initial commit

2026-07-27 14:42:23 +02:00
commit 833c68a189
257 changed files with 17947 additions and 0 deletions
@@ -0,0 +1,46 @@
+import 'package:flutter/material.dart';
+
+import '../../../core/theme/theme_x.dart';
+
+/// Static warning — NodeMaster's REST API has no built-in authentication.
+/// Anyone who can reach a node's port can start/stop services or trigger
+/// backups on it. Not dismissable: this is a standing property of the
+/// backend, not a one-time notice.
+class NoAuthCallout extends StatelessWidget {
+  const NoAuthCallout({super.key});
+
+  @override
+  Widget build(BuildContext context) {
+    return Container(
+      padding: const EdgeInsets.all(14),
+      decoration: BoxDecoration(
+        color: Color.alphaBlend(context.status.warning.withValues(alpha: 0.10), context.colors.surface),
+        borderRadius: BorderRadius.circular(10),
+        border: Border.all(color: context.status.warning.withValues(alpha: 0.4)),
+      ),
+      child: Row(
+        crossAxisAlignment: CrossAxisAlignment.start,
+        children: [
+          Icon(Icons.warning_amber_rounded, size: 18, color: context.status.warning),
+          const SizedBox(width: 12),
+          Expanded(
+            child: RichText(
+              text: TextSpan(
+                style: context.text.bodyMedium,
+                children: [
+                  TextSpan(text: 'No API authentication yet. ', style: const TextStyle(fontWeight: FontWeight.w700)),
+                  const TextSpan(
+                    text: "NodeMaster's REST API has no built-in auth — anyone who can reach a node's "
+                        'port can start, stop, or trigger backups on it. Until token auth ships, keep it '
+                        'behind a VPN or a reverse proxy with its own access control, and treat saved '
+                        'connection URLs as sensitive.',
+                  ),
+                ],
+              ),
+            ),
+          ),
+        ],
+      ),
+    );
+  }
+}