Chat/memory/logs/models APIs were reachable without any auth even though the app is deployed publicly behind Caddy HTTPS; only the settings screen had a password. Add an optional SITE_PASSWORD-backed session cookie gate in front of everything (settings included, on top of its existing SETTINGS_PASSWORD), with a matching login screen on the frontend. Stays fully backward compatible: with SITE_PASSWORD unset the app behaves exactly as before. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
18 lines
345 B
JSON
18 lines
345 B
JSON
{
|
|
"version": "0.0.1",
|
|
"configurations": [
|
|
{
|
|
"name": "frontend-dev",
|
|
"runtimeExecutable": "npm",
|
|
"runtimeArgs": ["--prefix", "frontend", "run", "dev"],
|
|
"port": 5173
|
|
},
|
|
{
|
|
"name": "backend-dev",
|
|
"runtimeExecutable": "backend\\run_dev.cmd",
|
|
"runtimeArgs": [],
|
|
"port": 8000
|
|
}
|
|
]
|
|
}
|