From 6a4a5000c85d9699c9a862e55f1ebdf2140b9c2f Mon Sep 17 00:00:00 2001
From: "Jakob L. Kreuze" <zerodaysfordays@sdf.org>
Date: Sun, 21 Dec 2025 09:10:50 -0500
Subject: Accept password via URL parameter

---
 srs-anywhere-network.js | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

(limited to 'srs-anywhere-network.js')

diff --git a/srs-anywhere-network.js b/srs-anywhere-network.js
index e5bedff..3687402 100644
--- a/srs-anywhere-network.js
+++ b/srs-anywhere-network.js
@@ -16,6 +16,14 @@
    License along with SRS Anywhere. If not, see <https://www.gnu.org/licenses/>. */
 
 window.addEventListener("load", () => {
+  const passwordField = document.getElementById('network-password');
+
+  const urlParams = new URLSearchParams(window.location.search);
+  let password = localStorage.getItem('password') || urlParams.get('password');
+  if (password) {
+    passwordField.value = password;
+  }
+
   const btn = document.getElementById('open-network');
   if (!btn) {
     console.warn('Button with id="open-network" not found.');
@@ -23,13 +31,14 @@ window.addEventListener("load", () => {
   }
 
   btn.addEventListener('click', function () {
-    const password = document.getElementById('network-password').value;
+    const password = passwordField.value;
     const xhr = new XMLHttpRequest();
     xhr.open('GET', '/cgi-bin/deck.py', true);
     xhr.setRequestHeader('PASSWORD', password);
     xhr.onreadystatechange = function () {
       if (xhr.readyState === XMLHttpRequest.DONE) {
         if (xhr.status >= 200 && xhr.status < 300) {
+          localStorage.setItem('password', password);
           loadCards(JSON.parse(xhr.responseText));
         } else {
           reportException(xhr.statusText);
-- 
cgit v1.3