TIGER-360: show-password eyeball toggle on all login + signup screens

CHANGELOG.md

@@ -6,7 +6,14 @@ All notable changes to **Tiger Core** (`webtigers/tiger-core`). Format follows
 
 ## [Unreleased]
 
-## [1.29.0] — 2026-10-21
+## [1.30.0] — 2026-10-21
+
+### Added
+- **Show-password eyeball toggle on every login + signup screen** (TIGER-360). The sign-in password
+  field now has a show/hide eye button, and the same control is present on the password-reset (new +
+  confirm), lock-screen, and signup fields. Reuses the existing global `[data-tiger-pw-toggle]` handler
+  (`tiger.password-strength.js`, already loaded on the auth layout) — markup only, no new JS. New i18n
+  key `core.auth.show_password` across all seven core locales.
 
 ### Changed
 - **A signed-in user who hits a page above their role is now redirected to their own dashboard, not

core/languages/de/core.php

@@ -58,6 +58,7 @@
     // --- Authentifizierung: gemeinsame Beschriftungen ---
     'core.auth.email'                => 'E-Mail',
     'core.auth.password'             => 'Passwort',
+    'core.auth.show_password'        => 'Passwort anzeigen',
     'core.auth.email_code'           => 'Mir einen Code per E-Mail senden',
     'core.auth.back_to_login'        => 'Zurück zur Anmeldung',
     'core.auth.return_to'            => 'Zurück zu %s',

core/languages/en/core.php

@@ -62,6 +62,7 @@
     // --- Auth: shared labels ---
     'core.auth.email'                => 'Email',
     'core.auth.password'             => 'Password',
+    'core.auth.show_password'        => 'Show password',
     'core.auth.email_code'           => 'Email me a code',
     'core.auth.back_to_login'        => 'Back to sign in',
     'core.auth.return_to'            => 'Return to %s',

core/languages/es/core.php

@@ -58,6 +58,7 @@
     // --- Autenticación: etiquetas compartidas ---
     'core.auth.email'                => 'Correo electrónico',
     'core.auth.password'             => 'Contraseña',
+    'core.auth.show_password'        => 'Mostrar contraseña',
     'core.auth.email_code'           => 'Enviarme un código',
     'core.auth.back_to_login'        => 'Volver a iniciar sesión',
     'core.auth.return_to'            => 'Volver a %s',

core/languages/fr/core.php

@@ -58,6 +58,7 @@
     // --- Authentification : libellés partagés ---
     'core.auth.email'                => 'E-mail',
     'core.auth.password'             => 'Mot de passe',
+    'core.auth.show_password'        => 'Afficher le mot de passe',
     'core.auth.email_code'           => 'M’envoyer un code par e-mail',
     'core.auth.back_to_login'        => 'Retour à la connexion',
     'core.auth.return_to'            => 'Retour à %s',

core/languages/hi/core.php

@@ -58,6 +58,7 @@
     // --- प्रमाणीकरण: साझा लेबल ---
     'core.auth.email'                => 'ईमेल',
     'core.auth.password'             => 'पासवर्ड',
+    'core.auth.show_password'        => 'पासवर्ड दिखाएं',
     'core.auth.email_code'           => 'मुझे एक कोड ईमेल करें',
     'core.auth.back_to_login'        => 'लॉग इन पर वापस जाएँ',
     'core.auth.return_to'            => '%s पर वापस जाएँ',

core/languages/pt/core.php

@@ -58,6 +58,7 @@
     // --- Autenticação: rótulos compartilhados ---
     'core.auth.email'                => 'E-mail',
     'core.auth.password'             => 'Senha',
+    'core.auth.show_password'        => 'Mostrar senha',
     'core.auth.email_code'           => 'Enviar um código por e-mail',
     'core.auth.back_to_login'        => 'Voltar ao login',
     'core.auth.return_to'            => 'Voltar para %s',

core/languages/tlh/core.php

@@ -62,6 +62,7 @@
     // --- Auth: shared labels ---
     'core.auth.email'                => 'Email',
     'core.auth.password'             => 'Password',
+    'core.auth.show_password'        => 'Show password',
     'core.auth.email_code'           => 'Email me a code',
     'core.auth.back_to_login'        => 'Back to sign in',
     'core.auth.return_to'            => 'Return to %s',

