Skip to content

Keep public Vercel pages independent of hosted sessions - #7

Merged
alihd-tech merged 4 commits into
mainfrom
fix/public-runtime-session
Sep 21, 2026
Merged

alihd-tech merged 4 commits into
mainfrom
fix/public-runtime-session

Conversation

@alihd-tech

Copy link
Copy Markdown
Owner

Fix

The production site can render the public homepage without SESSION_SECRET.

Changes

  • add an optional session reader that returns null when hosted sessions are not configured
  • keep strict session enforcement for authenticated routes
  • remove mandatory session initialization from the homepage
  • keep public username reports available without hosted auth
  • keep the optional GitHub App info page available without hosted session config
  • hide the legacy OAuth sign-in entry when its required hosted configuration is missing

This preserves the security hardening while preventing optional hosted auth configuration from taking down public pages.

@vercel

vercel Bot commented Sep 21, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
coder Ready Ready Preview Sep 21, 2026 8:29pm UTC

@alihd-tech
alihd-tech merged commit 97ff10f into main Sep 21, 2026
2 of 3 checks passed

This branch was successfully deployed

1 active deployment
Preview — 362ad84d Deployed Sep 21, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant