hypercerts-org / ePDS

64%

main: 61%

LAST BUILD ON BRANCH fix/social-sign-in-hardening

branch: SELECT

CHANGE BRANCH

x

• No branch selected
• 143-oauth-enrichment-cover-all-pages-hide-handles-in-random-mode-explain-via-tooltip
• 143-oauth-enrichment-cover-all-pages-hide-handles-in-random-mode-explain-via-tooltip-merge
• 22-make-handle-selection-on-signup-optional
• account-sticky
• adam/fix-changeset-skill-audiences
• adam/hyper-219-set-emailconfirmedat-on-epds-account-after-otp-verified
• adam/hyper-283-changesets
• adam/hyper-295-document-v020-v022-doc-gaps
• adam/hyper-300-skill-tutorial-rewrite
• adam/hyper-545-email-typo-guard
• add-instatus-maintenance-skill
• add-linear-release-workflow
• add-test-coverage
• blacksmith-migration-70fb816
• bsky-signin-page
• changelog-fixes
• changeset-bumps-to-patch
• changeset-release/main
• chore/remove-instatus-skill
• ci-merge-group-trigger
• ci/cache-playwright-browsers
• ci/coveralls-thresholds
• ci/e2e-deploy-timeout-6min
• ci/e2e-parallel-3
• coverage/increase-unit-tests
• css-injection-trusted-clients-testing
• demo/flow3-picker-with-random
• docs/changeset-capitalization-rule
• docs/clarify-service-attribution
• docs/coveralls-thresholds
• docs/demo-theme-note-tighten
• docs/demo-theme-required-for-e2e
• docs/fix-prompt-par-guidance
• docs/pds-white-boxing-session-reuse
• docs/preview-changeset-prose
• docs/simplify-epds-login-skill
• docs/skill-prompt-login-cleanup
• e2e-feature-testing
• e2e-skip-release-pr
• e2e-test-additional
• e2e-tests
• e2e/sec-fetch-diagnosis
• feat/atproto-login-button
• feat/atproto-upstream-upgrade
• feat/auth-preview-routes
• feat/email-preview-endpoint
• feat/otp-send-timing
• feat/resend-delivery-webhooks
• feat/resend-webhook-additional-events
• feat/tee-signer
• feat/version-health-endpoint
• fix-release-github-releases
• fix/account-login-powered-by-footer
• fix/another-account-skips-email
• fix/changeset-missing-affects-line
• fix/changeset-package-name
• fix/changeset-package-name-case
• fix/consent-use-upstream-oauth-ui
• fix/createInviteCode-docs
• fix/demo-dpop-nonce-logging
• fix/docker-build-nested-node-modules
• fix/e2e-pr-base-url
• fix/e2e-preview-url-derivation
• fix/e2e-workflow-dispatch
• fix/email-log-field
• fix/handle-picker-wide-domain
• fix/host-only-cookie-shadow
• fix/link-affordances
• fix/log-otp-failures-email
• fix/log-otp-verification-failures
• fix/login-legal-links-new-tab
• fix/muted-foreground-contrast
• fix/oauth-scopes
• fix/oauth-session-reuse
• fix/ocean-theme-contrast
• fix/otp-double-submit-flash
• fix/otp-expiry-resend-bug
• fix/otp-release-notes-wording
• fix/otp-resend-after-par-expiry
• fix/par-expiry-existing-user-bridge
• fix/paste-code-mobile
• fix/pds-internal-url-setup
• fix/preview-cache-and-debug-endpoints
• fix/preview-chooser-empty-fallback
• fix/railway-port-healthcheck
• fix/railway-root-watch-patterns
• fix/redact-request-uri-in-logs
• fix/resend-webhook-log-message
• fix/resend-webhook-log-message-format
• fix/send-new-code-label
• fix/social-sign-in-hardening
• fix/social-sign-in-post
• fix/validate-pds-internal-url-scheme
• fix/xrpc-health-pds-version
• flow1-hint-skip-chooser
• gh-readonly-queue/dev/pr-257-904c871d5d231dc63213b282610642ca4ebcdacf
• gh-readonly-queue/main/pr-110-92b9a40b2bff0bdbc955b32965f0810b2145fb77
• gh-readonly-queue/main/pr-115-d608f6d6c97680fd4f7128c23af00ca3a3fb2246
• gh-readonly-queue/main/pr-123-7ae8a8c9d18ac5e4e075e51022694f97600fe985
• gh-readonly-queue/main/pr-127-6e6c3dc936515416f5bfe01652fe852b0033039f
• gh-readonly-queue/main/pr-130-ea56f77fe14c1c41fc25ef40f78f12c5135330fa
• gh-readonly-queue/main/pr-134-bdddfaf40d473365b9d347a3de8e839fd17e0aec
• gh-readonly-queue/main/pr-136-b8e434908aeb9f54e758e3a51ded71117715ba71
• gh-readonly-queue/main/pr-144-87b5d96ff5e5a06e430e228d9761519592bee67f
• gh-readonly-queue/main/pr-166-e060e2fd961e4361bbd63674ec0d339c4c8b8acd
• gh-readonly-queue/main/pr-169-cb904e925a2a9b6f0db476b07aa17023874c1587
• gh-readonly-queue/main/pr-170-49a0579215eee4d633c4a164e61a69d4578e261d
• gh-readonly-queue/main/pr-174-b0eb754f43382d825bb5c639e5c5d0e8dcb53e96
• gh-readonly-queue/main/pr-188-7dc00a70a02a051e1bbe5daf0da18a844de813e3
• gh-readonly-queue/main/pr-249-8314b89bc059e8eb10eeaa4ca50e13fb390c4b99
• gh-readonly-queue/main/pr-251-74fb73d215dc27e955388045cdb0e105111853bf
• gh-readonly-queue/main/pr-254-751c46e8fe35cecf3323487ed42253c61989fbdd
• gh-readonly-queue/main/pr-256-478c558e29dcdca2c4c6425371941dc48cd955ef
• gh-readonly-queue/main/pr-258-ce95bbfbb1335a442f0a7b7df2596eff48756284
• gh-readonly-queue/main/pr-85-ee9736c84c0b6c781647a5824146776139710054
• gh-readonly-queue/main/pr-86-3f5d5c1ed183b594ab5bd41565845737944e8bf8
• gh-readonly-queue/main/pr-97-1128699e02947db462e5d6038c9359c87e7d995a
• gh-readonly-queue/production/pr-261-ee1a2ebc5a7d49cf25af9d569dbb25b3c1ada344
• hyper-259-mask-email-v2
• hyper-account-recovery
• hyper-cucumber-all-features
• hyper-security-scenarios
• hyper-small-scenarios
• karma/hyper-113-switch-to-6-digit-otp
• karma/hyper-137-changing-email-address-on-epds
• karma/hyper-186-agreeing-to-tos-and-privacy
• karma/hyper-386-bug-missing-space-between-account-and-email-address
• karma/hyper-395-align-the-login-complete-page
• main
• pds/maearth-branding-compat
• pds/provider-ui-branding-fix
• pds/upgrade-0-5-34
• preview-validate-handle-login-url
• release-auto-tag
• remove-dev-secret-fallbacks
• rename-package-epds
• restyle-login-page
• root-redirect-to-account
• security/email-template-trusted-clients
• session-expired-on-double-approve
• session-reuse-bugs
• sharfy/favicon-injection
• sharfy/hyper-327-add-certified-favicon
• sharfy/style-auth-error-pages
• signin-with-certified-button-alignment
• split-pr165/accessible-error-announcements
• split-pr165/account-settings-flash
• split-pr165/clear-code-on-resend
• split-pr165/clear-email-on-back
• split-pr165/email-autocomplete
• split-pr165/friendly-demo-errors
• split-pr165/friendly-stale-link-errors
• split-pr165/handle-unavailable-copy
• split-pr165/ignore-incomplete-otp-submit
• split-pr165/keyboard-focus-rings
• split-pr165/otp-lockout-recovery
• split-pr165/recovery-link-request-uri
• split-pr165/safe-client-name-fallback
• split-pr165/server-otp-charset-filter
• split-pr165/spam-folder-hint
• split148/enrichment-tooltip
• split148/handle-mode-plumbing
• split148/login-page-readiness
• split148/oauth-request-context
• styling-errors-callback
• test/atmosphere-e2e
• test/auth-flow-ttl
• test/otp-expiry-e2e
• unbundle/otp-resend-par-liveness
• welcome-guard-inadequate
• worktree-docs+subdomain-adr

Build # 39637835378

Build Type

Pull #260

github

Committed by web-flow

Commit Message

Merge ae10c8d6c into 74bae33cb

Pull Request Pull Request #260: fix(auth): make social sign-in safe to switch on (verified emails only, errors back to the login page)

Coverage Stats

1340 of 2095 branches covered (63.96%)

Branch coverage included in aggregate %.

90 of 93 new or added lines in 11 files covered. (96.77%)

2097 of 3291 relevant lines covered (63.72%)

11.1 hits per line