Skip to content

v1.13.0 — GitHub-login auth for the backend

Choose a tag to compare

View all tags
@victorantos victorantos released this 26 Jul 09:57
· 32 commits to main since this release
v1.13.0
ee69f64

The admin's Feedback and Insights tabs now authenticate to your backend with the GitHub login you're already signed in with — no separate admin secret to create, paste, or rotate.

Pairs with plain-cms/backend's new GitHub-verify mode: set Admin:Repo = owner/name on the backend, and it authorizes any caller whose GitHub token has push access to that repo (checked live against the GitHub API). The tabs send auth.token automatically — no prompt.

  • Backward compatible: a manually-pasted token still wins if present (static-token backends keep working); an open backend just ignores the extra header.
  • Only admin/js/backend-data.js changed.

See the backend README's Admin auth section for the three modes (GitHub / static token / open) and the security note.

Assets 2
Loading