| 1 | |
| 2 | {{/* The share screen. Scriptless throughout, per spec §6.2, which lists |
| 3 | sharing among the working form posts: two plain <form>s, no token |
| 4 | field (csrf.Protect reads Sec-Fetch-Site and falls back to Origin), |
| 5 | and a 303 back here afterwards so a reload never re-posts. |
| 6 | |
| 7 | Bare attributes rather than the class vocabulary, per |
| 8 | TestOurTemplatesUseTheAttributeGrammar — which greps raw bytes, so |
| 9 | even naming that spelling in a comment fails it. This comment used |
| 10 | to, and did. |
| 11 | |
| 12 | Each row's revoke is its own <form>, not a link: revoking is a |
| 13 | mutation and a GET that changes state is one a prefetcher can fire. |
| 14 | That is also why the address rides a hidden field rather than the |
| 15 | URL — the row already names it in text, and a URL is copied, |
| 16 | logged and pasted in a way a form body is not. */}} |
| 17 | {{define "content"}}<style> |
| 18 | /* The share page on the design system's own vocabulary: fields, option |
| 19 | cards, list rows and buttons. It was the audit's worst Docs finding — |
| 20 | browser-default buttons, a bare fieldset, a bulleted list of grants, |
| 21 | and a one-time link printed as <code> with no way to copy it. */ |
| 22 | [docs-share] { |
| 23 | display: flex; |
| 24 | flex-direction: column; |
| 25 | gap: var(--rst-sp-5); |
| 26 | max-inline-size: 44rem; |
| 27 | } |
| 28 | [docs-share] > [rst-page-header] { |
| 29 | margin-block-end: 0; |
| 30 | } |
| 31 | [docs-share-list] [rst-row] { |
| 32 | gap: var(--rst-sp-3); |
| 33 | } |
| 34 | [docs-share-who] { |
| 35 | overflow-wrap: anywhere; |
| 36 | } |
| 37 | [docs-share-role] { |
| 38 | flex: none; |
| 39 | font-size: var(--rst-fs-sm); |
| 40 | } |
| 41 | [docs-share-list] form { |
| 42 | flex: none; |
| 43 | margin: 0; |
| 44 | } |
| 45 | [docs-share-public] { |
| 46 | display: flex; |
| 47 | flex-direction: column; |
| 48 | gap: var(--rst-sp-3); |
| 49 | padding-block-start: var(--rst-sp-5); |
| 50 | border-block-start: 1px solid var(--rst-line); |
| 51 | } |
| 52 | [docs-share-public] h2, |
| 53 | [docs-share-public] p { |
| 54 | margin: 0; |
| 55 | } |
| 56 | [docs-share-url] { |
| 57 | display: flex; |
| 58 | flex-wrap: wrap; |
| 59 | align-items: center; |
| 60 | gap: var(--rst-sp-2); |
| 61 | } |
| 62 | [docs-share-url-input] { |
| 63 | flex: 1 1 16rem; |
| 64 | min-inline-size: 0; |
| 65 | font-family: "SFMono-Regular", Consolas, monospace; |
| 66 | font-size: var(--rst-fs-sm); |
| 67 | } |
| 68 | /* Read-only, but a tap still focuses it (to select the link), and iOS |
| 69 | zooms into anything under 16px: tokens.css's touch rule, restated at |
| 70 | this selector's weight (TestNoZoomOnTap). */ |
| 71 | @media (pointer: coarse) { |
| 72 | [docs-share-url-input] { |
| 73 | font-size: max(1rem, 1em); |
| 74 | } |
| 75 | } |
| 76 | /* The Copy button ships hidden until share-link.mjs mounts it, and |
| 77 | [rst-btn]'s display: inline-flex beats the user agent's [hidden], so |
| 78 | without this rule it showed with no script and did nothing. */ |
| 79 | [docs-share-copy][hidden] { |
| 80 | display: none; |
| 81 | } |
| 82 | [docs-share-copy-status] { |
| 83 | margin: 0; |
| 84 | color: var(--rst-text-muted); |
| 85 | font-size: var(--rst-fs-sm); |
| 86 | } |
| 87 | [docs-share-actions] { |
| 88 | display: flex; |
| 89 | flex-wrap: wrap; |
| 90 | gap: var(--rst-sp-2); |
| 91 | } |
| 92 | [docs-share-actions] form { |
| 93 | margin: 0; |
| 94 | } |
| 95 | </style> |
| 96 | <article rst-stack docs-share> |
| 97 | <header rst-page-header> |
| 98 | <div rst-page-header-titles> |
| 99 | <h1>{{.Heading}}</h1> |
| 100 | <p rst-muted>{{.DocTitle}}</p> |
| 101 | </div> |
| 102 | <a rst-btn="ghost" href="/d/{{.Sqid}}">{{.BackLabel}}</a> |
| 103 | </header> |
| 104 | |
| 105 | {{if .Error}}{{template "callout" (dict "Body" .Error "Tone" "negative" "Alert" true)}}{{end}} |
| 106 | |
| 107 | {{/* Who reaches it today. An empty list says so in words rather than |
| 108 | rendering an empty table, because a table with no rows reads as a |
| 109 | thing that failed to load. |
| 110 | |
| 111 | Each row's revoke is its own <form>, not a link: revoking is a |
| 112 | mutation and a GET that changes state is one a prefetcher can fire. |
| 113 | That is also why the address rides a hidden field rather than the |
| 114 | URL. */}} |
| 115 | {{if .Grants}} |
| 116 | <div rst-list docs-share-list> |
| 117 | {{range .Grants}} |
| 118 | <div rst-row> |
| 119 | <span rst-row-main><span docs-share-who>{{.Address}}</span></span> |
| 120 | <span rst-muted docs-share-role>{{.Role}}</span> |
| 121 | <form method="post" action="/d/{{$.Sqid}}/share/revoke"> |
| 122 | <input type="hidden" name="address" value="{{.Address}}"> |
| 123 | <button rst-btn="ghost" type="submit">{{$.RevokeButton}}</button> |
| 124 | </form> |
| 125 | </div> |
| 126 | {{end}} |
| 127 | </div> |
| 128 | {{else}} |
| 129 | <p rst-muted>{{.EmptyBody}}</p> |
| 130 | {{end}} |
| 131 | |
| 132 | {{/* Adding somebody. The role is a pair of option cards rather than a |
| 133 | select so both are visible without opening anything. Reader is |
| 134 | checked by default: the safer of the two is the one a person gets |
| 135 | by not choosing. Scriptless, per spec §6.2: a plain POST, and a 303 |
| 136 | back here afterwards so a reload never re-posts. */}} |
| 137 | <form rst-form method="post" action="/d/{{.Sqid}}/share" docs-share-form> |
| 138 | {{template "field" (dict "ID" "share-address" "Name" "address" "Type" "email" "Label" .AddressLabel "Autocomplete" "email" "Required" true)}} |
| 139 | {{template "choice-field" (dict "Legend" .RoleLabel "Name" "role" "Options" .RoleChoices)}} |
| 140 | <div rst-form-foot><button rst-btn="primary" type="submit">{{.ShareButton}}</button></div> |
| 141 | </form> |
| 142 | |
| 143 | {{/* The third rung: a read-only link anyone can follow, signed in or |
| 144 | not. One <form> whichever way the switch currently points, with the |
| 145 | direction in a hidden field — so a page left open in a tab cannot |
| 146 | turn publishing back on from a button that still says "off". |
| 147 | |
| 148 | The link appears only in the render that follows the publish that |
| 149 | minted it — the database holds a SHA-256 and cannot produce a URL |
| 150 | (suite ruling 16). It is a read-only field rather than a link: it |
| 151 | is meant to be copied into a message, not followed from here. The |
| 152 | Copy button is fixtures/share-link.mjs's, hidden until that script |
| 153 | runs; without it the field selects on focus for a manual copy. */}} |
| 154 | <section docs-share-public> |
| 155 | <h2>{{.PublicHeading}}</h2> |
| 156 | <p rst-muted>{{.PublicBody}}</p> |
| 157 | {{if .Published}} |
| 158 | {{if .PublicURL}} |
| 159 | <div docs-share-once role="status">{{template "callout" (dict "Body" .OnceWarning "Tone" "warning")}}</div> |
| 160 | <div docs-share-url> |
| 161 | <input rst-input docs-share-url-input type="text" readonly value="{{.PublicURL}}" aria-label="{{.URLLabel}}"> |
| 162 | <button rst-btn="primary" type="button" docs-share-copy data-copied="{{.CopiedLabel}}" hidden>{{.CopyButton}}</button> |
| 163 | </div> |
| 164 | <p docs-share-copy-status role="status"></p> |
| 165 | {{else}} |
| 166 | <p rst-muted docs-share-state>{{.PublishedBody}}</p> |
| 167 | {{end}} |
| 168 | <p rst-muted>{{.CopyHint}}</p> |
| 169 | <div docs-share-actions> |
| 170 | <form method="post" action="/d/{{.Sqid}}/share/link"> |
| 171 | <input type="hidden" name="on" value="1"> |
| 172 | <button rst-btn type="submit">{{.ReplaceButton}}</button> |
| 173 | </form> |
| 174 | <form method="post" action="/d/{{.Sqid}}/share/link"> |
| 175 | <input type="hidden" name="on" value="0"> |
| 176 | <button rst-btn="ghost" type="submit">{{.UnpublishBtn}}</button> |
| 177 | </form> |
| 178 | </div> |
| 179 | {{else}} |
| 180 | <div docs-share-actions> |
| 181 | <form method="post" action="/d/{{.Sqid}}/share/link"> |
| 182 | <input type="hidden" name="on" value="1"> |
| 183 | <button rst-btn="primary" type="submit">{{.PublishButton}}</button> |
| 184 | </form> |
| 185 | </div> |
| 186 | {{end}} |
| 187 | </section> |
| 188 | </article> |
| 189 | <script type="module" defer src="{{.ShareScript}}"></script> |
| 190 | {{end}} |
| 191 | |
amadan