mirror of
https://github.com/getpaseo/paseo.git
synced 2026-11-03 15:12:48 +00:00
paseo-bot[bot]andHomicideZero
b507fc1986
* fix(server): return 404 for unserved well-known paths The daemon web UI middleware fell back to the SPA's index.html for every unknown GET, including /.well-known/* URIs. MCP clients that run OAuth discovery (RFC 9728 protected resource metadata, RFC 8414 authorization server metadata) received a 200 text/html body, treated it as malformed metadata and retried instead of concluding the server has no OAuth. Well-known paths now serve a real file from the dist directory if one exists and otherwise return a JSON 404. Other paths keep the SPA fallback. * fix(server): verify metadata routing through the daemon Retain the contributed well-known routing fix with named resolver options and a full daemon regression that fails when metadata requests receive app HTML. Co-authored-by: HomicideZero <219062565+HomicideZero@users.noreply.github.com> --------- Co-authored-by: HomicideZero <219062565+HomicideZero@users.noreply.github.com> Co-authored-by: paseo-bot[bot] <266920839+paseo-bot[bot]@users.noreply.github.com>