ekko f3a980bb2e fix: patch auth bypass via case-sensitive path matching (#77) ...

- Normalize request path to lowercase before auth check to prevent
  bypassing authentication with uppercase paths like /API/hermes/sessions
- Auto-restart server after in-page update via detached hermes-web-ui restart

Closes #77

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-20 15:21:47 +08:00

..

client

feat: sort sessions by latest message time instead of creation time

2026-04-19 23:32:01 +08:00

server

fix: patch auth bypass via case-sensitive path matching (#77)

2026-04-20 15:21:47 +08:00