3 people bb9bce440e fix(admin): surface silent Management API auth failures, add link-state health checks (#585) ...

## Summary
- #269's stuck Spotify presets traced to the account link never
completing, invisible because the admin UI silently swallowed 401s from
`/api/mgmt/*` instead of prompting for a retry. The browser's own Basic
Auth caching already works correctly here (verified live); the bug was
purely missing feedback.
- Adds two Health-tab checks: Spotify configured but no account linked,
and Management API credentials still at the published default.

Refs #269, #419.

## Test plan
- [x] `make check` (fmt, vet, unit tests) clean
- [x] `make lint` clean
- [x] Live-tested end to end with a headless Chrome (chromedp) against a
local build: confirmed the new failure-path messages render correctly
for `fetchSpotifyStatus`, `fetchAccountList`, and `linkSpotify`

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-26 20:24:57 +02:00

..

static

…

testdata/issue285

…

web

fix(admin): surface silent Management API auth failures, add link-state health checks (#585)

2026-07-26 20:24:57 +02:00

auth_probe_test.go

feat(health): add on-demand DNS-path diagnostics for the #345 speaker-DNS escape

2026-06-03 23:29:15 +02:00

auth_probe.go

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

bmx_registry_test.go

fix(bmx): strip trailing slash from server_url so TuneIn playback routes

2026-06-05 14:08:41 +02:00

bridge_test.go

…

deprecated_routes.go

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

dns_settings_test.go

…

docs_consistency_test.go

docs: migrate Jekyll site to Hugo + Hextra

2026-05-24 13:30:36 +02:00

handlers_account_mgmt_test.go

…

handlers_account_mgmt.go

fix(security): sec7 — log-injection sweep, sanitizeErr helper

2026-05-25 11:28:26 +02:00

handlers_alexa.go

sec5a: sanitize log-injection in pkg/service/handlers

2026-05-24 16:20:25 +02:00

handlers_bmx_custom.go

…

handlers_bmx_orion.go

feat(service): add 3 speaker-contract routes for parity (refs #451)

2026-06-06 19:11:24 +02:00

handlers_bmx_registry_availability_test.go

…

handlers_bmx_report_test.go

…

handlers_bmx_siriusxm.go

sec5a: sanitize log-injection in pkg/service/handlers

2026-05-24 16:20:25 +02:00

handlers_bmx_test.go

…

handlers_bmx_tunein_test.go

…

handlers_bmx_tunein.go

feat(service): add 3 speaker-contract routes for parity (refs #451)

2026-06-06 19:11:24 +02:00

handlers_bmx.go

fix(lint): add staticcheck-native suppressions for known-good warnings

2026-05-24 14:49:13 +02:00

handlers_ca_bundle.go

feat(health): add speaker_ca_bundle integrity check

2026-05-27 01:25:56 +02:00

handlers_catchall_test.go

…

handlers_catchall.go

sec5a: sanitize log-injection in pkg/service/handlers

2026-05-24 16:20:25 +02:00

handlers_device_remove_test.go

feat(web): remove devices from the player UI (refs #451)

2026-06-07 15:08:26 +02:00

handlers_device_summary_test.go

…

handlers_device_summary.go

…

handlers_ding_test.go

…

handlers_ding.go

feat(ding): repeat ding 3× by default to survive speaker startup delay

2026-05-27 21:20:58 +02:00

handlers_docs.go

…

handlers_etag_account_test.go

…

handlers_etag_test.go

fix(lint): add staticcheck-native suppressions for known-good warnings

2026-05-24 14:49:13 +02:00

handlers_events_test.go

…

handlers_events.go

…

handlers_export_test.go

feat(export): encrypted diagnostic report for issue reporting

2026-05-21 20:02:57 +02:00

handlers_export.go

fix(export): report effective HTTPS URL + override in diagnostics (#355)

2026-07-04 17:45:41 +02:00

handlers_health_checks_test.go

…

handlers_health_checks.go

feat(health): show device name and IP on per-device findings

2026-06-28 12:10:18 +02:00

handlers_health_test.go

…

handlers_health.go

…

handlers_landing_test.go

feat(service): keep the chooser reachable via /?chooser (refs #451)

