eric/bggpipe
1
0
Fork 0
Code Issues Pull Requests Releases 2 Activity

--lan key persists across restarts; stale tabs get a readable 403

Browse Source 
The key rotated on every server restart, stranding every phone that
held the previous cookie — during active development that guaranteed a
wall of refusals from stale polling tabs after each restart. The key
now lives in data/.lan_key (gitignored, 0600 — the Playwright-state
treatment for credential-adjacent files) and is reused across
restarts; delete the file to rotate. A keyless browser navigation now
gets a one-line HTML page saying what to do instead of raw JSON.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016jXZFSTZQKzAC8fqpWSz9g
This commit is contained in:
Eric Wagoner
2026-08-03 16:39:24 -04:00
co-authored by Claude Fable 5
parent 344a930a8a
commit f82489716a
7 changed files with 64 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitignore
+1
View File
@@ -1,6 +1,7 @@
# Secrets & credential-adjacent state
.env
*.storage_state.json
data/.lan_key
playwright/.auth/
storage_state.json