When EMERGENCY_TOKEN is set in .env, a Bearer token matching it grants admin access without going through Azure AD / MSAL. Useful when 2FA or SSO is unavailable. Token is compared in constant-time to prevent timing attacks. If EMERGENCY_TOKEN is empty (default), the feature is disabled. Frontend: small "Emergency access" link on login page opens a token input. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| api | ||
| auth | ||
| jobs | ||
| runners | ||
| sheets | ||
| ws | ||
| __init__.py | ||
| app.py | ||
| config_runtime.py | ||