When EMERGENCY_TOKEN is set in .env, a Bearer token matching it grants admin access without going through Azure AD / MSAL. Useful when 2FA or SSO is unavailable. Token is compared in constant-time to prevent timing attacks. If EMERGENCY_TOKEN is empty (default), the feature is disabled. Frontend: small "Emergency access" link on login page opens a token input. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| core | ||
| data | ||
| prompts | ||
| server | ||
| .gitignore | ||
| hypercorn.toml | ||
| requirements.txt | ||
| run_server.py | ||