starred/windmill

mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-30 00:16:53 +00:00

Files

T

History

Guilhem LemouelandClaude Opus 5.5 e35c25ef9c fix: check a move's writes with the rights its token carries in the target

The transfer re-authenticated the token against the target but then checked
writes with the user's database membership there, so a JWT whose claims are
narrower than that membership could copy a draft to a path it cannot save to
directly. The identity the re-authentication returns is now the one the
checks and the copy use.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-29 02:57:10 -07:00

..

chore: refresh vendored docs snapshot (#10068 )

2026-07-20 20:43:03 +02:00

fix: check a move's writes with the rights its token carries in the target

2026-10-29 02:57:10 -07:00

banned_domains.txt

increase banned_domains list

2022-12-14 10:24:18 +01:00

build_openapi.sh

add scalar at openapi2.html

2024-04-08 01:42:43 +02:00

build.rs

feat: run dbt projects as a first-class Windmill runtime (#10326 )

2026-08-01 11:58:05 +00:00

Cargo.toml

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

openapi-deref.json

OpenFlow sleep runs after its module, not before (#12074 )

2026-10-28 18:47:04 +01:00

openapi-deref.yaml

feat: allow early return on steps inside branches (#11733 )

2026-10-14 23:19:29 +02:00

openapi.yaml

Merge remote-tracking branch 'origin/main' into migrate-session-to-fork

2026-10-29 02:00:15 -07:00

README.md

restructure the entire backend layout using workspaces (#815 )

2022-10-29 11:58:06 +02:00

README.md

Windmill API

The API server, exposing functionality to other components and the frontend

This crate exposes both a library as well as a binary target.