
mudler's LocalAI [bot]andEttore Di Giacinto
0ab632b6bd
fix(auth): protect HTTP routes by default (#11602)
* fix(auth): default to protected HTTP routes
Use a method-aware registry for the small anonymous bootstrap surface.
Unknown routes now require credentials instead of inheriting fail-open
path classification.
Keep node self-service routes behind their registration-token middleware.
Global auth no longer rejects valid worker credentials first.
Assisted-by: Codex:gpt-5
* docs(auth): document public HTTP surface
Assisted-by: Codex:gpt-5
* test(auth): align route coverage with default denial
Assisted-by: Codex:gpt-5
---------
Co-authored-by: Ettore Di Giacinto <mudler@localai.io>
2026-08-19 20:49:19 +02:00
..
2026-08-02 09:23:26 +02:00
2026-08-06 17:34:46 +02:00
2026-07-17 22:08:20 +02:00
2026-08-02 09:23:26 +02:00
2026-08-19 20:49:19 +02:00
2026-07-21 09:40:10 +02:00
2026-07-30 12:11:56 +02:00
2026-08-07 12:32:39 +02:00
2026-08-07 12:32:39 +02:00
2026-08-18 09:03:16 +02:00
2026-08-19 20:49:19 +02:00
2026-08-16 11:57:31 +02:00
2026-08-03 18:03:46 +02:00
2026-08-18 11:31:03 +00:00
2026-07-17 22:08:20 +02:00
2026-08-15 13:20:11 +02:00
2026-08-18 09:37:43 +02:00
2026-07-17 22:08:20 +02:00
2026-07-23 23:10:34 +02:00
2026-07-17 22:08:20 +02:00
2026-07-31 23:39:53 +02:00
2026-08-03 15:27:22 +02:00
2026-07-17 22:08:20 +02:00
2026-08-02 09:23:26 +02:00
2026-08-13 22:25:58 +02:00
2026-07-17 22:08:20 +02:00
2026-07-17 22:08:20 +02:00
2026-08-16 11:57:31 +02:00
2026-08-03 18:03:46 +02:00
2026-08-07 12:32:39 +02:00
2026-07-21 09:40:10 +02:00
2026-07-17 22:08:20 +02:00
2026-08-10 17:57:58 +02:00
2026-07-17 22:08:20 +02:00
2026-07-17 22:08:20 +02:00
2026-08-07 18:00:45 +02:00
2026-07-29 20:12:29 +02:00
2026-08-02 09:23:26 +02:00
2026-08-16 00:32:37 +02:00
2026-08-11 09:52:38 +02:00
2026-08-05 09:37:05 +02:00
2026-08-09 22:34:51 +02:00
2026-08-16 00:32:37 +02:00
2026-07-30 12:11:56 +02:00
2026-07-21 09:40:10 +02:00