Mert Kaya ec0cb4fecc fix(docker): stop handing the management token to unauthenticated clients ...

Nginx redirected GET / (and a token-less index page) to a URL carrying
CCR_WEB_AUTH_TOKEN, so anyone who could reach the published port got the
token from the Location header. The root now redirects to the page and
only passes on a ccr_web_token the caller already supplied. A generated
token is printed once to the container log, as Jupyter does.

2026-10-09 13:51:13 +03:00

..

architecture

Implement comprehensive application updates

2026-09-02 18:37:11 +08:00

e2e

Verify issue reproductions and close remaining regression gaps

2026-09-28 00:03:19 +08:00

system

fix(docker): stop handing the management token to unauthenticated clients

2026-10-09 13:51:13 +03:00