6"}.bi-calendar-event-fill::before{content:"\f1e7"}.bi-calendar-event::before{content:"\f1e8"}.bi-calendar-fill::before{content:"\f1e9"}.bi-calendar-minus-fill::before{content:"\f1ea"}.bi-calendar-minus::before{content:"\f1eb"}.bi-calendar-month-fill::before{content:"\f1ec"}.bi-calendar-month::before{content:"\f1ed"}.bi-calendar-plus-fill::before{content:"\f1ee"}.bi-calendar-plus::before{content:"\f1ef"}.bi-calendar-range-fill::before{content:"\f1f0"}.bi-calendar-range::before{content:"\f1f1"}.bi-calendar-week-fill::before{content:"\f1f2"}.bi-calendar-week::before{content:"\f1f3"}.bi-calendar-x-fill::before{content:"\f1f4"}.bi-calendar-x::before{content:"\f1f5"}.bi-calendar::before{content:"\f1f6"}.bi-calendar2-check-fill::before{content:"\f1f7"}.bi-calendar2-check::before{content:"\f1f8"}.bi-calendar2-date-fill::before{content:"\f1f9"}.bi-calendar2-date::before{content:"\f1fa"}.bi-calendar2-day-fill::before{content:"\f1fb"}.bi-calendar2-day::before{content:"\f1fc"}.bi-calendar2-event-fill::before{content:"\f1fd"}.bi-calendar2-event::before{content:"\f1fe"}.bi-calendar2-fill::before{content:"\f1ff"}.bi-calendar2-minus-fill::before{content:"\f200"}.bi-calendar2-minus::before{content:"\f201"}.bi-calendar2-month-fill::before{content:"\f202"}.bi-calendar2-month::before{content:"\f203"}.bi-calendar2-plus-fill::before{content:"\f204"}.bi-calendar2-plus::before{content:"\f205"}.bi-calendar2-range-fill::before{content:"\f206"}.bi-calendar2-range::before{content:"\f207"}.bi-calendar2-week-fill::before{content:"\f208"}.bi-calendar2-week::before{content:"\f209"}.bi-calendar2-x-fill::before{content:"\f20a"}.bi-calendar2-x::before{content:"\f20b"}.bi-calendar2::before{content:"\f20c"}.bi-calendar3-event-fill::before{content:"\f20d"}.bi-calendar3-event::before{content:"\f20e"}.bi-calendar3-fill::before{content:"\f20f"}.bi-calendar3-range-fill::before{content:"\f210"}.bi-calendar3-range::before{content:"\f211"}.bi-calendar3-week-fill::before{content:"\f212"}.bi-calendar3-week::before{content:"\f213"}.bi-calendar3::before{content:"\f214"}.bi-calendar4-event::before{content:"\f215"}.bi-calendar4-range::before{content:"\f216"}.bi-calendar4-week::before{content:"\f217"}.bi-calendar4::before{content:"\f218"}.bi-camera-fill::before{content:"\f219"}.bi-camera-reels-fill::before{content:"\f21a"}.bi-camera-reels::before{content:"\f21b"}.bi-camera-video-fill::before{content:"\f21c"}.bi-camera-video-off-fill::before{content:"\f21d"}.bi-camera-video-off::before{content:"\f21e"}.bi-camera-video::before{content:"\f21f"}.bi-camera::before{content:"\f220"}.bi-camera2::before{content:"\f221"}.bi-capslock-fill::before{content:"\f222"}.bi-capslock::before{content:"\f223"}.bi-card-checklist::before{content:"\f224"}.bi-card-heading::before{content:"\f225"}.bi-card-image::before{content:"\f226"}.bi-card-list::before{content:"\f227"}.bi-card-text::before{content:"\f228"}.bi-caret-down-fill::before{content:"\f229"}.bi-caret-down-square-fill::before{content:"\f22a"}.bi-caret-down-square::before{content:"\f22b"}.bi-caret-down::before{content:"\f22c"}.bi-caret-left-fill::before{content:"\f22d"}.bi-caret-left-square-fill::before{content:"\f22e"}.bi-caret-left-square::before{content:"\f22f"}.bi-caret-left::before{content:"\f230"}.bi-caret-right-fill::before{content:"\f231"}.bi-caret-right-square-fill::before{content:"\f232"}.bi-caret-right-square::before{content:"\f233"}.bi-caret-right::before{content:"\f234"}.bi-caret-up-fill::before{content:"\f235"}.bi-caret-up-square-fill::before{content:"\f236"}.bi-caret-up-square::before{content:"\f237"}.bi-caret-up::before{content:"\f238"}.bi-cart-check-fill::before{content:"\f239"}.bi-cart-check::before{content:"\f23a"}.bi-cart-dash-fill::before{content:"\f23b"}.bi-cart-dash::before{content:"\f23c"}.bi-cart-fill::before{content:"\f23d"}.bi-cart-plus-fill::before{content:"\f23e"}.bi-cart-plus::before{content:"\f23f"}.bi-cart-x-fill::before{content:"\f240"}.bi-cart-x::before{content:"\f241"}.bi-cart::before{content:"\f242"}.bi-cart2::before{content:"\f243"}.bi-cart3::before{content:"\f244"}.bi-cart4::before{content:"\f245"}.bi-cash-stack::before{content:"\f246"}.bi-cash::before{content:"\f247"}.bi-cast::before{content:"\f248"}.bi-chat-dots-fill::before{content:"\f249"}.bi-chat-dots::before{content:"\f24a"}.bi-chat-fill::before{content:"\f24b"}.bi-chat-left-dots-fill::before{content:"\f24c"}.bi-chat-left-dots::before{content:"\f24d"}.bi-chat-left-fill::before{content:"\f24e"}.bi-chat-left-quote-fill::before{content:"\f24f"}.bi-chat-left-quote::before{content:"\f250"}.bi-chat-left-text-fill::before{content:"\f251"}.bi-chat-left-text::before{content:"\f252"}.bi-chat-left::before{content:"\f253"}.bi-chat-quote-fill::before{content:"\f254"}.bi-chat-quote::before{content:"\f255"}.bi-chat-right-dots-fill::before{content:"\f256"}.bi-chat-right-dots::before{content:"\f257"}.bi-chat-right-fill::before{content:"\f258"}.bi-chat-right-quote-fill::before{content:"\f259"}.bi-chat-right-quote::before{content:"\f25a"}.bi-chat-right-text-fill::before{content:"\f25b"}.bi-chat-right-text::before{content:"\f25c"}.bi-chat-right::before{content:"\f25d"}.bi-chat-square-dots-fill::before{content:"\f25e"}.bi-chat-square-dots::before{content:"\f25f"}.bi-chat-square-fill::before{content:"\f260"}.bi-chat-square-quote-fill::before{content:"\f261"}.bi-chat-square-quote::before{content:"\f262"}.bi-chat-square-text-fill::before{content:"\f263"}.bi-chat-square-text::before{content:"\f264"}.bi-chat-square::before{content:"\f265"}.bi-chat-text-fill::before{content:"\f266"}.bi-chat-text::before{content:"\f267"}.bi-chat::before{content:"\f268"}.bi-check-all::before{content:"\f269"}.bi-check-circle-fill::before{content:"\f26a"}.bi-check-circle::before{content:"\f26b"}.bi-check-square-fill::before{content:"\f26c"}.bi-check-square::before{content:"\f26d"}.bi-check::before{content:"\f26e"}.bi-check2-all::before{content:"\f26f"}.bi-check2-circle::before{content:"\f270"}.bi-check2-square::before{content:"\f271"}.bi-check2::before{content:"\f272"}.bi-chevron-bar-contract::before{content:"\f273"}.bi-chevron-bar-down::before{content:"\f274"}.bi-chevron-bar-expand::before{content:"\f275"}.bi-chevron-bar-left::before{content:"\f276"}.bi-chevron-bar-right::before{content:"\f277"}.bi-chevron-bar-up::before{content:"\f278"}.bi-chevron-compact-down::before{content:"\f279"}.bi-chevron-compact-left::before{content:"\f27a"}.bi-chevron-compact-right::before{content:"\f27b"}.bi-chevron-compact-up::before{content:"\f27c"}.bi-chevron-contract::before{content:"\f27d"}.bi-chevron-double-down::before{content:"\f27e"}.bi-chevron-double-left::before{content:"\f27f"}.bi-chevron-double-right::before{content:"\f280"}.bi-chevron-double-up::before{content:"\f281"}.bi-chevron-down::before{content:"\f282"}.bi-chevron-expand::before{content:"\f283"}.bi-chevron-left::before{content:"\f284"}.bi-chevron-right::before{content:"\f285"}.bi-chevron-up::before{content:"\f286"}.bi-circle-fill::before{content:"\f287"}.bi-circle-half::before{content:"\f288"}.bi-circle-square::before{content:"\f289"}.bi-circle::before{content:"\f28a"}.bi-clipboard-check::before{content:"\f28b"}.bi-clipboard-data::before{content:"\f28c"}.bi-clipboard-minus::before{content:"\f28d"}.bi-clipboard-plus::before{content:"\f28e"}.bi-clipboard-x::before{content:"\f28f"}.bi-clipboard::before{content:"\f290"}.bi-clock-fill::before{content:"\f291"}.bi-clock-history::before{content:"\f292"}.bi-clock::before{content:"\f293"}.bi-cloud-arrow-down-fill::before{content:"\f294"}.bi-cloud-arrow-down::before{content:"\f295"}.bi-cloud-arrow-up-fill::before{content:"\f296"}.bi-cloud-arrow-up::before{content:"\f297"}.bi-cloud-check-fill::before{content:"\f298"}.bi-cloud-check::before{content:"\f299"}.bi-cloud-download-fill::before{content:"\f29a"}.bi-cloud-download::before{content:"\f29b"}.bi-cloud-drizzle-fill::before{content:"\f29c"}.bi-cloud-drizzle::before{content:"\f29d"}.bi-cloud-fill::before{content:"\f29e"}.bi-cloud-fog-fill::before{content:"\f29f"}.bi-cloud-fog::before{content:"\f2a0"}.bi-cloud-fog2-fill::before{content:"\f2a1"}.bi-cloud-fog2::before{content:"\f2a2"}.bi-cloud-hail-fill::before{content:"\f2a3"}.bi-cloud-hail::before{content:"\f2a4"}.bi-cloud-haze-fill::before{content:"\f2a6"}.bi-cloud-haze::before{content:"\f2a7"}.bi-cloud-haze2-fill::before{content:"\f2a8"}.bi-cloud-lightning-fill::before{content:"\f2a9"}.bi-cloud-lightning-rain-fill::before{content:"\f2aa"}.bi-cloud-lightning-rain::before{content:"\f2ab"}.bi-cloud-lightning::before{content:"\f2ac"}.bi-cloud-minus-fill::before{content:"\f2ad"}.bi-cloud-minus::before{content:"\f2ae"}.bi-cloud-moon-fill::before{content:"\f2af"}.bi-cloud-moon::before{content:"\f2b0"}.bi-cloud-plus-fill::before{content:"\f2b1"}.bi-cloud-plus::before{content:"\f2b2"}.bi-cloud-rain-fill::before{content:"\f2b3"}.bi-cloud-rain-heavy-fill::before{content:"\f2b4"}.bi-cloud-rain-heavy::before{content:"\f2b5"}.bi-cloud-rain::before{content:"\f2b6"}.bi-cloud-slash-fill::before{content:"\f2b7"}.bi-cloud-slash::before{content:"\f2b8"}.bi-cloud-sleet-fill::before{content:"\f2b9"}.bi-cloud-sleet::before{content:"\f2ba"}.bi-cloud-snow-fill::before{content:"\f2bb"}.bi-cloud-snow::before{content:"\f2bc"}.bi-cloud-sun-fill::before{content:"\f2bd"}.bi-cloud-sun::before{content:"\f2be"}.bi-cloud-upload-fill::before{content:"\f2bf"}.bi-cloud-upload::before{content:"\f2c0"}.bi-cloud::before{content:"\f2c1"}.bi-clouds-fill::before{content:"\f2c2"}.bi-clouds::before{content:"\f2c3"}.bi-cloudy-fill::before{content:"\f2c4"}.bi-cloudy::before{content:"\f2c5"}.bi-code-slash::before{content:"\f2c6"}.bi-code-square::before{content:"\f2c7"}.bi-code::before{content:"\f2c8"}.bi-collection-fill::before{content:"\f2c9"}.bi-collection-play-fill::before{content:"\f2ca"}.bi-collection-play::before{content:"\f2cb"}.bi-collection::before{content:"\f2cc"}.bi-columns-gap::before{content:"\f2cd"}.bi-columns::before{content:"\f2ce"}.bi-command::before{content:"\f2cf"}.bi-compass-fill::before{content:"\f2d0"}.bi-compass::before{content:"\f2d1"}.bi-cone-striped::before{content:"\f2d2"}.bi-cone::before{content:"\f2d3"}.bi-controller::before{content:"\f2d4"}.bi-cpu-fill::before{content:"\f2d5"}.bi-cpu::before{content:"\f2d6"}.bi-credit-card-2-back-fill::before{content:"\f2d7"}.bi-credit-card-2-back::before{content:"\f2d8"}.bi-credit-card-2-front-fill::before{content:"\f2d9"}.bi-credit-card-2-front::before{content:"\f2da"}.bi-credit-card-fill::before{content:"\f2db"}.bi-credit-card::before{content:"\f2dc"}.bi-crop::before{content:"\f2dd"}.bi-cup-fill::before{content:"\f2de"}.bi-cup-straw::before{content:"\f2df"}.bi-cup::before{content:"\f2e0"}.bi-cursor-fill::before{content:"\f2e1"}.bi-cursor-text::before{content:"\f2e2"}.bi-cursor::before{content:"\f2e3"}.bi-dash-circle-dotted::before{content:"\f2e4"}.bi-dash-circle-fill::before{content:"\f2e5"}.bi-dash-circle::before{content:"\f2e6"}.bi-dash-square-dotted::before{content:"\f2e7"}.bi-dash-square-fill::before{content:"\f2e8"}.bi-dash-square::before{content:"\f2e9"}.bi-dash::before{content:"\f2ea"}.bi-diagram-2-fill::before{content:"\f2eb"}.bi-diagram-2::before{content:"\f2ec"}.bi-diagram-3-fill::before{content:"\f2ed"}.bi-diagram-3::before{content:"\f2ee"}.bi-diamond-fill::before{content:"\f2ef"}.bi-diamond-half::before{content:"\f2f0"}.bi-diamond::before{content:"\f2f1"}.bi-dice-1-fill::before{content:"\f2f2"}.bi-dice-1::before{content:"\f2f3"}.bi-dice-2-fill::before{content:"\f2f4"}.bi-dice-2::before{content:"\f2f5"}.bi-dice-3-fill::before{content:"\f2f6"}.bi-dice-3::before{content:"\f2f7"}.bi-dice-4-fill::before{content:"\f2f8"}.bi-dice-4::before{content:"\f2f9"}.bi-dice-5-fill::before{content:"\f2fa"}.bi-dice-5::before{content:"\f2fb"}.bi-dice-6-fill::before{content:"\f2fc"}.bi-dice-6::before{content:"\f2fd"}.bi-disc-fill::before{content:"\f2fe"}.bi-disc::before{content:"\f2ff"}.bi-discord::before{content:"\f300"}.bi-display-fill::before{content:"\f301"}.bi-display::before{content:"\f302"}.bi-distribute-horizontal::before{content:"\f303"}.bi-distribute-vertical::before{content:"\f304"}.bi-door-closed-fill::before{content:"\f305"}.bi-door-closed::before{content:"\f306"}.bi-door-open-fill::before{content:"\f307"}.bi-door-open::before{content:"\f308"}.bi-dot::before{content:"\f309"}.bi-download::before{content:"\f30a"}.bi-droplet-fill::before{content:"\f30b"}.bi-droplet-half::before{content:"\f30c"}.bi-droplet::before{content:"\f30d"}.bi-earbuds::before{content:"\f30e"}.bi-easel-fill::before{content:"\f30f"}.bi-easel::before{content:"\f310"}.bi-egg-fill::before{content:"\f311"}.bi-egg-fried::before{content:"\f312"}.bi-egg::before{content:"\f313"}.bi-eject-fill::before{content:"\f314"}.bi-eject::before{content:"\f315"}.bi-emoji-angry-fill::before{content:"\f316"}.bi-emoji-angry::before{content:"\f317"}.bi-emoji-dizzy-fill::before{content:"\f318"}.bi-emoji-dizzy::before{content:"\f319"}.bi-emoji-expressionless-fill::before{content:"\f31a"}.bi-emoji-expressionless::before{content:"\f31b"}.bi-emoji-frown-fill::before{content:"\f31c"}.bi-emoji-frown::before{content:"\f31d"}.bi-emoji-heart-eyes-fill::before{content:"\f31e"}.bi-emoji-heart-eyes::before{content:"\f31f"}.bi-emoji-laughing-fill::before{content:"\f320"}.bi-emoji-laughing::before{content:"\f321"}.bi-emoji-neutral-fill::before{content:"\f322"}.bi-emoji-neutral::before{content:"\f323"}.bi-emoji-smile-fill::before{content:"\f324"}.bi-emoji-smile-upside-down-fill::before{content:"\f325"}.bi-emoji-smile-upside-down::before{content:"\f326"}.bi-emoji-smile::before{content:"\f327"}.bi-emoji-sunglasses-fill::before{content:"\f328"}.bi-emoji-sunglasses::before{content:"\f329"}.bi-emoji-wink-fill::before{content:"\f32a"}.bi-emoji-wink::before{content:"\f32b"}.bi-envelope-fill::before{content:"\f32c"}.bi-envelope-open-fill::before{content:"\f32d"}.bi-envelope-open::before{content:"\f32e"}.bi-envelope::before{content:"\f32f"}.bi-eraser-fill::before{content:"\f330"}.bi-eraser::before{content:"\f331"}.bi-exclamation-circle-fill::before{content:"\f332"}.bi-exclamation-circle::before{content:"\f333"}.bi-exclamation-diamond-fill::before{content:"\f334"}.bi-exclamation-diamond::before{content:"\f335"}.bi-exclamation-octagon-fill::before{content:"\f336"}.bi-exclamation-octagon::before{content:"\f337"}.bi-exclamation-square-fill::before{content:"\f338"}.bi-exclamation-square::before{content:"\f339"}.bi-exclamation-triangle-fill::before{content:"\f33a"}.bi-exclamation-triangle::before{content:"\f33b"}.bi-exclamation::before{content:"\f33c"}.bi-exclude::before{content:"\f33d"}.bi-eye-fill::before{content:"\f33e"}.bi-eye-slash-fill::before{content:"\f33f"}.bi-eye-slash::before{content:"\f340"}.bi-eye::before{content:"\f341"}.bi-eyedropper::before{content:"\f342"}.bi-eyeglasses::before{content:"\f343"}.bi-facebook::before{content:"\f344"}.bi-file-arrow-down-fill::before{content:"\f345"}.bi-file-arrow-down::before{content:"\f346"}.bi-file-arrow-up-fill::before{content:"\f347"}.bi-file-arrow-up::before{content:"\f348"}.bi-file-bar-graph-fill::before{content:"\f349"}.bi-file-bar-graph::before{content:"\f34a"}.bi-file-binary-fill::before{content:"\f34b"}.bi-file-binary::before{content:"\f34c"}.bi-file-break-fill::before{content:"\f34d"}.bi-file-break::before{content:"\f34e"}.bi-file-check-fill::before{content:"\f34f"}.bi-file-check::before{content:"\f350"}.bi-file-code-fill::before{content:"\f351"}.bi-file-code::before{content:"\f352"}.bi-file-diff-fill::before{content:"\f353"}.bi-file-diff::before{content:"\f354"}.bi-file-earmark-arrow-down-fill::before{content:"\f355"}.bi-file-earmark-arrow-down::before{content:"\f356"}.bi-file-earmark-arrow-up-fill::before{content:"\f357"}.bi-file-earmark-arrow-up::before{content:"\f358"}.bi-file-earmark-bar-graph-fill::before{content:"\f359"}.bi-file-earmark-bar-graph::before{content:"\f35a"}.bi-file-earmark-binary-fill::before{content:"\f35b"}.bi-file-earmark-binary::before{content:"\f35c"}.bi-file-earmark-break-fill::before{content:"\f35d"}.bi-file-earmark-break::before{content:"\f35e"}.bi-file-earmark-check-fill::before{content:"\f35f"}.bi-file-earmark-check::before{content:"\f360"}.bi-file-earmark-code-fill::before{content:"\f361"}.bi-file-earmark-code::before{content:"\f362"}.bi-file-earmark-diff-fill::before{content:"\f363"}.bi-file-earmark-diff::before{content:"\f364"}.bi-file-earmark-easel-fill::before{content:"\f365"}.bi-file-earmark-easel::before{content:"\f366"}.bi-file-earmark-excel-fill::before{content:"\f367"}.bi-file-earmark-excel::before{content:"\f368"}.bi-file-earmark-fill::before{content:"\f369"}.bi-file-earmark-font-fill::before{content:"\f36a"}.bi-file-earmark-font::before{content:"\f36b"}.bi-file-earmark-image-fill::before{content:"\f36c"}.bi-file-earmark-image::before{content:"\f36d"}.bi-file-earmark-lock-fill::before{content:"\f36e"}.bi-file-earmark-lock::before{content:"\f36f"}.bi-file-earmark-lock2-fill::before{content:"\f370"}.bi-file-earmark-lock2::before{content:"\f371"}.bi-file-earmark-medical-fill::before{content:"\f372"}.bi-file-earmark-medical::before{content:"\f373"}.bi-file-earmark-minus-fill::before{content:"\f374"}.bi-file-earmark-minus::before{content:"\f375"}.bi-file-earmark-music-fill::before{content:"\f376"}.bi-file-earmark-music::before{content:"\f377"}.bi-file-earmark-person-fill::before{content:"\f378"}.bi-file-earmark-person::before{content:"\f379"}.bi-file-earmark-play-fill::before{content:"\f37a"}.bi-file-earmark-play::before{content:"\f37b"}.bi-file-earmark-plus-fill::before{content:"\f37c"}.bi-file-earmark-plus::before{content:"\f37d"}.bi-file-earmark-post-fill::before{content:"\f37e"}.bi-file-earmark-post::before{content:"\f37f"}.bi-file-earmark-ppt-fill::before{content:"\f380"}.bi-file-earmark-ppt::before{content:"\f381"}.bi-file-earmark-richtext-fill::before{content:"\f382"}.bi-file-earmark-richtext::before{content:"\f383"}.bi-file-earmark-ruled-fill::before{content:"\f384"}.bi-file-earmark-ruled::before{content:"\f385"}.bi-file-earmark-slides-fill::before{content:"\f386"}.bi-file-earmark-slides::before{content:"\f387"}.bi-file-earmark-spreadsheet-fill::before{content:"\f388"}.bi-file-earmark-spreadsheet::before{content:"\f389"}.bi-file-earmark-text-fill::before{content:"\f38a"}.bi-file-earmark-text::before{content:"\f38b"}.bi-file-earmark-word-fill::before{content:"\f38c"}.bi-file-earmark-word::before{content:"\f38d"}.bi-file-earmark-x-fill::before{content:"\f38e"}.bi-file-earmark-x::before{content:"\f38f"}.bi-file-earmark-zip-fill::before{content:"\f390"}.bi-file-earmark-zip::before{content:"\f391"}.bi-file-earmark::before{content:"\f392"}.bi-file-easel-fill::before{content:"\f393"}.bi-file-easel::before{content:"\f394"}.bi-file-excel-fill::before{content:"\f395"}.bi-file-excel::before{content:"\f396"}.bi-file-fill::before{content:"\f397"}.bi-file-font-fill::before{content:"\f398"}.bi-file-font::before{content:"\f399"}.bi-file-image-fill::before{content:"\f39a"}.bi-file-image::before{content:"\f39b"}.bi-file-lock-fill::before{content:"\f39c"}.bi-file-lock::before{content:"\f39d"}.bi-file-lock2-fill::before{content:"\f39e"}.bi-file-lock2::before{content:"\f39f"}.bi-file-medical-fill::before{content:"\f3a0"}.bi-file-medical::before{content:"\f3a1"}.bi-file-minus-fill::before{content:"\f3a2"}.bi-file-minus::before{content:"\f3a3"}.bi-file-music-fill::before{content:"\f3a4"}.bi-file-music::before{content:"\f3a5"}.bi-file-person-fill::before{content:"\f3a6"}.bi-file-person::before{content:"\f3a7"}.bi-file-play-fill::before{content:"\f3a8"}.bi-file-play::before{content:"\f3a9"}.bi-file-plus-fill::before{content:"\f3aa"}.bi-file-plus::before{content:"\f3ab"}.bi-file-post-fill::before{content:"\f3ac"}.bi-file-post::before{content:"\f3ad"}.bi-file-ppt-fill::before{content:"\f3ae"}.bi-file-ppt::before{content:"\f3af"}.bi-file-richtext-fill::before{content:"\f3b0"}.bi-file-richtext::before{content:"\f3b1"}.bi-file-ruled-fill::before{content:"\f3b2"}.bi-file-ruled::before{content:"\f3b3"}.bi-file-slides-fill::before{content:"\f3b4"}.bi-file-slides::before{content:"\f3b5"}.bi-file-spreadsheet-fill::before{content:"\f3b6"}.bi-file-spreadsheet::before{content:"\f3b7"}.bi-file-text-fill::before{content:"\f3b8"}.bi-file-text::before{content:"\f3b9"}.bi-file-word-fill::before{content:"\f3ba"}.bi-file-word::before{content:"\f3bb"}.bi-file-x-fill::before{content:"\f3bc"}.bi-file-x::before{content:"\f3bd"}.bi-file-zip-fill::before{content:"\f3be"}.bi-file-zip::before{content:"\f3bf"}.bi-file::before{content:"\f3c0"}.bi-files-alt::before{content:"\f3c1"}.bi-files::before{content:"\f3c2"}.bi-film::before{content:"\f3c3"}.bi-filter-circle-fill::before{content:"\f3c4"}.bi-filter-circle::before{content:"\f3c5"}.bi-filter-left::before{content:"\f3c6"}.bi-filter-right::before{content:"\f3c7"}.bi-filter-square-fill::before{content:"\f3c8"}.bi-filter-square::before{content:"\f3c9"}.bi-filter::before{content:"\f3ca"}.bi-flag-fill::before{content:"\f3cb"}.bi-flag::before{content:"\f3cc"}.bi-flower1::before{content:"\f3cd"}.bi-flower2::before{content:"\f3ce"}.bi-flower3::before{content:"\f3cf"}.bi-folder-check::before{content:"\f3d0"}.bi-folder-fill::before{content:"\f3d1"}.bi-folder-minus::before{content:"\f3d2"}.bi-folder-plus::before{content:"\f3d3"}.bi-folder-symlink-fill::before{content:"\f3d4"}.bi-folder-symlink::before{content:"\f3d5"}.bi-folder-x::before{content:"\f3d6"}.bi-folder::before{content:"\f3d7"}.bi-folder2-open::before{content:"\f3d8"}.bi-folder2::before{content:"\f3d9"}.bi-fonts::before{content:"\f3da"}.bi-forward-fill::before{content:"\f3db"}.bi-forward::before{content:"\f3dc"}.bi-front::before{content:"\f3dd"}.bi-fullscreen-exit::before{content:"\f3de"}.bi-fullscreen::before{content:"\f3df"}.bi-funnel-fill::before{content:"\f3e0"}.bi-funnel::before{content:"\f3e1"}.bi-gear-fill::before{content:"\f3e2"}.bi-gear-wide-connected::before{content:"\f3e3"}.bi-gear-wide::before{content:"\f3e4"}.bi-gear::before{content:"\f3e5"}.bi-gem::before{content:"\f3e6"}.bi-geo-alt-fill::before{content:"\f3e7"}.bi-geo-alt::before{content:"\f3e8"}.bi-geo-fill::before{content:"\f3e9"}.bi-geo::before{content:"\f3ea"}.bi-gift-fill::before{content:"\f3eb"}.bi-gift::before{content:"\f3ec"}.bi-github::before{content:"\f3ed"}.bi-globe::before{content:"\f3ee"}.bi-globe2::before{content:"\f3ef"}.bi-google::before{content:"\f3f0"}.bi-graph-down::before{content:"\f3f1"}.bi-graph-up::before{content:"\f3f2"}.bi-grid-1x2-fill::before{content:"\f3f3"}.bi-grid-1x2::before{content:"\f3f4"}.bi-grid-3x2-gap-fill::before{content:"\f3f5"}.bi-grid-3x2-gap::before{content:"\f3f6"}.bi-grid-3x2::before{content:"\f3f7"}.bi-grid-3x3-gap-fill::before{content:"\f3f8"}.bi-grid-3x3-gap::before{content:"\f3f9"}.bi-grid-3x3::before{content:"\f3fa"}.bi-grid-fill::before{content:"\f3fb"}.bi-grid::before{content:"\f3fc"}.bi-grip-horizontal::before{content:"\f3fd"}.bi-grip-vertical::before{content:"\f3fe"}.bi-hammer::before{content:"\f3ff"}.bi-hand-index-fill::before{content:"\f400"}.bi-hand-index-thumb-fill::before{content:"\f401"}.bi-hand-index-thumb::before{content:"\f402"}.bi-hand-index::before{content:"\f403"}.bi-hand-thumbs-down-fill::before{content:"\f404"}.bi-hand-thumbs-down::before{content:"\f405"}.bi-hand-thumbs-up-fill::before{content:"\f406"}.bi-hand-thumbs-up::before{content:"\f407"}.bi-handbag-fill::before{content:"\f408"}.bi-handbag::before{content:"\f409"}.bi-hash::before{content:"\f40a"}.bi-hdd-fill::before{content:"\f40b"}.bi-hdd-network-fill::before{content:"\f40c"}.bi-hdd-network::before{content:"\f40d"}.bi-hdd-rack-fill::before{content:"\f40e"}.bi-hdd-rack::before{content:"\f40f"}.bi-hdd-stack-fill::before{content:"\f410"}.bi-hdd-stack::before{content:"\f411"}.bi-hdd::before{content:"\f412"}.bi-headphones::before{content:"\f413"}.bi-headset::before{content:"\f414"}.bi-heart-fill::before{content:"\f415"}.bi-heart-half::before{content:"\f416"}.bi-heart::before{content:"\f417"}.bi-heptagon-fill::before{content:"\f418"}.bi-heptagon-half::before{content:"\f419"}.bi-heptagon::before{content:"\f41a"}.bi-hexagon-fill::before{content:"\f41b"}.bi-hexagon-half::before{content:"\f41c"}.bi-hexagon::before{content:"\f41d"}.bi-hourglass-bottom::before{content:"\f41e"}.bi-hourglass-split::before{content:"\f41f"}.bi-hourglass-top::before{content:"\f420"}.bi-hourglass::before{content:"\f421"}.bi-house-door-fill::before{content:"\f422"}.bi-house-door::before{content:"\f423"}.bi-house-fill::before{content:"\f424"}.bi-house::before{content:"\f425"}.bi-hr::before{content:"\f426"}.bi-hurricane::before{content:"\f427"}.bi-image-alt::before{content:"\f428"}.bi-image-fill::before{content:"\f429"}.bi-image::before{content:"\f42a"}.bi-images::before{content:"\f42b"}.bi-inbox-fill::before{content:"\f42c"}.bi-inbox::before{content:"\f42d"}.bi-inboxes-fill::before{content:"\f42e"}.bi-inboxes::before{content:"\f42f"}.bi-info-circle-fill::before{content:"\f430"}.bi-info-circle::before{content:"\f431"}.bi-info-square-fill::before{content:"\f432"}.bi-info-square::before{content:"\f433"}.bi-info::before{content:"\f434"}.bi-input-cursor-text::before{content:"\f435"}.bi-input-cursor::before{content:"\f436"}.bi-instagram::before{content:"\f437"}.bi-intersect::before{content:"\f438"}.bi-journal-album::before{content:"\f439"}.bi-journal-arrow-down::before{content:"\f43a"}.bi-journal-arrow-up::before{content:"\f43b"}.bi-journal-bookmark-fill::before{content:"\f43c"}.bi-journal-bookmark::before{content:"\f43d"}.bi-journal-check::before{content:"\f43e"}.bi-journal-code::before{content:"\f43f"}.bi-journal-medical::before{content:"\f440"}.bi-journal-minus::before{content:"\f441"}.bi-journal-plus::before{content:"\f442"}.bi-journal-richtext::before{content:"\f443"}.bi-journal-text::before{content:"\f444"}.bi-journal-x::before{content:"\f445"}.bi-journal::before{content:"\f446"}.bi-journals::before{content:"\f447"}.bi-joystick::before{content:"\f448"}.bi-justify-left::before{content:"\f449"}.bi-justify-right::before{content:"\f44a"}.bi-justify::before{content:"\f44b"}.bi-kanban-fill::before{content:"\f44c"}.bi-kanban::before{content:"\f44d"}.bi-key-fill::before{content:"\f44e"}.bi-key::before{content:"\f44f"}.bi-keyboard-fill::before{content:"\f450"}.bi-keyboard::before{content:"\f451"}.bi-ladder::before{content:"\f452"}.bi-lamp-fill::before{content:"\f453"}.bi-lamp::before{content:"\f454"}.bi-laptop-fill::before{content:"\f455"}.bi-laptop::before{content:"\f456"}.bi-layer-backward::before{content:"\f457"}.bi-layer-forward::before{content:"\f458"}.bi-layers-fill::before{content:"\f459"}.bi-layers-half::before{content:"\f45a"}.bi-layers::before{content:"\f45b"}.bi-layout-sidebar-inset-reverse::before{content:"\f45c"}.bi-layout-sidebar-inset::before{content:"\f45d"}.bi-layout-sidebar-reverse::before{content:"\f45e"}.bi-layout-sidebar::before{content:"\f45f"}.bi-layout-split::before{content:"\f460"}.bi-layout-text-sidebar-reverse::before{content:"\f461"}.bi-layout-text-sidebar::before{content:"\f462"}.bi-layout-text-window-reverse::before{content:"\f463"}.bi-layout-text-window::before{content:"\f464"}.bi-layout-three-columns::before{content:"\f465"}.bi-layout-wtf::before{content:"\f466"}.bi-life-preserver::before{content:"\f467"}.bi-lightbulb-fill::before{content:"\f468"}.bi-lightbulb-off-fill::before{content:"\f469"}.bi-lightbulb-off::before{content:"\f46a"}.bi-lightbulb::before{content:"\f46b"}.bi-lightning-charge-fill::before{content:"\f46c"}.bi-lightning-charge::before{content:"\f46d"}.bi-lightning-fill::before{content:"\f46e"}.bi-lightning::before{content:"\f46f"}.bi-link-45deg::before{content:"\f470"}.bi-link::before{content:"\f471"}.bi-linkedin::before{content:"\f472"}.bi-list-check::before{content:"\f473"}.bi-list-nested::before{content:"\f474"}.bi-list-ol::before{content:"\f475"}.bi-list-stars::before{content:"\f476"}.bi-list-task::before{content:"\f477"}.bi-list-ul::before{content:"\f478"}.bi-list::before{content:"\f479"}.bi-lock-fill::before{content:"\f47a"}.bi-lock::before{content:"\f47b"}.bi-mailbox::before{content:"\f47c"}.bi-mailbox2::before{content:"\f47d"}.bi-map-fill::before{content:"\f47e"}.bi-map::before{content:"\f47f"}.bi-markdown-fill::before{content:"\f480"}.bi-markdown::before{content:"\f481"}.bi-mask::before{content:"\f482"}.bi-megaphone-fill::before{content:"\f483"}.bi-megaphone::before{content:"\f484"}.bi-menu-app-fill::before{content:"\f485"}.bi-menu-app::before{content:"\f486"}.bi-menu-button-fill::before{content:"\f487"}.bi-menu-button-wide-fill::before{content:"\f488"}.bi-menu-button-wide::before{content:"\f489"}.bi-menu-button::before{content:"\f48a"}.bi-menu-down::before{content:"\f48b"}.bi-menu-up::before{content:"\f48c"}.bi-mic-fill::before{content:"\f48d"}.bi-mic-mute-fill::before{content:"\f48e"}.bi-mic-mute::before{content:"\f48f"}.bi-mic::before{content:"\f490"}.bi-minecart-loaded::before{content:"\f491"}.bi-minecart::before{content:"\f492"}.bi-moisture::before{content:"\f493"}.bi-moon-fill::before{content:"\f494"}.bi-moon-stars-fill::before{content:"\f495"}.bi-moon-stars::before{content:"\f496"}.bi-moon::before{content:"\f497"}.bi-mouse-fill::before{content:"\f498"}.bi-mouse::before{content:"\f499"}.bi-mouse2-fill::before{content:"\f49a"}.bi-mouse2::before{content:"\f49b"}.bi-mouse3-fill::before{content:"\f49c"}.bi-mouse3::before{content:"\f49d"}.bi-music-note-beamed::before{content:"\f49e"}.bi-music-note-list::before{content:"\f49f"}.bi-music-note::before{content:"\f4a0"}.bi-music-player-fill::before{content:"\f4a1"}.bi-music-player::before{content:"\f4a2"}.bi-newspaper::before{content:"\f4a3"}.bi-node-minus-fill::before{content:"\f4a4"}.bi-node-minus::before{content:"\f4a5"}.bi-node-plus-fill::before{content:"\f4a6"}.bi-node-plus::before{content:"\f4a7"}.bi-nut-fill::before{content:"\f4a8"}.bi-nut::before{content:"\f4a9"}.bi-octagon-fill::before{content:"\f4aa"}.bi-octagon-half::before{content:"\f4ab"}.bi-octagon::before{content:"\f4ac"}.bi-option::before{content:"\f4ad"}.bi-outlet::before{content:"\f4ae"}.bi-paint-bucket::before{content:"\f4af"}.bi-palette-fill::before{content:"\f4b0"}.bi-palette::before{content:"\f4b1"}.bi-palette2::before{content:"\f4b2"}.bi-paperclip::before{content:"\f4b3"}.bi-paragraph::before{content:"\f4b4"}.bi-patch-check-fill::before{content:"\f4b5"}.bi-patch-check::before{content:"\f4b6"}.bi-patch-exclamation-fill::before{content:"\f4b7"}.bi-patch-exclamation::before{content:"\f4b8"}.bi-patch-minus-fill::before{content:"\f4b9"}.bi-patch-minus::before{content:"\f4ba"}.bi-patch-plus-fill::before{content:"\f4bb"}.bi-patch-plus::before{content:"\f4bc"}.bi-patch-question-fill::before{content:"\f4bd"}.bi-patch-question::before{content:"\f4be"}.bi-pause-btn-fill::before{content:"\f4bf"}.bi-pause-btn::before{content:"\f4c0"}.bi-pause-circle-fill::before{content:"\f4c1"}.bi-pause-circle::before{content:"\f4c2"}.bi-pause-fill::before{content:"\f4c3"}.bi-pause::before{content:"\f4c4"}.bi-peace-fill::before{content:"\f4c5"}.bi-peace::before{content:"\f4c6"}.bi-pen-fill::before{content:"\f4c7"}.bi-pen::before{content:"\f4c8"}.bi-pencil-fill::before{content:"\f4c9"}.bi-pencil-square::before{content:"\f4ca"}.bi-pencil::before{content:"\f4cb"}.bi-pentagon-fill::before{content:"\f4cc"}.bi-pentagon-half::before{content:"\f4cd"}.bi-pentagon::before{content:"\f4ce"}.bi-people-fill::before{content:"\f4cf"}.bi-people::before{content:"\f4d0"}.bi-percent::before{content:"\f4d1"}.bi-person-badge-fill::before{content:"\f4d2"}.bi-person-badge::before{content:"\f4d3"}.bi-person-bounding-box::before{content:"\f4d4"}.bi-person-check-fill::before{content:"\f4d5"}.bi-person-check::before{content:"\f4d6"}.bi-person-circle::before{content:"\f4d7"}.bi-person-dash-fill::before{content:"\f4d8"}.bi-person-dash::before{content:"\f4d9"}.bi-person-fill::before{content:"\f4da"}.bi-person-lines-fill::before{content:"\f4db"}.bi-person-plus-fill::before{content:"\f4dc"}.bi-person-plus::before{content:"\f4dd"}.bi-person-square::before{content:"\f4de"}.bi-person-x-fill::before{content:"\f4df"}.bi-person-x::before{content:"\f4e0"}.bi-person::before{content:"\f4e1"}.bi-phone-fill::before{content:"\f4e2"}.bi-phone-landscape-fill::before{content:"\f4e3"}.bi-phone-landscape::before{content:"\f4e4"}.bi-phone-vibrate-fill::before{content:"\f4e5"}.bi-phone-vibrate::before{content:"\f4e6"}.bi-phone::before{content:"\f4e7"}.bi-pie-chart-fill::before{content:"\f4e8"}.bi-pie-chart::before{content:"\f4e9"}.bi-pin-angle-fill::before{content:"\f4ea"}.bi-pin-angle::before{content:"\f4eb"}.bi-pin-fill::before{content:"\f4ec"}.bi-pin::before{content:"\f4ed"}.bi-pip-fill::before{content:"\f4ee"}.bi-pip::before{content:"\f4ef"}.bi-play-btn-fill::before{content:"\f4f0"}.bi-play-btn::before{content:"\f4f1"}.bi-play-circle-fill::before{content:"\f4f2"}.bi-play-circle::before{content:"\f4f3"}.bi-play-fill::before{content:"\f4f4"}.bi-play::before{content:"\f4f5"}.bi-plug-fill::before{content:"\f4f6"}.bi-plug::before{content:"\f4f7"}.bi-plus-circle-dotted::before{content:"\f4f8"}.bi-plus-circle-fill::before{content:"\f4f9"}.bi-plus-circle::before{content:"\f4fa"}.bi-plus-square-dotted::before{content:"\f4fb"}.bi-plus-square-fill::before{content:"\f4fc"}.bi-plus-square::before{content:"\f4fd"}.bi-plus::before{content:"\f4fe"}.bi-power::before{content:"\f4ff"}.bi-printer-fill::before{content:"\f500"}.bi-printer::before{content:"\f501"}.bi-puzzle-fill::before{content:"\f502"}.bi-puzzle::before{content:"\f503"}.bi-question-circle-fill::before{content:"\f504"}.bi-question-circle::before{content:"\f505"}.bi-question-diamond-fill::before{content:"\f506"}.bi-question-diamond::before{content:"\f507"}.bi-question-octagon-fill::before{content:"\f508"}.bi-question-octagon::before{content:"\f509"}.bi-question-square-fill::before{content:"\f50a"}.bi-question-square::before{content:"\f50b"}.bi-question::before{content:"\f50c"}.bi-rainbow::before{content:"\f50d"}.bi-receipt-cutoff::before{content:"\f50e"}.bi-receipt::before{content:"\f50f"}.bi-reception-0::before{content:"\f510"}.bi-reception-1::before{content:"\f511"}.bi-reception-2::before{content:"\f512"}.bi-reception-3::before{content:"\f513"}.bi-reception-4::before{content:"\f514"}.bi-record-btn-fill::before{content:"\f515"}.bi-record-btn::before{content:"\f516"}.bi-record-circle-fill::before{content:"\f517"}.bi-record-circle::before{content:"\f518"}.bi-record-fill::before{content:"\f519"}.bi-record::before{content:"\f51a"}.bi-record2-fill::before{content:"\f51b"}.bi-record2::before{content:"\f51c"}.bi-reply-all-fill::before{content:"\f51d"}.bi-reply-all::before{content:"\f51e"}.bi-reply-fill::before{content:"\f51f"}.bi-reply::before{content:"\f520"}.bi-rss-fill::before{content:"\f521"}.bi-rss::before{content:"\f522"}.bi-rulers::before{content:"\f523"}.bi-save-fill::before{content:"\f524"}.bi-save::before{content:"\f525"}.bi-save2-fill::before{content:"\f526"}.bi-save2::before{content:"\f527"}.bi-scissors::before{content:"\f528"}.bi-screwdriver::before{content:"\f529"}.bi-search::before{content:"\f52a"}.bi-segmented-nav::before{content:"\f52b"}.bi-server::before{content:"\f52c"}.bi-share-fill::before{content:"\f52d"}.bi-share::before{content:"\f52e"}.bi-shield-check::before{content:"\f52f"}.bi-shield-exclamation::before{content:"\f530"}.bi-shield-fill-check::before{content:"\f531"}.bi-shield-fill-exclamation::before{content:"\f532"}.bi-shield-fill-minus::before{content:"\f533"}.bi-shield-fill-plus::before{content:"\f534"}.bi-shield-fill-x::before{content:"\f535"}.bi-shield-fill::before{content:"\f536"}.bi-shield-lock-fill::before{content:"\f537"}.bi-shield-lock::before{content:"\f538"}.bi-shield-minus::before{content:"\f539"}.bi-shield-plus::before{content:"\f53a"}.bi-shield-shaded::before{content:"\f53b"}.bi-shield-slash-fill::before{content:"\f53c"}.bi-shield-slash::before{content:"\f53d"}.bi-shield-x::before{content:"\f53e"}.bi-shield::before{content:"\f53f"}.bi-shift-fill::before{content:"\f540"}.bi-shift::before{content:"\f541"}.bi-shop-window::before{content:"\f542"}.bi-shop::before{content:"\f543"}.bi-shuffle::before{content:"\f544"}.bi-signpost-2-fill::before{content:"\f545"}.bi-signpost-2::before{content:"\f546"}.bi-signpost-fill::before{content:"\f547"}.bi-signpost-split-fill::before{content:"\f548"}.bi-signpost-split::before{content:"\f549"}.bi-signpost::before{content:"\f54a"}.bi-sim-fill::before{content:"\f54b"}.bi-sim::before{content:"\f54c"}.bi-skip-backward-btn-fill::before{content:"\f54d"}.bi-skip-backward-btn::before{content:"\f54e"}.bi-skip-backward-circle-fill::before{content:"\f54f"}.bi-skip-backward-circle::before{content:"\f550"}.bi-skip-backward-fill::before{content:"\f551"}.bi-skip-backward::before{content:"\f552"}.bi-skip-end-btn-fill::before{content:"\f553"}.bi-skip-end-btn::before{content:"\f554"}.bi-skip-end-circle-fill::before{content:"\f555"}.bi-skip-end-circle::before{content:"\f556"}.bi-skip-end-fill::before{content:"\f557"}.bi-skip-end::before{content:"\f558"}.bi-skip-forward-btn-fill::before{content:"\f559"}.bi-skip-forward-btn::before{content:"\f55a"}.bi-skip-forward-circle-fill::before{content:"\f55b"}.bi-skip-forward-circle::before{content:"\f55c"}.bi-skip-forward-fill::before{content:"\f55d"}.bi-skip-forward::before{content:"\f55e"}.bi-skip-start-btn-fill::before{content:"\f55f"}.bi-skip-start-btn::before{content:"\f560"}.bi-skip-start-circle-fill::before{content:"\f561"}.bi-skip-start-circle::before{content:"\f562"}.bi-skip-start-fill::before{content:"\f563"}.bi-skip-start::before{content:"\f564"}.bi-slack::before{content:"\f565"}.bi-slash-circle-fill::before{content:"\f566"}.bi-slash-circle::before{content:"\f567"}.bi-slash-square-fill::before{content:"\f568"}.bi-slash-square::before{content:"\f569"}.bi-slash::before{content:"\f56a"}.bi-sliders::before{content:"\f56b"}.bi-smartwatch::before{content:"\f56c"}.bi-snow::before{content:"\f56d"}.bi-snow2::before{content:"\f56e"}.bi-snow3::before{content:"\f56f"}.bi-sort-alpha-down-alt::before{content:"\f570"}.bi-sort-alpha-down::before{content:"\f571"}.bi-sort-alpha-up-alt::before{content:"\f572"}.bi-sort-alpha-up::before{content:"\f573"}.bi-sort-down-alt::before{content:"\f574"}.bi-sort-down::before{content:"\f575"}.bi-sort-numeric-down-alt::before{content:"\f576"}.bi-sort-numeric-down::before{content:"\f577"}.bi-sort-numeric-up-alt::before{content:"\f578"}.bi-sort-numeric-up::before{content:"\f579"}.bi-sort-up-alt::before{content:"\f57a"}.bi-sort-up::before{content:"\f57b"}.bi-soundwave::before{content:"\f57c"}.bi-speaker-fill::before{content:"\f57d"}.bi-speaker::before{content:"\f57e"}.bi-speedometer::before{content:"\f57f"}.bi-speedometer2::before{content:"\f580"}.bi-spellcheck::before{content:"\f581"}.bi-square-fill::before{content:"\f582"}.bi-square-half::before{content:"\f583"}.bi-square::before{content:"\f584"}.bi-stack::before{content:"\f585"}.bi-star-fill::before{content:"\f586"}.bi-star-half::before{content:"\f587"}.bi-star::before{content:"\f588"}.bi-stars::before{content:"\f589"}.bi-stickies-fill::before{content:"\f58a"}.bi-stickies::before{content:"\f58b"}.bi-sticky-fill::before{content:"\f58c"}.bi-sticky::before{content:"\f58d"}.bi-stop-btn-fill::before{content:"\f58e"}.bi-stop-btn::before{content:"\f58f"}.bi-stop-circle-fill::before{content:"\f590"}.bi-stop-circle::before{content:"\f591"}.bi-stop-fill::before{content:"\f592"}.bi-stop::before{content:"\f593"}.bi-stoplights-fill::before{content:"\f594"}.bi-stoplights::before{content:"\f595"}.bi-stopwatch-fill::before{content:"\f596"}.bi-stopwatch::before{content:"\f597"}.bi-subtract::before{content:"\f598"}.bi-suit-club-fill::before{content:"\f599"}.bi-suit-club::before{content:"\f59a"}.bi-suit-diamond-fill::before{content:"\f59b"}.bi-suit-diamond::before{content:"\f59c"}.bi-suit-heart-fill::before{content:"\f59d"}.bi-suit-heart::before{content:"\f59e"}.bi-suit-spade-fill::before{content:"\f59f"}.bi-suit-spade::before{content:"\f5a0"}.bi-sun-fill::before{content:"\f5a1"}.bi-sun::before{content:"\f5a2"}.bi-sunglasses::before{content:"\f5a3"}.bi-sunrise-fill::before{content:"\f5a4"}.bi-sunrise::before{content:"\f5a5"}.bi-sunset-fill::before{content:"\f5a6"}.bi-sunset::before{content:"\f5a7"}.bi-symmetry-horizontal::before{content:"\f5a8"}.bi-symmetry-vertical::before{content:"\f5a9"}.bi-table::before{content:"\f5aa"}.bi-tablet-fill::before{content:"\f5ab"}.bi-tablet-landscape-fill::before{content:"\f5ac"}.bi-tablet-landscape::before{content:"\f5ad"}.bi-tablet::before{content:"\f5ae"}.bi-tag-fill::before{content:"\f5af"}.bi-tag::before{content:"\f5b0"}.bi-tags-fill::before{content:"\f5b1"}.bi-tags::before{content:"\f5b2"}.bi-telegram::before{content:"\f5b3"}.bi-telephone-fill::before{content:"\f5b4"}.bi-telephone-forward-fill::before{content:"\f5b5"}.bi-telephone-forward::before{content:"\f5b6"}.bi-telephone-inbound-fill::before{content:"\f5b7"}.bi-telephone-inbound::before{content:"\f5b8"}.bi-telephone-minus-fill::before{content:"\f5b9"}.bi-telephone-minus::before{content:"\f5ba"}.bi-telephone-outbound-fill::before{content:"\f5bb"}.bi-telephone-outbound::before{content:"\f5bc"}.bi-telephone-plus-fill::before{content:"\f5bd"}.bi-telephone-plus::before{content:"\f5be"}.bi-telephone-x-fill::before{content:"\f5bf"}.bi-telephone-x::before{content:"\f5c0"}.bi-telephone::before{content:"\f5c1"}.bi-terminal-fill::before{content:"\f5c2"}.bi-terminal::before{content:"\f5c3"}.bi-text-center::before{content:"\f5c4"}.bi-text-indent-left::before{content:"\f5c5"}.bi-text-indent-right::before{content:"\f5c6"}.bi-text-left::before{content:"\f5c7"}.bi-text-paragraph::before{content:"\f5c8"}.bi-text-right::before{content:"\f5c9"}.bi-textarea-resize::before{content:"\f5ca"}.bi-textarea-t::before{content:"\f5cb"}.bi-textarea::before{content:"\f5cc"}.bi-thermometer-half::before{content:"\f5cd"}.bi-thermometer-high::before{content:"\f5ce"}.bi-thermometer-low::before{content:"\f5cf"}.bi-thermometer-snow::before{content:"\f5d0"}.bi-thermometer-sun::before{content:"\f5d1"}.bi-thermometer::before{content:"\f5d2"}.bi-three-dots-vertical::before{content:"\f5d3"}.bi-three-dots::before{content:"\f5d4"}.bi-toggle-off::before{content:"\f5d5"}.bi-toggle-on::before{content:"\f5d6"}.bi-toggle2-off::before{content:"\f5d7"}.bi-toggle2-on::before{content:"\f5d8"}.bi-toggles::before{content:"\f5d9"}.bi-toggles2::before{content:"\f5da"}.bi-tools::before{content:"\f5db"}.bi-tornado::before{content:"\f5dc"}.bi-trash-fill::before{content:"\f5dd"}.bi-trash::before{content:"\f5de"}.bi-trash2-fill::before{content:"\f5df"}.bi-trash2::before{content:"\f5e0"}.bi-tree-fill::before{content:"\f5e1"}.bi-tree::before{content:"\f5e2"}.bi-triangle-fill::before{content:"\f5e3"}.bi-triangle-half::before{content:"\f5e4"}.bi-triangle::before{content:"\f5e5"}.bi-trophy-fill::before{content:"\f5e6"}.bi-trophy::before{content:"\f5e7"}.bi-tropical-storm::before{content:"\f5e8"}.bi-truck-flatbed::before{content:"\f5e9"}.bi-truck::before{content:"\f5ea"}.bi-tsunami::before{content:"\f5eb"}.bi-tv-fill::before{content:"\f5ec"}.bi-tv::before{content:"\f5ed"}.bi-twitch::before{content:"\f5ee"}.bi-twitter::before{content:"\f5ef"}.bi-type-bold::before{content:"\f5f0"}.bi-type-h1::before{content:"\f5f1"}.bi-type-h2::before{content:"\f5f2"}.bi-type-h3::before{content:"\f5f3"}.bi-type-italic::before{content:"\f5f4"}.bi-type-strikethrough::before{content:"\f5f5"}.bi-type-underline::before{content:"\f5f6"}.bi-type::before{content:"\f5f7"}.bi-ui-checks-grid::before{content:"\f5f8"}.bi-ui-checks::before{content:"\f5f9"}.bi-ui-radios-grid::before{content:"\f5fa"}.bi-ui-radios::before{content:"\f5fb"}.bi-umbrella-fill::before{content:"\f5fc"}.bi-umbrella::before{content:"\f5fd"}.bi-union::before{content:"\f5fe"}.bi-unlock-fill::before{content:"\f5ff"}.bi-unlock::before{content:"\f600"}.bi-upc-scan::before{content:"\f601"}.bi-upc::before{content:"\f602"}.bi-upload::before{content:"\f603"}.bi-vector-pen::before{content:"\f604"}.bi-view-list::before{content:"\f605"}.bi-view-stacked::before{content:"\f606"}.bi-vinyl-fill::before{content:"\f607"}.bi-vinyl::before{content:"\f608"}.bi-voicemail::before{content:"\f609"}.bi-volume-down-fill::before{content:"\f60a"}.bi-volume-down::before{content:"\f60b"}.bi-volume-mute-fill::before{content:"\f60c"}.bi-volume-mute::before{content:"\f60d"}.bi-volume-off-fill::before{content:"\f60e"}.bi-volume-off::before{content:"\f60f"}.bi-volume-up-fill::before{content:"\f610"}.bi-volume-up::before{content:"\f611"}.bi-vr::before{content:"\f612"}.bi-wallet-fill::before{content:"\f613"}.bi-wallet::before{content:"\f614"}.bi-wallet2::before{content:"\f615"}.bi-watch::before{content:"\f616"}.bi-water::before{content:"\f617"}.bi-whatsapp::before{content:"\f618"}.bi-wifi-1::before{content:"\f619"}.bi-wifi-2::before{content:"\f61a"}.bi-wifi-off::before{content:"\f61b"}.bi-wifi::before{content:"\f61c"}.bi-wind::before{content:"\f61d"}.bi-window-dock::before{content:"\f61e"}.bi-window-sidebar::before{content:"\f61f"}.bi-window::before{content:"\f620"}.bi-wrench::before{content:"\f621"}.bi-x-circle-fill::before{content:"\f622"}.bi-x-circle::before{content:"\f623"}.bi-x-diamond-fill::before{content:"\f624"}.bi-x-diamond::before{content:"\f625"}.bi-x-octagon-fill::before{content:"\f626"}.bi-x-octagon::before{content:"\f627"}.bi-x-square-fill::before{content:"\f628"}.bi-x-square::before{content:"\f629"}.bi-x::before{content:"\f62a"}.bi-youtube::before{content:"\f62b"}.bi-zoom-in::before{content:"\f62c"}.bi-zoom-out::before{content:"\f62d"}.bi-bank::before{content:"\f62e"}.bi-bank2::before{content:"\f62f"}.bi-bell-slash-fill::before{content:"\f630"}.bi-bell-slash::before{content:"\f631"}.bi-cash-coin::before{content:"\f632"}.bi-check-lg::before{content:"\f633"}.bi-coin::before{content:"\f634"}.bi-currency-bitcoin::before{content:"\f635"}.bi-currency-dollar::before{content:"\f636"}.bi-currency-euro::before{content:"\f637"}.bi-currency-exchange::before{content:"\f638"}.bi-currency-pound::before{content:"\f639"}.bi-currency-yen::before{content:"\f63a"}.bi-dash-lg::before{content:"\f63b"}.bi-exclamation-lg::before{content:"\f63c"}.bi-file-earmark-pdf-fill::before{content:"\f63d"}.bi-file-earmark-pdf::before{content:"\f63e"}.bi-file-pdf-fill::before{content:"\f63f"}.bi-file-pdf::before{content:"\f640"}.bi-gender-ambiguous::before{content:"\f641"}.bi-gender-female::before{content:"\f642"}.bi-gender-male::before{content:"\f643"}.bi-gender-trans::before{content:"\f644"}.bi-headset-vr::before{content:"\f645"}.bi-info-lg::before{content:"\f646"}.bi-mastodon::before{content:"\f647"}.bi-messenger::before{content:"\f648"}.bi-piggy-bank-fill::before{content:"\f649"}.bi-piggy-bank::before{content:"\f64a"}.bi-pin-map-fill::before{content:"\f64b"}.bi-pin-map::before{content:"\f64c"}.bi-plus-lg::before{content:"\f64d"}.bi-question-lg::before{content:"\f64e"}.bi-recycle::before{content:"\f64f"}.bi-reddit::before{content:"\f650"}.bi-safe-fill::before{content:"\f651"}.bi-safe2-fill::before{content:"\f652"}.bi-safe2::before{content:"\f653"}.bi-sd-card-fill::before{content:"\f654"}.bi-sd-card::before{content:"\f655"}.bi-skype::before{content:"\f656"}.bi-slash-lg::before{content:"\f657"}.bi-translate::before{content:"\f658"}.bi-x-lg::before{content:"\f659"}.bi-safe::before{content:"\f65a"}.bi-apple::before{content:"\f65b"}.bi-microsoft::before{content:"\f65d"}.bi-windows::before{content:"\f65e"}.bi-behance::before{content:"\f65c"}.bi-dribbble::before{content:"\f65f"}.bi-line::before{content:"\f660"}.bi-medium::before{content:"\f661"}.bi-paypal::before{content:"\f662"}.bi-pinterest::before{content:"\f663"}.bi-signal::before{content:"\f664"}.bi-snapchat::before{content:"\f665"}.bi-spotify::before{content:"\f666"}.bi-stack-overflow::before{content:"\f667"}.bi-strava::before{content:"\f668"}.bi-wordpress::before{content:"\f669"}.bi-vimeo::before{content:"\f66a"}.bi-activity::before{content:"\f66b"}.bi-easel2-fill::before{content:"\f66c"}.bi-easel2::before{content:"\f66d"}.bi-easel3-fill::before{content:"\f66e"}.bi-easel3::before{content:"\f66f"}.bi-fan::before{content:"\f670"}.bi-fingerprint::before{content:"\f671"}.bi-graph-down-arrow::before{content:"\f672"}.bi-graph-up-arrow::before{content:"\f673"}.bi-hypnotize::before{content:"\f674"}.bi-magic::before{content:"\f675"}.bi-person-rolodex::before{content:"\f676"}.bi-person-video::before{content:"\f677"}.bi-person-video2::before{content:"\f678"}.bi-person-video3::before{content:"\f679"}.bi-person-workspace::before{content:"\f67a"}.bi-radioactive::before{content:"\f67b"}.bi-webcam-fill::before{content:"\f67c"}.bi-webcam::before{content:"\f67d"}.bi-yin-yang::before{content:"\f67e"}.bi-bandaid-fill::before{content:"\f680"}.bi-bandaid::before{content:"\f681"}.bi-bluetooth::before{content:"\f682"}.bi-body-text::before{content:"\f683"}.bi-boombox::before{content:"\f684"}.bi-boxes::before{content:"\f685"}.bi-dpad-fill::before{content:"\f686"}.bi-dpad::before{content:"\f687"}.bi-ear-fill::before{content:"\f688"}.bi-ear::before{content:"\f689"}.bi-envelope-check-fill::before{content:"\f68b"}.bi-envelope-check::before{content:"\f68c"}.bi-envelope-dash-fill::before{content:"\f68e"}.bi-envelope-dash::before{content:"\f68f"}.bi-envelope-exclamation-fill::before{content:"\f691"}.bi-envelope-exclamation::before{content:"\f692"}.bi-envelope-plus-fill::before{content:"\f693"}.bi-envelope-plus::before{content:"\f694"}.bi-envelope-slash-fill::before{content:"\f696"}.bi-envelope-slash::before{content:"\f697"}.bi-envelope-x-fill::before{content:"\f699"}.bi-envelope-x::before{content:"\f69a"}.bi-explicit-fill::before{content:"\f69b"}.bi-explicit::before{content:"\f69c"}.bi-git::before{content:"\f69d"}.bi-infinity::before{content:"\f69e"}.bi-list-columns-reverse::before{content:"\f69f"}.bi-list-columns::before{content:"\f6a0"}.bi-meta::before{content:"\f6a1"}.bi-nintendo-switch::before{content:"\f6a4"}.bi-pc-display-horizontal::before{content:"\f6a5"}.bi-pc-display::before{content:"\f6a6"}.bi-pc-horizontal::before{content:"\f6a7"}.bi-pc::before{content:"\f6a8"}.bi-playstation::before{content:"\f6a9"}.bi-plus-slash-minus::before{content:"\f6aa"}.bi-projector-fill::before{content:"\f6ab"}.bi-projector::before{content:"\f6ac"}.bi-qr-code-scan::before{content:"\f6ad"}.bi-qr-code::before{content:"\f6ae"}.bi-quora::before{content:"\f6af"}.bi-quote::before{content:"\f6b0"}.bi-robot::before{content:"\f6b1"}.bi-send-check-fill::before{content:"\f6b2"}.bi-send-check::before{content:"\f6b3"}.bi-send-dash-fill::before{content:"\f6b4"}.bi-send-dash::before{content:"\f6b5"}.bi-send-exclamation-fill::before{content:"\f6b7"}.bi-send-exclamation::before{content:"\f6b8"}.bi-send-fill::before{content:"\f6b9"}.bi-send-plus-fill::before{content:"\f6ba"}.bi-send-plus::before{content:"\f6bb"}.bi-send-slash-fill::before{content:"\f6bc"}.bi-send-slash::before{content:"\f6bd"}.bi-send-x-fill::before{content:"\f6be"}.bi-send-x::before{content:"\f6bf"}.bi-send::before{content:"\f6c0"}.bi-steam::before{content:"\f6c1"}.bi-terminal-dash::before{content:"\f6c3"}.bi-terminal-plus::before{content:"\f6c4"}.bi-terminal-split::before{content:"\f6c5"}.bi-ticket-detailed-fill::before{content:"\f6c6"}.bi-ticket-detailed::before{content:"\f6c7"}.bi-ticket-fill::before{content:"\f6c8"}.bi-ticket-perforated-fill::before{content:"\f6c9"}.bi-ticket-perforated::before{content:"\f6ca"}.bi-ticket::before{content:"\f6cb"}.bi-tiktok::before{content:"\f6cc"}.bi-window-dash::before{content:"\f6cd"}.bi-window-desktop::before{content:"\f6ce"}.bi-window-fullscreen::before{content:"\f6cf"}.bi-window-plus::before{content:"\f6d0"}.bi-window-split::before{content:"\f6d1"}.bi-window-stack::before{content:"\f6d2"}.bi-window-x::before{content:"\f6d3"}.bi-xbox::before{content:"\f6d4"}.bi-ethernet::before{content:"\f6d5"}.bi-hdmi-fill::before{content:"\f6d6"}.bi-hdmi::before{content:"\f6d7"}.bi-usb-c-fill::before{content:"\f6d8"}.bi-usb-c::before{content:"\f6d9"}.bi-usb-fill::before{content:"\f6da"}.bi-usb-plug-fill::before{content:"\f6db"}.bi-usb-plug::before{content:"\f6dc"}.bi-usb-symbol::before{content:"\f6dd"}.bi-usb::before{content:"\f6de"}.bi-boombox-fill::before{content:"\f6df"}.bi-displayport::before{content:"\f6e1"}.bi-gpu-card::before{content:"\f6e2"}.bi-memory::before{content:"\f6e3"}.bi-modem-fill::before{content:"\f6e4"}.bi-modem::before{content:"\f6e5"}.bi-motherboard-fill::before{content:"\f6e6"}.bi-motherboard::before{content:"\f6e7"}.bi-optical-audio-fill::before{content:"\f6e8"}.bi-optical-audio::before{content:"\f6e9"}.bi-pci-card::before{content:"\f6ea"}.bi-router-fill::before{content:"\f6eb"}.bi-router::before{content:"\f6ec"}.bi-thunderbolt-fill::before{content:"\f6ef"}.bi-thunderbolt::before{content:"\f6f0"}.bi-usb-drive-fill::before{content:"\f6f1"}.bi-usb-drive::before{content:"\f6f2"}.bi-usb-micro-fill::before{content:"\f6f3"}.bi-usb-micro::before{content:"\f6f4"}.bi-usb-mini-fill::before{content:"\f6f5"}.bi-usb-mini::before{content:"\f6f6"}.bi-cloud-haze2::before{content:"\f6f7"}.bi-device-hdd-fill::before{content:"\f6f8"}.bi-device-hdd::before{content:"\f6f9"}.bi-device-ssd-fill::before{content:"\f6fa"}.bi-device-ssd::before{content:"\f6fb"}.bi-displayport-fill::before{content:"\f6fc"}.bi-mortarboard-fill::before{content:"\f6fd"}.bi-mortarboard::before{content:"\f6fe"}.bi-terminal-x::before{content:"\f6ff"}.bi-arrow-through-heart-fill::before{content:"\f700"}.bi-arrow-through-heart::before{content:"\f701"}.bi-badge-sd-fill::before{content:"\f702"}.bi-badge-sd::before{content:"\f703"}.bi-bag-heart-fill::before{content:"\f704"}.bi-bag-heart::before{content:"\f705"}.bi-balloon-fill::before{content:"\f706"}.bi-balloon-heart-fill::before{content:"\f707"}.bi-balloon-heart::before{content:"\f708"}.bi-balloon::before{content:"\f709"}.bi-box2-fill::before{content:"\f70a"}.bi-box2-heart-fill::before{content:"\f70b"}.bi-box2-heart::before{content:"\f70c"}.bi-box2::before{content:"\f70d"}.bi-braces-asterisk::before{content:"\f70e"}.bi-calendar-heart-fill::before{content:"\f70f"}.bi-calendar-heart::before{content:"\f710"}.bi-calendar2-heart-fill::before{content:"\f711"}.bi-calendar2-heart::before{content:"\f712"}.bi-chat-heart-fill::before{content:"\f713"}.bi-chat-heart::before{content:"\f714"}.bi-chat-left-heart-fill::before{content:"\f715"}.bi-chat-left-heart::before{content:"\f716"}.bi-chat-right-heart-fill::before{content:"\f717"}.bi-chat-right-heart::before{content:"\f718"}.bi-chat-square-heart-fill::before{content:"\f719"}.bi-chat-square-heart::before{content:"\f71a"}.bi-clipboard-check-fill::before{content:"\f71b"}.bi-clipboard-data-fill::before{content:"\f71c"}.bi-clipboard-fill::before{content:"\f71d"}.bi-clipboard-heart-fill::before{content:"\f71e"}.bi-clipboard-heart::before{content:"\f71f"}.bi-clipboard-minus-fill::before{content:"\f720"}.bi-clipboard-plus-fill::before{content:"\f721"}.bi-clipboard-pulse::before{content:"\f722"}.bi-clipboard-x-fill::before{content:"\f723"}.bi-clipboard2-check-fill::before{content:"\f724"}.bi-clipboard2-check::before{content:"\f725"}.bi-clipboard2-data-fill::before{content:"\f726"}.bi-clipboard2-data::before{content:"\f727"}.bi-clipboard2-fill::before{content:"\f728"}.bi-clipboard2-heart-fill::before{content:"\f729"}.bi-clipboard2-heart::before{content:"\f72a"}.bi-clipboard2-minus-fill::before{content:"\f72b"}.bi-clipboard2-minus::before{content:"\f72c"}.bi-clipboard2-plus-fill::before{content:"\f72d"}.bi-clipboard2-plus::before{content:"\f72e"}.bi-clipboard2-pulse-fill::before{content:"\f72f"}.bi-clipboard2-pulse::before{content:"\f730"}.bi-clipboard2-x-fill::before{content:"\f731"}.bi-clipboard2-x::before{content:"\f732"}.bi-clipboard2::before{content:"\f733"}.bi-emoji-kiss-fill::before{content:"\f734"}.bi-emoji-kiss::before{content:"\f735"}.bi-envelope-heart-fill::before{content:"\f736"}.bi-envelope-heart::before{content:"\f737"}.bi-envelope-open-heart-fill::before{content:"\f738"}.bi-envelope-open-heart::before{content:"\f739"}.bi-envelope-paper-fill::before{content:"\f73a"}.bi-envelope-paper-heart-fill::before{content:"\f73b"}.bi-envelope-paper-heart::before{content:"\f73c"}.bi-envelope-paper::before{content:"\f73d"}.bi-filetype-aac::before{content:"\f73e"}.bi-filetype-ai::before{content:"\f73f"}.bi-filetype-bmp::before{content:"\f740"}.bi-filetype-cs::before{content:"\f741"}.bi-filetype-css::before{content:"\f742"}.bi-filetype-csv::before{content:"\f743"}.bi-filetype-doc::before{content:"\f744"}.bi-filetype-docx::before{content:"\f745"}.bi-filetype-exe::before{content:"\f746"}.bi-filetype-gif::before{content:"\f747"}.bi-filetype-heic::before{content:"\f748"}.bi-filetype-html::before{content:"\f749"}.bi-filetype-java::before{content:"\f74a"}.bi-filetype-jpg::before{content:"\f74b"}.bi-filetype-js::before{content:"\f74c"}.bi-filetype-jsx::before{content:"\f74d"}.bi-filetype-key::before{content:"\f74e"}.bi-filetype-m4p::before{content:"\f74f"}.bi-filetype-md::before{content:"\f750"}.bi-filetype-mdx::before{content:"\f751"}.bi-filetype-mov::before{content:"\f752"}.bi-filetype-mp3::before{content:"\f753"}.bi-filetype-mp4::before{content:"\f754"}.bi-filetype-otf::before{content:"\f755"}.bi-filetype-pdf::before{content:"\f756"}.bi-filetype-php::before{content:"\f757"}.bi-filetype-png::before{content:"\f758"}.bi-filetype-ppt::before{content:"\f75a"}.bi-filetype-psd::before{content:"\f75b"}.bi-filetype-py::before{content:"\f75c"}.bi-filetype-raw::before{content:"\f75d"}.bi-filetype-rb::before{content:"\f75e"}.bi-filetype-sass::before{content:"\f75f"}.bi-filetype-scss::before{content:"\f760"}.bi-filetype-sh::before{content:"\f761"}.bi-filetype-svg::before{content:"\f762"}.bi-filetype-tiff::before{content:"\f763"}.bi-filetype-tsx::before{content:"\f764"}.bi-filetype-ttf::before{content:"\f765"}.bi-filetype-txt::before{content:"\f766"}.bi-filetype-wav::before{content:"\f767"}.bi-filetype-woff::before{content:"\f768"}.bi-filetype-xls::before{content:"\f76a"}.bi-filetype-xml::before{content:"\f76b"}.bi-filetype-yml::before{content:"\f76c"}.bi-heart-arrow::before{content:"\f76d"}.bi-heart-pulse-fill::before{content:"\f76e"}.bi-heart-pulse::before{content:"\f76f"}.bi-heartbreak-fill::before{content:"\f770"}.bi-heartbreak::before{content:"\f771"}.bi-hearts::before{content:"\f772"}.bi-hospital-fill::before{content:"\f773"}.bi-hospital::before{content:"\f774"}.bi-house-heart-fill::before{content:"\f775"}.bi-house-heart::before{content:"\f776"}.bi-incognito::before{content:"\f777"}.bi-magnet-fill::before{content:"\f778"}.bi-magnet::before{content:"\f779"}.bi-person-heart::before{content:"\f77a"}.bi-person-hearts::before{content:"\f77b"}.bi-phone-flip::before{content:"\f77c"}.bi-plugin::before{content:"\f77d"}.bi-postage-fill::before{content:"\f77e"}.bi-postage-heart-fill::before{content:"\f77f"}.bi-postage-heart::before{content:"\f780"}.bi-postage::before{content:"\f781"}.bi-postcard-fill::before{content:"\f782"}.bi-postcard-heart-fill::before{content:"\f783"}.bi-postcard-heart::before{content:"\f784"}.bi-postcard::before{content:"\f785"}.bi-search-heart-fill::before{content:"\f786"}.bi-search-heart::before{content:"\f787"}.bi-sliders2-vertical::before{content:"\f788"}.bi-sliders2::before{content:"\f789"}.bi-trash3-fill::before{content:"\f78a"}.bi-trash3::before{content:"\f78b"}.bi-valentine::before{content:"\f78c"}.bi-valentine2::before{content:"\f78d"}.bi-wrench-adjustable-circle-fill::before{content:"\f78e"}.bi-wrench-adjustable-circle::before{content:"\f78f"}.bi-wrench-adjustable::before{content:"\f790"}.bi-filetype-json::before{content:"\f791"}.bi-filetype-pptx::before{content:"\f792"}.bi-filetype-xlsx::before{content:"\f793"}.bi-1-circle-fill::before{content:"\f796"}.bi-1-circle::before{content:"\f797"}.bi-1-square-fill::before{content:"\f798"}.bi-1-square::before{content:"\f799"}.bi-2-circle-fill::before{content:"\f79c"}.bi-2-circle::before{content:"\f79d"}.bi-2-square-fill::before{content:"\f79e"}.bi-2-square::before{content:"\f79f"}.bi-3-circle-fill::before{content:"\f7a2"}.bi-3-circle::before{content:"\f7a3"}.bi-3-square-fill::before{content:"\f7a4"}.bi-3-square::before{content:"\f7a5"}.bi-4-circle-fill::before{content:"\f7a8"}.bi-4-circle::before{content:"\f7a9"}.bi-4-square-fill::before{content:"\f7aa"}.bi-4-square::before{content:"\f7ab"}.bi-5-circle-fill::before{content:"\f7ae"}.bi-5-circle::before{content:"\f7af"}.bi-5-square-fill::before{content:"\f7b0"}.bi-5-square::before{content:"\f7b1"}.bi-6-circle-fill::before{content:"\f7b4"}.bi-6-circle::before{content:"\f7b5"}.bi-6-square-fill::before{content:"\f7b6"}.bi-6-square::before{content:"\f7b7"}.bi-7-circle-fill::before{content:"\f7ba"}.bi-7-circle::before{content:"\f7bb"}.bi-7-square-fill::before{content:"\f7bc"}.bi-7-square::before{content:"\f7bd"}.bi-8-circle-fill::before{content:"\f7c0"}.bi-8-circle::before{content:"\f7c1"}.bi-8-square-fill::before{content:"\f7c2"}.bi-8-square::before{content:"\f7c3"}.bi-9-circle-fill::before{content:"\f7c6"}.bi-9-circle::before{content:"\f7c7"}.bi-9-square-fill::before{content:"\f7c8"}.bi-9-square::before{content:"\f7c9"}.bi-airplane-engines-fill::before{content:"\f7ca"}.bi-airplane-engines::before{content:"\f7cb"}.bi-airplane-fill::before{content:"\f7cc"}.bi-airplane::before{content:"\f7cd"}.bi-alexa::before{content:"\f7ce"}.bi-alipay::before{content:"\f7cf"}.bi-android::before{content:"\f7d0"}.bi-android2::before{content:"\f7d1"}.bi-box-fill::before{content:"\f7d2"}.bi-box-seam-fill::before{content:"\f7d3"}.bi-browser-chrome::before{content:"\f7d4"}.bi-browser-edge::before{content:"\f7d5"}.bi-browser-firefox::before{content:"\f7d6"}.bi-browser-safari::before{content:"\f7d7"}.bi-c-circle-fill::before{content:"\f7da"}.bi-c-circle::before{content:"\f7db"}.bi-c-square-fill::before{content:"\f7dc"}.bi-c-square::before{content:"\f7dd"}.bi-capsule-pill::before{content:"\f7de"}.bi-capsule::before{content:"\f7df"}.bi-car-front-fill::before{content:"\f7e0"}.bi-car-front::before{content:"\f7e1"}.bi-cassette-fill::before{content:"\f7e2"}.bi-cassette::before{content:"\f7e3"}.bi-cc-circle-fill::before{content:"\f7e6"}.bi-cc-circle::before{content:"\f7e7"}.bi-cc-square-fill::before{content:"\f7e8"}.bi-cc-square::before{content:"\f7e9"}.bi-cup-hot-fill::before{content:"\f7ea"}.bi-cup-hot::before{content:"\f7eb"}.bi-currency-rupee::before{content:"\f7ec"}.bi-dropbox::before{content:"\f7ed"}.bi-escape::before{content:"\f7ee"}.bi-fast-forward-btn-fill::before{content:"\f7ef"}.bi-fast-forward-btn::before{content:"\f7f0"}.bi-fast-forward-circle-fill::before{content:"\f7f1"}.bi-fast-forward-circle::before{content:"\f7f2"}.bi-fast-forward-fill::before{content:"\f7f3"}.bi-fast-forward::before{content:"\f7f4"}.bi-filetype-sql::before{content:"\f7f5"}.bi-fire::before{content:"\f7f6"}.bi-google-play::before{content:"\f7f7"}.bi-h-circle-fill::before{content:"\f7fa"}.bi-h-circle::before{content:"\f7fb"}.bi-h-square-fill::before{content:"\f7fc"}.bi-h-square::before{content:"\f7fd"}.bi-indent::before{content:"\f7fe"}.bi-lungs-fill::before{content:"\f7ff"}.bi-lungs::before{content:"\f800"}.bi-microsoft-teams::before{content:"\f801"}.bi-p-circle-fill::before{content:"\f804"}.bi-p-circle::before{content:"\f805"}.bi-p-square-fill::before{content:"\f806"}.bi-p-square::before{content:"\f807"}.bi-pass-fill::before{content:"\f808"}.bi-pass::before{content:"\f809"}.bi-prescription::before{content:"\f80a"}.bi-prescription2::before{content:"\f80b"}.bi-r-circle-fill::before{content:"\f80e"}.bi-r-circle::before{content:"\f80f"}.bi-r-square-fill::before{content:"\f810"}.bi-r-square::before{content:"\f811"}.bi-repeat-1::before{content:"\f812"}.bi-repeat::before{content:"\f813"}.bi-rewind-btn-fill::before{content:"\f814"}.bi-rewind-btn::before{content:"\f815"}.bi-rewind-circle-fill::before{content:"\f816"}.bi-rewind-circle::before{content:"\f817"}.bi-rewind-fill::before{content:"\f818"}.bi-rewind::before{content:"\f819"}.bi-train-freight-front-fill::before{content:"\f81a"}.bi-train-freight-front::before{content:"\f81b"}.bi-train-front-fill::before{content:"\f81c"}.bi-train-front::before{content:"\f81d"}.bi-train-lightrail-front-fill::before{content:"\f81e"}.bi-train-lightrail-front::before{content:"\f81f"}.bi-truck-front-fill::before{content:"\f820"}.bi-truck-front::before{content:"\f821"}.bi-ubuntu::before{content:"\f822"}.bi-unindent::before{content:"\f823"}.bi-unity::before{content:"\f824"}.bi-universal-access-circle::before{content:"\f825"}.bi-universal-access::before{content:"\f826"}.bi-virus::before{content:"\f827"}.bi-virus2::before{content:"\f828"}.bi-wechat::before{content:"\f829"}.bi-yelp::before{content:"\f82a"}.bi-sign-stop-fill::before{content:"\f82b"}.bi-sign-stop-lights-fill::before{content:"\f82c"}.bi-sign-stop-lights::before{content:"\f82d"}.bi-sign-stop::before{content:"\f82e"}.bi-sign-turn-left-fill::before{content:"\f82f"}.bi-sign-turn-left::before{content:"\f830"}.bi-sign-turn-right-fill::before{content:"\f831"}.bi-sign-turn-right::before{content:"\f832"}.bi-sign-turn-slight-left-fill::before{content:"\f833"}.bi-sign-turn-slight-left::before{content:"\f834"}.bi-sign-turn-slight-right-fill::before{content:"\f835"}.bi-sign-turn-slight-right::before{content:"\f836"}.bi-sign-yield-fill::before{content:"\f837"}.bi-sign-yield::before{content:"\f838"}.bi-ev-station-fill::before{content:"\f839"}.bi-ev-station::before{content:"\f83a"}.bi-fuel-pump-diesel-fill::before{content:"\f83b"}.bi-fuel-pump-diesel::before{content:"\f83c"}.bi-fuel-pump-fill::before{content:"\f83d"}.bi-fuel-pump::before{content:"\f83e"}.bi-0-circle-fill::before{content:"\f83f"}.bi-0-circle::before{content:"\f840"}.bi-0-square-fill::before{content:"\f841"}.bi-0-square::before{content:"\f842"}.bi-rocket-fill::before{content:"\f843"}.bi-rocket-takeoff-fill::before{content:"\f844"}.bi-rocket-takeoff::before{content:"\f845"}.bi-rocket::before{content:"\f846"}.bi-stripe::before{content:"\f847"}.bi-subscript::before{content:"\f848"}.bi-superscript::before{content:"\f849"}.bi-trello::before{content:"\f84a"}.bi-envelope-at-fill::before{content:"\f84b"}.bi-envelope-at::before{content:"\f84c"}.bi-regex::before{content:"\f84d"}.bi-text-wrap::before{content:"\f84e"}.bi-sign-dead-end-fill::before{content:"\f84f"}.bi-sign-dead-end::before{content:"\f850"}.bi-sign-do-not-enter-fill::before{content:"\f851"}.bi-sign-do-not-enter::before{content:"\f852"}.bi-sign-intersection-fill::before{content:"\f853"}.bi-sign-intersection-side-fill::before{content:"\f854"}.bi-sign-intersection-side::before{content:"\f855"}.bi-sign-intersection-t-fill::before{content:"\f856"}.bi-sign-intersection-t::before{content:"\f857"}.bi-sign-intersection-y-fill::before{content:"\f858"}.bi-sign-intersection-y::before{content:"\f859"}.bi-sign-intersection::before{content:"\f85a"}.bi-sign-merge-left-fill::before{content:"\f85b"}.bi-sign-merge-left::before{content:"\f85c"}.bi-sign-merge-right-fill::before{content:"\f85d"}.bi-sign-merge-right::before{content:"\f85e"}.bi-sign-no-left-turn-fill::before{content:"\f85f"}.bi-sign-no-left-turn::before{content:"\f860"}.bi-sign-no-parking-fill::before{content:"\f861"}.bi-sign-no-parking::before{content:"\f862"}.bi-sign-no-right-turn-fill::before{content:"\f863"}.bi-sign-no-right-turn::before{content:"\f864"}.bi-sign-railroad-fill::before{content:"\f865"}.bi-sign-railroad::before{content:"\f866"}.bi-building-add::before{content:"\f867"}.bi-building-check::before{content:"\f868"}.bi-building-dash::before{content:"\f869"}.bi-building-down::before{content:"\f86a"}.bi-building-exclamation::before{content:"\f86b"}.bi-building-fill-add::before{content:"\f86c"}.bi-building-fill-check::before{content:"\f86d"}.bi-building-fill-dash::before{content:"\f86e"}.bi-building-fill-down::before{content:"\f86f"}.bi-building-fill-exclamation::before{content:"\f870"}.bi-building-fill-gear::before{content:"\f871"}.bi-building-fill-lock::before{content:"\f872"}.bi-building-fill-slash::before{content:"\f873"}.bi-building-fill-up::before{content:"\f874"}.bi-building-fill-x::before{content:"\f875"}.bi-building-fill::before{content:"\f876"}.bi-building-gear::before{content:"\f877"}.bi-building-lock::before{content:"\f878"}.bi-building-slash::before{content:"\f879"}.bi-building-up::before{content:"\f87a"}.bi-building-x::before{content:"\f87b"}.bi-buildings-fill::before{content:"\f87c"}.bi-buildings::before{content:"\f87d"}.bi-bus-front-fill::before{content:"\f87e"}.bi-bus-front::before{content:"\f87f"}.bi-ev-front-fill::before{content:"\f880"}.bi-ev-front::before{content:"\f881"}.bi-globe-americas::before{content:"\f882"}.bi-globe-asia-australia::before{content:"\f883"}.bi-globe-central-south-asia::before{content:"\f884"}.bi-globe-europe-africa::before{content:"\f885"}.bi-house-add-fill::before{content:"\f886"}.bi-house-add::before{content:"\f887"}.bi-house-check-fill::before{content:"\f888"}.bi-house-check::before{content:"\f889"}.bi-house-dash-fill::before{content:"\f88a"}.bi-house-dash::before{content:"\f88b"}.bi-house-down-fill::before{content:"\f88c"}.bi-house-down::before{content:"\f88d"}.bi-house-exclamation-fill::before{content:"\f88e"}.bi-house-exclamation::before{content:"\f88f"}.bi-house-gear-fill::before{content:"\f890"}.bi-house-gear::before{content:"\f891"}.bi-house-lock-fill::before{content:"\f892"}.bi-house-lock::before{content:"\f893"}.bi-house-slash-fill::before{content:"\f894"}.bi-house-slash::before{content:"\f895"}.bi-house-up-fill::before{content:"\f896"}.bi-house-up::before{content:"\f897"}.bi-house-x-fill::before{content:"\f898"}.bi-house-x::before{content:"\f899"}.bi-person-add::before{content:"\f89a"}.bi-person-down::before{content:"\f89b"}.bi-person-exclamation::before{content:"\f89c"}.bi-person-fill-add::before{content:"\f89d"}.bi-person-fill-check::before{content:"\f89e"}.bi-person-fill-dash::before{content:"\f89f"}.bi-person-fill-down::before{content:"\f8a0"}.bi-person-fill-exclamation::before{content:"\f8a1"}.bi-person-fill-gear::before{content:"\f8a2"}.bi-person-fill-lock::before{content:"\f8a3"}.bi-person-fill-slash::before{content:"\f8a4"}.bi-person-fill-up::before{content:"\f8a5"}.bi-person-fill-x::before{content:"\f8a6"}.bi-person-gear::before{content:"\f8a7"}.bi-person-lock::before{content:"\f8a8"}.bi-person-slash::before{content:"\f8a9"}.bi-person-up::before{content:"\f8aa"}.bi-scooter::before{content:"\f8ab"}.bi-taxi-front-fill::before{content:"\f8ac"}.bi-taxi-front::before{content:"\f8ad"}.bi-amd::before{content:"\f8ae"}.bi-database-add::before{content:"\f8af"}.bi-database-check::before{content:"\f8b0"}.bi-database-dash::before{content:"\f8b1"}.bi-database-down::before{content:"\f8b2"}.bi-database-exclamation::before{content:"\f8b3"}.bi-database-fill-add::before{content:"\f8b4"}.bi-database-fill-check::before{content:"\f8b5"}.bi-database-fill-dash::before{content:"\f8b6"}.bi-database-fill-down::before{content:"\f8b7"}.bi-database-fill-exclamation::before{content:"\f8b8"}.bi-database-fill-gear::before{content:"\f8b9"}.bi-database-fill-lock::before{content:"\f8ba"}.bi-database-fill-slash::before{content:"\f8bb"}.bi-database-fill-up::before{content:"\f8bc"}.bi-database-fill-x::before{content:"\f8bd"}.bi-database-fill::before{content:"\f8be"}.bi-database-gear::before{content:"\f8bf"}.bi-database-lock::before{content:"\f8c0"}.bi-database-slash::before{content:"\f8c1"}.bi-database-up::before{content:"\f8c2"}.bi-database-x::before{content:"\f8c3"}.bi-database::before{content:"\f8c4"}.bi-houses-fill::before{content:"\f8c5"}.bi-houses::before{content:"\f8c6"}.bi-nvidia::before{content:"\f8c7"}.bi-person-vcard-fill::before{content:"\f8c8"}.bi-person-vcard::before{content:"\f8c9"}.bi-sina-weibo::before{content:"\f8ca"}.bi-tencent-qq::before{content:"\f8cb"}.bi-wikipedia::before{content:"\f8cc"}.bi-alphabet-uppercase::before{content:"\f2a5"}.bi-alphabet::before{content:"\f68a"}.bi-amazon::before{content:"\f68d"}.bi-arrows-collapse-vertical::before{content:"\f690"}.bi-arrows-expand-vertical::before{content:"\f695"}.bi-arrows-vertical::before{content:"\f698"}.bi-arrows::before{content:"\f6a2"}.bi-ban-fill::before{content:"\f6a3"}.bi-ban::before{content:"\f6b6"}.bi-bing::before{content:"\f6c2"}.bi-cake::before{content:"\f6e0"}.bi-cake2::before{content:"\f6ed"}.bi-cookie::before{content:"\f6ee"}.bi-copy::before{content:"\f759"}.bi-crosshair::before{content:"\f769"}.bi-crosshair2::before{content:"\f794"}.bi-emoji-astonished-fill::before{content:"\f795"}.bi-emoji-astonished::before{content:"\f79a"}.bi-emoji-grimace-fill::before{content:"\f79b"}.bi-emoji-grimace::before{content:"\f7a0"}.bi-emoji-grin-fill::before{content:"\f7a1"}.bi-emoji-grin::before{content:"\f7a6"}.bi-emoji-surprise-fill::before{content:"\f7a7"}.bi-emoji-surprise::before{content:"\f7ac"}.bi-emoji-tear-fill::before{content:"\f7ad"}.bi-emoji-tear::before{content:"\f7b2"}.bi-envelope-arrow-down-fill::before{content:"\f7b3"}.bi-envelope-arrow-down::before{content:"\f7b8"}.bi-envelope-arrow-up-fill::before{content:"\f7b9"}.bi-envelope-arrow-up::before{content:"\f7be"}.bi-feather::before{content:"\f7bf"}.bi-feather2::before{content:"\f7c4"}.bi-floppy-fill::before{content:"\f7c5"}.bi-floppy::before{content:"\f7d8"}.bi-floppy2-fill::before{content:"\f7d9"}.bi-floppy2::before{content:"\f7e4"}.bi-gitlab::before{content:"\f7e5"}.bi-highlighter::before{content:"\f7f8"}.bi-marker-tip::before{content:"\f802"}.bi-nvme-fill::before{content:"\f803"}.bi-nvme::before{content:"\f80c"}.bi-opencollective::before{content:"\f80d"}.bi-pci-card-network::before{content:"\f8cd"}.bi-pci-card-sound::before{content:"\f8ce"}.bi-radar::before{content:"\f8cf"}.bi-send-arrow-down-fill::before{content:"\f8d0"}.bi-send-arrow-down::before{content:"\f8d1"}.bi-send-arrow-up-fill::before{content:"\f8d2"}.bi-send-arrow-up::before{content:"\f8d3"}.bi-sim-slash-fill::before{content:"\f8d4"}.bi-sim-slash::before{content:"\f8d5"}.bi-sourceforge::before{content:"\f8d6"}.bi-substack::before{content:"\f8d7"}.bi-threads-fill::before{content:"\f8d8"}.bi-threads::before{content:"\f8d9"}.bi-transparency::before{content:"\f8da"}.bi-twitter-x::before{content:"\f8db"}.bi-type-h4::before{content:"\f8dc"}.bi-type-h5::before{content:"\f8dd"}.bi-type-h6::before{content:"\f8de"}.bi-backpack-fill::before{content:"\f8df"}.bi-backpack::before{content:"\f8e0"}.bi-backpack2-fill::before{content:"\f8e1"}.bi-backpack2::before{content:"\f8e2"}.bi-backpack3-fill::before{content:"\f8e3"}.bi-backpack3::before{content:"\f8e4"}.bi-backpack4-fill::before{content:"\f8e5"}.bi-backpack4::before{content:"\f8e6"}.bi-brilliance::before{content:"\f8e7"}.bi-cake-fill::before{content:"\f8e8"}.bi-cake2-fill::before{content:"\f8e9"}.bi-duffle-fill::before{content:"\f8ea"}.bi-duffle::before{content:"\f8eb"}.bi-exposure::before{content:"\f8ec"}.bi-gender-neuter::before{content:"\f8ed"}.bi-highlights::before{content:"\f8ee"}.bi-luggage-fill::before{content:"\f8ef"}.bi-luggage::before{content:"\f8f0"}.bi-mailbox-flag::before{content:"\f8f1"}.bi-mailbox2-flag::before{content:"\f8f2"}.bi-noise-reduction::before{content:"\f8f3"}.bi-passport-fill::before{content:"\f8f4"}.bi-passport::before{content:"\f8f5"}.bi-person-arms-up::before{content:"\f8f6"}.bi-person-raised-hand::before{content:"\f8f7"}.bi-person-standing-dress::before{content:"\f8f8"}.bi-person-standing::before{content:"\f8f9"}.bi-person-walking::before{content:"\f8fa"}.bi-person-wheelchair::before{content:"\f8fb"}.bi-shadows::before{content:"\f8fc"}.bi-suitcase-fill::before{content:"\f8fd"}.bi-suitcase-lg-fill::before{content:"\f8fe"}.bi-suitcase-lg::before{content:"\f8ff"}.bi-suitcase::before{content:"\f900"}.bi-suitcase2-fill::before{content:"\f901"}.bi-suitcase2::before{content:"\f902"}.bi-vignette::before{content:"\f903"}.bi-bluesky::before{content:"\f7f9"}.bi-tux::before{content:"\f904"}.bi-beaker-fill::before{content:"\f905"}.bi-beaker::before{content:"\f906"}.bi-flask-fill::before{content:"\f907"}.bi-flask-florence-fill::before{content:"\f908"}.bi-flask-florence::before{content:"\f909"}.bi-flask::before{content:"\f90a"}.bi-leaf-fill::before{content:"\f90b"}.bi-leaf::before{content:"\f90c"}.bi-measuring-cup-fill::before{content:"\f90d"}.bi-measuring-cup::before{content:"\f90e"}.bi-unlock2-fill::before{content:"\f90f"}.bi-unlock2::before{content:"\f910"}.bi-battery-low::before{content:"\f911"}.bi-anthropic::before{content:"\f912"}.bi-apple-music::before{content:"\f913"}.bi-claude::before{content:"\f914"}.bi-openai::before{content:"\f915"}.bi-perplexity::before{content:"\f916"}.bi-css::before{content:"\f917"}.bi-javascript::before{content:"\f918"}.bi-typescript::before{content:"\f919"}.bi-fork-knife::before{content:"\f91a"}.bi-globe-americas-fill::before{content:"\f91b"}.bi-globe-asia-australia-fill::before{content:"\f91c"}.bi-globe-central-south-asia-fill::before{content:"\f91d"}.bi-globe-europe-africa-fill::before{content:"\f91e"} \ No newline at end of file diff --git a/src/web/public/adminlte/bootstrap-icons/css/fonts/bootstrap-icons.woff b/src/web/public/adminlte/bootstrap-icons/css/fonts/bootstrap-icons.woff index 51204d2..a4fa4f0 100644 Binary files a/src/web/public/adminlte/bootstrap-icons/css/fonts/bootstrap-icons.woff and b/src/web/public/adminlte/bootstrap-icons/css/fonts/bootstrap-icons.woff differ diff --git a/src/web/public/adminlte/bootstrap-icons/css/fonts/bootstrap-icons.woff2 b/src/web/public/adminlte/bootstrap-icons/css/fonts/bootstrap-icons.woff2 index 92c4830..4d8c490 100644 Binary files a/src/web/public/adminlte/bootstrap-icons/css/fonts/bootstrap-icons.woff2 and b/src/web/public/adminlte/bootstrap-icons/css/fonts/bootstrap-icons.woff2 differ diff --git a/src/web/public/adminlte/bootstrap-icons/fonts/bootstrap-icons.woff b/src/web/public/adminlte/bootstrap-icons/fonts/bootstrap-icons.woff deleted file mode 100644 index 51204d2..0000000 Binary files a/src/web/public/adminlte/bootstrap-icons/fonts/bootstrap-icons.woff and /dev/null differ diff --git a/src/web/public/adminlte/bootstrap-icons/fonts/bootstrap-icons.woff2 b/src/web/public/adminlte/bootstrap-icons/fonts/bootstrap-icons.woff2 deleted file mode 100644 index 92c4830..0000000 Binary files a/src/web/public/adminlte/bootstrap-icons/fonts/bootstrap-icons.woff2 and /dev/null differ diff --git a/src/web/public/css/theme-custom.css b/src/web/public/css/theme-custom.css index 868f0b1..6362f4c 100644 --- a/src/web/public/css/theme-custom.css +++ b/src/web/public/css/theme-custom.css @@ -163,6 +163,37 @@ opacity: 0.8; } +.settings-nav-card { + position: sticky; + top: 1rem; +} + +.settings-section-card h4.text-uppercase { + color: var(--bs-emphasis-color) !important; + font-size: 0.86rem; + font-weight: 700; + letter-spacing: 0.04em; + margin-top: 0.25rem; +} + +.settings-audit-retention-input { + max-width: 18rem; +} + +.settings-audit-category-label { + color: var(--bs-secondary-color); + font-size: 0.75rem; + font-weight: 600; + letter-spacing: 0.06em; + text-transform: uppercase; +} + +@media (max-width: 991.98px) { + .settings-nav-card { + position: static; + } +} + .card { box-shadow: none; } @@ -263,6 +294,12 @@ border-bottom-width: 0; } +.rbac-permissions-table > thead > tr > * { + background-color: var(--bs-tertiary-bg) !important; + color: var(--bs-emphasis-color) !important; + border-bottom-color: var(--bs-border-color) !important; +} + .template-designer-form--previewing .region-item [disabled], .template-designer-form--previewing .template-details-card [disabled], .template-designer-form--previewing .template-options-card [disabled], @@ -405,6 +442,11 @@ border-radius: 1rem; background: var(--bs-body-bg); box-shadow: 0 1rem 2rem rgba(15, 23, 42, 0.18); + display: flex; + flex-direction: column; + gap: 0.75rem; + max-height: min(32rem, calc(100vh - 3rem)); + overflow: hidden; } .announcement-type-picker__menu { @@ -437,15 +479,61 @@ align-items: center; justify-content: space-between; gap: 0.75rem; - margin-bottom: 0.75rem; font-size: 0.875rem; font-weight: 700; } +.announcement-icon-picker__search { + flex: 0 0 auto; +} + +.announcement-icon-picker__search .input-group-text { + background: var(--bs-body-bg); + color: var(--bs-secondary-color); +} + +.announcement-icon-picker__section { + display: flex; + flex-direction: column; + gap: 0.5rem; + min-height: 0; +} + +.announcement-icon-picker__section-header { + display: flex; + align-items: center; + justify-content: space-between; + gap: 0.75rem; + color: var(--bs-secondary-color); + font-size: 0.75rem; + font-weight: 700; + letter-spacing: 0.05em; + text-transform: uppercase; +} + +.announcement-icon-picker__section-count { + font-size: 0.7rem; + letter-spacing: 0; + text-transform: none; +} + .announcement-icon-picker__grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(2.75rem, 1fr)); gap: 0.5rem; + align-content: start; +} + +.announcement-icon-picker__search-grid { + max-height: none; + overflow: hidden; + padding-right: 0; +} + +.announcement-icon-picker__search-empty { + color: var(--bs-secondary-color); + font-size: 0.875rem; + line-height: 1.35; } .announcement-type-picker__grid { @@ -742,6 +830,10 @@ overflow: auto; } +[data-table-pagination-card] > .card-header { + flex: 0 0 auto; +} + [data-table-pagination-card] > .card-footer { margin-top: auto; background: var(--bs-body-bg); @@ -752,6 +844,18 @@ box-shadow: none; } +.account-lock-label-locked { + display: none; +} + +.btn-check:checked + label .account-lock-label-unlocked { + display: none; +} + +.btn-check:checked + label .account-lock-label-locked { + display: inline; +} + .admin-form-card .card-header { background: var(--bs-tertiary-bg); } diff --git a/src/web/public/js/admin/admin-page.js b/src/web/public/js/admin/admin-page.js index 5e2c9c5..27a7c13 100644 --- a/src/web/public/js/admin/admin-page.js +++ b/src/web/public/js/admin/admin-page.js @@ -441,6 +441,21 @@ }); } + try { + form.dispatchEvent(new CustomEvent('web-async-save:success', { + bubbles: true, + detail: { + form: form, + response: response, + responseText: responseText, + responseDocument: responseDocument, + submitterValue: submitterValue + } + })); + } catch (_error) { + // Ignore event dispatch failures and continue the save flow. + } + clearFormDirty(form); if (submitterValue === 'close' || submitterValue === 'new') { diff --git a/src/web/public/js/announcements/announcement-form.js b/src/web/public/js/announcements/announcement-form.js index df98f1b..16869aa 100644 --- a/src/web/public/js/announcements/announcement-form.js +++ b/src/web/public/js/announcements/announcement-form.js @@ -39,6 +39,63 @@ function setAnnouncementScreenSelection(isSelected) { }); } +function getAnnouncementActionButtonState() { + var actionForm = document.getElementById('announcement-action-form'); + var visibleButton = document.querySelector('button[form="announcement-action-form"]'); + var actionPath = actionForm ? String(actionForm.getAttribute('action') || '').trim() : ''; + var isPlay = /\/play$/.test(actionPath); + var isActive = !isPlay; + var selectedScreenCount = document.querySelectorAll('input[name="screen_ids[]"]:checked').length; + + return { + visibleButton: visibleButton, + actionForm: actionForm, + isActive: isActive, + hasTargets: selectedScreenCount > 0, + actionDisabled: !isActive && selectedScreenCount === 0, + actionLabel: isActive ? 'Stop' : 'Play', + actionIcon: isActive ? 'bi-stop-fill' : 'bi-play-fill', + actionClassName: !isActive && selectedScreenCount === 0 + ? 'btn-outline-info' + : (isActive ? 'btn-outline-warning' : 'btn-info'), + actionDisabledTitle: !isActive && selectedScreenCount === 0 + ? 'Select at least one screen group to play this announcement.' + : '', + actionConfirmMessage: isActive + ? 'Stop this announcement on the selected screens now?' + : 'Send this announcement to the selected screens now?' + }; +} + +function updateAnnouncementActionButtonState() { + var state = getAnnouncementActionButtonState(); + if (!state.visibleButton) { + return; + } + + state.visibleButton.className = state.visibleButton.className.replace(/btn-outline-(info|warning|success)|btn-info/g, state.actionClassName); + state.visibleButton.disabled = state.actionDisabled; + state.visibleButton.setAttribute('aria-disabled', state.actionDisabled ? 'true' : 'false'); + state.visibleButton.setAttribute('title', state.actionDisabled ? state.actionDisabledTitle : state.actionConfirmMessage); + state.visibleButton.setAttribute('aria-label', state.actionLabel); + + var icon = state.visibleButton.querySelector('i.bi'); + if (icon) { + icon.className = 'bi ' + state.actionIcon + ' me-1'; + } + + var label = state.visibleButton.childNodes.length > 1 ? state.visibleButton.childNodes[state.visibleButton.childNodes.length - 1] : null; + if (label && label.nodeType === Node.TEXT_NODE) { + label.textContent = state.actionLabel; + } else { + state.visibleButton.textContent = state.actionLabel; + } + + if (state.actionForm) { + state.actionForm.setAttribute('data-confirm-message', state.actionConfirmMessage); + } +} + function positionAnnouncementTypePicker() { var picker = document.querySelector('[data-announcement-type-picker]'); var toggle = document.querySelector('[data-announcement-type-picker-toggle]'); @@ -141,125 +198,6 @@ function setAnnouncementTypeValue(typeKey) { updateAnnouncementTypePickerSelection(); } -function updateAnnouncementIconPreview() { - var iconSelect = document.getElementById('announcement-icon'); - var preview = document.querySelector('[data-announcement-icon-preview]'); - if (!iconSelect || !preview) { - return; - } - - var selectedOption = iconSelect.options[iconSelect.selectedIndex] || null; - var iconKey = selectedOption ? String(selectedOption.value || '').trim().toLowerCase() : ''; - var label = selectedOption ? String(selectedOption.textContent || selectedOption.label || iconKey).trim() : iconKey; - - preview.className = 'announcement-icon-preview'; - preview.innerHTML = ''; - preview.setAttribute('aria-label', label); - preview.setAttribute('title', label); -} - -function positionAnnouncementIconPicker() { - var picker = document.querySelector('[data-announcement-icon-picker]'); - var toggle = document.querySelector('[data-announcement-icon-picker-toggle]'); - var shell = document.querySelector('[data-announcement-icon-picker-shell]'); - if (!picker || picker.hidden || !toggle || !shell) { - return; - } - - var padding = 8; - var toggleRect = toggle.getBoundingClientRect(); - var menuRect = picker.getBoundingClientRect(); - var viewportHeight = window.innerHeight || document.documentElement.clientHeight || toggleRect.bottom; - var placementAbove = false; - var spaceBelow = viewportHeight - toggleRect.bottom - padding; - var spaceAbove = toggleRect.top - padding; - - if (menuRect.height > spaceBelow && spaceAbove > spaceBelow) { - placementAbove = true; - } - - picker.classList.toggle('is-open-above', placementAbove); -} - -function closeAnnouncementIconPicker() { - var picker = document.querySelector('[data-announcement-icon-picker]'); - var toggle = document.querySelector('[data-announcement-icon-picker-toggle]'); - if (!picker) { - return; - } - - picker.hidden = true; - picker.classList.remove('is-open-above'); - if (toggle) { - toggle.setAttribute('aria-expanded', 'false'); - } -} - -function openAnnouncementIconPicker() { - var picker = document.querySelector('[data-announcement-icon-picker]'); - var toggle = document.querySelector('[data-announcement-icon-picker-toggle]'); - if (!picker) { - return; - } - - picker.hidden = false; - if (toggle) { - toggle.setAttribute('aria-expanded', 'true'); - } - - if (typeof window !