Command overview
Monitor your protected assets and key status.
Paste Lua or upload a .lua / .txt file.
Generate a local asset ID and raw gateway.
Use a locally generated demo key.
A URL fragment is not access control. Real protection requires a server-side gateway.
Open your configured link if available.
Complete the next local step.
Finish the sequence to generate a local key.
A production key must be minted and verified on a server, bound to an authenticated user/HWID with abuse controls.
Administrators can configure shortlink URLs in API Integrations. A browser-only page cannot call private APIs safely.
| ASSET | TYPE | CREATED | RAW ID | |
|---|---|---|---|---|
| No assets created yet. | ||||
This library uses local browser storage and is not shared across devices.
Accounts created in this browser.
Demo UI policy settings only.
This UI role check is not secure RBAC. Do not expose privileged actions or secrets in a static HTML app.
A real shortlink API requires the provider's documented endpoint, request schema, response schema, and CORS/auth rules. Never embed a permanent API token in public HTML. “Prepare batch” validates URL syntax only; it does not create shortlinks.
Default demo admin: admin123 / xuanthanh. Because this is a single static HTML file, credentials and role checks are visible and can be bypassed by a determined user. Do not use this as production authentication. Replace with server-side authentication, salted password hashing, secure cookies, CSRF protection, audit logs, rate limiting and server-enforced RBAC.