Implements 064-auth-structure (Auth Structure v1.0): Adds platform_users + PlatformUser identity (factory + seeder) for platform operators Introduces platform auth guard/provider in auth.php Adds a dedicated Filament v5 System panel at system using guard platform (custom login + dashboard) Enforces strict cross-scope isolation between /admin and system (deny-as-404) Adds platform capability gating (platform.access_system_panel, platform.use_break_glass) + gates in AuthServiceProvider Implements audited break-glass mode (enter/exit/expire), banner via render hook, feature flag + TTL config Removes legacy users.is_platform_superadmin runtime usage and adds an architecture test to prevent regressions Updates tenant membership pivot usage where needed (tenant_memberships) Testing: vendor/bin/sail artisan test --compact tests/Feature/Auth (28 passed) vendor/bin/sail bin pint --dirty Notes: Filament v5 / Livewire v4 compatible. Panel providers registered in providers.php. Destructive actions use ->action(...) + ->requiresConfirmation() where applicable. Co-authored-by: Ahmed Darrazi <ahmeddarrazi@MacBookPro.fritz.box> Reviewed-on: #77
21 lines
726 B
PHP
21 lines
726 B
PHP
@php
|
|
/** @var \App\Services\Auth\BreakGlassSession $breakGlass */
|
|
$breakGlass = app(\App\Services\Auth\BreakGlassSession::class);
|
|
@endphp
|
|
|
|
@if ($breakGlass->isActive())
|
|
<div class="fi-topbar sticky top-0 z-50 border-b border-red-500/30 bg-red-600 text-white">
|
|
<div class="mx-auto flex max-w-screen-2xl items-center justify-between gap-4 px-4 py-2">
|
|
<div class="text-sm font-semibold">
|
|
Recovery mode active
|
|
</div>
|
|
|
|
@if ($breakGlass->expiresAt())
|
|
<div class="text-xs opacity-90">
|
|
Expires at {{ $breakGlass->expiresAt()->toDayDateTimeString() }}
|
|
</div>
|
|
@endif
|
|
</div>
|
|
</div>
|
|
@endif
|