Rene Fichtmueller 53e9c3e899 feat: password-protected login page + API auth middleware ...

- POST /api/auth/login: HMAC-SHA256 signed 7-day token, password from DASHBOARD_PASSWORD env
- GET /api/auth/verify: stateless token validation
- requireAuth middleware applied to all /api/* routes (except /api/health + /api/auth)
- /dashboard/login.html: dark TIP-themed login page with show/hide password toggle
- index.html: auth guard redirect to login + Authorization header on all api() calls
- No secrets in code — password stored in .env only

2026-04-02 07:31:15 +02:00

..

src

feat: password-protected login page + API auth middleware

2026-04-02 07:31:15 +02:00

package.json

feat: TIP Phase 0+1 — monorepo, DB schema, API, scraper engine

2026-03-27 16:27:31 +13:00

tsconfig.json

feat: TIP Phase 0+1 — monorepo, DB schema, API, scraper engine

2026-03-27 16:27:31 +13:00