mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-06 16:02:23 +00:00
Ruben FiszelandClaude Opus 4.8
4899e51703
- Gate the JWT `users.login_guest` audit on the transition to `jwt_entry = true`, not physical insertion: a guest who signed in through the IdP earlier the same day already has a `guest_activity` row with `jwt_entry = false`, and the old `xmax = 0` test suppressed the first JWT audit. A CTE reads the prior flag and the RETURNING decides it atomically in the upsert. - Fold the signed-in mint's inline account check into `has_any_account`, so the helper has both callers and the two no longer diverge on lowercasing. - Negative-cache a refused guest JWT for 30s so a replayed bearer past the cap does not take the instance-wide allowance advisory lock on every request. - Update the two stale share-link header comments to the `guest.<jwt>` form, drop the "plan gate" rationale on the entry test's cfg, collapse the blank lines the SHARE_LINK_SEGMENT removal left, and prettier-format the settings card after the isEnterprisePlan wrapper was removed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VF3v6LA9399gNphmZaHYG3
Windmill frontend
The Windmill frontend written in Svelte 5 + Tailwind CSS
The frontend is under AGPL, see the LICENSE file at the root of this repo