forked from cluesmith/codev
-
Notifications
You must be signed in to change notification settings - Fork 0
Bare GET /v2 (no trailing slash) 401s #105
Copy link
Copy link
Closed
Labels
area/dashboardTower web dashboardTower web dashboardbugSomething isn't workingSomething isn't workingfork-onlyDeliberately not upstreamed to cluesmith/codevDeliberately not upstreamed to cluesmith/codev
Description
Activity
Metadata
Metadata
Assignees
Labels
area/dashboardTower web dashboardTower web dashboardbugSomething isn't workingSomething isn't workingfork-onlyDeliberately not upstreamed to cluesmith/codevDeliberately not upstreamed to cluesmith/codev
Problem. A browser navigating to
/v2(no trailing slash) gets 401.isPublicRoutematchesGET /v2/exactly. That is the URL a person types, and it reads as a key problem.Why. Spec 83 D9 made
GET /v2/andGET /v2/assets/*public so the shell can load without a header. The no-slash form was left keyed on purpose for that unit. It is still the first URL anyone types.Scope of a fix. Add
GET /v2to the same public-route split, or redirect/v2→/v2/before the key check./v2/eventsstays keyed.Found in the spec 83 integration review (PR #104). Out of scope for that unit.
Related: #83