== 'undefined' && window.requestAnimationFrame) { - window.requestAnimationFrame(positionAnnouncementIconPicker); - } else { - positionAnnouncementIconPicker(); - } -} - -function updateAnnouncementIconPickerSelection() { - var iconSelect = document.getElementById('announcement-icon'); - var previewButton = document.querySelector('[data-announcement-icon-picker-toggle]'); - var picker = document.querySelector('[data-announcement-icon-picker]'); - if (!iconSelect || !previewButton || !picker) { - return; - } - - var selectedOption = iconSelect.options[iconSelect.selectedIndex] || null; - var selectedValue = selectedOption ? String(selectedOption.value || '').trim().toLowerCase() : ''; - var label = selectedOption ? String(selectedOption.textContent || selectedOption.label || selectedValue).trim() : selectedValue; - var icon = previewButton.querySelector('[data-announcement-icon-picker-icon]'); - var text = previewButton.querySelector('[data-announcement-icon-picker-label]'); - - previewButton.setAttribute('aria-label', label); - previewButton.setAttribute('title', label); - if (icon) { - icon.className = 'bi bi-' + selectedValue; - } - if (text) { - text.textContent = label; - } - - picker.querySelectorAll('[data-announcement-icon-option]').forEach(function (button) { - var isSelected = String(button.getAttribute('data-icon-key') || '').trim().toLowerCase() === selectedValue; - button.classList.toggle('is-selected', isSelected); - button.setAttribute('aria-pressed', isSelected ? 'true' : 'false'); - }); -} - -function setAnnouncementIconValue(iconKey) { - var iconSelect = document.getElementById('announcement-icon'); - if (!iconSelect) { - return; - } - - var normalized = String(iconKey || '').trim().toLowerCase(); - if (!normalized) { - return; - } - - iconSelect.value = normalized; - updateAnnouncementIconPreview(); - updateAnnouncementIconPickerSelection(); -} - function initAnnouncementForm() { var typeInput = document.getElementById('announcement-type'); var typePickerToggle = document.querySelector('[data-announcement-type-picker-toggle]'); @@ -270,10 +208,6 @@ function initAnnouncementForm() { var colorPicker = document.querySelector('[data-announcement-color-picker-shell]'); var screenSelectAll = document.querySelector('[data-announcement-screen-select-all]'); var screenSelectNone = document.querySelector('[data-announcement-screen-select-none]'); - var iconSelect = document.getElementById('announcement-icon'); - var iconPickerToggle = document.querySelector('[data-announcement-icon-picker-toggle]'); - var iconPicker = document.querySelector('[data-announcement-icon-picker]'); - var iconPickerClose = document.querySelector('[data-announcement-icon-picker-close]'); if (typeInput) { updateAnnouncementTypePickerSelection(); @@ -347,44 +281,16 @@ function initAnnouncementForm() { }); } - if (iconSelect) { - iconSelect.addEventListener('change', updateAnnouncementIconPreview); - updateAnnouncementIconPreview(); - } + document.addEventListener('web-async-save:success', function (event) { + var detail = event && event.detail ? event.detail : null; + var form = detail && detail.form ? detail.form : null; + if (!form || form.id !== 'announcement-form') { + return; + } - if (iconPickerToggle) { - iconPickerToggle.addEventListener('click', function (event) { - event.preventDefault(); - var isExpanded = iconPicker && !iconPicker.hidden; - if (isExpanded) { - closeAnnouncementIconPicker(); - } else { - openAnnouncementIconPicker(); - } - }); - } + updateAnnouncementActionButtonState(); + }); - if (iconPickerClose) { - iconPickerClose.addEventListener('click', function (event) { - event.preventDefault(); - closeAnnouncementIconPicker(); - }); - } - - if (iconPicker) { - iconPicker.addEventListener('click', function (event) { - var button = event.target && event.target.closest ? event.target.closest('[data-announcement-icon-option]') : null; - if (!button) { - return; - } - - event.preventDefault(); - setAnnouncementIconValue(button.getAttribute('data-icon-key')); - closeAnnouncementIconPicker(); - }); - } - - window.addEventListener('resize', positionAnnouncementIconPicker); window.addEventListener('resize', positionAnnouncementTypePicker); document.addEventListener('click', function (event) { @@ -396,20 +302,9 @@ function initAnnouncementForm() { } } - var picker = document.querySelector('[data-announcement-icon-picker]'); - var toggle = document.querySelector('[data-announcement-icon-picker-toggle]'); - if (!picker || picker.hidden) { - return; - } - - if (picker.contains(event.target) || (toggle && toggle.contains(event.target))) { - return; - } - - closeAnnouncementIconPicker(); }); - updateAnnouncementIconPickerSelection(); + updateAnnouncementActionButtonState(); } if (typeof document !== 'undefined') { diff --git a/src/web/public/js/icon-picker.js b/src/web/public/js/icon-picker.js new file mode 100644 index 0000000..b1601e7 --- /dev/null +++ b/src/web/public/js/icon-picker.js @@ -0,0 +1,111 @@ +(function () { + 'use strict'; + + function initIconPicker(root) { + var select = root.querySelector('select'); + var toggle = root.querySelector('[data-icon-picker-toggle]'); + var menu = root.querySelector('[data-icon-picker-menu]'); + var preview = root.querySelector('[data-icon-picker-preview]'); + var label = root.querySelector('[data-icon-picker-label]'); + var search = root.querySelector('[data-icon-picker-search]'); + var close = root.querySelector('[data-icon-picker-close]'); + var grid = root.querySelector('[data-icon-picker-grid]'); + var empty = root.querySelector('[data-icon-picker-empty]'); + var initialOptions = Array.prototype.slice.call(root.querySelectorAll('[data-icon-picker-option]')); + + if (!select || !toggle || !menu || !grid) { + return; + } + + function catalogOptions() { + return Array.prototype.slice.call(select.options).map(function (option) { + return { value: option.value, label: option.textContent || option.label || option.value }; + }); + } + + function createOption(option, selectedValue) { + var button = document.createElement('button'); + button.type = 'button'; + button.className = 'announcement-icon-picker__option'; + button.setAttribute('data-icon-picker-option', ''); + button.setAttribute('data-icon-key', option.value); + button.setAttribute('data-icon-label', option.label); + button.setAttribute('aria-pressed', option.value === selectedValue ? 'true' : 'false'); + button.title = option.label; + button.innerHTML = ''; + return button; + } + + function getOptionLimit() { + var firstOption = grid.querySelector('[data-icon-picker-option]'); + var gridStyle = window.getComputedStyle(grid); + var gap = parseFloat(gridStyle.columnGap || gridStyle.gap || '0') || 0; + var optionWidth = firstOption ? firstOption.getBoundingClientRect().width : 0; + var columns = optionWidth && grid.clientWidth + ? Math.max(1, Math.floor((grid.clientWidth + gap) / (optionWidth + gap))) + : 4; + return columns * 6; + } + + function updatePreview() { + var option = select.options[select.selectedIndex]; + var value = option ? option.value : ''; + if (preview) { + preview.className = 'announcement-icon-picker__toggle-icon bi bi-' + value; + } + if (label) { + label.textContent = option ? option.textContent : 'Select an icon'; + } + root.querySelectorAll('[data-icon-picker-option]').forEach(function (optionButton) { + var selected = optionButton.getAttribute('data-icon-key') === value; + optionButton.classList.toggle('is-selected', selected); + optionButton.setAttribute('aria-pressed', selected ? 'true' : 'false'); + }); + } + + function render(query) { + var normalizedQuery = String(query || '').trim().toLowerCase(); + var selectedValue = String(select.value || '').trim(); + var options = normalizedQuery + ? catalogOptions().filter(function (option) { return (option.value + ' ' + option.label).toLowerCase().indexOf(normalizedQuery) !== -1; }) + : initialOptions.map(function (option) { return { value: option.getAttribute('data-icon-key') || '', label: option.getAttribute('data-icon-label') || '' }; }); + var visibleOptions = options.slice(0, getOptionLimit()); + grid.innerHTML = ''; + visibleOptions.forEach(function (option) { grid.appendChild(createOption(option, selectedValue)); }); + if (empty) empty.hidden = options.length > 0; + updatePreview(); + } + + function closeMenu() { + menu.hidden = true; + toggle.setAttribute('aria-expanded', 'false'); + } + + toggle.addEventListener('click', function (event) { + event.preventDefault(); + menu.hidden = !menu.hidden; + toggle.setAttribute('aria-expanded', menu.hidden ? 'false' : 'true'); + if (!menu.hidden) { + render(search ? search.value : ''); + if (search) search.focus(); + } + }); + if (close) close.addEventListener('click', function (event) { event.preventDefault(); closeMenu(); }); + grid.addEventListener('click', function (event) { + var option = event.target.closest ? event.target.closest('[data-icon-picker-option]') : null; + if (!option) return; + select.value = option.getAttribute('data-icon-key') || ''; + select.dispatchEvent(new Event('change', { bubbles: true })); + closeMenu(); + }); + if (search) search.addEventListener('input', function () { render(search.value); }); + select.addEventListener('change', updatePreview); + document.addEventListener('click', function (event) { + if (!menu.hidden && !root.contains(event.target)) closeMenu(); + }); + updatePreview(); + } + + window.PulseIconPicker = { init: initIconPicker }; + document.querySelectorAll('[data-icon-picker]').forEach(initIconPicker); +}()); diff --git a/src/web/public/js/playlists/playlist-schedule.js b/src/web/public/js/playlists/playlist-schedule.js index 303034f..04bd1ff 100644 --- a/src/web/public/js/playlists/playlist-schedule.js +++ b/src/web/public/js/playlists/playlist-schedule.js @@ -1665,6 +1665,7 @@ var slidePickerSlides = []; var lastDurationPointerDown = null; var lastDurationPointerUp = null; + var defaultSlideDuration = Number(tbody.getAttribute('data-default-slide-duration')) || 10; if (!tbody || !form) { return; @@ -1961,8 +1962,8 @@ videoDurationSeconds: slide.videoDurationSeconds, disableAudio: slide.disableAudio, title: slide.title || 'Slide', - duration_seconds: 10, - durationSeconds: 10, + duration_seconds: defaultSlideDuration, + durationSeconds: defaultSlideDuration, scheduleRules: [], summary: 'Always visible' }); diff --git a/src/web/public/js/rbac-permissions.js b/src/web/public/js/rbac-permissions.js index f950492..16af7f4 100644 --- a/src/web/public/js/rbac-permissions.js +++ b/src/web/public/js/rbac-permissions.js @@ -105,6 +105,13 @@ return document.querySelector('[data-permission-row-id="' + targetId + '"]'); } + function markPermissionFormDirty(control) { + var form = control && (control.form || (typeof control.closest === 'function' ? control.closest('form') : null)); + if (form && form.dataset) { + form.dataset.dirty = 'true'; + } + } + function handleRowChange(event) { var checkbox = event.target && event.target.matches ? event.target : null; if (!checkbox || checkbox.tagName !== 'INPUT' || checkbox.type !== 'checkbox') { @@ -162,6 +169,7 @@ if (control.hasAttribute('data-permission-row-toggle')) { toggleRowCheckboxes(findPermissionRow(targetId)); + markPermissionFormDirty(control); } }); diff --git a/src/web/public/js/regions/type/image.js b/src/web/public/js/regions/type/image.js index e776a3e..b2c4ac5 100644 --- a/src/web/public/js/regions/type/image.js +++ b/src/web/public/js/regions/type/image.js @@ -76,17 +76,31 @@ function buildEditorCardContext(context) { var defaultConfig = context && context.uploadConfig ? context.uploadConfig : {}; + var configuredTypes = Array.isArray(context && context.uploadMimeTypes) + ? context.uploadMimeTypes.filter(function (mimeType) { return String(mimeType || '').indexOf('image/') === 0; }) + : []; + var accept = configuredTypes.length + ? configuredTypes + : (Array.isArray(defaultConfig.accept) ? defaultConfig.accept : ['image/png', 'image/jpeg', 'image/gif', 'image/webp', 'image/svg+xml']); + var acceptLabels = accept.map(function (mimeType) { + var subtype = String(mimeType).split('/')[1] || ''; + return subtype === 'jpeg' ? 'JPG' : subtype === 'svg+xml' ? 'SVG' : subtype.toUpperCase(); + }); + var acceptLabel = acceptLabels.length > 1 + ? acceptLabels.slice(0, -1).join(', ') + ' or ' + acceptLabels[acceptLabels.length - 1] + : (acceptLabels[0] || 'supported image'); return { region: context.region, current: String(context.current || ''), regionRatio: String(context.regionRatio || '1:1'), uploadConfig: { - accept: Array.isArray(defaultConfig.accept) ? defaultConfig.accept : ['image/png', 'image/jpeg', 'image/gif', 'image/webp', 'image/svg+xml'], - limitBytes: defaultConfig.limitBytes, + accept: accept, + limitBytes: defaultConfig.limitBytes || context.uploadMaxBytes, limitLabel: defaultConfig.limitLabel || context.uploadMaxLabel || '100 MB', - helpText: defaultConfig.helpText || 'PNG, JPG, GIF, WebP, or SVG' + helpText: defaultConfig.helpText || acceptLabel }, - uploadMaxLabel: context.uploadMaxLabel || '100 MB' + uploadMaxLabel: context.uploadMaxLabel || '100 MB', + uploadMimeTypes: context.uploadMimeTypes || [] }; } @@ -108,10 +122,17 @@ var uploadConfig = context.uploadConfig || {}; var accept = uploadConfig.accept || ['image/png', 'image/jpeg', 'image/gif', 'image/webp', 'image/svg+xml']; + var acceptLabels = accept.map(function (mimeType) { + var subtype = String(mimeType).split('/')[1] || ''; + return subtype === 'jpeg' ? 'JPG' : subtype === 'svg+xml' ? 'SVG' : subtype.toUpperCase(); + }); + var acceptLabel = acceptLabels.length > 1 + ? acceptLabels.slice(0, -1).join(', ') + (acceptLabels.length > 2 ? ', or ' : ' or ') + acceptLabels[acceptLabels.length - 1] + : (acceptLabels[0] || 'supported image'); var limitBytes = Number(uploadConfig.limitBytes || 100 * 1024 * 1024); if (!utils.fileMatchesAccept || !utils.fileMatchesAccept(context.file, accept)) { - showUploadWarning('This image region accepts PNG, JPG, GIF, WebP, or SVG files.'); + showUploadWarning('This image region accepts ' + acceptLabel + ' files.'); return false; } @@ -133,7 +154,7 @@ return { accept: ['image/png', 'image/jpeg', 'image/gif', 'image/webp', 'image/svg+xml'], - limitBytes: defaultConfig.limitBytes, + limitBytes: defaultConfig.limitBytes || context.uploadMaxBytes, limitLabel: defaultConfig.limitLabel, helpText: 'PNG, JPG, GIF, WebP, or SVG' }; diff --git a/src/web/public/js/regions/type/video.js b/src/web/public/js/regions/type/video.js index 8ea5b94..0d45c4c 100644 --- a/src/web/public/js/regions/type/video.js +++ b/src/web/public/js/regions/type/video.js @@ -82,17 +82,30 @@ function buildEditorCardContext(context) { var defaultConfig = context && context.uploadConfig ? context.uploadConfig : {}; + var configuredTypes = Array.isArray(context && context.uploadMimeTypes) + ? context.uploadMimeTypes.filter(function (mimeType) { return String(mimeType || '').indexOf('video/') === 0; }) + : []; + var accept = configuredTypes.length + ? configuredTypes + : (Array.isArray(defaultConfig.accept) ? defaultConfig.accept : ['video/mp4', 'video/webm', 'video/ogg']); + var acceptLabels = accept.map(function (mimeType) { + return (String(mimeType).split('/')[1] || '').toUpperCase(); + }); + var acceptLabel = acceptLabels.length > 1 + ? acceptLabels.slice(0, -1).join(', ') + ' or ' + acceptLabels[acceptLabels.length - 1] + : (acceptLabels[0] || 'supported video'); return { region: context.region, current: String(context.current || ''), currentDuration: String(context.currentDuration || ''), uploadConfig: { - accept: Array.isArray(defaultConfig.accept) ? defaultConfig.accept : ['video/mp4', 'video/webm', 'video/ogg'], - limitBytes: defaultConfig.limitBytes, + accept: accept, + limitBytes: defaultConfig.limitBytes || context.uploadVideoMaxBytes, limitLabel: defaultConfig.limitLabel || context.uploadVideoMaxLabel || '1 GB', - helpText: defaultConfig.helpText || 'MP4, WebM, or Ogg' + helpText: defaultConfig.helpText || acceptLabel }, - uploadVideoMaxLabel: context.uploadVideoMaxLabel || '1 GB' + uploadVideoMaxLabel: context.uploadVideoMaxLabel || '1 GB', + uploadMimeTypes: context.uploadMimeTypes || [] }; } @@ -114,10 +127,16 @@ var uploadConfig = context.uploadConfig || {}; var accept = uploadConfig.accept || ['video/mp4', 'video/webm', 'video/ogg']; + var acceptLabels = accept.map(function (mimeType) { + return (String(mimeType).split('/')[1] || '').toUpperCase(); + }); + var acceptLabel = acceptLabels.length > 1 + ? acceptLabels.slice(0, -1).join(', ') + (acceptLabels.length > 2 ? ', or ' : ' or ') + acceptLabels[acceptLabels.length - 1] + : (acceptLabels[0] || 'supported video'); var limitBytes = Number(uploadConfig.limitBytes || 1024 * 1024 * 1024); if (!utils.fileMatchesAccept || !utils.fileMatchesAccept(context.file, accept)) { - showUploadWarning('This video region accepts MP4, WebM, or Ogg files.'); + showUploadWarning('This video region accepts ' + acceptLabel + ' files.'); return false; } @@ -163,7 +182,7 @@ return { accept: ['video/mp4', 'video/webm', 'video/ogg'], - limitBytes: defaultConfig.limitBytes, + limitBytes: defaultConfig.limitBytes || context.uploadVideoMaxBytes, limitLabel: defaultConfig.limitLabel, helpText: 'MP4, WebM, or Ogg' }; diff --git a/src/web/public/js/settings/settings-page.js b/src/web/public/js/settings/settings-page.js new file mode 100644 index 0000000..86a9937 --- /dev/null +++ b/src/web/public/js/settings/settings-page.js @@ -0,0 +1,392 @@ +(function () { + 'use strict'; + + function initIconSuggestions() { + var searchInput = document.querySelector('[data-icon-suggestions-search]'); + var countNode = document.querySelector('[data-icon-suggestions-count]'); + var selectedList = document.querySelector('[data-selected-icon-list]'); + var noSelectedNode = document.querySelector('[data-no-selected-icons]'); + var addButton = document.querySelector('[data-add-icon-button]'); + var iconForm = document.querySelector('[data-settings-form="icons"]'); + var options = Array.prototype.slice.call(document.querySelectorAll('[data-icon-suggestion-option]')); + var maxSelected = 48; + var draggedItem = null; + var initialOrder = []; + + if (!searchInput || !countNode || !selectedList || !options.length) { + return; + } + + function getOptionByKey(key) { + return options.find(function (option) { + var checkbox = option.querySelector('[data-icon-picker-checkbox]'); + return checkbox && checkbox.value === key; + }) || null; + } + + function getCheckedKeys() { + return options.filter(function (option) { + var checkbox = option.querySelector('[data-icon-picker-checkbox]'); + return checkbox && checkbox.checked; + }).map(function (option) { + return option.querySelector('[data-icon-picker-checkbox]').value; + }); + } + + function getSelectedOrder() { + return Array.prototype.slice.call(selectedList.querySelectorAll('[data-selected-icon-item]')).map(function (item) { + return item.getAttribute('data-icon-key'); + }); + } + + function createSelectedItem(key) { + var option = getOptionByKey(key); + var checkbox = option && option.querySelector('[data-icon-picker-checkbox]'); + if (!option || !checkbox) { + return null; + } + + var item = document.createElement('div'); + var content = document.createElement('div'); + var dragButton = document.createElement('button'); + var dragIcon = document.createElement('i'); + var icon = document.createElement('i'); + var label = document.createElement('span'); + var hiddenInput = document.createElement('input'); + var removeButton = document.createElement('button'); + var removeIcon = document.createElement('i'); + var iconLabel = String(option.getAttribute('data-icon-label') || key); + + item.className = 'col-12 col-sm-6 col-xl-3'; + content.className = 'd-flex align-items-center gap-2 border rounded p-2 h-100'; + item.draggable = true; + item.setAttribute('data-selected-icon-item', ''); + item.setAttribute('data-icon-key', key); + + dragButton.type = 'button'; + dragButton.className = 'btn btn-link text-body-secondary p-1'; + dragButton.setAttribute('data-drag-icon', ''); + dragButton.title = 'Drag to reorder'; + dragButton.setAttribute('aria-label', 'Drag ' + iconLabel + ' to reorder'); + dragIcon.className = 'bi bi-grip-vertical'; + dragIcon.setAttribute('aria-hidden', 'true'); + dragButton.appendChild(dragIcon); + + icon.className = 'bi bi-' + key + ' fs-5 text-primary'; + icon.setAttribute('aria-hidden', 'true'); + label.className = 'flex-grow-1'; + label.textContent = iconLabel; + + hiddenInput.type = 'hidden'; + hiddenInput.name = 'suggested_icons[]'; + hiddenInput.value = key; + hiddenInput.setAttribute('data-ordered-icon-input', ''); + + removeButton.type = 'button'; + removeButton.className = 'btn btn-link text-danger p-1'; + removeButton.setAttribute('data-remove-icon', ''); + removeButton.title = 'Remove ' + iconLabel; + removeButton.setAttribute('aria-label', 'Remove ' + iconLabel); + removeIcon.className = 'bi bi-x-lg'; + removeIcon.setAttribute('aria-hidden', 'true'); + removeButton.appendChild(removeIcon); + + content.appendChild(dragButton); + content.appendChild(icon); + content.appendChild(label); + content.appendChild(hiddenInput); + content.appendChild(removeButton); + item.appendChild(content); + return item; + } + + function renderSelectedItems(order) { + selectedList.querySelectorAll('[data-selected-icon-item]').forEach(function (item) { + item.remove(); + }); + order.forEach(function (key) { + var item = createSelectedItem(key); + if (item) { + selectedList.insertBefore(item, noSelectedNode); + } + }); + } + + function syncSelectionState() { + var checkedKeys = getCheckedKeys(); + var checkedSet = new Set(checkedKeys); + var currentOrder = getSelectedOrder().filter(function (key) { + return checkedSet.has(key); + }); + checkedKeys.forEach(function (key) { + if (currentOrder.indexOf(key) === -1) { + currentOrder.push(key); + } + }); + renderSelectedItems(currentOrder); + countNode.textContent = String(currentOrder.length); + if (noSelectedNode) { + noSelectedNode.hidden = currentOrder.length > 0; + } + if (addButton) { + addButton.disabled = currentOrder.length >= maxSelected; + addButton.setAttribute('aria-disabled', addButton.disabled ? 'true' : 'false'); + } + options.forEach(function (option) { + var checkbox = option.querySelector('[data-icon-picker-checkbox]'); + if (checkbox) { + checkbox.disabled = !checkbox.checked && currentOrder.length >= maxSelected; + } + }); + } + + function resetIconForm() { + var initialSet = new Set(initialOrder); + options.forEach(function (option) { + var checkbox = option.querySelector('[data-icon-picker-checkbox]'); + if (checkbox) { + checkbox.checked = initialSet.has(checkbox.value); + } + }); + renderSelectedItems(initialOrder.slice()); + syncSelectionState(); + if (iconForm) { + iconForm.dataset.dirty = 'false'; + } + } + + function markIconFormDirty() { + if (iconForm) { + iconForm.dataset.dirty = 'true'; + } + } + + function filterOptions() { + var query = String(searchInput.value || '').trim().toLowerCase(); + options.forEach(function (option) { + var label = String(option.getAttribute('data-icon-label') || '').toLowerCase(); + option.hidden = Boolean(query && label.indexOf(query) === -1); + }); + } + + options.forEach(function (option) { + var checkbox = option.querySelector('[data-icon-picker-checkbox]'); + if (checkbox) { + checkbox.addEventListener('change', function () { + markIconFormDirty(); + syncSelectionState(); + }); + } + }); + + selectedList.addEventListener('click', function (event) { + var removeButton = event.target.closest ? event.target.closest('[data-remove-icon]') : null; + if (!removeButton) { + return; + } + var item = removeButton.closest('[data-selected-icon-item]'); + var key = item && item.getAttribute('data-icon-key'); + var option = getOptionByKey(key); + var checkbox = option && option.querySelector('[data-icon-picker-checkbox]'); + if (checkbox) { + checkbox.checked = false; + } + markIconFormDirty(); + syncSelectionState(); + }); + + selectedList.addEventListener('dragstart', function (event) { + var item = event.target.closest ? event.target.closest('[data-selected-icon-item]') : null; + if (!item) { + return; + } + draggedItem = item; + item.classList.add('opacity-50'); + event.dataTransfer.effectAllowed = 'move'; + event.dataTransfer.setData('text/plain', item.getAttribute('data-icon-key') || ''); + }); + + selectedList.addEventListener('dragover', function (event) { + if (!draggedItem) { + return; + } + event.preventDefault(); + var target = event.target.closest ? event.target.closest('[data-selected-icon-item]') : null; + if (!target || target === draggedItem) { + return; + } + var bounds = target.getBoundingClientRect(); + var insertBefore = event.clientY < bounds.top + bounds.height / 2; + selectedList.insertBefore(draggedItem, insertBefore ? target : target.nextSibling); + }); + + selectedList.addEventListener('dragend', function () { + if (!draggedItem) { + return; + } + draggedItem.classList.remove('opacity-50'); + draggedItem = null; + markIconFormDirty(); + syncSelectionState(); + }); + + searchInput.addEventListener('input', filterOptions); + syncSelectionState(); + initialOrder = getSelectedOrder(); + document.addEventListener('settings:reset', resetIconForm); + } + + function initDefaultAnnouncementIconPicker() { + return; + var shell = document.querySelector('[data-settings-default-icon-picker]'); + if (!shell) return; + var select = shell.querySelector('select'); + var toggle = shell.querySelector('[data-settings-default-icon-toggle]'); + var menu = shell.querySelector('[data-settings-default-icon-menu]'); + var preview = shell.querySelector('[data-settings-default-icon-preview]'); + var label = shell.querySelector('[data-settings-default-icon-label]'); + var search = shell.querySelector('[data-settings-default-icon-search]'); + var empty = shell.querySelector('[data-settings-default-icon-empty]'); + var options = Array.prototype.slice.call(shell.querySelectorAll('[data-settings-default-icon-option]')); + + function getCatalogOptions() { + return Array.prototype.slice.call(select.options).map(function (option) { + return { value: option.value, label: option.textContent || option.label || option.value }; + }); + } + + function createOption(option, selectedValue) { + var item = document.createElement('button'); + item.type = 'button'; + item.className = 'announcement-icon-picker__option'; + item.setAttribute('data-settings-default-icon-option', ''); + item.setAttribute('data-icon-key', option.value); + item.setAttribute('data-icon-label', option.label); + item.setAttribute('data-icon-search-terms', option.value + ' ' + option.label); + item.setAttribute('aria-pressed', option.value === selectedValue ? 'true' : 'false'); + item.title = option.label; + item.innerHTML = ''; + return item; + } + + function renderOptions(query) { + var normalizedQuery = String(query || '').trim().toLowerCase(); + var selectedValue = String(select.value || '').trim(); + var sourceOptions = normalizedQuery ? getCatalogOptions().filter(function (option) { + return (option.value + ' ' + option.label).toLowerCase().indexOf(normalizedQuery) !== -1; + }) : options.map(function (option) { + return { value: option.getAttribute('data-icon-key') || '', label: option.getAttribute('data-icon-label') || '' }; + }); + var grid = shell.querySelector('[data-settings-default-icon-grid]'); + grid.innerHTML = ''; + sourceOptions.forEach(function (option) { + grid.appendChild(createOption(option, selectedValue)); + }); + options = Array.prototype.slice.call(grid.querySelectorAll('[data-settings-default-icon-option]')); + options.forEach(bindOption); + empty.hidden = Boolean(sourceOptions.length); + } + + function bindOption(item) { + item.addEventListener('click', function () { + select.value = item.getAttribute('data-icon-key') || ''; + select.dispatchEvent(new Event('change', { bubbles: true })); + menu.hidden = true; + toggle.setAttribute('aria-expanded', 'false'); + }); + } + + function render() { + var option = select.options[select.selectedIndex]; + var key = option ? option.value : ''; + var text = option ? option.textContent : 'Select an icon'; + preview.className = 'announcement-icon-picker__toggle-icon bi bi-' + key; + if (label) label.textContent = text; + options.forEach(function (item) { + item.classList.toggle('is-selected', item.getAttribute('data-icon-key') === key); + }); + } + toggle.addEventListener('click', function () { + menu.hidden = !menu.hidden; + toggle.setAttribute('aria-expanded', menu.hidden ? 'false' : 'true'); + if (!menu.hidden && search) search.focus(); + }); + shell.querySelector('[data-settings-default-icon-close]').addEventListener('click', function () { + menu.hidden = true; + toggle.setAttribute('aria-expanded', 'false'); + }); + options.forEach(bindOption); + if (search) search.addEventListener('input', function () { + renderOptions(search.value); + }); + select.addEventListener('change', render); + render(); + } + + function initSettingsSectionNavigation() { + var links = Array.prototype.slice.call(document.querySelectorAll('[data-settings-section-link]')); + var sections = Array.prototype.slice.call(document.querySelectorAll('[data-settings-section]')); + if (!links.length || !sections.length) { + return; + } + + function setActiveSection(sectionId) { + links.forEach(function (link) { + var isActive = link.getAttribute('href') === '#' + sectionId; + link.classList.toggle('active', isActive); + link.setAttribute('aria-current', isActive ? 'page' : 'false'); + }); + sections.forEach(function (section) { + section.hidden = section.id !== sectionId; + }); + } + + function hasDirtySettingsForm() { + return Array.prototype.some.call(document.querySelectorAll('[data-settings-form]'), function (form) { + return form.dataset && form.dataset.dirty === 'true'; + }); + } + + function resetSettingsForms() { + document.querySelectorAll('[data-settings-form]').forEach(function (form) { + if (typeof form.reset === 'function') { + form.reset(); + } + form.dataset.dirty = 'false'; + }); + document.dispatchEvent(new CustomEvent('settings:reset')); + } + + links.forEach(function (link) { + link.addEventListener('click', function (event) { + var target = document.getElementById(String(link.getAttribute('href') || '').replace(/^#/, '')); + if (!target) { + return; + } + var currentSection = sections.find(function (section) { return !section.hidden; }); + if (currentSection && target.id !== currentSection.id && hasDirtySettingsForm()) { + if (!window.confirm('You have unsaved settings. Switch sections anyway?')) { + event.preventDefault(); + return; + } + resetSettingsForms(); + } + event.preventDefault(); + setActiveSection(target.id); + window.history.replaceState(null, '', '#' + target.id); + }); + }); + + var hashSectionId = String(window.location.hash || '').replace(/^#/, ''); + var initialSection = sections.some(function (section) { + return section.id === hashSectionId; + }) ? hashSectionId : sections[0].id; + setActiveSection(initialSection); + } + + document.addEventListener('DOMContentLoaded', function () { + initIconSuggestions(); + initDefaultAnnouncementIconPicker(); + initSettingsSectionNavigation(); + }); +}()); diff --git a/src/web/public/js/slides/slide-form-editor.js b/src/web/public/js/slides/slide-form-editor.js index 70f5ebe..bcb94c8 100644 --- a/src/web/public/js/slides/slide-form-editor.js +++ b/src/web/public/js/slides/slide-form-editor.js @@ -3,6 +3,7 @@ export function createSlideFormEditorController(options) { var templateFields = settings.templateFields || null; var templateSelectorLock = settings.templateSelectorLock || null; var requestPreviewRender = typeof settings.requestPreviewRender === 'function' ? settings.requestPreviewRender : function () {}; + var markFormDirty = typeof settings.markFormDirty === 'function' ? settings.markFormDirty : function () {}; var defaultFontSize = Math.max(1, Number(settings.defaultFontSize || 32)); var fontFamilyFormats = String(settings.fontFamilyFormats || '').trim(); var fontStylesheetHref = String(settings.fontStylesheetHref || '').trim(); @@ -17,8 +18,16 @@ export function createSlideFormEditorController(options) { var imageUploadMaxBytes = Math.max(1, Number(settings.imageUploadMaxBytes || 2 * 1024 * 1024)); var imageUploadLimitLabel = String(settings.imageUploadLimitLabel || '').trim() || Math.max(1, Math.round(imageUploadMaxBytes / (1024 * 1024))) + ' MB'; var imageUploadContext = String(settings.imageUploadContext || 'wysiwyg').trim() || 'wysiwyg'; - var imageUploadAllowedExtensions = ['png', 'jpg', 'jpeg', 'gif', 'webp', 'svg']; - var imageUploadAllowedMimeTypes = ['image/png', 'image/jpeg', 'image/gif', 'image/webp', 'image/svg+xml']; + var configuredImageMimeTypes = Array.isArray(settings.uploadMimeTypes) + ? settings.uploadMimeTypes.filter(function (mimeType) { return String(mimeType || '').indexOf('image/') === 0; }) + : []; + var imageUploadAllowedMimeTypes = configuredImageMimeTypes.length + ? configuredImageMimeTypes + : ['image/png', 'image/jpeg', 'image/gif', 'image/webp', 'image/svg+xml']; + var imageUploadAllowedExtensions = imageUploadAllowedMimeTypes.map(function (mimeType) { + var subtype = String(mimeType).split('/')[1] || ''; + return subtype === 'jpeg' ? 'jpg' : subtype === 'svg+xml' ? 'svg' : subtype; + }); var imageUploadFileTypes = imageUploadAllowedExtensions.join(','); var wysiwygEditorHeightStep = Math.max(1, Number(settings.wysiwygEditorHeightStep || 80)); var wysiwygEditorHeightMin = Math.max(1, Number(settings.wysiwygEditorHeightMin || 240)); @@ -542,6 +551,9 @@ export function createSlideFormEditorController(options) { ['change', 'keyup', 'undo', 'redo', 'Paste', 'input'].forEach(function (eventName) { editor.on(eventName, function () { syncState(true); + if (hydrated) { + markFormDirty(); + } }); }); } diff --git a/src/web/public/js/slides/slide-form-regions.js b/src/web/public/js/slides/slide-form-regions.js index 5d9581f..f28627d 100644 --- a/src/web/public/js/slides/slide-form-regions.js +++ b/src/web/public/js/slides/slide-form-regions.js @@ -30,6 +30,9 @@ export function createSlideFormRegionHelpers(options) { var defaultFontSize = Math.max(1, Number(settings.defaultFontSize || 32)); var uploadMaxLabel = String(settings.uploadMaxLabel || '100 MB'); var uploadVideoMaxLabel = String(settings.uploadVideoMaxLabel || '1 GB'); + var uploadMaxBytes = Number(settings.uploadMaxBytes || 100 * 1024 * 1024); + var uploadVideoMaxBytes = Number(settings.uploadVideoMaxBytes || 1024 * 1024 * 1024); + var uploadMimeTypes = Array.isArray(settings.uploadMimeTypes) ? settings.uploadMimeTypes : []; function sanitizeFontSize(value) { var raw = String(value || '').trim().toLowerCase(); @@ -539,6 +542,9 @@ export function createSlideFormRegionHelpers(options) { regionRatio: reduceAspectRatio(region.width, region.height), uploadMaxLabel: uploadMaxLabel, uploadVideoMaxLabel: uploadVideoMaxLabel, + uploadMaxBytes: uploadMaxBytes, + uploadVideoMaxBytes: uploadVideoMaxBytes, + uploadMimeTypes: uploadMimeTypes, disableAudio: (existingContent[region.region_key] || {}).disable_audio, config: region.region_type === 'api' ? getCurrentApiConfig(region) : region.region_type === 'timetable' ? getCurrentTimetableConfig(region) : getCurrentRssConfig(region), style: getCurrentTextStyle(region), @@ -579,6 +585,9 @@ export function createSlideFormRegionHelpers(options) { regionRatio: reduceAspectRatio(region.width, region.height), uploadMaxLabel: uploadMaxLabel, uploadVideoMaxLabel: uploadVideoMaxLabel, + uploadMaxBytes: uploadMaxBytes, + uploadVideoMaxBytes: uploadVideoMaxBytes, + uploadMimeTypes: uploadMimeTypes, disableAudio: currentContent.disable_audio, config: region.region_type === 'api' ? apiConfig : region.region_type === 'timetable' ? getCurrentTimetableConfig(region) : rssConfig, style: textStyle, diff --git a/src/web/public/js/slides/slide-form.js b/src/web/public/js/slides/slide-form.js index 6181b54..454c37a 100644 --- a/src/web/public/js/slides/slide-form.js +++ b/src/web/public/js/slides/slide-form.js @@ -6,6 +6,14 @@ import { createSlideFormPreviewHelpers } from '/assets/js/slides/slide-form-prev (function () { var DEFAULT_FONT_SIZE = 32; + function formatUploadLimitLabel(bytes) { + var megabytes = Number(bytes || 0) / 1024 / 1024; + if (megabytes >= 1024 && megabytes % 1024 === 0) { + return String(megabytes / 1024) + ' GB'; + } + return (Number.isInteger(megabytes) ? String(megabytes) : megabytes.toFixed(2).replace(/0+$/, '').replace(/\.$/, '')) + ' MB'; + } + var dataElement = document.getElementById('slide-editor-data'); if (!dataElement) { return; @@ -37,12 +45,14 @@ import { createSlideFormPreviewHelpers } from '/assets/js/slides/slide-form-prev var slidePreviewEmpty = document.getElementById('slide-preview-empty'); var slidePreviewOverlay = document.getElementById('slide-preview-overlay'); var openPreviewPopupButton = document.getElementById('open-preview-popup'); - var uploadMaxBytes = 100 * 1024 * 1024; - var uploadMaxLabel = '100 MB'; - var uploadVideoMaxBytes = 1024 * 1024 * 1024; - var uploadVideoMaxLabel = '1 GB'; - var wysiwygImageUploadMaxBytes = 2 * 1024 * 1024; - var wysiwygImageUploadLimitLabel = '2 MB'; + var uploadLimits = slideEditorData.uploadLimits || {}; + var uploadMaxBytes = Number(uploadLimits.imageMaxBytes || 100 * 1024 * 1024); + var uploadMaxLabel = formatUploadLimitLabel(uploadMaxBytes); + var uploadVideoMaxBytes = Number(uploadLimits.videoMaxBytes || 1024 * 1024 * 1024); + var uploadVideoMaxLabel = formatUploadLimitLabel(uploadVideoMaxBytes); + var wysiwygImageUploadMaxBytes = Number(uploadLimits.wysiwygImageMaxBytes || 2 * 1024 * 1024); + var wysiwygImageUploadLimitLabel = formatUploadLimitLabel(wysiwygImageUploadMaxBytes); + var uploadMimeTypes = Array.isArray(uploadLimits.allowedMimeTypes) ? uploadLimits.allowedMimeTypes : []; var videoDurationCache = Object.create(null); var previewRenderFrame = 0; var previewPopupWindow = null; @@ -111,7 +121,11 @@ import { createSlideFormPreviewHelpers } from '/assets/js/slides/slide-form-prev imageUploadMaxBytes: wysiwygImageUploadMaxBytes, imageUploadLimitLabel: wysiwygImageUploadLimitLabel, imageUploadContext: 'wysiwyg', + uploadMimeTypes: uploadMimeTypes, getRegionTypeModule: getRegionTypeModule, + markFormDirty: function () { + slideForm.dataset.dirty = 'true'; + }, getEditorBackgroundColor: function () { var template = getTemplateById(templateSelect.value); return template && template.background_color ? String(template.background_color) : '#111111'; @@ -128,6 +142,9 @@ import { createSlideFormPreviewHelpers } from '/assets/js/slides/slide-form-prev defaultFontSize: DEFAULT_FONT_SIZE, uploadMaxLabel: uploadMaxLabel, uploadVideoMaxLabel: uploadVideoMaxLabel, + uploadMaxBytes: uploadMaxBytes, + uploadVideoMaxBytes: uploadVideoMaxBytes, + uploadMimeTypes: uploadMimeTypes, escapeHtml: escapeHtml, getRegionTypeModule: getRegionTypeModule, requestPreviewRender: requestPreviewRender diff --git a/src/web/public/js/slides/slide-image-cropper.js b/src/web/public/js/slides/slide-image-cropper.js index cd79f2b..a8c6800 100644 --- a/src/web/public/js/slides/slide-image-cropper.js +++ b/src/web/public/js/slides/slide-image-cropper.js @@ -23,6 +23,14 @@ var listenersAttached = false; var uploadMaxBytes = 100 * 1024 * 1024; var uploadMaxLabel = '100 MB'; + var editorDataElement = document.getElementById('slide-editor-data'); + try { + var editorData = JSON.parse(editorDataElement && (editorDataElement.value || editorDataElement.textContent) || '{}') || {}; + uploadMaxBytes = Number(editorData.uploadLimits && editorData.uploadLimits.imageMaxBytes) || uploadMaxBytes; + var megabytes = uploadMaxBytes / 1024 / 1024; + uploadMaxLabel = Number.isInteger(megabytes) ? String(megabytes) + ' MB' : megabytes.toFixed(2).replace(/0+$/, '').replace(/\.$/, '') + ' MB'; + } catch (_error) { + } function getRegionId(input) { var match = String(input && input.name || '').match(/^region_image_(\d+)$/); diff --git a/src/web/routes/account/password.js b/src/web/routes/account/password.js index 2d0cffe..3e02953 100644 --- a/src/web/routes/account/password.js +++ b/src/web/routes/account/password.js @@ -13,7 +13,26 @@ function normalizeReturnUrl(value) { return url; } -module.exports = function renderAccountPage(currentUser, message, returnUrl) { +module.exports = function renderAccountPage(currentUser, message, returnUrl, allowUserSessionRevocation, sessions, passwordRequirements) { + const requirements = passwordRequirements || { + minimumLength: 10, + minimumCategories: 3, + requireLowercase: false, + requireUppercase: false, + requireNumber: false, + requireSymbol: false + }; + const requiredCategories = []; + if (requirements.requireLowercase) requiredCategories.push('lowercase'); + if (requirements.requireUppercase) requiredCategories.push('uppercase'); + if (requirements.requireNumber) requiredCategories.push('number'); + if (requirements.requireSymbol) requiredCategories.push('symbol'); + const passwordRequirementsText = requiredCategories.length + ? 