@celilo/console-server 0.5.0 → 0.5.1

package/spa/index.html

@@ -4,7 +4,7 @@
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>celilo</title>
-    <script type="module" crossorigin src="/assets/index-DJJXEYrW.js"></script>
+    <script type="module" crossorigin src="/assets/index-C31pEQ-J.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-eLF_dgP-.css">
   </head>
   <body>

package/src/serve.ts

@@ -16,6 +16,7 @@
  */
 
 import { join } from 'node:path';
+import { API_BASE_PATH } from '@celilo/console-protocol';
 import type { ServiceType } from '@celilo/console-protocol';
 import { CALLBACK_PATH } from './oidc-login';
 import { Upstream, type UpstreamOptions, UpstreamUnavailable } from './upstream';
@@ -267,7 +268,11 @@ export function createHandler(options: ServeOptions): (request: Request) => Prom
     // bundle even with every API call refused.
     const subject = await options.authenticate(request);
     if (subject === null) {
-      if (options.login && !url.pathname.startsWith('/api/') && url.pathname !== CALLBACK_PATH) {
+      if (
+        options.login &&
+        !url.pathname.startsWith(`${API_BASE_PATH}/`) &&
+        url.pathname !== CALLBACK_PATH
+      ) {
         return options.login.redirectToLogin(request);
       }
       return new Response('Unauthorized', {
@@ -276,8 +281,8 @@ export function createHandler(options: ServeOptions): (request: Request) => Prom
       });
     }
 
-    if (url.pathname.startsWith('/api/')) {
-      const name = url.pathname.slice('/api/'.length) as ApiName;
+    if (url.pathname.startsWith(`${API_BASE_PATH}/`)) {
+      const name = url.pathname.slice(API_BASE_PATH.length + 1) as ApiName;
       if (!SERVED.includes(name)) {
         return Response.json(
           { isSucc: false, err: { message: `Unknown verb: ${name}`, type: 'ApiError' } },