add a button for admin to easily remove events or groups

webuildsg / webuild

:memo: Robot-handpicked list of open events and open source for designers, developers and makers in Singapore

https://webuild.sg/

MIT License

62 stars 33 forks source link

Closed sayanee closed 8 years ago

sayanee commented 8 years ago

The data is laid out in a table at /admin:

Group ID	Group name	Group URL	Next event	Action
12345	Hacker SG	URL	event, date	[remove group]() [add group]()

These events are coming from added / approved groups

Event ID	Event name	Event URL	Action
12345	Hacker SG June with description	URL	[remove event]()

sayanee commented 8 years ago

notthetup commented 8 years ago

This should be behind http basic-auth on the /admin endpoint.

Steps for setting up basic-auth.

[x] redirect /admin coming over http to https.
[x] If the req doesn't contain any basic auth information, reply with "HTTP 401 Unauthorized" status and a WWW-Authenticate field : WWW-Authenticate: Basic realm="User Visible Realm"
[ ] If req does contain basic auth fields, then verify against environmental variables and respond with html if successful and "HTTP 401 Unauthorized" status and a WWW-Authenticate field if not.
[ ] Rinse lather and repeat for all endpoints which update the black/white list.

sayanee commented 8 years ago

Currently on staging, without any save button. Just showing the list:

sayanee commented 8 years ago

@notthetup redirection is already there thanks to Cloudflare:

sayanee commented 8 years ago

Staging design refactoring:

sayanee commented 8 years ago

use fetch for post request

sayanee commented 8 years ago

use .push() synchronously in the forEach loop: