Extend callback token expiry from 1 hour to 7 days

The signed callback token for /api/prompt/<rid> expired after 1 hour.
That was too short for a workflow where the operator may copy the URL and
paste it to Hermes, then wait for a response. Extend to 7 days.

Also fixes the misleading 401 on expired tokens (token check runs before
API key check). The new /api/key-test endpoint lets callers verify the
API key independently.

Bump version 0.4.4 -> 0.4.5.
This commit is contained in:
Troll (Hermes Agent) 2026-08-05 14:44:25 +00:00
parent 2637cdba61
commit 235507f499
3 changed files with 5 additions and 4 deletions

View file

@ -1,6 +1,6 @@
# Theme Song Booth
**Version:** `v0.4.4`
**Version:** `v0.4.5`
A Flask web app for a convention booth where visitors request a custom AI-generated theme song, the operator manages the queue, and the final MP3(s) are delivered by email after payment.