Function buildPersistentTokensKeyWarningHtml

public/js/adminPanel.js:86–129

(status)

}

function buildPersistentTokensKeyWarningHtml(status) {
  if (!status || typeof status !== 'object') return '';

  const needsAttention = !!status.needsAttention;
  const autoGenerated = !!status.autoGenerated;
  if (!needsAttention && !autoGenerated) {
    return '';
  }

  const toneClass = needsAttention ? 'alert-warning' : 'alert-info';
  const title = needsAttention
    ? 'Persistent token security warning'
    : 'Persistent token key note';
  const warning = String(status.warning || '').trim();
  const recommendedAction = String(status.recommendedAction || '').trim();
  const source = String(status.source || '').trim();
  const canRotateInApp = needsAttention && source !== 'env';
  const blockedByEnv = needsAttention && source === 'env';

  return `
    <div class="alert ${toneClass}" style="margin-bottom:12px; border-radius:8px;">
      <div style="font-weight:600; margin-bottom:4px;">${escapeHTML(title)}</div>
      ${warning ? `<div>${escapeHTML(warning)}</div>` : ''}
      ${recommendedAction ? `<div style="margin-top:6px;">${escapeHTML(recommendedAction)}</div>` : ''}
      ${source ? `<div class="small" style="margin-top:6px;"><strong>Source:</strong> ${escapeHTML(source)}</div>` : ''}
      ${canRotateInApp ? `
        <div style="margin-top:10px;">
          <button type="button" class="btn btn-sm btn-outline-danger" id="frRotatePersistentTokensKeyBtn">
            Rotate key now
          </button>
          <div class="small text-muted" style="margin-top:6px;">
            FileRise will generate a new key, re-encrypt stored secrets, and expire all remember-me sessions. Run this during a quiet maintenance window.
          </div>
          <div class="small text-muted" id="frRotatePersistentTokensKeyStatus" style="margin-top:4px;"></div>
        </div>
      ` : ''}
      ${blockedByEnv ? `
        <div class="small text-muted" style="margin-top:10px;">
          In-app rotation is disabled while <code>PERSISTENT_TOKENS_KEY</code> is controlled by the container or host environment. Set the new key outside the Admin Panel and run rotation after upgrading to a build without the shipped placeholder.
        </div>
      ` : ''}
    </div>
  `;
}

function wirePersistentTokensKeyWarningActions(status) {
  const btn = document.getElementById('frRotatePersistentTokensKeyBtn');