Redesign sign-in with the Carbon authentication pattern

[fifthsegment]

Summary

Release GateSentry 2.4.0 with a redesigned sign-in page built on IBM Carbon v10's authentication-pattern conventions, studied against the shipped Carbon 10.58 component and stylesheet sources (forms, text/password inputs, button sets, spacing, and color tokens).

What changed

• Authenticationshell (AuthShell.svelte + app.css) — replaces the dark gradient card with Carbon's light G10 surface: #f4f4f4 backdrop, white card with subtle border/shadow, a blue mark + "GATESENTRY" brand row, and expressive light-weight heading. Narrowed to a 28rem card.
• Sign-in form (login.svelte) — standard Carbon Form (not FluidForm, which is meant for dense in-app forms, not short auth screens), size="xl" inputs (3rem touch targets) with visible labels and proper autocomplete attributes, one Clear/Sign in ButtonSet row (secondary + primary), inline field-level errors via the inputs' own invalid state.
• Certificate download — de-emphasized from a standalone tertiary button floating below the card to a ghost action in a divider section inside the card, via a new kind/size prop on DownloadCertificateLink (Settings keeps its existing tertiary small usage).
• Password toggle tooltip — tooltipAlignment="end" right-aligns the "Show password" tooltip so it cannot widen the page on narrow screens (replaces Carbon's default 50%-centering that overflowed at 390px).
• Setup, session-checking, and unavailable screens inherit the refreshed AuthShell automatically.
• GATESENTRY_VERSION → 2.4.0 with matching CHANGELOG.md notes.

Preserved

• Endpoint, payload, event, and navigation semantics (/auth/token, on:authenticated, redirect behavior, localStorage hygiene)
• Every route URL; no backend changes

Validation

• make verify — passed (Svelte check 0/0, 76 UI tests, asset build, Go tests, Go build)
• make validate-assets — passed; embedded assets synchronized
• Playwright (verified against the disposable backend at 1280×720, 820×1180, 390×844):
  • No document-level horizontal overflow at any width (scrollWidth == viewport)
  • Buttons render in one row that shrinks gracefully on mobile
  • Real login → Overview flow works; logout returns directly to the redesigned sign-in page

🤖 Generated with [CC]

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.09%. Comparing base (eadb8c4) to head (143dfbb).
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #192      +/-   ##
==========================================
- Coverage   51.13%   51.09%   -0.04%     
==========================================
  Files         128      128              
  Lines       12669    12669              
==========================================
- Hits         6478     6473       -5     
- Misses       5412     5417       +5     
  Partials      779      779              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.