Skip to content

feat(auth): generate a random WebSocket secret by default - #106

Draft
jourdain wants to merge 1 commit into
masterfrom
generate-token-by-default
Draft

jourdain wants to merge 1 commit into
masterfrom
generate-token-by-default

Conversation

@jourdain

Copy link
Copy Markdown
Collaborator

When neither --authKey nor --authKeyFile is provided, generate a random secret instead of relying on wslink's well known default. The secret is added as a '?secret=...' URL parameter to the printed URLs, the automatically opened browser and the desktop window.

  • Expose Server.url_query_params for code building client URLs
  • Add --hide-secret to keep the secret out of the console output
  • Document WebSocket authentication in README and docs

When neither --authKey nor --authKeyFile is provided, generate a random
secret instead of relying on wslink's well known default. The secret is
added as a '?secret=...' URL parameter to the printed URLs, the
automatically opened browser and the desktop window.

- Expose Server.url_query_params for code building client URLs
- Add --hide-secret to keep the secret out of the console output
- Document WebSocket authentication in README and docs
@jourdain
jourdain marked this pull request as draft November 12, 2026 22:45
@jourdain
jourdain requested a review from alesgenova November 12, 2026 22:46
@jourdain

Copy link
Copy Markdown
Collaborator Author

That imply fix in trame-client and possible breaking behavior for some... Hence the draft for now.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant