Lucas RayanandClaude Opus 5
132cecd41c
Three separate gaps, all of which made the F4 interface non-functional or unprotected: The admin console rendered for anyone. There was no middleware and no guard in the layout, so /admin/dashboard returned 200 unauthenticated - only its data calls failed. middleware.ts now redirects both surfaces to their login when the session cookie is missing, expired, carries the wrong audience, or is a pre-MFA challenge token. It reads the claims without verifying the signature on purpose: the signing key belongs to the auth service and must not reach the browser bundle. That is sound because this is not the boundary - every /api/v1 request is verified for real upstream. Nothing served /api/v1/*. next.config.ts had no rewrites and there were no route handlers, so every call the pages made 404'd against the Next server, while AUTH_SERVICE_URL sat unused. A catch-all route now proxies to the auth service, forwarding the client address and preserving multiple Set-Cookie headers, which logout needs to clear both surfaces. Session cookies also move to Path=/, since a cookie pinned to /user or /admin was never sent with the /api/v1 requests that needed it. i18n existed only as files. The three bundles had perfect key parity and real translations, but no library, no imports and no switcher: the UI was hardcoded English and i18n.test.ts compared keys while the feature was absent. There is now a provider, a hook, a language switcher, and server-side Accept-Language negotiation that honours q-values and matches a bare "pt" to pt-BR. Logins, both layouts and the settings screen consume it; the admin pages still have English titles. The settings screen invented app passwords in the browser with Math.random and never stored them. It now calls the API, which returns the password once and keeps only its hash. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
81 lines
2.8 KiB
JSON
81 lines
2.8 KiB
JSON
{
|
|
"common": {
|
|
"appName": "LambdaMail",
|
|
"userPortal": "Webmail",
|
|
"adminPortal": "Console de Gestão",
|
|
"loading": "Carregando...",
|
|
"save": "Salvar Alterações",
|
|
"cancel": "Cancelar",
|
|
"delete": "Excluir",
|
|
"confirm": "Confirmar",
|
|
"search": "Buscar",
|
|
"status": "Status",
|
|
"actions": "Ações",
|
|
"refresh": "Atualizar",
|
|
"logout": "Sair"
|
|
},
|
|
"auth": {
|
|
"userLoginTitle": "Entrar no Webmail",
|
|
"adminLoginTitle": "Entrar no Console Admin",
|
|
"emailLabel": "Endereço de E-mail",
|
|
"passwordLabel": "Senha",
|
|
"signInButton": "Entrar",
|
|
"totpCodeLabel": "Código do Autenticador (6 dígitos)",
|
|
"verifyCodeButton": "Verificar Código",
|
|
"invalidCredentials": "E-mail ou senha inválidos",
|
|
"mfaRequired": "Código de autenticação em dois fatores obrigatório"
|
|
},
|
|
"mail": {
|
|
"inbox": "Caixa de Entrada",
|
|
"sent": "Enviados",
|
|
"drafts": "Rascunhos",
|
|
"trash": "Lixeira",
|
|
"junk": "Spam",
|
|
"archive": "Arquivo",
|
|
"compose": "Escrever E-mail",
|
|
"noMessages": "Nenhuma mensagem nesta pasta",
|
|
"unreadCount": "{count, plural, =0 {Nenhuma mensagem não lida} one {# mensagem não lida} other {# mensagens não lidas}}",
|
|
"loadImages": "Carregar Imagens Remotas",
|
|
"reply": "Responder",
|
|
"forward": "Encaminhar",
|
|
"undoSend": "Desfazer Envio ({seconds}s restantes)"
|
|
},
|
|
"settings": {
|
|
"title": "Configurações da Conta",
|
|
"security": "Segurança e 2FA",
|
|
"appPasswords": "Senhas de Aplicativo",
|
|
"sessions": "Sessões Ativas",
|
|
"mfaStatus": "Status da Autenticação em Dois Fatores",
|
|
"mfaEnabled": "2FA está Ativo",
|
|
"mfaDisabled": "2FA está Desativado",
|
|
"enableMfa": "Ativar 2FA",
|
|
"generateAppPassword": "Gerar Senha de Aplicativo",
|
|
"recoveryCodesTitle": "Códigos de Recuperação",
|
|
"saveRecoveryCodes": "Guarde estes códigos de recuperação em local seguro. Eles não serão exibidos novamente.",
|
|
"language": "Idioma",
|
|
"signOut": "Sair"
|
|
},
|
|
"admin": {
|
|
"dashboardTitle": "Painel do Sistema",
|
|
"domainsTitle": "Domínios e DNS (13 Registros)",
|
|
"mailboxesTitle": "Caixas Postais e Contas",
|
|
"aliasesTitle": "Aliases e Roteamento",
|
|
"queueTitle": "Fila de Entrega de Saída",
|
|
"dmarcTitle": "Análise DMARC",
|
|
"securityTitle": "Segurança e Log de Auditoria",
|
|
"preflightTitle": "Diagnóstico Preflight",
|
|
"reconcileDns": "Reconciliar Registros DNS",
|
|
"dnsStatusVerified": "VERIFICADO",
|
|
"dnsStatusDrift": "DESVIO DETECTADO",
|
|
"dnsStatusPartial": "PARCIAL",
|
|
"retryJob": "Tentar Entrega Novamente",
|
|
"cancelJob": "Cancelar Trabalho",
|
|
"freezeDomain": "Congelar Destino"
|
|
},
|
|
"errors": {
|
|
"unauthorized": "Sessão expirada ou não autorizada",
|
|
"forbidden": "Acesso proibido para esta superfície de conta",
|
|
"serverError": "Ocorreu um erro interno no servidor"
|
|
}
|
|
}
|