Authentication

VidArch uses a signed session after the instance password is entered.

Password managed by the interface

In Settings → Security, you can enable a password, change it using the previous password, or disable the protection.

Environment password

When AUTH_PASSWORD is defined at startup, the setting is locked in the interface. Modify the variable on the host and then recreate the service.

SESSION_SECRET can be provided explicitly. Otherwise, VidArch generates a secret in DATA_DIR/.session_secret. Keep this file in your backups to avoid invalidating all sessions upon every restoration.

Recommendations

• Use a long, unique passphrase;
• Enable HTTPS outside the local machine;
• Do not treat the password as a multi-user system;
• Never publish the API directly on the Internet.