guest password protect

static/js/workspace.js

@@ -32,12 +32,19 @@ const notesList = document.querySelector("#notes-list");
 const notesSearch = document.querySelector("#notes-search");
 const notesPerPage = document.querySelector("#notes-per-page");
 const notesPagination = document.querySelector("#notes-pagination");
+const workspacePasswordForm = document.querySelector("#workspace-password-form");
+const workspacePasswordInput = document.querySelector("#workspace-set-password");
+const workspacePasswordError = document.querySelector("#workspace-password-error");
 let notesPage = 1;
 let notesSearchTimer;
 const notesViewKey = `rustpad:workspace:${slug}:notes-view`;
 let notesView = localStorage.getItem(notesViewKey) === "table" ? "table" : "grid";
 let notesCache = [];
 
+function updateWorkspacePasswordControl() {
+  workspacePasswordForm.hidden = Boolean(info?.protected || !info?.can_set_password);
+}
+
 function escapeHtml(v) { const e = document.createElement("div"); e.textContent = v; return e.innerHTML; }
 function formatBytes(value) {
   const bytes = Math.max(0, Number(value) || 0);
@@ -135,6 +142,7 @@ async function openWorkspace() {
     notesCache = data.notes;
     renderNotes();
     renderNotesPagination(data.pagination);
+    updateWorkspacePasswordControl();
     if (dialog.open) dialog.close();
   } catch (e) {
     if (info?.protected || e.message.toLowerCase().includes("password")) {
@@ -151,6 +159,7 @@ async function init() {
     info = await api(`/api/workspaces/${encodeURIComponent(slug)}`, { headers });
     document.querySelector("#workspace-title").textContent = info.title;
     document.querySelector("#workspace-url").textContent = location.pathname;
+    updateWorkspacePasswordControl();
     if (info.protected && info.access_level === "none") dialog.showModal(); else openWorkspace();
   } catch (e) {
     if (e.status === 403 || e.status === 404) await showSystemNotFound();
@@ -169,6 +178,36 @@ document.querySelector("#password-form").addEventListener("submit", async e => {
     openWorkspace();
   } catch (error) { document.querySelector("#password-error").textContent = error.message; }
 });
+workspacePasswordForm.addEventListener("submit", async event => {
+  event.preventDefault();
+  const password = workspacePasswordInput.value;
+  workspacePasswordError.textContent = "";
+  if (password.length < 8) {
+    workspacePasswordError.textContent = "Password must contain at least 8 characters.";
+    return;
+  }
+  const submit = workspacePasswordForm.querySelector('button[type="submit"]');
+  submit.disabled = true;
+  try {
+    await api(`/api/workspaces/${encodeURIComponent(slug)}/password`, {
+      method: "POST",
+      body: JSON.stringify({ password }),
+    });
+    const result = await api("/api/access-token", {
+      method: "POST",
+      body: JSON.stringify({ kind: "workspace", slug, password }),
+    });
+    setAccessToken("workspace", slug, result.granted);
+    accessToken = getAccessToken("workspace", slug);
+    workspacePasswordInput.value = "";
+    toast("Workspace password set");
+    await openWorkspace();
+  } catch (error) {
+    workspacePasswordError.textContent = error.message;
+  } finally {
+    submit.disabled = false;
+  }
+});
 document.querySelector("#new-note-button").addEventListener("click", () => document.querySelector("#note-dialog").showModal());
 document.querySelector("#cancel-note").addEventListener("click", () => document.querySelector("#note-dialog").close());
 document.querySelector("#note-form").addEventListener("submit", async e => {