- Use getMimeType() instead of getClientMimeType() to prevent MIME spoofing - Change IsGranted to IS_AUTHENTICATED_FULLY so ROLE_CLIENT can access avatars - Remove Groups from avatarFileName (only avatarUrl needed by frontend) - Disable aggressive caching to prevent stale avatar images - Add error handling to avatar upload in profile page - Use i18n for "Mon profil" button text Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
53 lines
1.8 KiB
Vue
53 lines
1.8 KiB
Vue
<template>
|
|
<header class="border-b border-neutral-200 bg-primary-500 p-3 text-white sm:p-5">
|
|
<div class="flex h-full items-center justify-between">
|
|
<button
|
|
class="rounded-md p-2 text-white hover:bg-primary-600 transition-colors lg:hidden"
|
|
@click="ui.openMobileSidebar()"
|
|
>
|
|
<Icon name="mdi:menu" size="24" />
|
|
</button>
|
|
<div class="ml-auto flex items-center gap-4 text-xl text-white sm:gap-8">
|
|
<NotificationBell />
|
|
<div class="group relative flex gap-2 sm:gap-4">
|
|
<UserAvatar v-if="user" :user="user" size="md" class="cursor-pointer" />
|
|
<Icon v-else name="mdi:account-circle-outline" class="self-center cursor-pointer" size="36" />
|
|
<p class="hidden self-center cursor-pointer sm:block">{{ user?.username }}</p>
|
|
<div class="invisible absolute right-0 top-full z-50 mt-2 w-44 rounded-md border border-neutral-200 bg-white py-1 text-sm text-neutral-800 opacity-0 shadow-lg transition-all group-hover:visible group-hover:opacity-100">
|
|
<button
|
|
type="button"
|
|
class="block w-full px-3 py-2 text-left hover:bg-neutral-100"
|
|
@click="navigateTo('/profile')"
|
|
>
|
|
{{ $t('profile.title') }}
|
|
</button>
|
|
<button
|
|
type="button"
|
|
class="block w-full px-3 py-2 text-left hover:bg-neutral-100"
|
|
@click="handleLogout"
|
|
>
|
|
Déconnexion
|
|
</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</header>
|
|
</template>
|
|
|
|
<script setup lang="ts">
|
|
import type { UserData } from '~/services/dto/user-data'
|
|
|
|
defineProps<{
|
|
user?: UserData
|
|
}>()
|
|
|
|
const auth = useAuthStore()
|
|
const ui = useUiStore()
|
|
|
|
async function handleLogout() {
|
|
await auth.logout()
|
|
await navigateTo('/login')
|
|
}
|
|
</script>
|