mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-07 08:02:40 +00:00
Ruben FiszelandClaude Opus 4.8
b8838564ff
- admit_and_record_guest_jwt commits the guest_activity row before the best-effort audit, on a separate connection. The EE audit writer swallows an audit_partitioned failure but the failing statement still aborts its transaction, so auditing before the commit would roll the activity row back while the arm returned success, admitting a guest uncounted and past the allowance. - The share-link guest marker is now the prefix `guest.` glued to the token (`/a/<path>/guest.<jwt>`, `/public/<ws>/<secret>/guest.<jwt>`). The `.` cannot appear in a custom-path or secret segment, so an external-JWT link whose custom path ends in a `guest` segment (`/a/foo/guest/<jwt>`) is read as before rather than hijacked. Removed the unused SHARE_LINK_SEGMENT constant. - Moved the JWT allowance test to its own binary (app_guest_jwt_allowance.rs): set_plan flips a process-global license key, so a test sharing the binary with the existing allowance test would race under --test-threads. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VF3v6LA9399gNphmZaHYG3
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |
Compile sqlx for offline ci
cargo sqlx prepare --workspace -- --bin windmill --features enterprise