Skip to content

Separate public API from protected Support Worker - #10

Merged
EdgeClaws merged 1 commit into
mainfrom
clawdia/public-api-worker
Sep 22, 2026
Merged

EdgeClaws merged 1 commit into
mainfrom
clawdia/public-api-worker

Conversation

@EdgeClaws

Copy link
Copy Markdown
Collaborator

Production correction

The consolidated catalog deployed, but Cloudflare Access correctly followed the protected Support Worker onto its new public routes. This splits /api/status and /api/token into a dedicated public Worker instead of weakening the Support Access policy.

  • dedicated edgetools-public-api Worker owns exactly two routes
  • Support Staff Worker returns to protected Support paths only
  • all workers.dev and preview aliases stay disabled
  • exact host/path rejection remains tested

Verification

  • 40/40 tests
  • all three Worker dry-runs
  • external links
  • gitleaks
  • dependency audit: 0 findings
  • rollback remains 842fc27

@EdgeClaws
EdgeClaws merged commit b211c3b into main Sep 22, 2026
1 check passed
@EdgeClaws
EdgeClaws deleted the clawdia/public-api-worker branch September 22, 2026 08:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant