refactor(deploy)!: TUI

internal/api/api_test.go

@@ -1058,6 +1058,16 @@ func TestSessionAuthUsesConfiguredAdminHostname(t *testing.T) {
 	if p.ViaAdminAccess {
 		t.Fatalf("root-domain fallback host must not grant admin-path access when admin_hostname is configured")
 	}
+
+	r = httptest.NewRequest("GET", "https://10.211.55.4:30443/api/v1/me", nil)
+	r.AddCookie(&http.Cookie{Name: sessionCookieName, Value: token})
+	p, err = auth.Authenticate(r)
+	if err != nil {
+		t.Fatalf("Authenticate private IP host: %v", err)
+	}
+	if !p.ViaAdminAccess {
+		t.Fatalf("private IP local panel should grant admin-path access, got %+v", p)
+	}
 }
 func TestAccessVerifier(t *testing.T) {
 	key := []byte("test-signing-key")

internal/api/session.go

@@ -88,6 +88,8 @@ func clearSessionCookie(w http.ResponseWriter) {
 // operator console host. The session cookie is host-only, so a session minted on
 // the admin host is structurally unable to reach the player console. If older
 // configs omit [auth].admin_hostname, fall back to op.console.<root_domain>.
+// Local bootstrap may also use the node's private/loopback IP directly when
+// wildcard DNS is unavailable; that is treated as the local admin face.
 func hostIsAdminConsole(r *http.Request, rootDomain, adminHostname string) bool {
 	want := strings.TrimSpace(adminHostname)
 	if want == "" {
@@ -100,6 +102,9 @@ func hostIsAdminConsole(r *http.Request, rootDomain, adminHostname string) bool
 	if h, _, err := net.SplitHostPort(host); err == nil {
 		host = h
 	}
+	if ip := net.ParseIP(strings.Trim(host, "[]")); ip != nil {
+		return ip.IsLoopback() || ip.IsPrivate()
+	}
 	return strings.EqualFold(strings.TrimSuffix(host, "."), strings.TrimSuffix(want, "."))
 }