Revert auto-login: remove /api/servers/auto-login endpoint, simplify openPyrodactylPanel to direct URL open

Author: ddrayko

public/js/app.js

@@ -45,11 +45,10 @@ function renderCookieBanner() {
   });
 }
 
-async function openPyrodactylPanel(serverIdentifier) {
-  const data = await api('/servers/auto-login');
-  let url = data.autoLogin
-    ? `${data.panelUrl}/auth/login?token=${data.token}${serverIdentifier ? `&redirect=${encodeURIComponent('/server/' + serverIdentifier)}` : ''}`
-    : `${data.panelUrl}${serverIdentifier ? '/server/' + serverIdentifier : ''}`;
+const PTERO_URL = 'https://ptero.zerohost.fr';
+
+function openPyrodactylPanel(serverIdentifier) {
+  const url = `${PTERO_URL}${serverIdentifier ? '/server/' + serverIdentifier : ''}`;
   window.open(url, '_blank');
 }
 
@@ -1289,7 +1288,7 @@ function renderPyrodactyl() {
   el.innerHTML = html`
     <div class="page-header">
       <h1 class="page-title">Pyrodactyl Panel</h1>
-      <p class="page-subtitle">Opening Pyrodactyl with auto-login...</p>
+      <p class="page-subtitle">Access your Pyrodactyl panel</p>
     </div>
     <div class="ptero-grid">
       <div class="card ptero-card">
@@ -1298,7 +1297,7 @@ function renderPyrodactyl() {
         </div>
         <h2 class="ptero-card-title">Opening Pyrodactyl...</h2>
         <p class="ptero-card-desc">
-          You are being automatically logged in to the Pyrodactyl panel. If nothing happens, click the button below.
+          Click the button below to open the Pyrodactyl panel.
         </p>
         <button class="btn btn-primary btn-full" id="ptero-open-btn" onclick="openPyrodactylPanel()">
           <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M18 13v6a2 2 0 01-2 2H5a2 2 0 01-2-2V8a2 2 0 012-2h6M15 3h6v6M10 14L21 3"/></svg>

routes/servers.js

@@ -390,40 +390,6 @@ router.get('/resources/:identifier', authenticateToken, async (req, res) => {
   }
 });
 
-router.get('/auto-login', authenticateToken, async (req, res) => {
-  try {
-    const userId = req.user.userId;
-    const users = await query('SELECT ptero_client_api_key FROM users WHERE id = ?', [userId]);
-
-    if (!users[0]?.ptero_client_api_key) {
-      return res.json({ autoLogin: false, panelUrl: PTERO_URL });
-    }
-
-    const apiKey = users[0].ptero_client_api_key;
-    const pteroRes = await fetch(`${PTERO_URL}/api/client/account/one-time-token`, {
-      method: 'POST',
-      headers: {
-        'Authorization': `Bearer ${apiKey}`,
-        'Accept': 'application/json',
-        'Content-Type': 'application/json',
-      },
-      signal: AbortSignal.timeout(10000),
-    });
-
-    if (!pteroRes.ok) {
-      return res.json({ autoLogin: false, panelUrl: PTERO_URL });
-    }
-
-    const data = await pteroRes.json();
-    const token = data.attributes?.token || data.token;
-
-    res.json({ autoLogin: true, token, panelUrl: PTERO_URL });
-  } catch (err) {
-    console.error('Auto-login error:', err.message);
-    res.status(500).json({ error: 'Failed to generate auto-login link' });
-  }
-});
-
 router.put('/client-api-key', authenticateToken, async (req, res) => {
   try {
     const { apiKey } = req.body;