0.3.25
-
Add workspace configurator password protection (06ff2b0)
Introduce a global configurator password and cookie-based access gating.- Add lib/workspaceAccess.ts to manage a signed, time-limited workspace access cookie and helper functions (enable check, verify, grant, clear).
- Require workspace access in API routes (token and workspace-config endpoints) and add access checks to workspace-auth route (gate-status, verify-access actions, and clear access on logout).
- Update configurator and auth UI to prompt for and verify the global password before allowing token operations, login/register, or guest access. Adds form fields and client flows to unlock the configurator.
- Update .env.example with environment variables for WORKSPACE_SESSION_SECRET, WORKSPACE_SESSION_SECURE, and ERDB_CONFIGURATOR_PASSWORD and guidance.
- Bump app version to 0.3.25 in package.json (and lockfile).
This change protects workspace configuration and token management behind an optional global password while preserving guest mode when unlocked.
Full Changelog: v0.3.24...v0.3.25