dnoulet/go-tell
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

changing layout

Browse source
This commit is contained in:
Daniel Noulet 2026-09-19 16:51:24 +02:00
parent b1c6aa659b
commit 0ae2dc3888
9 changed files with 72 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

14
ui/app/README.md
View file

@ -3,10 +3,16 @@
This Vite/React app lives in `ui/app` and is intentionally independent of the Go backend. Run
`npm install`, then `npm run dev` or `npm run build`.
There is no sign-in screen. Content is public and read-only for anonymous visitors; the Edit
button appears only when the backend reports `canEdit: true`, which happens when the upstream SSO
proxy asserted the owner's identity on the request. `/api/auth/session` returns
`{ "authenticated": bool, "canEdit": bool }` and never creates a session.
There is no sign-in screen and no session is ever created. Content is public and read-only for
anonymous visitors; the Edit button appears only when the backend reports `canEdit: true`, which
happens when the upstream SSO proxy asserted the owner's identity on the request.
`/api/auth/session` returns `{ "authenticated": bool, "canEdit": bool }`.
Anonymous visitors also see a **Sign in with Google** button in the header. It redirects the
browser to `VITE_SSO_LOGIN_URL` (with the current page passed as `rd`), where the identity
provider authenticates you and sends you back with the identity header set. Leave
`VITE_SSO_LOGIN_URL` empty to hide the button — useful when the proxy gates the whole app
automatically instead. The app never performs an OAuth exchange, so it holds no client secret.
The API defaults to same-origin `/api/auth/session` and `/api/content`. Set `VITE_API_BASE_URL`
for a separate backend, or override the endpoint paths with `VITE_SESSION_ENDPOINT` and