'Use at least ' + requirements.minimumLength + ' characters and include ' + requiredCategories.join(', ') + '.' + : requirements.minimumCategories === 4 + ? 'Use at least ' + requirements.minimumLength + ' characters and include uppercase, lowercase, number, and symbol.' + : 'Use at least ' + requirements.minimumLength + ' characters and include ' + requirements.minimumCategories + ' of: uppercase, lowercase, number, and symbol.'; + return renderView('account/password', { title: 'My account', active: 'account', @@ -21,6 +40,10 @@ module.exports = function renderAccountPage(currentUser, message, returnUrl) { message: message || '', username: currentUser ? currentUser.username : '', name: currentUser ? String(currentUser.name || '') : '', - returnUrl: normalizeReturnUrl(returnUrl) + returnUrl: normalizeReturnUrl(returnUrl), + allowUserSessionRevocation: Boolean(allowUserSessionRevocation), + sessions: Array.isArray(sessions) ? sessions : [], + passwordMinimumLength: requirements.minimumLength, + passwordRequirementsText: passwordRequirementsText }); }; \ No newline at end of file diff --git a/src/web/routes/admin/account.js b/src/web/routes/admin/account.js index a01b9ea..9e93e8a 100644 --- a/src/web/routes/admin/account.js +++ b/src/web/routes/admin/account.js @@ -1,5 +1,7 @@ // Admin account route registration and profile helpers. +const { fetchAppSettings } = require('../../../data/app-settings'); + module.exports = function registerAccountRoutes(app, deps) { const pool = deps.pool; const common = deps.common; @@ -11,9 +13,129 @@ module.exports = function registerAccountRoutes(app, deps) { const validatePasswordStrength = deps.validatePasswordStrength; const createUserSession = deps.createUserSession; const setSessionCookie = deps.setSessionCookie; + const getSessionMaxAgeMs = deps.getSessionMaxAgeMs; + const parseCookies = deps.parseCookies; + const hashSessionToken = deps.hashSessionToken; + const sessionCookieName = deps.sessionCookieName; + const recordRequestAuditEvent = deps.recordRequestAuditEvent; + + async function getPasswordRequirements() { + const settings = await fetchAppSettings(pool); + return buildPasswordRequirements(settings); + } + + function buildPasswordRequirements(settings) { + return { + minimumLength: settings['security.password_min_length'], + minimumCategories: settings['security.password_min_categories'], + requireLowercase: settings['security.password_require_lowercase'], + requireUppercase: settings['security.password_require_uppercase'], + requireNumber: settings['security.password_require_number'], + requireSymbol: settings['security.password_require_symbol'] + }; + } + + function getSessionMetadata(req) { + const forwardedAddress = String(req && req.headers && req.headers['x-forwarded-for'] || '').split(',')[0].trim(); + return { + ipAddress: forwardedAddress || String(req && req.ip || req && req.socket && req.socket.remoteAddress || 'unknown').trim(), + userAgent: req && req.headers && req.headers['user-agent'] + }; + } app.get('/account', function (req, res) { - res.send(pages.renderAccountPage(req.currentUser, req.query.message ? String(req.query.message) : '', '/dashboard')); + fetchAppSettings(pool).then(function (settings) { + const passwordRequirements = buildPasswordRequirements(settings); + if (!settings['security.allow_user_session_revocation']) { + return res.send(pages.renderAccountPage(req.currentUser, req.query.message ? String(req.query.message) : '', '/dashboard', false, [], passwordRequirements)); + } + const cookies = parseCookies(req.headers.cookie || ''); + const tokenHash = cookies[sessionCookieName] ? hashSessionToken(cookies[sessionCookieName]) : ''; + return pool.query( + 'SELECT id, session_hash, ip_address, user_agent, created_at, last_used_at, expires_at FROM a_sessions WHERE user_id = ? AND expires_at > NOW() ORDER BY last_used_at DESC', + [req.currentUser.id] + ).then(function (result) { + const rows = result[0] || []; + const sessions = rows.map(function (session) { + return { + id: Number(session.id), + isCurrent: Boolean(tokenHash && session.session_hash === tokenHash), + ipAddress: String(session.ip_address || 'Unknown'), + userAgent: String(session.user_agent || 'Unknown browser'), + createdAtLabel: formatDashboardDate(session.created_at), + lastUsedAtLabel: formatDashboardDate(session.last_used_at), + expiresAtLabel: formatDashboardDate(session.expires_at) + }; + }); + res.send(pages.renderAccountPage(req.currentUser, req.query.message ? String(req.query.message) : '', '/dashboard', true, sessions, passwordRequirements)); + }); + }).catch(function (error) { + res.status(500).send(error.message || 'Unable to load account settings.'); + }); + }); + + app.post('/account/sessions/:id/revoke', async function (req, res, next) { + try { + const sessionId = Number(req.params.id); + if (!Number.isInteger(sessionId) || sessionId <= 0) { + return res.status(400).send('Invalid session.'); + } + const settings = await fetchAppSettings(pool); + if (!settings['security.allow_user_session_revocation']) { + return res.redirect('/account?message=' + encodeURIComponent('Signing out other sessions is disabled by an administrator.')); + } + const cookies = parseCookies(req.headers.cookie || ''); + const token = cookies[sessionCookieName]; + if (!token) { + return res.redirect('/account?message=' + encodeURIComponent('Current session could not be identified.')); + } + const [result] = await pool.query( + 'DELETE FROM a_sessions WHERE id = ? AND user_id = ? AND session_hash <> ?', + [sessionId, req.currentUser.id, hashSessionToken(token)] + ); + if (result && result.affectedRows && typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'sessions', + eventType: 'session.revoked', + actorUserId: req.currentUser.id, + targetType: 'user', + targetId: req.currentUser.id, + targetLabel: req.currentUser.username, + details: { scope: 'single' } + }); + } + res.redirect('/account?message=' + encodeURIComponent(result && result.affectedRows ? 'Session signed out.' : 'The current session cannot be signed out.')); + } catch (error) { + next(error); + } + }); + + app.post('/account/sessions/revoke', async function (req, res, next) { + try { + const settings = await fetchAppSettings(pool); + if (!settings['security.allow_user_session_revocation']) { + return res.redirect('/account?message=' + encodeURIComponent('Signing out other sessions is disabled by an administrator.')); + } + const cookies = parseCookies(req.headers.cookie || ''); + const token = cookies[sessionCookieName]; + if (token) { + await pool.query('DELETE FROM a_sessions WHERE user_id = ? AND session_hash <> ?', [req.currentUser.id, hashSessionToken(token)]); + } + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'sessions', + eventType: 'session.revoked', + actorUserId: req.currentUser.id, + targetType: 'user', + targetId: req.currentUser.id, + targetLabel: req.currentUser.username, + details: { scope: 'other_sessions' } + }); + } + res.redirect('/account?message=' + encodeURIComponent('Other active sessions were signed out.')); + } catch (error) { + next(error); + } }); app.post('/account/name', async function (req, res, next) { @@ -53,7 +175,7 @@ module.exports = function registerAccountRoutes(app, deps) { if (!verifyPassword(currentPassword, user)) { return res.status(400).send('Current password is incorrect.'); } - const passwordStrengthMessage = validatePasswordStrength(newPassword); + const passwordStrengthMessage = validatePasswordStrength(newPassword, await getPasswordRequirements()); if (passwordStrengthMessage) { return res.status(400).send(passwordStrengthMessage); } @@ -63,13 +185,25 @@ module.exports = function registerAccountRoutes(app, deps) { const passwordRecord = hashPassword(newPassword); await pool.query( - 'UPDATE a_users SET password_hash = ?, password_salt = ?, password_iterations = ?, modified_by = ? WHERE id = ?', + 'UPDATE a_users SET password_hash = ?, password_salt = ?, password_iterations = ?, must_change_password = 0, modified_by = ? WHERE id = ?', [passwordRecord.hash, passwordRecord.salt, passwordRecord.iterations, getAuditUserId(req), user.id] ); await pool.query('DELETE FROM a_sessions WHERE user_id = ?', [user.id]); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'security', + eventType: 'password.changed', + actorUserId: user.id, + targetType: 'user', + targetId: user.id, + targetLabel: user.username, + details: { source: 'account' } + }); + } - const token = await createUserSession(pool, user.id); - setSessionCookie(res, token); + const sessionMaxAgeMs = typeof getSessionMaxAgeMs === 'function' ? await getSessionMaxAgeMs() : undefined; + const token = await createUserSession(pool, user.id, sessionMaxAgeMs, getSessionMetadata(req)); + setSessionCookie(res, token, sessionMaxAgeMs); res.redirect('/account?message=' + encodeURIComponent('Password updated.')); } catch (error) { next(error); diff --git a/src/web/routes/admin/content.js b/src/web/routes/admin/content.js index f2ee112..e5c9ff9 100644 --- a/src/web/routes/admin/content.js +++ b/src/web/routes/admin/content.js @@ -3,6 +3,7 @@ const fs = require('fs'); const path = require('path'); const { loadFontLibrary } = require('#src/web/lib/media/font-library'); +const { fetchAppSettings } = require('#src/data/app-settings'); const { PERMISSION_DENIED_MESSAGE } = require('#src/rbac'); module.exports = function registerContentRoutes(app, deps) { @@ -19,6 +20,7 @@ module.exports = function registerContentRoutes(app, deps) { const removeUnusedUploadFiles = deps.removeUnusedUploadFiles; const syncPlaylistUploadsOnChange = deps.syncPlaylistUploadsOnChange; const getAuditUserId = deps.getAuditUserId; + const recordRequestAuditEvent = deps.recordRequestAuditEvent; const redirectAfterSave = deps.redirectAfterSave; const notifyPlayerScreens = deps.notifyPlayerScreens; const broadcastDashboardState = deps.broadcastDashboardState; @@ -42,6 +44,7 @@ module.exports = function registerContentRoutes(app, deps) { const rssData = await common.fetchRssFeedsData(pool); const apiData = typeof common.fetchApiSourcesData === 'function' ? await common.fetchApiSourcesData(pool) : { apiSources: [] }; const timetableData = typeof common.fetchTimetablesData === 'function' ? await common.fetchTimetablesData(pool) : { timetableGroups: [] }; + const appSettings = await fetchAppSettings(pool); const apiSources = Array.isArray(apiData.apiSources) ? apiData.apiSources.map(function (source) { return Object.assign({}, source, { responseJson: typeof common.parseJsonSafe === 'function' ? common.parseJsonSafe(source.last_response_json) : null @@ -60,7 +63,13 @@ module.exports = function registerContentRoutes(app, deps) { rssFeeds: rssFeeds, apiSources: apiSources, timetableGroups: timetableData.timetableGroups || [], - fontLibrary: loadFontLibrary(deps.uploadDir) + fontLibrary: loadFontLibrary(deps.uploadDir), + uploadLimits: { + imageMaxBytes: Number(appSettings['uploads.image_max_bytes']) || IMAGE_UPLOAD_MAX_BYTES, + videoMaxBytes: Number(appSettings['uploads.video_max_bytes']) || VIDEO_UPLOAD_MAX_BYTES, + wysiwygImageMaxBytes: Number(appSettings['uploads.wysiwyg_image_max_bytes']) || WYSIWYG_IMAGE_UPLOAD_MAX_BYTES, + allowedMimeTypes: Array.isArray(appSettings['uploads.allowed_mime_types']) ? appSettings['uploads.allowed_mime_types'] : [] + } }); } @@ -123,20 +132,24 @@ module.exports = function registerContentRoutes(app, deps) { return null; } - function getUploadedFileLimitBytes(file, uploadContext) { + function getUploadedFileLimitBytes(file, uploadContext, settings) { if (String(uploadContext || '').trim().toLowerCase() === 'wysiwyg') { - return WYSIWYG_IMAGE_UPLOAD_MAX_BYTES; + return Number(settings && settings['uploads.wysiwyg_image_max_bytes']) || WYSIWYG_IMAGE_UPLOAD_MAX_BYTES; } - return getUploadedFileMediaType(file, uploadContext) === 'video' ? VIDEO_UPLOAD_MAX_BYTES : IMAGE_UPLOAD_MAX_BYTES; + return getUploadedFileMediaType(file, uploadContext) === 'video' + ? Number(settings && settings['uploads.video_max_bytes']) || VIDEO_UPLOAD_MAX_BYTES + : Number(settings && settings['uploads.image_max_bytes']) || IMAGE_UPLOAD_MAX_BYTES; } - function getUploadedFileLimitLabel(file, uploadContext) { + function getUploadedFileLimitLabel(file, uploadContext, settings) { if (String(uploadContext || '').trim().toLowerCase() === 'wysiwyg') { - return '10 MB'; + const limitMb = getUploadedFileLimitBytes(file, uploadContext, settings) / 1024 / 1024; + return (Number.isInteger(limitMb) ? String(limitMb) : limitMb.toFixed(2).replace(/0+$/, '').replace(/\.$/, '')) + ' MB'; } - return getUploadedFileMediaType(file, uploadContext) === 'video' ? '1 GB' : '100 MB'; + const limitMb = Math.round(getUploadedFileLimitBytes(file, uploadContext, settings) / 1024 / 1024); + return limitMb >= 1024 && limitMb % 1024 === 0 ? (limitMb / 1024) + ' GB' : limitMb + ' MB'; } async function removeUploadedFile(file) { @@ -154,8 +167,18 @@ module.exports = function registerContentRoutes(app, deps) { async function validateUploadedFiles(files, uploadContext) { const list = Array.isArray(files) ? files.filter(Boolean) : []; + const settings = await fetchAppSettings(pool); for (let i = 0; i < list.length; i += 1) { const file = list[i]; + const fileMimeType = String(file && file.mimetype || '').trim().toLowerCase(); + const allowedMimeTypes = Array.isArray(settings['uploads.allowed_mime_types']) ? settings['uploads.allowed_mime_types'] : []; + if (allowedMimeTypes.indexOf(fileMimeType) === -1) { + await removeUploadedFile(file); + const error = new Error('This upload type is disabled in Media Uploads settings.'); + error.statusCode = 400; + error.expose = true; + throw error; + } const mediaType = getUploadedFileMediaType(file, uploadContext); if (!mediaType) { await removeUploadedFile(file); @@ -165,11 +188,11 @@ module.exports = function registerContentRoutes(app, deps) { throw error; } - if (Number(file.size || 0) > getUploadedFileLimitBytes(file, uploadContext)) { + if (Number(file.size || 0) > getUploadedFileLimitBytes(file, uploadContext, settings)) { await removeUploadedFile(file); const error = new Error(String(uploadContext || '').trim().toLowerCase() === 'wysiwyg' - ? 'Image must be 2 MB or smaller. Larger images should use the dedicated Image region.' - : 'File must be ' + getUploadedFileLimitLabel(file, uploadContext) + ' or smaller.'); + ? 'Image must be ' + getUploadedFileLimitLabel(file, uploadContext, settings) + ' or smaller. Larger images should use the dedicated Image region.' + : 'File must be ' + getUploadedFileLimitLabel(file, uploadContext, settings) + ' or smaller.'); error.statusCode = 400; error.expose = true; throw error; @@ -447,6 +470,7 @@ module.exports = function registerContentRoutes(app, deps) { queueSlideThumbnailRefresh(result.insertId, null).catch(function (error) { console.warn('Unable to queue slide thumbnail refresh:', error); }); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'slides', eventType: 'slide.created', actorUserId: actorId, targetType: 'slide', targetId: result.insertId, targetLabel: payload.title }); redirectAfterSave(req, res, '/slides/' + result.insertId + '/edit', { closeUrl: '/slides', newUrl: '/slides/new', @@ -488,6 +512,7 @@ module.exports = function registerContentRoutes(app, deps) { screenSlideCounts: screenSlideCounts }); await broadcastDashboardState(); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'slides', eventType: 'slide.updated', actorUserId: actorId, targetType: 'slide', targetId: slide.id, targetLabel: payload.title }); queueSlideThumbnailRefresh(slide.id, slide.thumbnail_path).catch(function (error) { console.warn('Unable to queue slide thumbnail refresh:', error); }); @@ -526,6 +551,7 @@ module.exports = function registerContentRoutes(app, deps) { screenSlideCounts: screenSlideCounts }); await broadcastDashboardState(); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'slides', eventType: 'slide.deleted', actorUserId: getAuditUserId(req), targetType: 'slide', targetId: slide.id, targetLabel: slide.title }); res.redirect('/slides?message=' + encodeURIComponent('Slide deleted.')); } catch (error) { next(error); @@ -584,6 +610,7 @@ module.exports = function registerContentRoutes(app, deps) { localUploadDir: deps.uploadDir, nextUploadRefs: collectUploadReferencesFromPayload(payload) }); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'templates', eventType: 'template.created', actorUserId: actorId, targetType: 'template', targetId: result.insertId, targetLabel: payload.name }); redirectAfterSave(req, res, '/templates/' + result.insertId + '/edit', { closeUrl: '/templates', newUrl: '/templates/new', @@ -654,6 +681,7 @@ module.exports = function registerContentRoutes(app, deps) { }); } await notifyPlayerScreens(affectedScreens, 'refresh'); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'templates', eventType: 'template.updated', actorUserId: actorId, targetType: 'template', targetId: template.id, targetLabel: payload.name }); redirectAfterSave(req, res, '/templates/' + template.id + '/edit', { closeUrl: '/templates', newUrl: '/templates/new', @@ -686,6 +714,7 @@ module.exports = function registerContentRoutes(app, deps) { previousUploadRefs: uploadRefs }); await notifyPlayerScreens(affectedScreens, 'refresh'); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'templates', eventType: 'template.deleted', actorUserId: getAuditUserId(req), targetType: 'template', targetId: template.id, targetLabel: template.name }); res.redirect('/templates?message=' + encodeURIComponent('Template deleted.')); } catch (error) { next(error); @@ -743,6 +772,7 @@ module.exports = function registerContentRoutes(app, deps) { } const actorId = getAuditUserId(req); const [result] = await pool.query('INSERT INTO c_canvas_sizes (name, width, height, created_by, modified_by) VALUES (?, ?, ?, ?, ?)', [payload.name, payload.width, payload.height, actorId, actorId]); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'canvas-sizes', eventType: 'canvas-size.created', actorUserId: actorId, targetType: 'canvas-size', targetId: result.insertId, targetLabel: payload.name, details: { width: payload.width, height: payload.height } }); redirectAfterSave(req, res, '/canvas-sizes/' + result.insertId + '/edit', { closeUrl: '/canvas-sizes', newUrl: '/canvas-sizes/new', @@ -784,6 +814,7 @@ module.exports = function registerContentRoutes(app, deps) { return res.status(400).send('That canvas size already exists.'); } await pool.query('UPDATE c_canvas_sizes SET name = ?, width = ?, height = ?, modified_by = ? WHERE id = ?', [payload.name, payload.width, payload.height, getAuditUserId(req), canvasSize.id]); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'canvas-sizes', eventType: 'canvas-size.updated', actorUserId: getAuditUserId(req), targetType: 'canvas-size', targetId: canvasSize.id, targetLabel: payload.name, details: { width: payload.width, height: payload.height } }); redirectAfterSave(req, res, '/canvas-sizes', { closeUrl: '/canvas-sizes', newUrl: '/canvas-sizes/new', @@ -806,6 +837,7 @@ module.exports = function registerContentRoutes(app, deps) { } await pool.query('UPDATE c_templates SET canvas_size_id = NULL, modified_by = ? WHERE canvas_size_id = ?', [getAuditUserId(req), canvasSize.id]); await pool.query('DELETE FROM c_canvas_sizes WHERE id = ?', [canvasSize.id]); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'canvas-sizes', eventType: 'canvas-size.deleted', actorUserId: getAuditUserId(req), targetType: 'canvas-size', targetId: canvasSize.id, targetLabel: canvasSize.name }); res.redirect('/canvas-sizes?message=' + encodeURIComponent('Canvas size deleted.')); } catch (error) { next(error); diff --git a/src/web/routes/admin/manage.js b/src/web/routes/admin/manage.js index 77992b3..e997217 100644 --- a/src/web/routes/admin/manage.js +++ b/src/web/routes/admin/manage.js @@ -5,6 +5,7 @@ module.exports = function registerManageRoutes(app, deps) { const common = deps.common; const pages = deps.pages; const getAuditUserId = deps.getAuditUserId; + const recordRequestAuditEvent = deps.recordRequestAuditEvent; const redirectAfterSave = deps.redirectAfterSave; const notifyPlayerScreens = deps.notifyPlayerScreens; const broadcastDashboardState = deps.broadcastDashboardState; @@ -217,6 +218,7 @@ module.exports = function registerManageRoutes(app, deps) { const slug = await common.uniqueScreenSlug(pool, common.slugify(slugInput || name)); const actorId = getAuditUserId(req); const [result] = await pool.query('INSERT INTO d_screens (name, slug, playlist_id, created_by, modified_by) VALUES (?, ?, ?, ?, ?)', [name, slug, playlistId, actorId, actorId]); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'screens', eventType: 'screen.created', actorUserId: actorId, targetType: 'screen', targetId: result.insertId, targetLabel: name, details: { slug: slug, playlistId: playlistId } }); redirectAfterSave(req, res, '/screens?edit=' + result.insertId, { closeUrl: '/screens', newUrl: '/screens/new', @@ -262,6 +264,7 @@ module.exports = function registerManageRoutes(app, deps) { await forwardPlayerCommand(previousSlug, redirectPayload); } } + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'screens', eventType: 'screen.updated', actorUserId: getAuditUserId(req), targetType: 'screen', targetId: screen.id, targetLabel: name, details: { slug: slug, playlistId: playlistId } }); redirectAfterSave(req, res, '/screens?edit=' + screen.id, { closeUrl: '/screens', newUrl: '/screens/new', @@ -283,6 +286,7 @@ module.exports = function registerManageRoutes(app, deps) { return res.redirect('/screens?message=' + encodeURIComponent(blockMessage)); } await pool.query('DELETE FROM d_screens WHERE id = ?', [screen.id]); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'screens', eventType: 'screen.deleted', actorUserId: getAuditUserId(req), targetType: 'screen', targetId: screen.id, targetLabel: screen.name }); res.redirect('/screens?message=' + encodeURIComponent('Screen deleted.')); } catch (error) { next(error); diff --git a/src/web/routes/admin/playlists.js b/src/web/routes/admin/playlists.js index 714e242..38d6703 100644 --- a/src/web/routes/admin/playlists.js +++ b/src/web/routes/admin/playlists.js @@ -1,5 +1,7 @@ // Playlist admin routes and playlist-slide management. +const { fetchAppSettings } = require('../../../data/app-settings'); + module.exports = function registerPlaylistRoutes(app, deps) { const pool = deps.pool; const common = deps.common; @@ -9,6 +11,7 @@ module.exports = function registerPlaylistRoutes(app, deps) { const fetchPlaylistCanvasId = deps.fetchPlaylistCanvasId; const readArrayField = deps.readArrayField; const getAuditUserId = deps.getAuditUserId; + const recordRequestAuditEvent = deps.recordRequestAuditEvent; const redirectAfterSave = deps.redirectAfterSave; const notifyPlayerScreens = deps.notifyPlayerScreens; const broadcastDashboardState = deps.broadcastDashboardState; @@ -295,6 +298,7 @@ module.exports = function registerPlaylistRoutes(app, deps) { }; await savePlaylistItems(connection, playlist, req.body, actorId, { updatePlaylist: false }); await connection.commit(); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'playlists', eventType: 'playlist.created', actorUserId: actorId, targetType: 'playlist', targetId: result.insertId, targetLabel: name }); redirectAfterSave(req, res, '/playlists/' + result.insertId + '/edit', { closeUrl: '/playlists', newUrl: '/playlists/new', @@ -352,6 +356,7 @@ module.exports = function registerPlaylistRoutes(app, deps) { await connection.commit(); await notifyPlayerScreens(saveResult.affectedScreens, 'refresh'); await broadcastDashboardState(); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'playlists', eventType: 'playlist.updated', actorUserId: actorId, targetType: 'playlist', targetId: playlist.id, targetLabel: name }); redirectAfterSave(req, res, '/playlists/' + playlist.id + '/edit', { closeUrl: '/playlists', newUrl: '/playlists/new', @@ -383,6 +388,7 @@ module.exports = function registerPlaylistRoutes(app, deps) { return res.redirect('/playlists?message=' + encodeURIComponent(blockMessage)); } await pool.query('DELETE FROM c_playlists WHERE id = ?', [playlist.id]); + if (typeof recordRequestAuditEvent === 'function') await recordRequestAuditEvent(pool, req, { category: 'playlists', eventType: 'playlist.deleted', actorUserId: getAuditUserId(req), targetType: 'playlist', targetId: playlist.id, targetLabel: playlist.name }); res.redirect('/playlists?message=' + encodeURIComponent('Playlist deleted.')); } catch (error) { next(error); @@ -411,7 +417,9 @@ module.exports = function registerPlaylistRoutes(app, deps) { if (playlistCanvasId && slideCanvasId !== playlistCanvasId) { return res.status(400).send('The slide canvas size must match the existing playlist items.'); } - const durationValue = Number(req.body.duration_seconds || 10); + const hasSubmittedDuration = req.body.duration_seconds !== undefined && String(req.body.duration_seconds).trim() !== ''; + const settings = hasSubmittedDuration ? null : await fetchAppSettings(pool); + const durationValue = Number(hasSubmittedDuration ? req.body.duration_seconds : settings['player.default_slide_duration_seconds']); const durationSeconds = Number.isFinite(durationValue) ? Math.max(0.001, Math.round(durationValue * 1000) / 1000) : 10; const [positionRows] = await pool.query('SELECT COALESCE(MAX(position), -1) AS max_position FROM c_playlist_slides WHERE playlist_id = ?', [playlist.id]); const nextPosition = Number(positionRows[0].max_position) + 1; diff --git a/src/web/routes/admin/rbac.js b/src/web/routes/admin/rbac.js index 2f17bac..eae8d20 100644 --- a/src/web/routes/admin/rbac.js +++ b/src/web/routes/admin/rbac.js @@ -5,6 +5,7 @@ const common = deps.common; const pages = deps.pages; const getAuditUserId = deps.getAuditUserId; + const recordRequestAuditEvent = deps.recordRequestAuditEvent; const rbacData = deps.rbacData; const permissions = Array.isArray(deps.permissions) ? deps.permissions : []; const readArrayField = deps.readArrayField; @@ -114,6 +115,7 @@ sectionIndex: toSortIndex(permission.sectionIndex), sectionOrder: Number(permission.sectionOrder) || 999, resourceIndex: toSortIndex(permission.resourceIndex), + resourceOrder: Number(permission.resourceOrder) || 999, permissions: [] }; groupIndex.set(sectionKey, group); @@ -191,7 +193,7 @@ }; } - app.get('/rbac', requirePermission('rbac.read'), async function (req, res, next) { + app.get('/settings/roles', requirePermission('rbac.read'), async function (req, res, next) { try { const page = Math.max(1, Math.floor(Number(req.query.page) || 1)); const search = common.getSearchQuery(req); @@ -207,7 +209,7 @@ } }); - app.get('/rbac/new', requirePermission('rbac.create'), function (req, res, next) { + app.get('/settings/roles/new', requirePermission('rbac.create'), function (req, res, next) { const page = Math.max(1, Math.floor(Number(req.query.page) || 1)); const search = common.getSearchQuery(req); const sort = common.getSortQuery(req); @@ -223,7 +225,7 @@ }); }); - app.get('/rbac/:id/duplicate', requirePermission('rbac.read'), requirePermission('rbac.create'), async function (req, res, next) { + app.get('/settings/roles/:id/duplicate', requirePermission('rbac.read'), requirePermission('rbac.create'), async function (req, res, next) { try { const roleId = Number(req.params.id); if (!Number.isInteger(roleId) || roleId <= 0) { @@ -252,7 +254,7 @@ } }); - app.post('/rbac', requirePermission('rbac.create'), async function (req, res, next) { + app.post('/settings/roles', requirePermission('rbac.create'), async function (req, res, next) { try { const name = common.validateMaxLength(req.body.name || '', ROLE_NAME_MAX_LENGTH, 'Role name'); const description = common.validateMaxLength(req.body.description || '', ROLE_DESCRIPTION_MAX_LENGTH, 'Role description'); @@ -319,13 +321,24 @@ } finally { connection.release(); } - res.redirect('/rbac/' + insertedRoleId + '/edit?message=' + encodeURIComponent('Role created.')); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'roles', + eventType: 'role.created', + actorUserId: actorId, + targetType: 'role', + targetId: insertedRoleId, + targetLabel: name, + details: { permissionKeys: selectedPermissionKeys, userIds: normalizedUserIds } + }); + } + res.redirect('/settings/roles/' + insertedRoleId + '/edit?message=' + encodeURIComponent('Role created.')); } catch (error) { next(error); } }); - app.get('/rbac/:id/edit', requirePermission('rbac.update'), async function (req, res, next) { + app.get('/settings/roles/:id/edit', requirePermission('rbac.update'), async function (req, res, next) { try { const roleId = Number(req.params.id); if (!Number.isInteger(roleId) || roleId <= 0) { @@ -354,7 +367,7 @@ } }); - app.post('/rbac/:id', requirePermission('rbac.update'), async function (req, res, next) { + app.post('/settings/roles/:id', requirePermission('rbac.update'), async function (req, res, next) { try { const roleId = Number(req.params.id); if (!Number.isInteger(roleId) || roleId <= 0) { @@ -376,15 +389,18 @@ const selectedUserIds = shouldSyncUsers ? readArrayField(req.body, ['user_ids[]', 'user_ids']) : []; + const visibleUserIds = shouldSyncUsers + ? normalizeSelectedIds(readArrayField(req.body, ['user_ids_present[]', 'user_ids_present'])) + : []; const normalizedPermissionKeys = shouldSyncPermissions ? normalizePermissionKeys(selectedPermissionKeys) : []; - const normalizedUserIds = shouldSyncUsers ? normalizeSelectedIds(selectedUserIds) : []; + let normalizedUserIds = shouldSyncUsers ? normalizeSelectedIds(selectedUserIds) : []; if (!name) { - return res.redirect('/rbac/' + roleId + '/edit?message=' + encodeURIComponent('Role name is required.')); + return res.redirect('/settings/roles/' + roleId + '/edit?message=' + encodeURIComponent('Role name is required.')); } if (await common.fetchDuplicateName(pool, 'a_roles', name, roleId)) { - return res.redirect('/rbac/' + roleId + '/edit?message=' + encodeURIComponent('A role with that name already exists.')); + return res.redirect('/settings/roles/' + roleId + '/edit?message=' + encodeURIComponent('A role with that name already exists.')); } const validPermissionKeys = new Set(permissions.map(function (permission) { @@ -393,12 +409,17 @@ if (shouldSyncPermissions && normalizedPermissionKeys.some(function (permissionKey) { return !validPermissionKeys.has(permissionKey); })) { - return res.redirect('/rbac/' + roleId + '/edit?message=' + encodeURIComponent('One or more selected permissions are invalid.')); + return res.redirect('/settings/roles/' + roleId + '/edit?message=' + encodeURIComponent('One or more selected permissions are invalid.')); } let availableUsers = []; if (shouldSyncUsers) { availableUsers = await rbacData.fetchUsersWithRoles(pool); + const existingRoleUserIds = await rbacData.fetchRoleUserIds(pool, roleId); + const visibleUserIdSet = new Set(visibleUserIds); + normalizedUserIds = existingRoleUserIds.filter(function (userId) { + return !visibleUserIdSet.has(userId); + }).concat(normalizedUserIds); } const validUserIds = new Set(availableUsers.map(function (user) { return Number(user.id); @@ -406,7 +427,7 @@ if (shouldSyncUsers && normalizedUserIds.some(function (userId) { return !validUserIds.has(userId); })) { - return res.redirect('/rbac/' + roleId + '/edit?message=' + encodeURIComponent('One or more selected users are invalid.')); + return res.redirect('/settings/roles/' + roleId + '/edit?message=' + encodeURIComponent('One or more selected users are invalid.')); } const connection = await pool.getConnection(); @@ -429,13 +450,24 @@ } finally { connection.release(); } - res.redirect('/rbac/' + roleId + '/edit?message=' + encodeURIComponent('Role updated.')); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'roles', + eventType: 'role.updated', + actorUserId: req.currentUser.id, + targetType: 'role', + targetId: roleId, + targetLabel: name, + details: { permissionsChanged: shouldSyncPermissions, usersChanged: shouldSyncUsers } + }); + } + res.redirect('/settings/roles/' + roleId + '/edit?message=' + encodeURIComponent('Role updated.')); } catch (error) { next(error); } }); - app.post('/rbac/:id/permissions', requirePermission('rbac.update'), async function (req, res, next) { + app.post('/settings/roles/:id/permissions', requirePermission('rbac.update'), async function (req, res, next) { try { const roleId = Number(req.params.id); if (!Number.isInteger(roleId) || roleId <= 0) { @@ -459,7 +491,7 @@ if (normalizedPermissionKeys.some(function (permissionKey) { return !validPermissionKeys.has(permissionKey); })) { - return res.redirect('/rbac/' + roleId + '/edit?message=' + encodeURIComponent('One or more selected permissions are invalid.')); + return res.redirect('/settings/roles/' + roleId + '/edit?message=' + encodeURIComponent('One or more selected permissions are invalid.')); } const connection = await pool.getConnection(); @@ -473,13 +505,24 @@ } finally { connection.release(); } - res.redirect('/rbac/' + roleId + '/edit?message=' + encodeURIComponent('Permissions updated.')); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'roles', + eventType: 'role.permissions_updated', + actorUserId: req.currentUser.id, + targetType: 'role', + targetId: roleId, + targetLabel: role.name, + details: { permissionKeys: normalizedPermissionKeys } + }); + } + res.redirect('/settings/roles/' + roleId + '/edit?message=' + encodeURIComponent('Permissions updated.')); } catch (error) { next(error); } }); - app.post('/rbac/:id/users', requirePermission('rbac.update'), async function (req, res, next) { + app.post('/settings/roles/:id/users', requirePermission('rbac.update'), async function (req, res, next) { try { const roleId = Number(req.params.id); if (!Number.isInteger(roleId) || roleId <= 0) { @@ -505,17 +548,28 @@ if (normalizedUserIds.some(function (userId) { return !validUserIds.has(userId); })) { - return res.redirect('/rbac/' + roleId + '/edit?message=' + encodeURIComponent('One or more selected users are invalid.')); + return res.redirect('/settings/roles/' + roleId + '/edit?message=' + encodeURIComponent('One or more selected users are invalid.')); } await rbacData.syncRoleUsers(pool, roleId, normalizedUserIds); - res.redirect('/rbac/' + roleId + '/edit?message=' + encodeURIComponent('Users updated.')); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'roles', + eventType: 'role.users_updated', + actorUserId: req.currentUser.id, + targetType: 'role', + targetId: roleId, + targetLabel: role.name, + details: { userIds: normalizedUserIds } + }); + } + res.redirect('/settings/roles/' + roleId + '/edit?message=' + encodeURIComponent('Users updated.')); } catch (error) { next(error); } }); - app.post('/rbac/:id/delete', requirePermission('rbac.delete'), async function (req, res, next) { + app.post('/settings/roles/:id/delete', requirePermission('rbac.delete'), async function (req, res, next) { try { const roleId = Number(req.params.id); if (!Number.isInteger(roleId) || roleId <= 0) { @@ -527,14 +581,24 @@ return res.status(404).send('Role not found.'); } if (String(role.role_key || '') === 'administrators') { - return res.redirect('/rbac?message=' + encodeURIComponent('The built-in Administrators role cannot be deleted.')); + return res.redirect('/settings/roles?message=' + encodeURIComponent('The built-in Administrators role cannot be deleted.')); } if (Number(role.user_count) > 0) { - return res.redirect('/rbac?message=' + encodeURIComponent('Remove all users from this role before deleting it.')); + return res.redirect('/settings/roles?message=' + encodeURIComponent('Remove all users from this role before deleting it.')); } await pool.query('DELETE FROM a_roles WHERE id = ?', [roleId]); - res.redirect('/rbac?message=' + encodeURIComponent('Role deleted.')); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'roles', + eventType: 'role.deleted', + actorUserId: req.currentUser.id, + targetType: 'role', + targetId: roleId, + targetLabel: role.name + }); + } + res.redirect('/settings/roles?message=' + encodeURIComponent('Role deleted.')); } catch (error) { next(error); } diff --git a/src/web/routes/admin/users.js b/src/web/routes/admin/users.js index 0fa2724..3689788 100644 --- a/src/web/routes/admin/users.js +++ b/src/web/routes/admin/users.js @@ -1,11 +1,14 @@ // Admin user route registration and user-role management. + const { fetchAppSettings } = require('../../../data/app-settings'); + module.exports = function registerUsersRoutes(app, deps) { const pool = deps.pool; const common = deps.common; const pages = deps.pages; const formatDashboardDate = deps.formatDashboardDate; const getAuditUserId = deps.getAuditUserId; + const recordRequestAuditEvent = deps.recordRequestAuditEvent; const hashPassword = deps.hashPassword; const validatePasswordStrength = deps.validatePasswordStrength; const readArrayField = deps.readArrayField; @@ -23,6 +26,23 @@ return rbacData.fetchRoles(pool); } + async function shouldRequirePasswordChange(settingKey) { + const settings = await fetchAppSettings(pool); + return Boolean(settings[settingKey]); + } + + async function getPasswordRequirements() { + const settings = await fetchAppSettings(pool); + return { + minimumLength: settings['security.password_min_length'], + minimumCategories: settings['security.password_min_categories'], + requireLowercase: settings['security.password_require_lowercase'], + requireUppercase: settings['security.password_require_uppercase'], + requireNumber: settings['security.password_require_number'], + requireSymbol: settings['security.password_require_symbol'] + }; + } + function mapRolesForForm(roles, selectedRoleIds) { const selectedIds = new Set((Array.isArray(selectedRoleIds) ? selectedRoleIds : []).map(function (roleId) { return Number(roleId); @@ -57,7 +77,7 @@ return { ok: true, roleIds: normalizedRoleIds }; } - app.get('/users', requirePermission('users.read'), async function (req, res, next) { + app.get('/settings/users', requirePermission('users.read'), async function (req, res, next) { try { const page = Math.max(1, Math.floor(Number(req.query.page) || 1)); const search = common.getSearchQuery(req); @@ -81,7 +101,7 @@ } }); - app.get('/users/new', requirePermission('users.create'), function (req, res) { + app.get('/settings/users/new', requirePermission('users.create'), function (req, res) { fetchRoleOptions().then(function (roles) { res.send(pages.renderUsersAddPage(req.query.message ? String(req.query.message) : '', req.currentUser, mapRolesForForm(roles, []), {}, 'primary')); }).catch(function (error) { @@ -89,7 +109,7 @@ }); }); - app.get('/users/:id/duplicate', requirePermission('users.read'), requirePermission('users.create'), async function (req, res, next) { + app.get('/settings/users/:id/duplicate', requirePermission('users.read'), requirePermission('users.create'), async function (req, res, next) { try { const userId = Number(req.params.id); if (!Number.isInteger(userId) || userId <= 0) { @@ -100,8 +120,9 @@ if (!user) { return res.status(404).send('User not found.'); } + if (Number(req.currentUser.id) === userId) { - return res.redirect('/users?message=' + encodeURIComponent('Use Add user to create another login for yourself.')); + return res.redirect('/settings/users?message=' + encodeURIComponent('Use Add user to create another login for yourself.')); } const roles = await fetchRoleOptions(); @@ -121,7 +142,7 @@ } }); - app.get('/users/:id/edit', requirePermission('users.update'), async function (req, res, next) { + app.get('/settings/users/:id/edit', requirePermission('users.update'), async function (req, res, next) { try { const userId = Number(req.params.id); if (!Number.isInteger(userId) || userId <= 0) { @@ -140,19 +161,62 @@ const canDelete = !countRows.length || Number(countRows[0].user_count) > 1; const roles = await fetchRoleOptions(); + const sessions = (await rbacData.fetchActiveUserSessions(pool, userId)).map(function (session) { + return { + id: Number(session.id), + ipAddress: String(session.ip_address || 'Unknown'), + userAgent: String(session.user_agent || 'Unknown browser'), + createdAtLabel: formatDashboardDate(session.created_at), + lastUsedAtLabel: formatDashboardDate(session.last_used_at), + expiresAtLabel: formatDashboardDate(session.expires_at) + }; + }); res.send(pages.renderUsersEditPage(Object.assign({}, user, { isCurrentUser: false, createdAtLabel: formatDashboardDate(user.created_at), modifiedAtLabel: formatDashboardDate(user.modified_at), roleNames: String(user.roleNames || '').trim() || 'No roles assigned', inUse: !canDelete - }), req.query.message ? String(req.query.message) : '', req.currentUser, mapRolesForForm(roles, user.roleIds))); + }), req.query.message ? String(req.query.message) : '', req.currentUser, mapRolesForForm(roles, user.roleIds), sessions)); } catch (error) { next(error); } }); - app.post('/users', requirePermission('users.create'), async function (req, res, next) { + app.post('/settings/users/:id/sessions/:sessionId/revoke', requirePermission('users.update'), async function (req, res, next) { + try { + const userId = Number(req.params.id); + const sessionId = Number(req.params.sessionId); + if (!Number.isInteger(userId) || userId <= 0 || !Number.isInteger(sessionId) || sessionId <= 0) { + return res.status(400).send('Invalid session.'); + } + if (Number(req.currentUser.id) === userId) { + return res.redirect('/account?message=' + encodeURIComponent('Use My Account to manage your own sessions.')); + } + const [result] = await pool.query('DELETE FROM a_sessions WHERE id = ? AND user_id = ?', [sessionId, userId]); + res.redirect('/settings/users/' + userId + '/edit?message=' + encodeURIComponent(result && result.affectedRows ? 