mathiasandClaude Opus 5.5 d6ddac4a03 fix(metrics): label an unmatched request "unmatched", never its raw path (#185) ...

An authenticated REST request to an unregistered path reached the inner
mux, which left Pattern empty, and metrics.Middleware fell back to the
raw URL path: any token holder could create one Prometheus series per
unique path. The fallback is now the fixed label "unmatched"; real routes
keep their pattern. Tests: buildMux with an authenticated random path,
and the middleware unit test; the timing test now routes through a
ServeMux as production does.

Fixes #185.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-05 23:42:45 +02:00

..

jwt_validator_test.go

fix(ingestion): build /mcp's bearer and the metrics wrap inside buildMux (#154) (#183)

2026-10-05 17:48:44 +00:00

jwt_validator.go

fix(ingestion): bump mcp-chassis to v0.7.1; log auth rejections; label refused REST requests by route (#181)

2026-10-05 14:40:20 +00:00

main_test.go

feat(server): say at startup when alerting is unconfigured (#107) (#140)

2026-09-23 13:02:40 +00:00

main.go

fix(audit): each ntfy alert source sends its own title (#163)

2026-10-05 23:28:38 +02:00

routes_observability_test.go

fix(ingestion): build /mcp's bearer and the metrics wrap inside buildMux (#154) (#183)

2026-10-05 17:48:44 +00:00

routes_test.go

fix(metrics): label an unmatched request "unmatched", never its raw path (#185)

2026-10-05 23:42:45 +02:00

routes.go

fix(ingestion): build /mcp's bearer and the metrics wrap inside buildMux (#154) (#183)

2026-10-05 17:48:44 +00:00

symlink_check_test.go

fix(audit): each ntfy alert source sends its own title (#163)

2026-10-05 23:28:38 +02:00

symlink_check.go

feat(ingestion): symlink tripwire for the Syncthing-shared brain dir (#157) (#159)

2026-10-03 15:23:06 +00:00