@lifeaitools/clauth 1.4.2 → 1.4.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/cli/commands/serve.js +4 -3
- package/package.json +1 -1
package/cli/commands/serve.js
CHANGED
|
@@ -3092,8 +3092,9 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
|
|
|
3092
3092
|
return ok(res, { status: tunnelStatus });
|
|
3093
3093
|
}
|
|
3094
3094
|
|
|
3095
|
-
// GET /shutdown (for daemon stop — programmatic, keeps boot.key)
|
|
3096
|
-
|
|
3095
|
+
// GET|POST /shutdown (for daemon stop — programmatic, keeps boot.key)
|
|
3096
|
+
// Accept POST as well — older scripts and curl default to POST
|
|
3097
|
+
if ((method === "GET" || method === "POST") && reqPath === "/shutdown") {
|
|
3097
3098
|
stopTunnel();
|
|
3098
3099
|
ok(res, { ok: true, message: "shutting down" });
|
|
3099
3100
|
removePid();
|
|
@@ -4046,7 +4047,7 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
|
|
|
4046
4047
|
// Don't count browser noise, MCP discovery probes, or OAuth probes as auth failures
|
|
4047
4048
|
const isBenign = reqPath.startsWith("/.well-known/") || [
|
|
4048
4049
|
"/favicon.ico", "/robots.txt", "/apple-touch-icon.png", "/apple-touch-icon-precomposed.png",
|
|
4049
|
-
"/sse", "/mcp", "/message", "/register", "/authorize", "/token",
|
|
4050
|
+
"/sse", "/mcp", "/message", "/register", "/authorize", "/token", "/shutdown",
|
|
4050
4051
|
].includes(reqPath);
|
|
4051
4052
|
if (isBenign) {
|
|
4052
4053
|
res.writeHead(404, { "Content-Type": "application/json", ...CORS });
|