4 Commits

Include renames

Author	SHA1	Message	Date
sneak	11a34d498d	Let a handler flush or set a write deadline through the access log and metrics (closes #191) ... The access log's response writer had no Unwrap method, so http.ResponseController stopped at it and a handler's Flush or SetWriteDeadline returned http.ErrNotSupported. It now has one. With metrics on, the metrics library's std.Handler put a writer of its own in the chain with the same gap. The Metrics middleware now calls the library's Measure with a writer of ours that has Unwrap, and keeps its place in the chain. A new test sets a write deadline and flushes through the production router over a real connection, with metrics off and on, on a global route and in an admin page route group. Model: opus-5-5	2026-10-02 10:30:50 +00:00
clawbot	2416528b77	Render admin page errors in the normal layout (closes #382) ... Every 400, 403, 404 and 500 on an admin page now answers with an error page in the normal layout: the status, one fixed line explaining it, and a link back to the webhook list, or to sign-in when nobody is signed in. Unknown paths reach it through the router's not-found handler, a refused form token through the CSRF middleware, and a panic through a recoverer each admin page route group installs first. Status codes are unchanged, and the page always sends Cache-Control: no-store. If the error page fails to render, the answer is the same status in plain text; if it panics, the answer is a 500. The receiver, the healthcheck and /metrics keep their plain answers. Model: opus-5-5	2026-10-02 08:15:12 +02:00
clawbot	f0adeafde3	Drop Set-Cookie from the recovered 500 (closes #193) ... When a handler sets a cookie and then panics before sending anything, the recover middleware now deletes Set-Cookie before writing its 500, so a request that failed never hands the client a credential. Every other header, Location included, is left as http.Error leaves it, matching chi's Recoverer. A response that was already sent is untouched. Tests cover the uncommitted case (no cookie, Location kept) and assert the cookie still reaches the client when the response was committed before the panic. Model: opus-5-5	2026-09-29 10:30:26 +02:00
clawbot	33e4fa4faa	Report handler panics through the logger and answer 500 (closes #187)	2026-08-18 08:33:12 +02:00