Function saveConfig

web/scripts/ragnar_modern.js:12775–12821

(form)

                        <button onclick="handleRegenRecovery()"
                                class="bg-yellow-600 hover:bg-yellow-700 text-white px-4 py-2 rounded-lg transition-colors text-sm">
                            Regenerate Recovery Codes
                        </button>
                    </div>

                    <!-- Logout -->
                    <div class="glass rounded-lg p-4">
                        <h4 class="font-medium mb-3">Session</h4>
                        <button onclick="handleLogout()"
                                class="bg-red-600 hover:bg-red-700 text-white px-4 py-2 rounded-lg transition-colors text-sm">
                            Logout
                        </button>
                    </div>
                </div>
            `;
        }
    } catch (error) {
        console.error('Error loading security config:', error);
    }
}

async function handleAuthSetup(event) {
    event.preventDefault();
    const statusEl = document.getElementById('setup-status');
    const btn = document.getElementById('setup-btn');

    const username = document.getElementById('setup-username').value.trim();
    const password = document.getElementById('setup-password').value;
    const confirm = document.getElementById('setup-confirm-password').value;

    if (password !== confirm) {
        statusEl.className = 'p-3 rounded-lg text-sm bg-red-900/30 border border-red-700 text-red-300';
        statusEl.textContent = 'Passwords do not match';
        statusEl.classList.remove('hidden');
        return;
    }

    btn.disabled = true;
    btn.textContent = 'Setting up...';

    try {
        const result = await postAPI('/api/auth/setup', {
            username, password, confirm_password: confirm
        });

        if (result.success) {
            // Show recovery codes in a prominent way
            statusEl.className = 'p-3 rounded-lg text-sm bg-green-900/30 border border-green-700 text-green-300';
            statusEl.innerHTML = 'Authentication enabled! Save your recovery codes below.';
            statusEl.classList.remove('hidden');