nfel/resume-reformer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Replace basic auth with session login

Browse Source
This commit is contained in:
nfel
2026-08-03 00:25:18 +03:30
parent f5f54bac66
commit 81d816ae54
10 changed files with 501 additions and 69 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+7 -6
View File
@@ -42,13 +42,14 @@ uv run python -c "import secrets; print(secrets.token_urlsafe(32))"
Authentication covers the Signal interface, APIs, downloads, static files, and the
bundled Oh My CV editor. The server fails closed with HTTP 503 when either credential is
missing or still uses the placeholder value. Your browser will display its standard
username/password prompt. Oh My CV offline caching is disabled so its app shell cannot
bypass the server authentication gate.
missing or still uses the placeholder value. The login page creates a signed, HttpOnly,
SameSite session cookie that expires after 12 hours, and both frontends provide a sign-out
button. Oh My CV offline caching is disabled so its app shell cannot bypass the server
authentication gate.
HTTP Basic authentication protects credentials only when the connection uses HTTPS.
Binding to localhost is suitable for personal use; if the app is reachable from another
machine, place it behind an HTTPS reverse proxy and do not expose the plain HTTP port.
Binding to localhost is suitable for personal use. If the app is reachable from another
machine, place it behind an HTTPS reverse proxy, set
`RESUME_AGENT_SECURE_COOKIES=true`, and do not expose the plain HTTP port.
For an OpenAI-compatible provider, configure the endpoint without putting credentials
in the repository: