You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

mohammed-guiga 2e18084a04 Fix Clerk SSO auto-admin: fail closed + explicit admin allowlist (BLO-287) ... clerk_email_allowed? failed OPEN on an empty CLERK_ALLOWED_EMAIL_DOMAINS (empty env = anyone could sign in), and both SSO entrypoints (from_clerk_oidc and the apex-cookie ClerkDeviseBridge) auto-provisioned every first-time user as ADMIN_ROLE. - Fail closed: an unset/empty allowlist now matches no one. - New CLERK_ADMIN_EMAIL_DOMAINS allowlist gates admin provisioning; SSO never silently mints an admin. - Single chokepoint User.provision_clerk_admin used by both SSO paths. - Add RSpec coverage (none existed).		3 months ago
..
factories	adjust login OTP form	1 year ago
fixtures	add optional shared link to templates	1 year ago
jobs	add hmac webhook secret	5 months ago
lib/params	dot rspec	1 year ago
mailers/previews	add email 2FA	10 months ago
models	Fix Clerk SSO auto-admin: fail closed + explicit admin allowlist (BLO-287)	3 months ago
requests	add template variables	1 year ago
system	fix refactor complete button	4 months ago
rails_helper.rb	update gems	6 months ago
signing_form_helper.rb	fix spec	1 year ago
spec_helper.rb	initial commit	3 years ago