core/views/scripts/auth/lock.phtml

@@ -32,8 +32,11 @@ $who      = $this->escape(($identity && $identity->username) ? $identity->userna
     <form id="lock-pw-form" novalidate>
         <div class="mb-3">
             <label class="form-label" for="lock-password"><?= $this->escape($this->t('core.auth.password')) ?></label>
-            <input type="password" class="form-control form-control-lg" id="lock-password" name="password"
-                   autocomplete="current-password" autofocus required>
+            <div class="input-group">
+                <input type="password" class="form-control form-control-lg" id="lock-password" name="password"
+                       autocomplete="current-password" autofocus required>
+                <span class="input-group-text" data-tiger-pw-toggle role="button" tabindex="-1" aria-label="<?= $this->escape($this->t('core.auth.show_password')) ?>" style="cursor:pointer;"><i class="fa-solid fa-eye"></i></span>
+            </div>
         </div>
         <div class="d-grid mb-2">
             <button type="submit" id="lock-pw-submit" class="btn btn-primary btn-lg"><?= $this->escape($this->t('core.auth.lock.unlock')) ?></button>

core/views/scripts/auth/login.phtml

@@ -31,8 +31,11 @@
     </div>
     <div class="mb-2">
         <label class="form-label" for="login-password"><?= $this->escape($this->t('core.auth.password')) ?></label>
-        <input type="password" class="form-control form-control-lg" id="login-password" name="password"
-               autocomplete="current-password" required>
+        <div class="input-group">
+            <input type="password" class="form-control form-control-lg" id="login-password" name="password"
+                   autocomplete="current-password" required>
+            <span class="input-group-text" data-tiger-pw-toggle role="button" tabindex="-1" aria-label="<?= $this->escape($this->t('core.auth.show_password')) ?>" style="cursor:pointer;"><i class="fa-solid fa-eye"></i></span>
+        </div>
     </div>
     <div class="d-flex justify-content-end mb-3">
         <a href="/auth/forgot" class="small text-decoration-none"><?= $this->escape($this->t('core.auth.login.forgot')) ?></a>

core/views/scripts/auth/reset.phtml

@@ -24,13 +24,19 @@ $code = $this->escape($this->code ?? '');
     <input type="text" name="username" id="reset-username" autocomplete="username" value="" hidden>
     <div class="mb-3">
         <label class="form-label" for="reset-password"><?= $this->escape($this->t('core.auth.reset.new_password')) ?></label>
-        <input type="password" class="form-control form-control-lg" id="reset-password" name="password"
-               autocomplete="new-password" autofocus required>
+        <div class="input-group">
+            <input type="password" class="form-control form-control-lg" id="reset-password" name="password"
+                   autocomplete="new-password" autofocus required>
+            <span class="input-group-text" data-tiger-pw-toggle role="button" tabindex="-1" aria-label="<?= $this->escape($this->t('core.auth.show_password')) ?>" style="cursor:pointer;"><i class="fa-solid fa-eye"></i></span>
+        </div>
     </div>
     <div class="mb-3">
         <label class="form-label" for="reset-confirm"><?= $this->escape($this->t('core.auth.reset.confirm_password')) ?></label>
-        <input type="password" class="form-control form-control-lg" id="reset-confirm" name="confirm"
-               autocomplete="new-password" required>
+        <div class="input-group">
+            <input type="password" class="form-control form-control-lg" id="reset-confirm" name="confirm"
+                   autocomplete="new-password" required>
+            <span class="input-group-text" data-tiger-pw-toggle role="button" tabindex="-1" aria-label="<?= $this->escape($this->t('core.auth.show_password')) ?>" style="cursor:pointer;"><i class="fa-solid fa-eye"></i></span>
+        </div>
     </div>
     <?php $rc = $this->formRecaptcha(); if ($rc): ?>
     <div class="mb-3 d-flex justify-content-center"><?= $rc ?></div>

library/Tiger/Version.php

@@ -9,5 +9,5 @@
 class Tiger_Version
 {
     /** Current Tiger Core version. Keep in lockstep with the git tag cut for a release. */
-    const VERSION = '1.29.0';
+    const VERSION = '1.30.0';
 }