Conduit.Dashboard.Auth

Conduit.Dashboard.Auth — authentication for the web dashboard.

Three auth modes:

None       — dashboard is open to all requests (only for dev / internal networks).
Token(t)   — Bearer token required in the Authorization header.
             Comparison is constant-time via Crypto.secure_compare to prevent
             timing-based token enumeration.
Fn(f)      — custom function receives the Authorization header value and
             returns true/false.  Useful for HMAC or OIDC token validation.

Functions

fncheckcheck(auth, conn) : Bool#

Return true if the request passes the configured authentication check.

For `Token` mode the Authorization header is compared using
`Crypto.secure_compare`, which runs in constant time regardless of where the
strings first differ.  This prevents an attacker from determining the token
one character at a time by measuring response latency.