0.31.9

src/admin/web/index.html

@@ -2867,6 +2867,7 @@
                                     credentials are reload-only by default and restricted to explicit certificate IDs.
                                     Deploy is optional; tokens cannot read configuration or use other administration APIs.</p>
                                 <p class="fine" id="certificate-api-status" role="status"></p>
+                                <p class="fine" data-i18n="certificateApiEditNote" id="certificate-api-edit-note" hidden>Edit the settings below without changing the bearer token. Key ID cannot be changed.</p>
                                 <label><span data-i18n="certificateApiKeyId">Key ID</span><input
                                         id="certificate-api-key-id" maxlength="64" placeholder="certbot-main" /></label>
                                 <label><span data-i18n="certificateApiComment">Comment</span><input
@@ -2878,14 +2879,14 @@
                                 <label class="check"><input id="certificate-api-allow-deploy" type="checkbox" /><span
                                         data-i18n="certificateApiAllowDeploy">Also allow deploy</span></label>
                                 <p class="fine" data-i18n="certificateApiAllowDeployHelp">Leave disabled for Certbot renewal hooks. Reload-only is the recommended least-privilege mode.</p>
-                                <label><span data-i18n="certificateApiToken">Bearer token (optional custom
+                                <label id="certificate-api-token-field"><span data-i18n="certificateApiToken">Bearer token (optional custom
                                         value)</span><input autocomplete="off" id="certificate-api-token"
                                         maxlength="128" minlength="32"
                                         placeholder="Leave empty to generate a strong token" type="password" /></label>
                                 <p class="fine" data-i18n="certificateApiTokenHelp">Each cleartext token is shown only
                                     after generation/rotation. RustProxy stores only its hash.</p>
                                 <div class="form-actions"><button class="primary" data-i18n="certificateApiRotate"
-                                        type="submit">Generate / rotate token</button><button class="outline danger"
+                                        id="certificate-api-save" type="submit">Generate / rotate token</button><button class="outline" data-i18n="certificateApiCancelEdit" id="certificate-api-cancel-edit" hidden type="button">Cancel edit</button><button class="outline danger"
                                         data-i18n="certificateApiRevokeAll" id="certificate-api-revoke-all"
                                         type="button">Revoke all tokens</button></div>
                                 <div hidden id="certificate-api-secret-wrap">