Tobias Gesellchen bdcbd29e3b fix(admin): add the actual Settings control for admin_area_auth ...

The backend (field, validation, guard rail, live-reload middleware) has
worked since the first #419 commit, and the announcement banner correctly
told people "you can opt in now in Settings" — but there was never
actually a control in Settings to do that with. Caught by manual testing
against a running instance: the banner rendered fine, proving chunks 1-6
worked, but Settings had nothing to act on.

Adds a select (mirroring default_landing's pattern) with the tri-state
choices spelled out in plain language, wired into updateSettings()/
fetchSettings() alongside the other fields.

Verified end-to-end against a running instance: setting it to "enabled"
(with non-default credentials) persists, and immediately gates /admin
(401 without credentials, 200 with) without a restart.

Refs #419

2026-08-08 23:49:57 +02:00

..

static

refactor(ding): synthesise on demand instead of vendoring the WAV

2026-05-19 23:20:40 +02:00

testdata/issue285

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

web

fix(admin): add the actual Settings control for admin_area_auth

2026-08-08 23:49:57 +02:00

auth_probe_test.go

feat(health): add on-demand DNS-path diagnostics for the #345 speaker-DNS escape

2026-06-03 23:29:15 +02:00

auth_probe.go

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

bmx_registry_test.go

fix(bmx): strip trailing slash from server_url so TuneIn playback routes

2026-06-05 14:08:41 +02:00

bridge_test.go

Fix data race in TestSpotifyBridge

2026-04-06 21:15:15 +02:00

deprecated_routes.go

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

dns_settings_test.go

feat(service): validate server_url and surface resolved DNS intercept IP

2026-05-14 14:49:23 +02:00

docs_consistency_test.go

docs: migrate Jekyll site to Hugo + Hextra

2026-05-24 13:30:36 +02:00

handlers_account_mgmt_test.go

Improve source sync by adding deduction of known source IDs (#167)

2026-04-17 18:50:51 +02:00

handlers_account_mgmt.go

fix(security): sec7 — log-injection sweep, sanitizeErr helper

2026-05-25 11:28:26 +02:00

handlers_activity_test.go

feat(admin): add local activity log + in-memory dismissal cache

2026-08-08 23:49:57 +02:00

handlers_alexa.go

sec5a: sanitize log-injection in pkg/service/handlers

2026-05-24 16:20:25 +02:00

handlers_announcements_test.go

feat(admin): add announcements list + dismiss endpoint

2026-08-08 23:49:57 +02:00

handlers_announcements.go

feat(admin): add announcements list + dismiss endpoint

2026-08-08 23:49:57 +02:00

handlers_bmx_custom.go

refactor(handlers): split handlers_bmx.go per BMX service

2026-05-17 15:05:39 +02:00

handlers_bmx_orion.go

feat(service): add 3 speaker-contract routes for parity (refs #451)

2026-06-06 19:11:24 +02:00

handlers_bmx_registry_availability_test.go

Add /bmx/registry/v1/servicesAvailability

2026-04-05 00:55:40 +02:00

handlers_bmx_report_test.go

remove: mirror middleware and parity comparison with Bose cloud

2026-05-17 21:53:33 +02:00

handlers_bmx_siriusxm.go

sec5a: sanitize log-injection in pkg/service/handlers

2026-05-24 16:20:25 +02:00

handlers_bmx_test.go

remove: mirror middleware and parity comparison with Bose cloud

2026-05-17 21:53:33 +02:00

handlers_bmx_tunein_test.go

fix(bmx): relax TuneIn + Orion Authorization gate, log instead

2026-05-17 15:05:39 +02:00

handlers_bmx_tunein.go

feat(service): add 3 speaker-contract routes for parity (refs #451)

2026-06-06 19:11:24 +02:00

handlers_bmx.go

fix(lint): add staticcheck-native suppressions for known-good warnings

2026-05-24 14:49:13 +02:00

handlers_ca_bundle.go

feat(health): add speaker_ca_bundle integrity check

2026-05-27 01:25:56 +02:00

handlers_catchall_test.go

refactor(handlers): rename proxy-era leftovers to match public names

2026-05-17 21:53:33 +02:00

handlers_catchall.go

sec5a: sanitize log-injection in pkg/service/handlers

2026-05-24 16:20:25 +02:00

handlers_device_remove_test.go

feat(web): remove devices from the player UI (refs #451)

