claude 49ab2a7408 feat: sign in from any computer, no private network needed ...

granthi-link is now public at https://granthi-link.shre.ai (cloudflared,
origin still tailnet-only), so the client defaults there instead of a tailnet
IP. Internal machines pass --server or GRANTHI_LINK_SERVER.

Two rollout traps recorded in the README: a third-level hostname
(link.granthi.shre.ai) fails TLS because Cloudflare Universal SSL covers
shre.ai and *.shre.ai only; and exposure REQUIRES trust_forwarded_for with
the tunnel as the sole trusted proxy, or every request looks like the tunnel
and one abuser spends everyone's rate budget.

178 tests.

2026-08-23 12:33:19 -04:00

..

test_client.py

feat: sign in from any computer, no private network needed

2026-08-23 12:33:19 -04:00

test_server.py

fix(link): revoke endpoint was disabled by its own rate-limit rule

2026-08-23 12:21:43 -04:00