mrchatamandmrchatam bdd351bd15 fix(api): return 401 for invalid Bearer token instead of 404 (#6459) ...

When Authorization: Bearer is present but does not match (or is disabled),
respond with 401 Unauthorized so script authors can distinguish auth failure
from a wrong webBasePath. Requests with no Authorization header still get
404 masking; wrong base paths continue to 404 via NoRoute.

Fixes #6255

Co-authored-by: mrchatam <[email protected]>

2026-09-12 11:52:15 +02:00

..

controller

fix(api): return 401 for invalid Bearer token instead of 404 (#6459)

2026-09-12 11:52:15 +02:00

entity

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

global

…

job

Feature/tuic v5 (#6337)

2026-09-12 10:15:48 +02:00

locale

…

middleware

…

network

style: format struct literals and whitespace

2026-08-24 00:06:01 +02:00

runtime

Feature/tuic v5 (#6337)

2026-09-12 10:15:48 +02:00

service

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

session

…

translation

feat(settings): add Block tab for JSON subscription routing rules (#6466)

2026-09-12 11:14:56 +02:00

websocket

fix(nodes): keep the credential-presence flag on the node heartbeat push

2026-07-28 17:38:46 +02:00

cadence_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

routes_contract_test.go

docs(api): align OpenAPI with runtime contracts (#6409)

2026-09-04 15:23:41 +02:00

web_mtls_test.go

…

web_mtls.go

…

web.go

Feature/tuic v5 (#6337)

2026-09-12 10:15:48 +02:00