cms: oauth-only sign-in (documented auth_methods), note on localhost-only local-repo button

2026-07-28 19:33:51 +02:00
parent d06c2cf0c0
commit ba629e2a96
1 changed files with 5 additions and 0 deletions
@@ -11,6 +11,11 @@ backend:
  base_url: http://localhost:3000
  api_root: http://localhost:3000/api/v1
  app_id: cf1c44ac-ebe6-4a97-bf2f-f7f26ef1126c
+  # OAuth only — hides the "access token" sign-in option (documented
+  # auth_methods). The "Work with Local Repository" button needs no config:
+  # it renders only on localhost (source-verified), so it vanishes once the
+  # portal is served from a real domain.
+  auth_methods: [oauth]

 # CTAO branding on the sign-in screen and browser tab (documented Sveltia
 # options: app_title replaces the "Sveltia CMS" label; logo.src is the