fix: IDAA auth — harden novi_admin_li/trusted_li and remove iframe gate

- ae_idaa_stores.ts: update default novi_admin_li UUID; add staff UUID to
  novi_trusted_li hardcoded defaults.
- +layout.svelte (idaa): only overwrite admin/trusted lists from site_cfg_json
  when the list is non-empty, so hardcoded defaults are never silently cleared.
  Remove $ae_loc.iframe requirement for 'authenticated' access level — the
  presence of a valid Novi UUID in the URL is sufficient proof regardless of
  whether the iframe flag is set yet.
This commit is contained in:
Scott Idem
2026-03-06 17:32:47 -05:00
parent 9fc72b4671
commit 0c9b6a9f5b
12 changed files with 32 additions and 23 deletions

View File

@@ -1343,7 +1343,7 @@
title="Select the state or province for the meeting"
>
<option value="">-- None --</option>
{#each lu_country_subdivision_list as lu_country_subdivision}
{#each lu_country_subdivision_list as lu_country_subdivision (lu_country_subdivision.code)}
<option value={lu_country_subdivision.code}
>{lu_country_subdivision.country_alpha_2_code}
- {lu_country_subdivision.name}</option
@@ -1425,7 +1425,7 @@
title="Select the country for the meeting"
>
<option value="">-- None --</option>
{#each lu_country_list as lu_country}
{#each lu_country_list as lu_country (lu_country.alpha_2_code)}
<option value={lu_country.alpha_2_code}
>{lu_country.english_short_name}</option
>
@@ -2205,7 +2205,7 @@
class:hidden={!$ae_loc.trusted_access}
>-- None --</option
>
{#each $ae_loc?.lu_time_zone_list as lu_timezone}
{#each $ae_loc?.lu_time_zone_list as lu_timezone (lu_timezone.name)}
<option value={lu_timezone.name}
>{lu_timezone.name}</option
>