migrate auth v2 code

2026-08-16 10:11:39 +01:00
parent 3dd94b8a7c
commit c73ced7894
45 changed files with 1965 additions and 1519 deletions
@@ -6,6 +6,9 @@
 # PB superuser (server-side only). Defaults in code: debug@famchamp.dev / debug123.
 PB_EMAIL=
 PB_PASSWORD=
+# Server-only secret used to derive a child member's PB password from
+# (famSlug + username). Never expose client-side. OTP is the access gate.
+MEMBER_SECRET=
 # Public: the dev machine's IP where PB + the dev proxy run. Change this when
 # your remote IP changes — the browser (pocketbase.ts) and pb-admin read it.
 # Prod ignores this (uses /pb via nginx). Default: 192.168.1.225.