orbiting / backends

41%

master: 42%

LAST BUILD ON BRANCH fix-token-payload-collision

branch: fix-token-payload-collision

CHANGE BRANCH

x

Reset

• fix-token-payload-collision
• access-campaigns
• accomplices
• analytics
• append-token-covid-nl
• article-templates
• auto-pay-mutation-endponint
• await-the-scheduler-fix-with-missing-credit-card
• better-error
• biography-mdast
• blm
• bold-italic
• book-structure
• bump-dependencies
• bump-sg
• bump-sg-nl
• chore/typescript-setup
• chore/use-prettier-for-js-files
• cleanup-modules-crowdfundings
• cleanup-unused-indices
• cockpit-engagement
• collection-items
• counter-switch
• covid19
• createVoting
• crowdfunding-no-stripe-crash
• dep-updates
• dependabot/npm_and_yarn/apollo-server-2.14.2
• dependabot/npm_and_yarn/apollo-server-core-2.14.2
• dependabot/npm_and_yarn/apollo-server-express-2.14.2
• dependabot/npm_and_yarn/connect-pg-simple-6.0.1
• dependabot/npm_and_yarn/eslint-utils-1.4.2
• dependabot/npm_and_yarn/handlebars-4.7.6
• dependabot/npm_and_yarn/http-proxy-1.18.1
• dependabot/npm_and_yarn/lambdas/chromium/https-proxy-agent-2.2.4
• dependabot/npm_and_yarn/lodash-4.17.13
• dependabot/npm_and_yarn/lodash.merge-4.6.2
• dependabot/npm_and_yarn/node-fetch-2.6.1
• dependabot/npm_and_yarn/object-path-0.11.5
• dependabot/npm_and_yarn/websocket-extensions-0.1.4
• discussion-link-previews
• enable-GitHub's-code-scanning
• expose-nl
• extract-embeds
• feat-access-granter-in-gsheet
• feat-access-mail-config
• feat-access-payload
• feat-activate-membership
• feat-anonymous-comment-differentiator
• feat-auth-default-auth-for-apps
• feat-auth-remove-event-log
• feat-authorize-token
• feat-autopay
• feat-autopay-notice-5
• feat-autopay-prolong-notice
• feat-cards
• feat-cards-aggregations
• feat-cards-campaign-financing
• feat-cards-discussions
• feat-cards-elections
• feat-cards-filters
• feat-cards-filters-on-steroids
• feat-cards-improvements
• feat-cards-upgrades
• feat-cronjob
• feat-delete-unused-memberships
• feat-disable-package-options
• feat-login-email-code
• feat-mail-plain-text
• feat-mail-templates
• feat-mailchimp-sync
• feat-maillog-filters
• feat-membershipstats-populate-cache
• feat-newsletter-subscription-product
• feat-onboarding
• feat-preview-with-access-grants
• feat-publikator-mailchimp-configs
• feat-publikator-scheduler
• feat-query-phase
• feat-redirections-with-api
• feat-resolve-searchparams
• feat-search-sections
• feat-statistics-manual-merge
• feat-t7-winback
• feat-tablebook
• feat-takeout
• featured-comments
• filter-notifications
• fix-auth-mail-subject-w-phrase
• fix-broken-stats
• fix-cancel-subscription
• fix-cancellation-categories
• fix-claim-membership-selfclaim
• fix-cockpit-evolution
• fix-comments-query
• fix-crowdfunding-membership-owner-mails
• fix-discussion-comments
• fix-discussion-link-previews
• fix-discussion-scheduling
• fix-embeds-youtube-thumbnail-pick
• fix-fix-broken-stats
• fix-generate-memberships
• fix-github-assets-status-check
• fix-immediatly-cancel-grace-membership
• fix-import-postfinance
• fix-mail-comment-notification
• fix-mail-rm-memberships-count
• fix-mail-wording-transactionals
• fix-mime-detection
• fix-notifications
• fix-notifications-quotes
• fix-pledge-wiring-info
• fix-publikator-doc-meta
• fix-reclaim-pledge
• fix-repo-search
• fix-scheduler-with-missing-credit-card
• fix-school
• fix-standardjs
• fix-stats-cache
• fix-stripe-email-subscription-failed
• fix-stripe-no-sources
• fix-subscriptions
• fix-subscriptions2
• fix-subscriptions3
• fix-transactionals-translations
• fix-update-elasticsearch
• fix-user-merging-with-answers
• fix2-discussion-link-previews
• front2.0
• future
• future-numbers
• future2
• generate-mailchimp-segments
• github-downtime-resilience
• graceful-unavailable-package-options
• graphiql
• gsheet-export
• hold-owner-prolong-notice
• images
• improve-txt-mail
• kaizen
• limit-statements
• master
• mc-vars
• membership-pot
• membership-pot-access-grants
• membershipstats-count
• missing-indices
• mss
• mutation/append-period-to-membership
• name-accessRole
• newsletter-covid19
• node-14
• node-14-update-deps
• notifications-follow-commenters
• notifications-list
• notifications-unpublished
• optimise-docs
• pae/3rd-wave
• pae/admin-tool-improvements
• pae/autopay-defaulting
• pae/autopay-defaulting-migration
• pae/feat-postal-delivery
• pae/feat-postfinance-reminder-prevent
• pae/fix-filtered-user-roles
• pae/fix-mail-text-templates
• pae/fix-postfinance-import
• pae/mailchimp-webhook
• page-template
• payment-intents
• piwik
• pledge-tablebook
• postfinance-connection
• postfinance-import
• promoted-authors
• questionnaire-101
• questionnaire-gender
• questionnaire-improvements
• raw
• readme-quickstart
• redis-optimizations
• redis-optimizations-tls
• refactor-pgdb-pooling
• refactor-pgdb-pooling-workerid
• refactor-schedulers
• refactor-transactional-emails
• remove-kampa
• remove-package-option-disabled-flag
• remove-passport
• remove-preview-module
• render-cache
• save-posfinance-files-regardless-of-errors
• sections-again
• send-payment-reminders
• send-payment-reminders-fork
• server-unification
• sexy-search
• share-cards
• shuffle-employees
• slack-greet-bot
• split-front-repo
• stale-tokens
• stats-trend
• subscribe-authors
• subscribe-authors-comments
• templates-amends
• test-fix-twitter-embed
• test-jest-db
• test-notifications
• test-six-pierre
• tests-speedup
• throttle-mailLog
• transactional-feedback
• unrestricted-documents
• unvote-comment
• update-deps-5
• update-elasticsearch
• update-graphql
• votings-turnout
• ws-tracker

Build # 1807

Build Type

push

travis-ci-com

Committed by tpreusse

Commit Message

fix(auth): prevent payload collision on authorize and deny

Happened with type EMAIL_CODE. These payload are only unique per email address. Other types use uuid which are unlikely to collide.

Run Details

1622 of 6175 branches covered (26.27%)

Branch coverage included in aggregate %.

6130 of 12522 relevant lines covered (48.95%)

14.31 hits per line