Plugin static assets blocked by OAuth auth gate
Cluster 53066 · dashboard. Data as of
Nothing open on GitHub. Fix merged in #133863 on 6 Oct 2026. Check it covers your case.
The short answer
- Known?
- Yes. 4 related items grouped here, 1 issue already closed.
- Fix event
- A fix was merged to main in PR #133863. Check it covers your case. No release data is tracked.
- Tracker
- The maintainers' tracker marks this
resolved, deciding PR #133863. That is separate from the fix event. - Still open
- Nothing open on GitHub.
A bug where plugin static asset paths (such as index.js and style.css) are incorrectly intercepted by the OAuth authentication gate, returning 401 errors. The related items address exempting dashboard plugin asset routes from auth requirements.
Open issues0
Open PRs0
Fixes on record
-
#133863 fix(dashboard-auth): serve plugin assets through the OAuth gate
files:
hermes_cli/dashboard_auth/middleware.py,tests/hermes_cli/test_dashboard_auth_middleware.py
2 PRs closed without merging
From the close comments: merged via another change 1 · superseded by another PR 1
Closed issues · 1
- Closed#53066[Bug] v0.17.0: Plugin static assets (index.js/style.css) return 401 behind OAuth gate — plugin did not call register()
How this cluster was grouped
-
Link evidence (
structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference. -
Pairwise link density
0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36.1.00means every pair is linked.
Pick up a Lab task
Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.
Open the LabAt a glance
- Subsystem
- dashboard
- Merged PRs
- #133863
- Closed issues
- 1
- Attempts
- 2 PRs closed without merging
- Fix link checked
- 6 Oct 2026