Replaces Bearer-token-only auth on GUI routes with a proper browser login flow. Visiting /admin or /dashboard now redirects to /gui-login if no valid session exists. Submitting the OAUTH_PASSWORD sets a secure httpOnly session cookie (8h TTL). /gui-logout clears it. - /dashboard/status also accepts session cookie (for the dashboard JS to call back without needing a separate token) - API routes (/users/*, /keys/*) still require Bearer token as before - /gui-login, /gui-logout added as new public routes |
||
|---|---|---|
| .. | ||
| dashboard_routes.py | ||
| Dockerfile | ||
| gateway_proxy.py | ||
| gateway_proxy_fixed.py | ||
| gateway_proxy_patch.py | ||
| gateway_proxy_user_integration.py | ||
| INTEGRATION_INSTRUCTIONS.md | ||
| oauth_storage.py | ||
| openai_routes.py | ||
| openai_routes_fixed.py | ||
| user_dashboard_ui.py | ||
| user_management.py | ||
| user_routes.py | ||