fix(ingest): exempt /api/ingest-worker-logs from CSRF middleware #6

Merged

janpeter merged 1 commit from fix/ingest-csrf-exempt into main

2026-05-17 21:47:44 +02:00

janpeter commented

2026-05-17 21:47:38 +02:00

Owner

The ingest endpoint is called by the worker-logs-ingest systemd timer via
localhost curl with a Bearer secret — no browser, no cookie, no CSRF token.
The middleware in proxy.ts blocked it with 403 before the route's own Bearer
check ran. Add a small exempt-paths list so server-to-server routes can
authenticate purely via Authorization header.

Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com

The ingest endpoint is called by the worker-logs-ingest systemd timer via localhost curl with a Bearer secret — no browser, no cookie, no CSRF token. The middleware in proxy.ts blocked it with 403 before the route's own Bearer check ran. Add a small exempt-paths list so server-to-server routes can authenticate purely via Authorization header. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

janpeter added 1 commit

2026-05-17 21:47:38 +02:00

fix(ingest): exempt /api/ingest-worker-logs from CSRF middleware 975fd8a7af

The ingest endpoint is called by the worker-logs-ingest systemd timer via
localhost curl with a Bearer secret — no browser, no cookie, no CSRF token.
The middleware in proxy.ts blocked it with 403 before the route's own Bearer
check ran. Add a small exempt-paths list so server-to-server routes can
authenticate purely via Authorization header.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

janpeter merged commit 116686b935 into main

2026-05-17 21:47:44 +02:00

janpeter referenced this pull request from a commit

2026-05-17 21:47:45 +02:00

Merge pull request 'fix(ingest): exempt /api/ingest-worker-logs from CSRF middleware' (#6) from fix/ingest-csrf-exempt into main

janpeter referenced this pull request from a commit

2026-06-12 20:41:14 +02:00

chore(vendor): bump scrum4me-copilot naar bc9cb2d (drawer slide-in + portal full-height-fix)

janpeter referenced this pull request

2026-06-12 20:41:28 +02:00

chore: drawer slide-in + full-height portal-fix (kit-bump bc9cb2d) #82