From 0c45cd9f4608b209baa0fb6e64a5e1cc78fd7fbe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Reinhard=20X=2E=20F=C3=BCrst?= <rexfue@gmail.com>
Date: Fri, 7 Aug 2026 08:20:19 +0000
Subject: [PATCH] espid2sensor: Version/Datum fehlten auf Login-Seite bei
 falschem Passwort

POST /login rendert bei Fehlermeldung wieder version/vdate/noUsers, so wie
GET /login das schon tut - vorher fielen diese Locals beim Fehlerfall weg
und der Footer war leer.
---
 espid2sensor/routes/auth.js | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/espid2sensor/routes/auth.js b/espid2sensor/routes/auth.js
index c998574..fa42ad3 100644
--- a/espid2sensor/routes/auth.js
+++ b/espid2sensor/routes/auth.js
@@ -21,10 +21,14 @@ export function registerAuthRoutes(app) {
 
   app.post('/login', async (req, res) => {
     const { email, password } = req.body;
+    const version = pkg.version
+    const vdate = pkg.date
+    const noUsers = (await usersCollection.countDocuments()) === 0;
+    const renderError = () => res.render('login', { error: errText, version, vdate, noUsers });
     const user = await usersCollection.findOne({ email: email.toLowerCase() });
-    if (!user) return res.render('login', { error: errText });
+    if (!user) return renderError();
     const match = await bcrypt.compare(password, user.passwordHash);
-    if (!match) return res.render('login', { error: errText });
+    if (!match) return renderError();
   req.session.userId = user._id;
   req.session.isAdmin = user.role === 'admin';
   res.redirect('/');