1ad8b130c7ad941eefd8692c76f79e2106a44ddc
Chat/memory/logs/models APIs were reachable without any auth even though the app is deployed publicly behind Caddy HTTPS; only the settings screen had a password. Add an optional SITE_PASSWORD-backed session cookie gate in front of everything (settings included, on top of its existing SETTINGS_PASSWORD), with a matching login screen on the frontend. Stays fully backward compatible: with SITE_PASSWORD unset the app behaves exactly as before. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Description
No description provided
578 KiB
Languages
Python
58.8%
Vue
24.1%
TypeScript
16.2%
Dockerfile
0.4%
PowerShell
0.3%
Other
0.1%