mirror of
https://github.com/syncthing/syncthing.git
synced 2026-10-29 06:28:32 -04:00
Syncthing's authentication options have seemed sort of lacking to me for a while. I can choose between no authentication (and now the admin interface is accessible to theoretically every website I visit), or password authentication (why do I need a password? it's all on one computer!). This PR adds magic tokens with which the `syncthing browse` and `syncthing serve` commands can magically log you in. I hope that adding this and refining it enough will make it eventually possible to change the default from "zero auth" to "token auth only". ### Testing Some unit tests, and manually tested using syncthing browser and syncthing serve, both of which create a token when they open the browser. ### Documentation TODO --------- Signed-off-by: tbodt <tbodt@tbodt.com>