- Reworked the tenant admin login page

- Updated the User model to implement Filament’s tenancy contracts - Seeded a ready-to-use demo tenant (user, tenant, active package, purchase) - Introduced a branded, translated 403 error page to replace the generic forbidden message for unauthorised admin hits - Removed the public “Register” links from the marketing header - hardened join event logic and improved error handling in the guest pwa.
2025-10-13 12:50:46 +02:00
parent 9394c3171e
commit 64a5411fb9
69 changed files with 5447 additions and 588 deletions
--- a/public/admin-sw.js
+++ b/public/admin-sw.js
@@ -0,0 +1,99 @@
+const SHELL_CACHE = 'tenant-admin-shell-v1';
+const ASSET_CACHE = 'tenant-admin-assets-v1';
+
+self.addEventListener('install', (event) => {
+  event.waitUntil(
+    caches.open(SHELL_CACHE).then((cache) => cache.addAll(['/event-admin']))
+  );
+  self.skipWaiting();
+});
+
+self.addEventListener('activate', (event) => {
+  event.waitUntil(
+    caches
+      .keys()
+      .then((keys) =>
+        Promise.all(
+          keys
+            .filter((key) => ![SHELL_CACHE, ASSET_CACHE].includes(key))
+            .map((key) => caches.delete(key))
+        )
+      )
+  );
+  event.waitUntil(self.clients.claim());
+});
+
+self.addEventListener('fetch', (event) => {
+  const { request } = event;
+  if (request.method !== 'GET') return;
+
+  const url = new URL(request.url);
+  if (url.origin !== self.location.origin) return;
+
+  // Allow API traffic to bypass the SW
+  if (url.pathname.startsWith('/api/')) return;
+
+  // Navigation requests for the admin shell
+  if (request.mode === 'navigate' && url.pathname.startsWith('/event-admin')) {
+    event.respondWith(
+      (async () => {
+        try {
+          const networkResponse = await fetch(request);
+          const cache = await caches.open(SHELL_CACHE);
+          cache.put('/event-admin', networkResponse.clone());
+          return networkResponse;
+        } catch {
+          const cached = await caches.match('/event-admin');
+          if (cached) return cached;
+          return Response.error();
+        }
+      })()
+    );
+    return;
+  }
+
+  // Static asset caching (CSS/JS/fonts)
+  if (
+    request.destination === 'style' ||
+    request.destination === 'script' ||
+    request.destination === 'font'
+  ) {
+    event.respondWith(
+      (async () => {
+        const cache = await caches.open(ASSET_CACHE);
+        const cached = await cache.match(request);
+        const fetchPromise = fetch(request)
+          .then((response) => {
+            if (response.ok) {
+              cache.put(request, response.clone());
+            }
+            return response;
+          })
+          .catch(() => null);
+        return cached || (await fetchPromise) || Response.error();
+      })()
+    );
+    return;
+  }
+
+  // Images and icons (cache-first)
+  if (
+    request.destination === 'image' ||
+    /\.(png|jpg|jpeg|webp|avif|gif|svg)(\?.*)?$/i.test(url.pathname)
+  ) {
+    event.respondWith(
+      (async () => {
+        const cache = await caches.open(ASSET_CACHE);
+        const cached = await cache.match(request);
+        if (cached) return cached;
+        try {
+          const response = await fetch(request);
+          if (response.ok) cache.put(request, response.clone());
+          return response;
+        } catch {
+          return cached || Response.error();
+        }
+      })()
+    );
+  }
+});