A web UI for the PandoraNext token treadmill

What it does

This Java web dashboard sits on top of PandoraNext and handles the busywork of token management. It stores OpenAI credentials, auto-refreshes share_token, access_token, and pool_token values, and edits config.json without forcing you to touch the filesystem directly. It also exposes a handful of HTTP endpoints so other services can grab tokens programmatically.

The interesting bit

The project treats PandoraNext as a backend appliance it can reboot and reconfigure on demand—hot reload included—effectively turning a static proxy into something you can orchestrate from a phone browser. It also syncs refreshed tokens outward to One-API, which saves you from copy-pasting keys between dashboards.

Key highlights

• Web-based management of PandoraNext tokens and configuration files from mobile or desktop
• Auto-refresh of OpenAI tokens using stored account credentials, plus bulk operations on pool_token
• Hot-reload support and one-click restart of the underlying PandoraNext service
• Optional One-API integration to push tokens automatically to an external API gateway
• Login logs, IP blacklisting, and custom URL prefixes as basic access controls

Caveats

• The README warns that the author considers themselves a beginner, and the codebase is described as rough around the edges
• Authentication is currently limited to a single username/password scheme (default root/123456), which you must change immediately
• Deployment requires running the container as root with --privileged mode and mounting the host Docker socket, which is a broad trust boundary

Verdict

Grab this if you run a shared or semi-public PandoraNext instance and want to stop SSHing into a box every time a token expires. If you already have a fully automated token pipeline or don’t use PandoraNext at all, there is nothing here for you.