From eab122a428a2f592a1efd919ffae36a4481f6da0 Mon Sep 17 00:00:00 2001 From: "prompt.ac/@jeffrey" Date: Sat, 8 Aug 2026 19:39:29 -0700 Subject: [PATCH] Ask the handle endpoint the question it answers verifyFightIdentity fetched /handle/, but that route is a path the piece-page handler swallows: it returns 404 HTML, so !response.ok sent every caller home with 'Your AC session could not be verified.' The endpoint takes ?for= instead. Public fight auth has been shut since it landed, and because chat.mjs opens a fight socket for anyone holding a token, laklok was showing the error to people who never asked to fight. --- session-server/session.mjs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/session-server/session.mjs b/session-server/session.mjs index a9211bc4c..7aeb05b1f 100644 --- a/session-server/session.mjs +++ b/session-server/session.mjs @@ -259,7 +259,7 @@ async function verifyFightIdentity(token) { const authUser = await verifyACToken(token); if (!authUser?.sub) return null; try { - const response = await fetch(`https://aesthetic.computer/handle/${encodeURIComponent(authUser.sub)}`); + const response = await fetch(`https://aesthetic.computer/handle?for=${encodeURIComponent(authUser.sub)}`); if (!response.ok) return null; const data = await response.json(); if (!data?.handle) return null; -- 2.51.2