2026-06-07 15:08:26 +02:00

handlers_device_summary_test.go

feat(health): aggregate device-summary panel on Devices tab

2026-05-19 23:20:40 +02:00

handlers_device_summary.go

feat(health): aggregate device-summary panel on Devices tab

2026-05-19 23:20:40 +02:00

handlers_ding_test.go

fix(ding): clamp sample rate against int -> uint32 truncation

2026-05-19 23:20:40 +02:00

handlers_ding.go

feat(ding): repeat ding 3× by default to survive speaker startup delay

2026-05-27 21:20:58 +02:00

handlers_docs.go

fix(security): close go/path-injection alerts via os.Root containment

2026-05-10 15:18:24 +02:00

handlers_etag_account_test.go

Fix ETag for account-level endpoints (#177)

2026-04-20 21:09:00 +02:00

handlers_etag_test.go

fix(lint): add staticcheck-native suppressions for known-good warnings

2026-05-24 14:49:13 +02:00

handlers_events_test.go

…

handlers_events.go

…

handlers_export_activity_test.go

feat(export): bundle the local activity log into diagnostic exports; docs

2026-08-08 23:49:57 +02:00

handlers_export_test.go

feat(export): encrypted diagnostic report for issue reporting

2026-05-21 20:02:57 +02:00

handlers_export.go

feat(export): bundle the local activity log into diagnostic exports; docs

2026-08-08 23:49:57 +02:00

handlers_health_checks_test.go

feat(service): add Health tab with datastore checks and quick fixes

2026-05-19 20:00:16 +02:00

handlers_health_checks.go

feat(health): show device name and IP on per-device findings

2026-06-28 12:10:18 +02:00

handlers_health_test.go

…

handlers_health.go

feat(service): expose build version on GET / mirroring /health

2026-05-17 19:14:05 +02:00

handlers_landing_test.go

feat(service): keep the chooser reachable via /?chooser (refs #451)

2026-06-07 15:08:26 +02:00

handlers_logs_test.go

feat(service): add Logs tab streaming the live stderr trace

2026-05-19 20:12:25 +02:00

handlers_logs.go

feat(service): add Logs tab streaming the live stderr trace

2026-05-19 20:12:25 +02:00

handlers_marge_stockholm_test.go

…

handlers_marge_test.go

chore(sanitize): remove real device ID and personal LAN IPs from tracked files

2026-06-06 19:11:24 +02:00

handlers_marge.go

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

handlers_media_test.go

feat: tighter discovery filter + UX cleanups (#269, #345, #355, #359)

2026-05-22 21:15:34 +02:00

handlers_media.go

feat(service): keep the chooser reachable via /?chooser (refs #451)

2026-06-07 15:08:26 +02:00

handlers_mgmt_test.go

feat(admin): gate /admin + /api/setup behind BasicAuthAdmin when enabled

2026-08-08 23:49:57 +02:00

handlers_mgmt.go

feat(admin): gate /admin + /api/setup behind BasicAuthAdmin when enabled

2026-08-08 23:49:57 +02:00

handlers_oauth_test.go

remove: proxy forwarding to Bose upstream

2026-05-17 21:53:33 +02:00

handlers_oauth.go

sec5a: sanitize log-injection in pkg/service/handlers

2026-05-24 16:20:25 +02:00

handlers_pairing.go

feat(health): operator-confirmable QuickFix to complete speaker pairing (#329)

