Skip to content

Add public GET /api/health - #125

Merged
ralyodio merged 1 commit into
masterfrom
ops/health-endpoint
Oct 6, 2026
Merged

ralyodio merged 1 commit into
masterfrom
ops/health-endpoint

Conversation

@ralyodio

@ralyodio ralyodio commented Oct 6, 2026

Copy link
Copy Markdown
Collaborator

Adds GET /api/health (Next.js route handler) for status.profullstack.com.

  • 200 {"status":"ok","db":"ok"} after select 1 via db() from lib/db.ts, 3s timeout
  • 503 {"status":"error","db":"down"} on failure, no error details
  • Cache-Control: no-store, no auth; middleware only sets CSP/ref cookie, so nothing to exempt

Before: 404 because no route existed. deploy.env's health path (/api/me) is left unchanged.

Verified: tsc, next build, and next start returning 503 against an unreachable Postgres and 200 against a local file: DB.

🤖 Generated with Claude Code

Returns 200 {"status":"ok","db":"ok"} after a select 1 (3s ceiling),
503 {"status":"error","db":"down"} otherwise. No auth, no-store, no
error details. For status.profullstack.com.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown

ThreatCrush Security Scan

20 finding(s)

HIGH/CRITICAL: 3 | MEDIUM: 13 | LOW: 4

Severity Rule Location
HIGH sh-remote-script-execution public/install.sh:302
HIGH sh-remote-script-execution public/install.sh:305
HIGH sh-remote-script-execution public/install.sh:432
MEDIUM js-open-redirect app/dashboard/[[...tab]]/page.tsx:67
MEDIUM js-open-redirect app/signup/page.tsx:38
MEDIUM js-open-redirect components/PitSearch.tsx:118
MEDIUM js-unescaped-html-sink components/Tenant.tsx:29
MEDIUM js-unescaped-html-sink components/Tenant.tsx:30
MEDIUM js-unescaped-html-sink components/Tenant.tsx:73
MEDIUM js-unescaped-html-sink components/Tenant.tsx:147
MEDIUM sql-template-interpolation lib/db.ts:1117
MEDIUM sql-template-interpolation lib/db.ts:1147
MEDIUM redos-nested-quantifier lib/markdown.ts:109
MEDIUM sh-remote-script-execution public/install.sh:123
MEDIUM sh-remote-script-execution public/install.sh:127
MEDIUM sh-remote-script-execution public/install.sh:146
LOW secret-generic-credential tests/domain-webhook-active.test.mjs:18
LOW secret-generic-credential tests/domain-webhook-active.test.mjs:25
LOW secret-generic-credential tests/domain-webhook-active.test.mjs:30
LOW secret-generic-credential tests/project-webhook-management.test.mjs:53

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 87bc82a into master Oct 6, 2026
5 checks passed
@ralyodio
ralyodio deleted the ops/health-endpoint branch October 6, 2026 18:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant