BREAKING CHANGE: API authentication is now always required. The
PINCHFLAT_API_TOKEN env var is no longer used. Instead, tokens are
stored in the database and managed via Settings → API Access.
Changes:
- Add api_token column to settings table (migration)
- ApiAuthPlug reads from DB; returns 401 if no token configured
- Add API Access section to Settings page with generate/regenerate/revoke
- Add POST /settings/generate_api_token and /settings/revoke_api_token
- Remove api_token from config.exs and runtime.exs
- Update all API controller tests to set auth token in setup
- Update auth plug tests for mandatory authentication
- 1008 tests pass, zero warnings
* Added sleep interval to settings
* Added new sleep setting to yt-dlp runner and added tests
* Added setting for form; updated setting name
* Updated form label
* Prevented saving/updating of media items if being throttled by youtube
* Added the bot message to the list of non-retryable errors
* Fixed typo
* Started adding youtube API for fast indexing
* Hooked youtube API into fast indexing
* Added youtube_api_key to settings
* Added youtube api key to settings UI
* Added tests
* Refactored the youtube api module
* More refactor
* Changed editing mode name from basic to standard
* [WIP] started on copy changes
* Updated copy
* [WIP] started on codec parser
* Added codec preferences to settings model
* [WIP] added basic codec preference fields to settings form
* Hooked up the backend portion of the codec preference work
* Added codec settings to frontend
* Ensured you can remove codec data
hermes-agent
Kieran
rebel onion
Andrew Shaffer