Problem. A browser navigating to /v2 (no trailing slash) gets 401. isPublicRoute matches GET /v2/ exactly. That is the URL a person types, and it reads as a key problem.
Why. Spec 83 D9 made GET /v2/ and GET /v2/assets/* public so the shell can load without a header. The no-slash form was left keyed on purpose for that unit. It is still the first URL anyone types.
Scope of a fix. Add GET /v2 to the same public-route split, or redirect /v2 → /v2/ before the key check. /v2/events stays keyed.
Found in the spec 83 integration review (PR #104). Out of scope for that unit.
Related: #83
Problem. A browser navigating to
/v2(no trailing slash) gets 401.isPublicRoutematchesGET /v2/exactly. That is the URL a person types, and it reads as a key problem.Why. Spec 83 D9 made
GET /v2/andGET /v2/assets/*public so the shell can load without a header. The no-slash form was left keyed on purpose for that unit. It is still the first URL anyone types.Scope of a fix. Add
GET /v2to the same public-route split, or redirect/v2→/v2/before the key check./v2/eventsstays keyed.Found in the spec 83 integration review (PR #104). Out of scope for that unit.
Related: #83