mirror of
https://github.com/sipeed/picoclaw.git
synced 2026-06-12 18:08:54 +00:00
6ea364e67d
Add token-based authentication for the Launcher's embedded Web Dashboard. - Ephemeral token generated in-memory each run (or via PICOCLAW_LAUNCHER_TOKEN env var) - HMAC-SHA256 session cookie (HttpOnly, SameSite=Lax, Secure when HTTPS) - Bearer token support for API/script access - Rate limiting on login (10 attempts/IP/min) - Referrer-Policy: no-referrer on all responses - POST-only logout with JSON content-type (CSRF-safe) - System tray "Copy dashboard token" action - Login page shows contextual help (console/tray/log file path) - Path traversal protection via path.Clean - X-Forwarded-Host/Port/Proto support for reverse proxy deployments - Full i18n support (English, Chinese) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
108 lines
2.8 KiB
Go
108 lines
2.8 KiB
Go
//go:build (!darwin && !freebsd) || cgo
|
|
|
|
package main
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"fyne.io/systray"
|
|
"github.com/atotto/clipboard"
|
|
|
|
"github.com/sipeed/picoclaw/pkg/logger"
|
|
"github.com/sipeed/picoclaw/web/backend/utils"
|
|
)
|
|
|
|
func runTray() {
|
|
systray.Run(onReady, onExit)
|
|
}
|
|
|
|
// onReady is called when the system tray is ready
|
|
func onReady() {
|
|
// Set icon and tooltip
|
|
systray.SetIcon(getIcon())
|
|
systray.SetTooltip(fmt.Sprintf(T(AppTooltip), appName))
|
|
|
|
// Create menu items
|
|
mOpen := systray.AddMenuItem(T(MenuOpen), T(MenuOpenTooltip))
|
|
mCopyTok := systray.AddMenuItem(T(MenuCopyToken), T(MenuCopyTokenHint))
|
|
mAbout := systray.AddMenuItem(T(MenuAbout), T(MenuAboutTooltip))
|
|
|
|
// Add version info under About menu
|
|
mVersion := mAbout.AddSubMenuItem(fmt.Sprintf(T(MenuVersion), appVersion), T(MenuVersionTooltip))
|
|
mVersion.Disable()
|
|
mRepo := mAbout.AddSubMenuItem(T(MenuGitHub), "")
|
|
mDocs := mAbout.AddSubMenuItem(T(MenuDocs), "")
|
|
|
|
systray.AddSeparator()
|
|
|
|
// Add restart option
|
|
mRestart := systray.AddMenuItem(T(MenuRestart), T(MenuRestartTooltip))
|
|
|
|
systray.AddSeparator()
|
|
|
|
// Quit option
|
|
mQuit := systray.AddMenuItem(T(MenuQuit), T(MenuQuitTooltip))
|
|
|
|
// Handle menu clicks
|
|
go func() {
|
|
for {
|
|
select {
|
|
case <-mOpen.ClickedCh:
|
|
if err := openBrowser(); err != nil {
|
|
logger.Errorf("Failed to open browser: %v", err)
|
|
}
|
|
|
|
case <-mCopyTok.ClickedCh:
|
|
if launcherDashboardTokenForClipboard == "" {
|
|
logger.WarnC("web", "Dashboard token is empty; cannot copy")
|
|
continue
|
|
}
|
|
if err := clipboard.WriteAll(launcherDashboardTokenForClipboard); err != nil {
|
|
logger.Errorf("Failed to copy dashboard token: %v", err)
|
|
} else {
|
|
logger.InfoC("web", "Dashboard token copied to clipboard")
|
|
}
|
|
|
|
case <-mVersion.ClickedCh:
|
|
// Version info - do nothing, just shows current version
|
|
|
|
case <-mRepo.ClickedCh:
|
|
if err := utils.OpenBrowser("https://github.com/sipeed/picoclaw"); err != nil {
|
|
logger.Errorf("Failed to open GitHub: %v", err)
|
|
}
|
|
|
|
case <-mDocs.ClickedCh:
|
|
if err := utils.OpenBrowser(T(DocUrl)); err != nil {
|
|
logger.Errorf("Failed to open docs: %v", err)
|
|
}
|
|
|
|
case <-mRestart.ClickedCh:
|
|
fmt.Println("Restart request received...")
|
|
if apiHandler != nil {
|
|
if pid, err := apiHandler.RestartGateway(); err != nil {
|
|
logger.Errorf("Failed to restart gateway: %v", err)
|
|
} else {
|
|
logger.Infof("Gateway restarted (PID: %d)", pid)
|
|
}
|
|
}
|
|
|
|
case <-mQuit.ClickedCh:
|
|
systray.Quit()
|
|
}
|
|
}
|
|
}()
|
|
|
|
if !*noBrowser {
|
|
// Auto-open browser after systray is ready (if not disabled)
|
|
// Check no-browser flag via environment or pass as parameter if needed
|
|
if err := openBrowser(); err != nil {
|
|
logger.Errorf("Warning: Failed to auto-open browser: %v", err)
|
|
}
|
|
}
|
|
}
|
|
|
|
// onExit is called when the system tray is exiting
|
|
func onExit() {
|
|
logger.Info(T(Exiting))
|
|
}
|