added multi user support, move api key to database

2026-08-01 13:16:54 +05:00
parent a7c5fe739a
commit 66073c7891
23 changed files with 2123 additions and 103 deletions
@@ -6,8 +6,9 @@ DB_PASSWORD=changeme
 DB_NAME=radius

 # --- API ---
-# Shared secret required in the X-API-Key header on every request.
-API_KEY=change-this-to-a-long-random-string
+# No shared API secret anymore. Auth is per-user: the API seeds a default
+# admin/admin login on first run (must change password on first sign-in), and
+# admins mint revocable X-API-Key values from the web UI for programmatic use.

 # Comma-separated CORS origins (use * only for trusted/dev networks)
 CORS_ORIGINS=*