cdnutter/canon
1
0 Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add an optional site password for visitors

Browse Source 
Settings → Privacy can set a password for the whole public site. Until a
visitor enters it, every public page shows a prompt over a blurred
made-up page, and images, preview clips and exports return 401; nothing
real is sent. Unlocking sets a 90-day cookie derived from the password
hash, so changing the password asks everyone again. The owner is never
asked while signed in. Wrong guesses are rate limited, and a locked site
sends noindex.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
cdnutterandClaude Opus 5.5 committed 2026-09-30 15:47:17 -07:00
1 parent 568162202b
commit 06097d3bca
11 files changed
+302 -9
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

internal/store/settings.go
+3 -2
View File
@@ -20,8 +20,9 @@ const (
SettingShowPreviews = "show_previews"
SettingMusicProvider = "music_provider"
SettingTVProvider = "tv_provider"
SettingBackupCron = "backup_cron" // cron expression, or "off"
SettingBackupKeep = "backup_keep" // how many scheduled backups to keep
SettingSitePassword = "site_password" // bcrypt hash; empty = public
SettingBackupCron = "backup_cron" // cron expression, or "off"
SettingBackupKeep = "backup_keep" // how many scheduled backups to keep
SettingTMDBKey = "tmdb_api_key"
SettingTVDBKey = "tvdb_api_key"