gate ideas.agentabrams.com by default (admin/DW2024!), was public since 07-23

c788fcd46b397c859c8bd9d80f98cd1e52c9f706 · 2026-07-25 10:13:47 -0700 · Steve Abrams

Flip BASIC_AUTH default from '' (public) to the unified admin credential so the
Slack idea board matches every other internal DW app. Public path is Cloudflare
tunnel -> :9820, so gating the app itself gates the public URL. Set BASIC_AUTH=''
to make it public again.

Files touched

M server.js

Diff

commit c788fcd46b397c859c8bd9d80f98cd1e52c9f706
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Sat Jul 25 10:13:47 2026 -0700

    gate ideas.agentabrams.com by default (admin/DW2024!), was public since 07-23
    
    Flip BASIC_AUTH default from '' (public) to the unified admin credential so the
    Slack idea board matches every other internal DW app. Public path is Cloudflare
    tunnel -> :9820, so gating the app itself gates the public URL. Set BASIC_AUTH=''
    to make it public again.
---
 server.js | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/server.js b/server.js
index e201be0..b91f8f4 100644
--- a/server.js
+++ b/server.js
@@ -19,9 +19,10 @@ const STEVE = ENV.STEVE_USER_ID;
 const PORT = parseInt(process.env.PORT || '9820', 10);
 const OLLAMA = process.env.OLLAMA_URL || 'http://localhost:11434';
 const MODEL = process.env.OLLAMA_MODEL || 'hermes3:8b';
-// Basic auth — internal Slack-feed board, gated when public at ideas.agentabrams.com.
-// Override with BASIC_AUTH="user:pass"; set BASIC_AUTH="" to disable (localhost-only use).
-const BASIC_AUTH = process.env.BASIC_AUTH === undefined ? '' : process.env.BASIC_AUTH; // '' = public, anyone allowed in (Steve 2026-07-23)
+// Basic auth — internal Slack-feed board, gated by default at ideas.agentabrams.com
+// like every other internal DW app (unified admin/DW2024!). Override the credential
+// with BASIC_AUTH="user:pass"; set BASIC_AUTH="" to make it public again (Steve's call).
+const BASIC_AUTH = process.env.BASIC_AUTH === undefined ? 'admin:DW2024!' : process.env.BASIC_AUTH; // gated-by-default (Steve 2026-07-25, was public since 07-23)
 function authed(req) {
   if (!BASIC_AUTH) return true; // auth disabled
   const h = req.headers['authorization'] || '';

← 1ad54c9 Harden /api/build against terminal-spawn storms · back to Slack Idea Board · (newest)