- /go 리다이렉트 엔드포인트 추가: 로그인 시 email, 비로그인 시 IP를 쿼리에 부착
- ncue.net 및 하위 도메인 링크에만 적용(안전한 allowlist)
- script.js 및 index.html 폴백에서 열기 버튼을 /go 경유로 변경
Co-authored-by: Cursor <cursoragent@cursor.com>
- 기본 관리자 이메일 목록에 추가 계정 반영
- script.js 로드 실패 시 폴백에서도 /api/config/auth hydrate 및 /api/auth/sync 호출
- 폴백에서 관리자 전용 기능 잠금 및 로그인 전 내보내기 비활성화 적용
Co-authored-by: Cursor <cursoragent@cursor.com>
Add ncue_app_config and /api/config/auth endpoints, and hydrate Auth0 config from the server so other browsers don't see the setup modal.
Co-authored-by: Cursor <cursoragent@cursor.com>
Add optional apiBase for /api endpoints and surface sync failures so admins know when ncue_user writes are not reaching the backend.
Co-authored-by: Cursor <cursoragent@cursor.com>
Add first_login_at and last_logout_at, ensure table exists at runtime, upsert user on /api/auth/sync, and record logout via /api/auth/logout from the client.
Co-authored-by: Cursor <cursoragent@cursor.com>
Disable open/copy for non-allowed services based on anonymous/logged-in/admin email tiers and show an '접근 제한' tag on restricted cards.
Co-authored-by: Cursor <cursoragent@cursor.com>
If createAuth0Client is unavailable on static hosting, use manual OAuth2 PKCE flow for Google login, token storage, and logout, while keeping email allowlist and optional server sync.
Co-authored-by: Cursor <cursoragent@cursor.com>
Render letter badges instead of fetching favicons to prevent noisy 404 errors from Google favicon endpoints.
Co-authored-by: Cursor <cursoragent@cursor.com>
Remove Kakao/Naver quick login buttons and config inputs, leaving Google as the sole provider in both main and fallback auth wiring.
Co-authored-by: Cursor <cursoragent@cursor.com>
Remove duplicate cfg declaration causing Chrome SyntaxError and auto-open the login setup modal once per browser when Auth0 is not configured.
Co-authored-by: Cursor <cursoragent@cursor.com>
If external JS fails to load on some static hosts, run an inline version supporting add/edit/delete/favorite/search/sort/import/export/theme so the UI is never dead.
Co-authored-by: Cursor <cursoragent@cursor.com>
Render basic cards if script.js fails to execute, show quick login icons by default, and avoid asset query params that can break on some static hosts.
Co-authored-by: Cursor <cursoragent@cursor.com>
Add a visual divider between theme and quick login, remove the header login button, and prevent end-users from seeing the login config modal by default.
Co-authored-by: Cursor <cursoragent@cursor.com>
Shrink SNS circular buttons, move '간편로그인' label to the left, and hide the user/status badge until authenticated.
Co-authored-by: Cursor <cursoragent@cursor.com>
Display Naver/Kakao/Google quick login UI even when Auth0 is not configured, open config modal on click if connection is missing, and add cache-busting query strings.
Co-authored-by: Cursor <cursoragent@cursor.com>
Show Naver/Kakao/Google as circular icon buttons with a 'SNS 간편로그인' label, and toggle the group based on configured connections.
Co-authored-by: Cursor <cursoragent@cursor.com>
Fix [hidden] being overridden by button styles, render Google/Kakao/Naver quick login as icons, and show logout only when authenticated.
Co-authored-by: Cursor <cursoragent@cursor.com>
Add quick provider login buttons (Auth0 connections), an API to upsert users into Postgres and gate admin via can_manage, plus schema and Node server.
Co-authored-by: Cursor <cursoragent@cursor.com>
Allow setting Auth0 domain/clientId and allowed emails via a modal saved to localStorage to enable login testing without redeploying.
Co-authored-by: Cursor <cursoragent@cursor.com>
Show login status in header, guard manage actions behind allowed emails, and add Auth0 SPA SDK with CDN fallback.
Co-authored-by: Cursor <cursoragent@cursor.com>