'Session signed out.' : 'Session was not found.')); + } catch (error) { + next(error); + } + }); + + app.post('/settings/users/:id/sessions/revoke-all', requirePermission('users.update'), async function (req, res, next) { + try { + const userId = Number(req.params.id); + if (!Number.isInteger(userId) || userId <= 0) { + return res.status(400).send('Invalid user.'); + } + if (Number(req.currentUser.id) === userId) { + return res.redirect('/account?message=' + encodeURIComponent('Use My Account to manage your own sessions.')); + } + await pool.query('DELETE FROM a_sessions WHERE user_id = ?', [userId]); + res.redirect('/settings/users/' + userId + '/edit?message=' + encodeURIComponent('All sessions signed out.')); + } catch (error) { + next(error); + } + }); + + app.post('/settings/users', requirePermission('users.create'), async function (req, res, next) { const connection = await pool.getConnection(); try { const name = common.validateMaxLength(req.body.name || '', USER_NAME_MAX_LENGTH, 'Name'); @@ -178,7 +242,7 @@ if (!username) { return renderValidationError('Username is required.'); } - const passwordStrengthMessage = validatePasswordStrength(password); + const passwordStrengthMessage = validatePasswordStrength(password, await getPasswordRequirements()); if (passwordStrengthMessage) { return renderValidationError(passwordStrengthMessage); } @@ -198,18 +262,30 @@ } const passwordRecord = hashPassword(password); + const mustChangePassword = await shouldRequirePasswordChange('security.require_password_change_for_new_users'); const actorId = getAuditUserId(req); await connection.beginTransaction(); const [result] = await connection.query( - 'INSERT INTO a_users (name, username, password_hash, password_salt, password_iterations, created_by, modified_by) VALUES (?, ?, ?, ?, ?, ?, ?)', - [name, username, passwordRecord.hash, passwordRecord.salt, passwordRecord.iterations, actorId, actorId] + 'INSERT INTO a_users (name, username, password_hash, password_salt, password_iterations, must_change_password, created_by, modified_by) VALUES (?, ?, ?, ?, ?, ?, ?, ?)', + [name, username, passwordRecord.hash, passwordRecord.salt, passwordRecord.iterations, mustChangePassword ? 1 : 0, actorId, actorId] ); await rbacData.syncUserRoles(connection, result.insertId, roleCheck.roleIds); await connection.commit(); - if (saveAction === 'new') { - return res.redirect('/users/new?message=' + encodeURIComponent('User created.')); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'users', + eventType: 'user.created', + actorUserId: actorId, + targetType: 'user', + targetId: result.insertId, + targetLabel: username, + details: { roleIds: roleCheck.roleIds } + }); } - res.redirect('/users/' + result.insertId + '/edit?message=' + encodeURIComponent('User created.')); + if (saveAction === 'new') { + return res.redirect('/settings/users/new?message=' + encodeURIComponent('User created.')); + } + res.redirect('/settings/users/' + result.insertId + '/edit?message=' + encodeURIComponent('User created.')); } catch (error) { try { await connection.rollback(); @@ -222,7 +298,7 @@ } }); - app.post('/users/:id/roles', requirePermission('users.update'), async function (req, res, next) { + app.post('/settings/users/:id/roles', requirePermission('users.update'), async function (req, res, next) { try { const userId = Number(req.params.id); if (!Number.isInteger(userId) || userId <= 0) { @@ -240,17 +316,28 @@ const selectedRoleIds = readArrayField(req.body, ['role_ids[]', 'role_ids']); const roleCheck = await validateRoleIds(selectedRoleIds); if (!roleCheck.ok) { - return res.redirect('/users/' + userId + '/edit?message=' + encodeURIComponent(roleCheck.message)); + return res.redirect('/settings/users/' + userId + '/edit?message=' + encodeURIComponent(roleCheck.message)); } await rbacData.syncUserRoles(pool, userId, roleCheck.roleIds); - res.redirect('/users/' + userId + '/edit?message=' + encodeURIComponent('Roles updated.')); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'users', + eventType: 'user.roles_updated', + actorUserId: req.currentUser.id, + targetType: 'user', + targetId: userId, + targetLabel: String(userId), + details: { roleIds: roleCheck.roleIds } + }); + } + res.redirect('/settings/users/' + userId + '/edit?message=' + encodeURIComponent('Roles updated.')); } catch (error) { next(error); } }); - app.post('/users/:id/username', requirePermission('users.update'), async function (req, res, next) { + app.post('/settings/users/:id/username', requirePermission('users.update'), async function (req, res, next) { const connection = await pool.getConnection(); try { const userId = Number(req.params.id); @@ -274,6 +361,7 @@ } const username = common.validateMaxLength(req.body.username || user.username || '', USER_USERNAME_MAX_LENGTH, 'Username'); + const accountLocked = req.body.account_locked === '1' || (Array.isArray(req.body.account_locked) && req.body.account_locked.includes('1')); const [countRows] = await pool.query('SELECT COUNT(*) AS user_count FROM a_users'); const canDelete = !countRows.length || Number(countRows[0].user_count) > 1; @@ -296,7 +384,7 @@ return renderValidationError('Username is required.'); } if (shouldUpdatePassword) { - const passwordStrengthMessage = validatePasswordStrength(password); + const passwordStrengthMessage = validatePasswordStrength(password, await getPasswordRequirements()); if (passwordStrengthMessage) { return renderValidationError(passwordStrengthMessage); } @@ -317,25 +405,61 @@ } await connection.beginTransaction(); - const [result] = await connection.query('UPDATE a_users SET name = ?, username = ?, modified_by = ? WHERE id = ?', [name, username, getAuditUserId(req), userId]); + const [result] = await connection.query('UPDATE a_users SET name = ?, username = ?, account_locked = ?, modified_by = ? WHERE id = ?', [name, username, accountLocked ? 1 : 0, getAuditUserId(req), userId]); if (!result.affectedRows) { await connection.rollback(); return res.status(404).send('User not found.'); } await rbacData.syncUserRoles(connection, userId, roleCheck.roleIds); + if (accountLocked) { + await connection.query('DELETE FROM a_sessions WHERE user_id = ?', [userId]); + } if (shouldUpdatePassword) { const passwordRecord = hashPassword(password); + const mustChangePassword = await shouldRequirePasswordChange('security.require_password_change_after_admin_reset'); await connection.query( - 'UPDATE a_users SET password_hash = ?, password_salt = ?, password_iterations = ?, modified_by = ? WHERE id = ?', - [passwordRecord.hash, passwordRecord.salt, passwordRecord.iterations, getAuditUserId(req), userId] + 'UPDATE a_users SET password_hash = ?, password_salt = ?, password_iterations = ?, must_change_password = ?, modified_by = ? WHERE id = ?', + [passwordRecord.hash, passwordRecord.salt, passwordRecord.iterations, mustChangePassword ? 1 : 0, getAuditUserId(req), userId] ); await connection.query('DELETE FROM a_sessions WHERE user_id = ?', [userId]); } await connection.commit(); - if (saveAction === 'new') { - return res.redirect('/users/new?message=' + encodeURIComponent('User updated.')); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'users', + eventType: 'user.updated', + actorUserId: req.currentUser.id, + targetType: 'user', + targetId: userId, + targetLabel: username, + details: { roleIds: roleCheck.roleIds, passwordReset: shouldUpdatePassword, accountLocked: accountLocked } + }); + if (Boolean(user.account_locked) !== accountLocked) { + await recordRequestAuditEvent(pool, req, { + category: 'security', + eventType: accountLocked ? 'account.locked' : 'account.unlocked', + actorUserId: req.currentUser.id, + targetType: 'user', + targetId: userId, + targetLabel: username + }); + } + if (shouldUpdatePassword) { + await recordRequestAuditEvent(pool, req, { + category: 'security', + eventType: 'password.reset', + actorUserId: req.currentUser.id, + targetType: 'user', + targetId: userId, + targetLabel: username, + details: { source: 'administrator' } + }); + } } - res.redirect('/users?message=' + encodeURIComponent('User updated.')); + if (saveAction === 'new') { + return res.redirect('/settings/users/new?message=' + encodeURIComponent('User updated.')); + } + res.redirect('/settings/users?message=' + encodeURIComponent('User updated.')); } catch (error) { try { await connection.rollback(); @@ -348,12 +472,12 @@ } }); - app.post('/users/:id/password', requirePermission('users.update'), async function (req, res, next) { + app.post('/settings/users/:id/password', requirePermission('users.update'), async function (req, res, next) { try { const userId = Number(req.params.id); const password = String(req.body.password || ''); const confirmPassword = String(req.body.confirm_password || ''); - const editUrl = '/users/' + userId + '/edit'; + const editUrl = '/settings/users/' + userId + '/edit'; if (!Number.isInteger(userId) || userId <= 0) { return res.status(400).send('Invalid user.'); @@ -361,7 +485,7 @@ if (Number(req.currentUser.id) === userId) { return res.redirect('/account?message=' + encodeURIComponent('Use My Account to change your own password.')); } - const passwordStrengthMessage = validatePasswordStrength(password); + const passwordStrengthMessage = validatePasswordStrength(password, await getPasswordRequirements()); if (passwordStrengthMessage) { return res.redirect(editUrl + '?message=' + encodeURIComponent(passwordStrengthMessage)); } @@ -375,37 +499,60 @@ } const passwordRecord = hashPassword(password); + const mustChangePassword = await shouldRequirePasswordChange('security.require_password_change_after_admin_reset'); await pool.query( - 'UPDATE a_users SET password_hash = ?, password_salt = ?, password_iterations = ?, modified_by = ? WHERE id = ?', - [passwordRecord.hash, passwordRecord.salt, passwordRecord.iterations, getAuditUserId(req), userId] + 'UPDATE a_users SET password_hash = ?, password_salt = ?, password_iterations = ?, must_change_password = ?, modified_by = ? WHERE id = ?', + [passwordRecord.hash, passwordRecord.salt, passwordRecord.iterations, mustChangePassword ? 1 : 0, getAuditUserId(req), userId] ); await pool.query('DELETE FROM a_sessions WHERE user_id = ?', [userId]); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'security', + eventType: 'password.reset', + actorUserId: req.currentUser.id, + targetType: 'user', + targetId: userId, + targetLabel: rows[0].username || String(userId), + details: { source: 'administrator' } + }); + } res.redirect(editUrl + '?message=' + encodeURIComponent('Password updated.')); } catch (error) { next(error); } }); - app.post('/users/:id/delete', requirePermission('users.delete'), async function (req, res, next) { + app.post('/settings/users/:id/delete', requirePermission('users.delete'), async function (req, res, next) { try { const userId = Number(req.params.id); if (!Number.isInteger(userId) || userId <= 0) { return res.status(400).send('Invalid user.'); } if (Number(req.currentUser.id) === userId) { - return res.redirect('/users?message=' + encodeURIComponent('You cannot delete your own account from the users page.')); + return res.redirect('/settings/users?message=' + encodeURIComponent('You cannot delete your own account from the users page.')); } const [countRows] = await pool.query('SELECT COUNT(*) AS user_count FROM a_users'); if (!countRows.length || Number(countRows[0].user_count) <= 1) { - return res.redirect('/users?message=' + encodeURIComponent('At least one user must remain.')); + return res.redirect('/settings/users?message=' + encodeURIComponent('At least one user must remain.')); } + const [userRows] = await pool.query('SELECT username FROM a_users WHERE id = ? LIMIT 1', [userId]); const [result] = await pool.query('DELETE FROM a_users WHERE id = ?', [userId]); if (!result.affectedRows) { return res.status(404).send('User not found.'); } - res.redirect('/users?message=' + encodeURIComponent('User deleted.')); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'users', + eventType: 'user.deleted', + actorUserId: req.currentUser.id, + targetType: 'user', + targetId: userId, + targetLabel: userRows[0] && userRows[0].username ? userRows[0].username : String(userId) + }); + } + res.redirect('/settings/users?message=' + encodeURIComponent('User deleted.')); } catch (error) { next(error); } diff --git a/src/web/routes/auth/index.js b/src/web/routes/auth/index.js index 0c41df8..956c6d6 100644 --- a/src/web/routes/auth/index.js +++ b/src/web/routes/auth/index.js @@ -1,12 +1,14 @@ // Authentication route registration for the web app. const { normalizeReturnToPath, getRequestOrigin } = require('../../lib/auth/session'); +const { fetchAppSettings } = require('../../../data/app-settings'); module.exports = function registerAuthRoutes(app, deps) { const pool = deps.pool; const pages = deps.pages; const createUserSession = deps.createUserSession; const setSessionCookie = deps.setSessionCookie; + const getSessionMaxAgeMs = deps.getSessionMaxAgeMs; const clearSessionCookie = deps.clearSessionCookie; const parseCookies = deps.parseCookies; const consumeAuthMessageCookie = deps.consumeAuthMessageCookie; @@ -14,13 +16,65 @@ module.exports = function registerAuthRoutes(app, deps) { const hashSessionToken = deps.hashSessionToken; const verifyPassword = deps.verifyPassword; const sessionCookieName = deps.sessionCookieName; + const recordRequestAuditEvent = deps.recordRequestAuditEvent; function getReturnTo(req) { return normalizeReturnToPath(req && (req.query && req.query.returnTo || req.body && req.body.returnTo), getRequestOrigin(req)); } - function buildLoginRedirect(returnTo) { - return returnTo ? '/login?returnTo=' + encodeURIComponent(returnTo) : '/login'; + function buildLoginRedirect(returnTo, username) { + const query = []; + if (returnTo) query.push('returnTo=' + encodeURIComponent(returnTo)); + if (username) query.push('username=' + encodeURIComponent(username)); + return query.length ? '/login?' + query.join('&') : '/login'; + } + + function getClientAddress(req) { + const forwardedAddress = String(req && req.headers && req.headers['x-forwarded-for'] || '').split(',')[0].trim(); + return forwardedAddress || String(req && req.ip || req && req.socket && req.socket.remoteAddress || 'unknown').trim() || 'unknown'; + } + + function getRateLimitKey(username, address, scope) { + if (scope === 'username') return 'username:' + username; + if (scope === 'ip') return 'ip:' + address; + return 'both:' + JSON.stringify([username, address]); + } + + async function getLoginRateLimitSettings() { + const settings = await fetchAppSettings(pool); + return { + maxAttempts: Number(settings['security.login_max_attempts']) || 5, + lockoutMinutes: Number(settings['security.login_lockout_minutes']) || 15, + scope: String(settings['security.login_rate_limit_scope'] || 'both') + }; + } + + async function getLoginRateLimitStatus(rateKey) { + const [rows] = await pool.query('SELECT locked_until FROM a_login_attempts WHERE rate_key = ? LIMIT 1', [rateKey]); + const lockedUntil = rows && rows[0] && rows[0].locked_until ? new Date(rows[0].locked_until).getTime() : 0; + return { + limited: lockedUntil > Date.now(), + remainingMinutes: Math.max(1, Math.ceil((lockedUntil - Date.now()) / 60000)) + }; + } + + async function recordFailedLogin(rateKey, settings) { + const [rows] = await pool.query('SELECT failed_count, locked_until FROM a_login_attempts WHERE rate_key = ? LIMIT 1', [rateKey]); + const existing = rows && rows[0] ? rows[0] : null; + const existingLockedUntil = existing && existing.locked_until ? new Date(existing.locked_until).getTime() : 0; + const currentCount = existingLockedUntil && existingLockedUntil <= Date.now() ? 0 : Number(existing && existing.failed_count) || 0; + const failedCount = currentCount + 1; + const lockedUntil = failedCount >= settings.maxAttempts ? new Date(Date.now() + settings.lockoutMinutes * 60 * 1000) : null; + if (existing) { + await pool.query('UPDATE a_login_attempts SET failed_count = ?, last_failed_at = ?, locked_until = ? WHERE rate_key = ?', [failedCount, new Date(), lockedUntil, rateKey]); + return lockedUntil ? { remainingMinutes: Math.max(1, Math.ceil((lockedUntil.getTime() - Date.now()) / 60000)) } : null; + } + await pool.query('INSERT INTO a_login_attempts (rate_key, failed_count, last_failed_at, locked_until) VALUES (?, ?, ?, ?)', [rateKey, failedCount, new Date(), lockedUntil]); + return lockedUntil ? { remainingMinutes: Math.max(1, Math.ceil((lockedUntil.getTime() - Date.now()) / 60000)) } : null; + } + + async function clearFailedLogins(rateKey) { + await pool.query('DELETE FROM a_login_attempts WHERE rate_key = ?', [rateKey]); } app.get('/', function (req, res) { @@ -36,7 +90,7 @@ module.exports = function registerAuthRoutes(app, deps) { const message = typeof consumeAuthMessageCookie === 'function' ? consumeAuthMessageCookie(req, res) : (req.query.message ? String(req.query.message) : ''); - res.send(pages.renderLoginPage(message, returnTo)); + res.send(pages.renderLoginPage(message, returnTo, req.query.username ? String(req.query.username) : '')); }); app.post('/login', async function (req, res, next) { @@ -47,21 +101,92 @@ module.exports = function registerAuthRoutes(app, deps) { return res.status(400).send('Username and password are required.'); } - const [rows] = await pool.query('SELECT id, name, username, password_hash, password_salt, password_iterations FROM a_users WHERE username = ? LIMIT 1', [username]); - const user = rows[0] || null; - if (!user || !verifyPassword(password, user)) { + const loginRateLimitSettings = await getLoginRateLimitSettings(); + const rateKey = getRateLimitKey(username.toLowerCase(), getClientAddress(req), loginRateLimitSettings.scope); + const rateLimitStatus = await getLoginRateLimitStatus(rateKey); + if (rateLimitStatus.limited) { + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'authentication', + eventType: 'login.locked_out', + targetType: 'user', + targetLabel: username, + details: { reason: 'rate_limit' } + }); + } + const message = 'Too many failed login attempts. Try again in ' + rateLimitStatus.remainingMinutes + ' minute' + (rateLimitStatus.remainingMinutes === 1 ? '' : 's') + '.'; const returnTo = getReturnTo(req); if (typeof setAuthMessageCookie === 'function') { - setAuthMessageCookie(res, 'Invalid username or password.'); - return res.redirect(buildLoginRedirect(returnTo)); + setAuthMessageCookie(res, message); + return res.redirect(buildLoginRedirect(returnTo, username)); } - - return res.status(401).send(pages.renderLoginPage('Invalid username or password.', returnTo)); + return res.status(401).send(pages.renderLoginPage(message, returnTo, username)); } + const [rows] = await pool.query('SELECT id, name, username, password_hash, password_salt, password_iterations, account_locked FROM a_users WHERE username = ? LIMIT 1', [username]); + const user = rows[0] || null; + if (user && user.account_locked) { + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'security', + eventType: 'login.blocked_account_locked', + targetType: 'user', + targetId: user.id, + targetLabel: user.username + }); + } + const returnTo = getReturnTo(req); + const message = 'This account is locked. Contact an administrator.'; + if (typeof setAuthMessageCookie === 'function') { + setAuthMessageCookie(res, message); + return res.redirect(buildLoginRedirect(returnTo, username)); + } + return res.status(401).send(pages.renderLoginPage(message, returnTo, username)); + } + if (!user || !verifyPassword(password, user)) { + const lockout = await recordFailedLogin(rateKey, loginRateLimitSettings); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'authentication', + eventType: lockout ? 'login.lockout' : 'login.failed', + targetType: user ? 'user' : 'username', + targetId: user ? user.id : null, + targetLabel: user ? user.username : username, + details: { reason: user ? 'invalid_password' : 'unknown_username' } + }); + } + const message = lockout + ? 'Too many failed login attempts. Try again in ' + lockout.remainingMinutes + ' minute' + (lockout.remainingMinutes === 1 ? '' : 's') + '.' + : 'Invalid username or password.'; + const returnTo = getReturnTo(req); + if (typeof setAuthMessageCookie === 'function') { + setAuthMessageCookie(res, message); + return res.redirect(buildLoginRedirect(returnTo, username)); + } + + return res.status(401).send(pages.renderLoginPage(message, returnTo, username)); + } + + await clearFailedLogins(rateKey); const returnTo = getReturnTo(req); - const token = await createUserSession(pool, user.id); - setSessionCookie(res, token); + const sessionMaxAgeMs = typeof getSessionMaxAgeMs === 'function' ? await getSessionMaxAgeMs() : undefined; + const token = await createUserSession(pool, user.id, sessionMaxAgeMs, { + ipAddress: getClientAddress(req), + userAgent: req.headers && req.headers['user-agent'] + }); + const rememberMe = req.body.remember_me === '1' || req.body.remember_me === 'true' || req.body.remember_me === true; + setSessionCookie(res, token, rememberMe ? sessionMaxAgeMs : null); + if (typeof recordRequestAuditEvent === 'function') { + await recordRequestAuditEvent(pool, req, { + category: 'authentication', + eventType: 'login.success', + actorUserId: user.id, + targetType: 'user', + targetId: user.id, + targetLabel: user.username, + details: { rememberMe: rememberMe } + }); + } res.redirect(returnTo || '/dashboard'); } catch (error) { next(error); @@ -75,6 +200,16 @@ module.exports = function registerAuthRoutes(app, deps) { if (token) { await pool.query('DELETE FROM a_sessions WHERE session_hash = ?', [hashSessionToken(token)]); } + if (typeof recordRequestAuditEvent === 'function' && req.currentUser) { + await recordRequestAuditEvent(pool, req, { + category: 'sessions', + eventType: 'session.logout', + actorUserId: req.currentUser.id, + targetType: 'user', + targetId: req.currentUser.id, + targetLabel: req.currentUser.username + }); + } clearSessionCookie(res); if (typeof setAuthMessageCookie === 'function') { setAuthMessageCookie(res, 'You have been signed out.'); diff --git a/src/web/routes/auth/login.js b/src/web/routes/auth/login.js index 1d4a08d..7b0d8b9 100644 --- a/src/web/routes/auth/login.js +++ b/src/web/routes/auth/login.js @@ -2,13 +2,14 @@ const { renderView } = require('../../view'); -module.exports = function renderLoginPage(message, returnTo) { +module.exports = function renderLoginPage(message, returnTo, username) { return renderView('auth/login', { title: 'Sign in', authShell: true, bodyClass: 'login-page-body', message: message || '', returnTo: returnTo || '', + username: username || '', messageVariant: 'warning' }); }; \ No newline at end of file diff --git a/src/web/routes/data-sources/api-sources/routes.js b/src/web/routes/data-sources/api-sources/routes.js index 7909698..67fb516 100644 --- a/src/web/routes/data-sources/api-sources/routes.js +++ b/src/web/routes/data-sources/api-sources/routes.js @@ -5,6 +5,7 @@ const renderApiSourcesPage = require('./list'); const renderApiSourceAddPage = require('./add'); const renderApiSourceEditPage = require('./edit'); const { buildDuplicateApiSourceName, buildDuplicateApiSource } = require('./duplicate'); +const { fetchAppSettings } = require('../../../../data/app-settings'); function toIsoTimestamp(value) { if (!value) { @@ -123,8 +124,16 @@ module.exports = function registerApiSourceRoutes(app, deps) { } }); - app.get('/data-sources/api-sources/new', requirePermission('api-sources.create'), function (req, res) { - res.send(renderApiSourceAddPage(null, req.query.message ? String(req.query.message) : '', req.currentUser)); + app.get('/data-sources/api-sources/new', requirePermission('api-sources.create'), async function (req, res, next) { + try { + const settings = await fetchAppSettings(pool); + res.send(renderApiSourceAddPage({ + updateIntervalValue: settings['data-sources.api_default_interval_value'], + updateIntervalUnit: settings['data-sources.api_default_interval_unit'] + }, req.query.message ? String(req.query.message) : '', req.currentUser)); + } catch (error) { + next(error); + } }); app.get('/data-sources/api-sources/:id/edit', requirePermission('api-sources.update'), async function (req, res, next) { diff --git a/src/web/routes/data-sources/rss-feeds/routes.js b/src/web/routes/data-sources/rss-feeds/routes.js index 59e98f2..46cb390 100644 --- a/src/web/routes/data-sources/rss-feeds/routes.js +++ b/src/web/routes/data-sources/rss-feeds/routes.js @@ -5,6 +5,7 @@ const renderRssFeedsPage = require('./list'); const renderRssFeedAddPage = require('./add'); const renderRssFeedEditPage = require('./edit'); const { buildDuplicateRssFeedName, buildDuplicateRssFeed } = require('./duplicate'); +const { fetchAppSettings } = require('../../../../data/app-settings'); async function getDataSourceUsageMaps(pool, common) { const [slides] = await pool.query('SELECT content_json FROM c_slides WHERE content_json IS NOT NULL'); @@ -99,8 +100,16 @@ module.exports = function registerRssFeedRoutes(app, deps) { } }); - app.get('/data-sources/rss-feeds/new', requirePermission('rss-feeds.create'), function (req, res) { - res.send(renderRssFeedAddPage(null, req.query.message ? String(req.query.message) : '', req.currentUser)); + app.get('/data-sources/rss-feeds/new', requirePermission('rss-feeds.create'), async function (req, res, next) { + try { + const settings = await fetchAppSettings(pool); + res.send(renderRssFeedAddPage({ + updateIntervalValue: settings['data-sources.rss_default_interval_value'], + updateIntervalUnit: settings['data-sources.rss_default_interval_unit'] + }, req.query.message ? String(req.query.message) : '', req.currentUser)); + } catch (error) { + next(error); + } }); app.get('/data-sources/rss-feeds/:id/edit', requirePermission('rss-feeds.update'), async function (req, res, next) { diff --git a/src/web/routes/register.js b/src/web/routes/register.js index 8bfb1d8..5bc2c6a 100644 --- a/src/web/routes/register.js +++ b/src/web/routes/register.js @@ -15,6 +15,8 @@ const registerRssFeedRoutes = require('./data-sources/rss-feeds/routes'); const registerTimetableRoutes = require('./data-sources/timetables/routes'); const registerSettingsRoutes = require('./settings/background-tasks'); const registerFontRoutes = require('./settings/fonts'); +const registerSettingsPageRoutes = require('./settings/routes'); +const registerAuditLogRoutes = require('./settings/audit-log'); const registerAboutRoutes = require('./settings/about/routes'); const registerInternalSyncRoutes = require('./internal/sync'); const registerScreensRoutes = require('./signage/screens/routes'); @@ -25,6 +27,18 @@ function registerRoutes(app, deps) { registerAuthAndAccountRoutes(app, deps); registerSignageRoutes(app, deps); registerSettingsAndContentRoutes(app, deps); + registerSettingsPageRoutes(app, { + pool: deps.pool, + pages: deps.pages, + mediaDir: deps.mediaDir, + requirePermission: deps.requirePermission, + recordRequestAuditEvent: deps.recordRequestAuditEvent + }); + registerAuditLogRoutes(app, { + pool: deps.pool, + formatDashboardDate: deps.formatDashboardDate, + setAuthMessageCookie: deps.setAuthMessageCookie + }); registerAboutRoutes(app, deps); registerInternalSyncRoutes(app, { backgroundTaskQueue: deps.backgroundTaskQueue, @@ -52,13 +66,16 @@ function registerAuthAndAccountRoutes(app, deps) { pages: deps.pages, createUserSession: deps.createUserSession, setSessionCookie: deps.setSessionCookie, + getSessionMaxAgeMs: deps.getSessionMaxAgeMs, + getConfiguredMaxActiveSessions: deps.getConfiguredMaxActiveSessions, clearSessionCookie: deps.clearSessionCookie, setAuthMessageCookie: deps.setAuthMessageCookie, consumeAuthMessageCookie: deps.consumeAuthMessageCookie, parseCookies: deps.parseCookies, hashSessionToken: deps.hashSessionToken, verifyPassword: deps.verifyPassword, - sessionCookieName: deps.sessionCookieName + sessionCookieName: deps.sessionCookieName, + recordRequestAuditEvent: deps.recordRequestAuditEvent }); registerPagesRoutes(app, { @@ -82,7 +99,12 @@ function registerAuthAndAccountRoutes(app, deps) { hashPassword: deps.hashPassword, validatePasswordStrength: deps.validatePasswordStrength, createUserSession: deps.createUserSession, - setSessionCookie: deps.setSessionCookie + setSessionCookie: deps.setSessionCookie, + getSessionMaxAgeMs: deps.getSessionMaxAgeMs, + parseCookies: deps.parseCookies, + hashSessionToken: deps.hashSessionToken, + sessionCookieName: deps.sessionCookieName, + recordRequestAuditEvent: deps.recordRequestAuditEvent }); registerUsersRoutes(app, { @@ -95,7 +117,8 @@ function registerAuthAndAccountRoutes(app, deps) { validatePasswordStrength: deps.validatePasswordStrength, readArrayField: deps.readArrayField, rbacData: deps.rbacData, - requirePermission: deps.requirePermission + requirePermission: deps.requirePermission, + recordRequestAuditEvent: deps.recordRequestAuditEvent }); } @@ -114,7 +137,8 @@ function registerSignageRoutes(app, deps) { notifyPlayerScreens: deps.notifyPlayerScreens, broadcastDashboardState: deps.broadcastDashboardState, getPlaylistDeleteBlockMessage: deps.playerActionService.getPlaylistDeleteBlockMessage, - requirePermission: deps.requirePermission + requirePermission: deps.requirePermission, + recordRequestAuditEvent: deps.recordRequestAuditEvent }); registerManageRoutes(app, { @@ -130,7 +154,8 @@ function registerSignageRoutes(app, deps) { forwardPlayerCommand: deps.playerActionService.forwardPlayerCommand, forwardPlayerCommandToBaseUrl: deps.playerActionService.forwardPlayerCommandToBaseUrl, forwardPlayerCommandToDevice: deps.playerActionService.forwardPlayerCommandToDevice, - requirePermission: deps.requirePermission + requirePermission: deps.requirePermission, + recordRequestAuditEvent: deps.recordRequestAuditEvent }); registerAnnouncementRoutes(app, { @@ -169,7 +194,8 @@ function registerSettingsAndContentRoutes(app, deps) { readArrayField: deps.readArrayField, permissions: PERMISSIONS, normalizePermissionKeys: normalizePermissionKeys, - requirePermission: deps.requirePermission + requirePermission: deps.requirePermission, + recordRequestAuditEvent: deps.recordRequestAuditEvent }); registerContentRoutes(app, { @@ -195,7 +221,8 @@ function registerSettingsAndContentRoutes(app, deps) { getSlideDeleteBlockMessage: deps.playerActionService.getSlideDeleteBlockMessage, getTemplateDeleteBlockMessage: deps.playerActionService.getTemplateDeleteBlockMessage, getCanvasSizeDeleteBlockMessage: deps.playerActionService.getCanvasSizeDeleteBlockMessage, - requirePermission: deps.requirePermission + requirePermission: deps.requirePermission, + recordRequestAuditEvent: deps.recordRequestAuditEvent }); registerRootDataSourceRoutes(app, { diff --git a/src/web/routes/settings/audit-log.js b/src/web/routes/settings/audit-log.js new file mode 100644 index 0000000..46cc92c --- /dev/null +++ b/src/web/routes/settings/audit-log.js @@ -0,0 +1,181 @@ +const { renderView } = require('#src/web/view'); +const { hasPermission, PERMISSION_DENIED_MESSAGE } = require('#src/rbac'); +const { AUDIT_CATEGORY_KEYS } = require('#src/data/audit-log'); +const { buildPagination } = require('#src/web/lib/pagination'); +const { createSearchMatcher, getSearchQuery, getSortDirectionQuery, getSortQuery, parsePageNumber, sortRows } = require('#src/web/lib/list-query'); + +const PAGE_SIZE = 25; + +function requireAuditLogAccess(setAuthMessageCookie) { + return function (req, res, next) { + if (!req.currentUser) { + if (typeof setAuthMessageCookie === 'function') { + setAuthMessageCookie(res, 'Please sign in to continue.'); + } + return res.redirect('/login'); + } + if (hasPermission(req.currentUser, 'audit-log.read')) { + return next(); + } + const error = new Error(PERMISSION_DENIED_MESSAGE); + error.statusCode = 403; + error.expose = true; + return next(error); + }; +} + +function requireAuditExportAccess(setAuthMessageCookie) { + return function (req, res, next) { + if (!req.currentUser) { + if (typeof setAuthMessageCookie === 'function') setAuthMessageCookie(res, 'Please sign in to continue.'); + return res.redirect('/login'); + } + if (hasPermission(req.currentUser, 'audit-log.allow')) return next(); + const error = new Error(PERMISSION_DENIED_MESSAGE); + error.statusCode = 403; + error.expose = true; + return next(error); + }; +} + +function csvCell(value) { + let text = String(value === undefined || value === null ? '' : value); + if (/^[=+\-@]/.test(text)) text = "'" + text; + return '"' + text.replace(/"/g, '""').replace(/\r?\n/g, ' ') + '"'; +} + +function mapAuditRow(row, formatDashboardDate) { + let details = ''; + if (row.details_json) { + try { + details = JSON.stringify(typeof row.details_json === 'string' ? JSON.parse(row.details_json) : row.details_json); + } catch (_error) { + details = String(row.details_json); + } + } + const occurredAt = new Date(row.occurred_at); + return Object.assign({}, row, { + occurredAtValue: Number.isNaN(occurredAt.getTime()) ? '' : occurredAt.toISOString(), + occurredAtLabel: formatDashboardDate(row.occurred_at), + actorLabel: row.actor_name || row.actor_username || 'System', + eventLabel: String(row.event_type || '').replace(/[._-]+/g, ' '), + targetLabelDisplay: row.target_label || (row.target_type && row.target_id ? row.target_type + ' #' + row.target_id : ''), + detailsDisplay: details + }); +} + +function filterAuditRows(rows, req, formatDashboardDate) { + const category = String(req.query.category || '').trim().toLowerCase(); + const eventType = String(req.query.event_type || '').trim().toLowerCase(); + const search = getSearchQuery(req); + const requestedSort = getSortQuery(req); + const sort = requestedSort || 'time'; + const direction = requestedSort ? getSortDirectionQuery(req) : 'desc'; + const mappedRows = (rows || []).map(function (row) { return mapAuditRow(row, formatDashboardDate); }); + const filteredRows = sortRows(mappedRows.filter(function (event) { + return (!category || event.category === category) && (!eventType || event.event_type === eventType); + }).filter(createSearchMatcher(search, ['category', 'event_type', 'actorLabel', 'targetLabelDisplay', 'ip_address', 'user_agent'])), function (event) { + if (sort === 'event') return event.eventLabel; + if (sort === 'actor') return event.actorLabel; + if (sort === 'target') return event.targetLabelDisplay; + if (sort === 'category') return event.category; + return event.occurred_at; + }, direction); + return { rows: filteredRows, category: category, eventType: eventType, search: search, sort: sort, direction: direction }; +} + +async function fetchAuditRows(pool) { + const [rows] = await pool.query( + `SELECT e.id, e.occurred_at, e.category, e.event_type, e.target_type, e.target_id, + e.target_label, e.ip_address, e.user_agent, e.details_json, + u.name AS actor_name, u.username AS actor_username + FROM o_audit_events e + LEFT JOIN a_users u ON u.id = e.actor_user_id + ORDER BY e.occurred_at DESC, e.id DESC`, [] + ); + return rows || []; +} + +module.exports = function registerAuditLogRoutes(app, deps) { + const pool = deps.pool; + const formatDashboardDate = deps.formatDashboardDate; + if (!pool || typeof formatDashboardDate !== 'function') { + throw new Error('registerAuditLogRoutes requires pool and formatDashboardDate.'); + } + + app.get('/settings/audit-log', requireAuditLogAccess(deps.setAuthMessageCookie), async function (req, res, next) { + try { + const category = String(req.query.category || '').trim().toLowerCase(); + const eventType = String(req.query.event_type || '').trim().toLowerCase(); + const search = getSearchQuery(req); + const sort = getSortQuery(req); + const direction = getSortDirectionQuery(req); + const filtered = filterAuditRows(await fetchAuditRows(pool), req, formatDashboardDate); + const filteredEvents = filtered.rows; + const eventTypes = Array.from(new Set(filtered.rows.map(function (event) { + return String(event.event_type || '').trim(); + }).filter(Boolean))).sort(); + const exportQuery = new URLSearchParams({ + category: filtered.category, + event_type: filtered.eventType, + search: filtered.search, + sort: filtered.sort, + direction: filtered.direction + }).toString(); + const pagination = buildPagination(filteredEvents.length, parsePageNumber(req.query.page), 'page', { + search: search, + sort: sort, + direction: direction, + category: category, + event_type: eventType + }, PAGE_SIZE, 'events', 'Audit event pages'); + const startIndex = (pagination.currentPage - 1) * PAGE_SIZE; + const events = filteredEvents.slice(startIndex, startIndex + PAGE_SIZE); + res.send(renderView('settings/audit-log/index', { + title: 'Audit log', + active: 'audit-log', + currentUser: req.currentUser, + events: events, + categories: AUDIT_CATEGORY_KEYS, + eventTypes: eventTypes, + selectedCategory: category, + selectedEventType: eventType, + search: search, + sort: sort, + direction: direction, + pagination: pagination, + exportUrl: '/settings/audit-log/export' + (exportQuery ? '?' + exportQuery : '') + })); + } catch (error) { + next(error); + } + }); + + app.get('/settings/audit-log/export', requireAuditExportAccess(deps.setAuthMessageCookie), async function (req, res, next) { + try { + const filtered = filterAuditRows(await fetchAuditRows(pool), req, formatDashboardDate); + const lines = [ + ['Occurred At (UTC)', 'Category', 'Event Type', 'Actor', 'Target Type', 'Target ID', 'Target', 'IP Address', 'User Agent', 'Details'].map(csvCell).join(',') + ]; + filtered.rows.forEach(function (event) { + lines.push([ + event.occurredAtValue, + event.category, + event.event_type, + event.actorLabel, + event.target_type, + event.target_id, + event.targetLabelDisplay, + event.ip_address, + event.user_agent, + event.detailsDisplay + ].map(csvCell).join(',')); + }); + res.setHeader('Content-Type', 'text/csv; charset=utf-8'); + res.setHeader('Content-Disposition', 'attachment; filename="pulse-signage-audit-log.csv"'); + res.send('\ufeff' + lines.join('\r\n') + '\r\n'); + } catch (error) { + next(error); + } + }); +}; \ No newline at end of file diff --git a/src/web/routes/settings/index.js b/src/web/routes/settings/index.js new file mode 100644 index 0000000..c01b00d --- /dev/null +++ b/src/web/routes/settings/index.js @@ -0,0 +1,19 @@ +// Visual-only application settings page. + +const { renderView } = require('../../view'); + +module.exports = function renderSettingsPage(settings, suggestedAnnouncementIcons, currentUser, message, mediaSettings, diagnostics) { + const iconOptions = Array.isArray(suggestedAnnouncementIcons) ? suggestedAnnouncementIcons : []; + return renderView('settings/system/index', { + title: 'Settings', + active: 'settings', + currentUser: currentUser || null, + message: message || '', + settings: settings || {}, + suggestedAnnouncementIcons: iconOptions, + defaultAnnouncementIconSuggestions: iconOptions.filter(function (option) { return option.isSelected; }), + mediaSettings: mediaSettings || {}, + diagnostics: diagnostics || {}, + scripts: ['js/icon-picker.js', 'js/settings/settings-page.js'] + }); +}; diff --git a/src/web/routes/settings/rbac/form-view-model.js b/src/web/routes/settings/rbac/form-view-model.js index f28e317..0234a5c 100644 --- a/src/web/routes/settings/rbac/form-view-model.js +++ b/src/web/routes/settings/rbac/form-view-model.js @@ -53,17 +53,17 @@ function buildPermissionSections(permissionGroups) { }); section.groups.sort(function (left, right) { - const leftIndex = toSortIndex(left.resourceIndex); - const rightIndex = toSortIndex(right.resourceIndex); - if (leftIndex !== rightIndex) { - return leftIndex - rightIndex; - } - const leftOrder = toSortIndex(left.resourceOrder); const rightOrder = toSortIndex(right.resourceOrder); if (leftOrder !== rightOrder) { return leftOrder - rightOrder; } + + const leftIndex = toSortIndex(left.resourceIndex); + const rightIndex = toSortIndex(right.resourceIndex); + if (leftIndex !== rightIndex) { + return leftIndex - rightIndex; + } return String(left.title || '').localeCompare(String(right.title || '')); }); @@ -77,17 +77,17 @@ function buildPermissionSections(permissionGroups) { }); sections.sort(function (left, right) { - const leftIndex = toSortIndex(left.sourceIndex); - const rightIndex = toSortIndex(right.sourceIndex); - if (leftIndex !== rightIndex) { - return leftIndex - rightIndex; - } - const leftOrder = toSortIndex(left.sectionOrder); const rightOrder = toSortIndex(right.sectionOrder); if (leftOrder !== rightOrder) { return leftOrder - rightOrder; } + + const leftIndex = toSortIndex(left.sourceIndex); + const rightIndex = toSortIndex(right.sourceIndex); + if (leftIndex !== rightIndex) { + return leftIndex - rightIndex; + } return String(left.title || '').localeCompare(String(right.title || '')); }); @@ -101,9 +101,10 @@ function buildRbacAddViewModel(message, currentUser, formValues, permissionGroup isEdit: false, usersPresent: true, formId: 'role-create-form', - formAction: '/rbac', - footerSaveUrl: '/rbac', - footerCancelUrl: '/rbac', + formAction: '/settings/roles', + footerSaveUrl: '/settings/roles', + footerCancelUrl: '/settings/roles', + cancelConfirmMessage: "You've made changes. Are you sure you want to leave this page?", footerDeleteUrl: '', footerDeleteDisabled: true, footerDeleteTitle: 'Delete is available after the role has been created.', @@ -116,9 +117,9 @@ function buildRbacAddViewModel(message, currentUser, formValues, permissionGroup permissionSections: buildPermissionSections(permissionGroups), users: users || [], pagination: pagination || null, - roleEditBasePath: '/rbac/new', + roleEditBasePath: '/settings/roles/new', scripts: ['js/rbac-permissions.js'], - formAttrs: 'data-async-save data-async-save-close-url="/rbac" data-async-save-new-redirect="response-url" data-async-save-new-url="/rbac/new"' + formAttrs: 'data-async-save data-async-save-close-url="/settings/roles" data-async-save-new-redirect="response-url" data-async-save-new-url="/settings/roles/new"' }; } @@ -129,10 +130,11 @@ function buildRbacEditViewModel(role, message, currentUser, permissionGroups, us isEdit: true, usersPresent: true, formId: 'role-edit-form', - formAction: '/rbac/' + Number(role && role.id), - footerSaveUrl: '/rbac/' + Number(role && role.id), - footerCancelUrl: '/rbac', - footerDeleteUrl: '/rbac/' + Number(role && role.id) + '/delete', + formAction: '/settings/roles/' + Number(role && role.id), + footerSaveUrl: '/settings/roles/' + Number(role && role.id), + footerCancelUrl: '/settings/roles', + cancelConfirmMessage: "You've made changes. Are you sure you want to leave this page?", + footerDeleteUrl: '/settings/roles/' + Number(role && role.id) + '/delete', footerDeleteDisabled: Boolean(role && role.inUse), footerDeleteTitle: role && role.inUse ? 'Delete is disabled while this role is assigned to users.' : '', footerShowDelete: true, @@ -144,9 +146,9 @@ function buildRbacEditViewModel(role, message, currentUser, permissionGroups, us permissionSections: buildPermissionSections(permissionGroups), users: users || [], pagination: pagination || null, - roleEditBasePath: '/rbac/' + Number(role && role.id) + '/edit', + roleEditBasePath: '/settings/roles/' + Number(role && role.id) + '/edit', scripts: ['js/rbac-permissions.js'], - formAttrs: 'data-async-save data-async-save-close-url="/rbac" data-async-save-new-url="/rbac/new"' + formAttrs: 'data-async-save data-async-save-close-url="/settings/roles" data-async-save-new-url="/settings/roles/new"' }; } diff --git a/src/web/routes/settings/routes.js b/src/web/routes/settings/routes.js new file mode 100644 index 0000000..9495a7e --- /dev/null +++ b/src/web/routes/settings/routes.js @@ -0,0 +1,397 @@ +// Settings page route registration. + +const { ANNOUNCEMENT_ICON_CATALOG } = require('#src/data/announcement-icons'); +const { AUDIT_CATEGORY_KEYS, AUDIT_CATEGORY_LABELS } = require('#src/data/audit-log'); +const { fetchAppSettings, saveAppSettings } = require('#src/data/app-settings'); +const { appVersion, detectSchemaVersion } = require('#src/db/migrations'); + +const UPLOAD_MIME_TYPE_OPTIONS = [ + { value: 'image/png', label: 'PNG', category: 'Images' }, + { value: 'image/jpeg', label: 'JPEG', category: 'Images' }, + { value: 'image/gif', label: 'GIF', category: 'Images' }, + { value: 'image/webp', label: 'WebP', category: 'Images' }, + { value: 'image/svg+xml', label: 'SVG', category: 'Images' }, + { value: 'video/mp4', label: 'MP4', category: 'Video' }, + { value: 'video/webm', label: 'WebM', category: 'Video' }, + { value: 'video/ogg', label: 'Ogg', category: 'Video' } +]; + +module.exports = function registerSettingsPageRoutes(app, deps) { + const pages = deps.pages; + const pool = deps.pool; + const recordRequestAuditEvent = deps.recordRequestAuditEvent; + + if (!pages || !pool || typeof deps.requirePermission !