Skip to content

chore: retire legacy WebUI flows to unblock API endpoint removal#198

Open
hhvrc wants to merge 1 commit into
developfrom
chore/retire-legacy-webui-flows
Open

chore: retire legacy WebUI flows to unblock API endpoint removal#198
hhvrc wants to merge 1 commit into
developfrom
chore/retire-legacy-webui-flows

Conversation

@hhvrc

@hhvrc hhvrc commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

Summary

This frontend is being superseded by the new OpenShock website. This PR strips the legacy flows from the old WebUI so the API can safely retire the endpoints behind them, and specifically disables the old auth endpoints that predate Cloudflare Turnstile (they accept captcha-less request bodies).

Pairs with OpenShock/API#322, which returns 410 Gone for the captcha-less v1 auth routes.

Disabling old (captcha-less) auth

The v1 login / signup / password-reset endpoints have no Turnstile verification. Rather than retrofit a captcha here, the old auth UI is removed and users are sent to the new site to authenticate:

  • Login page → replaced with a "Login has moved" notice + Continue to OpenShock button (https://openshock.app); users return here once signed in.
  • Removed: Signup, Password Reset (initiate), Password Recover (complete), and Account Activation pages + their routes.
  • Frees the API to retire: POST /1/account/{login,signup,reset}, /1/account/recover/..., user/activate.

Removing other flows to unblock endpoint retirement

  • Profile → Settings (and the dead Patreon connections routes) — frees user/connections.
  • Admin pages (users management + online-devices monitoring) — frees admin/users/*, admin/users/search, admin/users/create, 1/admin/monitoring/onlineDevices.

Cleanup

Removed now-orphaned helpers (SanityChecks.js, the Login LoadingView.vue), the empty Login/Password/ dir, the unused .forgot-pw style, and the Admin/Settings nav entries.

Testing

npm run build-ci succeeds (only the repo's pre-existing bundle-size warnings).


Open in Stage

This frontend is being superseded by the new OpenShock website. Strip the
legacy flows from the old WebUI so the API can retire the endpoints behind
them, and specifically disable the old auth endpoints that predate Cloudflare
Turnstile (they accept captcha-less request bodies).

Pairs with OpenShock/API#322, which returns 410 Gone for the captcha-less v1
auth routes.

Disabling old (captcha-less) auth:
- Login page replaced with a "Login has moved" notice + Continue to OpenShock
  button; users return here once signed in.
- Removed Signup, Password Reset, Password Recover, and Account Activation
  pages + routes, freeing /1/account/{login,signup,reset}, /1/account/recover,
  and user/activate.

Removing other flows to unblock endpoint retirement:
- Profile > Settings and the dead Patreon connections routes (user/connections).
- Admin pages (users management + online-devices monitoring), freeing
  admin/users/*, admin/users/search, admin/users/create, and
  1/admin/monitoring/onlineDevices.

Cleanup: removed orphaned helpers (SanityChecks.js, Login LoadingView.vue),
the empty Login/Password dir, the unused .forgot-pw style, and the
Admin/Settings nav entries.
@stage-review

stage-review Bot commented Jun 24, 2026

Copy link
Copy Markdown

Ready to review this PR? Stage has broken it down into 5 individual chapters for you:

Title
1 Remove legacy authentication and account recovery pages
2 Replace login flow with external redirect notice
3 Remove administrative monitoring and user management
4 Retire profile settings and connection flows
5 Clean up orphaned routes and helpers
Open in Stage

Chapters generated by Stage for commit 4af3bc8 on Jun 24, 2026 10:21am UTC.

@hhvrc hhvrc requested a review from LucHeart June 24, 2026 10:21
@hhvrc hhvrc self-assigned this Jun 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant