(async function () { const API_BASE = "https://api.scanleaks.com"; const API_ORIGIN = API_BASE.replace(/\/$/, ''); const API_WS_ORIGIN = API_ORIGIN.startsWith('https://') ? 'wss://' + API_ORIGIN.slice('https://'.length) : API_ORIGIN.startsWith('http://') ? 'ws://' + API_ORIGIN.slice('http://'.length) : API_ORIGIN; const HTTP_LOCAL_RE = /^http:\/\/localhost:4000/i; const HTTPS_LOCAL_RE = /^https:\/\/localhost:4000/i; const WS_LOCAL_RE = /^ws:\/\/localhost:4000/i; const WSS_LOCAL_RE = /^wss:\/\/localhost:4000/i; const rewriteApiUrl = function (raw) { if (typeof raw !== 'string') return raw; if (HTTP_LOCAL_RE.test(raw) || HTTPS_LOCAL_RE.test(raw)) { return raw.replace(HTTP_LOCAL_RE, API_ORIGIN).replace(HTTPS_LOCAL_RE, API_ORIGIN); } if (WS_LOCAL_RE.test(raw) || WSS_LOCAL_RE.test(raw)) { return raw.replace(WS_LOCAL_RE, API_WS_ORIGIN).replace(WSS_LOCAL_RE, API_WS_ORIGIN); } return raw; }; const nativeFetch = window.fetch.bind(window); window.fetch = function(input, init) { if (typeof input === 'string') { return nativeFetch(rewriteApiUrl(input), init); } if (input instanceof URL) { const rewritten = rewriteApiUrl(input.toString()); return nativeFetch(new URL(rewritten), init); } if (input && typeof input.url === 'string') { const rewritten = rewriteApiUrl(input.url); const req = new Request(rewritten, input); return nativeFetch(req, init); } return nativeFetch(input, init); }; const NativeWebSocket = window.WebSocket; const WrappedWebSocket = function(url, protocols) { const rewritten = rewriteApiUrl(String(url)); return protocols === undefined ? new NativeWebSocket(rewritten) : new NativeWebSocket(rewritten, protocols); }; WrappedWebSocket.prototype = NativeWebSocket.prototype; Object.assign(WrappedWebSocket, NativeWebSocket); window.WebSocket = WrappedWebSocket; const isLogin = window.location.pathname === '/login'; const shell = document.getElementById('rbac-shell'); const aside = document.getElementById('rbac-aside'); const topbar = document.getElementById('rbac-topbar'); const userBox = document.getElementById('rbac-topbar-user'); if (isLogin) { if (shell) { shell.style.gridTemplateColumns = '1fr'; shell.style.display = 'block'; } if (aside) aside.style.display = 'none'; if (topbar) topbar.style.display = 'none'; return; } if (shell) { shell.style.display = 'grid'; shell.style.gridTemplateColumns = '220px 1fr'; } if (aside) aside.style.display = 'block'; if (topbar) topbar.style.display = 'flex'; const clearSession = function () { document.cookie = 'admin_token=; Path=/; Max-Age=0'; document.cookie = 'admin_refresh_token=; Path=/; Max-Age=0'; }; const hardLogout = async function (token) { try { if (token) { await fetch(API_ORIGIN + '/api/admin/auth/logout', { method: 'POST', headers: { Authorization: 'Bearer ' + token }, }); } } catch {} clearSession(); window.location.href = '/login'; }; const refreshAccessToken = async function () { const refreshToken = document.cookie.split('; ').find(c => c.startsWith('admin_refresh_token='))?.split('=')[1]; if (!refreshToken) return null; try { const r = await fetch(API_ORIGIN + '/api/admin/auth/refresh', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ refreshToken }), }); if (!r.ok) return null; const j = await r.json(); const access = j?.data?.accessToken; const nextRefresh = j?.data?.refreshToken || refreshToken; if (!access) return null; document.cookie = 'admin_token=' + access + '; Path=/'; document.cookie = 'admin_refresh_token=' + nextRefresh + '; Path=/'; return access; } catch { return null; } }; const apiFetchWithRefresh = async function (url, token) { let t = token; let res = await fetch(url, { headers: { Authorization: 'Bearer ' + t } }); if (res.status !== 401) return { res, token: t }; const refreshed = await refreshAccessToken(); if (!refreshed) return { res, token: t }; t = refreshed; res = await fetch(url, { headers: { Authorization: 'Bearer ' + t } }); return { res, token: t }; }; if (userBox) { userBox.innerHTML = ''; } const bindLogout = function (token) { const btn = document.getElementById('rbac-logout-btn'); if (!btn) return; btn.addEventListener('click', function () { void hardLogout(token); }); }; let token = document.cookie.split('; ').find(c => c.startsWith('admin_token='))?.split('=')[1]; if (!token) { const refreshed = await refreshAccessToken(); if (!refreshed) { await hardLogout(null); return; } token = refreshed; } let mustChangePassword = false; try { const base64 = token.split('.')[1]; const normalized = base64.replace(/-/g, '+').replace(/_/g, '/'); const padded = normalized + '='.repeat((4 - (normalized.length % 4)) % 4); const payload = JSON.parse(atob(padded)); mustChangePassword = payload?.mcp === true; } catch {} const isProfile = window.location.pathname.startsWith('/profile'); if (mustChangePassword && isProfile) { if (shell) shell.style.gridTemplateColumns = '1fr'; if (aside) aside.style.display = 'none'; } const meResult = await apiFetchWithRefresh(API_ORIGIN + '/api/admin/auth/me', token); token = meResult.token; if (!meResult.res.ok) { if (meResult.res.status === 429) { window.dispatchEvent(new CustomEvent('admin-me-429')); bindLogout(token); return; } await hardLogout(token); return; } const json = await meResult.res.json(); const me = json?.data || {}; if (userBox) { const fullName = [me.firstName, me.lastName].filter(Boolean).join(' ') || me.email || 'Admin'; userBox.innerHTML = ''; } bindLogout(token); })();

Operations management from a single panel.

Login