glorifying admin panel

cmd/telesrv-admin/publicbranding.go

@@ -0,0 +1,64 @@
+package main
+
+import (
+	"net/http"
+)
+
+// The login screen shows which server it belongs to, so the two fields it needs
+// are served without a session.
+//
+// This discloses nothing new. owpengram-server already publishes the same name
+// and icon to every client that asks, over its own open endpoints
+// (/owpengram/server-info and /owpengram/server-icon) -- that is how a client
+// fills in the "Add Server" form and how the panel's own RefreshServersInfo
+// works. Branding is public by design; the point of a server name is to be
+// read before you are anybody.
+//
+// It stays deliberately narrow all the same: name and whether an icon exists,
+// and nothing else off identity.Info, which also carries the description and
+// the welcome/login-code message templates. Those are operator-facing settings
+// and stay behind server.manage.
+
+type publicBrandingResponse struct {
+	Name    string `json:"name"`
+	HasIcon bool   `json:"has_icon"`
+}
+
+func (s *server) handlePublicBrandingAPI(w http.ResponseWriter, _ *http.Request) {
+	out := publicBrandingResponse{}
+	if s.identity != nil {
+		if info, err := s.identity.Get(); err == nil {
+			out.Name = info.Name
+		}
+		_, _, ok := s.identity.Icon()
+		out.HasIcon = ok
+	}
+	// A server that has not been named yet answers with an empty name rather
+	// than an error: the login page falls back to its own branding, and a
+	// failed request there would only produce a console error for nothing.
+	writeJSON(w, http.StatusOK, out)
+}
+
+// handlePublicIconAPI serves the same bytes as handleServerIconAPI, without the
+// session. Same file, same rationale as above.
+func (s *server) handlePublicIconAPI(w http.ResponseWriter, _ *http.Request) {
+	if s.identity == nil {
+		http.NotFound(w, nil)
+		return
+	}
+	data, ext, ok := s.identity.Icon()
+	if !ok {
+		http.Error(w, "no icon configured", http.StatusNotFound)
+		return
+	}
+	contentType := map[string]string{
+		".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg",
+		".webp": "image/webp", ".gif": "image/gif",
+	}[ext]
+	if contentType == "" {
+		contentType = "application/octet-stream"
+	}
+	w.Header().Set("Content-Type", contentType)
+	w.Header().Set("Cache-Control", "no-store")
+	_, _ = w.Write(data)
+}