fix: base64-encode Patchmon Basic auth credentials server-side #77

Merged

josh merged 5 commits from dev into main 2026-05-30 19:04:27 -04:00

Conversation 0 Commits 5 Files Changed 4

+11 -3

josh commented 2026-05-30 19:03:34 -04:00

Owner

Copy Link

Copy Source

No description provided.

josh added 5 commits 2026-05-30 19:03:34 -04:00

fix: base64-encode Patchmon Basic auth credentials server-side ... efa1750cac

Patchmon's API uses standard RFC 7617 Basic auth — `Basic base64(token_key:token_secret)`. The handler was sending the api_token field verbatim, so it only worked if the user had manually base64-encoded the credential. After a Patchmon upgrade, the sync started returning HTML (the SPA, served when auth is rejected) and failing with "Unexpected token '<'" on JSON.parse.

Now: if the token contains ':' (raw key:secret), encode it server-side; otherwise pass through unchanged for backward compatibility. UI gets a placeholder hint showing the expected format.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

chore: bump to version 1.7.1 ... ac71ea2c49

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Merge pull request 'fix: base64-encode Patchmon Basic auth credentials server-side' (#74) from fix/patchmon-sync-basic-auth into dev ... a28867b398

Reviewed-on: #74

Merge branch 'main' into dev — resolve 1.7.0/1.7.1 version overlap, keep 1.7.1 ... 917fb26e05

# Conflicts:
#	package.json

Merge pull request 'Merge pull request 'test: add failing tests for sort/order on GET /api/instances' (#71) from dev into main' (#76) from merge/main-into-dev-v1.7.1 into dev ... 72b8d60985

Reviewed-on: #76

josh scheduled this pull request to auto merge when all checks succeed 2026-05-30 19:03:37 -04:00

josh merged commit 194cd3c175 into main 2026-05-30 19:04:27 -04:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

josh (Josh Wright)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: josh/Catalyst#77