@page "/users" @implements IAsyncDisposable @inject IAuthService AuthService @inject ITwoFactorService TwoFactorService @inject ISiteSettingsService SiteSettingsService @inject UserSessionService UserSession @inject NavigationManager Navigation @inject IJSRuntime JS @using Lagerbestand.Components.Shared Benutzerverwaltung - Reifen Späth Lagerverwaltung @if (!UserSession.IsAdmin) {

Zugriff verweigert

Sie haben keine Berechtigung für diese Seite.

Zur Lagerübersicht

} else {

Benutzerverwaltung

@users.Count Benutzer insgesamt · @users.Count(u => u.IsActive) aktiv

@if (isLoading) {

Lade Benutzer...

} else if (!string.IsNullOrEmpty(errorMessage)) {

@errorMessage

} else { @if (!string.IsNullOrEmpty(successMessage)) {

@successMessage

}

Benutzername Anzeigename Rolle 2FA Status Letzter Login Aktionen

@foreach (var user in users) { var isCurrentUser = user.Id == UserSession.CurrentUser?.Id;

@user.Username @if (isCurrentUser) { Sie } @(user.DisplayName ?? "-") @GetRoleName(user.Role) @if (twoFactorGlobalEnabled) { @if (user.TwoFactorEnabled) { ?? @(user.TwoFactorEnforced ? "Erzwungen" : "Aktiv") } else { Aus } } else { — } @(user.IsActive ? "Aktiv" : "Inaktiv") @if (user.LastLoginAt.HasValue) { @FormatLastLogin(user.LastLoginAt.Value) } else { Nie } @if (twoFactorGlobalEnabled) { @if (user.TwoFactorEnabled) { } @if (!user.TwoFactorEnforced) { } else { } } @if (!isCurrentUser) { }

}

@if (users.Count == 0) {

??

Keine Benutzer gefunden

Erstellen Sie einen neuen Benutzer, um zu beginnen.

