d33b0ca2fe
Block web access to sensitive paths, require API_TOKEN for mutations, encrypt GitHub issue credentials in .env, auto-provision tokens for same-origin clients, and pass api_token in scale relay URLs since EventSource cannot send headers. Co-authored-by: Cursor <cursoragent@cursor.com>
12 lines
369 B
PHP
12 lines
369 B
PHP
<?php
|
|
/**
|
|
* EverShelf API bootstrap — shared by HTTP router and cron.
|
|
*/
|
|
require_once __DIR__ . '/lib/env.php';
|
|
require_once __DIR__ . '/lib/constants.php';
|
|
require_once __DIR__ . '/lib/github.php';
|
|
require_once __DIR__ . '/lib/security.php';
|
|
require_once __DIR__ . '/lib/cron_log.php';
|
|
require_once __DIR__ . '/logger.php';
|
|
require_once __DIR__ . '/database.php';
|