MarSeventh 18b2db1224 fix: WebDAV internal calls use dedicated API Token for authentication ...

- Add 'internal' token type to API Token system, hidden from the
  security settings token list
- When WebDAV is enabled, auto-create an internal API Token with
  list/upload/delete permissions, stored in WebDAV config
- When WebDAV is disabled, auto-delete the internal token
- WebDAV handler reads the internal token from config and sends it
  as Bearer auth; if missing, creates one on-the-fly as fallback
- Works across both Docker and Cloudflare deployments since the
  token is persisted in KV/D1, not in process memory

2026-05-01 20:27:37 +08:00

..

auth

fix: sessionCheck adminRequired should also consider password-only config

2026-04-18 16:23:20 +08:00

bing/wallpaper

目录树设置和体验优化

2026-03-01 11:25:39 +08:00

manage

fix: WebDAV internal calls use dedicated API Token for authentication

2026-05-01 20:27:37 +08:00

public

目录树设置和体验优化

2026-03-01 11:25:39 +08:00

_middleware.js

目录树设置和体验优化

2026-03-01 11:25:39 +08:00

channels.js

Enable third-party WebDAV storage without new runtime dependencies

2026-04-28 00:05:12 +08:00

directoryTree.js

fix: return explicit authType instead of null when auth is unconfigured

2026-04-18 15:28:01 +08:00

fetchRes.js

refactor: unify auth logic into authCore with authScope parameter

2026-04-18 13:24:53 +08:00

userConfig.js

目录树设置和体验优化

2026-03-01 11:25:39 +08:00