damir
4fc8327789
Orchestrator-side: - routers/img_proxy_router.py: 4xx/5xx → 1x1 transparent PNG (eliminates cascade <img onerror>) - static/sport2.html: removed standalone three.min.js (3d-force-graph bundles), bumped to 1.73.4 CC3 (before limit hit): - Logo home link applied to ALL HTML pages (admin.html, admin_users.html, audit.html, crm.html, erp.html, kpi.html, login.html) - Backups in _backups/*.cc3_pre_logo.$ts CC4 R3 (before plan mode): - _backups/r3_cc4/ocr.py.pre_S2.$ts Audit screenshots (80 pages) committed to _audit/audit_20260505_023639/shots/
565 lines
17 KiB
HTML
565 lines
17 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="hr">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width,initial-scale=1">
|
|
<title>PGŽ Sport · Prijava</title>
|
|
<link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><rect width='32' height='32' rx='6' fill='%2306080d'/><text x='16' y='23' text-anchor='middle' font-size='18' font-family='monospace' fill='%2300f0ff'>P</text></svg>">
|
|
<link rel="preconnect" href="https://fonts.googleapis.com">
|
|
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet">
|
|
<style>
|
|
:root {
|
|
--bg: #06080d;
|
|
--bg-2: #0d1117;
|
|
--bg-3: #161b22;
|
|
--border: #1f2937;
|
|
--text: #e6edf3;
|
|
--text-2: #8b949e;
|
|
--text-3: #6e7681;
|
|
--accent: #00f0ff;
|
|
--accent-2: #00b8d4;
|
|
--green: #56d364;
|
|
--red: #f85149;
|
|
--yellow: #d29922;
|
|
}
|
|
* { margin: 0; padding: 0; box-sizing: border-box; }
|
|
html, body {
|
|
font-family: 'Inter', system-ui, sans-serif;
|
|
background: var(--bg);
|
|
color: var(--text);
|
|
min-height: 100vh;
|
|
font-size: 14px;
|
|
line-height: 1.5;
|
|
}
|
|
body {
|
|
display: grid;
|
|
grid-template-columns: 1fr 1fr;
|
|
min-height: 100vh;
|
|
}
|
|
@media (max-width: 900px) {
|
|
body { grid-template-columns: 1fr; }
|
|
.left { display: none; }
|
|
}
|
|
.left {
|
|
background:
|
|
radial-gradient(ellipse at 30% 20%, rgba(0,240,255,0.08), transparent 60%),
|
|
radial-gradient(ellipse at 70% 80%, rgba(188,140,255,0.05), transparent 60%),
|
|
linear-gradient(180deg, var(--bg) 0%, var(--bg-2) 100%);
|
|
border-right: 1px solid var(--border);
|
|
padding: 56px;
|
|
display: flex;
|
|
flex-direction: column;
|
|
justify-content: space-between;
|
|
position: relative;
|
|
overflow: hidden;
|
|
}
|
|
.left::before {
|
|
content: '';
|
|
position: absolute; inset: 0;
|
|
background-image:
|
|
linear-gradient(rgba(0,240,255,0.04) 1px, transparent 1px),
|
|
linear-gradient(90deg, rgba(0,240,255,0.04) 1px, transparent 1px);
|
|
background-size: 40px 40px;
|
|
mask: radial-gradient(ellipse at center, black 30%, transparent 80%);
|
|
pointer-events: none;
|
|
}
|
|
.brand {
|
|
position: relative; z-index: 1;
|
|
display: flex; align-items: center; gap: 14px;
|
|
}
|
|
.brand-mark {
|
|
width: 48px; height: 48px;
|
|
background: var(--accent);
|
|
border-radius: 8px;
|
|
display: grid; place-items: center;
|
|
color: var(--bg);
|
|
