mudler's LocalAI [bot]andEttore Di Giacinto 0ab632b6bd fix(auth): protect HTTP routes by default (#11602) ...

* fix(auth): default to protected HTTP routes

Use a method-aware registry for the small anonymous bootstrap surface.
Unknown routes now require credentials instead of inheriting fail-open
path classification.

Keep node self-service routes behind their registration-token middleware.
Global auth no longer rejects valid worker credentials first.

Assisted-by: Codex:gpt-5

* docs(auth): document public HTTP surface

Assisted-by: Codex:gpt-5

* test(auth): align route coverage with default denial

Assisted-by: Codex:gpt-5

---------

Co-authored-by: Ettore Di Giacinto <mudler@localai.io>

2026-08-19 20:49:19 +02:00

..

advanced

fix(vram): contain malformed GGUF metadata (#11374)

2026-08-06 09:01:56 +02:00

features

fix(auth): protect HTTP routes by default (#11602)

2026-08-19 20:49:19 +02:00

getting-started

feat(ui): unify model and backend lifecycle (#11548)

2026-08-16 11:57:31 +02:00

operations

feat(router): make KNN a first-class classifier with a persisted, curated corpus (#10652)

2026-08-18 09:37:43 +02:00

reference

feat: bound global admission and expose running backend traces (#11560)

2026-08-18 08:56:59 +02:00

_index.md

feat(website): split the site, move docs to /docs, add a landing page (#11243)

2026-07-31 09:00:56 +02:00

faq.md

docs: onboarding overhaul, dedup, and error docs (#7711) (#10895)

2026-07-17 22:08:20 +02:00

integrations.md

docs: onboarding overhaul, dedup, and error docs (#7711) (#10895)

2026-07-17 22:08:20 +02:00

overview.md

feat(website): split the site, move docs to /docs, add a landing page (#11243)

2026-07-31 09:00:56 +02:00

whats-new.md

docs: point the News page at the blog instead of a stale highlights list

2026-08-03 20:29:50 +00:00