RBAC and Doc updates

web/static/js/api.js

@@ -104,6 +104,63 @@ class APIClient {
         return this.request('/');
     }
 
+    // Authentication API
+    async login(username, password) {
+        const response = await this.request('/auth/login', {
+            method: 'POST',
+            body: JSON.stringify({
+                username: username,
+                password: password
+            })
+        });
+        
+        if (response.access_token) {
+            this.setToken(response.access_token);
+        }
+        
+        return response;
+    }
+
+    async logout() {
+        try {
+            await this.request('/auth/logout', {
+                method: 'POST'
+            });
+        } catch (error) {
+            // Ignore logout errors, we'll clear the token anyway
+        }
+        this.clearToken();
+    }
+
+    async getCurrentUser() {
+        return this.request('/auth/me');
+    }
+
+    // User management API
+    async getUsers() {
+        return this.request('/users');
+    }
+
+    async createUser(userData) {
+        return this.request('/users', {
+            method: 'POST',
+            body: JSON.stringify(userData)
+        });
+    }
+
+    async updateUser(userId, userData) {
+        return this.request(`/users/${userId}`, {
+            method: 'PATCH',
+            body: JSON.stringify(userData)
+        });
+    }
+
+    async deleteUser(userId) {
+        return this.request(`/users/${userId}`, {
+            method: 'DELETE'
+        });
+    }
+
     // Mailing Lists API
     async getLists() {
         return this.request('/lists');