font-weight: 700; font-size: 22px;
|
|
font-family: 'JetBrains Mono', monospace;
|
|
box-shadow: 0 0 24px rgba(0,240,255,0.3);
|
|
}
|
|
.brand-text h1 {
|
|
font-size: 20px; font-weight: 700; letter-spacing: 0.5px;
|
|
}
|
|
.brand-text .sub {
|
|
font-size: 12px; color: var(--text-3);
|
|
font-family: 'JetBrains Mono', monospace;
|
|
}
|
|
.hero { position: relative; z-index: 1; max-width: 460px; }
|
|
.hero h2 {
|
|
font-size: 36px; font-weight: 700;
|
|
line-height: 1.15;
|
|
margin-bottom: 18px;
|
|
letter-spacing: -0.5px;
|
|
}
|
|
.hero h2 span { color: var(--accent); }
|
|
.hero p {
|
|
color: var(--text-2);
|
|
font-size: 15px;
|
|
line-height: 1.6;
|
|
margin-bottom: 28px;
|
|
}
|
|
.features {
|
|
display: grid; gap: 12px;
|
|
}
|
|
.feat {
|
|
display: flex; gap: 12px;
|
|
font-size: 13px; color: var(--text-2);
|
|
}
|
|
.feat .ico {
|
|
width: 22px; height: 22px;
|
|
border-radius: 4px;
|
|
background: rgba(0,240,255,0.1);
|
|
color: var(--accent);
|
|
display: grid; place-items: center;
|
|
font-size: 12px; font-weight: 700;
|
|
flex-shrink: 0;
|
|
}
|
|
.footer-left {
|
|
position: relative; z-index: 1;
|
|
font-size: 11px; color: var(--text-3);
|
|
font-family: 'JetBrains Mono', monospace;
|
|
}
|
|
|
|
.right {
|
|
display: flex; align-items: center; justify-content: center;
|
|
padding: 40px;
|
|
}
|
|
.card {
|
|
width: 100%;
|
|
max-width: 380px;
|
|
background: var(--bg-2);
|
|
border: 1px solid var(--border);
|
|
border-radius: 12px;
|
|
padding: 36px 32px;
|
|
box-shadow: 0 20px 60px rgba(0,0,0,0.4);
|
|
}
|
|
.card h3 {
|
|
font-size: 22px;
|
|
font-weight: 700;
|
|
margin-bottom: 6px;
|
|
}
|
|
.card .lead {
|
|
color: var(--text-3);
|
|
font-size: 13px;
|
|
margin-bottom: 28px;
|
|
}
|
|
.field {
|
|
margin-bottom: 14px;
|
|
}
|
|
.field label {
|
|
display: block;
|
|
font-size: 11px;
|
|
color: var(--text-3);
|
|
text-transform: uppercase;
|
|
letter-spacing: 0.7px;
|
|
margin-bottom: 6px;
|
|
font-weight: 600;
|
|
}
|
|
.field input {
|
|
width: 100%;
|
|
background: var(--bg);
|
|
border: 1px solid var(--border);
|
|
color: var(--text);
|
|
padding: 12px 14px;
|
|
border-radius: 6px;
|
|
font-family: inherit;
|
|
font-size: 14px;
|
|
transition: border-color 0.15s, box-shadow 0.15s;
|
|
}
|
|
.field input:focus {
|
|
outline: none;
|
|
border-color: var(--accent);
|
|
box-shadow: 0 0 0 3px rgba(0,240,255,0.12);
|
|
}
|
|
.row {
|
|
display: flex; justify-content: space-between; align-items: center;
|
|
margin: 14px 0 22px;
|
|
font-size: 12px;
|
|
}
|
|
.row label {
|
|
display: flex; align-items: center; gap: 6px;
|
|
color: var(--text-2);
|
|
cursor: pointer;
|
|
}
|
|
.row label input { accent-color: var(--accent); }
|
|
.row a { color: var(--accent); text-decoration: none; }
|
|
.row a:hover { text-decoration: underline; }
|
|
|
|
.btn {
|
|
width: 100%;
|
|
background: var(--accent);
|
|
color: var(--bg);
|
|
border: 0;
|
|
padding: 12px;
|
|
border-radius: 6px;
|
|
font-family: inherit;
|
|
font-size: 14px;
|
|
font-weight: 600;
|
|
cursor: pointer;
|
|
letter-spacing: 0.3px;
|
|
transition: background 0.15s, transform 0.05s;
|
|
}
|
|
.btn:hover:not(:disabled) { background: var(--accent-2); }
|
|
.btn:active:not(:disabled) { transform: translateY(1px); }
|
|
.btn:disabled { opacity: 0.6; cursor: not-allowed; }
|
|
.btn .spinner {
|
|
display: inline-block;
|
|
width: 14px; height: 14px;
|
|
border: 2px solid rgba(0,0,0,0.25);
|
|
border-top-color: var(--bg);
|
|
border-radius: 50%;
|
|
animation: spin 0.8s linear infinite;
|
|
vertical-align: -3px;
|
|
margin-right: 6px;
|
|
}
|
|
@keyframes spin { to { transform: rotate(360deg); } }
|
|
|
|
.alert {
|
|
background: rgba(248,81,73,0.1);
|
|
border: 1px solid rgba(248,81,73,0.4);
|
|
color: #ffb4af;
|
|
padding: 10px 12px;
|
|
border-radius: 6px;
|
|
font-size: 13px;
|
|
margin-bottom: 16px;
|
|
display: none;
|
|
}
|
|
.alert.show { display: block; }
|
|
.alert.success {
|
|
background: rgba(86,211,100,0.1);
|
|
border-color: rgba(86,211,100,0.4);
|
|
color: #b6f0bd;
|
|
}
|
|
|
|
.divider {
|
|
display: flex; align-items: center; gap: 12px;
|
|
margin: 18px 0;
|
|
color: var(--text-3);
|
|
font-size: 11px;
|
|
text-transform: uppercase;
|
|
letter-spacing: 1px;
|
|
}
|
|
.divider::before, .divider::after {
|
|
content: '';
|
|
flex: 1;
|
|
height: 1px;
|
|
background: var(--border);
|
|
}
|
|
|
|
.demo {
|
|
background: var(--bg-3);
|
|
border: 1px dashed var(--border);
|
|
border-radius: 6px;
|
|
padding: 10px 12px;
|
|
font-size: 11px;
|
|
color: var(--text-2);
|
|
font-family: 'JetBrains Mono', monospace;
|
|
cursor: pointer;
|
|
transition: border-color 0.15s;
|
|
}
|
|
.demo:hover { border-color: var(--accent); color: var(--text); }
|
|
.demo strong { color: var(--accent); }
|
|
|
|
.footer-right {
|
|
text-align: center;
|
|
margin-top: 22px;
|
|
font-size: 11px;
|
|
color: var(--text-3);
|
|
}
|
|
.footer-right a {
|
|
color: var(--text-2);
|
|
text-decoration: none;
|
|
margin: 0 6px;
|
|
}
|
|
.footer-right a:hover { color: var(--accent); }
|
|
|
|
/* Cookie banner */
|
|
.cookie {
|
|
position: fixed;
|
|
bottom: 16px; left: 16px; right: 16px;
|
|
max-width: 600px;
|
|
margin: 0 auto;
|
|
background: var(--bg-2);
|
|
border: 1px solid var(--border);
|
|
border-radius: 10px;
|
|
padding: 16px 20px;
|
|
display: none;
|
|
z-index: 1000;
|
|
box-shadow: 0 12px 40px rgba(0,0,0,0.5);
|
|
}
|
|
.cookie.show { display: block; }
|
|
.cookie h4 { font-size: 14px; margin-bottom: 6px; }
|
|
.cookie p { font-size: 12px; color: var(--text-2); margin-bottom: 12px; }
|
|
.cookie-actions { display: flex; gap: 8px; flex-wrap: wrap; }
|
|
.cookie-actions button {
|
|
background: transparent;
|
|
border: 1px solid var(--border);
|
|
color: var(--text-2);
|
|
padding: 6px 14px;
|
|
border-radius: 5px;
|
|
font-family: inherit;
|
|
font-size: 12px;
|
|
cursor: pointer;
|
|
}
|
|
.cookie-actions button.primary {
|
|
background: var(--accent);
|
|
border-color: var(--accent);
|
|
color: var(--bg);
