tonym
b5a136ed41
Add WebAuthn passkey auth (dormant behind AUTH_ENABLED)
- auth.py: passkey credential store (public keys only) + env-driven RP config.
- auth_routes.py: /login, /enroll, /logout + /auth/* ceremony endpoints +
before_request gate (no-op unless AUTH_ENABLED=1).
- login/enroll pages (SimpleWebAuthn browser); settings page lists + removes
enrolled devices. requirements: webauthn==2.7.1.
- Deploys OFF: no behavior change until enabled after the hostname/cert exist.
Closes groundwork for #5.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-06 18:03:09 -05:00
..
2026-06-06 14:22:57 -05:00
2026-06-06 16:55:25 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 16:55:25 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 18:03:09 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 18:03:09 -05:00
2026-06-06 16:44:58 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 18:03:09 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 14:22:57 -05:00
2026-06-06 14:22:57 -05:00