Files
castarr/docs/adr/0002-device-token-fork.md
be-nj a11b5a68c0 Bootstrap Castarr from NodeCast prototype
Imported the native TV app (Kotlin, ExoPlayer, embedded remote server, QR
pairing) plus CONTEXT.md and ADRs 0001-0005. Rename, Compose for TV UI and
the Dispatcharr integration follow as tracked issues.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-25 00:09:00 +02:00

13 lines
544 B
Markdown

---
status: superseded by ADR-0003
---
# Long-lived device tokens via nodecast-tv fork
nodecast-tv issues JWTs with a 24h expiry, which would force the TV either to
store the user's password in plaintext or to re-prompt daily. We decided to
extend our nodecast-tv fork with non-expiring per-device tokens (API keys
scoped to a user, revocable server-side). The TV logs in once with credentials,
exchanges them for a device token, and never stores the password.
Consequence: the app requires the forked server until the feature is upstreamed.