|
|
font-weight: 600;
|
|
}
|
|
.cookie-actions button:hover { color: var(--text); border-color: var(--accent); }
|
|
.cookie a { color: var(--accent); text-decoration: none; }
|
|
</style>
|
|
<link rel="stylesheet" href="/static/shared/sidebar.css">
|
|
<script src="/static/shared/sidebar.js" defer data-active="login"></script>
|
|
</head>
|
|
<body>
|
|
|
|
<div class="left">
|
|
<div class="brand">
|
|
<div class="brand-mark">P</div>
|
|
<div class="brand-text">
|
|
<h1><a href="/" style="text-decoration:none;color:inherit" title="Početna">PGŽ Sport</a></h1>
|
|
<div class="sub">ERP/CRM Platforma</div>
|
|
</div>
|
|
</div>
|
|
<div class="hero">
|
|
<h2>Operativna platforma <span>za sport</span> u Primorsko-goranskoj županiji.</h2>
|
|
<p>Jedinstvena baza klubova, saveza i sportaša. Računovodstvo, članarine, liječnički pregledi, sufinanciranja — sve na jednom mjestu.</p>
|
|
<div class="features">
|
|
<div class="feat"><div class="ico">✓</div><div>Multi-tenant arhitektura — PGŽ, savezi, klubovi sa svojim view-om</div></div>
|
|
<div class="feat"><div class="ico">✓</div><div>OCR za račune, automatska ekstrakcija polja, putni nalozi</div></div>
|
|
<div class="feat"><div class="ico">✓</div><div>Članarine s HUB-3 uplatnicama i blockchain audit log</div></div>
|
|
<div class="feat"><div class="ico">✓</div><div>GDPR-compliant (Art. 17, 20) · 2FA · audit svih akcija</div></div>
|
|
</div>
|
|
</div>
|
|
<div class="footer-left">
|
|
PGŽ ODJEL ZA SPORT · v3.0 · 2026
|
|
</div>
|
|
</div>
|
|
|
|
<div class="right">
|
|
<div class="card">
|
|
<h3>Prijava</h3>
|
|
<div class="lead">Unesite svoje podatke za pristup platformi.</div>
|
|
|
|
<div id="alert" class="alert"></div>
|
|
|
|
<form id="loginForm" autocomplete="on">
|
|
<div class="field">
|
|
<label for="email">E-mail</label>
|
|
<input type="email" id="email" name="email" required autocomplete="username" placeholder="ime.prezime@pgz.hr">
|
|
</div>
|
|
<div class="field">
|
|
<label for="password">Lozinka</label>
|
|
<input type="password" id="password" name="password" required autocomplete="current-password" placeholder="••••••••">
|
|
</div>
|
|
<div class="field" id="totpField" style="display:none">
|
|
<label for="totp">Kod autentifikatora (2FA)</label>
|
|
<input type="text" id="totp" name="totp" inputmode="numeric" pattern="[0-9 ]*" autocomplete="one-time-code" placeholder="123456" maxlength="8" style="font-family:'JetBrains Mono',monospace;letter-spacing:4px;text-align:center;font-size:18px">
|
|
</div>
|
|
<div class="row">
|
|
<label><input type="checkbox" id="remember" checked> Zapamti me</label>
|
|
<a href="#" id="forgotLink">Zaboravljena lozinka?</a>
|
|
</div>
|
|
<button type="submit" class="btn" id="submitBtn">Prijavi se</button>
|
|
</form>
|
|
|
|
<div class="divider">Demo računi</div>
|
|
<div style="display:grid;gap:8px">
|
|
<div class="demo" data-email="damir@pgz.hr" data-pwd="PGZ2026!">
|
|
<strong>PGŽ admin</strong> · damir@pgz.hr / PGZ2026!
