rosa/vernier
1
0
Fork 0
Code Issues 8 Pull requests 1 Projects Releases Packages 1 Wiki Activity Actions
Labels Milestones
Search syntax
assignee:<username> Filter by assigned user
author:<username> Filter by the author
is:all All
is:closed Closed
is:open Open
mentions:<username> Filter by mentioned user
modified:[>|<]<date> Filter by last modified date
review:<username> Filter by user who reviewed
sort:<by>:[asc|desc] Sort by: created|comments|updated|deadline
New issue
0 Open 13 Closed 13 All
Label
Clear labels
bug
enhancement
needs-info
needs-triage
ready-for-agent
ready-for-human
wontfix
Milestone
No milestone
Projects
Clear projects
Assignee
Clear assignees
No assignee
rosa
web: Confirmation tokens in /confirm/{token} URLs are recorded in TraceLayer spans
bug
ready-for-agent
1
#95 by rosa was closed 2026-07-04 19:05:52 +00:00
web: Atom feed omits the required id and updated elements
bug
ready-for-agent
1
#94 by rosa was closed 2026-07-05 00:49:46 +00:00
web: Rate limiters key on the TCP peer, ignoring RealIpLayer's resolved client IP
bug
ready-for-agent
2
#91 by rosa was closed 2026-07-05 18:09:10 +00:00
domain: in-memory mock repo diverges from Postgres (reset-token action_type; missing EmailTaken)
bug
ready-for-agent
1
#63 by rosa was closed 2026-07-04 18:40:29 +00:00
domain: revoke_access_token returns Ok for a foreign/nonexistent token while the UI reports success
bug
ready-for-agent
1
#62 by rosa was closed 2026-07-03 21:33:35 +00:00
domain: redeem_authorization_code deletes the code before loading the user, burning it on transient errors
bug
ready-for-agent
1
#61 by rosa was closed 2026-07-03 21:39:14 +00:00
domain: password-reset job retries mint additional valid reset tokens
bug
ready-for-agent
1
#59 by rosa was closed 2026-07-03 21:34:21 +00:00
domain: login lockout uses a stale whole-row read-modify-write, racing the counter and clobbering profile edits
bug
ready-for-agent
1
#56 by rosa was closed 2026-07-04 04:03:21 +00:00
domain: expired/invalid password-reset token surfaces as 500 Unknown instead of link-expired
bug
ready-for-agent
1
#54 by rosa was closed 2026-07-03 21:41:40 +00:00
domain: publishing a draft via Micropub update leaves published_at unset, post never goes live
bug
ready-for-agent
2
#53 by rosa was closed 2026-07-04 16:22:38 +00:00
domain: Micropub category add bypasses the 25-tag cap and bricks the post
bug
ready-for-agent
2
#51 by rosa was closed 2026-07-03 17:16:42 +00:00
domain: Micropub q=source has no scope check, create-only token can read private/draft posts
bug
ready-for-agent
1
#50 by rosa was closed 2026-07-03 05:25:15 +00:00
domain: authorization code redemption is non-atomic, concurrent redeems bypass single-use
bug
ready-for-agent
1
#49 by rosa was closed 2026-07-03 21:39:14 +00:00