--- a/C:\\xampp\\htdocs\\chatbot\\chatbot\\includes\\dashboard\\auth_loader.php
+++ b/C:\\xampp\\htdocs\\chatbot\\chatbot\\includes\\dashboard\\auth_loader.php
@@ -1,16 +1,124 @@
<?php
-// Minimal auth loader stub for tests
+/**
+ * Autenticación unificada del panel (local, Tailscale y producción).
+ */
+
+if (session_status() === PHP_SESSION_NONE) {
+ session_start();
+}
+
+if (!defined('CHATBOT_AUTH_USERS')) {
+ define('CHATBOT_AUTH_USERS', [
+ 'admin' => [
+ 'password' => 'admin@312',
+ 'role' => 'admin',
+ 'display_name' => 'Administrador',
+ ],
+ ]);
+}
+
+if (!function_exists('dash_auth_is_local_or_tailscale')) {
+ function dash_auth_is_local_or_tailscale(): bool
+ {
+ $remote = $_SERVER['REMOTE_ADDR'] ?? '';
+ if ($remote === '127.0.0.1' || $remote === '::1') {
+ return true;
+ }
+ if (str_starts_with($remote, '100.')) {
+ return true;
+ }
+ $host = $_SERVER['HTTP_HOST'] ?? '';
+ if ($host === 'localhost' || str_starts_with($host, '127.0.0.1') || str_starts_with($host, '100.')) {
+ return true;
+ }
+ $env = strtolower((string)(getenv('CHATBOT_AUTH_TRUST_LOCAL') ?: ''));
+ return in_array($env, ['1', 'true', 'yes'], true);
+ }
+}
+
+if (!function_exists('dash_auth_login_url')) {
+ function dash_auth_login_url(): string
+ {
+ $script = str_replace('\\\\', '/', $_SERVER['SCRIPT_NAME'] ?? '/');
+ if (str_contains($script, '/chatbot-unified/panel/')) {
+ return preg_replace('#/[^/]+$#', '/login.php', $script) ?: '/chatbot/chatbot-unified/panel/login.php';
+ }
+ return '/chatbot/chatbot-unified/panel/login.php';
+ }
+}
+
if (!function_exists('dash_auth_is_authenticated')) {
- function dash_auth_is_authenticated()
+ function dash_auth_is_authenticated(): bool
{
- return true;
+ if (!empty($_SESSION['dash_auth_user'])) {
+ return true;
+ }
+ if (dash_auth_is_local_or_tailscale()) {
+ $_SESSION['dash_auth_user'] = 'admin';
+ $_SESSION['dash_auth_role'] = 'admin';
+ return true;
+ }
+ return false;
}
}
+
if (!function_exists('dash_auth_redirect_to_login')) {
- function dash_auth_redirect_to_login()
+ function dash_auth_redirect_to_login(): void
{
- // In tests, do nothing
- return;
+ if (headers_sent()) {
+ return;
+ }
+ $next = $_SERVER['REQUEST_URI'] ?? '';
+ $login = dash_auth_login_url();
+ if ($next !== '' && !str_contains($next, 'login.php')) {
+ $login .= (str_contains($login, '?') ? '&' : '?') . 'next=' . rawurlencode($next);
+ }
+ header('Location: ' . $login);
+ exit;
}
}
+
+if (!function_exists('dash_auth_get_user_data')) {
+ function dash_auth_get_user_data(): array
+ {
+ $username = (string)($_SESSION['dash_auth_user'] ?? 'admin');
+ $users = CHATBOT_AUTH_USERS;
+ $profile = $users[$username] ?? [
+ 'password' => '',
+ 'role' => $_SESSION['dash_auth_role'] ?? 'admin',
+ 'display_name' => ucfirst($username),
+ ];
+
+ return [
+ 'username' => $username,
+ 'role' => $profile['role'] ?? 'admin',
+ 'display_name' => $profile['display_name'] ?? $username,
+ 'email' => $username . '@local',
+ ];
+ }
+}
+
+if (!function_exists('dash_auth_attempt_login')) {
