Files
zpan/server
saltboandClaude Opus 4.7 6bf8ecc8d5 fix(share): return 403 instead of 401 on wrong share password
Dev (vite + miniflare + undici) returns 500 "fetch failed" when the
Worker responds 401 to a POST with a body. undici follows the Fetch
spec's HTTP-auth retry branch, which needs to re-extract the request
body from its source — but the body comes from Node's IncomingMessage
stream, so `body.source` is null and undici throws
`expected non-null body source`. Production (direct CF edge) is
unaffected, this only breaks local dev.

403 is also semantically more accurate: the client isn't performing
HTTP authentication, just supplying a shared secret.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 15:10:21 -04:00
..