i18 drin
mail drin
fehlende routen drin
prod-reife erreicht.
TODOS:
Deine aktuellen offenen TODOs
1. Rate-Limiting (Spam-Schutz VOR dem reCAPTCHA)
Das reCAPTCHA hält zwar Bots ab, aber wenn jemand böswillig ein Script schreibt, das 1.000 POST-Requests pro Sekunde an /api/v1/submissions sendet, muss dein Backend jedes Mal Google kontaktieren und die Datenbank befragen. Das frisst Server-Ressourcen.
Todo: Einbinden von Flask-Limiter und Absichern der API-Route (z.B. max. 10 Submissions pro Minute pro IP-Adresse oder Tenant).
2. Billing & Feature-Enforcement (Limits pro Tenant durchsetzen)
Die Mandanten-Architektur und das config-Feld im JSON existieren bereits. Aber wir erzwingen diese Limits aktuell nicht im Backend.
Todo: Im Dashboard (templates/admin/tenants/view.html) UI-Controls einbauen, um Feature-Flags für einen Tenant festzulegen:
max_forms (z.B. 1 für Free-User, 10 für Pro-User).
allow_instant_mail (Dürfen E-Mails an den Tenant gesendet werden?).
allow_autoresponder (Darf der Autoresponder für Endkunden genutzt werden?).
Todo: Diese Limits hart im Backend (beim Erstellen von Forms und beim Mailversand) kontrollieren. (Der Mailer prüft das zwar schon halbwegs, das UI zum Pflegen fehlt aber noch komplett).
3. E-Mail Templates aufwerten (HTML statt Plain-Text)
Bisher versendet der Service E-Mails als reinen Text (plain). Für eine professionelle SaaS-Lösung sollten diese Mails ansprechend aussehen.
Todo: Im services/mailer.py den MIMEMultipart so erweitern, dass er saubere HTML-Mails aus einem Jinja2-Template (templates/emails/...) generiert, inklusive Branding/Logo deines Services.
4. Frontend-Snippet "Graceful Degradation"
Das embed.js arbeitet aktuell sehr gut. Aber was ist, wenn das Formeleon-Backend mal für 5 Minuten down ist?
Todo: Einen sauberen Timeout im fetch einbauen und dem Endkunden auf der Webseite eine schöne, fallback HTML-Meldung anzeigen ("Entschuldigung, das Formular ist momentan nicht erreichbar"), anstatt dass sich das Script lautlos in der Console mit einem CORS/Network-Error verabschiedet.
5. CI/CD Pipeline (Deployment)
Wenn der Code fertig ist, willst du ihn sicher nicht immer händisch per git pull auf deinen Produktionsserver schieben und dort docker compose up tippen.
Todo: Eine simple Pipeline (Github Actions / Gitea Actions) anlegen, die den Code testet und automatisch auf dem Zielserver ausrollt.
