fix-forward #2633: the dead-credential 404 fires on existing off-allowlist routes and the garbage-credential control is inert (tsk-sonaie) - #2792

Closed

jaylfc wants to merge 4 commits into

devfrom

exec/tsk-iqk2bn

Commits on Aug 28, 2026

Fix auth middleware to return 404 for authenticated callers on unknown routes
jaylfc
committed
4b27a6f

Commits on Aug 29, 2026

fix auth middleware returns 404 for valid registry JWT on unlisted routes
jaylfc
committed
f53531e
fix dead registry JWTs returning 404 instead of 401, strengthen garbage-credential test
jaylfc
committed
7bd1222

Commits on Sep 5, 2026

fix(auth): 404 only for paths no route serves, not off-allowlist routes (tsk-sonaie)
jaylfc
committed
6b33ad7