mirror of
https://github.com/EstrellaXD/Auto_Bangumi.git
synced 2026-11-02 13:45:42 +08:00
4bcc6443fd
- 25 张截图按 4.0 界面重拍（1280x800）：中文站用 zh-CN 界面，en/ja 站用 docs/public/image/en/ 下的英文界面 - 首页预览图按站点语言切换 - 新增下载器页、插件市场、插件配置、插件设置 4 张截图 - 修正文档：插件目录在插件市场页；API 令牌在用户与访问控制中管理（security.login_tokens/mcp_tokens 为启动时导入的旧项）；默认搜索源含 anibt
28 lines
1.3 KiB
Markdown
28 lines
1.3 KiB
Markdown
# Security Settings
|
|
|
|
{width=700}{class=ab-shadow-card}
|
|
|
|
Security settings restrict login and MCP access. Click **Save & restart** after changing them.
|
|
|
|
- **Login IP Whitelist**: IPv4/IPv6 CIDR ranges allowed to access login. Empty means all IPs are allowed.
|
|
- **MCP IP Whitelist**: CIDR ranges allowed to access MCP. Empty means deny IP-based MCP access.
|
|
|
|
API tokens and MCP tokens are not in this section. Create and revoke them in **Settings → Users & Access → API Tokens**. See [REST API](/en/api/).
|
|
|
|
## `config.json`
|
|
|
|
Section: `security`
|
|
|
|
| Key | Description | Type | WebUI field | Default |
|
|
| --- | --- | --- | --- | --- |
|
|
| `login_whitelist` | Login IP whitelist | string array | Login IP Whitelist | `[]` |
|
|
| `login_tokens` | Legacy login API tokens, see the note below | string array | none | `[]` |
|
|
| `mcp_whitelist` | MCP IP whitelist | string array | MCP IP Whitelist | `[]` |
|
|
| `mcp_tokens` | Legacy MCP API tokens, see the note below | string array | none | `[]` |
|
|
| `webauthn_rp_id` | Passkey RP ID | string | config only | `""` |
|
|
| `webauthn_origin` | Passkey origin | string | config only | `""` |
|
|
|
|
::: info
|
|
`login_tokens` and `mcp_tokens` are legacy 3.x keys. At startup, AB imports their tokens as API tokens (scope `api` and `mcp`) and then clears both keys.
|
|
:::
|