+ function dash_auth_attempt_login(string $username, string $password): bool
+ {
+ $users = CHATBOT_AUTH_USERS;
+ if (!isset($users[$username])) {
+ return false;
+ }
+ if (!hash_equals((string)$users[$username]['password'], $password)) {
+ return false;
+ }
+ $_SESSION['dash_auth_user'] = $username;
+ $_SESSION['dash_auth_role'] = $users[$username]['role'] ?? 'admin';
+ return true;
+ }
+}
+
+if (!function_exists('dash_auth_logout')) {
+ function dash_auth_logout(): void
+ {
+ unset($_SESSION['dash_auth_user'], $_SESSION['dash_auth_role']);
+ }
+}
+
return true;
+require_once dirname(__DIR__, 3) . '/chatbot/includes/dashboard/auth_loader.php';
","linesAdded":2,"linesRemoved":1,"status":"pending"},"pending":2},"at":1783034774117},{"event":"tool_activity","data":{"activity":{"id":"tool_9a86e51e-d5be-4fb5-9f88-4ac8de2bba0","name":"edit","status":"running","summary":"edit: C:\\xampp\\htdocs\\chatbot\\chatbot-unified\\includes\\dashboard\\auth_loader.php","detail":"","at":"2026-07-02T23:26:14.184Z"}},"at":1783034774184},{"event":"tool_activity","data":{"activity":{"id":"tool_a6742721-3a7c-47e3-b79a-4195ed3d154","name":"edit","status":"running","summary":"edit: C:\\xampp\\htdocs\\chatbot\\includes\\dashboard\\auth_loader.php","detail":"","at":"2026-07-02T23:26:14.381Z"}},"at":1783034774381},{"event":"tool_activity","data":{"activity":{"id":"tool_9a86e51e-d5be-4fb5-9f88-4ac8de2bba0","name":"edit","status":"completed","summary":"edit: C:\\xampp\\htdocs\\chatbot\\chatbot-unified\\includes\\dashboard\\auth_loader.php","detail":"","at":"2026-07-02T23:26:14.385Z"}},"at":1783034774385},{"event":"file_change","data":{"sessionId":"cs-1783034711282-hd3abh","change":{"id":"ch-3","path":"chatbot-unified\\includes\\dashboard\\auth_loader.php","type":"edit","diffString":"--- /dev/null\n+++ b/C:\\xampp\\htdocs\\chatbot\\chatbot-unified\\includes\\dashboard\\auth_loader.php\n@@ -1 +1,2 @@\n-\n++++ b/C:\\xampp\\htdocs\\chatbot\\chatbot-unified\\includes\\dashboard\\auth_loader.php
+require_once dirname(__DIR__, 3) . '/chatbot/includes/dashboard/auth_loader.php';
","linesAdded":2,"linesRemoved":1,"status":"pending"},"pending":3},"at":1783034774385},{"event":"tool_activity","data":{"activity":{"id":"tool_a6742721-3a7c-47e3-b79a-4195ed3d154","name":"edit","status":"running","summary":"edit: C:\\xampp\\htdocs\\chatbot\\includes\\dashboard\\auth_loader.php","detail":"","at":"2026-07-02T23:26:14.544Z"}},"at":1783034774544},{"event":"tool_activity","data":{"activity":{"id":"tool_632593cb-cfce-47a9-a3b6-e629ae2153a","name":"edit","status":"running","summary":"edit: C:\\xampp\\htdocs\\chatbot\\chatbot-unified\\panel\\login.php","detail":"","at":"2026-07-02T23:26:14.661Z"}},"at":1783034774661},{"event":"tool_activity","data":{"activity":{"id":"tool_a6742721-3a7c-47e3-b79a-4195ed3d154","name":"edit","status":"completed","summary":"edit: C:\\xampp\\htdocs\\chatbot\\includes\\dashboard\\auth_loader.php","detail":"","at":"2026-07-02T23:26:14.743Z"}},"at":1783034774743},{"event":"file_change","data":{"sessionId":"cs-1783034711282-hd3abh","change":{"id":"ch-4","path":"includes\\dashboard\\auth_loader.php","type":"edit","diffString":"--- /dev/null\n+++ b/C:\\xampp\\htdocs\\chatbot\\includes\\dashboard\\auth_loader.php\n@@ -1 +1,2 @@\n-\n++require_once dirname(__DIR__, 2) . '/chatbot/includes/dashboard/auth_loader.php';