} }

@* Create/Edit User Modal *@ @if (showUserModal) { } @* Password Modal *@ @if (showPasswordModal) { } @* Delete Confirmation Modal *@ @if (showDeleteModal) { } @* 2FA Setup Modal *@ @if (show2FaSetupModal) { } } @code { private List users = new(); private bool isLoading = true; private string? errorMessage; private string? successMessage; private bool twoFactorGlobalEnabled; // User Modal private bool showUserModal; private bool isEditingUser; private bool isSaving; private string? modalError; private Guid editUserId; private string editUsername = ""; private string editDisplayName = ""; private UserRole editRole = UserRole.User; private bool editIsActive = true; private string newPassword = ""; private string? usernameError; private string? passwordError; // Password Modal private bool showPasswordModal; private AppUser? passwordUser; private string confirmPassword = ""; // Delete Modal private bool showDeleteModal; private AppUser? deleteUser; // 2FA Setup Modal private bool show2FaSetupModal; private AppUser? setup2FaUser; private string? setup2FaSecret; private string? setup2FaQrDataUrl; private string? setup2FaCode; private bool setup2FaEnforceAfterConfirm; protected override async Task OnInitializedAsync() { if (UserSession.IsAdmin) { await LoadUsers(); var tfSettings = await SiteSettingsService.GetTwoFactorSettingsAsync(); twoFactorGlobalEnabled = tfSettings.IsEnabled; } } private DotNetObjectReference? _visibilityRef; protected override async Task OnAfterRenderAsync(bool firstRender) { if (firstRender && UserSession.IsAdmin) { _visibilityRef = DotNetObjectReference.Create(this); await VisibilityRefresh.RegisterAsync(JS, _visibilityRef, nameof(OnVisibilityReturn), 120); } } [JSInvokable] public async Task OnVisibilityReturn(int hiddenSeconds) { if (!UserSession.IsAdmin) return; await LoadUsers(); await InvokeAsync(StateHasChanged); } public async ValueTask DisposeAsync() { await VisibilityRefresh.UnregisterAsync(JS); _visibilityRef?.Dispose(); } private async Task LoadUsers() { isLoading = true; errorMessage = null; StateHasChanged(); try { users = await AuthService.GetAllUsersAsync(); } catch (Exception ex) { errorMessage = $"Fehler beim Laden der Benutzer: {ex.Message}"; } finally { isLoading = false; } } #region User Modal private void OpenCreateUserModal() { editUserId = Guid.Empty; editUsername = ""; editDisplayName = ""; editRole = UserRole.User; editIsActive = true; newPassword = ""; usernameError = null; passwordError = null; isEditingUser = false; modalError = null; showUserModal = true; } private void OpenEditUserModal(AppUser user) { editUserId = user.Id; editUsername = user.Username; editDisplayName = user.DisplayName ?? ""; editRole = user.Role; editIsActive = user.IsActive; newPassword = ""; usernameError = null; passwordError = null; isEditingUser = true; modalError = null; showUserModal = true; } private void CloseUserModal() { if (!isSaving) { showUserModal = false; ResetUserForm(); } } private void ResetUserForm() { editUserId = Guid.Empty; editUsername = ""; editDisplayName = ""; editRole = UserRole.User; editIsActive = true; newPassword = ""; usernameError = null; passwordError = null; modalError = null; } private void ValidateUsernameField() { var validation = AuthService.ValidateUsername(editUsername); usernameError = validation.IsValid ? null : validation.ErrorMessage; } private void ValidatePasswordField() { if (!isEditingUser) { var validation = AuthService.ValidatePassword(newPassword); passwordError = validation.IsValid ? null : validation.ErrorMessage; } } private async Task SaveUser() { modalError = null; usernameError = null; passwordError = null; // Validate username var usernameValidation = AuthService.ValidateUsername(editUsername); if (!usernameValidation.IsValid) { usernameError = usernameValidation.ErrorMessage; return; } // Validate password for new users if (!isEditingUser) { var passwordValidation = AuthService.ValidatePassword(newPassword); if (!passwordValidation.IsValid) { passwordError = passwordValidation.ErrorMessage; return; } } isSaving = true; StateHasChanged(); try { if (isEditingUser) { var updated = await AuthService.UpdateUserAsync(editUserId, editUsername, editDisplayName, editRole, editIsActive); var index = users.FindIndex(u => u.Id == editUserId); if (index >= 0) { users[index] = updated; } // Update current session if editing self if (editUserId == UserSession.CurrentUser?.Id) { UserSession.UpdateUser(updated); } successMessage = $"Benutzer '{updated.Username}' wurde aktualisiert."; } else { var created = await AuthService.CreateUserAsync(editUsername, newPassword, editDisplayName, editRole); users.Add(created); users = users.OrderBy(u => u.Username).ToList(); successMessage = $"Benutzer '{created.Username}' wurde erstellt."; } showUserModal = false; ResetUserForm(); } catch (Exception ex) { modalError = ex.Message; } finally { isSaving = false; } } #endregion #region Password Modal private void OpenPasswordModal(AppUser user) { passwordUser = user; newPassword = ""; confirmPassword = ""; modalError = null; showPasswordModal = true; } private void ClosePasswordModal() { if (!isSaving) { showPasswordModal = false; passwordUser = null; newPassword = ""; confirmPassword = ""; modalError = null; } } private async Task ChangePassword() { if (passwordUser == null) return; var validation = AuthService.ValidatePassword(newPassword); if (!validation.IsValid) { modalError = validation.ErrorMessage; return; } if (newPassword != confirmPassword) { modalError = "Passwörter stimmen nicht überein."; return; } isSaving = true; modalError = null; StateHasChanged(); try { await AuthService.ChangePasswordAsync(passwordUser.Id, newPassword); successMessage = $"Passwort für '{passwordUser.Username}' wurde geändert."; showPasswordModal = false; passwordUser = null; newPassword = ""; confirmPassword = ""; } catch (Exception ex) { modalError = ex.Message; } finally { isSaving = false; } } #endregion #region Delete Modal private void OpenDeleteModal(AppUser user) { deleteUser = user; modalError = null; showDeleteModal = true; } private void CloseDeleteModal() { if (!isSaving) { showDeleteModal = false; deleteUser = null; modalError = null; } } private async Task DeleteUser() { if (deleteUser == null) return; isSaving = true; modalError = null; StateHasChanged(); try { var username = deleteUser.Username; await AuthService.DeleteUserAsync(deleteUser.Id); users.RemoveAll(u => u.Id == deleteUser.Id); successMessage = $"Benutzer '{username}' wurde gelöscht."; showDeleteModal = false; deleteUser = null; } catch (Exception ex) { modalError = ex.Message; } finally { isSaving = false; } } #endregion #region 2FA Actions private async Task Reset2Fa(AppUser user) { try { await AuthService.Reset2FaAsync(user.Id); user.TwoFactorEnabled = false; user.TwoFactorSecret = null; user.TwoFactorEnforced = false; successMessage = $"2FA für '{user.Username}' wurde zurückgesetzt."; } catch (Exception ex) { errorMessage = $"Fehler: {ex.Message}"; } } private async Task Enforce2Fa(AppUser user, bool enforce) { try { await AuthService.SetEnforce2FaAsync(user.Id, enforce); user.TwoFactorEnforced = enforce; if (enforce && !user.TwoFactorEnabled) { // User doesn't have 2FA set up yet — open setup modal with QR code await Open2FaSetupModal(user, enforceAfterConfirm: true); } else { successMessage = enforce ? $"2FA wird für '{user.Username}' erzwungen." : $"2FA-Zwang für '{user.Username}' aufgehoben."; } } catch (Exception ex) { errorMessage = $"Fehler: {ex.Message}"; } } private async Task Open2FaSetupModal(AppUser user, bool enforceAfterConfirm = false) { try { var result = await AuthService.Enable2FaAsync(user.Id); setup2FaUser = user; setup2FaSecret = result.Secret; setup2FaQrDataUrl = TwoFactorService.GenerateQrCodeDataUrl(result.OtpAuthUri); setup2FaCode = ""; setup2FaEnforceAfterConfirm = enforceAfterConfirm; modalError = null; show2FaSetupModal = true; } catch (Exception ex) { errorMessage = $"Fehler beim Einrichten von 2FA: {ex.Message}"; } } private async Task Confirm2FaSetup() { if (setup2FaUser == null || string.IsNullOrWhiteSpace(setup2FaCode)) return; isSaving = true; modalError = null; StateHasChanged(); try { var confirmed = await AuthService.Confirm2FaAsync(setup2FaUser.Id, setup2FaCode); if (confirmed) { setup2FaUser.TwoFactorEnabled = true; setup2FaUser.TwoFactorSecret = setup2FaSecret; if (setup2FaEnforceAfterConfirm) { setup2FaUser.TwoFactorEnforced = true; } successMessage = $"2FA für '{setup2FaUser.Username}' wurde erfolgreich eingerichtet."; show2FaSetupModal = false; Close2FaSetupModal(); } else { modalError = "Ungültiger Code. Bitte versuchen Sie es erneut."; } } catch (Exception ex) { modalError = ex.Message; } finally { isSaving = false; } } private void Close2FaSetupModal() { if (!isSaving) { show2FaSetupModal = false; setup2FaUser = null; setup2FaSecret = null; setup2FaQrDataUrl = null; setup2FaCode = null; setup2FaEnforceAfterConfirm = false; modalError = null; } } #endregion #region Helper Methods private static string GetRoleName(UserRole role) => role switch { UserRole.Admin => "Administrator", UserRole.Worker => "Mitarbeiter", UserRole.User => "Benutzer", _ => "" }; private static string GetRoleClass(UserRole role) => role switch { UserRole.Admin => "role-admin", UserRole.Worker => "role-worker", UserRole.User => "role-user", _ => "" }; private static string FormatLastLogin(DateTime lastLogin) { var local = lastLogin.ToLocalTime(); var diff = DateTime.Now - local; if (diff.TotalMinutes < 1) return "Gerade eben"; if (diff.TotalMinutes < 60) return $"Vor {(int)diff.TotalMinutes} Min."; if (diff.TotalHours < 24) return $"Vor {(int)diff.TotalHours} Std."; if (diff.TotalDays < 7) return $"Vor {(int)diff.TotalDays} Tagen"; return local.ToString("dd.MM.yy HH:mm"); } #endregion }