Fail closed when administrator authentication is unconfigured #8

2026-10-29T08:42:35Z

codex-bot commented

2026-10-29 08:42:35 +00:00

原邮箱账户 PR #6 的初始提交已由外部合入 main；本 PR 仅补交尚未合入的安全修复。

proxy 默认在管理员认证配置缺失时拒绝旧受保护接口，防止普通账户误获管理员写权限。compose 的 AUTH_DISABLED_FOR_TESTS 默认 false，只有临时 integration 栈显式开启；配置管理员动态码后该开关不生效。

ACCOUNT.md 说明邮件账户安全边界、限速和 root 0600 的 /etc/prompt.env 运行时 SMTP 配置；密码无需传给本 chat，也不提交到仓库。

静态 diff 检查通过；完整构建与数据库集成检查仅在 ces-control 执行。等待 CI 与用户手动合并。实际邮件投递和 http://8.211.154.134:18131/account 视觉验收由主 chat 在部署后继续。

原邮箱账户 PR #6 的初始提交已由外部合入 main；本 PR 仅补交尚未合入的安全修复。 proxy 默认在管理员认证配置缺失时拒绝旧受保护接口，防止普通账户误获管理员写权限。compose 的 AUTH_DISABLED_FOR_TESTS 默认 false，只有临时 integration 栈显式开启；配置管理员动态码后该开关不生效。 ACCOUNT.md 说明邮件账户安全边界、限速和 root 0600 的 /etc/prompt.env 运行时 SMTP 配置；密码无需传给本 chat，也不提交到仓库。静态 diff 检查通过；完整构建与数据库集成检查仅在 ces-control 执行。等待 CI 与用户手动合并。实际邮件投递和 http://8.211.154.134:18131/account 视觉验收由主 chat 在部署后继续。

codex-bot added 1 commit 2026-10-29 08:42:36 +00:00

Fail closed without admin configuration and document SMTP operations

waterfall-wiki CI and deployment / verify-and-deploy (pull_request) Failing after 3m22s

Details

b131e1b11d

codex-bot added 1 commit 2026-10-29 08:46:59 +00:00

Keep account session revocation available when rate limited

waterfall-wiki CI and deployment / verify-and-deploy (pull_request) Failing after 3m15s

Details

b157504ca6

codex-bot added 1 commit 2026-10-29 08:49:33 +00:00

Verify public knowledge reads and protected administrator writes

waterfall-wiki CI and deployment / verify-and-deploy (pull_request) Failing after 3m22s

Details

a1984e615a

Zayden-Jung merged commit 02267a73b9 into main

2026-10-29 08:51:03 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Zayden-Jung/probably-rendering-one-more-pixel-tonight#8