Skip to content

docs(internal): a plain-HTTP 400 on the TLS port can arrive cut short (#145) - #162

Merged
braghettos merged 1 commit into
mainfrom
docs/plain-http-400-closes
Nov 14, 2026
Merged

braghettos merged 1 commit into
mainfrom
docs/plain-http-400-closes

Conversation

@braghettos

Copy link
Copy Markdown
Collaborator

identity-lifecycle's end-to-end proof against authn 0.51.0 (recorded on #145) found that the TLS server's 400 to a plain-HTTP request can surface as a failed read. Go writes the fixed response (Client sent an HTTP request to an HTTPS server.) and closes the connection at once. behavior.md now says so, and tells a caller to recognise the misconfiguration from the status line or that body on whatever it read. Docs only.

🤖 Generated with Claude Code

https://claude.ai/code/session_01NSM9VWrDcDtRDRTQoHjgV3

…#145)

identity-lifecycle's end-to-end proof against authn 0.51.0 found that the
TLS server's 400 to a plain-HTTP request can surface as a failed read:
Go writes the fixed response and closes the connection at once. Say so,
and how a caller should recognise it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NSM9VWrDcDtRDRTQoHjgV3
@braghettos
braghettos merged commit 9ca8218 into main Nov 14, 2026
17 checks passed
@braghettos
braghettos deleted the docs/plain-http-400-closes branch November 14, 2026 15:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant