You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

mohammed-guiga 2e18084a04 Fix Clerk SSO auto-admin: fail closed + explicit admin allowlist (BLO-287) ... clerk_email_allowed? failed OPEN on an empty CLERK_ALLOWED_EMAIL_DOMAINS (empty env = anyone could sign in), and both SSO entrypoints (from_clerk_oidc and the apex-cookie ClerkDeviseBridge) auto-provisioned every first-time user as ADMIN_ROLE. - Fail closed: an unset/empty allowlist now matches no one. - New CLERK_ADMIN_EMAIL_DOMAINS allowlist gates admin provisioning; SSO never silently mints an admin. - Single chokepoint User.provision_clerk_admin used by both SSO paths. - Add RSpec coverage (none existed).		3 months ago
..
controllers	Fix Clerk SSO auto-admin: fail closed + explicit admin allowlist (BLO-287)	3 months ago
javascript	adjust validation message	4 months ago
jobs	retry webhooks in test mode	5 months ago
mailers	remove premailer	6 months ago
models	Fix Clerk SSO auto-admin: fail closed + explicit admin allowlist (BLO-287)	3 months ago
views	Add optional Clerk OIDC login	4 months ago