Stefan Agner 9e0d3fe461 Return 401 for non-Basic Authorization headers on /auth endpoint (#6612) ...

aiohttp's BasicAuth.decode() raises ValueError for any non-Basic auth
method (e.g. Bearer tokens). This propagated as an unhandled exception,
causing a 500 response instead of the expected 401 Unauthorized.

Catch the ValueError in _process_basic() and raise HTTPUnauthorized with
the WWW-Authenticate realm header so clients get a proper 401 response.

Fixes SUPERVISOR-BFG

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-04 15:55:49 -05:00

..

middleware

Fix mypy issues in plugins and resolution (#5946)

2025-06-16 14:12:47 -04:00

__init__.py

Strip ANSI escape color sequences from /latest log responses (#6319)

2025-11-19 09:39:24 +01:00

conftest.py

Add default verbose timestamps for plugin logs (#6598)

2026-03-03 11:58:11 +01:00

test_addons.py

Improve CpuArch type safety with explicit conversions (#6524)

2026-02-04 11:34:23 +01:00

test_audio.py

Add default verbose timestamps for plugin logs (#6598)

2026-03-03 11:58:11 +01:00

test_auth.py

Return 401 for non-Basic Authorization headers on /auth endpoint (#6612)

2026-03-04 15:55:49 -05:00

test_backups.py

Simplify HomeAssistantWebSocket and raise on connection errors (#6553)

2026-02-12 09:20:23 +01:00

test_discovery.py

Use session.request() instead of getattr dispatch in HomeAssistantAPI (#6541)

2026-02-10 09:43:55 +01:00

test_dns.py

Add default verbose timestamps for plugin logs (#6598)

2026-03-03 11:58:11 +01:00

test_docker.py

Remove the option to revert to overlay2 driver (#6399)

2025-12-05 14:45:56 +01:00

test_hardware.py

Bump pre-commit ruff to 0.5.7 and reformat (#5242)

2024-08-13 20:53:56 +02:00

test_homeassistant.py

Refactor Docker pull progress with registry manifest fetcher (#6379)

2026-02-02 15:56:24 +01:00

test_host.py

Ensure dt_utc in /os/info always returns current time (#6602)

2026-02-27 17:59:11 +01:00

test_ingress.py

Unify Core user handling with HomeAssistantUser model (#6558)

2026-02-17 18:31:08 +01:00

test_jobs.py

Remove unknown errors from addons and auth (#6303)

2025-12-03 18:11:51 +01:00

test_mounts.py

Use status 404 in more places when appropriate (#5480)

2024-12-17 11:18:32 +01:00

test_multicast.py

Add default verbose timestamps for plugin logs (#6598)

2026-03-03 11:58:11 +01:00

test_network.py

Add configurable interface route metric (#6447)

2026-01-28 13:08:36 +01:00

test_os.py

Add API for swap configuration (#5770)

2025-03-27 17:53:46 +01:00

test_panel.py

Add blockbuster library and find I/O from unit tests (#5731)

2025-03-06 16:40:13 -05:00

test_proxy.py

Fix MCP API proxy support for streaming and headers (#6461)

2026-02-04 17:28:11 +01:00

test_resolution.py

Ensure uuid of dismissed suggestion/issue matches an existing one (#6582)

2026-02-25 10:26:44 +01:00

test_root.py

Store and persist OS upgrade map to fix update path evaluation (#6152)

2025-09-04 13:19:31 +02:00

test_security.py

Remove Codenotary integrity check (#6236)

2025-11-03 20:13:15 +01:00

test_services.py

Use status 404 in more places when appropriate (#5480)

2024-12-17 11:18:32 +01:00

test_store.py

Drop unsupported architectures and machines, create issue for affected apps (#6607)

2026-03-04 10:59:14 +01:00

test_supervisor.py

Refactor Docker pull progress with registry manifest fetcher (#6379)

2026-02-02 15:56:24 +01:00