Skip to content

Landing page: fix the four broken-link references (status.zeroauth.dev x2 + api.zeroauth.dev x2)#32

Merged
pulkitpareek18 merged 1 commit into
mainfrom
dev
May 14, 2026
Merged

Landing page: fix the four broken-link references (status.zeroauth.dev x2 + api.zeroauth.dev x2)#32
pulkitpareek18 merged 1 commit into
mainfrom
dev

Conversation

@pulkitpareek18
Copy link
Copy Markdown
Collaborator

You spotted `status.zeroauth.dev`. Audit found three more in the same class.

What was broken

Probed every clickable href on the landing page. Two unresolved subdomains:

Where Was Probe result Fixed to
Footer brand-column "All systems operational" pill `https://status.zeroauth.dev\` DNS doesn't resolve `/api/health` (returns 200 with real subsystem state)
Footer social-icons row "Status" icon `https://status.zeroauth.dev\` DNS doesn't resolve `/api/health`
Quickstart curl example #1 (users/register) `https://api.zeroauth.dev/v1/users/register\` DNS doesn't resolve `https://zeroauth.dev/v1/users/register\`
Quickstart curl example #2 (verifications) `https://api.zeroauth.dev/v1/verifications\` DNS doesn't resolve `https://zeroauth.dev/v1/verifications\`

The Quickstart fix matters most — anyone copy-pasting those curl commands was getting a DNS error instead of an API response. Now they'll get a real 401 (auth required), which is the expected first-touch experience.

Verification

Smoke-probed every clickable href after the edits:

```
200 /api/health
200 /dashboard/login
200 /dashboard/signup
200 /demo.html
200 /docs
200 /docs/getting-started/quickstart/
200 /docs/reference/api-reference
200 /docs/whitepaper.pdf
200 /favicon.svg
200 https://github.com/pulkitpareek18/ZeroAuth
200 https://github.com/pulkitpareek18/ZeroAuth/blob/main/CODE_OF_CONDUCT.md
200 https://github.com/pulkitpareek18/ZeroAuth/blob/main/CONTRIBUTING.md
200 https://github.com/pulkitpareek18/ZeroAuth/blob/main/LICENSE
200 https://github.com/pulkitpareek18/ZeroAuth/blob/main/SECURITY.md
200 https://github.com/pulkitpareek18/ZeroAuth/issues
```

(`https://fonts.googleapis.com\` and `https://fonts.gstatic.com\` 404 on the root URL but they're `` hints, not user-facing links — the actual font CSS request returns 200.)

Cross-repo sweep

No `api.zeroauth.dev` or `status.zeroauth.dev` references left in `docs/`, `dashboard/`, or `website/`. The governance repo's `incident-response.md` keeps a single mention of `status.zeroauth.dev` but it's flagged there as "planned — status page not yet wired up", which is the correct framing for a runbook.

Out of scope

  • Actually setting up `status.zeroauth.dev` (Uptime Robot / Better Uptime + Caddy reverse proxy + DNS A record) — separate task. Currently the brand-column pill links to `/api/health` which serves the underlying health JSON; that's the honest interim.
  • Actually setting up `api.zeroauth.dev` as a subdomain alias for the apex `/v1/*` surface — separate task too. Most production auth APIs do separate the dashboard/marketing domain from the API domain for caching + CSP reasons; tracking as a future improvement.

🤖 Generated with Claude Code

Audit found two unresolved subdomains being linked from public/index.html:

- **status.zeroauth.dev** (2 spots) — footer brand-column "All systems
  operational" pill + the footer social-icons-row Status link.
  Subdomain DNS doesn't resolve. Repointed both to /api/health which is
  a real endpoint that returns API + Postgres + Redis + Base Sepolia
  health as JSON. Kept the "All systems operational" copy because the
  underlying health check is real; added a title tooltip noting that
  a dedicated status.zeroauth.dev page is on the roadmap.

- **api.zeroauth.dev** (2 spots) — both Quickstart curl examples in
  the code-tabs section pointed at https://api.zeroauth.dev/v1/...
  The subdomain doesn't resolve. The canonical API URL is
  https://zeroauth.dev/v1/... (apex domain, no subdomain). Updated
  both curl examples accordingly so a developer copy-pasting them
  gets a 401 (auth required) instead of DNS-refused.

Smoke-probed all 18 clickable hrefs after the edits — all return 200
(the two 404s in the smoke output are <link rel="preconnect"> hints to
fonts.googleapis.com / fonts.gstatic.com root URLs; the actual font
CSS request /css2?family=Inter... 200s correctly, and those preconnect
URLs are correct standard behaviour, not user-facing links).

Cross-repo sweep clean: no api.zeroauth.dev or status.zeroauth.dev
refs left in docs/, dashboard/, or website/ (Docusaurus source). The
governance repo's incident-response.md still mentions status.zeroauth.dev
intentionally — flagged there as "planned, not yet wired up" rather
than as a live URL.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings May 14, 2026 10:32
@pulkitpareek18 pulkitpareek18 merged commit 11ab348 into main May 14, 2026
2 of 3 checks passed
@pulkitpareek18 pulkitpareek18 deleted the dev branch May 14, 2026 10:32
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Replaces four broken links on the landing page that pointed to unresolved subdomains (status.zeroauth.dev, api.zeroauth.dev) with working alternatives on the apex domain.

Changes:

  • Footer "All systems operational" pill and footer Status icon now link to /api/health instead of status.zeroauth.dev.
  • Quickstart curl examples now target https://zeroauth.dev/v1/... instead of api.zeroauth.dev/v1/....
  • Updated aria-label on the status icon from "Status" to "Health" and added a title tooltip explaining the interim health endpoint.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

pulkitpareek18 added a commit that referenced this pull request May 15, 2026
Audit found two unresolved subdomains being linked from public/index.html:

- **status.zeroauth.dev** (2 spots) — footer brand-column "All systems
  operational" pill + the footer social-icons-row Status link.
  Subdomain DNS doesn't resolve. Repointed both to /api/health which is
  a real endpoint that returns API + Postgres + Redis + Base Sepolia
  health as JSON. Kept the "All systems operational" copy because the
  underlying health check is real; added a title tooltip noting that
  a dedicated status.zeroauth.dev page is on the roadmap.

- **api.zeroauth.dev** (2 spots) — both Quickstart curl examples in
  the code-tabs section pointed at https://api.zeroauth.dev/v1/...
  The subdomain doesn't resolve. The canonical API URL is
  https://zeroauth.dev/v1/... (apex domain, no subdomain). Updated
  both curl examples accordingly so a developer copy-pasting them
  gets a 401 (auth required) instead of DNS-refused.

Smoke-probed all 18 clickable hrefs after the edits — all return 200
(the two 404s in the smoke output are <link rel="preconnect"> hints to
fonts.googleapis.com / fonts.gstatic.com root URLs; the actual font
CSS request /css2?family=Inter... 200s correctly, and those preconnect
URLs are correct standard behaviour, not user-facing links).

Cross-repo sweep clean: no api.zeroauth.dev or status.zeroauth.dev
refs left in docs/, dashboard/, or website/ (Docusaurus source). The
governance repo's incident-response.md still mentions status.zeroauth.dev
intentionally — flagged there as "planned, not yet wired up" rather
than as a live URL.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants