feat(asr-pipeline): merge PR #1 webauth/CSRF/locking hardening and web_password fallback

2026-11-02 06:37:33 -08:00
parent 9debd1c47d
commit 3c70861463
44 changed files with 4354 additions and 333 deletions
@@ -49,10 +49,8 @@ _key: list[str] = []


 def _auth() -> str:
-    with _lock:
-        if not _key:
-            _key.append(CFG.api_key())
-    return _key[0]
+    # Read on every call so a key saved from /settings is used without a restart.
+    return CFG.api_key()


@dataclass