govstack/govstack-bootstrap
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(liquio): reject empty-scope tokens in native credential reuse #201

Merged
karsten merged 1 commit from hex-73/liquio-nonempty-token-scope into main 2026-10-27 18:57:46 +00:00
Conversation 0 Commits 1 Files changed 1 +1 -1
karsten commented 2026-10-27 18:57:43 +00:00
Owner
Copy link

Adrian-authored minimal correction from authenticated HEX-73 receipt a5aff233 / run2291428e: reuse only established access tokens with a nonempty stored scope. Exactly one SQL predicate added; source matches the supplied patch. Existing identity/data/fail-closed behavior retained; no adoption/reset.

Operator integration check: four current Liquio Helm/pytest checks passed. No leader technical review; historical independent approval retained only for unchanged baseline. This bounded rejection-hardening fix adds no credential privilege. Hosted CI unavailable is reported separately, not green.

Source publication only. Existing legacy release cannot recover its absent password through this predicate and is NOT blindly retried. A fresh isolated release/native ID flow and real Demo business/negative/reconcile acceptance remain with Samuel, then Normal. No legacy user deletion or permission changes.

Adrian-authored minimal correction from authenticated HEX-73 receipt a5aff233 / run2291428e: reuse only established access tokens with a nonempty stored scope. Exactly one SQL predicate added; source matches the supplied patch. Existing identity/data/fail-closed behavior retained; no adoption/reset. Operator integration check: four current Liquio Helm/pytest checks passed. No leader technical review; historical independent approval retained only for unchanged baseline. This bounded rejection-hardening fix adds no credential privilege. Hosted CI unavailable is reported separately, not green. Source publication only. Existing legacy release cannot recover its absent password through this predicate and is NOT blindly retried. A fresh isolated release/native ID flow and real Demo business/negative/reconcile acceptance remain with Samuel, then Normal. No legacy user deletion or permission changes.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
govstack/govstack-bootstrap!201
No description provided.