Admin only Bearer token noindex · not linked

Submission review

Community submissions land in Cloudflare KV as pending-review. This console reads that queue, lets a reviewer approve or reject each record with a note, and can publish an approved submission straight to the live site (new project page, directory card and leaderboard entry, no redeploy). Published records live in KV and are merged with the curated dataset at runtime; Unpublish takes them back down.

Access needs the AB_ADMIN_TOKEN environment variable on the Pages project. The token is typed once per tab, kept in sessionStorage, sent as Authorization: Bearer …, never added to the URL and never logged.

Step 1 · Unlock

Enter the admin token

sessionStorage only

The queue is served by GET /api/submissions and decisions by PATCH /api/submissions, both behind the same bearer token. The value is kept in this tab's session storage so a refresh does not ask again; closing the tab discards it.

401 means the token is wrong; 503 admin_not_configured means the environment variable is not set at all. Configure it under Pages → Settings → Functions → Environment variables.