Improve password security

[culda]

re. #28

Generated this PR with yetone's plugin. Leaving it here as I have no time to look into it and it needs some cleanup.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 02af69a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[culda]

@thdxr happy to take this on but not sure how to plug my own version of OC to my sst app. Basically how do I test this?

[julianfbeck]

@culda Could we add an option to completely disable bearer authentication in this MR?

Since we host OpenControl internally within our company VPN, the network already provides security. Having the additional bearer auth layer creates confusion (lol i know) for product owners accessing the website.

having another variable/ env insode the hono option would be great

[culda]

@julianfbeck
Happy to. Just curious, did you deploy it out of the box with sst or did you fork it?

[julianfbeck]

@culda Thank you!!

No, we just used the opencontrol package inside a bun hono project:

import { createAnthropic } from '@ai-sdk/anthropic'
import { create } from 'opencontrol'
import { Hono } from 'hono'
import { 
example
} from './tools.js'

const app = create({
  model: createAnthropic({
    apiKey: process.env.ANTHROPIC_API_KEY,
  })("claude-3-7-sonnet-20250219",
  tools: [
   example
  ]
})

export default app;

[culda]

#33