starred/windmill

mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-30 08:16:49 +00:00

Files

T

History

Guilhem LemouelandClaude Opus 5.5 d363da770d fix: check the move's token against the target by re-authenticating it

The transfer endpoint looked the caller's token up in the `token` table, so
an external-JWT login, which has no row there, could never move a session.
It now resolves the same token against the target workspace, which refuses a
token bound to the source whatever its kind, and still refuses job tokens.

Also stop calling the move target a fork in the model note, the menu item,
the editor placeholders and the moving notices: it can be the root or a
sibling.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-29 02:36:14 -07:00

..

chore: refresh vendored docs snapshot (#10068 )

2026-07-20 20:43:03 +02:00

fix: check the move's token against the target by re-authenticating it

2026-10-29 02:36:14 -07:00

banned_domains.txt

increase banned_domains list

2022-12-14 10:24:18 +01:00

build_openapi.sh

add scalar at openapi2.html

2024-04-08 01:42:43 +02:00

build.rs

feat: run dbt projects as a first-class Windmill runtime (#10326 )

2026-08-01 11:58:05 +00:00

Cargo.toml

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

openapi-deref.json

OpenFlow sleep runs after its module, not before (#12074 )

2026-10-28 18:47:04 +01:00

openapi-deref.yaml

feat: allow early return on steps inside branches (#11733 )

2026-10-14 23:19:29 +02:00

openapi.yaml

Merge remote-tracking branch 'origin/main' into migrate-session-to-fork

2026-10-29 02:00:15 -07:00

README.md

restructure the entire backend layout using workspaces (#815 )

2022-10-29 11:58:06 +02:00

README.md

Windmill API

The API server, exposing functionality to other components and the frontend

This crate exposes both a library as well as a binary target.