aaronrene / knowtation public
fix patch feat/phase-2g-bundle
AI Agent git-import/068377df · 108 days ago · Apr 10, 2026 · Diff

fix: Hub UI reads token from URL fragment (#token=) + uses signed image proxy token

The Phase 3 redirect change moved the OAuth token from ?token= to #token= (URL fragment), but the Hub UI was only reading from the query string. Now parses location.hash first, with ?token= fallback.

Image proxy: the frontend now fetches a short-lived HMAC-signed token from /api/v1/vault/image-proxy-token instead of embedding the full session JWT in <img> src query params.

sha256:f03730c18e88700b0328353dab7c37471a1c938d3b66f5c78aae07970be17044 sha
sha256:bf4cd2a8c13a2cd7e0cd14494139811c56179358c62a16e4928d2e6caad499da parent
sha256:382d20de2ce70ddca8a5f5c47effec0a0b8b66dbf0050d51df7d9c8668e3e32c snapshot
← Older Oldest on feat/phase-2g-bundle
All commits
Newer → Latest on feat/phase-2g-bundle

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:f03730c18e88700b0328353dab7c37471a1c938d3b66f5c78aae07970be17044 --body "your comment"