Ettore Di Giacinto d4c268b644 fix(connectors): create credentials-only bindings, answer 403 on denial, allow 50 bindings ...

Creating a binding with no agent (home-assistant, jellyfin, pikvm,
github) failed with a 500. The token check for a new binding looked up
the agent even when the binding had none, so the host refused it. The
check now looks up an agent only when the binding has one. The token is
still required and a foreign agent is still refused.

A host denial (connectors.ErrForbidden) reached the client as a 500
server_error. The connector endpoints now answer 403 with a fixed text
that names no part of the check.

A person could have 10 bindings. Several bots plus one credential
binding per service need more, so the limit is now 50, like the limit
of resources and triggers. The docs and the API description say so.

Assisted-by: Claude:claude-sonnet-5-5
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-11-05 09:42:54 +00:00

..

auth

feat(memory): call the provider of the notes from the host

2026-11-05 01:45:30 +00:00

endpoints

fix(connectors): create credentials-only bindings, answer 403 on denial, allow 50 bindings

2026-11-05 09:42:54 +00:00

middleware

fix(http): believe X-Forwarded-Prefix only from a trusted proxy

2026-11-03 21:50:57 +00:00

react-ui

feat(addons): move the voice, face, fine-tuning, quantization and memory words into bundles

2026-11-05 09:35:56 +00:00

routes

feat(chats): translate capability titles and refusal texts by code

2026-11-05 09:16:07 +00:00

static

feat(ui): serve an apple-touch-icon so iOS shows the logo on the home screen (#12917)

2026-10-26 09:42:07 +01:00

views

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

access_log_internal_test.go

feat(http): add --trusted-proxies to resolve the real client address

2026-11-03 15:48:38 +00:00

access_log.go

feat(http): add --trusted-proxies to resolve the real client address

2026-11-03 15:48:38 +00:00

admission_handler_test.go

fix: return correct HTTP status codes for saturation and no-nodes-available (#12113)

2026-09-28 00:11:51 +02:00

app_test.go

fix(http): believe X-Forwarded-Prefix only from a trusted proxy

2026-11-03 21:50:57 +00:00

app.go

feat(addons): upload a zip to the owner and install it from the Add-ons API

2026-11-03 22:52:50 +00:00

body_limit_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

csrf_multipart_test.go

fix(auth): require validated header credentials for CSRF exemption (#12185)

2026-09-22 04:35:09 +01:00

diagnostics_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

embeddings_pooling_test.go

feat(router): make KNN a first-class classifier with a persisted, curated corpus (#10652)

2026-08-18 09:37:43 +02:00

explorer.go

fix(http): believe X-Forwarded-Prefix only from a trusted proxy

2026-11-03 21:50:57 +00:00

http_suite_test.go

refactor(tests): split app_test.go, move real-backend coverage to e2e-backends

2026-04-27 23:09:20 +00:00

model_load_cooldown_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

model_loading_held_test.go

fix(distributed): bound, stop and cancel model loads with leases and worker operations (#12524)

2026-10-07 16:59:56 +02:00

openresponses_test.go

Revert "chore(tests): Avoid network, sleep and more during tests" (#11601)

2026-08-19 16:39:39 +02:00

render.go

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

route_authmodes_test.go

refactor(addons): make manifest api 2 the only version

2026-11-03 16:15:07 +00:00

route_coverage_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

static_cache_test.go

perf(http): gzip responses, cache hashed assets, bound the trace endpoints (#11056)

2026-07-22 22:51:25 +02:00

studio_provider_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

studio_routes_test.go

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

testport_test.go

chore: remove local pre-commit gates (#11116)

2026-07-25 01:19:32 +02:00