Phillip Tarrant
8b9c77c3fb
The brand-contrast polish that renamed logo.* to logo-mark.* (and paired it with a styled wordmark span) only touched the public layout. Admin still pointed at the old asset paths, which broke visually after Phase 3 and then carried forward into Phase 4. Mirror the public header exactly so Head Hen sees the same brand chrome inside the CMS. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
93 lines
3.5 KiB
HTML
93 lines
3.5 KiB
HTML
{#
|
|
Minimal admin layout shell.
|
|
|
|
Reuses the public site's CSS (palette + typography) so Head Hen sees a
|
|
consistent visual language without us maintaining a second stylesheet.
|
|
Intentionally simpler than the public base: no marketing hero,
|
|
no multi-link primary nav — just the brand mark, the admin context
|
|
label, and a logout control when the viewer is authenticated.
|
|
|
|
Context the child template may override:
|
|
- title : <title> content
|
|
- content : main body
|
|
- user : app.models.entities.User | None
|
|
(passed by authed routes; omitted on pre-auth pages)
|
|
- csrf_token : str
|
|
(empty string on pre-auth pages; otherwise the signed
|
|
CSRF token issued by CSRFCookieMiddleware)
|
|
#}<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>{% block title %}Admin — Chicken Babies R Us{% endblock %}</title>
|
|
<meta name="robots" content="noindex, nofollow">
|
|
{#
|
|
CSRF meta tag: admin JS (live preview, drag-drop upload) reads
|
|
this to send the X-CSRF-Token header. Empty string on pre-auth
|
|
pages is harmless — those endpoints don't require CSRF.
|
|
#}
|
|
<meta name="csrf-token" content="{{ csrf_token|default('', true) }}">
|
|
<link rel="icon" href="{{ url_for('static', path='img/favicon.ico') }}" sizes="any">
|
|
<link rel="stylesheet" href="{{ url_for('static', path='css/site.css') }}">
|
|
</head>
|
|
<body class="admin-body">
|
|
<a class="skip-link" href="#main-content">Skip to main content</a>
|
|
|
|
<header class="site-header">
|
|
<div class="wrap site-header__wrap">
|
|
<a class="site-header__brand" href="/" aria-label="Chicken Babies R Us home">
|
|
{# Match the public header: chick-only mark + styled wordmark so
|
|
the admin chrome reads as the same brand. Asset paths track
|
|
the brand-contrast rename (logo -> logo-mark). #}
|
|
<picture>
|
|
<source srcset="{{ url_for('static', path='img/logo-mark.webp') }}" type="image/webp">
|
|
<img src="{{ url_for('static', path='img/logo-mark.png') }}"
|
|
alt=""
|
|
height="56"
|
|
class="site-header__mark">
|
|
</picture>
|
|
<span class="site-header__title">Chicken Babies R Us</span>
|
|
</a>
|
|
|
|
<nav class="site-nav" aria-label="Admin">
|
|
<ul class="site-nav__list">
|
|
<li class="site-nav__item">
|
|
<a class="site-nav__link" href="/admin">Dashboard</a>
|
|
</li>
|
|
{% if user is defined and user %}
|
|
<li class="site-nav__item">
|
|
{#
|
|
Plain POST form with the double-submit CSRF token.
|
|
The token is stamped into the form by the route and
|
|
verified against the `cb_csrf` cookie server-side.
|
|
#}
|
|
<form action="/admin/logout" method="post" class="site-nav__logout-form">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token|default('', true) }}">
|
|
<button type="submit" class="btn btn--link">Log out</button>
|
|
</form>
|
|
</li>
|
|
{% endif %}
|
|
</ul>
|
|
</nav>
|
|
</div>
|
|
</header>
|
|
|
|
<main id="main-content" class="site-main" tabindex="-1">
|
|
<div class="wrap">
|
|
{% block content %}{% endblock %}
|
|
</div>
|
|
</main>
|
|
|
|
<footer class="site-footer">
|
|
<div class="wrap site-footer__wrap">
|
|
<p class="site-footer__tag">
|
|
Chicken Babies R Us · Admin
|
|
</p>
|
|
</div>
|
|
</footer>
|
|
|
|
{% block scripts %}{% endblock %}
|
|
</body>
|
|
</html>
|