475e8988b51719f8e243e1cdf74c5338e09dc383
Enforce X-Api-Key on /api/* requests with constant-time comparison.
/i/{mac}.png and /health remain unauthenticated. No-op when the
configured key is empty.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Description
No description provided
Languages
C#
98.1%
Shell
1.2%
Dockerfile
0.7%