Cairn

Dashboard API auth and header case bugs

NousResearch/hermes-agent · cluster 7018 · agent

Data as of

Nothing open on GitHub. Fix merged in #7174. Check it covers your case.

The short answer

0open issues
0open PRs
10items grouped
Known?
Yes. 10 related items grouped here, 6 issues already closed.
Fix event
A fix was merged to main in PR #7174. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
Nothing open on GitHub.

Multiple issues and fixes centered on dashboard API authentication failures (401/404 errors) and header case sensitivity problems, particularly in rate limit parsing and session token lookup. Related fixes touch Kanban board loading, OAuth gating, and SPA token refresh behavior.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #7174 fix: four small CLI/config fixes (Bucket K salvage)

    merged to main

    files: agent/rate_limit_tracker.py, agent/smart_model_routing.py, cli.py, hermes_cli/gateway.py

3 PRs closed without merging

From the close comments: done elsewhere 1 · merged via another change 1 · won't fix / by design 1

  • #7019 fix: normalize headers to lowercase in parse_rate_limit_headers · merged via another change → #7174
  • #16758 fix(dashboard): normalize session header lookup to lowercase · won't fix / by design → #16726
  • #46398 fix(kanban): keep dashboard API mounted without multipart · done elsewhere → c661634, #46205
Closed issues · 6
  • Closed#7018bug: parse_rate_limit_headers silently returns all-zero buckets for non-lowercase header keys
  • Closed#16726Dashboard: /api/skills returns 401 Unauthorized on v0.11+ (header case mismatch)
  • Closed#24186Hermes update broke Kanban — 401 Unauthorized on board load
  • Closed#25275[BUG] Analytics dashboard API returns 401 Unauthorized after v0.13.0 update
  • Closed#29183[bug]: hardcoded "***" session token
  • Closed#46205[Bug]: Kanban dashboard fails to load with 404 "No such API endpoint: /api/plugins/kanban/board" despite plugin being registered
How this cluster was grouped
  • Link evidence (partly structural links): some members are connected by structural evidence (shared changed files, or a closing/superseded reference); the rest are joined by an automated relevance judgement over their text.
  • Members outside that structural core may belong to a different underlying problem.
  • Pairwise link density 0.14: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Merged PRs
#7174
Closed issues
6
Attempts
3 PRs closed without merging
Fix link checked
10 Apr 2026. This confirmation is old and may be out of date (a revert or reopen would not have invalidated it here); re-verify.

For your agent

The same facts, typed.

cluster/7018.json
cluster/7018.md