GoldenFishX 5f5c5faa25 fix(tts): require authentication for TTS endpoints (#1101) ...

Move TTS routes behind auth middleware and attach JWT to local
proxy requests from the frontend. Previously both /api/hermes/tts
and /api/tts/proxy/audio/speech were publicly accessible without
authentication, allowing unauthenticated callers to consume Edge
TTS resources through the server.

Changes:
- server: move ttsRoutes from public to protected route section
- client: auto-attach JWT when baseUrl is a local path (/...)
  and no external API key is configured
- client: import getApiKey() instead of raw localStorage access

2026-05-28 21:46:31 +08:00

..

src

fix(tts): require authentication for TTS endpoints (#1101)

2026-05-28 21:46:31 +08:00

tsconfig.json

fix: auth bypass, SPA serving, and provider improvements (#97)

2026-04-21 12:35:48 +08:00