When EMERGENCY_TOKEN is set in .env, a Bearer token matching it grants admin access without going through Azure AD / MSAL. Useful when 2FA or SSO is unavailable. Token is compared in constant-time to prevent timing attacks. If EMERGENCY_TOKEN is empty (default), the feature is disabled. Frontend: small "Emergency access" link on login page opens a token input. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| middleware.py | ||
| msal_auth.py | ||
| user_store.py | ||