Files
jcoffey-dev 94202319dc Editor foundations (E0): sign in with the git platform, browse sites
cl-cms editor is a separate server with an embedded React + TypeScript interface. People sign in with their git platform over OAuth with PKCE (Gitea, Forgejo, GitHub, GitLab, Bitbucket); the session is an AES-GCM sealed cookie, so the editor stores no accounts. Each person's checkout of a site is made with their own token, then built and checked; the interface lists their sites, a site's pages by collection, drafts, reviews and check results, and shows a page beside its live preview. The editor serves itself with a strict CSP, guards state changes against CSRF, and confines page reads to content/.
2026-10-10 15:04:51 -07:00

0 lines
0 B
Plaintext