From 71cd1626e04b3683495368af8275d4c2b2036955 Mon Sep 17 00:00:00 2001
From: AdrianoDev <adrianodalpastro@gmail.com>
Date: Sun, 5 Jul 2026 22:03:07 +0200
Subject: [PATCH] =?UTF-8?q?feat(header):=20identit=C3=A0=20utente=20SSR,?=
 =?UTF-8?q?=20link=20Accedi=20/=20menu=20utente?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/components/Header.astro | 33 +++++++++++++++++++++++++++++++++
 src/layouts/Base.astro      | 15 +++++++--------
 2 files changed, 40 insertions(+), 8 deletions(-)

diff --git a/src/components/Header.astro b/src/components/Header.astro
index 33a0b4c..eeb2cf3 100644
--- a/src/components/Header.astro
+++ b/src/components/Header.astro
@@ -1,7 +1,15 @@
 ---
 import { site } from '../data/site';
 import { t, contentImageUrl } from '../lib/content';
+interface Props {
+  user: { username: string; role: string } | null;
+  showTags: boolean;
+  canTags: boolean;
+}
+const { user, canTags } = Astro.props;
 const path = Astro.url.pathname;
+const loginHref = `/login?next=${encodeURIComponent(path)}`;
+const areaHref = user?.role === 'superuser' ? '/admin/content' : '/admin';
 ---
 <header class="hdr" id="site-header">
   <div class="container hdr__in">
@@ -11,6 +19,22 @@ const path = Astro.url.pathname;
         <a href={item.href} class:list={['hdr__link', { 'is-active': path === item.href || (item.href !== '/' && path.startsWith(item.href)) }]}>{t(`global.nav.${i + 1}.label`)}</a>
       ))}
     </nav>
+    <div class="hdr__user">
+      {user ? (
+        <details class="umenu">
+          <summary class="umenu__btn">{user.username} ▾</summary>
+          <div class="umenu__panel">
+            <a href={areaHref}>Area riservata</a>
+            {canTags && (
+              <button type="button" class="umenu__tags" id="toggle-tags" data-slot="tags">Mostra tag</button>
+            )}
+            <a href="/admin/logout">Esci</a>
+          </div>
+        </details>
+      ) : (
+        <a class="hdr__login" href={loginHref}>Accedi</a>
+      )}
+    </div>
     <button class="hdr__burger" id="nav-toggle" aria-label="Apri menu" aria-expanded="false">
       <span></span><span></span><span></span>
     </button>
@@ -32,6 +56,15 @@ const path = Astro.url.pathname;
     .hdr__link { padding: 12px 0; }
     .hdr__burger { display: block; }
   }
+  .hdr__user { display: flex; align-items: center; }
+  .hdr__login { font-family: var(--font-heading); font-size: .72rem; font-weight: 600; letter-spacing: .18em; text-transform: uppercase; text-decoration: none; color: var(--c-heading); }
+  .hdr__login:hover { color: var(--c-accent-dark); }
+  .umenu { position: relative; }
+  .umenu__btn { cursor: pointer; list-style: none; font-family: var(--font-heading); font-size: .72rem; font-weight: 600; letter-spacing: .12em; text-transform: uppercase; color: var(--c-heading); }
+  .umenu__btn::-webkit-details-marker { display: none; }
+  .umenu__panel { position: absolute; right: 0; top: calc(100% + 8px); background: #fff; box-shadow: 0 8px 22px rgba(0,0,0,.12); min-width: 180px; display: flex; flex-direction: column; padding: 8px 0; z-index: 200; }
+  .umenu__panel a, .umenu__tags { padding: 10px 16px; text-align: left; background: none; border: 0; cursor: pointer; font: inherit; font-size: .8rem; text-decoration: none; color: var(--c-heading); }
+  .umenu__panel a:hover, .umenu__tags:hover { background: #f4f2ef; }
 </style>
 
 <script>
diff --git a/src/layouts/Base.astro b/src/layouts/Base.astro
index 365aabf..8a386dc 100644
--- a/src/layouts/Base.astro
+++ b/src/layouts/Base.astro
@@ -14,12 +14,11 @@ import { getSessionUser, SESSION_COOKIE } from '../lib/auth';
 interface Props { title: string; description?: string }
 const { title, description = 'InsanityLab — Performance. Balance. Longevity. Allenamento personalizzato, piccoli gruppi e benessere a Bologna.' } = Astro.props;
 
-// Overlay annotate: badge coi tag contenuto, solo per utenti loggati con ?annotate=1.
-let annotate = false;
-if (Astro.url.searchParams.get('annotate') === '1') {
-  const tok = Astro.cookies.get(SESSION_COOKIE)?.value;
-  annotate = Boolean(tok && getSessionUser(getDb(), tok));
-}
+const tok = Astro.cookies.get(SESSION_COOKIE)?.value;
+const user = tok ? getSessionUser(getDb(), tok) : null;
+const canTags = !!user && (user.role === 'superuser' || user.role === 'admin');
+const wantTags = Astro.cookies.get('showtags')?.value === '1' || Astro.url.searchParams.get('annotate') === '1';
+const showTags = canTags && wantTags;
 ---
 <!doctype html>
 <html lang="it">
@@ -37,7 +36,7 @@ if (Astro.url.searchParams.get('annotate') === '1') {
     <script is:inline>document.documentElement.classList.add('js');</script>
   </head>
   <body>
-    <Header />
+    <Header user={user} showTags={showTags} canTags={canTags} />
     <main><slot /></main>
     <Footer />
     <script>
@@ -74,7 +73,7 @@ if (Astro.url.searchParams.get('annotate') === '1') {
         update();
       }
     </script>
-    {annotate && (
+    {showTags && (
       <style is:global>
         [data-tag] { outline: 1px dashed #b8a98c; outline-offset: 2px; }
         .tag-badge { position: absolute; z-index: 9999; background: #3a2929; color: #fff;