Add multi-user MAX authentication and tenant isolation

2026-07-14 07:35:04 +03:00
parent 582f99ed0e
commit 440de7325f
36 changed files with 904 additions and 118 deletions
@@ -5,11 +5,9 @@ QMAX_TLS_EMAIL=admin@kusoft.xyz
 # Generate with: openssl rand -base64 48
 QMAX_JWT_SECRET=change-me-to-a-long-random-secret-at-least-32-characters

-# Enter this once on the Android login screen to pair the device with your private bridge.
+# Optional registration code shared with people allowed to create a QMAX account.
+# Leave empty for open phone registration. MAX still verifies every phone with its own code.
 QMAX_PAIRING_CODE=change-me-pairing-code
-
-# Use the phone number linked to the MAX account used by PyMax.
-QMAX_MAX_PHONE_NUMBER=79000000000
 QMAX_CORS_ALLOWED_ORIGINS=

 # Optional Firebase Cloud Messaging. Mount the service account JSON into the API container