feat: Add secret view

app/api/autoreg.py

@@ -38,7 +38,10 @@ async def _broadcast_accounts_update(ws):
                 "tokenData": {
                     "accountName": t.account_name,
                     "email": t.email,
-                    "expiresAt": t.expires_at.isoformat() if t.expires_at else None
+                    "expiresAt": t.expires_at.isoformat() if t.expires_at else None,
+                    "refreshToken": t.raw_data.get('refreshToken') if t.raw_data else None,
+                    "clientId": t.raw_data.get('_clientId') if t.raw_data else None,
+                    "clientSecret": t.raw_data.get('_clientSecret') if t.raw_data else None
                 },
                 "usage": {
                     "currentUsage": -1,

app/static/index.html

@@ -6671,8 +6671,40 @@
           <textarea class="modal-textarea" id="ssoTokenInput" placeholder="Paste cookie..."></textarea>
           <button class="btn btn-primary" style="width:100%" onclick="importSsoToken()">Import</button>
         </div>
+      
+    <div class="modal-overlay" id="accountSecretsModal" onclick="if(event.target === this) closeAccountSecrets()">
+      <div class="modal">
+        <div class="modal-header">
+          <span class="modal-title">Account Secrets</span>
+          <button class="modal-close" onclick="closeAccountSecrets()">ЎБ</button>
+        </div>
+        <div class="modal-body">
+          <div class="form-group">
+            <label class="form-label">Email</label>
+            <textarea class="modal-textarea" id="accountSecretEmail" readonly></textarea>
+            <button class="btn btn-secondary" style="width:100%" onclick="copySecretField('accountSecretEmail')">Copy</button>
+          </div>
+          <div class="form-group">
+            <label class="form-label">RefreshToken</label>
+            <textarea class="modal-textarea" id="accountSecretRefreshToken" readonly></textarea>
+            <button class="btn btn-secondary" style="width:100%" onclick="copySecretField('accountSecretRefreshToken')">Copy</button>
+          </div>
+          <div class="form-group">
+            <label class="form-label">Client ID</label>
+            <textarea class="modal-textarea" id="accountSecretClientId" readonly></textarea>
+            <button class="btn btn-secondary" style="width:100%" onclick="copySecretField('accountSecretClientId')">Copy</button>
+          </div>
+          <div class="form-group">
+            <label class="form-label">Client Secret</label>
+            <textarea class="modal-textarea" id="accountSecretClientSecret" readonly></textarea>
+            <button class="btn btn-secondary" style="width:100%" onclick="copySecretField('accountSecretClientSecret')">Copy</button>
+          </div>
+        </div>
       </div>
     </div>
+
+</div>
+    </div>
   
     
     <div class="dialog-overlay" id="dialogOverlay" onclick="if(event.target === this) closeDialog()">
@@ -6952,6 +6984,8 @@ let pendingAction = null;
     
     
     const STATE = {"filter":"all","sort":"email","compact":false,"settingsOpen":false,"searchQuery":"","scrollPosition":0,"activeTab":"accounts","disableToasts":false};
+
+    let ACCOUNT_INDEX = {};
     
     function getState() { return STATE; }
     
@@ -7453,6 +7487,59 @@ let pendingAction = null;
         closeSsoModal();
       }
     }
+    // === Account Secrets Modal ===
+
+    function openAccountSecrets(filename) {
+      const modal = document.getElementById('accountSecretsModal');
+      const acc = ACCOUNT_INDEX[filename];
+      if (!modal || !acc) return;
+
+      const tokenData = acc.tokenData || {};
+      const email = tokenData.email || '';
+      const refreshToken = tokenData.refreshToken || '';
+      const clientId = tokenData.clientId || '';
+      const clientSecret = tokenData.clientSecret || '';
+
+      const emailEl = document.getElementById('accountSecretEmail');
+      const refreshEl = document.getElementById('accountSecretRefreshToken');
+      const clientIdEl = document.getElementById('accountSecretClientId');
+      const clientSecretEl = document.getElementById('accountSecretClientSecret');
+
+      if (emailEl) emailEl.value = email;
+      if (refreshEl) refreshEl.value = refreshToken;
+      if (clientIdEl) clientIdEl.value = clientId;
+      if (clientSecretEl) clientSecretEl.value = clientSecret;
+
+      modal.classList.add('visible');
+    }
+
+    function closeAccountSecrets() {
+      const modal = document.getElementById('accountSecretsModal');
+      modal?.classList.remove('visible');
+    }
+
+    function copySecretField(id) {
+      const el = document.getElementById(id);
+      const value = el?.value || '';
+      if (!value) return;
+      if (navigator.clipboard?.writeText) {
+        navigator.clipboard.writeText(value).then(() => {
+          showToast('Copied', 'success');
+        }).catch(() => {
+          showToast('Copy failed', 'error');
+        });
+      } else {
+        try {
+          el.focus();
+          el.select();
+          document.execCommand('copy');
+          showToast('Copied', 'success');
+        } catch {
+          showToast('Copy failed', 'error');
+        }
+      }
+    }
+
     