2026-06-07 15:08:26 +02:00

handlers_logs_test.go

…

handlers_logs.go

…

handlers_marge_stockholm_test.go

…

handlers_marge_test.go

chore(sanitize): remove real device ID and personal LAN IPs from tracked files

2026-06-06 19:11:24 +02:00

handlers_marge.go

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

handlers_media_test.go

feat: tighter discovery filter + UX cleanups (#269, #345, #355, #359)

2026-05-22 21:15:34 +02:00

handlers_media.go

feat(service): keep the chooser reachable via /?chooser (refs #451)

2026-06-07 15:08:26 +02:00

handlers_mgmt_test.go

…

handlers_mgmt.go

fix(security): sec7 — log-injection sweep, sanitizeErr helper

2026-05-25 11:28:26 +02:00

handlers_oauth_test.go

…

handlers_oauth.go

sec5a: sanitize log-injection in pkg/service/handlers

2026-05-24 16:20:25 +02:00

handlers_pairing.go

feat(health): operator-confirmable QuickFix to complete speaker pairing (#329)

2026-05-20 22:44:57 +02:00

handlers_peer_probe.go

…

handlers_setup_test.go

fix(setup): seed audionotification host(s) into /etc/hosts for /speaker TTS

2026-05-31 22:35:31 +02:00

handlers_setup.go

feat(settings): derive the HTTPS URL from the Target Domain, show + override in UI (#355)

2026-07-04 17:45:41 +02:00

handlers_stats_test.go

…

handlers_stats.go

…

handlers_tls_hosts_fix_test.go

feat(tls): persist TLSExtraHosts + Settings UI + speaker_marge_url QuickFix

2026-05-22 20:32:44 +02:00

handlers_tls_hosts_fix.go

feat(tls): persist TLSExtraHosts + Settings UI + speaker_marge_url QuickFix

2026-05-22 20:32:44 +02:00

handlers_tts_test.go

refactor: rename soundtouch-web to soundtouch-player (transitional alias) (refs #451)

2026-06-07 16:33:39 +02:00

handlers_tts.go

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

handlers_unsupported.go

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

interactions_test.go

…

issue218_regression_test.go

…

issue285_regression_test.go

…

logutil.go

fix(security): sec7 — log-injection sweep, sanitizeErr helper

2026-05-25 11:28:26 +02:00

mac_discovery_integration_test.go

fix(handlers): remove stale account entry when MoveDevice target dir exists

2026-05-24 10:23:38 +02:00

mac_mapping_integration_test.go

fix(lint): add staticcheck-native suppressions for known-good warnings

2026-05-24 14:49:13 +02:00

main_test.go

…

middleware_clientip_test.go

fix(handlers): resolve client IP via chi ClientIP, drop deprecated RealIP

2026-06-28 13:15:49 +02:00

middleware_clientip.go

fix(handlers): resolve client IP via chi ClientIP, drop deprecated RealIP

2026-06-28 13:15:49 +02:00

middleware_peer_observer.go

fix(handlers): resolve client IP via chi ClientIP, drop deprecated RealIP

2026-06-28 13:15:49 +02:00

migration_options_test.go

…

migration_options.go

…

origin_middleware.go

sec5a: sanitize log-injection in pkg/service/handlers

2026-05-24 16:20:25 +02:00

parity_mismatch_repro_test.go

…

parity_mismatch_repro_v2_test.go

…

parity_regression_test.go

…

peer_observer_test.go

…

peer_observer.go

…

preflight_test.go

feat(settings): derive the HTTPS URL from the Target Domain, show + override in UI (#355)

2026-07-04 17:45:41 +02:00

preflight.go

feat(settings): derive the HTTPS URL from the Target Domain, show + override in UI (#355)

2026-07-04 17:45:41 +02:00

prime_spotify_test.go

…

recent_parity_test.go

…

recorder_middleware.go

sec8: suppress go/reflected-xss false positive in recorder middleware

2026-05-25 13:14:56 +02:00

scmudc_enricher.go

…

server_merge_test.go

…

server.go

fix(admin): surface silent Management API auth failures, add link-state health checks (#585)

2026-07-26 20:24:57 +02:00

shortcut_middleware.go

…

snapshot_middleware_test.go

…

snapshot_middleware.go

…

spotify_addition_test.go

…