feat: migrate admin dashboard from Chakra UI to shadcn/ui + Tailwind CSS

internal/http_handlers/client_check.go

@@ -24,12 +24,13 @@ func (h *httpProvider) ClientCheckMiddleware() gin.HandlerFunc {
 			return
 		}
 		clientID := c.Request.Header.Get("X-Authorizer-Client-ID")
-		// Allowing requests without client ID header for backward compatibility
-		// Pls don't remove this check
+		// Allowing requests without client ID header for backward compatibility.
+		// The dashboard and other first-party clients may not always send this
+		// header, so an empty value must pass through to the GraphQL handler.
 		if clientID == "" {
 			log.Debug().Msg("request received without client ID header")
 			metrics.RecordClientIDHeaderMissing()
-			c.Abort()
+			c.Next()
 			return
 		}
 

internal/http_handlers/security_headers.go

@@ -8,11 +8,12 @@ import (
 // today because the dashboard uses inline styles; tighten as the frontend
 // migrates away from inline. frame-ancestors 'none' replaces X-Frame-Options.
 const defaultCSP = "default-src 'self'; " +
-	"script-src 'self' 'unsafe-inline'; " +
-	"style-src 'self' 'unsafe-inline'; " +
+	"script-src 'self' 'unsafe-inline' https://editor.unlayer.com; " +
+	"style-src 'self' 'unsafe-inline' https://editor.unlayer.com; " +
 	"img-src 'self' data: https:; " +
-	"font-src 'self' data:; " +
-	"connect-src 'self'; " +
+	"font-src 'self' data: https://editor.unlayer.com; " +
+	"connect-src 'self' https://api.unlayer.com; " +
+	"frame-src https://editor.unlayer.com; " +
 	"frame-ancestors 'none'; " +
 	"base-uri 'self'; " +
 	"form-action 'self'"