fix(dashboard): send Auth1 token in PostAuth header for v2.0.89 login#144
Closed
Await-d wants to merge 3 commits into
Closed
fix(dashboard): send Auth1 token in PostAuth header for v2.0.89 login#144Await-d wants to merge 3 commits into
Await-d wants to merge 3 commits into
Conversation
…l-audit v2.0.88-90 - client.js: cascadeHistoryBudget default 200k→400k, add truncation note for trimmed history so model doesn't ask user to repeat - handlers/chat.js: add IP-rate-limit circuit breaker for non-stream and stream paths, record policy blocked + rate limited events - handlers/messages.js: defensive startMessage() in finish() prevents event ordering violation when message stops before it starts - dashboard/stats.js: track policyBlockedCount and rateLimitedCount, persist to stats.json for dashboard visibility Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
…ling - Frontend saveGlobalProxy/editAccountProxy now checks API error response before showing success toast (fixes silent failure on ERR_PROXY_PRIVATE_HOST) - parseProxyUrl normalizes whitespace and supports space-separated format like "socks5 127.0.0.1 1089" in addition to canonical URL form - setGlobalProxy/setAccountProxy auto-trim proxy host values Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Await-d
changed the title
dwgx
added a commit
that referenced
this pull request
May 7, 2026
Owner
Owner
dwgx
added a commit
that referenced
this pull request
May 7, 2026
…137 proxy parse + cache switch - P0: ReferenceError context is not defined in streamResponse (#135) - PostAuth empty proto body + X-Devin-Auth1-Token + Referer (#134 via @Await-d PR #144) - parseProxyUrl whitespace + frontend error check (#137) - RESPONSE_CACHE_ENABLED env (PR #142 by @suhaihui-git) - IP rate-limit circuit breaker (#132) - CLAUDE.md for agent rules
dwgx
added a commit
that referenced
this pull request
May 7, 2026
dwgx
added a commit
that referenced
this pull request
May 7, 2026
…137 proxy parse + cache switch - P0: ReferenceError context is not defined in streamResponse (#135) - PostAuth empty proto body + X-Devin-Auth1-Token + Referer (#134 via @Await-d PR #144) - parseProxyUrl whitespace + frontend error check (#137) - RESPONSE_CACHE_ENABLED env (PR #142 by @suhaihui-git) - IP rate-limit circuit breaker (#132) - CLAUDE.md for agent rules
dwgx
added a commit
that referenced
this pull request
May 9, 2026
dwgx
added a commit
that referenced
this pull request
May 9, 2026
…137 proxy parse + cache switch - P0: ReferenceError context is not defined in streamResponse (#135) - PostAuth empty proto body + X-Devin-Auth1-Token + Referer (#134 via @Await-d PR #144) - parseProxyUrl whitespace + frontend error check (#137) - RESPONSE_CACHE_ENABLED env (PR #142 by @suhaihui-git) - IP rate-limit circuit breaker (#132) - CLAUDE.md for agent rules
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Affected version
v2.0.89deployments during email/password login.ERR_POSTAUTH_FAILEDunauthenticated: missing required header: X-Devin-Auth1-TokenSummary
X-Devin-Auth1-Tokenapplication/protorequest body shapedevin-session-token$...session credentialsWhy this is separate from v2.0.90
v2.0.90fixes the later OneTimeToken/OTT failure by using the DevinsessionTokendirectly as the API key. This PR fixes an earlier PostAuth protocol failure where upstream now requires the Auth1 token in theX-Devin-Auth1-Tokenheader instead of the JSON body.Verification
node --test test/v2090-ott-bypass.test.jsnode --check src/dashboard/windsurf-login.js