Login modes & project signing secrets

Auth modes

The Settings → Login & SSO page lets you pick how strict the public board is:

Mode	Behaviour
required	Visitors must sign in before posting or voting.
optional	Anyone can post; signed-in users get their name on it.
anonymous	Same as optional but the embed widget signs visitors in invisibly.

Auto-login

When on, the public board greets first-time visitors with the sign-in screen instead of letting them browse anonymously. Useful for private/internal boards.

Project signing secret

Every project has a 64-character signing secret used by the API token system and webhook signature scheme. The settings page shows it masked, with copy and rotate buttons.

Rotation invalidates the previous value immediately — anything signed with the old secret stops working on the next request. Use sparingly; rotation is logged with a timestamp on the same page.