WP Sudo v3.1.2 — Research Snapshot
Pre-releaseVersions before 4.9.0 automatically replayed an intercepted request after reauthentication (#322). Do not use this version.
RESEARCH PROTOTYPE ONLY. Do not install on production, public staging, or any site containing real users, credentials, or data. Use only in WordPress Playground or a disposable local test environment.
Superseded by WP Sudo 3.1.3 for Playground release-link reliability. The v3.1.2 Blueprint used Playground
git:directorytag fetch, which can fail withInvalid PACK header.
WP Sudo 3.1.2
Patch release for Playground and preview testing.
Playground
Use this CORS-friendly raw Blueprint URL:
The Blueprint installs the immutable v3.1.2 tag through Playground git:directory resource. Demo credentials are admin / password; use password again for the WP Sudo reauthentication challenge.
Fixes
- Playground resets the
adminuser password before login so the documented credentials work for login and sudo reauthentication. - Front-end admin-bar Sudo clicks cancel the active sudo session instead of navigating away.
- Dashboard active-session data refreshes after session cancellation.
- Playground demo data includes recent privilege-action samples and staggered 5-15 minute sudo windows.
- PR Playground preview comments now use the checked-in Blueprint and a CORS-safe
git:directoryinstall instead of GitHub archive ZIP URLs.
Validation
GitHub CI passed on release commit 86016aa: PHPUnit and integration matrix, PHPCS/PHPStan, docs lint/links, Psalm, CodeQL, Nginx smoke, and the full E2E suite (52 passed, 5 skipped).