mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-07 00:01:49 +00:00
Save the guest JWT key before the Enterprise-only default-app and rate-limit writes, so a refused write cannot swallow a valid key change on CE. Name the JWT entry in the Guests card summary. Complete verify()'s doc with the email and app_path rules. Anchor the refusal suite with a positive control and make enable_guests assert its status, so a broken fixture cannot pass it vacuously. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VF3v6LA9399gNphmZaHYG3