","linesAdded":2,"linesRemoved":1,"status":"pending"},"pending":4},"at":1783034774743},{"event":"tool_activity","data":{"activity":{"id":"tool_632593cb-cfce-47a9-a3b6-e629ae2153a","name":"edit","status":"completed","summary":"edit: C:\\xampp\\htdocs\\chatbot\\chatbot-unified\\panel\\login.php","detail":"","at":"2026-07-02T23:26:18.008Z"}},"at":1783034778008},{"event":"file_change","data":{"sessionId":"cs-1783034711282-hd3abh","change":{"id":"ch-5","path":"chatbot-unified\\panel\\login.php","type":"edit","diffString":"--- /dev/null\n+++ b/C:\\xampp\\htdocs\\chatbot\\chatbot-unified\\panel\\login.php\n@@ -1 +1,59 @@\n+\n+\n+\n+\n+ --- /dev/null
+++ b/C:\\xampp\\htdocs\\chatbot\\chatbot-unified\\panel\\login.php
@@ -1 +1,59 @@
+<?php
+require_once __DIR__ . '/../../../admin/includes/dashboard/auth_loader.php';
+$error = '';
+$next = (string)($_GET['next'] ?? $_POST['next'] ?? 'dashboard.php');
+
+if (dash_auth_is_authenticated()) {
+ header('Location: ' . ($next !== '' ? $next : 'dashboard.php'));
+ exit;
+}
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+ $user = trim((string)($_POST['username'] ?? ''));
+ $pass = (string)($_POST['password'] ?? '');
+ if (dash_auth_attempt_login($user, $pass)) {
+ header('Location: ' . ($next !== '' ? $next : 'dashboard.php'));
+ exit;
+ }
+ $error = 'Usuario o contraseña incorrectos.';
+}
+?>
+<!DOCTYPE html>
+<html lang=\"es\">
+<head>
+ <meta charset=\"UTF-8\">
+ <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">
+ <title>Acceso panel chatbot</title>
+ <link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css\" rel=\"stylesheet\">
+</head>
+<body class=\"bg-light d-flex align-items-center\" style=\"min-height:100vh\">
+<div class=\"container\">
+ <div class=\"row justify-content-center\">
+ <div class=\"col-md-5\">
+ <div class=\"card shadow-sm\">
+ <div class=\"card-body p-4\">
+ <h1 class=\"h4 mb-3\">Panel Chatbot</h1>
+ <?php if ($error !== ''): ?>
+ <div class=\"alert alert-danger py-2\"><?= htmlspecialchars($error) ?></div>
+ <?php endif; ?>
+ <form method=\"post\">
+ <input type=\"hidden\" name=\"next\" value=\"<?= htmlspecialchars($next) ?>\">
+ <div class=\"mb-3\">
+ <label class=\"form-label\">Usuario</label>
+ <input class=\"form-control\" name=\"username\" value=\"admin\" required>
+ </div>
+ <div class=\"mb-3\">
+ <label class=\"form-label\">Contraseña</label>
+ <input class=\"form-control\" type=\"password\" name=\"password\" required>
+ </div>
+ <button class=\"btn btn-primary w-100\" type=\"submit\">Entrar</button>
+ </form>
+ <p class=\"text-muted small mt-3 mb-0\">En localhost o Tailscale (100.x.x.x) el acceso es automático.</p>
+ </div>
+ </div>
+ </div>
+ </div>
+</div>
+</body>
+</html>