walhub

Anonymous visitors get a 'log in to continue' interstitial for every write action (OIDC anonymous-read mode); one anonymous write leak in ssh-keys

issues

oidc

3

#502 by crueber was closed 2026-09-14 00:38:46 +00:00 v1 0 / 10

Visibility still bounces after #381: settings save may silently fail (403/409 with no reseed), stale CAS version, or store conditional-GET staleness

issues

oidc

3

#391 by crueber was closed 2026-09-12 16:37:53 +00:00 v1 0 / 5

Avatar restyle: bare-circle navbar trigger (far right, light ring, still a dropdown) + large floating avatar on the profile page

issues

oidc

3

#390 by crueber was closed 2026-09-12 16:43:42 +00:00 v1 0 / 7

NEW LAW + systemic guard: cache-class is decided by MUTABILITY, not addressability — shared policy definition, contract test, and an AGENTS.md law so stale-serve flip-flops (#259/#280/#381) cannot recur

git storage

issues

oidc

3

#382 by crueber was closed 2026-09-12 16:12:09 +00:00 v1 0 / 10

Visibility bounces between public and private across refreshes — summary still served ccSWR (stale-serve window defeats the ~v ETag)

issues

oidc

4

#381 by crueber was closed 2026-09-12 15:34:52 +00:00 v1 0 / 5

Auto-generated user avatars: dicebear-go (constellation style, electric preset, seed = email) generated in background on login

issues

oidc

3

#376 by crueber was closed 2026-09-12 15:24:21 +00:00 v1 0 / 7

Visibility modes: private, logged-in only vs private, owner/org only (replaces the single members-only private)

git storage

oidc

3

#374 by crueber was closed 2026-09-12 14:55:41 +00:00 v1 0 / 7

Auth UX: allow anonymous read in OIDC mode (public browsing), navbar Login button + identity dropdown (profile/keys/invitations/setup/logout)

issues

oidc

3

#371 by crueber was closed 2026-09-12 13:43:06 +00:00 v1 0 / 7

OIDC identity: usernames, not emails — import fails on email owner, emails must never be exposed, and the stray back-to-form button

issues

oidc

3

#370 by crueber was closed 2026-09-12 13:21:00 +00:00 v1 0 / 7

Org audit/activity log: member, team, and repo events in one place

issues

oidc

3

#364 by crueber was closed 2026-09-12 14:18:18 +00:00 v1 0 / 3

Org-level webhooks: fan-out across all org repos

issues

oidc

3

#363 by crueber was closed 2026-09-12 12:41:50 +00:00 v1 0 / 3

Invitation lifecycle UI: expiry display + invitee inbox/accept page

issues

oidc

3

#362 by crueber was closed 2026-09-12 01:45:19 +00:00 v1 0 / 3

Access tab: team dropdown for team-subject bindings

issues

oidc

3

#361 by crueber was closed 2026-09-12 01:27:17 +00:00 v1 0 / 3

Org rename: decide rename-with-redirect vs display-name-only

issues

oidc

3

#360 by crueber was closed 2026-09-12 01:19:54 +00:00 v1 0 / 2

Org profile parity + avatar: location/timezone/bio fields and avatar storage

issues

oidc

3

#359 by crueber was closed 2026-09-12 01:17:25 +00:00 v1 0 / 3

Org repos: transfer between owners; fix DeleteOrg 409 dangling reference; delete-org UI

issues

oidc

3

#358 by crueber was closed 2026-09-12 01:06:34 +00:00 v1 0 / 4

Org support gap survey: evaluate and file remaining org-feature tickets vs Forgejo/GitHub parity

issues

oidc

3

#349 by crueber was closed 2026-09-12 14:18:19 +00:00 v1 0 / 4

Organizations: create-org flow, public org profile page, and discoverable owner-only management (profile edit + member add/remove)

issues

oidc

4

#348 by crueber was closed 2026-09-11 23:51:03 +00:00 v1 0 / 7

Create/import: logged-in users bounded to their own username or their orgs as owner (no arbitrary owner strings)

issues

oidc

3

#346 by crueber was closed 2026-09-12 00:10:37 +00:00 v1 0 / 8

Public repositories: viewable without an account; repos get public (default) / private visibility enforced across listings, git, and the UI

git storage

oidc

3

#345 by crueber was closed 2026-09-11 23:27:00 +00:00 v1 0 / 8