helix-proxy

Author	SHA1	Message	Date
s1d3sw1ped_bot	13070a275d	Lock bootstrap admin token until password is changed. Format / gofmt (push) Successful in 7s Details CI / Build (push) Successful in 14s Details Format / gofmt (pull_request) Successful in 7s Details CI / Build (pull_request) Successful in 13s Details CI / Go Tests (push) Successful in 50s Details CI / Go Tests (pull_request) Successful in 48s Details Closes #2: bootstrap JWTs cannot mutate admin APIs except change-password, production requires ADMIN_PASSWORD on first boot, admin binds loopback.	2026-09-01 03:54:09 +00:00
s1d3sw1ped_bot	22844a2a67	Persist a per-install JWT signing secret instead of a compiled-in default. Format / gofmt (push) Successful in 8s Details Format / gofmt (pull_request) Successful in 9s Details CI / Build (push) Successful in 24s Details CI / Build (pull_request) Successful in 25s Details CI / Go Tests (pull_request) Successful in 39s Details CI / Go Tests (push) Successful in 40s Details Admin tokens were forgeable whenever JWT_SECRET was unset. Prefer the env var, otherwise write a random key to data/.jwt_secret.	2026-08-31 23:55:34 +00:00
s1d3sw1ped	1cc94f2c99	initial commit Format / gofmt (push) Failing after 27s Details CI / Build (push) Successful in 51s Details CI / Go Tests (push) Failing after 21s Details	2026-06-06 07:54:44 -05:00