Kpa-clawbot 1624d6e244 fix: unprotect /api/decode from API key auth (#323) ...

## Fix: unprotect /api/decode from API key auth

Fixes #304

### Problem
PR #283 applied `requireAPIKey` to all POST endpoints including
`/api/decode`. But BYOP decode is a stateless read-only decoder — it
never writes to the database. Users see "write endpoints disabled" when
trying to decode packets.

### Fix
- Removed `requireAPIKey` wrapper from `/api/decode` in
`cmd/server/routes.go`
- Updated auth tests to use `/api/perf/reset` (actual write endpoint)
instead of `/api/decode`
- Added tests proving `/api/decode` works without API key, even when
apiKey is configured or empty

### Note
Decoder consolidation (`internal/decoder/` shared package) is tracked
separately and not included here to keep the PR clean.

### Tests
- `cd cmd/server && go test ./...` ✅

Co-authored-by: Kpa-clawbot <259247574+Kpa-clawbot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-03-31 00:13:31 -07:00

..

testdata/golden

chore: normalize all files to LF line endings

2026-03-30 22:52:46 -07:00

config_test.go

chore: normalize all files to LF line endings

2026-03-30 22:52:46 -07:00

config.go

chore: normalize all files to LF line endings

2026-03-30 22:52:46 -07:00

coverage_test.go

feat: implement packet store eviction/aging to prevent OOM (#273)

2026-03-30 03:42:11 +00:00

db_test.go

Wire channel region filtering end-to-end

2026-03-30 23:03:56 -07:00

db.go

Wire channel region filtering end-to-end

2026-03-30 23:03:56 -07:00

decoder.go

chore: normalize all files to LF line endings

2026-03-30 22:52:46 -07:00

eviction_test.go

feat: implement packet store eviction/aging to prevent OOM (#273)

2026-03-30 03:42:11 +00:00

go.mod

rename: MeshCore Analyzer → CoreScope (Phase 1 — backend + infra)

2026-03-28 14:08:15 -07:00

go.sum

feat: add Go web server (cmd/server/) — full API + WebSocket + static files

2026-03-27 01:16:59 -07:00

helpers_test.go

chore: normalize all files to LF line endings

2026-03-30 22:52:46 -07:00

main.go

chore: normalize all files to LF line endings

2026-03-30 22:52:46 -07:00

parity_test.go

feat: implement packet store eviction/aging to prevent OOM (#273)

2026-03-30 03:42:11 +00:00

routes_test.go

fix: unprotect /api/decode from API key auth (#323)

2026-03-31 00:13:31 -07:00

routes.go

fix: unprotect /api/decode from API key auth (#323)

2026-03-31 00:13:31 -07:00

store.go

Wire channel region filtering end-to-end

2026-03-30 23:03:56 -07:00

types.go

chore: normalize all files to LF line endings

2026-03-30 22:52:46 -07:00

websocket_test.go

feat: implement packet store eviction/aging to prevent OOM (#273)

2026-03-30 03:42:11 +00:00

websocket.go

fix: per-observation WS broadcast for live view starburst — fixes #237

2026-03-29 08:32:37 -07:00