27 lines
934 B
JavaScript
27 lines
934 B
JavaScript
var user = null;
|
|
async function handleUser(response){
|
|
if (response.status == UNAUTHORIZED) {
|
|
redirect('login.html?return_to='+encodeURIComponent(window.location.href));
|
|
return;
|
|
}
|
|
if (response.ok){
|
|
user = await response.json();
|
|
fetch(web+"/navigation.html").then(handleNavigation);
|
|
}
|
|
}
|
|
|
|
async function handleNavigation(response){
|
|
if (response.ok){
|
|
var content = await response.text();
|
|
var nav = document.getElementsByTagName('nav')[0];
|
|
nav.innerHTML = content;
|
|
var links = nav.getElementsByTagName('a');
|
|
for (var index = 0; index < links.length; index++){
|
|
var link = links[index];
|
|
var clazz = link.hasAttribute('class') ? link.getAttribute("class") : null;
|
|
if (clazz != null && !user.permissions.includes(clazz)) nav.removeChild(link);
|
|
}
|
|
}
|
|
}
|
|
|
|
fetch(api+"/user",{method:'POST'}).then(handleUser); |