ui: /settings/users list page

internal/server/http/server.go

@@ -264,6 +264,7 @@ func (s *Server) routes(r chi.Router) {
 
 		if s.deps.UI != nil {
 			r.Get("/settings", s.handleUISettings)
+			r.Get("/settings/users", s.handleUIUsersList)
 			r.Get("/settings/notifications", s.handleUINotificationsList)
 			r.Get("/settings/notifications/new", s.handleUINotificationNewGet)
 			r.Post("/settings/notifications/new", s.handleUINotificationNewPost)

internal/server/http/ui_users.go

@@ -0,0 +1,76 @@
+// ui_users.go — Settings → Users HTML handlers (admin-only).
+//
+// Routes (wired in server.go's admin band):
+//
+//	GET  /settings/users                       → handleUIUsersList    (this task)
+//	GET  /settings/users/new                   → F2
+//	POST /settings/users/new                   → F2
+//	GET  /settings/users/{id}/edit             → F3
+//	POST /settings/users/{id}/edit             → F3
+//	GET  /settings/users/{id}/setup-link       → F2
+//	POST /settings/users/{id}/disable          → F3
+//	POST /settings/users/{id}/enable           → F3
+//	POST /settings/users/{id}/regenerate-setup → F3
+//	POST /settings/users/{id}/force-logout     → F3
+package http
+
+import (
+	"log/slog"
+	stdhttp "net/http"
+)
+
+type usersPage struct {
+	Users        []userRow
+	ShowDisabled bool
+}
+
+type userRow struct {
+	ID                 string
+	Username           string
+	Email              string
+	Role               string
+	LastLoginAt        string // pre-formatted "2006-01-02 15:04:05" or "never"
+	Disabled           bool
+	MustChangePassword bool
+}
+
+func (s *Server) handleUIUsersList(w stdhttp.ResponseWriter, r *stdhttp.Request) {
+	u := s.requireUIUser(w, r)
+	if u == nil {
+		return
+	}
+	showDisabled := r.URL.Query().Get("show_disabled") == "1"
+	users, err := s.deps.Store.ListUsers(r.Context())
+	if err != nil {
+		slog.Error("ui users: list", "err", err)
+		stdhttp.Error(w, "internal", stdhttp.StatusInternalServerError)
+		return
+	}
+	rows := make([]userRow, 0, len(users))
+	for _, ux := range users {
+		if !showDisabled && ux.DisabledAt != nil {
+			continue
+		}
+		em := ""
+		if ux.Email != nil {
+			em = *ux.Email
+		}
+		ll := "never"
+		if ux.LastLoginAt != nil {
+			ll = ux.LastLoginAt.UTC().Format("2006-01-02 15:04:05")
+		}
+		rows = append(rows, userRow{
+			ID: ux.ID, Username: ux.Username, Email: em,
+			Role: string(ux.Role), LastLoginAt: ll,
+			Disabled:           ux.DisabledAt != nil,
+			MustChangePassword: ux.MustChangePassword,
+		})
+	}
+	view := s.baseView(r, u)
+	view.Title = "Users · restic-manager"
+	view.Active = "settings"
+	view.Page = usersPage{Users: rows, ShowDisabled: showDisabled}
+	if err := s.deps.UI.Render(w, "users", view); err != nil {
+		slog.Error("ui users: render", "err", err)
+	}
+}