picoclaw/web/backend/middleware
wenjie 4b76196e2c refactor(web): secure Pico websocket access behind launcher auth
- stop exposing the raw Pico token to the frontend
- add /api/pico/info for non-secret Pico connection metadata
- proxy /pico/ws through the launcher with same-origin and dashboard auth checks
- inject the upstream Pico websocket protocol server-side
- update frontend chat connection flow and Vite websocket proxy path
- refresh related docs and tests
2026-04-20 10:11:03 +08:00
..
access_control.go feat(web): migrate launcher to modular web frontend/backend and improve management UX (#1275) 2026-03-09 19:42:03 +08:00
access_control_test.go feat(web): migrate launcher to modular web frontend/backend and improve management UX (#1275) 2026-03-09 19:42:03 +08:00
launcher_dashboard_auth.go refactor(web): secure Pico websocket access behind launcher auth 2026-04-20 10:11:03 +08:00
launcher_dashboard_auth_test.go refactor(web): secure Pico websocket access behind launcher auth 2026-04-20 10:11:03 +08:00
middleware.go unify all panic event to panic log file (#2250) 2026-04-01 23:26:49 +08:00
referrer_policy.go feat(web): protect launcher dashboard with token and SPA login (#1953) 2026-03-29 13:11:43 +08:00