Cite this repository
Push Tracker
Files 15 items
|
A
0b362bbd0b
/api/export returns every subscriber's Ki/OPc and was reachable unauthenticated by any WiFi client (and directly, since Flask binds 0.0.0.0). It now requires server.admin_token via the X-Admin-Token header (constant-time compare) and is disabled entirely when no token is configured. Add admin_token to config.yaml.example. Tests: +2 (disabled/401/200); 86 pass. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
|||
|---|---|---|---|
| android | |||
| configs | |||
| plan | |||
| portal | |||
| scripts | |||
| server | |||
| systemd | |||
| tests | |||
| .gitattributes | |||
| .gitignore | |||
| CHANGELOG.md | |||
| claude.md | |||
| config.yaml.example | |||
| README.md | |||
| requirements.txt | |||