Add optional API key auth to the server

Deployments reachable outside a trusted LAN need some form of access control. Set FUELISH_API_KEY and the server requires a matching X-API-Key header on /jobs; unset, behavior is unchanged (no auth). The Android app gets a matching Settings field. This only checks the key - TLS termination is left to a reverse proxy in front of the server, not handled here.
2026-10-04 11:41:55 +02:00
parent ca85530b5a
commit 7a91a37049
13 changed files with 111 additions and 25 deletions
@@ -44,6 +44,7 @@

    <string name="settings_server_url">Server URL</string>
    <string name="settings_server_url_example">http://192.168.1.10:8080</string>
+    <string name="settings_api_key">API key (leave blank if the server has none set)</string>
    <string name="settings_test_connection">Test connection</string>
    <string name="settings_test_testing">Testing…</string>
    <string name="settings_test_success">Connected successfully</string>