fix: secure quick start webui setup

Add Quick Start endpoint choices for subscription plan providers, require explicit WebSocket confirmation, and require a WebUI password when enabling the WebSocket channel. Update docs to route Quick Start users through the WebUI instead of agent -m.
2026-06-22 13:04:05 +08:00
parent e5294002ed
commit fca1f2ad02
9 changed files with 361 additions and 35 deletions
@@ -26,7 +26,8 @@ Add to `config.json` under `channels.websocket`:
      "host": "127.0.0.1",
      "port": 8765,
      "path": "/",
-      "websocketRequiresToken": false,
+      "tokenIssueSecret": "your-webui-password",
+      "websocketRequiresToken": true,
      "allowFrom": ["*"],
      "streaming": true
    }