teamspeak-music-bot

0 Fork 0

mirror of https://github.com/ZHANGTIANYAO1/teamspeak-music-bot.git synced 2026-10-04 05:52:50 +08:00

Files

T

senlinjun aab8a004ae feat(web): add API-key authentication for the REST API

- api_keys table + hashed key store (src/data/api-keys.ts), tsmb_-prefixed
  plaintext shown once, per-user cap of 20, lastUsedAt tracking
- requireAuth accepts Authorization: Bearer / X-API-Key headers as an
  alternative to the session cookie; key inherits the owner user's
  role/capabilities/bot scope
- csrf origin check skipped for key-only requests (no ambient credentials);
  requests that also carry the session cookie stay gated
- /api/keys management endpoints (session-only, guests excluded, keys
  themselves rejected) with audit logging
- user deletion / password reset cascade-revoke the user's keys
- Settings page: API key management section (create/copy-once/revoke)
- docs: README section + full endpoint reference in docs/API.md

2026-09-29 21:51:43 +08:00

public

feat(web): 给 WebUI 加站点图标与 Web App Manifest

2026-08-09 15:06:44 +08:00

src

feat(web): add API-key authentication for the REST API

2026-09-29 21:51:43 +08:00

index.html

feat(web): 给 WebUI 加站点图标与 Web App Manifest

2026-08-09 15:06:44 +08:00

package-lock.json

fix #37