Client-side authentication support for the Silo database API. Adds a compact dock widget for auth status and login, bearer token management on all HTTP requests, and an enhanced settings dialog. Auth helper functions: - _get_auth_token(): reads token from FreeCAD preferences, checks expiry - _get_auth_username(): reads stored username from preferences - _get_auth_headers(): returns Authorization bearer header dict - _clear_auth(): clears token, username, and expiry from preferences SiloClient auth methods: - login(username, password): POSTs to /auth/login, stores token/user/expiry - logout(): clears stored credentials via _clear_auth() - is_authenticated(): checks for valid stored token - auth_username(): returns stored username - check_connection(): GETs /health to test server reachability Auth header injection: - _request(), _download_file(), _upload_file(), delete_bom_entry() all merge _get_auth_headers() into outgoing HTTP requests - _request() clears stored token on 401 response SiloAuthDockWidget: - Status indicator dot (green=authenticated, yellow=no auth, red=disconnected) - Displays current username and server URL - Login/Logout toggle button - Gear button opens Silo_Settings dialog - 30-second QTimer polls connection and auth status - Login dialog with username/password fields and inline error display Silo_Auth command: - Shows/focuses the auth dock panel from menu or toolbar - Registered in workbench toolbar alongside existing commands Silo_Settings enhancements: - New Authentication section showing current auth status - Clear Saved Credentials button - Active values summary now includes authentication state New icon: - silo-auth.svg padlock icon in Catppuccin Mocha style Graceful degradation: when backend auth endpoint does not yet exist, login fails with a clear error and all existing unauthenticated requests continue to work as before (empty auth headers are a no-op).
448 B
448 B