ResolveSpec

mirror of https://github.com/bitechdev/ResolveSpec.git synced 2026-07-30 06:07:38 +00:00

Author	SHA1	Message	Date
Hein	873e8925d4	fix(handler): ensure target ID is provided for updates Tests / Unit Tests (push) Failing after 9s Details Tests / Integration Tests (push) Failing after 12s Details Build , Vet Test, and Lint / Run Vet Tests (1.23.x) (push) Successful in 48s Details Build , Vet Test, and Lint / Build (push) Successful in 1m18s Details Build , Vet Test, and Lint / Run Vet Tests (1.24.x) (push) Successful in 1m27s Details Build , Vet Test, and Lint / Lint Code (push) Successful in 1m28s Details	2026-07-24 16:35:22 +02:00
Hein	b23916048a	fix: ordering in before hook	2026-07-24 15:56:23 +02:00
Hein	47708fc87a	fix(security): run RLS-scoping hooks in the same transaction as their queries Tests / Unit Tests (push) Failing after 12s Details Tests / Integration Tests (push) Failing after 16s Details Build , Vet Test, and Lint / Run Vet Tests (1.23.x) (push) Successful in 51s Details Build , Vet Test, and Lint / Build (push) Successful in 1m24s Details Build , Vet Test, and Lint / Run Vet Tests (1.24.x) (push) Successful in 1m31s Details Build , Vet Test, and Lint / Lint Code (push) Successful in 2m4s Details BeforeRead/BeforeCreate hooks (used to set session-scoped RLS GUCs) were firing against the pooled db handle while the actual queries ran as separate calls to the same pool. Under connection pooling these could land on different physical connections, silently bypassing row-level security on creates and reads. handleUpdate already did this correctly; handleRead/handleCreate in both resolvespec and restheadspec now wrap hook execution and queries in a single RunInTransaction call.	2026-07-24 12:40:27 +02:00

2 changed files with 993 additions and 804 deletions

pkg/resolvespec/handler.go

+497 -350

View File

File diff suppressed because it is too large Load Diff

pkg/restheadspec/handler.go

+496 -454

View File

File diff suppressed because it is too large Load Diff

Compare commits

3 Commits

v1.1.27 ... v1.1.30

Compare commits

3 Commits v1.1.27 ... v1.1.30

3 Commits

v1.1.27 ... v1.1.30