|
|
</div>
|
|
<div class="demo" data-email="pero@atletika.pgz.hr" data-pwd="PGZ2026!">
|
|
<strong>Savez admin</strong> · pero@atletika.pgz.hr
|
|
</div>
|
|
<div class="demo" data-email="ana@akkvarner.hr" data-pwd="PGZ2026!">
|
|
<strong>Klub admin</strong> · ana@akkvarner.hr
|
|
</div>
|
|
</div>
|
|
|
|
<div class="footer-right">
|
|
<a href="/sport2.html">Javni portal</a>
|
|
·
|
|
<a href="#" id="privacyLink">Politika privatnosti</a>
|
|
·
|
|
<a href="#" id="cookieLink">Kolačići</a>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- GDPR cookie consent -->
|
|
<div id="cookie" class="cookie">
|
|
<h4>🍪 Kolačići</h4>
|
|
<p>Koristimo nužne kolačiće za prijavu i sigurnost sesije. Po vašem odobrenju koristimo i analitičke kolačiće za poboljšanje platforme. <a href="#" id="cookieMore">Više…</a></p>
|
|
<div class="cookie-actions">
|
|
<button class="primary" id="cookieAccept">Prihvati sve</button>
|
|
<button id="cookieNecessary">Samo nužni</button>
|
|
<button id="cookieReject">Odbij sve</button>
|
|
</div>
|
|
</div>
|
|
|
|
<script>
|
|
const API = '/api';
|
|
const $ = s => document.querySelector(s);
|
|
|
|
// ---------- Login ----------
|
|
function showAlert(msg, type) {
|
|
const a = $('#alert');
|
|
a.textContent = msg;
|
|
a.className = 'alert show' + (type === 'success' ? ' success' : '');
|
|
if (type === 'success') {
|
|
setTimeout(() => a.classList.remove('show'), 3000);
|
|
}
|
|
}
|
|
|
|
async function doLogin(email, password, totp) {
|
|
const btn = $('#submitBtn');
|
|
btn.disabled = true;
|
|
btn.innerHTML = '<span class="spinner"></span>Prijavljujem…';
|
|
try {
|
|
const body = { email, password };
|
|
if (totp) body.totp = totp;
|
|
const r = await fetch(API + '/auth/login', {
|
|
method: 'POST',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: JSON.stringify(body)
|
|
});
|
|
const data = await r.json();
|
|
if (!r.ok) {
|
|
if (r.status === 401 && (data.detail === '2FA_REQUIRED' || /2FA/i.test(data.detail||''))) {
|
|
// Show TOTP field and stop
|
|
$('#totpField').style.display = '';
|
|
$('#totp').focus();
|
|
showAlert('Unesite kod iz autentifikatora.');
|
|
} else {
|
|
showAlert(data.detail || 'Neispravni podaci');
|
|
}
|
|
btn.disabled = false;
|
|
btn.textContent = 'Prijavi se';
|
|
return;
|
|
}
|
|
// Store tokens
|
|
const store = $('#remember').checked ? localStorage : sessionStorage;
|
|
store.setItem('pgz_access', data.access_token);
|
|
store.setItem('pgz_refresh', data.refresh_token);
|
|
store.setItem('pgz_user', JSON.stringify(data.user));
|
|
showAlert('Prijava uspješna. Preusmjeravam…', 'success');
|
|
// Redirect by role
|
|
setTimeout(() => {
|
|
const role = (data.user.role || '').toLowerCase();
|
|
if (['super_admin','pgz_admin','pgz_user','pgz_finance','pgz_zzjz',
|
|
'savez_admin','savez_user','klub_admin','klub_user','klub_trener'].includes(role)) {
|
|
|
|
// Smart redirect po roli
|
|
const role = data.user.role;
|
|
const redirectMap = {
|
|
'pgz_admin': '/app',
|
|
'savez_admin': '/app',
|
|
'klub_admin': '/app',
|
|
'super_admin': '/admin'
|
|
};
|
|
location.href = redirectMap[role] || '/app';
|
|
|
|
} else {
|
|
location.href = '/';
|
|
}
|
|
}, 600);
|
|
} catch (e) {
|
|
showAlert('Greška mreže: ' + e.message);
|
|
btn.disabled = false;
|
|
btn.textContent = 'Prijavi se';
