v.34.1

src/admin/web/index.html

@@ -2769,10 +2769,14 @@
                                             id="prom-path" maxlength="128" required="" value="/metrics" /></label></div>
                                 <label><span data-i18n="prometheusCidrs"></span><textarea id="prom-cidrs" required=""
                                         rows="3" spellcheck="false"></textarea></label>
-                                <label><span data-i18n="prometheusTokenEnv"></span><input autocomplete="off"
-                                        id="prom-token-env" maxlength="128"
-                                        placeholder="RUST_PROXY_METRICS_TOKEN" /></label>
-                                <p class="fine" data-i18n="prometheusTokenHelp"></p>
+                                <div class="card-heading"><h3 data-i18n="promTokenTitle">Prometheus bearer token</h3></div>
+                                <p class="fine" data-i18n="promTokenHelp">Generate a token directly in the panel. Only its SHA-256 hash is retained; rotating invalidates the previous token immediately.</p>
+                                <p class="fine" id="prom-token-status" role="status"></p>
+                                <div class="form-actions">
+                                    <button class="outline" id="prom-token-generate" type="button" data-i18n="promTokenGenerate">Generate / rotate token</button>
+                                    <button class="quiet danger" id="prom-token-revoke" type="button" data-i18n="promTokenRevoke">Revoke token</button>
+                                </div>
+                                <div hidden id="prom-token-secret-wrap"><label data-i18n="apiTokenCopyNow">Copy the token now — it will not be displayed again</label><pre class="metrics-example" id="prom-token-secret"></pre></div>
                                 <label class="check"><input id="prom-trusted-no-token" type="checkbox" /><span
                                         data-i18n="prometheusTrustedNoToken"></span></label>
                                 <p class="fine" data-i18n="prometheusTrustedNoTokenHelp"></p>
@@ -2864,6 +2868,11 @@
                                 <div class="form-actions"><button class="primary" data-i18n="apply"
                                         type="submit">Validate, save and apply</button></div>
                             </form>
+                            <article class="card edit-form" id="api-tokens-shortcut">
+                                <div class="card-heading"><h2 data-i18n="generalApiTokensTitle">API tokens (RO/RW)</h2></div>
+                                <p class="fine" data-i18n="apiTokensMovedHelp">API token management has moved to Settings → Security.</p>
+                                <div class="form-actions"><a class="outline" id="api-tokens-security-link" href="/settings?tab=security#api-tokens-card" data-i18n="apiTokensOpenSecurity">Open API tokens in Security</a></div>
+                            </article>
                         </div>
                         <div aria-labelledby="settings-tab-system-info" class="settings-page"
                             data-settings-page="system-info" hidden="" id="settings-page-system-info" role="tabpanel">
@@ -3062,6 +3071,19 @@
                                     type="button">Administration audit</button>
                             </div>
                             <div class="security-stack">
+                            <article class="card edit-form" id="api-tokens-card" tabindex="-1">
+                                <div class="card-heading"><h2 data-i18n="generalApiTokensTitle">API tokens (RO/RW)</h2></div>
+                                <p class="fine" data-i18n="generalApiTokensHelp">Generate independent API tokens with read-only or read-write access, restricted to your client IP/CIDR. Existing browser login remains available. Non-loopback requests require HTTPS.</p>
+                                <form id="api-tokens-form">
+                                    <label><span data-i18n="apiTokenComment">Description</span><input id="api-token-comment" maxlength="128" placeholder="external-automation" /></label>
+                                    <label><span data-i18n="apiTokenPermission">Permissions</span><select id="api-token-permission"><option value="ro" data-i18n="apiTokenReadOnly">Read only (RO)</option><option value="rw" data-i18n="apiTokenReadWrite">Read and write (RW)</option></select></label>
+                                    <label><span data-i18n="apiTokenIpAllow">Allowed source IP/CIDR (one per line)</span><textarea id="api-token-cidrs" rows="3" required placeholder="192.0.2.10/32"></textarea></label>
+                                    <div class="form-actions"><button class="primary" type="submit" data-i18n="apiTokenCreate">Generate API token</button></div>
+                                </form>
+                                <div id="api-token-secret-wrap" hidden><label data-i18n="apiTokenCopyNow">Copy the token now — it will not be displayed again</label><pre id="api-token-secret" class="metrics-example"></pre></div>
+                                <div id="api-token-list" class="certificate-api-credentials"></div>
+                                <pre class="metrics-example">curl -H 'Authorization: Bearer $RUSTPROXY_API_TOKEN' https://panel.example.com/api/config</pre>
+                            </article>
                                 <article class="card security-account-card">
                                     <div class="card-heading">
                                         <div><span class="small-label" data-i18n="currentSession">CURRENT SESSION</span>