4 Commits

Author	SHA1	Message	Date
Pascal André	034cb5dea9	fix(tauri): isolate desktop auth cookies per app	2026-03-14 23:31:46 +01:00
Shantur Rathore	338a88fb5a	feat(server): add HTTPS with self-signed certs ... Default to HTTPS with optional loopback HTTP, generate/rotate self-signed certs via node-forge, and surface Local/Remote connection URLs. Update /api/meta schema, UI remote access overlay, and desktop shells to follow the new startup output.	2026-02-08 15:48:00 +00:00
Shantur Rathore	afa7243eab	feat(server): allow skipping internal auth ... Add --dangerously-skip-auth / CODENOMAD_SKIP_AUTH for trusted-perimeter deployments so users behind SSO/VPN don't need a second login.	2026-01-29 20:38:05 +00:00
Shantur Rathore	40634138bc	feat(server): add authenticated remote access and desktop bootstrap ... Adds cookie-based login with a bootstrap token flow for desktop apps, secures OpenCode instance traffic with per-instance Basic auth, and updates UI/plugin clients to use credentials.	2026-01-14 18:18:14 +00:00