Commit fb43823
authored
fix(auth): stop IDOR 'default' guard from 401-ing the single-user owner into a login loop (#31)
Fixes the web UI getting stuck on the password login screen even when no
password is configured: route IDOR-017 guards equated userId==='default'
(the only id a single-user install assigns) with 'anonymous' and 401'd the
owner, and the frontend 401 handler escalated that into a forced /login redirect.
Also repairs pre-existing main breakage that was blocking CI once the build was
fixed: 21 TS build errors (canvas/pulse/voice/claw), 134 stale unit tests across
core+gateway, Playwright headless/E2E config, repo-wide prettier drift, and a
.gitattributes to enforce LF.
🤖 Generated with [Claude Code](https://claude.com/claude-code)1 parent 80e5984 commit fb43823
30 files changed
Lines changed: 408 additions & 196 deletions
File tree
- .github/workflows
- packages
- core/src/agent/soul
- gateway/src
- middleware
- schemas
- routes
- agents
- database
- souls
- services
- agent
- claw
- cli
- metric
- ui
- src/hooks
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
71 | 71 | | |
72 | 72 | | |
73 | 73 | | |
| 74 | + | |
| 75 | + | |
| 76 | + | |
| 77 | + | |
| 78 | + | |
74 | 79 | | |
75 | 80 | | |
76 | 81 | | |
| |||
0 commit comments