Public/Live_RC
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(auth): add optional admin PIN for all API writes

Browse Source 
Off by default. Once a PIN is set in Settings -> System & backup, every non-GET /api/*
request (plus GET /api/ammc/config) needs a signed 30-day HttpOnly cookie, which also
closes the unauthenticated /api/update/run restart trigger. A 401 opens a PIN dialog
and the pending save is retried after login. Reads stay open because the public overlay
hydrates through GET /api/state. Optional RC_ADMIN_ALLOWED_CIDRS restricts the same
routes by client address.

The PIN hash and signing secret live in data/, outside the app_state blob, so they
never leak through GET /api/state, exports or backups.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
larssand
2026-09-24 22:14:58 +02:00
parent bcd6e12a6c
commit 9016ce02e4
20 changed files with 627 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/styles.css
View File

@@ -4416,3 +4416,15 @@ select:focus {
.decoder-diagnostics-cards { display: grid; grid-template-columns: repeat(auto-fit, minmax(min(100%, 280px), 1fr)); gap: 12px; }
.decoder-diagnostics-cards pre, .decoder-diagnostics-log { white-space: pre-wrap; overflow-wrap: anywhere; font-size: 12px; line-height: 1.6; }
.decoder-diagnostics-log { max-height: 240px; overflow: auto; }
.auth-dialog {
max-width: 420px;
padding: 20px 22px;
display: grid;
gap: 12px;
}
.auth-dialog h3,
.auth-dialog p {
margin: 0;
}