Skip to content

Viewer write lockdown + channel secret redaction - #109

Merged
KMX415 merged 1 commit into
feat/v0.7.8from
feat/pluck-viewer-write-lockdown
Jul 22, 2026
Merged

Viewer write lockdown + channel secret redaction#109
KMX415 merged 1 commit into
feat/v0.7.8from
feat/pluck-viewer-write-lockdown

Conversation

@KMX415

@KMX415 KMX415 commented Jul 22, 2026

Copy link
Copy Markdown
Owner

Summary

  • require_admin on config PUTs, restart, NodeInfo/position/telemetry broadcast writes, companion rename, message send/advert/delete
  • GET /api/config blanks psk_b64 / MeshCore key_hex for non-admins
  • Mark-read left open for viewer UX

Rewritten from javastraat/meshpoint (0c1cd41). Co-authored by Albert Einstein.

Test plan

  • pytest viewer lockdown + updated config/message route suites (68)

Closes viewer API gaps where sidebar hide was the only protection. From javastraat/meshpoint.

Co-Authored-By: Albert Einstein <javastraat@hotmail.com>
@KMX415
KMX415 merged commit d92b1aa into feat/v0.7.8 Jul 22, 2026
1 check passed
@KMX415
KMX415 deleted the feat/pluck-viewer-write-lockdown branch July 22, 2026 15:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant