imSp4rky 5796729bf3 feat(remote): accept serve.users keys in api-only mode and add client auth-header fallback ...

api-only/remote-only serve now authenticates every serve.users key (str-coerced), not just api_secret, so per-user service allowlists apply. RemoteClient tries X-Secret-Key then X-Api-Key on 401 (sticky winner); remote_services.auth_headers prepends extra header names to the defaults.

2026-08-12 17:58:55 -06:00

..

api

docs: split configuration reference into per-area pages

2026-08-04 10:25:32 -06:00

configuration

feat(remote): accept serve.users keys in api-only mode and add client auth-header fallback

2026-08-12 17:58:55 -06:00

configuration.md

docs: split configuration reference into per-area pages

2026-08-04 10:25:32 -06:00