api: allow auth delegation

1 files changed, 4 insertions, 1 deletions

diff --git a/docs/trust.md b/docs/trust.md
index 521a175..dc80045 100644
--- a/docs/trust.md
+++ b/docs/trust.md
@@ -34,7 +34,10 @@ secret like the swarm key: readable by its owner only (a node warns otherwise; a
 it creates is).
 
 **The HTTP API.** Every endpoint but the API description needs a user from
-`--htpasswd`. It listens on `127.0.0.1:3000` by default (`--bind-addr`) and speaks
+`--htpasswd`, or one a reverse proxy names (`--user-header`): the node believes that
+header from `--trusted-proxies` alone, but from those blindly, so whoever can send
+requests from such an address (another user of the same host, with the default
+loopback addresses) can be any user. It listens on `127.0.0.1:3000` by default (`--bind-addr`) and speaks
 plain HTTP: to expose it, put a TLS proxy in front. All users may read and write user
 data and use the admin endpoints (remakes, forgetting peers, exports, log filters).
 There are no read-only users: whoever may open the dashboard may also edit and delete