hansjone/oclaw
1
0
Fork 0
mirror of https://github.com/hansjone/oclaw.git synced 2026-10-12 12:53:20 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
oclaw/uds-auth/test
History
oliver df97c5e042
Some checks are pending
ci / test (push) Waiting to run
Details
ci / test-postgresql (push) Waiting to run
Details
fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 
Emergency (fallback / sealed-box) admins lost the workspace sidebar and saw
"sign-in failed / add API key" on DSH Desktop because the remote.mux opens
anonymously at boot and every early call was rejected terminally.

- gateway: anonymous workspace/follow reaches dsh-acl's empty baseline;
  anonymous streams are parked until the carrier aborts instead of failing;
  anonymous workspace/initializeDefault answers "nothing created"
- request-auth: a dead UDS_SESSION cookie no longer shadows a valid WS ticket
  or bridge (sync + async variants used by all callers)
- dsh-acl: /api/* waits (bounded 15s) for the gateway ACL during Host startup
  instead of 403, so the Desktop welcome read no longer fails
- desktop-bootstrap: key/account projection is best-effort per reference
- client: emit connection/reset after login so boot-time caches (settings
  describe mirror -> Settings > Models) re-read under the real principal
- sessions: absolute lifetime fixed at 7 days (was min(ttl, 7d) = 30 min);
  bridge expiry slides with its session; MemoryStore persisted to
  sessions.json (bearer hash only, userData AES-256-GCM sealed)
- README: session lifetime/persistence and DSH compatibility notes

Also includes previously uncommitted uds-auth 0.3.x work in this tree.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-12 02:11:09 +08:00
..
acceptance-batch1.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
acceptance-batch2.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
auth-session-p0.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
desktop-bootstrap.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
emergency-workspace-follow.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
host-context.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
i18n.test.js Add uds-auth zh/en i18n, UAC-branded settings, and QR expire/fail overlay. 2026-09-09 22:10:37 +08:00
local-admin.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
phase2-acl.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
phase3-security.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
phase4-ops.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
remediation-0310.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
sealed-workspace-follow.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
session-access.test.js Honor view-all off: only own sessions and personal workspace. 2026-09-16 23:52:02 +08:00
session-persistence.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
startup-and-session-lifetime.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00
ws-ticket-userinfo.test.js fix(uds-auth): emergency login workspaces, Desktop key prompts, persistent sessions 2026-10-12 02:11:09 +08:00