homarr

Public Access

0 Fork 0

Files

T

Thomas Camlong 77884a3179 feat: add per-widget secret storage for release provider authentication

Adds encrypted token storage per release widget so users can authenticate
with GitHub, GitLab, Docker Hub, etc. without needing full integration setup.

- New `widget_secret` table (all 3 DB drivers) keyed by (itemId, kind)
- tRPC router with setSecret/deleteSecret/getConfiguredKinds (board modify access required)
- Releases router injects decrypted tokens into provider requests (board view access required)
- Tokens only used for repos matching widget's stored configuration (prevents proxy abuse)
- Provider auth: GitHub (Octokit auth), GitLab (PRIVATE-TOKEN), Docker Hub (Bearer),
  GHCR (registry token), npm (Bearer), Codeberg (token header)
- UI: "Provider Tokens" section in widget editor with PasswordInput per provider

2026-06-27 10:57:13 +02:00

configs

refactor(db): move to core package (#4589 )

2025-12-17 08:59:52 +01:00

migrations

fix: address PR review findings for widget-only integration refactor

2026-06-27 10:57:13 +02:00

queries

feat(onboarding): enhance integration setup with Docker discovery and URL templating (#5607 )

2026-06-05 16:50:35 +02:00

schema

feat: add per-widget secret storage for release provider authentication