Add in the admin UI an option to persist the token in a cookie for the domain.
Extend the auth check to also attempt to read the token from the cookie if the header is not found.
Add an auth check inside the WikiDO getFileSrc. With this, the user can choose which wikis should be publicly accessible, and which ones should be protected by the API key/cookie.
getFileSrc. With this, the user can choose which wikis should be publicly accessible, and which ones should be protected by the API key/cookie.BTW, using the password encryption of TiddlyWiki is a quick surefire way to make sure even without this auth approach nobody can actually read the Tiddlers. See https://x.com/LambrosPetrou/status/1848648433382367578