Mindflux: Sicherheit, Datenintegrität und Navigation härten

2026-07-12 21:47:37 +02:00
parent db6b5bbb1a
commit 005d2d7d8c
73 changed files with 2495 additions and 650 deletions
@@ -0,0 +1,97 @@
+<!DOCTYPE html>
+<!-- Gemeinsame Layout-Fragmente: App-Sidebar, Profil-Tab-Leiste, Footer.
+     Einbinden mit th:replace="~{fragments/layout :: sidebar('dashboard')}" usw. -->
+<html lang="de" xmlns:th="http://www.thymeleaf.org"
+      xmlns:sec="http://www.thymeleaf.org/extras/spring-security">
+<body>
+
+<!-- ===== App-Sidebar (Dashboard-Shell). 'active' markiert den aktuellen Eintrag.
+     Die XP/Streak-Widgets erscheinen nur, wenn die Seite 'overall' (ProgressData) liefert. ===== -->
+<aside class="mf-sidebar" th:fragment="sidebar(active)">
+  <a th:href="@{/dashboard}" class="mf-logo">
+    <span class="mark"></span>
+    <span class="txt"><b>MINDFLUX</b><span>KNOWLEDGE. CODE. WIN.</span></span>
+  </a>
+
+  <nav class="mf-nav">
+    <a th:href="@{/dashboard}" th:classappend="${active == 'dashboard'} ? 'active'">
+      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><rect x="3" y="3" width="7" height="7" rx="1.5"/><rect x="14" y="3" width="7" height="7" rx="1.5"/><rect x="3" y="14" width="7" height="7" rx="1.5"/><rect x="14" y="14" width="7" height="7" rx="1.5"/></svg>
+      Dashboard
+    </a>
+    <a th:href="@{/admin}" sec:authorize="hasRole('ADMIN')" th:classappend="${active == 'admin'} ? 'active'">
+      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 2l8 4v6c0 5-3.5 8-8 10-4.5-2-8-5-8-10V6z"/><path d="M9 12l2 2 4-4"/></svg>
+      Admin-Dashboard
+    </a>
+    <a th:href="@{/profile}" th:classappend="${active == 'profil'} ? 'active'">
+      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="12" cy="8" r="4"/><path d="M4 21c0-4 3.6-6.5 8-6.5S20 17 20 21"/></svg>
+      Profil
+    </a>
+    <a th:href="@{/profile/knowledge}" th:classappend="${active == 'knowledge'} ? 'active'">
+      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="12" cy="12" r="9"/><path d="M3 12h18M12 3c3 3 3 15 0 18M12 3c-3 3-3 15 0 18"/></svg>
+      Knowledge Core
+    </a>
+    <a th:href="@{/progress}" th:classappend="${active == 'statistiken'} ? 'active'">
+      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M4 20V10M10 20V4M16 20v-8M22 20H2"/></svg>
+      Statistiken
+    </a>
+    <a th:href="@{/profile/achievements}" th:classappend="${active == 'erfolge'} ? 'active'">
+      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="12" cy="9" r="6"/><path d="M9 14l-2 8 5-3 5 3-2-8"/></svg>
+      Erfolge
+    </a>
+    <a th:href="@{/profile/settings}" th:classappend="${active == 'einstellungen'} ? 'active'">
+      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="12" cy="12" r="3.2"/><path d="M19 12a7 7 0 0 0-.1-1l2-1.6-2-3.4-2.4 1a7 7 0 0 0-1.7-1L14.5 2h-4l-.3 2.5a7 7 0 0 0-1.7 1l-2.4-1-2 3.4 2 1.6a7 7 0 0 0 0 2l-2 1.6 2 3.4 2.4-1a7 7 0 0 0 1.7 1l.3 2.5h4l.3-2.5a7 7 0 0 0 1.7-1l2.4 1 2-3.4-2-1.6c.1-.3.1-.7.1-1z"/></svg>
+      Einstellungen
+    </a>
+  </nav>
+
+  <!-- Profil-Shortcut (ohne Dropdown-Pfeil – es gibt kein Dropdown) -->
+  <a th:href="@{/profile}" class="mf-profile" style="text-decoration:none">
+    <div class="row">
+      <span class="mf-avatar" th:text="${#authentication.name != null ? #authentication.name.substring(0,1).toUpperCase() : 'U'}">A</span>
+      <div>
+        <b sec:authentication="name">Benutzer</b>
+        <span class="role" sec:authorize="hasRole('ADMIN')">Administrator</span>
+        <span class="role" sec:authorize="!hasRole('ADMIN')">Mitglied</span>
+      </div>
+    </div>
+  </a>
+
+  <div class="mf-meta" th:if="${overall != null}">
+    <div class="lvl">LEVEL <b th:text="${overall.userLevel}">1</b></div>
+    <div class="xp" th:text="${overall.currentXp} + ' / ' + ${overall.xpForNextLevel} + ' XP'">0 / 1000 XP</div>
+    <div class="mf-bar"><i th:style="'width:' + ${overall.progressPercent} + '%'"></i></div>
+  </div>
+  <div class="mf-streak" th:if="${overall != null}">
+    <span class="fire">🔥</span>
+    <span><b>STREAK</b><small th:text="${overall.streakDays} + (${overall.streakDays == 1} ? ' Tag' : ' Tage') + ' in Folge'">0 Tage in Folge</small></span>
+  </div>
+
+  <div class="mf-brain">
+    <svg viewBox="0 0 120 110" fill="none" stroke="var(--accent)" stroke-width="1.4">
+      <path d="M60 12c-14-8-34-2-36 14-10 4-12 18-4 26-4 10 2 22 14 24 4 8 18 10 26 4 8 6 22 4 26-4 12-2 18-14 14-24 8-8 6-22-4-26-2-16-22-22-36-14z"/>
+      <path d="M60 16v82M40 30c8 4 8 14 0 18M80 30c-8 4-8 14 0 18M34 60c10 0 14 8 14 16M86 60c-10 0-14 8-14 16M48 44h24M44 76h32"/>
+    </svg>
+  </div>
+</aside>
+
+<!-- ===== Profilbereich: Tab-Leiste, auf ALLEN Unterseiten identisch ===== -->
+<nav class="mf-tab-nav" th:fragment="profileTabs(active)">
+  <a th:href="@{/profile}" class="mf-tab" th:classappend="${active == 'profil'} ? ' active'">Profil</a>
+  <a th:href="@{/progress}" class="mf-tab" th:classappend="${active == 'statistiken'} ? ' active'">Statistiken</a>
+  <a th:href="@{/profile/achievements}" class="mf-tab" th:classappend="${active == 'erfolge'} ? ' active'">Erfolge</a>
+  <a th:href="@{/soziales}" class="mf-tab" th:classappend="${active == 'soziales'} ? ' active'">Soziales</a>
+  <a th:href="@{/profile/settings}" class="mf-tab" th:classappend="${active == 'einstellungen'} ? ' active'">Einstellungen</a>
+</nav>
+
+<!-- ===== Footer ===== -->
+<footer class="mf-footer" th:fragment="footer">
+  <a href="#">Support</a>
+  <a href="#">Feedback</a>
+  <a href="/nutzungsbedingungen">Nutzungsbedingungen</a>
+  <a href="/richtlinien">Richtlinien</a>
+  <a href="/datenschutz">Datenschutz</a>
+  <a href="/impressum">Impressum</a>
+</footer>
+
+</body>
+</html>