== 'function') { + throw new Error('registerSettingsPageRoutes requires pool, pages, and requirePermission.'); + } + + const requireSettingsRead = deps.requirePermission('system-settings.read'); + const MAX_SUGGESTED_ICONS = 48; + const SECTION_SETTING_KEYS = { + defaults: [ + 'player.default_slide_duration_seconds', + 'player.default_fade_between_slides', + 'player.skip_unavailable_rtmp', + 'announcements.default_icon', + 'announcements.default_duration_value', + 'announcements.default_duration_unit', + 'data-sources.rss_default_interval_value', + 'data-sources.rss_default_interval_unit', + 'data-sources.api_default_interval_value', + 'data-sources.api_default_interval_unit' + ], + security: [ + 'security.session_lifetime_days', + 'security.allow_user_session_revocation', + 'security.max_active_sessions', + 'security.login_max_attempts', + 'security.login_lockout_minutes', + 'security.login_rate_limit_scope', + 'security.password_min_length', + 'security.password_min_categories', + 'security.password_require_lowercase', + 'security.password_require_uppercase', + 'security.password_require_number', + 'security.password_require_symbol', + 'security.require_password_change_for_new_users', + 'security.require_password_change_after_admin_reset' + ], + audit: ['audit.enabled', 'audit.categories', 'audit.include_request_metadata', 'audit.retention_days'], + media: ['uploads.image_max_bytes', 'uploads.video_max_bytes', 'uploads.wysiwyg_image_max_bytes', 'uploads.allowed_mime_types'], + icons: ['announcements.suggested_icons'] + }; + + function buildSettingChanges(previousSettings, nextSettings, keys) { + const changes = {}; + (Array.isArray(keys) ? keys : []).forEach(function (key) { + const previousValue = previousSettings && previousSettings[key]; + const nextValue = nextSettings[key]; + if (JSON.stringify(previousValue) !== JSON.stringify(nextValue)) { + changes[key] = { from: previousValue, to: nextValue }; + } + }); + return changes; + } + + async function recordSettingsAuditEvent(req, previousSettings, nextSettings, section) { + if (typeof recordRequestAuditEvent !== 'function') { + return; + } + const changes = buildSettingChanges(previousSettings, nextSettings, SECTION_SETTING_KEYS[section]); + const changedKeys = Object.keys(changes); + if (!changedKeys.length) { + return; + } + await recordRequestAuditEvent(pool, req, { + category: 'system-settings', + eventType: 'system-settings.updated', + actorUserId: req.currentUser && req.currentUser.id, + targetType: 'settings', + targetId: section, + targetLabel: section, + details: { section: section, changes: changes } + }); + } + + function buildSuggestedAnnouncementIcons(settings) { + const configuredKeys = settings && Array.isArray(settings['announcements.suggested_icons']) + ? settings['announcements.suggested_icons'] + : []; + const selectedKeys = new Set(configuredKeys.map(function (key) { + return String(key || '').trim().toLowerCase(); + })); + const catalogByKey = new Map(ANNOUNCEMENT_ICON_CATALOG.map(function (option) { + return [option.value, option]; + })); + const selectedOptions = Array.from(new Set(configuredKeys.map(function (key) { + return catalogByKey.get(String(key || '').trim().toLowerCase()) || null; + }).filter(Boolean))); + const remainingOptions = ANNOUNCEMENT_ICON_CATALOG.filter(function (option) { + return !selectedKeys.has(option.value); + }); + return selectedOptions.concat(remainingOptions).map(function (option) { + return Object.assign({}, option, { + isSelected: selectedKeys.has(option.value), + isDefault: selectedOptions.length > 0 && selectedOptions[0].value === option.value + }); + }); + } + + async function renderSettings(req, res, message) { + const settings = await fetchAppSettings(pool); + const diagnostics = await buildDiagnostics(); + res.send(pages.renderSettingsPage(settings, buildSuggestedAnnouncementIcons(settings), req.currentUser, message, { + imageMaxMb: Math.round(Number(settings['uploads.image_max_bytes']) / 1024 / 1024), + videoMaxMb: Math.round(Number(settings['uploads.video_max_bytes']) / 1024 / 1024), + wysiwygImageMaxMb: (Number(settings['uploads.wysiwyg_image_max_bytes']) / 1024 / 1024).toFixed(2).replace(/0+$/, '').replace(/\.$/, '') + ,allowedMimeTypes: UPLOAD_MIME_TYPE_OPTIONS.map(function (option) { + return Object.assign({}, option, { isSelected: settings['uploads.allowed_mime_types'].indexOf(option.value) !== -1 }); + }), + imageMimeTypes: UPLOAD_MIME_TYPE_OPTIONS.filter(function (option) { return option.category === 'Images'; }).map(function (option) { + return Object.assign({}, option, { isSelected: settings['uploads.allowed_mime_types'].indexOf(option.value) !== -1 }); + }), + videoMimeTypes: UPLOAD_MIME_TYPE_OPTIONS.filter(function (option) { return option.category === 'Video'; }).map(function (option) { + return Object.assign({}, option, { isSelected: settings['uploads.allowed_mime_types'].indexOf(option.value) !== -1 }); + }), + sessionLifetimeDays: Number(settings['security.session_lifetime_days']) || 14, + allowUserSessionRevocation: Boolean(settings['security.allow_user_session_revocation']), + maxActiveSessions: Number(settings['security.max_active_sessions']) || 0, + loginMaxAttempts: Number(settings['security.login_max_attempts']) || 5, + loginLockoutMinutes: Number(settings['security.login_lockout_minutes']) || 15, + loginRateLimitScope: String(settings['security.login_rate_limit_scope'] || 'both'), + passwordMinLength: Number(settings['security.password_min_length']) || 10, + passwordMinCategories: Number(settings['security.password_min_categories']) || 3, + passwordRequireLowercase: Boolean(settings['security.password_require_lowercase']), + passwordRequireUppercase: Boolean(settings['security.password_require_uppercase']), + passwordRequireNumber: Boolean(settings['security.password_require_number']), + passwordRequireSymbol: Boolean(settings['security.password_require_symbol']), + requirePasswordChangeForNewUsers: Boolean(settings['security.require_password_change_for_new_users']), + requirePasswordChangeAfterAdminReset: Boolean(settings['security.require_password_change_after_admin_reset']), + defaultSlideDurationSeconds: Number(settings['player.default_slide_duration_seconds']) || 10, + defaultFadeBetweenSlides: Boolean(settings['player.default_fade_between_slides']), + defaultSkipUnavailableRtmp: Boolean(settings['player.skip_unavailable_rtmp']), + defaultAnnouncementIcon: String(settings['announcements.default_icon'] || 'megaphone-fill'), + defaultAnnouncementDurationValue: Number(settings['announcements.default_duration_value']) || 10, + defaultAnnouncementDurationUnit: String(settings['announcements.default_duration_unit'] || 'seconds') + ,rssDefaultIntervalValue: Number(settings['data-sources.rss_default_interval_value']) || 60 + ,rssDefaultIntervalUnit: String(settings['data-sources.rss_default_interval_unit'] || 'minutes') + ,apiDefaultIntervalValue: Number(settings['data-sources.api_default_interval_value']) || 60 + ,apiDefaultIntervalUnit: String(settings['data-sources.api_default_interval_unit'] || 'minutes') + ,auditRetentionDays: Number(settings['audit.retention_days']) || 0 + ,auditEnabled: Boolean(settings['audit.enabled']) + ,auditIncludeRequestMetadata: Boolean(settings['audit.include_request_metadata']) + ,auditCategories: AUDIT_CATEGORY_KEYS.map(function (category) { + return { key: category, label: AUDIT_CATEGORY_LABELS[category] || category, isSelected: settings['audit.categories'].includes(category) }; + }) + ,auditEventCategories: AUDIT_CATEGORY_KEYS.filter(function (category) { return category !== 'users' && category !== 'roles' && category !== 'system-settings' && category !== 'slides' && category !== 'templates' && category !== 'playlists' && category !== 'screens' && category !== 'announcements' && category !== 'canvas-sizes' && category !== 'api-sources' && category !== 'rss-feeds' && category !== 'timetables'; }).map(function (category) { + return { key: category, label: AUDIT_CATEGORY_LABELS[category] || category, isSelected: settings['audit.categories'].includes(category) }; + }) + ,auditAdministrationCategories: AUDIT_CATEGORY_KEYS.filter(function (category) { return category === 'users' || category === 'roles' || category === 'system-settings'; }).map(function (category) { + return { key: category, label: AUDIT_CATEGORY_LABELS[category] || category, isSelected: settings['audit.categories'].includes(category) }; + }) + ,auditContentCategories: AUDIT_CATEGORY_KEYS.filter(function (category) { return category === 'slides' || category === 'templates' || category === 'playlists' || category === 'screens' || category === 'announcements' || category === 'canvas-sizes'; }).map(function (category) { + return { key: category, label: AUDIT_CATEGORY_LABELS[category] || category, isSelected: settings['audit.categories'].includes(category) }; + }) + ,auditDataSourceCategories: AUDIT_CATEGORY_KEYS.filter(function (category) { return category === 'api-sources' || category === 'rss-feeds' || category === 'timetables'; }).map(function (category) { + return { key: category, label: AUDIT_CATEGORY_LABELS[category] || category, isSelected: settings['audit.categories'].includes(category) }; + }) + }, diagnostics)); + } + + async function buildDiagnostics() { + const diagnostics = { + applicationVersion: appVersion, + schemaVersion: 'Unknown', + databaseStatus: 'Unavailable', + activeSessionCount: 0, + backgroundTaskCount: 0, + criticalTableCounts: [] + }; + try { + await pool.query('SELECT 1 AS health'); + diagnostics.databaseStatus = 'Connected'; + diagnostics.schemaVersion = await detectSchemaVersion(pool); + const [sessionRows] = await pool.query('SELECT COUNT(*) AS count FROM a_sessions WHERE expires_at > NOW()'); + diagnostics.activeSessionCount = Number(sessionRows && sessionRows[0] && sessionRows[0].count) || 0; + const [taskRows] = await pool.query('SELECT COUNT(*) AS count FROM o_background_tasks'); + diagnostics.backgroundTaskCount = Number(taskRows && taskRows[0] && taskRows[0].count) || 0; + const criticalTables = [ + ['Users', 'a_users'], + ['Roles', 'a_roles'], + ['Screens', 'd_screens'], + ['Playlists', 'c_playlists'], + ['Slides', 'c_slides'], + ['Templates', 'c_templates'], + ['Announcements', 'd_announcements'], + ['RSS feeds', 'i_rss_feeds'], + ['API sources', 'i_api_sources'] + ]; + for (const [label, tableName] of criticalTables) { + try { + const [rows] = await pool.query('SELECT COUNT(*) AS count FROM ' + tableName); + diagnostics.criticalTableCounts.push({ label: label, count: Number(rows && rows[0] && rows[0].count) || 0 }); + } catch (_error) { + diagnostics.criticalTableCounts.push({ label: label, count: 'Unavailable' }); + } + } + } catch (_error) { + // Keep diagnostics page renderable while the database is unavailable. + } + return diagnostics; + } + + app.get('/settings/system', requireSettingsRead, async function (req, res, next) { + try { + await renderSettings(req, res, req.query.message ? String(req.query.message) : ''); + } catch (error) { + next(error); + } + }); + + app.post('/settings/system', deps.requirePermission('system-settings.update'), async function (req, res, next) { + try { + const section = String(req.body && req.body.settings_section || '').trim().toLowerCase(); + if (section !== 'icons' && section !== 'media' && section !== 'security' && section !== 'defaults' && section !== 'audit') { + const error = new Error('Unknown settings section.'); + error.statusCode = 400; + error.expose = true; + throw error; + } + const previousSettings = await fetchAppSettings(pool); + + if (section === 'defaults') { + const defaultSlideDurationSeconds = Number(req.body && req.body.default_slide_duration_seconds); + const defaultAnnouncementDurationValue = Number(req.body && req.body.default_announcement_duration_value); + const defaultAnnouncementDurationUnit = String(req.body && req.body.default_announcement_duration_unit || 'seconds').trim().toLowerCase(); + const rssDefaultIntervalValue = Number(req.body && req.body.rss_default_interval_value); + const rssDefaultIntervalUnit = String(req.body && req.body.rss_default_interval_unit || 'minutes').trim().toLowerCase(); + const apiDefaultIntervalValue = Number(req.body && req.body.api_default_interval_value); + const apiDefaultIntervalUnit = String(req.body && req.body.api_default_interval_unit || 'minutes').trim().toLowerCase(); + const defaultFadeBetweenSlides = req.body && (req.body.default_fade_between_slides === '1' || req.body.default_fade_between_slides === 'true'); + const defaultSkipUnavailableRtmp = req.body && (req.body.default_skip_unavailable_rtmp === '1' || req.body.default_skip_unavailable_rtmp === 'true'); + const defaultAnnouncementIcon = String(req.body && req.body.default_announcement_icon || '').trim(); + if (!Number.isInteger(defaultSlideDurationSeconds) || defaultSlideDurationSeconds < 1 || defaultSlideDurationSeconds > 3600 || !Number.isInteger(defaultAnnouncementDurationValue) || defaultAnnouncementDurationValue < 1 || defaultAnnouncementDurationValue > 3600 || !['seconds', 'minutes'].includes(defaultAnnouncementDurationUnit) || !Number.isInteger(rssDefaultIntervalValue) || rssDefaultIntervalValue < 1 || rssDefaultIntervalValue > 86400 || !['seconds', 'minutes', 'hours'].includes(rssDefaultIntervalUnit) || !Number.isInteger(apiDefaultIntervalValue) || apiDefaultIntervalValue < 1 || apiDefaultIntervalValue > 86400 || !['seconds', 'minutes', 'hours'].includes(apiDefaultIntervalUnit) || !ANNOUNCEMENT_ICON_CATALOG.some(function (option) { return option.value === defaultAnnouncementIcon; })) { + const error = new Error('Default values must be valid.'); + error.statusCode = 400; + error.expose = true; + throw error; + } + const savedSettings = await saveAppSettings(pool, { + 'player.default_slide_duration_seconds': defaultSlideDurationSeconds, + 'player.default_fade_between_slides': defaultFadeBetweenSlides, + 'player.skip_unavailable_rtmp': defaultSkipUnavailableRtmp, + 'announcements.default_icon': defaultAnnouncementIcon, + 'announcements.default_duration_value': defaultAnnouncementDurationValue, + 'announcements.default_duration_unit': defaultAnnouncementDurationUnit, + 'data-sources.rss_default_interval_value': rssDefaultIntervalValue, + 'data-sources.rss_default_interval_unit': rssDefaultIntervalUnit, + 'data-sources.api_default_interval_value': apiDefaultIntervalValue, + 'data-sources.api_default_interval_unit': apiDefaultIntervalUnit + }, req.currentUser && req.currentUser.id); + await recordSettingsAuditEvent(req, previousSettings, savedSettings, section); + return res.redirect('/settings/system?message=' + encodeURIComponent('Defaults saved.') + '#application-defaults'); + } + + if (section === 'security') { + const sessionLifetimeDays = Number(req.body && req.body.session_lifetime_days); + const allowUserSessionRevocation = req.body && (req.body.allow_user_session_revocation === '1' || req.body.allow_user_session_revocation === 'true'); + const maxActiveSessions = Number(req.body && req.body.max_active_sessions); + const loginMaxAttempts = Number(req.body && req.body.login_max_attempts); + const loginLockoutMinutes = Number(req.body && req.body.login_lockout_minutes); + const loginRateLimitScope = String(req.body && req.body.login_rate_limit_scope || 'both').trim().toLowerCase(); + const passwordMinLength = Number(req.body && req.body.password_min_length); + const passwordMinCategories = Number(req.body && req.body.password_min_categories); + const passwordRequireLowercase = req.body && (req.body.password_require_lowercase === '1' || req.body.password_require_lowercase === 'true'); + const passwordRequireUppercase = req.body && (req.body.password_require_uppercase === '1' || req.body.password_require_uppercase === 'true'); + const passwordRequireNumber = req.body && (req.body.password_require_number === '1' || req.body.password_require_number === 'true'); + const passwordRequireSymbol = req.body && (req.body.password_require_symbol === '1' || req.body.password_require_symbol === 'true'); + const requirePasswordChangeForNewUsers = req.body && (req.body.require_password_change_for_new_users === '1' || req.body.require_password_change_for_new_users === 'true'); + const requirePasswordChangeAfterAdminReset = req.body && (req.body.require_password_change_after_admin_reset === '1' || req.body.require_password_change_after_admin_reset === 'true'); + const requiredCategoryCount = [passwordRequireLowercase, passwordRequireUppercase, passwordRequireNumber, passwordRequireSymbol].filter(Boolean).length; + if (!Number.isInteger(sessionLifetimeDays) || sessionLifetimeDays < 1 || sessionLifetimeDays > 365 || !Number.isInteger(maxActiveSessions) || maxActiveSessions < 0 || maxActiveSessions > 100 || !Number.isInteger(loginMaxAttempts) || loginMaxAttempts < 1 || loginMaxAttempts > 100 || !Number.isInteger(loginLockoutMinutes) || loginLockoutMinutes < 1 || loginLockoutMinutes > 1440 || !['both', 'username', 'ip'].includes(loginRateLimitScope) || !Number.isInteger(passwordMinLength) || passwordMinLength < 8 || passwordMinLength > 128 || !Number.isInteger(passwordMinCategories) || passwordMinCategories < 1 || passwordMinCategories > 4 || requiredCategoryCount > passwordMinCategories) { + const error = new Error('Session and password settings must use valid values; required password categories cannot exceed the minimum category count.'); + error.statusCode = 400; + error.expose = true; + throw error; + } + const savedSettings = await saveAppSettings(pool, { + 'security.session_lifetime_days': sessionLifetimeDays, + 'security.allow_user_session_revocation': allowUserSessionRevocation, + 'security.max_active_sessions': maxActiveSessions, + 'security.login_max_attempts': loginMaxAttempts, + 'security.login_lockout_minutes': loginLockoutMinutes, + 'security.login_rate_limit_scope': loginRateLimitScope, + 'security.password_min_length': passwordMinLength, + 'security.password_min_categories': passwordMinCategories, + 'security.password_require_lowercase': passwordRequireLowercase, + 'security.password_require_uppercase': passwordRequireUppercase, + 'security.password_require_number': passwordRequireNumber, + 'security.password_require_symbol': passwordRequireSymbol, + 'security.require_password_change_for_new_users': requirePasswordChangeForNewUsers, + 'security.require_password_change_after_admin_reset': requirePasswordChangeAfterAdminReset + }, req.currentUser && req.currentUser.id); + await recordSettingsAuditEvent(req, previousSettings, savedSettings, section); + return res.redirect('/settings/system?message=' + encodeURIComponent('Security settings saved.') + '#security-sessions'); + } + + if (section === 'audit') { + const auditEnabled = req.body && (req.body.audit_enabled === '1' || req.body.audit_enabled === 'true'); + const includeRequestMetadata = req.body && (req.body.include_request_metadata === '1' || req.body.include_request_metadata === 'true'); + const selectedCategories = req.body && (req.body['audit_categories[]'] !== undefined ? req.body['audit_categories[]'] : req.body.audit_categories); + const auditCategories = Array.from(new Set((Array.isArray(selectedCategories) ? selectedCategories : selectedCategories ? [selectedCategories] : []).map(function (category) { + return String(category || '').trim().toLowerCase(); + }).filter(function (category) { + return AUDIT_CATEGORY_KEYS.includes(category); + }))); + const retentionDays = Number(req.body && req.body.audit_retention_days); + if (!auditCategories.length || !Number.isInteger(retentionDays) || retentionDays < 0 || retentionDays > 3650) { + const error = new Error('Select at least one audit category and use a retention period between 0 and 3650 days.'); + error.statusCode = 400; + error.expose = true; + throw error; + } + const savedSettings = await saveAppSettings(pool, { + 'audit.enabled': auditEnabled, + 'audit.categories': auditCategories, + 'audit.include_request_metadata': includeRequestMetadata, + 'audit.retention_days': retentionDays + }, req.currentUser && req.currentUser.id); + await recordSettingsAuditEvent(req, previousSettings, savedSettings, section); + return res.redirect('/settings/system?message=' + encodeURIComponent('Audit logging settings saved.') + '#audit-logging'); + } + + if (section === 'media') { + const imageMaxMb = Number(req.body && req.body.image_max_mb); + const videoMaxMb = Number(req.body && req.body.video_max_mb); + const wysiwygImageMaxMb = Number(req.body && req.body.wysiwyg_image_max_mb); + const selectedMimeTypes = req.body && (req.body['allowed_mime_types[]'] !== undefined ? req.body['allowed_mime_types[]'] : req.body.allowed_mime_types); + const allowedMimeTypes = Array.from(new Set((Array.isArray(selectedMimeTypes) ? selectedMimeTypes : selectedMimeTypes ? [selectedMimeTypes] : []).map(function (mimeType) { + return String(mimeType || '').trim().toLowerCase(); + }).filter(function (mimeType) { + return UPLOAD_MIME_TYPE_OPTIONS.some(function (option) { return option.value === mimeType; }); + }))); + const hasImageMimeType = allowedMimeTypes.some(function (mimeType) { return mimeType.indexOf('image/') === 0; }); + const hasVideoMimeType = allowedMimeTypes.some(function (mimeType) { return mimeType.indexOf('video/') === 0; }); + if (!Number.isInteger(imageMaxMb) || imageMaxMb < 1 || imageMaxMb > 1024 || !Number.isInteger(videoMaxMb) || videoMaxMb < 1 || videoMaxMb > 4096 || !Number.isFinite(wysiwygImageMaxMb) || wysiwygImageMaxMb < 0.1 || wysiwygImageMaxMb > imageMaxMb || !hasImageMimeType || !hasVideoMimeType) { + const error = new Error('Media upload limits must be valid and at least one image and video type must remain enabled.'); + error.statusCode = 400; + error.expose = true; + throw error; + } + await pool.query('DELETE FROM o_app_settings WHERE setting_key NOT IN (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)', ['announcements.suggested_icons', 'announcements.default_icon', 'announcements.default_duration_value', 'announcements.default_duration_unit', 'player.default_slide_duration_seconds', 'player.default_fade_between_slides', 'player.skip_unavailable_rtmp', 'data-sources.rss_default_interval_value', 'data-sources.rss_default_interval_unit', 'data-sources.api_default_interval_value', 'data-sources.api_default_interval_unit', 'uploads.image_max_bytes', 'uploads.video_max_bytes', 'uploads.wysiwyg_image_max_bytes', 'uploads.allowed_mime_types', 'security.session_lifetime_days', 'security.allow_user_session_revocation', 'security.max_active_sessions', 'security.login_max_attempts', 'security.login_lockout_minutes', 'security.login_rate_limit_scope', 'security.password_min_length', 'security.password_min_categories', 'security.password_require_lowercase', 'security.password_require_uppercase', 'security.password_require_number', 'security.password_require_symbol', 'security.require_password_change_for_new_users', 'security.require_password_change_after_admin_reset', 'audit.enabled', 'audit.categories', 'audit.include_request_metadata', 'audit.retention_days']); + const savedSettings = await saveAppSettings(pool, { + 'uploads.image_max_bytes': imageMaxMb * 1024 * 1024, + 'uploads.video_max_bytes': videoMaxMb * 1024 * 1024, + 'uploads.wysiwyg_image_max_bytes': Math.round(wysiwygImageMaxMb * 1024 * 1024), + 'uploads.allowed_mime_types': allowedMimeTypes + }, req.currentUser && req.currentUser.id); + await recordSettingsAuditEvent(req, previousSettings, savedSettings, section); + return res.redirect('/settings/system?message=' + encodeURIComponent('Media settings saved.') + '#media-uploads'); + } + + const selectedIcons = req.body && (req.body['suggested_icons[]'] !== undefined ? req.body['suggested_icons[]'] : req.body.suggested_icons); + const catalogKeys = new Set(ANNOUNCEMENT_ICON_CATALOG.map(function (option) { + return option.value; + })); + const suggestedIcons = Array.from(new Set((Array.isArray(selectedIcons) ? selectedIcons : selectedIcons ? [selectedIcons] : []).map(function (iconKey) { + return String(iconKey || '').trim().toLowerCase(); + }).filter(function (iconKey) { + return catalogKeys.has(iconKey); + }))); + if (suggestedIcons.length > MAX_SUGGESTED_ICONS) { + const error = new Error('Choose no more than ' + MAX_SUGGESTED_ICONS + ' suggested icons.'); + error.statusCode = 400; + error.expose = true; + throw error; + } + await pool.query('DELETE FROM o_app_settings WHERE setting_key NOT IN (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)', ['announcements.suggested_icons', 'announcements.default_icon', 'announcements.default_duration_value', 'announcements.default_duration_unit', 'player.default_slide_duration_seconds', 'player.default_fade_between_slides', 'player.skip_unavailable_rtmp', 'data-sources.rss_default_interval_value', 'data-sources.rss_default_interval_unit', 'data-sources.api_default_interval_value', 'data-sources.api_default_interval_unit', 'uploads.image_max_bytes', 'uploads.video_max_bytes', 'uploads.wysiwyg_image_max_bytes', 'uploads.allowed_mime_types', 'security.session_lifetime_days', 'security.allow_user_session_revocation', 'security.max_active_sessions', 'security.login_max_attempts', 'security.login_lockout_minutes', 'security.login_rate_limit_scope', 'security.password_min_length', 'security.password_min_categories', 'security.password_require_lowercase', 'security.password_require_uppercase', 'security.password_require_number', 'security.password_require_symbol', 'security.require_password_change_for_new_users', 'security.require_password_change_after_admin_reset', 'audit.enabled', 'audit.categories', 'audit.include_request_metadata', 'audit.retention_days']); + const savedSettings = await saveAppSettings(pool, { + 'announcements.suggested_icons': suggestedIcons + }, req.currentUser && req.currentUser.id); + await recordSettingsAuditEvent(req, previousSettings, savedSettings, section); + res.redirect('/settings/system?message=' + encodeURIComponent('Settings saved.')); + } catch (error) { + next(error); + } + }); +}; \ No newline at end of file diff --git a/src/web/routes/settings/users/edit.js b/src/web/routes/settings/users/edit.js index c83e13c..20fb5f9 100644 --- a/src/web/routes/settings/users/edit.js +++ b/src/web/routes/settings/users/edit.js @@ -3,6 +3,6 @@ const { renderView } = require('../../../view'); const { buildUsersEditViewModel } = require('./form-view-model'); -module.exports = function renderUsersEditPage(user, message, currentUser, roles) { - return renderView('settings/users/form', buildUsersEditViewModel(user, message, currentUser, roles)); +module.exports = function renderUsersEditPage(user, message, currentUser, roles, sessions) { + return renderView('settings/users/form', buildUsersEditViewModel(user, message, currentUser, roles, sessions)); }; \ No newline at end of file diff --git a/src/web/routes/settings/users/form-view-model.js b/src/web/routes/settings/users/form-view-model.js index d71d979..2da2fc3 100644 --- a/src/web/routes/settings/users/form-view-model.js +++ b/src/web/routes/settings/users/form-view-model.js @@ -24,9 +24,9 @@ function buildUsersAddViewModel(message, currentUser, roles, formValues, message active: 'users', isEdit: false, formId: 'user-form', - formAction: '/users', - footerSaveUrl: '/users', - footerCancelUrl: '/users', + formAction: '/settings/users', + footerSaveUrl: '/settings/users', + footerCancelUrl: '/settings/users', footerDeleteUrl: '', footerDeleteDisabled: true, footerDeleteTitle: 'Delete is available after the user has been created.', @@ -36,21 +36,21 @@ function buildUsersAddViewModel(message, currentUser, roles, formValues, message currentUser: currentUser || null, roles: mapRolesForForm(roles, []), formValues: formValues || {}, - formAttrs: 'data-async-save data-async-save-close-url="/users" data-async-save-new-redirect="response-url" data-async-save-new-url="/users/new"' + formAttrs: 'data-async-save data-async-save-close-url="/settings/users" data-async-save-new-redirect="response-url" data-async-save-new-url="/settings/users/new"' }; } -function buildUsersEditViewModel(user, message, currentUser, roles) { +function buildUsersEditViewModel(user, message, currentUser, roles, sessions) { return { title: 'Edit user', active: 'users', isEdit: true, formId: 'user-profile-form', - formAction: '/users/' + user.id + '/username', - formAttrs: 'data-async-save data-async-save-close-url="/users"', - footerSaveUrl: '/users/' + user.id + '/username', - footerCancelUrl: '/users', - footerDeleteUrl: '/users/' + user.id + '/delete', + formAction: '/settings/users/' + user.id + '/username', + formAttrs: 'data-async-save data-async-save-close-url="/settings/users"', + footerSaveUrl: '/settings/users/' + user.id + '/username', + footerCancelUrl: '/settings/users', + footerDeleteUrl: '/settings/users/' + user.id + '/delete', footerDeleteDisabled: Boolean(user && user.inUse), footerDeleteConfirmMessage: 'Delete this user?', footerDeleteTitle: user && user.inUse ? 'Delete is disabled while this user is the only account left.' : '', @@ -59,9 +59,10 @@ function buildUsersEditViewModel(user, message, currentUser, roles) { message: message, currentUser: currentUser || null, user: user, + sessions: Array.isArray(sessions) ? sessions : [], inUse: Boolean(user && user.inUse), roles: mapRolesForForm(roles, user && user.roleIds), - formAttrs: 'data-async-save data-async-save-close-url="/users" data-async-save-new-url="/users/new"' + formAttrs: 'data-async-save data-async-save-close-url="/settings/users" data-async-save-new-url="/settings/users/new"' }; } diff --git a/src/web/routes/signage/announcements/form-view-model.js b/src/web/routes/signage/announcements/form-view-model.js index bc68aa3..0efade9 100644 --- a/src/web/routes/signage/announcements/form-view-model.js +++ b/src/web/routes/signage/announcements/form-view-model.js @@ -23,6 +23,7 @@ function buildAnnouncementFormViewModel(announcement, message, currentUser, opti const announcementTypes = Array.isArray(options && options.announcementTypes) ? options.announcementTypes : []; const announcementColors = Array.isArray(options && options.announcementColors) ? options.announcementColors : []; const announcementIcons = Array.isArray(options && options.announcementIcons) ? options.announcementIcons : []; + const announcementIconCatalog = Array.isArray(options && options.announcementIconCatalog) ? options.announcementIconCatalog : announcementIcons; const announcementScreens = Array.isArray(options && options.announcementScreens) ? options.announcementScreens : []; const viewOptions = options || {}; const viewAnnouncement = Object.assign({}, buildDefaultAnnouncement(), announcement || {}); @@ -68,6 +69,7 @@ function buildAnnouncementFormViewModel(announcement, message, currentUser, opti announcementTypes: announcementTypes, announcementColors: announcementColors, announcementIcons: announcementIcons, + announcementIconCatalog: announcementIconCatalog, announcementScreens: announcementScreens }; } diff --git a/src/web/routes/signage/announcements/routes.js b/src/web/routes/signage/announcements/routes.js index 76bfe3e..ed24c9f 100644 --- a/src/web/routes/signage/announcements/routes.js +++ b/src/web/routes/signage/announcements/routes.js @@ -11,6 +11,7 @@ module.exports = function registerAnnouncementRoutes(app, deps) { const { buildPagination } = require('../../../lib/pagination'); const announcementData = require('#src/data/announcements'); const announcementIcons = require('#src/data/announcement-icons'); + const { fetchAppSettings } = require('#src/data/app-settings'); const { buildDuplicateAnnouncementName, buildDuplicateAnnouncement } = require('./duplicate'); const LIST_PAGE_SIZE = 25; @@ -30,6 +31,21 @@ module.exports = function registerAnnouncementRoutes(app, deps) { { value: 'light', label: 'Light' } ]; const ANNOUNCEMENT_ICONS = announcementIcons.ANNOUNCEMENT_ICON_OPTIONS || []; + const ANNOUNCEMENT_ICON_CATALOG = announcementIcons.ANNOUNCEMENT_ICON_CATALOG || ANNOUNCEMENT_ICONS; + + async function fetchSuggestedAnnouncementIcons() { + const settings = await fetchAppSettings(pool); + const catalogByKey = new Map(ANNOUNCEMENT_ICON_CATALOG.map(function (option) { + return [option.value, option]; + })); + const configuredKeys = Array.isArray(settings['announcements.suggested_icons']) + ? settings['announcements.suggested_icons'] + : []; + const configuredOptions = configuredKeys.map(function (key) { + return catalogByKey.get(String(key || '').trim().toLowerCase()) || null; + }).filter(Boolean); + return configuredOptions.length ? configuredOptions : ANNOUNCEMENT_ICONS; + } function normalizeDurationUnit(value) { return String(value || 'minutes').trim().toLowerCase() === 'seconds' ? 'seconds' : 'minutes'; @@ -269,21 +285,28 @@ module.exports = function registerAnnouncementRoutes(app, deps) { app.get('/announcements/new', requirePermission('announcements.create'), async function (req, res, next) { try { const screens = await fetchAnnouncementScreens(); + const suggestedAnnouncementIcons = await fetchSuggestedAnnouncementIcons(); + const settings = await fetchAppSettings(pool); + const configuredIcon = String(settings['announcements.default_icon'] || '').trim().toLowerCase(); + const defaultIcon = ANNOUNCEMENT_ICON_CATALOG.some(function (option) { return option.value === configuredIcon; }) + ? configuredIcon + : (suggestedAnnouncementIcons[0] && suggestedAnnouncementIcons[0].value ? suggestedAnnouncementIcons[0].value : announcementIcons.DEFAULT_ANNOUNCEMENT_ICON); res.send(pages.renderAnnouncementAddPage(buildAnnouncementFormData({ message: '', short_label: '', announcement_type: 'lower-third', color_key: 'primary', - icon_key: announcementIcons.DEFAULT_ANNOUNCEMENT_ICON, + icon_key: defaultIcon, durationMode: 'duration', duration_seconds: null, - durationValue: 5, - durationUnit: 'minutes', + durationValue: Number(settings['announcements.default_duration_value']) || 10, + durationUnit: String(settings['announcements.default_duration_unit'] || 'seconds'), screen_ids: [] }), req.query.message ? String(req.query.message) : '', req.currentUser, { announcementTypes: ANNOUNCEMENT_TYPES, announcementColors: ANNOUNCEMENT_COLORS, - announcementIcons: ANNOUNCEMENT_ICONS, + announcementIcons: suggestedAnnouncementIcons, + announcementIconCatalog: ANNOUNCEMENT_ICON_CATALOG, announcementScreens: buildAnnouncementScreenOptions(screens, []) })); } catch (error) { @@ -301,7 +324,8 @@ module.exports = function registerAnnouncementRoutes(app, deps) { res.send(pages.renderAnnouncementEditPage(buildAnnouncementFormData(announcement), null, req.query.message ? String(req.query.message) : '', req.currentUser, { announcementTypes: ANNOUNCEMENT_TYPES, announcementColors: ANNOUNCEMENT_COLORS, - announcementIcons: ANNOUNCEMENT_ICONS, + announcementIcons: await fetchSuggestedAnnouncementIcons(), + announcementIconCatalog: ANNOUNCEMENT_ICON_CATALOG, announcementScreens: buildAnnouncementScreenOptions(screens, announcement.screen_ids || []) })); } catch (error) { @@ -327,7 +351,8 @@ module.exports = function registerAnnouncementRoutes(app, deps) { res.send(pages.renderAnnouncementAddPage(buildAnnouncementFormData(buildDuplicateAnnouncement(announcement, duplicateName)), req.query.message ? String(req.query.message) : 'Review the copied values and save when ready.', req.currentUser, { announcementTypes: ANNOUNCEMENT_TYPES, announcementColors: ANNOUNCEMENT_COLORS, - announcementIcons: ANNOUNCEMENT_ICONS, + announcementIcons: await fetchSuggestedAnnouncementIcons(), + announcementIconCatalog: ANNOUNCEMENT_ICON_CATALOG, announcementScreens: buildAnnouncementScreenOptions(screens, announcement.screen_ids || []), messageVariant: 'info' })); diff --git a/src/web/routes/signage/playlists/form-view-model.js b/src/web/routes/signage/playlists/form-view-model.js index 0356eac..874b367 100644 --- a/src/web/routes/signage/playlists/form-view-model.js +++ b/src/web/routes/signage/playlists/form-view-model.js @@ -175,6 +175,7 @@ function formatCanvasSizeLabel(size) { function buildPlaylistFormViewModel(playlist, data, message, currentUser, options) { const isEdit = Boolean(options && options.isEdit); + const defaultSlideDurationSeconds = Number(data && data.defaultSlideDurationSeconds) || 10; const viewPlaylist = Object.assign({ id: null, name: '', @@ -245,7 +246,7 @@ function buildPlaylistFormViewModel(playlist, data, message, currentUser, option videoDurationSeconds: '', useVideoDuration: false, disableAudio: true, - durationSeconds: 10, + durationSeconds: defaultSlideDurationSeconds, scheduleRules: [], scheduleSummary: 'Always visible', displayOrder: '' @@ -280,7 +281,8 @@ function buildPlaylistFormViewModel(playlist, data, message, currentUser, option selectableSlides: selectableSlides, playlistCanvasId: playlistCanvasId, playlistCanvasMismatch: playlistCanvasMismatch, - scripts: ['js/lib/modal.js?v=20260726.7', 'js/playlists/playlist-table-drag.js?v=20260802.5', 'js/playlists/playlist-schedule.js?v=20260803.1'], + defaultSlideDurationSeconds: defaultSlideDurationSeconds, + scripts: ['js/lib/modal.js?v=20260726.7', 'js/playlists/playlist-table-drag.js?v=20260802.5', 'js/playlists/playlist-schedule.js?v=20260816.1'], message: message, currentUser: currentUser || null, inUse: Boolean(viewPlaylist.inUse) diff --git a/src/web/routes/signage/playlists/routes.js b/src/web/routes/signage/playlists/routes.js index 0244228..2c4dabc 100644 --- a/src/web/routes/signage/playlists/routes.js +++ b/src/web/routes/signage/playlists/routes.js @@ -8,6 +8,7 @@ module.exports = function registerPlaylistsRoutes(app, deps) { const { buildPagination } = require('../../../lib/pagination'); const requirePermission = deps.requirePermission; const { buildDuplicatePlaylistName, buildDuplicatePlaylist } = require('./duplicate'); + const { fetchAppSettings } = require('../../../../data/app-settings'); const LIST_PAGE_SIZE = 25; @@ -31,6 +32,8 @@ module.exports = function registerPlaylistsRoutes(app, deps) { return res.status(404).send('Playlist not found'); } playlist.inUse = (await fetchScreensByPlaylistId(pool, playlist.id)).length > 0; + const settings = await fetchAppSettings(pool); + data.defaultSlideDurationSeconds = Number(settings['player.default_slide_duration_seconds']) || 10; return res.send(pages.renderPlaylistEditPage(playlist, data, req.query.message ? String(req.query.message) : '', req.currentUser)); } const data = await common.fetchPlaylistsPage(pool, page, LIST_PAGE_SIZE, search, sort, direction); @@ -46,7 +49,12 @@ module.exports = function registerPlaylistsRoutes(app, deps) { app.get('/playlists/new', requirePermission('playlists.create'), function (req, res) { (async function () { const data = await common.fetchAdminData(pool); - res.send(await pages.renderPlaylistFormPage(req.query.message ? String(req.query.message) : '', req.currentUser, data, pool)); + const settings = await fetchAppSettings(pool); + data.defaultSlideDurationSeconds = Number(settings['player.default_slide_duration_seconds']) || 10; + res.send(await pages.renderPlaylistFormPage({ + fade_between_slides: Boolean(settings['player.default_fade_between_slides']), + skip_unavailable_rtmp: Boolean(settings['player.skip_unavailable_rtmp']) + }, req.query.message ? String(req.query.message) : '', req.currentUser, data, pool)); })().catch(function (error) { res.status(500).send(error.message || 'Unable to load page.'); }); @@ -81,6 +89,8 @@ module.exports = function registerPlaylistsRoutes(app, deps) { return res.status(404).send('Playlist not found'); } const data = await common.fetchAdminData(pool); + const settings = await fetchAppSettings(pool); + data.defaultSlideDurationSeconds = Number(settings['player.default_slide_duration_seconds']) || 10; playlist.inUse = (await fetchScreensByPlaylistId(pool, playlist.id)).length > 0; res.send(pages.renderPlaylistEditPage(playlist, data, req.query.message ? String(req.query.message) : '', req.currentUser)); } catch (error) { diff --git a/src/web/routes/signage/slides/form-view-model.js b/src/web/routes/signage/slides/form-view-model.js index 3354ad7..839a906 100644 --- a/src/web/routes/signage/slides/form-view-model.js +++ b/src/web/routes/signage/slides/form-view-model.js @@ -26,6 +26,7 @@ function buildSlideFormViewModel(data, slide, message, currentUser, isEdit) { const apiSources = data && data.apiSources ? data.apiSources : []; const timetableGroups = data && data.timetableGroups ? data.timetableGroups : []; const fontLibrary = data && data.fontLibrary ? data.fontLibrary : null; + const uploadLimits = data && data.uploadLimits ? data.uploadLimits : {}; const templates = buildTemplates(data && data.templates ? data.templates : [], templateRegions); const viewSlide = slide || buildDefaultSlide(); @@ -50,7 +51,8 @@ function buildSlideFormViewModel(data, slide, message, currentUser, isEdit) { fontStylesheetHref: fontLibrary && fontLibrary.stylesheetHref ? fontLibrary.stylesheetHref : '', fontFamilyFormats: fontLibrary && fontLibrary.fontFamilyFormats ? fontLibrary.fontFamilyFormats : '', existingTemplateId: viewSlide && viewSlide.template_id ? viewSlide.template_id : null, - existingContent: viewSlide && viewSlide.content ? viewSlide.content : {} + existingContent: viewSlide && viewSlide.content ? viewSlide.content : {}, + uploadLimits: uploadLimits }, assetVersion: assetVersion, slideEditorScripts: ['vendor/qr-code-styling/qr-code-styling-loader.js?v=' + assetVersion].concat(getRegionEditorScripts(assetVersion)), diff --git a/src/web/views/account/password.hbs b/src/web/views/account/password.hbs index dd6af47..ffbac29 100644 --- a/src/web/views/account/password.hbs +++ b/src/web/views/account/password.hbs @@ -13,9 +13,7 @@
-
- -
+
@@ -25,10 +23,47 @@
+ + {{#if allowUserSessionRevocation}} +
+
+

