Adding LDAP login

app/web/admin.py

@@ -360,6 +360,33 @@ async def update_role(
     )
 
 
+@router.post("/roles/{role_id}/default", response_class=HTMLResponse)
+async def make_default_role(
+    request: Request,
+    role_id: int,
+    db: AsyncSession = Depends(get_db),
+    actor: User = Depends(web_require("roles:write")),
+):
+    role = await role_crud.get(db, role_id)
+    if role is None:
+        raise HTTPException(status_code=404, detail="Role not found")
+    await role_crud.set_default(db, role)
+    await audit_crud.log(
+        db,
+        actor=actor,
+        action="update",
+        resource_type="Role",
+        resource_id=role_id,
+        description=f"Set role {role.name} (#{role_id}) as the default role",
+    )
+    # Re-render the whole table so every row's default badge refreshes.
+    return templates.TemplateResponse(
+        request,
+        "admin/_roles_table.html",
+        {"roles": await role_crud.list_roles(db), **(await _role_perm_ctx(db))},
+    )
+
+
 @router.delete("/roles/{role_id}")
 async def delete_role(
     role_id: int,