     // === Console Drawer ===
     
@@ -8053,6 +8140,10 @@ let pendingAction = null;
         case 'accountsLoaded':
           // Standalone WebSocket sends accountsLoaded with accounts array
           if (msg.accounts && Array.isArray(msg.accounts)) {
+            ACCOUNT_INDEX = {};
+            msg.accounts.forEach(function(acc) {
+              ACCOUNT_INDEX[acc.filename] = acc;
+            });
             const list = document.getElementById('accountList');
             if (list) {
               if (msg.accounts.length === 0) {
@@ -8064,11 +8155,12 @@ let pendingAction = null;
                   const statusClass = acc.isExpired ? 'expired' : (acc.needsRefresh ? 'warning' : 'valid');
                   const name = acc.tokenData?.accountName || acc.filename || 'Unknown';
                   const email = acc.tokenData?.email || '';
+                  const safeFilename = (acc.filename || '').replace(/'/g, "\\'");
                   const usage = acc.usage || {};
                   const usageText = usage.currentUsage >= 0 ? usage.currentUsage + '/' + (usage.usageLimit || 500) : '—';
                   const usagePercent = usage.percentageUsed || 0;
                   
-                  return '<div class="account ' + isActive + ' ' + statusClass + '" data-filename="' + acc.filename + '" onclick="switchAccount(\'' + acc.filename + '\')">' +
+                  return '<div class="account ' + isActive + ' ' + statusClass + '" data-filename="' + acc.filename + '" onclick="switchAccount(\'' + safeFilename + '\')">' +
                     '<div class="account-info">' +
                       '<div class="account-name">' + name + '</div>' +
                       '<div class="account-email">' + email + '</div>' +
@@ -8078,8 +8170,9 @@ let pendingAction = null;
                       '<div class="usage-text">' + usageText + '</div>' +
                     '</div>' +
                     '<div class="account-actions">' +
-                      '<button class="btn btn-sm" onclick="event.stopPropagation(); refreshToken(\'' + acc.filename + '\')">🔄</button>' +
-                      '<button class="btn btn-sm btn-danger" onclick="event.stopPropagation(); confirmDelete(\'' + acc.filename + '\')">🗑️</button>' +
+                      '<button class="btn btn-sm" onclick="event.stopPropagation(); refreshToken(\'' + safeFilename + '\')">🔄</button>' +
+                      '<button class="btn btn-sm" onclick="event.stopPropagation(); openAccountSecrets(\'' + safeFilename + '\')">🔑</button>' +
+                      '<button class="btn btn-sm btn-danger" onclick="event.stopPropagation(); confirmDelete(\'' + safeFilename + '\')">🗑️</button>' +
                     '</div>' +
                   '</div>';
                 }).join('');
@@ -9426,4 +9519,4 @@ let pendingAction = null;
     window.updateScheduledRegState = updateScheduledRegState;
   </script>
 </body>
-</html>
+</html>

app/websocket.py

@@ -170,7 +170,10 @@ async def handle_command(command: str, data: Dict[str, Any], websocket: WebSocke
                     "tokenData": {
                         "accountName": token.account_name,
                         "email": token.email,
-                        "expiresAt": token.expires_at.isoformat() if token.expires_at else None
+                        "expiresAt": token.expires_at.isoformat() if token.expires_at else None,
+                        "refreshToken": token.raw_data.get('refreshToken') if token.raw_data else None,
+                        "clientId": token.raw_data.get('_clientId') if token.raw_data else None,
+                        "clientSecret": token.raw_data.get('_clientSecret') if token.raw_data else None
                     },
                     "usage": {
                         "currentUsage": -1,