seedproject-web/app/src
Carlos Arias b967419717 Phase 1: admin login page + secret-link token auth
- /admin login page (public, noindex): password form + signed-in panel that
  activates the in-page console. Verified in-browser: login -> panel -> the
  astroagent handle appears on other pages.
- Secret-link login: visit /admin/<token> to sign in without a password.
  adminauth token() validates a bcrypt-hashed token, sets the session, 302s to
  /admin. nginx routes the token path to PHP. set-admin-token.php generates it.
- Password login kept as a fallback.

Verified: token link -> session -> console access; bad token -> /admin?e=1.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DoFYZY9gkGPNDqZ7NuEa9a
2026-07-23 22:15:50 +00:00
..
assets chore: scaffold SeedProject base (Phase 1) 2026-07-04 22:53:10 +00:00
components Baseline: full site build (brand, pages, DB, agent-editable) 2026-07-23 20:21:28 +00:00
config Baseline: full site build (brand, pages, DB, agent-editable) 2026-07-23 20:21:28 +00:00
content/blog/welcome feat: config-driven identity (site.config.json) + buildable sample content 2026-07-04 23:06:23 +00:00
layouts Baseline: full site build (brand, pages, DB, agent-editable) 2026-07-23 20:21:28 +00:00
lib Baseline: full site build (brand, pages, DB, agent-editable) 2026-07-23 20:21:28 +00:00
pages Phase 1: admin login page + secret-link token auth 2026-07-23 22:15:50 +00:00
content.config.js chore: scaffold SeedProject base (Phase 1) 2026-07-04 22:53:10 +00:00
styles.css Baseline: full site build (brand, pages, DB, agent-editable) 2026-07-23 20:21:28 +00:00