diff options
| author | Peter Stone <thepeterstone@gmail.com> | 2026-07-05 04:44:54 +0000 |
|---|---|---|
| committer | Peter Stone <thepeterstone@gmail.com> | 2026-07-05 04:44:54 +0000 |
| commit | 081d06794a90ce45406ac1f12db9f843d8077327 (patch) | |
| tree | 7632a2d0cd1aceecf7263720609c44c9e898e540 /internal/handlers/tab_state_test.go | |
| parent | 8c55b9b10fecd45ac5acf3f13fc23d342a4aa53b (diff) | |
feat(gateway): add publicPaths bypass for all-method service routes
Adds a publicPaths field to serviceMount alongside webhookPaths.
webhookPaths remains POST-only (HMAC-signed webhooks). publicPaths
bypasses session auth for all methods, relying on the upstream
service's own bearer-token auth instead.
Used to expose /claudomator/chatbot/mcp for MCP client connections
(claude-code) which carry their own Authorization header and cannot
carry a doot session cookie.
Diffstat (limited to 'internal/handlers/tab_state_test.go')
0 files changed, 0 insertions, 0 deletions