Files
tbodt 9da9c11ef1 feat(api): magic token authentication from syncthing browse (#10810)
Syncthing's authentication options have seemed sort of lacking to me for
a while. I can choose between no authentication (and now the admin
interface is accessible to theoretically every website I visit), or
password authentication (why do I need a password? it's all on one
computer!). This PR adds magic tokens with which the `syncthing browse`
and `syncthing serve` commands can magically log you in.

I hope that adding this and refining it enough will make it eventually
possible to change the default from "zero auth" to "token auth only".

### Testing

Some unit tests, and manually tested using syncthing browser and
syncthing serve, both of which create a token when they open the
browser.

### Documentation

TODO

---------

Signed-off-by: tbodt <tbodt@tbodt.com>
2026-10-27 12:24:30 +01:00
..
2025-04-13 09:44:09 +02:00