No description
Find a file
Claude 4454744cba
Add session-based auth to dashboard and API
- New HIY_ADMIN_USER / HIY_ADMIN_PASS env vars control access
- Login page at /login with redirect-after-login support
- Cookie-based sessions (HttpOnly, SameSite=Strict); cleared on restart
- Auth middleware applied to all routes except /webhook/:app_id (HMAC) and /login
- Auth is skipped when credentials are not configured (dev mode, warns at startup)
- Logout link in both dashboard nav bars
- Caddy admin port 2019 no longer published to the host in docker-compose

https://claude.ai/code/session_01FKCW3FDjNFj6jve4niMFXH
2026-03-20 13:45:16 +00:00
builder Fix Caddy route registration: discover server name dynamically 2026-03-20 13:34:21 +00:00
docs Replace Cloudflare DNS challenge with standard Let's Encrypt HTTP-01 2026-03-20 11:41:40 +00:00
infra Add session-based auth to dashboard and API 2026-03-20 13:45:16 +00:00
proxy Add session-based auth to dashboard and API 2026-03-20 13:45:16 +00:00
server Add session-based auth to dashboard and API 2026-03-20 13:45:16 +00:00
.env.example Add session-based auth to dashboard and API 2026-03-20 13:45:16 +00:00
.gitattributes Add .gitattributes: force LF line endings for shell scripts 2026-03-19 09:40:26 +00:00
.gitignore Add .gitignore, remove target/ from tracking 2026-03-19 08:26:07 +00:00
Cargo.lock M1: Rust control plane, builder, dashboard, and infra 2026-03-19 08:25:59 +00:00
Cargo.toml M1: Rust control plane, builder, dashboard, and infra 2026-03-19 08:25:59 +00:00
plan.md Add MVP plan for self-hosted Heroku clone on Raspberry Pi 2026-03-19 07:38:17 +00:00