hugocasaandClaude Opus 5 f329edaf98 fix: re-read folder membership on hash-addressed script reads ...

`authed.folders` is a snapshot cached alongside the caller's token, so a grant
made after it was cached denies a script the caller can legitimately read: the
folder created by the deploy they are being redirected from, or one an admin has
just added them to. Enforcing RLS on the by-hash reads without accounting for
that would reintroduce the staleness the privileged-pool shortcut was papering
over.

Resolve the path first and refresh group and folder membership from the database
before running the read under RLS. The existence probe the miss path already did
now comes from that same lookup, so the denial path is a query cheaper.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-08-12 19:14:27 +02:00

..

src

refactor: move integration tests to subcrates to reduce recompilation

2026-02-11 14:04:54 +00:00

tests

fix: re-read folder membership on hash-addressed script reads

2026-08-12 19:14:27 +02:00

Cargo.toml

fix: authenticate slack callback payload with per-workspace hmac (#9461)

2026-06-06 08:02:20 +00:00