admin/clientflow_backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Harden admin authentication behind trusted proxy

Browse Source
This commit is contained in:
plx
2026-07-30 22:38:48 +00:00
parent f1b9a2022b
commit c82982a605
7 changed files with 273 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
.env.example
View File

@@ -67,7 +67,11 @@ PACKLINK_SENDER_EMAIL=
PACKLINK_FALLBACK_PHONE=
PACKLINK_FALLBACK_EMAIL=
# Admin interno: configure atrás de proxy/auth se exposto fora da rede local
# Admin interno: proxy (header autenticado), token, ou local (apenas loopback)
CLIENTFLOW_ADMIN_AUTH_MODE=proxy
# Em proxy mode, o reverse proxy deve substituir (não apenas encaminhar)
# X-ClientFlow-Admin-User pelo utilizador autenticado.
# Obrigatório apenas quando CLIENTFLOW_ADMIN_AUTH_MODE=token.
CLIENTFLOW_ADMIN_TOKEN=
# Jasmin API validada em testes reais