Add basic auth (#47)

Author: hunchr

CHANGELOG.md

@@ -4,6 +4,7 @@
 
 ## [0.2.1](https://github.com/renuo/hotsheet/releases/tag/v0.2.1) - 2025-06-27
 
+- Add optional basic auth ([@hunchr])
 - Fix I18n fallback ([@hunchr])
 
 ## [0.2.0](https://github.com/renuo/hotsheet/releases/tag/v0.2.0) - 2025-06-25

README.md

@@ -24,7 +24,7 @@ After the installation, you can start the Rails server and visit
 You can configure which models ('sheets') this gem should manage, and specify which
 database columns should be editable or viewable in the spreadsheet. This can be
 done by editing the [config/initializers/hotsheet.rb](https://github.com/renuo/hotsheet/blob/main/lib/generators/templates/hotsheet.rb)
-file created by the install command.
+file created by the install command:
 
 ```rb
 Hotsheet.configure do
@@ -41,6 +41,15 @@ Hotsheet.configure do
 end
 ```
 
+### Basic Authentication
+
+If you don't want everyone to have access to Hotsheet, you can set a
+basic auth environment variable:
+
+```sh
+HOTSHEET_BASIC_AUTH="admin:password"
+```
+
 ### Internationalization
 
 You can create custom translations by overwriting the default locales defined in
@@ -59,7 +68,7 @@ This is a newly created gem, and we will firstly focus on:
 1. Configuration and access permissions
 1. Concurrent users (broadcasting, conflict resolution)
 
-Feel free to look at our [planned enhancements](https://github.com/renuo/hotsheet/issues?q=is%3Aopen+is%3Aissue+label%3Aenhancement)
+Feel free to look at our [planned enhancements](https://github.com/renuo/hotsheet/issues?q=is:open+is:issue+label:feature)
 or add your own.
 
 ## License

app/controllers/hotsheet/application_controller.rb

@@ -2,4 +2,10 @@
 
 class Hotsheet::ApplicationController < ActionController::Base
   protect_from_forgery with: :exception
+
+  # :nocov:
+  ENV["HOTSHEET_BASIC_AUTH"]&.split(":")&.then do |name, password|
+    http_basic_authenticate_with name:, password:
+  end
+  # :nocov:
 end