kcar 67e47fc47f feat(tlsync): fetch short-lived token from API before multiplayer connect ...

- Remove VITE_TLSYNC_SECRET from browser env (no longer exposed to bundle)
- Add useTlsyncToken hook that fetches /api/tlsync/token with Supabase auth
- Extract TldrawCanvas sub-component: only renders after token is ready
- Pass API-issued short-lived token to createSyncConnectionOptions
- Add vite.config.ts blocklist to prevent secret leak (defense-in-depth)
- Remove VITE_TLSYNC_SECRET from .env.example (server-side only now)

Related: t_a69128a1 (API token endpoint), t_41a844a7 (this task)

2026-05-28 18:00:43 +01:00

.gitea/workflows

test: add admin route guard coverage

2026-05-27 23:24:26 +01:00

docs

feat(timetable): add frontend routes and comprehensive documentation

2026-02-26 03:27:28 +00:00

public

fix: audio pipeline — 16 kHz AudioContext, 4096-sample buffering, SERVER_READY handshake

2026-05-23 07:26:20 +00:00

src

feat(tlsync): fetch short-lived token from API before multiplayer connect

2026-05-28 18:00:43 +01:00

.dockerignore

chore: add .dockerignore to exclude node_modules from build context

2026-05-26 02:03:17 +01:00

.env.development

feat(timetable): add page components, services, stores and types

2026-02-26 03:27:46 +00:00

.env.example

feat(tlsync): fetch short-lived token from API before multiplayer connect

2026-05-28 18:00:43 +01:00

.gitignore

chore: consolidate app compose dev and prod

2026-05-27 22:55:00 +01:00

docker-compose.dev.yml

test: add admin route guard coverage

2026-05-27 23:24:26 +01:00

docker-compose.yml

chore: consolidate app compose dev and prod

2026-05-27 22:55:00 +01:00

Dockerfile

chore: consolidate app compose dev and prod

2026-05-27 22:55:00 +01:00

eslint.config.js

Initial commit

2025-07-11 13:21:49 +00:00

index.html

Initial commit

2025-07-11 13:21:49 +00:00

package-lock.json

chore: consolidate app compose dev and prod

2026-05-27 22:55:00 +01:00

package.json

test: add admin route guard coverage

2026-05-27 23:24:26 +01:00

postcss.config.js

Initial commit

2025-07-11 13:21:49 +00:00

tailwind.config.cjs

Initial commit

2025-07-11 13:21:49 +00:00

tsconfig.json

Initial commit

2025-07-11 13:21:49 +00:00

tsconfig.node.json

Initial commit

2025-07-11 13:21:49 +00:00

vite.config.ts

feat(tlsync): fetch short-lived token from API before multiplayer connect

2026-05-28 18:00:43 +01:00

vitest.config.ts

test: add admin route guard coverage

2026-05-27 23:24:26 +01:00

Description

React 18 + TypeScript + TLDraw 3.6 frontend for Classroom Copilot — whiteboard, transcription panel, timetable, and graph views

8.2 MiB

Languages

TypeScript 96%

CSS 3.2%

JavaScript 0.5%

Dockerfile 0.2%

HTML 0.1%