linusandClaude Sonnet 5
2e3e62b896
New screens (client/app/lib/screens/): - wahl_admin_screen.dart — per KC: list/create Wahlen; per Wahl: add workshops, run the assignment (POST /wahl/:id/zuteilung/run), view the result table. - teamer_admin_screen.dart — per Gemeinde: list/create local Teamer accounts, create group-link or per-email invites (shows the token). - verantwortliche_register_screen.dart — enter a KC invite code (GET /onboarding/kc/:code), pick a Gemeinde, submit (POST /onboarding/verantwortliche); shown on the home screen to a logged-in Authentik user who has no membership yet. - ui.dart — shared toast / ErrorText / SectionHeader / promptText. KcDetailScreen now links to Wahl admin and each Gemeinde row opens Teamer admin. Backend: widen the wahl + files LT routes to AuthGuard(['authentik','team']) for consistency with the other LT controllers. Rebrand web/index.html + manifest from "kc_app" to "KC-App". Verified against local Postgres with an isLeitungsteam team token: create KC/Gemeinde/Wahl/Workshop, run Zuteilung, create Teamer + invite, resolve an invite code. flutter analyze/test/build web green; backend npm test 56. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
KC-App client (Flutter)
Single Flutter codebase for the KC-App platform. Web is the only target
enabled so far (flutter config --enable-web); Android/iOS/desktop can be
added later with flutter create --platforms=... in this directory — the
lib/ code is platform-agnostic.
Run
The Authentik redirect URI is http://localhost:3000/v1/auth/callback, so
the app must be reached on :3000 — i.e. served by the backend, not flutter run's own dev server. Build it and let NestJS serve it:
flutter pub get
flutter build web # backend serves client/app/build/web at /
# then run the backend (npm run start:dev in ../../backend) and open :3000
For pure UI work without the OIDC flow, flutter run -d chrome --dart-define=API_BASE=http://localhost:3000/api still works (guest / local
Teamer login only).
Dart-defines
| define | default |
|---|---|
API_BASE |
http://localhost:3000/api |
OIDC_ISSUER |
https://sso.konfi-castle.com/application/o/konfi-castle-app/ |
OIDC_CLIENT_ID |
the konfi-castle public client id |
OIDC_REDIRECT_URI |
http://localhost:3000/v1/auth/callback |
What's implemented
- Login (
lib/screens/login_screen.dart) — three tabs:- Konfi / Gast: KC invite code + first/last name →
POST /auth/guest. - Leitungsteam / Verantwortliche: "Mit Konfi-Castle-ID anmelden" starts
the Authentik Authorization Code + PKCE flow (
lib/oidc.dart); below it, the local Gemeinde-Teamer password form (POST /auth/team-login). - Einladung: redeem a Teamer invite token →
POST /auth/teamer/register.
- Konfi / Gast: KC invite code + first/last name →
- OIDC: discovery + S256 challenge,
?code=handled on bootstrap, access + refresh token persisted (shared_preferences/ localStorage), expired access token refreshed on restart.GET /auth/meresolves the role. - Home (
lib/screens/home_screen.dart) — identity card + navigation. - Verwaltung (
lib/screens/admin_screen.dart, Leitungsteam only) — list/create KCs; per KC the Gemeinden (list/create) and pending Verantwortlichen self-registrations (GET /onboarding/requests, approve / reject). - Workshop-Wahl (
lib/screens/wahl_screen.dart, guests) — two tabs: Wünsche (GET /wahl/guest/overview, tap workshops in order, max 3,POST /wahl/:id/teilnehmer) and Ergebnis (GET /wahl/guest/results— PENDING / ASSIGNED with workshop + wish rank / UNASSIGNED). - Dateien (
lib/screens/files_screen.dart) —GET /files/:kcId, filtered server-side by the caller's visibility tier. - Chat (
lib/screens/chat_screen.dart+lib/chat_socket.dart) — channel list, REST history, then a live/chatWebSocket connection (chat:join/chat:send/chat:message) with a compose bar.
Architecture
lib/api.dart—Api(thin REST wrapper + models) andAppState(ChangeNotifier: session, login/logout, token persistence).lib/oidc.dart— Authentik PKCE flow. Browser-only bits (sessionStorage, redirect,window.location) sit behind a conditional import (browser.dart→browser_web.dart/browser_stub.dart) soflutter testcompiles on the Dart VM.lib/chat_socket.dart—/chatWebSocket wrapper.lib/main.dart—AppScope(anInheritedNotifier<AppState>) exposesAppScope.of(context);_AuthGateswitches Login/Home. No third-party state-management package.