mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-07 00:01:49 +00:00
Ruben FiszelandClaude Opus 4.8
4899e51703
- Gate the JWT `users.login_guest` audit on the transition to `jwt_entry = true`, not physical insertion: a guest who signed in through the IdP earlier the same day already has a `guest_activity` row with `jwt_entry = false`, and the old `xmax = 0` test suppressed the first JWT audit. A CTE reads the prior flag and the RETURNING decides it atomically in the upsert. - Fold the signed-in mint's inline account check into `has_any_account`, so the helper has both callers and the two no longer diverge on lowercasing. - Negative-cache a refused guest JWT for 30s so a replayed bearer past the cap does not take the instance-wide allowance advisory lock on every request. - Update the two stale share-link header comments to the `guest.<jwt>` form, drop the "plan gate" rationale on the entry test's cfg, collapse the blank lines the SHARE_LINK_SEGMENT removal left, and prettier-format the settings card after the isEnterprisePlan wrapper was removed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VF3v6LA9399gNphmZaHYG3
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |
Compile sqlx for offline ci
cargo sqlx prepare --workspace -- --bin windmill --features enterprise