Audit missing 401 rejections and fix error attribution
Cluster 103117 · dashboard. Data as of
1 open item. Fix merged in #121375 on 24 Sep 2026. Check it covers your case.
The short answer
- Known?
- Yes. 3 related items grouped here, 1 issue already closed.
- Fix event
- A fix was merged to main in PR #121375. Check it covers your case. No release data is tracked.
- Tracker
- The maintainers' tracker marks this
resolved, deciding PR #121375. That is separate from the fix event. - Still open
- 0 issues and 1 PR.
These issues and fixes address gaps where certain API 401 rejections were not being audited and where error messages incorrectly blamed the wrong credential. The work adds session_rejected audit events and corrects failure naming for stale app-token mints.
Open issues0
Open PRs1
- PR#103122fix(dashboard-auth): audit API 401 rejections with session_rejected event
Fixes on record
-
#121375 fix(auth): audit API 401s and name stale app-token mint failures
files:
apps/desktop/electron/connection-config.test.ts,apps/desktop/electron/connection-config.ts,apps/desktop/electron/oauth-rest-request.ts,apps/desktop/src/components/boot-failure-reauth.test.ts,apps/desktop/src/components/boot-failure-reauth.ts,hermes_cli/dashboard_auth/audit.py,hermes_cli/dashboard_auth/middleware.py,tests/hermes_cli/test_dashboard_auth_middleware.py
Closed issues · 1
- Closed#103117Dashboard auth: bearer-path 401 is never audited, and the error blames the wrong credential
How this cluster was grouped
-
Link evidence (
structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference. -
Pairwise link density
0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36.1.00means every pair is linked.
Pick up a Lab task
Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.
Open the LabAt a glance
- Subsystem
- dashboard
- Merged PRs
- #121375
- Closed issues
- 1
- Attempts
- 0 PRs closed without merging
- Fix link checked
- 24 Sep 2026