feat: add authentication and book upload

- Session-based login (username/password, 30-day cookie)
- SQLite user store with bcrypt password hashing (modernc.org/sqlite)
- Per-user upload permission (can_upload flag)
- Admin CLI (cmd/admin) for user management:
  user add/list/delete/set-upload
- Upload handler for EPUB/PDF with path-traversal protection
- All routes protected by requireAuth middleware;
  /upload additionally requires requireUpload
- Login/logout UI, upload form, logout button in header
- New env var: USERS_DB (default: users.db, gitignored)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

This commit is contained in:

arnef

2026-08-11 19:11:40 +02:00

co-authored by

Copilot

parent a8b31dae8a

commit a66c370de4

13 changed files with 1115 additions and 111 deletions

.gitignore

View File

@@ -24,3 +24,4 @@ dist/
 # Local env
 .env
 books/
 users.db