kanna-code 0.33.0 → 0.33.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/README.md +1 -1
  2. package/dist/client/assets/{index-ab3JkqZ2.js → index-BLUOUI0z.js} +2 -2
  3. package/dist/client/assets/{index-BYzAMpzV.css → index-FQ1dOuTJ.css} +1 -1
  4. package/dist/client/index.html +2 -2
  5. package/package.json +1 -1
  6. package/src/server/auth.test.ts +21 -31
  7. package/src/server/auth.ts +7 -142
  8. package/src/server/server.ts +3 -3
package/README.md CHANGED
@@ -145,7 +145,7 @@ bun run dev --password my-secret
145
145
  ```
146
146
 
147
147
  Kanna verifies the password once, then sets a browser-session cookie. The password itself is not stored in the browser.
148
- When password protection is enabled, the backend requires authentication for API routes, `/health`, and `/ws`, and the production server redirects unauthenticated browser requests to a login screen.
148
+ When password protection is enabled, the backend requires authentication for API routes, `/health`, and `/ws`. The SPA shell still loads, and the same in-app password screen is used in both dev and production.
149
149
 
150
150
  ### Public share link
151
151