Document a concrete auth design for the deferred permissions work

Planning only, no code yet. Per-role PIN codes (not named accounts - a shared
trackside laptop doesn't want individual logins), an optional IP/host allowlist as a
separate complementary layer, and 2FA deliberately left out unless a club actually
exposes the server past their own LAN. Flags one open question for the user to decide
before implementation starts: auth off by default vs. on by default with an
auto-generated Admin PIN on first run.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
larssand
2026-09-12 20:28:07 +02:00
parent ae445097b0
commit bcd6e12a6c
4 changed files with 20 additions and 3 deletions

4
package-lock.json generated
View File

@@ -1,12 +1,12 @@
{
"name": "rc-racecore",
"version": "1.21.1",
"version": "1.21.2",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "rc-racecore",
"version": "1.21.1",
"version": "1.21.2",
"hasInstallScript": true,
"dependencies": {
"better-sqlite3": "^12.11.1",