deploy.

2026-09-12 18:16:27 +08:00
parent b7f55aa631
commit 397a7a8cc4
96 changed files with 1167 additions and 1259 deletions
@@ -105,8 +105,9 @@ change a password or recover one from inside the application. All three are edit
 configuration, made by whoever runs the service, and they take effect at its next restart.</p>
 <p>What the gate closes is the service's own surface: the requests each screen makes for data, and the
 live channels that keep those screens current. It does not close the page. The application shell,
-the brand image and the sign-in card itself are served before authorization is consulted, which is
-what lets the card be drawn for a browser that holds no session.</p>
+the brand image and the sign-in card itself all reach a browser that holds no session: the brand
+image and the built bundle the card is drawn from are plain files, served before authorization is
+consulted, and the shell page is exempt from the gate outright.</p>
 <h2 id="signing-in-1">Signing in</h2>
 <p>The card asks for one pair of credentials, under the prompt <em>Please sign in to continue</em>.</p>
 <ol>