Conversation
Persist member registration under RLS, harden auth/error handling, fix join-page cache races, and add regression CI.
Patch vulnerable runtime dependencies, restore secure HTTPS session cookies, and make the CI release gate validate all tests and Cloudflare artifacts.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
リリース内容
入部届の提出後にmemberが登録されず、未登録画面へ戻る不具合を修正します。併せて、本番反映を止めていた既知のhighランタイム脆弱性とCloudflare成果物の検証不足を解消します。
原因と修正
INSERT ... RETURNINGがSELECT policyで拒否され、トランザクション全体がrollbackしていたmemberIdを再取得していなかったmember IDをサーバーで確定し、トランザクション内RLSコンテキストを設定した上でmember作成とuser紐付けを原子的に実行します。認証エラー境界とfrontend cache遷移も修正しました。
セキュリティ/リリースゲート
Secure化検証結果
0007_soft_rls.sqlを使うPostgreSQL互換統合テストを含む)関連PR