Feature
One gate for every route
Server basicAuth protects the dashboard, registration and the upload endpoint with one username and password.
The server reads LHCI_BASIC_AUTH_USERNAME and LHCI_BASIC_AUTH_PASSWORD and puts them in front of every route, not only the dashboard. Uploads from CI pass the same pair with upload.basicAuth.
A Build token says which Project an upload belongs to; it does not get an upload past the gate. An upload with a valid token and no basicAuth fails with 401.
More features
All features →- 01
Score history in Postgres
Every uploaded Build and its Runs are stored in a Postgres database you own, so trends survive redeploys.
- 02
Registration with two tokens
lhci-toolkit register creates a Project and prints its Build token for CI and an Admin token you keep.
- 03
Uploads from any CI pipeline
Run npx @lhci/cli autorun with three secrets and each pull request uploads its report.