diff options
| author | tv <tv@krebsco.de> | 2026-11-07 22:35:09 +0100 |
|---|---|---|
| committer | tv <tv@krebsco.de> | 2026-11-07 22:35:09 +0100 |
| commit | 107e15335314f9ccdf57b297de45326f45571888 (patch) | |
| tree | dae44bcae0b52022ce82996a32d9249779023d83 /docs/access.md | |
| parent | 6fbcb1d3ad9360d7a05f1dcece383cfb095ba1d4 (diff) | |
dashboard: subscribed nodes' messages as dots
The page reads a subscribed node's message counts from it too, and
draws them as dots on the map, as this node's own.
Auth plan M3 (live data from every reachable node).
Diffstat (limited to 'docs/access.md')
| -rw-r--r-- | docs/access.md | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/docs/access.md b/docs/access.md index 71aebea..e8f9893 100644 --- a/docs/access.md +++ b/docs/access.md @@ -106,8 +106,9 @@ curl -H "Authorization: Bearer ct1.…" http://other-node:3000/store `GET /auth/whoami` says who a request's user is, how it proved it, and what it may do. Pages of other origins, the dashboards of other members, may call a node with a token: -its own links (`/admin/dashboard/links/own`, and its events), `/auth/refresh` and -`/auth/whoami`, nothing else. A node allows the origins of the dashboards its member +its own links (`/admin/dashboard/links/own`, and its events) and traffic +(`/admin/dashboard/traffic/own/events`), `/auth/refresh` and `/auth/whoami`, nothing +else. A node allows the origins of the dashboards its member list names (`--dashboard-url`) and those of `--cors-origins`; without credentials (no cookie or password crosses origins: the page sends its token). |