Move admin to React

.dockerignore

@@ -0,0 +1,8 @@
+.git
+.github
+.vscode
+app/react/node_modules
+app/public/content
+vendor
+*.log
+.DS_Store

.gitignore

@@ -3,6 +3,9 @@
 *.log
 composer.lock
 app/database/db.sqlite
-public/content/*
-public/assets/js/tinymce
+app/public/content/*
+app/public/assets/js/tinymce
+app/public/assets/js/admin.*
+app/react/node_modules
+app/react/package-lock.json
 vendor

.htaccess

@@ -1,5 +1,6 @@
 Options -Indexes
 
 RewriteEngine on
-RewriteRule ^$ public/ [L]
-RewriteRule ^((?!public/).*)$ public/$1 [L,NC]
+RewriteRule ^$ app/public/ [L]
+RewriteRule ^public/(.*)$ app/public/$1 [L,NC]
+RewriteRule ^((?!app/public/).*)$ app/public/$1 [L,NC]

README.md

@@ -1,5 +1,5 @@
 <h1 align="center">
-  <img src="public/assets/logo.svg" alt="Aurora logo" width="140">
+  <img src="/app/public/assets/logo.svg" alt="Aurora logo" width="140">
   <br>
   Aurora
   <br>

app/bootstrap/config.php

@@ -17,8 +17,9 @@
     'bootstrap' => require(__DIR__ . '/index.php'),
     'date_format' => 'dd MMM Y HH:mm',
     'db'        => $db,
-    'content'   => 'public/content',
+    'content'   => 'app/public/content',
     'per_page'  => 20,
+    'max_active_sessions' => 10,
     'mail'      => fn($to, $subject, $message) => mail($to, $subject, $message),
     'views'     => 'app/views',
 ];

app/bootstrap/index.php

@@ -26,17 +26,11 @@ function setting(?string $key = null): mixed
     $settings = $db->query('SELECT `key`, value FROM settings')->fetchAll(\PDO::FETCH_KEY_PAIR);
 
     header('X-Content-Type-Options: nosniff');
-    ini_set('session.cookie_httponly', 1);
     ini_set('error_log', \Aurora\Core\Helper::getPath($settings['log_file']));
-    ini_set('display_errors', $settings['display_errors'] ? 1 : 0);
-    ini_set('display_startup_errors', $settings['display_errors'] ? 1 : 0);
+    ini_set('display_errors', 0);
+    ini_set('display_startup_errors', 0);
     error_reporting($settings['log_errors'] ? E_ALL : 0);
     date_default_timezone_set($settings['timezone']);
-    session_set_cookie_params([
-        'lifetime' => (int) $settings['session_lifetime'],
-        'samesite' => $settings['samesite_cookie'],
-    ]);
-    session_start();
 
     $languages = [];
     foreach (glob(\Aurora\Core\Helper::getPath('app/languages/*.php')) as $file) {
@@ -47,11 +41,13 @@ function setting(?string $key = null): mixed
 
     $view = new \Aurora\Core\View(\Aurora\Core\Helper::getPath($kernel->config('views')), new \Aurora\App\ViewHelper($kernel->config('date_format'), $lang));
 
-    \Aurora\App\Permission::set($db->query('SELECT permission, role_level FROM roles_permissions ORDER BY permission')->fetchAll(\PDO::FETCH_KEY_PAIR), $_SESSION['user']['role'] ?? 0);
-    \Aurora\App\Permission::addMethod('impersonate', fn($user) => ($user['status'] ?? false) && $user['role'] <= ($_SESSION['user']['role'] ?? 0) && \Aurora\App\Permission::can('impersonate'));
-    \Aurora\App\Permission::addMethod('edit_user', fn($user) => ($user['role'] ?? 0) <= ($_SESSION['user']['role'] ?? 0) && \Aurora\App\Permission::can('edit_users'));
+    $user = &$GLOBALS['user'];
+    \Aurora\App\Permission::set($db->query('SELECT permission, role_level FROM roles_permissions ORDER BY permission')->fetchAll(\PDO::FETCH_KEY_PAIR), $user['role'] ?? 0);
+    \Aurora\App\Permission::addMethod('editUser', function ($subject) use (&$user) {
+        return \Aurora\App\Modules\User::canEdit($user, $subject);
+    });
     \Aurora\App\Setting::set($settings);
     \Aurora\App\Media::setDirectory($kernel->config('content'));
 
-    (require('routes.php'))($kernel, $db, $view, $lang);
+    (require('routes.php'))($kernel, $db, $view, $lang, $user);
 };