2026-05-20 22:44:57 +02:00

handlers_peer_probe.go

feat(service): add passive peer-reachability probe handler

2026-05-11 20:31:24 +02:00

handlers_setup_test.go

feat(admin): gate /admin + /api/setup behind BasicAuthAdmin when enabled

2026-08-08 23:49:57 +02:00

handlers_setup.go

feat(admin): gate /admin + /api/setup behind BasicAuthAdmin when enabled

2026-08-08 23:49:57 +02:00

handlers_stats_test.go

…

handlers_stats.go

…

handlers_tls_hosts_fix_test.go

feat(tls): persist TLSExtraHosts + Settings UI + speaker_marge_url QuickFix

2026-05-22 20:32:44 +02:00

handlers_tls_hosts_fix.go

feat(tls): persist TLSExtraHosts + Settings UI + speaker_marge_url QuickFix

2026-05-22 20:32:44 +02:00

handlers_tts_test.go

refactor: rename soundtouch-web to soundtouch-player (transitional alias) (refs #451)

2026-06-07 16:33:39 +02:00

handlers_tts.go

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

handlers_unsupported.go

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

interactions_test.go

remove: mirror middleware and parity comparison with Bose cloud

2026-05-17 21:53:33 +02:00

issue218_regression_test.go

fix(bmx): restore the Authorization gate on /core02/.../orion/station

2026-05-15 14:13:24 +02:00

issue285_regression_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

logutil.go

fix(security): sec7 — log-injection sweep, sanitizeErr helper

2026-05-25 11:28:26 +02:00

mac_discovery_integration_test.go

fix(handlers): remove stale account entry when MoveDevice target dir exists

2026-05-24 10:23:38 +02:00

mac_mapping_integration_test.go

fix(lint): add staticcheck-native suppressions for known-good warnings

2026-05-24 14:49:13 +02:00

main_test.go

refactor: rename /setup/proxy-settings → /setup/logging-settings

2026-05-17 21:53:33 +02:00

middleware_clientip_test.go

fix(handlers): resolve client IP via chi ClientIP, drop deprecated RealIP

2026-06-28 13:15:49 +02:00

middleware_clientip.go

fix(handlers): resolve client IP via chi ClientIP, drop deprecated RealIP

2026-06-28 13:15:49 +02:00

middleware_peer_observer.go

fix(handlers): resolve client IP via chi ClientIP, drop deprecated RealIP

2026-06-28 13:15:49 +02:00

migration_options_test.go

feat(handlers): allow per-field telnet URL keys in migration options

2026-05-11 00:37:11 +02:00

migration_options.go

feat(handlers): allow per-field telnet URL keys in migration options

2026-05-11 00:37:11 +02:00

origin_middleware.go

sec5a: sanitize log-injection in pkg/service/handlers

2026-05-24 16:20:25 +02:00

parity_mismatch_repro_test.go

Add/improve e2e test cases

2026-04-04 18:53:59 +02:00

parity_mismatch_repro_v2_test.go

feat: improve Bose SoundTouch parity, Spotify integration, and data reliability (#138)

2026-04-01 21:55:52 +02:00

parity_regression_test.go

Improve parity with upstream (#155)

2026-04-07 14:44:05 +02:00

peer_observer_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

peer_observer.go

feat(service): add passive peer-reachability probe handler

2026-05-11 20:31:24 +02:00

preflight_test.go

feat(settings): derive the HTTPS URL from the Target Domain, show + override in UI (#355)

2026-07-04 17:45:41 +02:00

preflight.go

feat(settings): derive the HTTPS URL from the Target Domain, show + override in UI (#355)

2026-07-04 17:45:41 +02:00

prime_spotify_test.go

feat(spotify): wire preset storage end-to-end via server-centric priming (#302)

2026-05-16 22:47:57 +02:00

recent_parity_test.go

Add/improve e2e test cases

2026-04-04 18:53:59 +02:00

recorder_middleware.go

sec8: suppress go/reflected-xss false positive in recorder middleware

2026-05-25 13:14:56 +02:00

scmudc_enricher.go

…

server_merge_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

server.go

feat(health): add admin_area_auth_available check

2026-08-08 23:49:57 +02:00

shortcut_middleware.go

…

snapshot_middleware_test.go

…

snapshot_middleware.go

…

spotify_addition_test.go

feat: improve Bose SoundTouch parity, Spotify integration, and data reliability (#138)

2026-04-01 21:55:52 +02:00