mirror of
https://github.com/screentinker/screentinker.git
synced 2026-06-17 03:32:32 -06:00
ed45a9a23d
When an agency token is created, the once-shown secret box now also shows the Portal URL (window.location.origin + '/agency' — the real public host the admin is on, correct behind Cloudflare, config-free) and a COPYABLE INVITE: "Go to <url> and paste this access key: <key>". The key lives in the invite TEXT, never in a URL — no magic link, because Cloudflare logs query strings and chat apps unfurl links (the key would leak on paste). Same exposure as the key field itself, just with the destination surfaced. The existing "won't see it again" warning now covers the invite too (it contains the key). i18n x5 (parity test). Skipped the optional per-row portal URL in the token list: it's the same /agency for every agency token, so per-row it's noise; the creation invite + the /docs link cover discovery. Confirmed: invite copy button copies the full "go here + paste key" text; /agency resolves (200); i18n parity + full suite green (149). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| assets | ||
| compare | ||
| css | ||
| guides | ||
| js | ||
| legal | ||
| vendor | ||
| agency.html | ||
| api-docs.html | ||
| index.html | ||
| landing.html | ||
| manifest.json | ||
| robots.txt | ||
| sitemap.xml | ||
| sw-admin.js | ||