Active sessions

+
+
+
+ {{#if sessions.length}} + {{#each sessions}} +
+
+
+
{{#if isCurrent}}Current session{{else}}Active session{{/if}}
+
+ {{#unless isCurrent}} +
+ +
+ {{/unless}} +
+
{{ipAddress}} · {{userAgent}}
+
Created {{createdAtLabel}} · Last used {{lastUsedAtLabel}} · Expires {{expiresAtLabel}}
+
+ {{/each}} + {{else}} +

No active sessions were found.

+ {{/if}} +
+
+
+
+ +
+
+
+ {{/if}}
-
+

Password

@@ -40,13 +75,13 @@
- +
- +
-
Use at least 10 characters and include 3 of: uppercase, lowercase, a number, and a symbol.
+
{{passwordRequirementsText}}
diff --git a/src/web/views/auth/login.hbs b/src/web/views/auth/login.hbs index eb6a8f2..7773f4f 100644 --- a/src/web/views/auth/login.hbs +++ b/src/web/views/auth/login.hbs @@ -13,12 +13,16 @@ {{/if}}
- +
+
+ + +
diff --git a/src/web/views/settings/audit-log/index.hbs b/src/web/views/settings/audit-log/index.hbs new file mode 100644 index 0000000..bac18f4 --- /dev/null +++ b/src/web/views/settings/audit-log/index.hbs @@ -0,0 +1,57 @@ +
+
+

Audit log

+

Review recorded authentication, security, and session events.

