Ruben FiszelandClaude Opus 4.8 98e8a594f2 fix: single-flight the JWKS refresh; design-system textarea; doc placement ...

- Refresh a workspace's JWKS under a per-URL lock, so a burst against a cold or
  stale entry triggers one fetch, not one per request (single-flight). The "at
  most once per interval" bound now holds while a fetch is in flight, not only
  after it lands.
- A cached entry with no keys is a remembered failure; serving it reported an
  unreachable issuer as an unknown `kid`. Map an empty entry to an
  issuer-unreachable error instead.
- Use the design-system TextInput (textarea variant) for the PEM key field
  rather than a raw <textarea>.
- Move `has_any_account` above `username_to_permissioned_as` so it no longer
  sits between that function's doc comment and its body.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VF3v6LA9399gNphmZaHYG3

2026-09-03 09:08:25 +00:00

..

examples

fix: enrich OTEL log records with per-request LogContext (#8812)

2026-04-13 21:50:50 +00:00

src

fix: single-flight the JWKS refresh; design-system textarea; doc placement

2026-09-03 09:08:25 +00:00

tests

fix: let a principal without a login account own a draft (#10925)

2026-09-01 23:42:08 +02:00

Cargo.toml

fix: datatable full schema hangs behind a transaction-pooling postgres proxy (#10352)

2026-07-27 12:32:44 +02:00