@sparkelf/dsh-patch-browser-auth-mode
v0.2.0-rc.26
Published
Data-only exact official-source patch adding profile-selected browser authentication policy
Readme
@sparkelf/dsh-patch-browser-auth-mode
English | 中文
该data-only package为official Connection增加唯一显式browserAuthentication: required | disabled策略。required保持official default,保留process-token exchange、signed cookie与401 response。disabled不创建launch token或signing record,打印clean Web URL,接受index requests,并在独立Host/Origin trust fence通过后把Host API requests视为authenticated。
Plus选择disabled,因为其accepted local Web workflow优先保证直接访问,不保留browser identity。该选择会把包含Shell、files与Sessions在内的完整Host API开放给所有能访问accepted authority的进程,并非只影响DataOps。shipped CLI仍绑定loopback并拒绝--host 0.0.0.0,custom trusted authorities仍由deployment负责。
target是exact official source base fb2c4b9e698e30edb738bca4cf0618587db7d203。本package没有JavaScript entry、lifecycle script、credential material或fallback variant。official DSH暴露等价profile-selected browser-authentication policy后retire本package。
