external demo: public-token guidance

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
Mitchell-Johnson
2026-09-19 09:14:30 -07:00
co-authored by Claude Fable 5.1
parent 47b21a6eca
commit 36de4ad4a1
+3 -2
View File
@@ -11,8 +11,9 @@ different origin than Ham Lab. It knows a base URL and a read-only sensor token
window.HAMLAB = { base: 'http://10.0.0.234:8100', token: '<read-only sensor token>' } window.HAMLAB = { base: 'http://10.0.0.234:8100', token: '<read-only sensor token>' }
``` ```
Anyone who can load the page can read the token, so serve it only where that's acceptable Anyone who can load the page can read the token. If the page is public, limit the token to
(it can read sensors and nothing else). Deployed on `core` as the `hamlab-demo` stack — patterns that name nothing you'd mind the world reading (the `hamlab-demo` one shows
hardware numbers and counts, not container or service names). Deployed on `core` as the `hamlab-demo` stack —
see Hamlet `docs/docker.md`. Update it with see Hamlet `docs/docker.md`. Update it with
`cp examples/external-demo/index.html /home/core/apps/hamlab-demo/site/`. `cp examples/external-demo/index.html /home/core/apps/hamlab-demo/site/`.