mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-09-06 08:18:58 +00:00
Ed25519 asymmetric JWT: arc-web signs with private key, arc-attractor verifies with public key. Adds AuthenticatedService axum extractor to all routes, jose dependency for TypeScript signing, and key generation script. Startup behavior: ARC_JWT_PUBLIC_KEY set → enforce JWT auth; not set + ARC_INSECURE_DISABLE_AUTHENTICATION=true → allow unauthenticated; neither → refuse to start with clear error. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
13 lines
No EOL
339 B
Text
13 lines
No EOL
339 B
Text
export ANTHROPIC_API_KEY=
|
|
export BRAVE_SEARCH_API_KEY=
|
|
export DAYTONA_API_KEY=
|
|
export GEMINI_API_KEY=
|
|
export INCEPTION_API_KEY=
|
|
export KIMI_API_KEY=
|
|
export MINIMAX_API_KEY=
|
|
export OPENAI_API_KEY=
|
|
export ZAI_API_KEY=
|
|
export ARC_JWT_PRIVATE_KEY=
|
|
export ARC_JWT_PUBLIC_KEY=
|
|
export ARC_API_BASE_URL=
|
|
export ARC_INSECURE_DISABLE_AUTHENTICATION= |