🛂 Add key-based permission system

server/api/auth.js

@@ -101,6 +101,9 @@ async function checkLogin(req, res, next) {
     res.sendStatus(401);
     return;
   }
+  req.locals = {
+    session: session.token,
+  };
   renewSession(session);
   next();
 }