dillard
be9164850a
Preset system: qr_presets table (migration 005) plus a presets.php AJAX endpoint (list/save/delete, CSRF-protected, scoped to the logged-in user's own id - presets are personal, never shared across accounts). UI/JS lives in dist/js/qrcode-style-tools.js. Random style button: client-side only, fills foreground/background with a random hex color pair (playful randomize, no contrast/scannability guarantee). Qr scanner (scan_qrcode.php): camera or image upload, decoded entirely client-side via html5-qrcode (CDN, pinned to 2.3.8). PWA: manifest.json + service-worker.js, icons generated from the existing DynamicQRCode_Original.png glyph. The service worker only caches static assets (css/js/images) and deliberately never touches PHP pages, since those carry CSRF tokens and session-specific content that must never be cached. Fixes a gap found while testing: qrcode_options.php is only a shared partial for the static qr forms - the dynamic qr form (form_dynamic_add.php) has its own separate copy of the foreground/background/level/size/filename/format fields (pre-existing structure, not something introduced here). That meant frame_text and the new preset/random-style UI never showed up on the dynamic qr page. Added the same fields there too, verified with a dynamic qr plus frame text (150x180px, the expected +30px padding). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
34 lines
1.2 KiB
JavaScript
34 lines
1.2 KiB
JavaScript
// Minimal service worker: only makes the app installable and caches truly static
|
|
// assets. Deliberately never caches PHP pages or the presets/bulk_action/qrcode_image
|
|
// endpoints - those carry session-specific and CSRF-sensitive content.
|
|
const CACHE_NAME = 'qrcode-static-v1';
|
|
const STATIC_ASSET_PATTERN = /\.(css|js|png|jpg|jpeg|svg|gif|woff2?|ttf)$/;
|
|
|
|
self.addEventListener('install', function (event) {
|
|
self.skipWaiting();
|
|
});
|
|
|
|
self.addEventListener('activate', function (event) {
|
|
event.waitUntil(self.clients.claim());
|
|
});
|
|
|
|
self.addEventListener('fetch', function (event) {
|
|
const url = new URL(event.request.url);
|
|
|
|
if (event.request.method !== 'GET' || url.origin !== self.location.origin || !STATIC_ASSET_PATTERN.test(url.pathname)) {
|
|
return;
|
|
}
|
|
|
|
event.respondWith(
|
|
caches.open(CACHE_NAME).then(function (cache) {
|
|
return cache.match(event.request).then(function (cached) {
|
|
const fetchPromise = fetch(event.request).then(function (response) {
|
|
cache.put(event.request, response.clone());
|
|
return response;
|
|
});
|
|
return cached || fetchPromise;
|
|
});
|
|
})
|
|
);
|
|
});
|