From e7443338fba241b3eacd425b94ef1c14ceee08ad Mon Sep 17 00:00:00 2001
From: KernelDeimos <7225168+KernelDeimos@users.noreply.github.com>
Date: Tue, 27 Jan 2026 15:34:33 -0500
Subject: [PATCH] fix: more reliable 404 responses for `.api` endpoint

This fix avoids some situations where a non-existing route hangs instead
of responding with 404.
---
 src/backend/src/modules/web/WebServerService.js | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/backend/src/modules/web/WebServerService.js b/src/backend/src/modules/web/WebServerService.js
index 502a096a1..70b8788b8 100644
--- a/src/backend/src/modules/web/WebServerService.js
+++ b/src/backend/src/modules/web/WebServerService.js
@@ -79,6 +79,13 @@ class WebServerService extends BaseService {
             return res.sendStatus(200);
         });
 
+        // Catch-all 404 for unmatched routes (e.g. api subdomain with unknown path)
+        // There seem to be some cases (ex: other subdomains) where this doesn't work
+        // as intended still, but this is an improvement over the previous behavior.
+        app.use((req, res) => {
+            res.status(404).send('Not Found');
+        });
+
         this.log.debug('web server setup done');
     }