Keep config private: Load rest of config from repo after backend auth

[100terres]

Can the config be kept private by loading it from the codebase after connecting to the backend? Currently, the config must either be publicly accessible or inlined in the init JavaScript.

[kyoshino]

It’s impossible because Sveltia CMS works completely client-side except for GitHub authentication.

[100terres]

Would that be possible if, on the client-side, only the backend (GitHub, GitLab, Gitea/Forgejo) config is provided, and then after the user has authenticated, it loads the rest of the config, collections, etc. from the repo itself?

[kyoshino]

There are no immediate plans to support additional ways to load site configuration, unfortunately.

[kyoshino]

It would be possible in the future, as we plan to implement a server-side component called Sveltia CMS Additions. See the roadmap for the idea.