Commit 1e42316
committed
feat(apps): stop an app install depending on the person who registered it
An install-context token resolved its author through the active-user
lookup, so disabling the developer who registered an app took the app
down with them — the exact thing an organization does when that person
leaves.
The install now acts as itself: the author is resolved even when
disabled or deleted, carries no server role, and neither the token's
validity nor its SSO account is checked any more. Per-language grants
no longer fall back to the author either — an install has none, and its
granted scopes are the whole ceiling. An acted-as user is unchanged:
their status and permissions still decide what the app may do.
Permission computation tolerates an inactive account rather than
failing, so the endpoints that still resolve the author's stored
project permissions keep working after they leave.1 parent 9313529 commit 1e42316
12 files changed
Lines changed: 475 additions & 39 deletions
File tree
- backend
- api/src/main/kotlin/io/tolgee/api/v2/controllers
- keys
- translation
- app/src/test/kotlin/io/tolgee/api/v2/controllers/apps
- data/src/main/kotlin/io/tolgee
- activity
- iterceptor
- security/authentication
- service
- key
- language
- security
Lines changed: 2 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
78 | 78 | | |
79 | 79 | | |
80 | 80 | | |
81 | | - | |
| 81 | + | |
82 | 82 | | |
83 | 83 | | |
84 | 84 | | |
| |||
99 | 99 | | |
100 | 100 | | |
101 | 101 | | |
102 | | - | |
| 102 | + | |
103 | 103 | | |
104 | 104 | | |
105 | 105 | | |
| |||
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
67 | 67 | | |
68 | 68 | | |
69 | 69 | | |
70 | | - | |
| 70 | + | |
71 | 71 | | |
72 | 72 | | |
73 | 73 | | |
| |||
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
258 | 258 | | |
259 | 259 | | |
260 | 260 | | |
261 | | - | |
| 261 | + | |
262 | 262 | | |
263 | 263 | | |
264 | 264 | | |
| |||
0 commit comments