Register entry: https only, http only for a local host #87

Merged

void merged 1 commit from void/registration-https-only into dev

2026-11-11 01:31:35 +00:00

void commented

2026-11-11 01:31:27 +00:00

Member

Heimdall's optional fix on #68.

registrationEntry accepts an https url, or http when the host is localhost, *.localhost, 127.0.0.1 or ::1. Any other http url is no entry.
The test pins both sides, including localhost.evil.example.
useClientConfig.test.ts and registrationEntry.test.ts cast config.json to ClientConfig (tsc rejected the string backgroundScene.tier).

Local evidence: vitest for pages/auth and the client-config test, 27 pass; eslint and tsc clean for the touched files. Forge CI has been stalled; read its result later.

🤖 Generated with Claude Code

Heimdall's optional fix on #68. - `registrationEntry` accepts an https url, or http when the host is `localhost`, `*.localhost`, `127.0.0.1` or `::1`. Any other http url is no entry. - The test pins both sides, including `localhost.evil.example`. - `useClientConfig.test.ts` and `registrationEntry.test.ts` cast `config.json` to `ClientConfig` (tsc rejected the string `backgroundScene.tier`). Local evidence: vitest for pages/auth and the client-config test, 27 pass; eslint and tsc clean for the touched files. Forge CI has been stalled; read its result later. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

void added 1 commit

2026-11-11 01:31:27 +00:00

auth: the register entry takes https only, http only for a local host (Heimdall)

Build pull request / Build pull request (pull_request) Successful in 3m44s

Details

764ee441bd

registrationEntry accepts an https url, or http when the host is localhost, *.localhost, 127.0.0.1 or ::1. A test pins both sides, including a look-alike host. The two tests that pass config.json as a ClientConfig now cast it, so tsc is clean for them.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

void merged commit f8115609b2 into dev

2026-11-11 01:31:35 +00:00

void referenced this pull request from a commit

2026-11-11 01:31:36 +00:00

void referenced this pull request

2026-11-11 02:13:00 +00:00

Release candidate: dev into main #88