This commit is contained in:
br committed
1 parent
7f81932fa5
commit
5fff17531d
31 files changed
+2683
-550
No files matched your search
@@ -0,0 +1,145 @@
|
||||
{% extends "base.html" %}
|
||||
{% block title %}Submissions - Admin Dashboard{% endblock %}
|
||||
{% block content %}
|
||||
<div class="d-flex justify-content-between align-items-center mb-4">
|
||||
<h2>
|
||||
<i class="bi bi-inbox me-2"></i>
|
||||
Form Submissions
|
||||
{% if show_archived %} <span class="badge bg-secondary fs-6 align-middle ms-2">Archive View</span> {% endif %}
|
||||
</h2>
|
||||
|
||||
<div>
|
||||
<div class="btn-group me-2">
|
||||
<button type="button" class="btn btn-outline-secondary dropdown-toggle" data-bs-toggle="dropdown" aria-expanded="false">
|
||||
<i class="bi bi-download"></i> Export
|
||||
</button>
|
||||
<ul class="dropdown-menu dropdown-menu-end">
|
||||
<li><a class="dropdown-item" href="{{ url_for('admin.export_submissions', format='csv') }}"><i class="bi bi-filetype-csv me-2 text-success"></i> Download CSV</a></li>
|
||||
<li><a class="dropdown-item" href="{{ url_for('admin.export_submissions', format='json') }}"><i class="bi bi-filetype-json me-2 text-warning"></i> Download JSON</a></li>
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
{% if show_archived %}
|
||||
<a href="{{ url_for('admin.list_submissions') }}" class="btn btn-outline-primary"><i class="bi bi-inbox"></i> Active View</a>
|
||||
{% else %}
|
||||
<a href="{{ url_for('admin.list_submissions', show_archived='true') }}" class="btn btn-outline-secondary"><i class="bi bi-archive"></i> View Archive</a>
|
||||
{% endif %}
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="card shadow-sm">
|
||||
<div class="card-body">
|
||||
{% if submissions %}
|
||||
<form action="{{ url_for('admin.bulk_action_submissions') }}" method="POST" id="bulk-form">
|
||||
<input type="hidden" name="csrf_token" value="{{ csrf_token() if csrf_token else '' }}">
|
||||
|
||||
<!-- Bulk Actions Toolbar -->
|
||||
<div class="bg-light p-2 mb-3 rounded d-flex align-items-center" id="bulk-toolbar" style="display: none !important;">
|
||||
<span class="me-3 fw-bold"><span id="selected-count">0</span> selected</span>
|
||||
{% if show_archived %}
|
||||
<button type="submit" name="action" value="unarchive" class="btn btn-sm btn-success"><i class="bi bi-box-arrow-up"></i> Restore (Unarchive)</button>
|
||||
{% else %}
|
||||
<button type="submit" name="action" value="archive" class="btn btn-sm btn-warning"><i class="bi bi-archive"></i> Move to Archive</button>
|
||||
{% endif %}
|
||||
</div>
|
||||
|
||||
<div class="table-responsive">
|
||||
<table class="table table-hover align-middle">
|
||||
<thead class="table-light">
|
||||
<tr>
|
||||
<th style="width: 40px;">
|
||||
<input class="form-check-input" type="checkbox" id="select-all">
|
||||
</th>
|
||||
<th>Date</th>
|
||||
<th>Form</th>
|
||||
<th>Tenant</th>
|
||||
<th>Status</th>
|
||||
<th>reCAPTCHA</th>
|
||||
<th class="text-end">Actions</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
{% for sub in submissions %}
|
||||
<tr class="{% if sub.status.value == 'archived' %}opacity-75{% endif %}">
|
||||
<td>
|
||||
<input class="form-check-input sub-checkbox" type="checkbox" name="submission_ids" value="{{ sub.id }}">
|
||||
</td>
|
||||
<td><small>{{ sub.created_at.strftime('%Y-%m-%d %H:%M') }}</small></td>
|
||||
<td>{{ sub.form_config.name }}</td>
|
||||
<td><small class="text-muted">{{ sub.tenant.name }}</small></td>
|
||||
<td>
|
||||
{% if sub.status.value == 'pending' %}
|
||||
