starred/windmill

mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-28 16:02:47 +00:00

Files

T

History

tristantrandClaude Opus 4.8 163bcf147c fix(hub-publish): bind Hub publish/export to the trusted workspace via source_id

Hub publish endpoints ignored the {workspace} path and addressed the Hub
project purely by client-supplied project_slug, forwarding with an
instance-wide HUB_DEV_TOKEN. Any workspace admin could mutate or export
another workspace's Hub project by passing its slug.

Stamp the server-trusted workspace from the path onto every forwarded
request as source_id (body for mutations, query param for export) so the
Hub can enforce that the targeted project belongs to the calling
workspace. Requires the matching Hub-side source_id ownership check.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-08 16:37:53 +02:00

..

fix(hub-publish): bind Hub publish/export to the trusted workspace via source_id

2026-06-08 16:37:53 +02:00

banned_domains.txt

increase banned_domains list

2022-12-14 10:24:18 +01:00

build_openapi.sh

add scalar at openapi2.html

2024-04-08 01:42:43 +02:00

build.rs

refactor: extract object store into dedicated crate with filesystem backend (#7996 )

2026-02-18 12:24:45 +00:00

Cargo.toml

refactor: move bedrock proxy handling to windmill-ai (#9309 )

2026-06-08 11:35:45 +02:00

openapi-deref.json

feat(service-accounts): allow choosing role at creation time (#9307 )

2026-06-08 11:35:45 +02:00

openapi-deref.yaml

feat(service-accounts): allow choosing role at creation time (#9307 )

2026-06-08 11:35:45 +02:00

openapi.yaml

chore(main): release 1.710.1 (#9327 )

2026-06-08 11:35:46 +02:00

README.md

restructure the entire backend layout using workspaces (#815 )

2022-10-29 11:58:06 +02:00

README.md

Windmill API

The API server, exposing functionality to other components and the frontend

This crate exposes both a library as well as a binary target.