58254b492b
Some checks failed
CI / Unit & Component Tests (pull_request) Failing after 2m52s
CI / OCR Service Tests (pull_request) Successful in 21s
CI / Backend Unit Tests (pull_request) Successful in 3m48s
CI / fail2ban Regex (pull_request) Successful in 44s
CI / Semgrep Security Scan (pull_request) Successful in 20s
CI / Compose Bucket Idempotency (pull_request) Successful in 1m4s
Introduces `csrfFetch` (= `makeCsrfFetch(fetch)`) in cookies.ts as a drop-in fetch replacement that auto-injects X-XSRF-TOKEN on POST/PUT/PATCH/DELETE. Previously 8 call sites sent mutating requests without the CSRF header — annotation resize, comment POST/PATCH/DELETE, Geschichte CRUD, Stammbaum relationship creation, bulk-edit PATCH, and file upload — all would fail with CSRF_TOKEN_MISSING if the backend's cookie-based protection triggered. All 14 client-side mutating fetches now use csrfFetch; withCsrf/makeCsrfFetch remain in the API for injectable-fetch use cases (e.g. useTranscriptionBlocks). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
105 lines
3.2 KiB
Svelte
105 lines
3.2 KiB
Svelte
<script lang="ts">
|
||
import TrainingHistory from './TrainingHistory.svelte';
|
||
import { m } from '$lib/paraglide/messages.js';
|
||
import type { TrainingRun } from '$lib/ocr/training.js';
|
||
import { csrfFetch } from '$lib/shared/cookies';
|
||
|
||
interface TrainingInfo {
|
||
availableBlocks?: number;
|
||
totalOcrBlocks?: number;
|
||
availableDocuments?: number;
|
||
ocrServiceAvailable?: boolean;
|
||
lastRun?: TrainingRun | null;
|
||
runs?: TrainingRun[];
|
||
personNames?: Record<string, string>;
|
||
}
|
||
|
||
interface Props {
|
||
trainingInfo: TrainingInfo | null;
|
||
}
|
||
|
||
let { trainingInfo }: Props = $props();
|
||
|
||
let training = $state(false);
|
||
let successMessage = $state<string | null>(null);
|
||
let errorMessage = $state<string | null>(null);
|
||
|
||
const available = $derived(trainingInfo?.availableBlocks ?? 0);
|
||
const tooFewBlocks = $derived(available < 5);
|
||
const serviceDown = $derived(trainingInfo?.ocrServiceAvailable === false);
|
||
const disabled = $derived(training || tooFewBlocks || serviceDown);
|
||
|
||
async function startTraining() {
|
||
training = true;
|
||
successMessage = null;
|
||
errorMessage = null;
|
||
try {
|
||
const res = await csrfFetch('/api/ocr/train', { method: 'POST' });
|
||
if (res.ok) {
|
||
successMessage = m.training_success();
|
||
setTimeout(() => {
|
||
successMessage = null;
|
||
}, 5000);
|
||
} else {
|
||
errorMessage = m.training_start_failed();
|
||
}
|
||
} catch {
|
||
errorMessage = m.training_start_failed();
|
||
} finally {
|
||
training = false;
|
||
}
|
||
}
|
||
</script>
|
||
|
||
<div class="rounded-sm border border-line bg-surface p-6 shadow-sm">
|
||
<h2 class="mb-1 font-sans text-sm font-bold text-ink">{m.training_ocr_heading()}</h2>
|
||
<p class="mb-4 text-sm text-ink-2">{m.training_ocr_description()}</p>
|
||
|
||
<p class="mb-3 text-sm text-ink">
|
||
{m.training_ocr_blocks_ready({ blocks: available, docs: trainingInfo?.availableDocuments ?? 0 })}
|
||
<span class="text-ink-2"
|
||
>{m.training_ocr_blocks_total({ total: trainingInfo?.totalOcrBlocks ?? 0 })}</span
|
||
>
|
||
</p>
|
||
|
||
<button
|
||
onclick={startTraining}
|
||
disabled={disabled}
|
||
class="rounded-sm bg-primary px-5 py-2 font-sans text-xs font-bold tracking-widest text-primary-fg uppercase transition-opacity hover:opacity-80 focus-visible:ring-2 focus-visible:ring-brand-navy disabled:cursor-not-allowed disabled:opacity-50"
|
||
>
|
||
{training ? '…' : m.training_start_btn()}
|
||
</button>
|
||
|
||
{#if tooFewBlocks}
|
||
<p class="mt-2 text-xs text-ink-3">
|
||
{m.training_too_few_blocks({ available })}
|
||
</p>
|
||
{:else if serviceDown}
|
||
<p class="mt-2 text-xs text-orange-600">{m.training_service_down()}</p>
|
||
{/if}
|
||
|
||
{#if successMessage}
|
||
<p class="mt-2 flex items-center gap-2 text-xs text-green-700" aria-live="polite">
|
||
{successMessage}
|
||
<button
|
||
type="button"
|
||
class="-my-2 ml-1 inline-flex h-11 w-11 items-center justify-center rounded-sm underline hover:no-underline focus-visible:ring-2 focus-visible:ring-brand-navy focus-visible:outline-none"
|
||
onclick={() => (successMessage = null)}
|
||
aria-label={m.comp_dismiss()}>×</button
|
||
>
|
||
</p>
|
||
{/if}
|
||
|
||
{#if errorMessage}
|
||
<p class="mt-2 text-xs text-red-600" aria-live="assertive">{errorMessage}</p>
|
||
{/if}
|
||
|
||
<h3 class="mt-6 mb-3 text-xs font-bold tracking-widest text-ink-3 uppercase">
|
||
{m.training_history_heading()}
|
||
</h3>
|
||
<TrainingHistory
|
||
runs={(trainingInfo?.runs ?? []).filter((r) => r.modelName !== 'blla')}
|
||
personNames={trainingInfo?.personNames ?? {}}
|
||
/>
|
||
</div>
|