invite cooooddeesss

Signed-off-by: roxwize <rae@roxwize.xyz>

views/admin.pug

@@ -0,0 +1,32 @@
+extends site.pug
+
+block content
+  h1 Admin Panel
+  h2 Invite codes
+  form(action="/mod/codes/delete", method="post")
+    table
+      tbody
+        tr
+          th Token
+          th Expires
+          th Creator
+        for code of codes
+          - const timestamp = code.expires.getTime()
+          tr
+            td= code.token
+            if timestamp === 0
+              td.subtle never
+            else if Date.now() >= timestamp
+              td.error EXPIRED
+            else
+              td= code.expiresString
+            td
+              a(href=`/users/${code.uname}`)= code.uname
+            td
+              button(type="submit", name="token", value=code.token) Delete
+  form(action="/mod/codes/prune", method="post")
+    button(type="submit") Prune
+  br
+  form(action="/mod/codes/create", method="post")
+    input(type="datetime-local", name="expiration")
+    button(type="submit") Create

views/dashboard.pug

@@ -36,7 +36,7 @@ block content
   h1(style="margin-top:0.5em;") Feed
   include _feed.pug
   +feed(recentUpdates)
-  script.
+  script(nonce=nonce).
     function disable(form) {
       const btn = form.querySelector("button");
       btn.setAttribute("disabled", true);

views/register.pug

@@ -9,4 +9,6 @@ block content
     br
     input(type="password", name="pass", placeholder="Password", required)
     br
+    input(type="text", name="referral", placeholder="Invite Code", maxlength="22", required)
+    br
     button(type="submit") Sign Up

views/site.pug

@@ -14,6 +14,8 @@ html(lang="en")
           img#header-logo(src="/img/logo.svg", alt="logo")
         nav
           if session.loggedIn
+            if session.moderator
+              a(href="/mod/") Admin
             a(href="/dashboard/") Dashboard
             a(href="/journal/") Journal
             a(href="/logout/") Log out