papery markdown notepad
- TypeScript 59%
- Python 24.3%
- CSS 4.9%
- HCL 4.3%
- JavaScript 3.5%
- Other 4%
Tamjid Rahman
8c7c66ffbd
All checks were successful
Deploy note / deploy (push) Successful in 27s
Adds Bearer-token auth path so the Expo app can hit the API without
following an interactive Authentik redirect:
- backend.py: `mobile_tokens` table (SHA-256 hashed); current_user()
accepts X-Authentik-Username OR Authorization: Bearer; /api/mobile/tokens
list/mint/revoke endpoints, mint requires forward_auth (a stolen token
can't mint more); middleware skips group check when Bearer is present
- note.nomad: second `note-api` service for api.note.{basha.cloud,tamjid.io}
without meta.auth=forward — Caddy template renders a vhost without
forward_auth so Bearer-authed requests reach the backend
- web: MobileTokensDialog (mint, show-once, revoke) wired into the header
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
||
|---|---|---|
| .forgejo/workflows | ||
| frontend | ||
| .gitignore | ||
| backend.py | ||
| Dockerfile | ||
| note.nomad | ||