Code

History

Commits on fix/gmail-settings-scopes to apps/cloud/src/auth35+
  1. Split the jwt_verify cost into store read vs key import (#1668)Rhys Sullivan committed 2 months agoc0d25e4
  2. Attribute local_verify latency to a phase (#1667)Rhys Sullivan committed 2 months agoe27931f
  3. Cache JWKS across isolates and serve stale keys on refresh failure (#1665)Rhys Sullivan committed 2 months ago81d4cf9
  4. Make latency regressions attributable: version stamps, deploy markers, JWKS and dispatch spans (#1664)Rhys Sullivan committed 2 months ago06786d0
  5. Sign out browsers whose session has already ended (#1624)Rhys Sullivan committed 2 months agoa8d3d3c
  6. Improve trace quality: redact headers, fix DO span parenting, cut noise (#1623)Rhys Sullivan committed 2 months ago19a1d21
  7. Serve MCP spec 2026-07-28 and consolidate onto SDK v2Rhys Sullivan committed 2 months ago0b1739b
  8. Use indexed WorkOS lookup for admin user emails (#1578)Max Schwenk committed 3 months agoa9365c1
  9. Serve tenant-level product reads to organization API keys (#1544)Rhys Sullivan committed 3 months ago1f4741a
  10. Add admin Users console page (#1469)Rhys Sullivan committed 3 months ago4a582ad
  11. Fail closed on the org selector for org-scoped reads (#1488)Rhys Sullivan committed 3 months ago5fa1463
  12. Remember the last-visited org for bare URL entries (#1481)Rhys Sullivan committed 3 months agofd7f779
  13. Revert "Back the JWKS cache with the Workers edge cache (#1479)" (#1480)Rhys Sullivan committed 3 months agoddbbe86
  14. Back the JWKS cache with the Workers edge cache (#1479)Rhys Sullivan committed 3 months ago75f16ed
  15. cloud: end the WorkOS session on sign out (#1446)Rhys Sullivan committed 3 months agoc53e6f8
  16. Validate WorkOS sessions locally with a cached JWKS (#1376)Rhys Sullivan committed 4 months ago63e19e7
  17. Delete organization from settings (#1340)Rhys Sullivan committed 4 months ago857f45d
  18. Classify transient WorkOS failures as retryable during MCP auth (#1352)Rhys Sullivan committed 4 months ago8bdf315
  19. Fix browser elicitation resume page session lookup (#1317)Rhys Sullivan committed 4 months ago8e49072
  20. Preserve URL org scope in cloud auth flows (#1143)Rhys Sullivan committed 4 months ago4e74118
  21. Fix OAuth callback org scope (#1134)Rhys Sullivan committed 4 months ago78aa871
  22. fix: include org slug in connection handoff URLs (#1085)Rhys Sullivan committed 4 months agoae3a162
  23. Fix: accept WorkOS device-login tokens on the /api plane (wrong JWKS) (#1079)Rhys Sullivan committed 4 months ago5f08d68
  24. CLI device-flow login for hosted accounts (`executor login`) (#1026)Rhys Sullivan committed 4 months ago7c873ec
  25. [codex] Fix signed-out OAuth callback recovery (#1061)Rhys Sullivan committed 4 months ago65dd600
  26. Org slugs: mint at insert, drop lazy minting, make the column NOT NULL (#1006)Rhys Sullivan committed 5 months agob998f8d
  27. Web clients scope by the URL org; drop cookie-based org switching (#1000)Rhys Sullivan committed 5 months ago1f9bfe0
  28. Cloud API scopes by the URL org header, with session as fallback (#999)Rhys Sullivan committed 5 months ago58e23e8
  29. Org-slug console URLs across cloud, self-host, and cloudflare hosts (#974)Rhys Sullivan committed 5 months agoe48bff7
  30. SSR the connect-card MCP URL from the request origin (#991)Rhys Sullivan committed 5 months agocaf216f
  31. Render the real shell from the gate's verified identity — delete the full-page skeleton (#986)Rhys Sullivan committed 5 months ago5c21c8f
  32. Gate signed-out document requests at the edge instead of flashing the app-shell skeleton (#975)Rhys Sullivan committed 5 months agocbf9365
  33. Migrate cloud integration tests into e2e scenarios (#944)Rhys Sullivan committed 5 months ago3976100
  34. Test against real WorkOS/Autumn SDKs via wire-level emulators (#931)Rhys Sullivan committed 5 months ago098bfcb
  35. e2e: scenario × target test framework with evidence-first viewer (#926)Rhys Sullivan committed 5 months ago72049a8