Ensure that when exclusion is not configured, access to the entire gl…

…obal site is permitted, with only the inclusion criteria taking effect.

src/runtime/server/middleware/basicAuth.ts

@@ -24,7 +24,7 @@ export default defineEventHandler((event) => {
   const basicAuthConfig = securityConfig.basicAuth
 
   // Check for exclusion paths
-  const excludePaths = basicAuthConfig?.exclude || []
+  const excludePaths = basicAuthConfig?.exclude || ['/']
   const isPathExcluded = excludePaths.some(el => event.path?.startsWith(el))
 
   // Check for inclusion paths