Skip to content

remove hardcoded @host in swagger#605

Merged
parkan merged 1 commit intomainfrom
fix/relative-swagger
Feb 3, 2026
Merged

remove hardcoded @host in swagger#605
parkan merged 1 commit intomainfrom
fix/relative-swagger

Conversation

@parkan
Copy link
Collaborator

@parkan parkan commented Feb 3, 2026

No description provided.

@parkan
Copy link
Collaborator Author

parkan commented Feb 3, 2026

force merging because the original restriction made assumptions that do not hold

@parkan parkan merged commit cdef556 into main Feb 3, 2026
3 checks passed
@parkan parkan deleted the fix/relative-swagger branch February 3, 2026 19:15
@parkan parkan restored the fix/relative-swagger branch February 4, 2026 09:25
@parkan
Copy link
Collaborator Author

parkan commented Feb 4, 2026

NOTE: I kiinda snuck this through but I am confident it is safe (or at least, no worse than before): previously the "try it" commands in swagger were hardcoded to localhost:9090, rather than the host the frontend loaded from. This means that accessing the try it functionality required tunneling into whatever machine was running it, even if FE was available.

This did not provide any additional safety (can always copy the curl for any endpoint), just inconvenience. Actual security is handled by access gating the API in either case.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant