02b7522b87
Add `role: Role` to the shared `PublicUser` contract and return it from `GET /api/me` (defaulting to 'worker' when the session user has no role). This lets the planned admin app gate access by role. Also add the admin dev origin `http://localhost:5174` to the default `WEB_ORIGINS` (env.ts) and to `.env.example`, so the admin SPA on :5174 can reach the API at :3000 cross-origin (drives both hono/cors and better-auth trustedOrigins).
11 lines
453 B
Plaintext
11 lines
453 B
Plaintext
DATABASE_URL=file:./data/app.db
|
|
BETTER_AUTH_SECRET=change-me-to-a-long-random-string
|
|
BETTER_AUTH_URL=http://localhost:3000
|
|
PORT=3000
|
|
|
|
# Comma-separated browser origins allowed for CORS + better-auth (the worker SPA on 5173
|
|
# and the admin SPA on 5174).
|
|
# Add your phone's LAN origin to test on a device — no code edit needed, e.g.:
|
|
# CORS_ORIGINS=http://localhost:5173,http://192.168.1.50:5173
|
|
CORS_ORIGINS=http://localhost:5173,http://localhost:5174
|