feat(10-01): serve the embedded admin SPA at backend.uri with cookie login

- backend.uri prefix (default /backend) mounts the admin API at {prefix}/api/v1 and the embedded SPA shell at {prefix} with an api/ JSON 404 fallback - cookie transport: an X-Requested-With login sets the HttpOnly summer_admin cookie and returns no token; the backend guard reads the cookie after Bearer - CSRF wrapper refuses cookie-only POST/PUT/DELETE without X-Requested-With - boardwalk package embeds boardwalk/dist, rewrites index.html once per prefix and sets cache and security headers - framework admin OpenAPI pipeline (swag, swagger2openapi, openapi-typescript) with prefix-relative paths and typed envelopes for the tracer routes - admin/ Vite SPA: login, plugin rail, section panel and read-only list through the openapi-fetch client typed by the generated schema
2026-09-27 15:21:48 +02:00
parent 8c3e131111
commit 5f9353841b
79 changed files with 10745 additions and 147 deletions
--- a/boardwalk/dist/assets/dm-mono-latin-400-normal--0xN8mdc.woff
+++ b/boardwalk/dist/assets/dm-mono-latin-400-normal--0xN8mdc.woff
--- a/boardwalk/dist/assets/dm-mono-latin-400-normal-4GdczIuU.woff2
+++ b/boardwalk/dist/assets/dm-mono-latin-400-normal-4GdczIuU.woff2
--- a/boardwalk/dist/assets/dm-mono-latin-500-normal-CN8Miw6E.woff
+++ b/boardwalk/dist/assets/dm-mono-latin-500-normal-CN8Miw6E.woff
--- a/boardwalk/dist/assets/dm-mono-latin-500-normal-DRMDZjhP.woff2
+++ b/boardwalk/dist/assets/dm-mono-latin-500-normal-DRMDZjhP.woff2
--- a/boardwalk/dist/assets/dm-mono-latin-ext-400-normal-1aZr6b2b.woff
+++ b/boardwalk/dist/assets/dm-mono-latin-ext-400-normal-1aZr6b2b.woff
--- a/boardwalk/dist/assets/dm-mono-latin-ext-400-normal-C2zvOubV.woff2
+++ b/boardwalk/dist/assets/dm-mono-latin-ext-400-normal-C2zvOubV.woff2
--- a/boardwalk/dist/assets/dm-mono-latin-ext-500-normal-BtRyHRi6.woff2
+++ b/boardwalk/dist/assets/dm-mono-latin-ext-500-normal-BtRyHRi6.woff2
--- a/boardwalk/dist/assets/dm-mono-latin-ext-500-normal-Dw3M13d8.woff
+++ b/boardwalk/dist/assets/dm-mono-latin-ext-500-normal-Dw3M13d8.woff
--- a/boardwalk/dist/assets/dm-sans-latin-400-normal-BwCSEQnW.woff
+++ b/boardwalk/dist/assets/dm-sans-latin-400-normal-BwCSEQnW.woff
--- a/boardwalk/dist/assets/dm-sans-latin-400-normal-CW0RaeGs.woff2
+++ b/boardwalk/dist/assets/dm-sans-latin-400-normal-CW0RaeGs.woff2
--- a/boardwalk/dist/assets/dm-sans-latin-500-normal-B9HHJjqV.woff2
+++ b/boardwalk/dist/assets/dm-sans-latin-500-normal-B9HHJjqV.woff2
--- a/boardwalk/dist/assets/dm-sans-latin-500-normal-Dr3UlScf.woff
+++ b/boardwalk/dist/assets/dm-sans-latin-500-normal-Dr3UlScf.woff
--- a/boardwalk/dist/assets/dm-sans-latin-600-normal-Aqo67rzb.woff2
+++ b/boardwalk/dist/assets/dm-sans-latin-600-normal-Aqo67rzb.woff2
--- a/boardwalk/dist/assets/dm-sans-latin-600-normal-BmdmIIQ2.woff
+++ b/boardwalk/dist/assets/dm-sans-latin-600-normal-BmdmIIQ2.woff
--- a/boardwalk/dist/assets/dm-sans-latin-700-normal-CUSSCpQX.woff
+++ b/boardwalk/dist/assets/dm-sans-latin-700-normal-CUSSCpQX.woff
--- a/boardwalk/dist/assets/dm-sans-latin-700-normal-DvUfVpUG.woff2
+++ b/boardwalk/dist/assets/dm-sans-latin-700-normal-DvUfVpUG.woff2
--- a/boardwalk/dist/assets/dm-sans-latin-ext-400-normal-BjWJ59Pq.woff
+++ b/boardwalk/dist/assets/dm-sans-latin-ext-400-normal-BjWJ59Pq.woff
--- a/boardwalk/dist/assets/dm-sans-latin-ext-400-normal-BtiwyxMk.woff2
+++ b/boardwalk/dist/assets/dm-sans-latin-ext-400-normal-BtiwyxMk.woff2
--- a/boardwalk/dist/assets/dm-sans-latin-ext-500-normal-BJfUCQsA.woff2
+++ b/boardwalk/dist/assets/dm-sans-latin-ext-500-normal-BJfUCQsA.woff2
--- a/boardwalk/dist/assets/dm-sans-latin-ext-500-normal-DR84L5F-.woff
+++ b/boardwalk/dist/assets/dm-sans-latin-ext-500-normal-DR84L5F-.woff
--- a/boardwalk/dist/assets/dm-sans-latin-ext-600-normal-4vooXBpG.woff2
+++ b/boardwalk/dist/assets/dm-sans-latin-ext-600-normal-4vooXBpG.woff2
--- a/boardwalk/dist/assets/dm-sans-latin-ext-600-normal-DRtaDpgU.woff
+++ b/boardwalk/dist/assets/dm-sans-latin-ext-600-normal-DRtaDpgU.woff
--- a/boardwalk/dist/assets/dm-sans-latin-ext-700-normal-BLI3TTWz.woff
+++ b/boardwalk/dist/assets/dm-sans-latin-ext-700-normal-BLI3TTWz.woff
--- a/boardwalk/dist/assets/dm-sans-latin-ext-700-normal-CJIcxD6K.woff2
+++ b/boardwalk/dist/assets/dm-sans-latin-ext-700-normal-CJIcxD6K.woff2
--- a/boardwalk/dist/assets/index-UTAit0wB.css
+++ b/boardwalk/dist/assets/index-UTAit0wB.css
--- a/boardwalk/dist/assets/index-ZNCn30hM.js
+++ b/boardwalk/dist/assets/index-ZNCn30hM.js
--- a/boardwalk/dist/index.html
+++ b/boardwalk/dist/index.html
@@ -0,0 +1,15 @@
+<!doctype html>
+<html lang="pl">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta name="robots" content="noindex, nofollow" />
+    <meta name="summer-admin-base" content="__SUMMER_ADMIN_BASE__" />
+    <title>SummerCMS</title>
+    <script type="module" crossorigin src="./assets/index-ZNCn30hM.js"></script>
+    <link rel="stylesheet" crossorigin href="./assets/index-UTAit0wB.css">
+  </head>
+  <body>
+    <div id="app"></div>
+  </body>
+</html>