fix: base64-encode Patchmon Basic auth credentials server-side #74

Merged
josh merged 2 commits from fix/patchmon-sync-basic-auth into dev 2026-05-30 18:54:53 -04:00
Owner
No description provided.
josh added 2 commits 2026-05-30 18:53:41 -04:00
Patchmon's API uses standard RFC 7617 Basic auth — `Basic base64(token_key:token_secret)`. The handler was sending the api_token field verbatim, so it only worked if the user had manually base64-encoded the credential. After a Patchmon upgrade, the sync started returning HTML (the SPA, served when auth is rejected) and failing with "Unexpected token '<'" on JSON.parse.

Now: if the token contains ':' (raw key:secret), encode it server-side; otherwise pass through unchanged for backward compatibility. UI gets a placeholder hint showing the expected format.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
chore: bump to version 1.7.1
CI / test (pull_request) Successful in 19s
CI / build-dev (pull_request) Has been skipped
ac71ea2c49
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
josh scheduled this pull request to auto merge when all checks succeed 2026-05-30 18:53:45 -04:00
josh merged commit a28867b398 into dev 2026-05-30 18:54:53 -04:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: josh/Catalyst#74