Auto-generate 256-bit installation secret on first run using crypto/rand, print it exactly once to stdout, and store in SQLite for subsequent startups. Support SPAXEL_INSTALL_SECRET env var override. Expose via GET /api/auth/install-secret endpoint (admin session or first-run state). Derive per-node provisioning tokens via HMAC-SHA256(install_secret, node_mac). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| handler.go | ||
| handler_test.go | ||