|
|
}
|
|
}
|
|
|
|
$('#loginForm').addEventListener('submit', e => {
|
|
e.preventDefault();
|
|
const email = $('#email').value.trim().toLowerCase();
|
|
const pwd = $('#password').value;
|
|
const totp = ($('#totp').value || '').trim().replace(/\s/g,'') || null;
|
|
if (!email || !pwd) return;
|
|
doLogin(email, pwd, totp);
|
|
});
|
|
|
|
document.querySelectorAll('.demo').forEach(el => {
|
|
el.addEventListener('click', () => {
|
|
$('#email').value = el.dataset.email;
|
|
$('#password').value = el.dataset.pwd;
|
|
$('#email').focus();
|
|
});
|
|
});
|
|
|
|
$('#forgotLink').addEventListener('click', async e => {
|
|
e.preventDefault();
|
|
const email = ($('#email').value || prompt('Unesite e-mail:') || '').trim().toLowerCase();
|
|
if (!email) return;
|
|
try {
|
|
const r = await fetch(API + '/auth/password/reset', {
|
|
method: 'POST',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: JSON.stringify({ email })
|
|
});
|
|
const data = await r.json();
|
|
showAlert(data.message || 'Zahtjev poslan administratoru.', 'success');
|
|
} catch (err) {
|
|
showAlert('Greška: ' + err.message);
|
|
}
|
|
});
|
|
|
|
// ---------- Cookie consent ----------
|
|
const consentKey = 'pgz_consent';
|
|
function showConsent() {
|
|
if (!localStorage.getItem(consentKey)) {
|
|
$('#cookie').classList.add('show');
|
|
}
|
|
}
|
|
async function saveConsent(necessary, analytics, marketing) {
|
|
const session_id = localStorage.getItem('pgz_session_id') ||
|
|
(() => { const s = crypto.randomUUID(); localStorage.setItem('pgz_session_id', s); return s; })();
|
|
localStorage.setItem(consentKey, JSON.stringify({ necessary, analytics, marketing, ts: Date.now() }));
|
|
$('#cookie').classList.remove('show');
|
|
try {
|
|
await fetch(API + '/gdpr/consent', {
|
|
method: 'POST',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: JSON.stringify({ necessary, analytics, marketing, session_id })
|
|
});
|
|
} catch {}
|
|
}
|
|
$('#cookieAccept').addEventListener('click', () => saveConsent(true, true, true));
|
|
$('#cookieNecessary').addEventListener('click', () => saveConsent(true, false, false));
|
|
$('#cookieReject').addEventListener('click', () => saveConsent(true, false, false));
|
|
$('#cookieLink').addEventListener('click', e => { e.preventDefault(); localStorage.removeItem(consentKey); showConsent(); });
|
|
$('#privacyLink').addEventListener('click', async e => {
|
|
e.preventDefault();
|
|
try {
|
|
const r = await fetch(API + '/gdpr/policy');
|
|
const d = await r.json();
|
|
alert('PGŽ Sport — Politika privatnosti v' + d.version +
|
|
'\n\nKontroler: ' + d.controller +
|
|
'\nKontakt: ' + d.contact +
|
|
'\nDPO: ' + d.dpo +
|
|
'\n\nVaša prava:\n' + d.rights.join('\n'));
|
|
} catch {}
|
|
});
|
|
$('#cookieMore').addEventListener('click', e => { e.preventDefault(); $('#privacyLink').click(); });
|
|
|
|
// Skip login if already authenticated
|
|
(async () => {
|
|
const tok = localStorage.getItem('pgz_access') || sessionStorage.getItem('pgz_access');
|
|
if (tok) {
|
|
try {
|
|
const r = await fetch(API + '/auth/me', { headers: { Authorization: 'Bearer ' + tok }});
|
|
if (r.ok) {
|
|
location.href = '/app';
|
|
return;
|
|
}
|
|
} catch {}
|
|
}
|
|
showConsent();
|
|
$('#email').focus();
|
|
})();
|
|
</script>
|
|
</body>
|
|
</html>
|