zentralopensource / zentral / 28465494889

89%

push

github

Answer the santactl doctor preflight probe gracefully

`santactl doctor` validates the sync connection by POSTing to
preflight/santactl-doctor-test, a fixed sentinel that is not a real
machine UUID, and judges the result by HTTP status (200/400 == OK).

Our PreflightView parsed the machine id as a UUID before anything else,
so the sentinel raised PermissionDenied (403) and doctor reported a
broken connection even on a healthy, authenticated server.

Intercept the sentinel in the preflight view before the UUID parse and
return 200 once the enrollment secret (and client certificate, when
required) checks out, so a correctly configured client passes and a
misconfigured one still gets a meaningful failure. The exception is
scoped to preflight; the other sync endpoints keep rejecting it.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

16 of 16 new or added lines in 1 file covered. (100.0%)

47239 of 53359 relevant lines covered (88.53%)

0.89 hits per line