proyectos/llama-link
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Replace token-based admin auth with JWT session authentication
CI / test (push) Failing after 12m45s
Details

Browse Source 
- Add AdminUser model (bcrypt hashed passwords) and admin_users table
- Add AdminJWTService for HS256 JWT sessions (24h TTL)
- Add AdminSessionAuth middleware for /api/v1/admin/* routes
- Add admin handlers: login, logout, me, change-password, users CRUD
- Keys and model management routes now require admin JWT session
- Remove ADMIN_TOKEN, add ADMIN_USERNAME, ADMIN_PASSWORD env vars
- Update frontend: username/password login, admin_session storage, AdminUsers CRUD view
This commit is contained in:
Daniel Arroyo
2026-07-31 17:15:29 -04:00
parent b18d4bd146
commit 4d34c6d31a
21 changed files with 828 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env.example
+3 -1
View File
@@ -20,7 +20,9 @@ RATE_LIMIT_PER_MINUTE=60
RATE_LIMIT_STORAGE=memory
# RATE_LIMIT_REDIS_URL=redis://localhost:6379/0
ADMIN_TOKEN=change-me-in-production
ADMIN_USERNAME=admin
ADMIN_PASSWORD=change-me-in-production
ADMIN_SESSION_TTL=24h
LOG_LEVEL=info
LOG_FORMAT=json