+
+
+ +
+
+
+
+ + +
+
+ + + + {{#each eventTypes}}{{/each}} + +
+
+ + +
+
+ + {{#if (hasPermission currentUser 'audit-log.allow')}}Export{{/if}} +
+
+
+
+ + + + {{#if events.length}} + {{#each events}} + + + + + + + + + {{/each}} + {{else}} + + {{/if}} + +
TimeEventActorTargetSourceDetails
{{eventLabel}}
{{category}}
{{actorLabel}}{{targetLabelDisplay}}
{{ip_address}}
{{user_agent}}
{{detailsDisplay}}
No audit events match these filters.
+
+ {{> table-pagination pagination=pagination basePath="/settings/audit-log" alwaysShow=true}} +
\ No newline at end of file diff --git a/src/web/views/settings/rbac/form.hbs b/src/web/views/settings/rbac/form.hbs index 612afdf..c1e2deb 100644 --- a/src/web/views/settings/rbac/form.hbs +++ b/src/web/views/settings/rbac/form.hbs @@ -27,7 +27,7 @@
- {{{saveActionButtons formId=formId saveUrl=footerSaveUrl cancelUrl=footerCancelUrl deleteUrl=footerDeleteUrl deleteDisabled=footerDeleteDisabled deleteTitle=footerDeleteTitle showDelete=footerShowDelete}}} + {{{saveActionButtons formId=formId saveUrl=footerSaveUrl cancelUrl=footerCancelUrl cancelConfirmMessage=cancelConfirmMessage deleteUrl=footerDeleteUrl deleteDisabled=footerDeleteDisabled deleteTitle=footerDeleteTitle showDelete=footerShowDelete}}}
@@ -58,6 +58,7 @@ {{#each users}} + @@ -80,14 +81,13 @@
-
+

Permissions

-
+
{{#if permissionSections.length}} -
-
+
{{#each permissionSections}}

@@ -95,7 +95,7 @@ {{title}}

-
+
@@ -105,7 +105,7 @@ {{/each}} - + {{#each actions}} @@ -117,7 +117,7 @@ {{#each groups}} {{#each cells}}
Type
- + @@ -140,7 +140,6 @@ {{/each}} - {{else}}
No permissions are available.
diff --git a/src/web/views/settings/rbac/list.hbs b/src/web/views/settings/rbac/list.hbs index 8db8912..59463a7 100644 --- a/src/web/views/settings/rbac/list.hbs +++ b/src/web/views/settings/rbac/list.hbs @@ -16,7 +16,7 @@ {{#if (hasPermission currentUser 'rbac.create')}} - Add role + Add role {{/if}} @@ -55,13 +55,13 @@ {{#if (anyPermission ../currentUser 'rbac.update' 'rbac.delete')}}
{{#if (hasPermission ../currentUser 'rbac.update')}} - Edit + Edit {{/if}} {{#if (hasPermission ../currentUser 'rbac.create')}} - Dupe + Dupe {{/if}} {{#if (hasPermission ../currentUser 'rbac.delete')}} -
+ {{#if (gt user_count 0)}} {{else}} @@ -80,7 +80,7 @@
- {{> table-pagination pagination=pagination basePath="/rbac" alwaysShow=true}} + {{> table-pagination pagination=pagination basePath="/settings/roles" alwaysShow=true}}
diff --git a/src/web/views/settings/system/index.hbs b/src/web/views/settings/system/index.hbs new file mode 100644 index 0000000..72aa704 --- /dev/null +++ b/src/web/views/settings/system/index.hbs @@ -0,0 +1,451 @@ +
+
+

System Settings

+

Configure the defaults and content policies used across Pulse Signage.

+
+
+ +
+
+
+
+
Settings
+ +
+
+
+ +
+ + +
+
+
+

Defaults

+

Set starting values for players and announcements.

+
+
+
+
+

Player defaults

+
+ +
seconds
+
+
+ +
+
+ + +
+
+ + +
+
+
+

Announcement defaults

+
+ +
+ + + +
+
+
+ +
+
+

Data source defaults

+
+ +
+
+
+ +
+
+
+
+
{{#if (hasPermission currentUser 'system-settings.update')}}{{else}}{{/if}}
+
+ + +
+ + +
+ +
+ + +
+ +
+ + +
+ + + +
+ + +
+ + +
+
diff --git a/src/web/views/settings/users/form.hbs b/src/web/views/settings/users/form.hbs index 0cb3d18..f75128e 100644 --- a/src/web/views/settings/users/form.hbs +++ b/src/web/views/settings/users/form.hbs @@ -23,6 +23,12 @@
+ {{#if isEdit}} +
+ + +
+ {{/if}}
@@ -86,3 +92,36 @@
+ {{#if isEdit}} +
+
+

Active sessions

+ {{#if sessions.length}} +
+ +
+ {{/if}} +
+
+ {{#if sessions.length}} +
+ {{#each sessions}} +
+
+
Active session
+
+ +
+
+
{{ipAddress}} · {{userAgent}}
+
Created {{createdAtLabel}} · Last used {{lastUsedAtLabel}} · Expires {{expiresAtLabel}}
+
+ {{/each}} +
+ {{else}} +

No active sessions were found.

+ {{/if}} +
+
+ {{/if}} + diff --git a/src/web/views/settings/users/list.hbs b/src/web/views/settings/users/list.hbs index 3e7fb22..4a902e2 100644 --- a/src/web/views/settings/users/list.hbs +++ b/src/web/views/settings/users/list.hbs @@ -14,7 +14,7 @@
{{#if (hasPermission currentUser 'users.create')}} - Add user + Add user {{/if}}
@@ -25,6 +25,7 @@ User Name Roles + Status Actions @@ -66,18 +67,25 @@
+ + {{#if account_locked}} + Locked + {{else}} + Active + {{/if}} + {{#if (anyPermission ../currentUser 'users.create' 'users.update' 'users.delete')}}
{{#unless isCurrentUser}} {{#if (hasPermission ../currentUser 'users.update')}} - Edit + Edit {{/if}} {{#if (hasPermission ../currentUser 'users.create')}} - Dupe + Dupe {{/if}} {{#if (hasPermission ../currentUser 'users.delete')}} -
+
{{/if}} @@ -92,10 +100,10 @@ {{/each}} {{else}} - No users found. + No users found. {{/if}}
- {{> table-pagination pagination=pagination basePath="/users" alwaysShow=true}} + {{> table-pagination pagination=pagination basePath="/settings/users" alwaysShow=true}}
diff --git a/src/web/views/shared/layout.hbs b/src/web/views/shared/layout.hbs index 0f9d7ec..39c1389 100644 --- a/src/web/views/shared/layout.hbs +++ b/src/web/views/shared/layout.hbs @@ -267,12 +267,20 @@ {{/if}} - {{#if (anyPermission currentUser 'background-tasks.read' 'scheduled-tasks.read' 'users.read' 'rbac.read' 'fonts.read')}} + {{#if (anyPermission currentUser 'system-settings.read' 'audit-log.read' 'background-tasks.read' 'scheduled-tasks.read' 'users.read' 'rbac.read' 'fonts.read')}}
  • SETTINGS
    • {{/if}} + {{#if (hasPermission currentUser 'fonts.read')}} +
  • + + +

    Fonts

    +     +
    • + {{/if}} {{#if (hasPermission currentUser 'users.read')}}
  • - +

    Users

     @@ -280,20 +288,12 @@ {{/if}} {{#if (hasPermission currentUser 'rbac.read')}}
  • - +

    Roles and permissions
    • {{/if}} - {{#if (hasPermission currentUser 'fonts.read')}} -
  • - - -

    Fonts

    -     -
    • - {{/if}} {{#if (anyPermission currentUser 'background-tasks.read' 'scheduled-tasks.read')}}
  • @@ -323,12 +323,28 @@
    • {{/if}} + {{#if (hasPermission currentUser 'audit-log.read')}} +
  • + + +

    Audit log

    +     +
    • + {{/if}} + {{#if (hasPermission currentUser 'system-settings.read')}} +
  • + + +

    System Settings

    +     +
    • + {{/if}}
    v{{appVersion}} - Pulse Signage + About Pulse
    diff --git a/src/web/views/signage/announcements/form.hbs b/src/web/views/signage/announcements/form.hbs index 665c38d..c756949 100644 --- a/src/web/views/signage/announcements/form.hbs +++ b/src/web/views/signage/announcements/form.hbs @@ -51,33 +51,42 @@
    Icon
    -
    +
    - - @@ -165,6 +174,7 @@
    + diff --git a/src/web/views/signage/dashboard/index.hbs b/src/web/views/signage/dashboard/index.hbs index 9e84bb8..b7942e6 100644 --- a/src/web/views/signage/dashboard/index.hbs +++ b/src/web/views/signage/dashboard/index.hbs @@ -177,7 +177,7 @@ Download for Windows - + Download for Linux diff --git a/src/web/views/signage/playlists/form.hbs b/src/web/views/signage/playlists/form.hbs index 55d2f08..4a93951 100644 --- a/src/web/views/signage/playlists/form.hbs +++ b/src/web/views/signage/playlists/form.hbs @@ -67,7 +67,7 @@
    - + {{#if playlistSlides.length}} {{#each playlistSlides}} {{> signage/playlists/slide-row slide=this playlistScheduleConfigUrl=../playlistScheduleConfigUrl}} diff --git a/test/action-buttons.test.js b/test/action-buttons.test.js index 4045a43..7f33e0d 100644 --- a/test/action-buttons.test.js +++ b/test/action-buttons.test.js @@ -60,8 +60,8 @@ test('save action buttons can hide the secondary dropdown and delete control', ( test('save action buttons keep the new action wired for create pages', () => { const html = compileActionButtons({ formId: 'example-form', - saveUrl: '/users', - cancelUrl: '/users', + saveUrl: '/settings/users', + cancelUrl: '/settings/users', showSaveAndClose: true, showSaveAndNew: true, showDelete: true diff --git a/test/admin-users-create-no-roles-route.test.js b/test/admin-users-create-no-roles-route.test.js index 94d523a..c910a3c 100644 --- a/test/admin-users-create-no-roles-route.test.js +++ b/test/admin-users-create-no-roles-route.test.js @@ -71,7 +71,7 @@ test('user create route allows users without roles', async () => { registerUsersRoutes(app, deps); - const routeHandlers = handlers['/users']; + const routeHandlers = handlers['/settings/users']; assert.equal(Array.isArray(routeHandlers), true); const req = { @@ -99,7 +99,7 @@ test('user create route allows users without roles', async () => { assert.ok(insertedArgs); assert.deepEqual(syncedRoles, { userId: 11, roleIds: [] }); - assert.equal(res.redirectedTo, '/users/11/edit?message=User%20created.'); + assert.equal(res.redirectedTo, '/settings/users/11/edit?message=User%20created.'); }); test('user create save and new goes to the blank create page', async () => { @@ -164,7 +164,7 @@ test('user create save and new goes to the blank create page', async () => { registerUsersRoutes(app, deps); - const routeHandlers = handlers['/users']; + const routeHandlers = handlers['/settings/users']; const req = { body: { name: 'No Roles User', @@ -189,5 +189,5 @@ test('user create save and new goes to the blank create page', async () => { await routeHandlers[1](req, res, () => {}); - assert.equal(res.redirectedTo, '/users/new?message=User%20created.'); + assert.equal(res.redirectedTo, '/settings/users/new?message=User%20created.'); }); \ No newline at end of file diff --git a/test/admin-users-edit-save-new-route.test.js b/test/admin-users-edit-save-new-route.test.js index 158afba..69457e9 100644 --- a/test/admin-users-edit-save-new-route.test.js +++ b/test/admin-users-edit-save-new-route.test.js @@ -27,7 +27,7 @@ test('user edit save and new goes to the blank create page', async () => { return { async beginTransaction() {}, async query(sql) { - if (sql.includes('UPDATE a_users SET name = ?, username = ?, modified_by = ? WHERE id = ?')) { + if (sql.includes('UPDATE a_users SET name = ?, username = ?, account_locked = ?, modified_by = ? WHERE id = ?')) { return [{ affectedRows: 1 }]; } return [[]]; @@ -65,7 +65,7 @@ test('user edit save and new goes to the blank create page', async () => { registerUsersRoutes(app, deps); - const routeHandlers = handlers['/users/:id/username']; + const routeHandlers = handlers['/settings/users/:id/username']; assert.equal(Array.isArray(routeHandlers), true); const req = { @@ -91,5 +91,5 @@ test('user edit save and new goes to the blank create page', async () => { await routeHandlers[1](req, res, () => {}); - assert.equal(res.redirectedTo, '/users/new?message=User%20updated.'); + assert.equal(res.redirectedTo, '/settings/users/new?message=User%20updated.'); }); \ No newline at end of file diff --git a/test/admin-users-password-route.test.js b/test/admin-users-password-route.test.js index 26f07e2..43f9e2d 100644 --- a/test/admin-users-password-route.test.js +++ b/test/admin-users-password-route.test.js @@ -52,7 +52,7 @@ test('user password reset redirects back to the selected user edit page', async registerUsersRoutes(app, deps); - const routeHandlers = handlers['/users/:id/password']; + const routeHandlers = handlers['/settings/users/:id/password']; assert.equal(Array.isArray(routeHandlers), true); const req = { @@ -74,5 +74,5 @@ test('user password reset redirects back to the selected user edit page', async await routeHandlers[1](req, res, () => {}); - assert.equal(res.redirectedTo, '/users/7/edit?message=Password%20updated.'); + assert.equal(res.redirectedTo, '/settings/users/7/edit?message=Password%20updated.'); }); \ No newline at end of file diff --git a/test/announcements-duplicate.test.js b/test/announcements-duplicate.test.js index 7355357..62ffd2e 100644 --- a/test/announcements-duplicate.test.js +++ b/test/announcements-duplicate.test.js @@ -18,6 +18,7 @@ Module._resolveFilename = function (request, parent, isMain, options) { const { buildDuplicateAnnouncementName, buildDuplicateAnnouncement } = require('../src/web/routes/signage/announcements/duplicate'); const { buildAnnouncementFormViewModel } = require('../src/web/routes/signage/announcements/form-view-model'); const renderAnnouncementsPage = require('../src/web/routes/signage/announcements/list'); +const announcementIcons = require('../src/data/announcement-icons'); test('announcement duplicate helper copies editable fields and resets runtime state', () => { const source = { @@ -98,6 +99,23 @@ test('announcement form template uses an icon-backed type picker', () => { assert.match(template, /data-type-icon="\{\{icon\}\}"/); }); +test('announcement form template includes a searchable bootstrap icon catalog', () => { + const template = fs.readFileSync(path.join(__dirname, '..', 'src', 'web', 'views', 'signage', 'announcements', 'form.hbs'), 'utf8'); + + assert.match(template, /data-announcement-icon-search/); + assert.match(template, /announcementIconCatalog/); + assert.match(template, /data-announcement-icon-grid/); + assert.ok(!/data-announcement-icon-search-section/.test(template)); +}); + +test('announcement icons accept catalog-only bootstrap icon keys', () => { + assert.equal(announcementIcons.normalizeAnnouncementIcon('bank'), 'bank'); + assert.ok(announcementIcons.ANNOUNCEMENT_ICON_CATALOG.some(function (icon) { + return icon.value === 'bank'; + })); + assert.equal(announcementIcons.ANNOUNCEMENT_ICON_LABELS.bank, 'Bank'); +}); + test('announcement form template uses a checkbox card grid for screen groups', () => { const template = fs.readFileSync(path.join(__dirname, '..', 'src', 'web', 'views', 'signage', 'announcements', 'form.hbs'), 'utf8'); diff --git a/test/app-settings.test.js b/test/app-settings.test.js new file mode 100644 index 0000000..db31767 --- /dev/null +++ b/test/app-settings.test.js @@ -0,0 +1,80 @@ +const test = require('node:test'); +const assert = require('node:assert/strict'); + +const { + getDefaultAppSettings, + normalizeSettingValue, + normalizeAppSettings, + fetchAppSettings, + saveAppSettings +} = require('../src/data/app-settings'); + +test('application settings expose typed defaults', () => { + const settings = getDefaultAppSettings(); + + assert.equal(settings['app.name'], 'Pulse Signage'); + assert.equal(settings['uploads.image_max_bytes'], 100 * 1024 * 1024); + assert.deepEqual(settings['uploads.allowed_mime_types'], ['image/png', 'image/jpeg', 'image/gif', 'image/webp', 'image/svg+xml', 'video/mp4', 'video/webm', 'video/ogg']); + assert.equal(settings['uploads.optimize_images'], true); + assert.equal(settings['security.session_lifetime_days'], 14); + assert.equal(settings['security.allow_user_session_revocation'], true); + assert.equal(settings['security.max_active_sessions'], 0); + assert.equal(settings['security.password_min_length'], 10); + assert.equal(settings['security.password_min_categories'], 3); + assert.equal(settings['security.require_password_change_for_new_users'], true); + assert.equal(settings['security.require_password_change_after_admin_reset'], true); + assert.equal(settings['security.login_max_attempts'], 5); + assert.equal(settings['security.login_lockout_minutes'], 15); + assert.equal(settings['security.login_rate_limit_scope'], 'both'); + assert.equal(settings['data-sources.rss_default_interval_value'], 60); + assert.equal(settings['data-sources.rss_default_interval_unit'], 'minutes'); + assert.equal(settings['data-sources.api_default_interval_value'], 60); + assert.equal(settings['data-sources.api_default_interval_unit'], 'minutes'); +}); + +test('application settings normalize supported values and reject invalid values', () => { + assert.equal(normalizeSettingValue('player.default_fade_between_slides', 'false'), false); + assert.equal(normalizeSettingValue('uploads.optimize_images', 'false'), false); + assert.deepEqual(normalizeSettingValue('uploads.allowed_mime_types', ['image/png', ' image/png', 'video/mp4']), ['image/png', 'video/mp4']); + assert.throws(() => normalizeSettingValue('player.default_fade_between_slides', 'bounce'), /Invalid value/); + assert.throws(() => normalizeSettingValue('uploads.image_max_bytes', 0), /Invalid value/); + assert.throws(() => normalizeSettingValue('unknown.setting', 'value'), /Unknown application setting/); +}); + +test('fetch app settings merges stored values with defaults', async () => { + const pool = { + async query() { + return [[ + { setting_key: 'uploads.image_max_bytes', setting_value: '2097152' }, + { setting_key: 'uploads.optimize_images', setting_value: 'false' }, + { setting_key: 'unknown.setting', setting_value: 'ignored' } + ]]; + } + }; + + const settings = await fetchAppSettings(pool); + assert.equal(settings['uploads.image_max_bytes'], 2097152); + assert.equal(settings['uploads.optimize_images'], false); + assert.equal(settings['player.default_fade_between_slides'], true); +}); + +test('save app settings writes only supplied keys in one transaction', async () => { + const queries = []; + const connection = { + async beginTransaction() { queries.push('begin'); }, + async query(sql, params) { queries.push({ sql, params }); }, + async commit() { queries.push('commit'); }, + async rollback() { queries.push('rollback'); }, + release() { queries.push('release'); } + }; + const pool = { + async getConnection() { return connection; } + }; + + const saved = await saveAppSettings(pool, { 'player.default_fade_between_slides': false }, 7); + assert.equal(saved['player.default_fade_between_slides'], false); + assert.equal(queries[0], 'begin'); + assert.equal(queries[queries.length - 2], 'commit'); + assert.equal(queries[queries.length - 1], 'release'); + assert.equal(queries.filter(function (entry) { return entry && entry.sql; }).length, 1); +}); diff --git a/test/audit-log-route.test.js b/test/audit-log-route.test.js new file mode 100644 index 0000000..d8e1ec1 --- /dev/null +++ b/test/audit-log-route.test.js @@ -0,0 +1,82 @@ +const test = require('node:test'); +const assert = require('node:assert/strict'); + +require('../src/common'); + +const registerAuditLogRoutes = require('../src/web/routes/settings/audit-log'); + +test('audit log uses its own read permission and shared pagination partial', async () => { + const handlers = {}; + const app = { + get(path, ...routeHandlers) { + handlers[path] = routeHandlers; + } + }; + + registerAuditLogRoutes(app, { + pool: { + async query(sql) { + if (String(sql).includes('FROM o_audit_events')) { + return [[ + { + id: 1, + occurred_at: '2026-08-16T12:00:00.000Z', + category: 'authentication', + event_type: 'login.success', + target_label: 'newer', + details_json: null + }, + { + id: 2, + occurred_at: '2026-08-15T12:00:00.000Z', + category: 'authentication', + event_type: 'login.failed', + target_label: 'older', + details_json: null + } + ]]; + } + return [[]]; + } + }, + formatDashboardDate() { + return 'Aug 16, 2026'; + } + }); + + assert.ok(handlers['/settings/audit-log']); + const request = { + currentUser: { id: 7, permissions: ['audit-log.read', 'audit-log.allow'] }, + query: {} + }; + let continued = false; + handlers['/settings/audit-log'][0](request, {}, function () { + continued = true; + }); + assert.equal(continued, true); + + const response = { send(value) { this.body = value; } }; + await handlers['/settings/audit-log'][1](request, response, function (error) { + throw error; + }); + assert.match(response.body, /Audit log/); + assert.match(response.body, /table-pagination/); + assert.match(response.body, /data-local-datetime/); + assert.match(response.body, /audit-event-type-options/); + assert.match(response.body, /login\.success/); + assert.ok(response.body.indexOf('login.success') < response.body.indexOf('login.failed')); + assert.match(response.body, />Export { + const pool = createPool({ enabled: true, categories: ['security'], includeMetadata: true }); + await recordRequestAuditEvent(pool, request, { category: 'authentication', eventType: 'login.success' }); + assert.equal(pool.inserts.length, 0); +}); + +test('audit writer omits request metadata when disabled', async () => { + const pool = createPool({ enabled: true, categories: ['authentication'], includeMetadata: false }); + await recordRequestAuditEvent(pool, request, { category: 'authentication', eventType: 'login.success' }); + assert.equal(pool.inserts.length, 1); + assert.equal(pool.inserts[0][6], null); + assert.equal(pool.inserts[0][7], null); +}); \ No newline at end of file diff --git a/test/auth-routes.test.js b/test/auth-routes.test.js index 48ddbd0..80d453f 100644 --- a/test/auth-routes.test.js +++ b/test/auth-routes.test.js @@ -8,10 +8,12 @@ const renderLoginPage = require('../src/web/routes/auth/login'); const { createSessionService, normalizeReturnToPath } = require('../src/web/lib/auth/session'); test('login page preserves the return target in a hidden field', () => { - const html = renderLoginPage('', '/slides/6/edit'); + const html = renderLoginPage('', '/slides/6/edit', 'demo'); assert.match(html, /name="returnTo"/); assert.match(html, /value="\/slides\/6\/edit"/); + assert.match(html, /name="remember_me"/); + assert.match(html, /name="username"[^>]*value="demo"/); }); test('requireAuth preserves the original request path when redirecting to login', () => { @@ -80,8 +82,10 @@ test('successful login returns to the requested link instead of the dashboard', } }, createUserSession: async () => 'session-token', - setSessionCookie(res, token) { + getSessionMaxAgeMs: async () => 7 * 24 * 60 * 60 * 1000, + setSessionCookie(res, token, maxAgeMs) { res.sessionToken = token; + res.sessionMaxAgeMs = maxAgeMs; }, clearSessionCookie() {}, parseCookies() { @@ -126,5 +130,31 @@ test('successful login returns to the requested link instead of the dashboard', await handlers['POST /login'][0](req, res, () => {}); assert.equal(res.sessionToken, 'session-token'); + assert.equal(res.sessionMaxAgeMs, null); assert.equal(res.redirectedTo, '/slides/6/edit?tab=content'); + + const rememberedRequest = { + body: { + username: 'demo', + password: 'secret', + remember_me: '1' + }, + query: {} + }; + const rememberedResponse = { + redirect(url) { + this.redirectedTo = url; + }, + status() { + return this; + }, + send(value) { + this.sentValue = value; + return this; + } + }; + + await handlers['POST /login'][0](rememberedRequest, rememberedResponse, () => {}); + + assert.equal(rememberedResponse.sessionMaxAgeMs, 7 * 24 * 60 * 60 * 1000); }); \ No newline at end of file diff --git a/test/background-tasks-expired-session-sweep.test.js b/test/background-tasks-expired-session-sweep.test.js new file mode 100644 index 0000000..30d1694 --- /dev/null +++ b/test/background-tasks-expired-session-sweep.test.js @@ -0,0 +1,27 @@ +const test = require('node:test'); +const assert = require('node:assert/strict'); + +const { registerExpiredSessionSweepTask } = require('../src/web/lib/background-tasks/tasks-scheduled/expired-session-sweep'); + +test('expired session sweep registers and deletes expired sessions', async () => { + let definition = null; + const queries = []; + registerExpiredSessionSweepTask({ + backgroundTaskQueue: { + registerRecurringTask(value) { + definition = value; + } + }, + pool: { + async query(sql) { + queries.push(sql); + return [{ affectedRows: 3 }]; + } + } + }); + + assert.equal(definition.key, 'expired-session-sweep'); + assert.equal(definition.intervalMs, 60 * 60 * 1000); + await definition.run(); + assert.deepEqual(queries, ['DELETE FROM a_sessions WHERE expires_at <= NOW()']); +}); \ No newline at end of file diff --git a/test/not-found-middleware.test.js b/test/not-found-middleware.test.js new file mode 100644 index 0000000..ed5e0ab --- /dev/null +++ b/test/not-found-middleware.test.js @@ -0,0 +1,21 @@ +const test = require('node:test'); +const assert = require('node:assert/strict'); + +const registerNotFoundHandler = require('../src/web/middleware/not-found'); + +test('unmatched requests are forwarded as 404 errors', () => { + let handler = null; + registerNotFoundHandler({ + use(value) { + handler = value; + } + }); + + let receivedError = null; + handler({}, {}, function (error) { + receivedError = error; + }); + + assert.equal(receivedError.statusCode, 404); + assert.equal(receivedError.message, 'Page not found.'); +}); diff --git a/test/password-strength.test.js b/test/password-strength.test.js index f1c5913..a2515a3 100644 --- a/test/password-strength.test.js +++ b/test/password-strength.test.js @@ -8,4 +8,23 @@ test('password strength requires a longer mixed-character password', () => { assert.equal(validatePasswordStrength('1234567890'), 'Password must be at least 10 characters and include 3 of: uppercase, lowercase, number, and symbol.'); assert.equal(validatePasswordStrength('Password12'), ''); assert.equal(validatePasswordStrength('NewPassword!1'), ''); +}); + +test('password strength supports strong and strict policies', () => { + assert.equal(validatePasswordStrength('Password12', { policy: 'strong' }), 'Password must be at least 12 characters and include 3 of: uppercase, lowercase, number, and symbol.'); + assert.equal(validatePasswordStrength('Password12!!', { policy: 'strong' }), ''); + assert.equal(validatePasswordStrength('Password12!Abc', { policy: 'strict' }), ''); + assert.equal(validatePasswordStrength('Password12!Ab', { policy: 'strict' }), 'Password must be at least 14 characters and include uppercase, lowercase, number, and symbol.'); +}); + +test('password strength supports custom category requirements', () => { + const requirements = { + minimumLength: 8, + minimumCategories: 2, + requireUppercase: true, + requireSymbol: true + }; + + assert.equal(validatePasswordStrength('password1!', requirements), 'Password must be at least 8 characters and include uppercase, symbol.'); + assert.equal(validatePasswordStrength('Password!', requirements), ''); }); \ No newline at end of file diff --git a/test/rbac-permissions.test.js b/test/rbac-permissions.test.js index 942373c..6e80752 100644 --- a/test/rbac-permissions.test.js +++ b/test/rbac-permissions.test.js @@ -4,17 +4,23 @@ const fs = require('node:fs'); const rbacPermissionsScript = fs.readFileSync(require.resolve('../src/web/public/js/rbac-permissions.js'), 'utf8'); const rbacFormTemplate = fs.readFileSync(require.resolve('../src/web/views/settings/rbac/form.hbs'), 'utf8'); +const rbacRoutesSource = fs.readFileSync(require.resolve('../src/web/routes/admin/rbac.js'), 'utf8'); const { buildPermissionSections } = require('../src/web/routes/settings/rbac/form-view-model'); const rbacFormViewModel = fs.readFileSync(require.resolve('../src/web/routes/settings/rbac/form-view-model.js'), 'utf8'); const rbacSource = fs.readFileSync(require.resolve('../src/rbac.js'), 'utf8'); test('rbac form exposes bulk permission controls', () => { assert.match(rbacFormTemplate, /name="permissions_present" value="1"/); + assert.match(rbacFormTemplate, /name="user_ids_present\[\]" value="\{\{id\}\}"/); assert.match(rbacFormTemplate, /accordion accordion-flush/); - assert.match(rbacFormTemplate, /card card-outline card-secondary overflow-hidden/); + assert.match(rbacFormTemplate, /rbac-permissions-table-head/); + assert.ok(!rbacFormTemplate.includes('table-light')); + assert.match(rbacFormTemplate, /

    Permissions<\/h3>[\s\S]*
    [\s\S]*accordion accordion-flush/); + assert.match(rbacFormTemplate, /card card-outline card-secondary admin-form-card overflow-hidden[\s\S]*

    Permissions<\/h3>/); + assert.ok(!rbacFormTemplate.includes('card card-outline card-secondary overflow-hidden')); assert.match(rbacFormTemplate, /accordion-item overflow-hidden" data-permission-section/); assert.match(rbacFormTemplate, /accordion-body p-0/); - assert.ok(!rbacFormTemplate.includes('data-bs-parent="#role-permissions-accordion"')); + assert.match(rbacFormTemplate, /data-bs-parent="#role-permissions-accordion"/); assert.match(rbacFormTemplate, /table-layout: fixed; width: 100%;/); assert.match(rbacFormTemplate, /

    /); assert.match(rbacFormTemplate, /class="text-center"/); @@ -37,9 +43,12 @@ test('rbac form exposes bulk permission controls', () => { assert.ok(rbacFormViewModel.includes("label: 'Delete'")); assert.ok(rbacFormViewModel.includes("label: 'Allow'")); assert.ok(rbacFormViewModel.includes('left.resourceOrder')); + assert.ok(rbacRoutesSource.includes('resourceOrder: Number(permission.resourceOrder) || 999')); assert.ok(rbacFormViewModel.includes('section.actions = actionDefinitions.map')); - assert.ok(rbacFormViewModel.includes('data-async-save-new-url="/rbac/new"')); - assert.ok(rbacFormViewModel.includes('data-async-save-close-url="/rbac" data-async-save-new-url="/rbac/new"')); + assert.ok(rbacFormViewModel.includes('data-async-save-new-url="/settings/roles/new"')); + assert.ok(rbacFormViewModel.includes('data-async-save-close-url="/settings/roles" data-async-save-new-url="/settings/roles/new"')); + assert.ok(rbacFormViewModel.includes('cancelConfirmMessage: "You\'ve made changes. Are you sure you want to leave this page?"')); + assert.match(rbacFormTemplate, /cancelConfirmMessage=cancelConfirmMessage/); assert.ok(rbacSource.includes("sectionName: 'Main navigation'")); assert.ok(rbacSource.includes("permissions: [")); assert.ok(rbacSource.includes("resourceOrder: resource.order")); @@ -50,15 +59,16 @@ test('rbac permissions script supports bulk permission selection', () => { assert.ok(rbacPermissionsScript.includes('function toggleRowCheckboxes(row)')); assert.ok(rbacPermissionsScript.includes('data-permission-row-toggle')); assert.ok(rbacPermissionsScript.includes("toggleRowCheckboxes(findPermissionRow(targetId));")); + assert.match(rbacPermissionsScript, /toggleRowCheckboxes\(findPermissionRow\(targetId\)\);\s*markPermissionFormDirty\(control\);/); assert.ok(!rbacPermissionsScript.includes('data-permission-select-none')); assert.ok(!rbacPermissionsScript.includes('data-permission-section-select-none')); }); -test('rbac accordion sections follow source order', () => { +test('rbac accordion sections follow configured order', () => { const sections = buildPermissionSections([ { categoryName: 'Settings', - sectionIndex: 3, + sectionIndex: 0, sectionOrder: 40, resourceIndex: 1, resourceOrder: 20, @@ -67,9 +77,9 @@ test('rbac accordion sections follow source order', () => { }, { categoryName: 'Main navigation', - sectionIndex: 0, + sectionIndex: 3, sectionOrder: 10, - resourceIndex: 1, + resourceIndex: 0, resourceOrder: 20, title: 'Clients', permissions: [] @@ -78,7 +88,7 @@ test('rbac accordion sections follow source order', () => { categoryName: 'Main navigation', sectionIndex: 0, sectionOrder: 10, - resourceIndex: 0, + resourceIndex: 1, resourceOrder: 10, title: 'Dashboard', permissions: [] @@ -97,7 +107,7 @@ test('rbac duplicate route exists', () => { const rbacRoutes = fs.readFileSync(require.resolve('../src/web/routes/admin/rbac.js'), 'utf8'); const duplicateHelpers = fs.readFileSync(require.resolve('../src/web/routes/settings/rbac/duplicate.js'), 'utf8'); - assert.match(rbacRoutes, /\/rbac\/:id\/duplicate/); + assert.match(rbacRoutes, /\/settings\/roles\/:id\/duplicate/); assert.ok(rbacRoutes.includes("requirePermission('rbac.create')")); assert.ok(duplicateHelpers.includes('buildDuplicateRoleName')); assert.ok(duplicateHelpers.includes('buildDuplicateRole')); diff --git a/test/schema-update-log.test.js b/test/schema-update-log.test.js index 02e1b56..62310ff 100644 --- a/test/schema-update-log.test.js +++ b/test/schema-update-log.test.js @@ -44,7 +44,7 @@ test('pending migrations are empty when the schema already matches the app versi } ]); - const pendingMigrations = await getPendingMigrations(pool, { currentVersion: '2.6.21' }); + const pendingMigrations = await getPendingMigrations(pool, { currentVersion: '2.8.0' }); assert.equal(pendingMigrations.length, 0); }); @@ -74,4 +74,6 @@ test('pending migrations are reported when an older schema still needs scripts', const pendingMigrations = await getPendingMigrations(pool, { currentVersion: '2.6.17' }); assert.ok(pendingMigrations.length > 0); + assert.equal(pendingMigrations.filter(function (migration) { return migration.version.indexOf('2.8.') === 0; }).length, 1); + assert.equal(pendingMigrations.find(function (migration) { return migration.version.indexOf('2.8.') === 0; }).version, '2.8.0'); }); \ No newline at end of file diff --git a/test/settings-route.test.js b/test/settings-route.test.js new file mode 100644 index 0000000..7a696f1 --- /dev/null +++ b/test/settings-route.test.js @@ -0,0 +1,120 @@ +const test = require('node:test'); +const assert = require('node:assert/strict'); + +require('../src/common'); + +const registerSettingsRoutes = require('../src/web/routes/settings/routes'); +const { ANNOUNCEMENT_ICON_CATALOG } = require('../src/data/announcement-icons'); + +test('settings route renders the overview', async () => { + const handlers = {}; + const queries = []; + const app = { + get(path, ...routeHandlers) { + handlers[path] = routeHandlers; + }, + post(path, ...routeHandlers) { + handlers['POST ' + path] = routeHandlers; + } + }; + + registerSettingsRoutes(app, { + pages: { + renderSettingsPage(_settings, _icons, currentUser) { + return currentUser && currentUser.id === 7 ? 'settings-page' : 'unexpected'; + } + }, + pool: { + async query(sql, params) { + queries.push({ sql, params }); + return [[]]; + } + }, + requirePermission(permissionKey) { + assert.ok(['system-settings.read', 'system-settings.update'].includes(permissionKey)); + return function (_req, _res, next) { + next(); + }; + } + }); + + const pageResponse = { + send(value) { + this.body = value; + } + }; + await handlers['/settings/system'][1]({ currentUser: { id: 7 }, query: {} }, pageResponse, function (error) { + throw error; + }); + assert.equal(pageResponse.body, 'settings-page'); + + assert.equal(Object.keys(handlers).length, 2); + assert.ok(handlers['/settings/system']); + assert.ok(handlers['POST /settings/system']); + + const saveResponse = { + redirect(url) { + this.redirectedTo = url; + } + }; + await handlers['POST /settings/system'][1]({ + body: { 'suggested_icons[]': ['bell-fill'], image_max_mb: '100', video_max_mb: '1024' }, + body: { settings_section: 'icons', 'suggested_icons[]': ['bell-fill'] }, + currentUser: { id: 7 } + }, saveResponse, function (error) { + throw error; + }); + assert.ok(queries.some(function (entry) { return entry.sql && /DELETE FROM o_app_settings/.test(entry.sql); })); + assert.ok(queries.some(function (entry) { return entry.sql && /INSERT INTO o_app_settings/.test(entry.sql); })); + assert.match(saveResponse.redirectedTo, /^\/settings\/system\?message=/); + + let tooManyError = null; + await handlers['POST /settings/system'][1]({ + body: { settings_section: 'icons', suggested_icons: ANNOUNCEMENT_ICON_CATALOG.slice(0, 49).map(function (option) { return option.value; }) }, + currentUser: { id: 7 } + }, {}, function (error) { + tooManyError = error; + }); + assert.equal(tooManyError.statusCode, 400); + assert.match(tooManyError.message, /48/); + + const mediaResponse = { + redirect(url) { + this.redirectedTo = url; + } + }; + await handlers['POST /settings/system'][1]({ + body: { settings_section: 'media', image_max_mb: '100', video_max_mb: '1024', wysiwyg_image_max_mb: '0.5', allowed_mime_types: ['image/png', 'video/mp4'] }, + currentUser: { id: 7 } + }, mediaResponse, function (error) { + throw error; + }); + assert.match(mediaResponse.redirectedTo, /media-uploads/); + + const securityResponse = { + redirect(url) { + this.redirectedTo = url; + } + }; + await handlers['POST /settings/system'][1]({ + body: { settings_section: 'security', session_lifetime_days: '30', allow_user_session_revocation: '1', max_active_sessions: '5', login_max_attempts: '5', login_lockout_minutes: '15', login_rate_limit_scope: 'both', password_min_length: '12', password_min_categories: '3' }, + currentUser: { id: 7 } + }, securityResponse, function (error) { + throw error; + }); + assert.match(securityResponse.redirectedTo, /security-sessions/); + assert.ok(queries.some(function (entry) { + return entry.sql && entry.sql.includes('INSERT INTO o_app_settings') && entry.params && entry.params[0] === 'security.session_lifetime_days'; + })); + assert.ok(queries.some(function (entry) { + return entry.sql && entry.sql.includes('INSERT INTO o_app_settings') && entry.params && entry.params[0] === 'security.password_min_length'; + })); + + const mediaInsertQueries = queries.filter(function (entry) { + return entry.sql && entry.sql.includes('INSERT INTO o_app_settings'); + }); + const videoInsert = mediaInsertQueries.find(function (entry) { + return entry.params && entry.params[0] === 'uploads.video_max_bytes'; + }); + assert.equal(Number(videoInsert.params[1]), 1024 * 1024 * 1024); +}); diff --git a/test/slide-form-editor.test.js b/test/slide-form-editor.test.js index 77c376f..1229473 100644 --- a/test/slide-form-editor.test.js +++ b/test/slide-form-editor.test.js @@ -45,6 +45,12 @@ test('slide editor tracks uploaded image paths for cleanup', () => { assert.ok(slideFormEditorSource.includes('clearImageUploadPaths')); }); +test('slide editor marks the owning form dirty after TinyMCE edits', () => { + assert.ok(slideFormEditorSource.includes("var markFormDirty = typeof settings.markFormDirty === 'function' ? settings.markFormDirty : function () {};")); + assert.match(slideFormEditorSource, /if \(hydrated\)\s*\{\s*markFormDirty\(\);/); + assert.match(slideFormSource, /markFormDirty:\s*function \(\)\s*\{\s*slideForm\.dataset\.dirty = 'true';/); +}); + test('slide editor keeps image-only rich text from being treated as empty', () => { assert.ok(slideFormEditorSource.includes('/ { registerUsersRoutes(app, deps); - const routeHandlers = handlers['/users/:id/duplicate']; + const routeHandlers = handlers['/settings/users/:id/duplicate']; assert.equal(Array.isArray(routeHandlers), true); const req = { diff --git a/test/users-form-view-model.test.js b/test/users-form-view-model.test.js index 5a5d77a..7d73d18 100644 --- a/test/users-form-view-model.test.js +++ b/test/users-form-view-model.test.js @@ -8,11 +8,11 @@ const usersFormTemplate = fs.readFileSync(require.resolve('../src/web/views/sett test('user edit view model includes delete confirmation text', () => { const model = buildUsersEditViewModel({ id: 12, inUse: false, roleIds: [] }, 'Saved.', { id: 1 }, []); - assert.equal(model.footerDeleteUrl, '/users/12/delete'); + assert.equal(model.footerDeleteUrl, '/settings/users/12/delete'); assert.equal(model.footerDeleteConfirmMessage, 'Delete this user?'); assert.equal(model.footerDeleteDisabled, false); assert.equal(model.showSaveSecondaryActions, true); - assert.equal(model.formAttrs, 'data-async-save data-async-save-close-url="/users" data-async-save-new-url="/users/new"'); + assert.equal(model.formAttrs, 'data-async-save data-async-save-close-url="/settings/users" data-async-save-new-url="/settings/users/new"'); }); test('user add view model keeps delete disabled without a confirm message', () => { @@ -21,7 +21,7 @@ test('user add view model keeps delete disabled without a confirm message', () = assert.equal(model.footerDeleteDisabled, true); assert.equal(model.footerDeleteUrl, ''); assert.equal(model.footerDeleteConfirmMessage, undefined); - assert.equal(model.formAttrs, 'data-async-save data-async-save-close-url="/users" data-async-save-new-redirect="response-url" data-async-save-new-url="/users/new"'); + assert.equal(model.formAttrs, 'data-async-save data-async-save-close-url="/settings/users" data-async-save-new-redirect="response-url" data-async-save-new-url="/settings/users/new"'); }); test('user add view model uses success messaging for redirected saves', () => {
    OrderSlideSchedulePlaybackActions