Skip to content

v0.51.468

Choose a tag to compare

View all tags
@github-actions github-actions released this 17 Jun 00:32
· 39 commits to master since this release
v0.51.468
ce272d9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release QC — onboarding OAuth single-flight

Security

  • Onboarding OAuth start is now single-flight per provider/profile (#3972). Repeated or concurrent unauthenticated POST /api/onboarding/oauth/start for the same provider/profile previously accumulated unbounded pending flows + daemon polling workers. The start path is now serialized per (provider, hermes_home) across the full check→device-code→insert→spawn sequence (atomic check-and-insert under the flows lock), so duplicates reuse the existing flow. Single-start behavior unchanged. Thanks @Hinotoi-agent.

Contributors

Hinotoi-agent
Assets 2
Loading