localmodelroutex

LovroG05/localmodelroutex

Fork 0

Commit Graph

Author	SHA1	Message	Date
LovroG05	9d807a6cf1	feat: OIDC server-side login flow with confidential client Add /auth/login and /auth/callback handlers. The backend holds the client secret and exchanges the authorization code server-side; the browser never sees the secret. Redirect URI and post-login fragment destination are derived solely from GATEWAY_SERVER_PUBLIC_URL (required when OIDC is set) to prevent host-header injection.	2026-06-28 23:46:30 +02:00
LovroG05	6227a49992	feat: add React admin dashboard Tailwind v4 dark design (DM Sans/Mono, violet accent). Pages: Overview, Logs, API Keys, Providers, Models, Analytics, Routing, Settings. Auth gate uses localStorage token validated against /api/admin/providers. Vite builds to internal/web/dist which is embedded into the binary.	2026-06-28 23:15:28 +02:00
LovroG05	7d72606bb9	frontend	2026-06-27 17:13:07 +02:00

Author

SHA1

Message

Date

LovroG05

9d807a6cf1

feat: OIDC server-side login flow with confidential client

Add /auth/login and /auth/callback handlers. The backend holds the
client secret and exchanges the authorization code server-side;
the browser never sees the secret. Redirect URI and post-login
fragment destination are derived solely from GATEWAY_SERVER_PUBLIC_URL
(required when OIDC is set) to prevent host-header injection.

2026-06-28 23:46:30 +02:00

LovroG05

6227a49992

feat: add React admin dashboard

Tailwind v4 dark design (DM Sans/Mono, violet accent). Pages: Overview,
Logs, API Keys, Providers, Models, Analytics, Routing, Settings.
Auth gate uses localStorage token validated against /api/admin/providers.
Vite builds to internal/web/dist which is embedded into the binary.

2026-06-28 23:15:28 +02:00

LovroG05

7d72606bb9

frontend

2026-06-27 17:13:07 +02:00

3 Commits