<span class="badge bg-warning text-dark">Pending</span>
|
||||
{% elif sub.status.value == 'processed' %}
|
||||
<span class="badge bg-success">Processed</span>
|
||||
{% elif sub.status.value == 'spam' %}
|
||||
<span class="badge bg-danger">Spam</span>
|
||||
{% elif sub.status.value == 'archived' %}
|
||||
<span class="badge bg-secondary"><i class="bi bi-archive"></i> Archived</span>
|
||||
{% else %}
|
||||
<span class="badge bg-secondary">{{ sub.status.value }}</span>
|
||||
{% endif %}
|
||||
</td>
|
||||
<td>
|
||||
{% if sub.recaptcha_score is not none %}
|
||||
<span class="badge {{ 'bg-success' if sub.recaptcha_passed else 'bg-danger' }}">
|
||||
Score: {{ "%.2f"|format(sub.recaptcha_score) }}
|
||||
</span>
|
||||
{% else %}
|
||||
<span class="text-muted small">N/A</span>
|
||||
{% endif %}
|
||||
</td>
|
||||
<td class="text-end">
|
||||
<a href="{{ url_for('admin.view_submission', submission_id=sub.id) }}" class="btn btn-sm btn-outline-primary">
|
||||
<i class="bi bi-eye"></i> View
|
||||
</a>
|
||||
</td>
|
||||
</tr>
|
||||
{% endfor %}
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</form>
|
||||
{% else %}
|
||||
<div class="text-center py-5 text-muted">
|
||||
<i class="bi {% if show_archived %}bi-archive{% else %}bi-inbox{% endif %} fs-1 d-block mb-3"></i>
|
||||
<p>No {% if show_archived %}archived {% endif %}submissions found.</p>
|
||||
</div>
|
||||
{% endif %}
|
||||
</div>
|
||||
</div>
|
||||
{% endblock %}
|
||||
|
||||
{% block extra_js %}
|
||||
<script>
|
||||
document.addEventListener('DOMContentLoaded', function() {
|
||||
const selectAll = document.getElementById('select-all');
|
||||
const checkboxes = document.querySelectorAll('.sub-checkbox');
|
||||
const bulkToolbar = document.getElementById('bulk-toolbar');
|
||||
const countDisplay = document.getElementById('selected-count');
|
||||
|
||||
function updateToolbar() {
|
||||
if(!bulkToolbar) return;
|
||||
const checkedCount = document.querySelectorAll('.sub-checkbox:checked').length;
|
||||
countDisplay.textContent = checkedCount;
|
||||
|
||||
if (checkedCount > 0) {
|
||||
bulkToolbar.style.setProperty('display', 'flex', 'important');
|
||||
} else {
|
||||
bulkToolbar.style.setProperty('display', 'none', 'important');
|
||||
}
|
||||
}
|
||||
|
||||
if(selectAll) {
|
||||
selectAll.addEventListener('change', function() {
|
||||
checkboxes.forEach(cb => cb.checked = selectAll.checked);
|
||||
updateToolbar();
|
||||
});
|
||||
}
|
||||
|
||||
checkboxes.forEach(cb => {
|
||||
cb.addEventListener('change', updateToolbar);
|
||||
});
|
||||
});
|
||||
</script>
|
||||
{% endblock %}
|
||||
@@ -0,0 +1,102 @@
|
||||
{% extends "base.html" %}
|
||||
{% block title %}Submission Details - Admin Dashboard{% endblock %}
|
||||
{% block content %}
|
||||
<div class="mb-4">
|
||||
<a href="{{ url_for('admin.list_submissions') }}" class="btn btn-outline-secondary btn-sm mb-3">
|
||||
<i class="bi bi-arrow-left"></i> Back to Submissions
|
||||
</a>
|
||||
<div class="d-flex justify-content-between align-items-center">
|
||||
<h2><i class="bi bi-file-text me-2"></i> Submission Details</h2>
|
||||
<div>
|
||||
<form action="{{ url_for('admin.update_submission_status', submission_id=submission.id) }}" method="POST" class="d-inline-flex align-items-center">
|
||||
<input type="hidden" name="csrf_token" value="{{ csrf_token() if csrf_token else '' }}">
|
||||
<select name="status" class="form-select form-select-sm me-2" style="width: auto;" onchange="this.form.submit()">
|
||||
<option value="pending" {% if submission.status.value == 'pending' %}selected{% endif %}>Pending</option>
