Can ssh to apps I didn't set pub key for

[tarasglek]

{
    "$schema": "../../schemas/config.schema.json",
    "domain": "smallweb.localhost",
    "oidc": {
        "issuer": "https://auth.smallweb.localhost"
    },
    "authorizedEmails": [
        "achille.lacoin@gmail.com"
    ],
    "apps": {
        "ls": {
            "admin": true,
            "additionalDomains": [
                "custom-domain.localhost"
            ]
        },
        "echo": {
    "authorizedKeys": [
                        "<redacted>"
                      ]

        }
    }
}

./smallweb up --ssh-addr 0.0.0.0:2345 --dir $PWD/example/ --addr 0.0.0.0:7890 --domain localhost

sftp -P 2345  ls@localhost
Connected to localhost.
sftp> ls
main.ts         smallweb.json
sftp>

I should not be able to login with ssh if i haven't declared pub keys, right?

btw here is my logging

Jun 26 18:59:06.400 INF serving http domain=localhost dir=/home/taras/Documents/smallweb/example/ addr=0.0.0.0:7890
Jun 26 18:59:06.400 INF serving ssh addr=0.0.0.0:2345
Jun 26 18:59:12.197 INF successful ssh login logger=ssh user=ls remote_addr=[::1]:43346
Jun 26 19:01:48.310 INF successful ssh login logger=ssh user=ls remote_addr=[::1]:55112

[tarasglek]

hmm, if i remove key from config i can still sftp :(
is it using some keys from .ssh/ dir?

[pomdtr]

Smallweb automatically add your ~/.ssh/id_ed25519 (or ~/.ssh/id_rsa) to the list of authorized keys.

It allows you to easily interact with the smallweb ssh server from the device smallweb is running from.

It also uses it as the server private key, unless you set the --ssh-private-key flag.

[tarasglek]

would be good to have a log message re both