decentraland / social-service-ea / 28593221494

Builds Branch Commit Type Ran Committer Via Coverage
28593221494 main fix: harden access control, referral integrity and adapter robustness (#428) * fix: harden access control, referral integrity and adapter robustness Findings from a security/correctness review, grouped by area. Access control: - Reject direct j... push web-flow github
90.3
28592499927 fix/security-hardening fix: pass logs to reward component in integration test setup Pull #428 LautaroPetaccio github
90.3
28588201131 fix/security-hardening fix: harden access control, referral integrity and adapter robustness Findings from a security/correctness review, grouped by area. Access control: - Reject direct joins of private communities (require the request/invite flow) - Enforce bans on ... Pull #428 LautaroPetaccio github
90.28
28548013452 1.13.0 fix: enforce friendship state machine in upsertFriendship (#427) * fix: enforce friendship state machine in upsertFriendship upsertFriendship applied every friendship action without validating the state-machine transition, so an authenticated us... push web-flow github
90.44
28547511600 main fix: enforce friendship state machine in upsertFriendship (#427) * fix: enforce friendship state machine in upsertFriendship upsertFriendship applied every friendship action without validating the state-machine transition, so an authenticated us... push web-flow github
90.44
28547137360 fix/enforce-friendship-state-machine test: remove redundant action assignment in upsert-friendship no-prior-action block Pull #427 LautaroPetaccio github
90.44
28546372898 fix/enforce-friendship-state-machine fix: enforce friendship state machine in upsertFriendship upsertFriendship applied every friendship action without validating the state-machine transition, so an authenticated user could send an ACCEPT targeting an arbitrary address with no prior... Pull #427 LautaroPetaccio github
90.44
28544267284 main fix: stop logging "Duplicate subscription detected" per occurrence; keep the metric (#426) The per-occurrence debug log floods the logs (hundreds/min at DEBUG) when a client is stuck re-subscribing to the same event — the current production sympt... push web-flow github
90.43
28543321892 fix/silence-duplicate-subscription-log fix: stop logging "Duplicate subscription detected" per occurrence; keep the metric The per-occurrence debug log floods the logs (hundreds/min at DEBUG) when a client is stuck re-subscribing to the same event — the current production symptom of t... Pull #426 LautaroPetaccio github
90.43
28541296911 main fix: harden the subscription path (non-fatal snapshot, no-emitter backoff, drop metric) (#424) Server-side robustness for the subscription streams, complementing the client-side re-subscribe fixes: - subscribe-to-friend-connectivity: make the in... push web-flow github
90.43
28535131687 fix/subscription-path-hardening fix: harden the subscription path (non-fatal snapshot, no-emitter backoff, drop metric) Server-side robustness for the subscription streams, complementing the client-side re-subscribe fixes: - subscribe-to-friend-connectivity: make the initial o... Pull #424 LautaroPetaccio github
90.43
28526773969 fix/http-client-hardening fix: give outbound HTTP a timeout + make catalyst/registry failures observable Undici (native fetch) applies no request timeout unless one is configured, so a stalled upstream (catalyst / registry / archipelago) could pin a keep-alive socket and ... Pull #425 LautaroPetaccio github
90.35
28526473436 fix/subscription-path-hardening fix: harden the subscription path (non-fatal snapshot, no-emitter backoff, drop metric) Server-side robustness for the subscription streams, complementing the client-side re-subscribe fixes: - subscribe-to-friend-connectivity: make the initial o... Pull #424 LautaroPetaccio github
90.41
28523199876 fix/http-client-hardening fix: give outbound HTTP a timeout + make catalyst/registry failures observable Undici (native fetch) applies no request timeout unless one is configured, so a stalled upstream (catalyst / registry / archipelago) could pin a keep-alive socket and ... Pull #425 LautaroPetaccio github
90.36
28522045882 fix/subscription-path-hardening fix: harden the subscription path (non-fatal snapshot, no-emitter backoff, drop metric, quieter dedup) Server-side robustness for the subscription streams, complementing the client-side re-subscribe fixes: - subscribe-to-friend-connectivity: mak... Pull #424 LautaroPetaccio github
90.41