Add SQLite storage and JWT auth with MFA/RBAC for the admin API - #123

Merged

GyulyVGC merged 12 commits into

NullNet-ai:mainfrom

antoncxx:investigate/sqlite-storage

Jul 27, 2026

Commits on Jul 24, 2026

Commits on Jul 25, 2026

server: add JWT auth with optional TOTP MFA and role/scope authorization
antoncxx
committed
docs: document new auth env vars and DATABASE_URL
antoncxx
committed
server: fix build.rs skipping npm install when node_modules is stale
antoncxx
committed
server: validate username/password on user create and update
antoncxx
committed
server: require current TOTP code to re-enroll an already-confirmed MFA secret
antoncxx
committed
server: require current password to change your own password
antoncxx
committed
server: require current mfa code to reset your own mfa
antoncxx
committed
server: apply login lockout to the mfa verification step too
antoncxx
committed
server: prevent demoting the last remaining admin
antoncxx
committed
ui: split password change and mfa reset into their own dialogs
antoncxx
committed