Krow/Krow-workspace
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(launchpad): implement secure email hashing for access control

Browse Source 
This commit introduces a more secure method for verifying user
access to the internal launchpad by hashing email addresses.

- Replaces the plain-text email list with SHA-256 hashes.
- Adds a script to generate these hashes from `iap-users.txt`.
- Updates the launchpad HTML to hash the input email and compare
 it against the `allowed-hashes.json` file.
- Updates Makefile to generate hashes before deploy and serve.
- Adds .keep file for krow_client folder.
This commit is contained in:
bwnyasse
2026-01-10 11:48:54 -05:00
parent ba938be7ad
commit a5a4eae255
7 changed files with 59 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
firebase/internal-launchpad/iap-users.txt
View File

@@ -5,4 +5,10 @@
# Both internal (@krowwithus.com) and external emails are supported.
user:admin@krowwithus.com
# External users - Oloodi employees
user:boris@oloodi.com
user:achintha.isuru@oloodi.com
# External users - Legendary employees