Skip to content

feat: global auth - #139

Merged
antfu merged 16 commits into
mainfrom
feat/auth
Dec 22, 2025
Merged

antfu merged 16 commits into
mainfrom
feat/auth

Conversation

@antfu

@antfu antfu commented Dec 3, 2025 •

Copy link
Copy Markdown
Member

This PR is trying to implement a global DevTools auth mechanism to prevent connections from untrusted browsers (over LAN or WAN) from accessing sensitive data or running actions.

This would apply globally, and requires being authenticated first to use any DevTools integrations, to make it safe by default.

close #134

@netlify

netlify Bot commented Dec 3, 2025 •

Copy link
Copy Markdown

❌ Deploy Preview for vite-devtools failed.

Name Link
🔨 Latest commit 649d1cb
🔍 Latest deploy log https://app.netlify.com/projects/vite-devtools/deploys/693f8d35bf08970008e1ccf6

@pkg-pr-new

pkg-pr-new Bot commented Dec 3, 2025 •

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@vitejs/devtools@139
npm i https://pkg.pr.new/@vitejs/devtools-kit@139
npm i https://pkg.pr.new/@vitejs/devtools-rpc@139
npm i https://pkg.pr.new/@vitejs/devtools-vite@139

commit: 93deb1c

@antfu
antfu force-pushed the feat/auth branch 2 times, most recently from ed40f94 to 76aadd7 Compare December 16, 2025 05:31
@kofe3k

kofe3k commented Dec 20, 2025 •

Copy link
Copy Markdown

can be auth check bypassed if we get authId from client as constructor string?

https://github.com/vitejs/devtools/pull/139/files#diff-16d6d769cf093822adeac6a20c6adb129e3fa2e5605c8ca990f954d03b795983R43

@antfu
antfu marked this pull request as ready for review December 22, 2025 07:22
@antfu
antfu merged commit 5e4d7c4 into main Dec 22, 2025
8 of 9 checks passed
@antfu
antfu deleted the feat/auth branch December 22, 2025 07:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Auth System

2 participants