|
||||
<option value="processed" {% if submission.status.value == 'processed' %}selected{% endif %}>Processed</option>
|
||||
<option value="spam" {% if submission.status.value == 'spam' %}selected{% endif %}>Spam</option>
|
||||
<option value="failed" {% if submission.status.value == 'failed' %}selected{% endif %}>Failed</option>
|
||||
</select>
|
||||
<noscript><button type="submit" class="btn btn-sm btn-primary">Update</button></noscript>
|
||||
</form>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="row">
|
||||
<!-- Meta Info Sidebar -->
|
||||
<div class="col-md-4 mb-4">
|
||||
<div class="card shadow-sm h-100">
|
||||
<div class="card-header bg-light">
|
||||
<h5 class="card-title mb-0">Metadata</h5>
|
||||
</div>
|
||||
<div class="card-body">
|
||||
<ul class="list-group list-group-flush">
|
||||
<li class="list-group-item px-0">
|
||||
<small class="text-muted d-block">ID</small>
|
||||
<code>{{ submission.id }}</code>
|
||||
</li>
|
||||
<li class="list-group-item px-0">
|
||||
<small class="text-muted d-block">Date Received</small>
|
||||
{{ submission.created_at.strftime('%Y-%m-%d %H:%M:%S UTC') }}
|
||||
</li>
|
||||
<li class="list-group-item px-0">
|
||||
<small class="text-muted d-block">Form Source</small>
|
||||
<a href="{{ url_for('admin.view_form', form_id=form.id) }}">{{ form.name }}</a>
|
||||
</li>
|
||||
<li class="list-group-item px-0">
|
||||
<small class="text-muted d-block">Tenant</small>
|
||||
<a href="{{ url_for('admin.view_tenant', tenant_id=tenant.id) }}">{{ tenant.name }}</a>
|
||||
</li>
|
||||
<li class="list-group-item px-0">
|
||||
<small class="text-muted d-block">reCAPTCHA Score</small>
|
||||
{% if submission.recaptcha_score is not none %}
|
||||
<span class="badge {{ 'bg-success' if submission.recaptcha_passed else 'bg-danger' }}">
|
||||
{{ "%.2f"|format(submission.recaptcha_score) }}
|
||||
</span>
|
||||
{% else %}
|
||||
<span class="text-muted">Not validated</span>
|
||||
{% endif %}
|
||||
</li>
|
||||
<li class="list-group-item px-0">
|
||||
<small class="text-muted d-block">Referer</small>
|
||||
<span class="text-truncate d-block" title="{{ submission.referer }}">{{ submission.referer or 'Unknown' }}</span>
|
||||
</li>
|
||||
<li class="list-group-item px-0">
|
||||
<small class="text-muted d-block">IP Hash (Anonymized)</small>
|
||||
<code class="text-truncate d-block">{{ submission.ip_hash or 'Not tracked' }}</code>
|
||||
</li>
|
||||
</ul>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- Payload Content -->
|
||||
<div class="col-md-8 mb-4">
|
||||
<div class="card shadow-sm h-100">
|
||||
<div class="card-header bg-light d-flex justify-content-between align-items-center">
|
||||
<h5 class="card-title mb-0">Submitted Data</h5>
|
||||
</div>
|
||||
<div class="card-body p-0">
|
||||
<table class="table table-striped table-hover mb-0">
|
||||
<tbody>
|
||||
{% for key, value in submission.payload.items() %}
|
||||
<tr>
|
||||
<th style="width: 30%;" class="ps-4">{{ key }}</th>
|
||||
<td class="pe-4">
|
||||
{% if value is string and '\n' in value %}
|
||||
<pre class="mb-0 bg-light p-2 rounded" style="white-space: pre-wrap; font-family: inherit; font-size: inherit;">{{ value }}</pre>
|
||||
{% elif value is mapping or value is iterable and value is not string %}
|
||||
<code>{{ value|tojson }}</code>
|
||||
{% else %}
|
||||
{{ value }}
|
||||
{% endif %}
|
||||
</td>
|
||||
</tr>
|
||||
{% endfor %}
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
{% endblock %}
|
||||
Reference in new issue
Block a user