mirror of
https://github.com/EstrellaXD/Auto_Bangumi.git
synced 2026-10-31 04:34:51 +08:00
4bcc6443fd
- 25 张截图按 4.0 界面重拍（1280x800）：中文站用 zh-CN 界面，en/ja 站用 docs/public/image/en/ 下的英文界面 - 首页预览图按站点语言切换 - 新增下载器页、插件市场、插件配置、插件设置 4 张截图 - 修正文档：插件目录在插件市场页；API 令牌在用户与访问控制中管理（security.login_tokens/mcp_tokens 为启动时导入的旧项）；默认搜索源含 anibt
1.3 KiB
1.3 KiB
Security Settings
{width=700}{class=ab-shadow-card}
Security settings restrict login and MCP access. Click Save & restart after changing them.
- Login IP Whitelist: IPv4/IPv6 CIDR ranges allowed to access login. Empty means all IPs are allowed.
- MCP IP Whitelist: CIDR ranges allowed to access MCP. Empty means deny IP-based MCP access.
API tokens and MCP tokens are not in this section. Create and revoke them in Settings → Users & Access → API Tokens. See REST API.
config.json
Section: security
| Key | Description | Type | WebUI field | Default |
|---|---|---|---|---|
login_whitelist |
Login IP whitelist | string array | Login IP Whitelist | [] |
login_tokens |
Legacy login API tokens, see the note below | string array | none | [] |
mcp_whitelist |
MCP IP whitelist | string array | MCP IP Whitelist | [] |
mcp_tokens |
Legacy MCP API tokens, see the note below | string array | none | [] |
webauthn_rp_id |
Passkey RP ID | string | config only | "" |
webauthn_origin |
Passkey origin | string | config only | "" |
::: info
login_tokens and mcp_tokens are legacy 3.x keys. At startup, AB imports their tokens as API tokens (scope api and mcp) and then clears both keys.
:::