From 6f26d455213c931c66d557bfa0f7618624307077 Mon Sep 17 00:00:00 2001 From: Arthur Breitman Date: Thu, 18 Jun 2026 13:32:19 +0000 Subject: [PATCH] feat(web): add Sign out button to the sidebar footer MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The admin UI had no visible logout — operators had to either hit POST /logout via curl or clear cookies in DevTools. Add a real button to nav.html's sidebar footer (below the Documentation link), in a form that POSTs to /logout. The /logout route already uses requireOperatorSessionExceptCSRF so a stale CSRF token doesn't block the click; the delegated submit handler injects the token anyway since this is a same-origin POST, which is harmless because the handler ignores it. Styled consistently with the existing footer link. Co-Authored-By: Claude Opus 4.7 (1M context) --- internal/web/templates/nav.html | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/internal/web/templates/nav.html b/internal/web/templates/nav.html index de14006..b08edbf 100644 --- a/internal/web/templates/nav.html +++ b/internal/web/templates/nav.html @@ -187,13 +187,21 @@ -
+
Documentation +
+ +