wuwiandClaude Opus 5 b53fc07dd1 Put staging and prod behind one shared password
The game is not public yet. parse_request is the one place every method passes
through, so the gate sits there rather than in each do_*. /api and /ws stay open
because the iOS shell talks to prod from capacitor://localhost and has no
credentials to send. SPLAT_AUTH overrides it; empty opens the site again.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-08 16:50:28 +02:00
S
Description
No description provided
149 MiB
0 Stars 1 Watchers 0 Forks
Languages
JavaScript 75.2%
Python 15.8%
HTML 7.3%
Shell 1.4%
Swift 0.2%