starred/windmill

mirror of https://github.com/windmill-labs/windmill.git synced 2026-08-19 08:01:25 +00:00

Files

T

History

Ruben Fiszel 3bf6e102af fix(apps): apply scope-path predicate to app list/search endpoints (#9581 )

The list_apps and list_search_apps endpoints did not filter returned
rows against the calling token's resource-qualified scope. A token
scoped to apps:read:u/foo/specific_app could list every app in the
workspace, including full app_version.value definitions.

Apply build_scope_path_predicate, mirroring the protection already in
place for script, flow, resource and variable list endpoints.

Fixes WIN-2046

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-15 18:53:30 +02:00

..

fix(apps): apply scope-path predicate to app list/search endpoints (#9581 )

2026-06-15 18:53:30 +02:00

banned_domains.txt

increase banned_domains list

2022-12-14 10:24:18 +01:00

build_openapi.sh

add scalar at openapi2.html

2024-04-08 01:42:43 +02:00

build.rs

refactor: extract object store into dedicated crate with filesystem backend (#7996 )

2026-02-18 12:24:45 +00:00

Cargo.toml

fix: invalidate relative-import cache when imported script changes (#9443 )

2026-06-04 10:09:06 +00:00

openapi-deref.json

feat: Db-backed user drafts (#9351 )

2026-06-15 10:23:16 +02:00

openapi-deref.yaml

feat: Db-backed user drafts (#9351 )

2026-06-15 10:23:16 +02:00

openapi.yaml

fix: expose parent_hash in MCP createScript tool for updates (#9586 )

2026-06-15 18:36:49 +02:00

README.md

restructure the entire backend layout using workspaces (#815 )

2022-10-29 11:58:06 +02:00

README.md

Windmill API

The API server, exposing functionality to other components and the frontend

This crate exposes both a library as well as a binary target.