Disable shelf in production or protect with password

[jhomarolo]

Does it make sense to lock the shelf route in some native way?

Optionally display it only when the environment is not production or put some password to display it?

[italojs]

It is a infraestructure responsability, I'm not sure if we need to bring it for herbs2shelf
buuut it is a super short feature, so we colud to add an env like "LOCKIN_ENV"
when I set the LOCKIN_ENV=production, we could to generate the HTML onlyif(process.env.NODE_ENV!==process.env.LOCKIN_ENV) else it we could to return an herbs error page HTML

[italojs]

Another option is to create some auth system like swagger https://swagger.io/docs/specification/authentication/