w3struk ae9bbdf267 fix(web): serve panel SPA routes from NoRoute (#5536) ...

* fix(web): serve panel SPA routes from NoRoute

Return the React shell for authenticated panel document routes that are not explicitly registered in Gin, such as /panel/hosts. Keep API, CSRF, static-file, method, and Accept exclusions so API misses remain 404 and auth semantics stay unchanged.

* fix(web): remove unreachable panel path guard

The panel path is always built by appending /panel, so it can never be empty.
Remove the redundant fallback branch without changing SPA routing behavior.

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* fix(web): allowlist static-asset extensions in SPA fallback

The blanket path.Ext check rejected any panel route whose last segment contained a dot, which would reintroduce the refresh 404 for a future client route carrying a dotted parameter (version, domain, or email-like value). Restrict the static-asset exclusion to a known, case-insensitive extension allowlist and add predicate regression cases.

2026-06-24 21:19:12 +02:00

..

api_auth_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

api_docs_test.go

fix(api-docs): exclude /panel/outbound and /panel/routing from route guard

2026-06-22 23:48:58 +02:00

api.go

feat(hosts): managed Hosts for per-host subscription link overrides (#5409)

2026-06-17 12:06:55 +02:00

base.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

client.go

feat(clients): bulk-set XTLS flow from the Adjust dialog (#5524)

2026-06-24 12:55:08 +02:00

dist_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

dist.go

fix(web): serve panel SPA routes from NoRoute (#5536)

2026-06-24 21:19:12 +02:00

group.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

host_test.go

feat(hosts): managed Hosts for per-host subscription link overrides (#5409)

2026-06-17 12:06:55 +02:00

host.go

feat(hosts): managed Hosts for per-host subscription link overrides (#5409)

2026-06-17 12:06:55 +02:00

inbound.go

feat(node-sync): push global client usage to nodes for display and local enforcement

2026-06-11 15:14:08 +02:00

index.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

login_limiter_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

login_limiter.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

node.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

server.go

fix(update): read setUpdateChannel body as form field, not JSON

2026-06-24 18:24:54 +02:00

setting.go

fix(tgbot): reload bot on settings save so a new token takes effect without a panel restart

2026-06-24 17:34:05 +02:00

spa_test.go

fix(web): serve panel SPA routes from NoRoute (#5536)

2026-06-24 21:19:12 +02:00

spa.go

fix(web): serve panel SPA routes from NoRoute (#5536)

2026-06-24 21:19:12 +02:00

util_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

util.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

websocket.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

xray_setting.go

refactor(frontend): move form-item hints from extra to tooltip

2026-06-17 17:24:16 +02:00