Auth + CSRF before any UI write actions #2

New Issue

2026-06-21T16:21:06Z

Kessinen commented

2026-06-21 16:21:06 +00:00

Deferred: running on a secured, isolated network, so the read-only dashboard is fine without auth for now.

Before adding write actions (settings save, retry), add at least:

a shared-secret/token or basic auth on mutating endpoints
CSRF protection on state-changing requests
guidance not to expose :8080 publicly without this

Soft blocker for the mutation parts of the settings-UI and retry issues.

Deferred: running on a secured, isolated network, so the read-only dashboard is fine without auth for now. Before adding write actions (settings save, retry), add at least: - a shared-secret/token or basic auth on mutating endpoints - CSRF protection on state-changing requests - guidance not to expose :8080 publicly without this Soft blocker for the mutation parts of the settings-UI and retry issues.

Kessinen added the security backlog labels 2026-06-21 16:21:06 +00:00

Kessinen referenced this issue

2026-06-21 16:41:20 +00:00

Settings UI: move tunables from config to a DB-backed settings page #1

Kessinen referenced this issue from a commit

2026-06-21 16:53:59 +00:00

add: DB-backed settings UI for live-editable tunables

Kessinen referenced this issue

2026-06-21 17:22:46 +00:00

Pause/resume the active encode via SIGSTOP/SIGCONT #10

Kessinen referenced this issue

2026-06-21 17:26:25 +00:00