Persist a per-install JWT signing secret instead of a compiled-in default.

Admin tokens were forgeable whenever JWT_SECRET was unset. Prefer the env var, otherwise write a random key to data/.jwt_secret.
2026-08-31 23:55:34 +00:00
parent 466d69c44c
commit 22844a2a67
6 changed files with 106 additions and 7 deletions
@@ -40,6 +40,7 @@ logs/
 *.sqlite-wal

 # Keys / secrets
+.jwt_secret
 keys.json
 *.pem
 *.key