From 0445a1c1cc17f983351cf8ca5801c2d4ca689e57 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 16 Apr 2026 17:04:06 +0000 Subject: [PATCH 1/2] Initial plan From e83b4ff5b1442f5ac2f0bf3c9baa781041b11c1e Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 16 Apr 2026 17:06:00 +0000 Subject: [PATCH 2/2] fix(web): exempt reboot endpoint from auth middleware Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/c4b5b663-c6a6-4c78-a788-9dd47ef85628 Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com> --- app/sovran_systemsos_web/server.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/sovran_systemsos_web/server.py b/app/sovran_systemsos_web/server.py index 09e8b88..e541cbf 100644 --- a/app/sovran_systemsos_web/server.py +++ b/app/sovran_systemsos_web/server.py @@ -98,7 +98,7 @@ LOGIN_FAIL_WINDOW = 60.0 # rolling window (seconds) for counting failures LOGIN_FAIL_MAX = 10 # max failures in window before extra delay # Public paths that are accessible without a valid session -_AUTH_EXEMPT_PATHS = {"/login", "/api/login", "/api/updates/status", "/api/rebuild/status", "/auto-login", "/api/ping"} +_AUTH_EXEMPT_PATHS = {"/login", "/api/login", "/api/updates/status", "/api/rebuild/status", "/auto-login", "/api/ping", "/api/reboot"} # Prefixes for static assets required by the login page _AUTH_EXEMPT_PREFIXES = ("/static/css/", "/static/sovran-hub-icon.svg")