2 commits

Author	SHA1	Message	Date
lempkey	fc8e1d1153	test: add over-broad route guard test and address Greptile review	2026-04-06 16:28:42 +01:00
lempkey	a8638619e5	fix: use Express 5 wildcard syntax for better-auth handler route ... Express 5 (path-to-regexp v8+) dropped support for the *paramName wildcard syntax from Express 4. The route registered as '/api/auth/*authPath' silently fails to match any sub-path, causing every /api/auth/* request to return 404 instead of reaching the better-auth handler. Fixes: #2898 Change the route to '/api/auth/{*authPath}', the correct named catch-all syntax in Express 5.	2026-04-06 15:00:39 +01:00