Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

triggerdotdev / trigger.dev Public

Notifications You must be signed in to change notification settings
Fork 1.2k
Star 14.9k

Code
Issues 245
Pull requests 60
Discussions
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights

feat(webapp): consolidate auth path + add comprehensive auth tests#3499

Merged

matt-aitken merged 105 commits into

maintriggerdotdev/trigger.dev:mainfrom

rbac-packagestriggerdotdev/trigger.dev:rbac-packagesCopy head branch name to clipboard

May 12, 2026

Conversation Commits105 (105)Checks Files changed

Merged

feat(webapp): consolidate auth path + add comprehensive auth tests#3499
matt-aitken merged 105 commits into
mainfrom
rbac-packages

Commits

Commits on May 12, 2026

Initial commit of RBAC split setup
matt-aitken
committed
Verdaccio publish
matt-aitken
committed
Every change will republish when in dev
matt-aitken
committed
RBAC/plugin updates
matt-aitken
committed
Update RBAC plugin interface: authenticateBearer/Session, drop PrismaClient from public interface
matt-aitken
committed
JWT/realtime token integration: publicJWT subject, jwt metadata, allowJWT option, buildJwtAbility
matt-aitken
committed
Lazy loading of plugin
matt-aitken
committed
RBAC: force-fallback flag + env var + e2e fallback wiring (TRI-8715)
matt-aitken
committed
RBAC: API auth e2e coverage — action + PAT + edge cases (TRI-8716)
matt-aitken
committed
RBAC: resource-scoped JWT e2e coverage (TRI-8716 follow-up)
matt-aitken
committed
RBAC: pre-migration JWT behaviour tests for TRI-8719 risks (TRI-8716)
matt-aitken
committed
RBAC plugin: array resources + action alias wrapper (TRI-8719 Phase A)
matt-aitken
committed
RBAC: migrate apiBuilder to rbac.authenticateBearer + ability.can (TRI-8719 Phase B)
matt-aitken
committed
RBAC: dashboardLoader / dashboardAction + migrate admin pages (TRI-8717)
matt-aitken
committed
RBAC plugin: authenticateAuthorize* accepts array resources
matt-aitken
committed
RBAC tests: shared-container test harness for the comprehensive auth suite (TRI-8732)
matt-aitken
committed
RBAC plugin: Result types on mutation methods + OSS fallback (TRI-8747)
matt-aitken
committed
RBAC: split dashboardBuilder so client-bundle imports resolve
matt-aitken
committed
Code comments/formatting
matt-aitken
committed
Batch added resource
matt-aitken
committed
Batch add resource
matt-aitken
committed
RBAC: Teams page UI — role dropdowns, plan-aware disabling, manage gating (TRI-8748)
matt-aitken
committed
Delete API batches
matt-aitken
committed
RBAC: auto-assign system roles on org create + invite accept (TRI-8854)
matt-aitken
committed
RBAC: PAT creation flow with role selection (TRI-8749)
matt-aitken
committed
Use defaultValue instead of lots of useState
matt-aitken
committed
RBAC tests: PAT auth comprehensive matrix (TRI-8741)
matt-aitken
committed
RBAC tests: dashboard session auth for admin pages (TRI-8742)
matt-aitken
committed
RBAC tests: cross-cutting auth edge cases (TRI-8743)
matt-aitken
committed
RBAC tests: waitpoint completions + input streams (TRI-8740)
matt-aitken
committed
RBAC tests: trigger task routes (TRI-8733)
matt-aitken
committed
RBAC tests: run lists (TRI-8736)
matt-aitken
committed
RBAC tests: run mutations — cancel + idempotencyKeys.reset (TRI-8735)
matt-aitken
committed
RBAC tests: run resource routes — multi-key (TRI-8734)
matt-aitken
committed
RBAC tests: batch retrieve + realtime (TRI-8737)
matt-aitken
committed
RBAC tests: prompts (TRI-8738)
matt-aitken
committed
RBAC tests: deployments + query (TRI-8739)
matt-aitken
committed
RBAC tests: unblock e2e.full harness; all 162 tests pass (TRI-8731)
matt-aitken
committed
RBAC tests: parameterise RBAC_FORCE_FALLBACK in testcontainers (TRI-8859)
matt-aitken
committed
RBAC tests: extract projectCreated to break platform.v3.server cycle (TRI-8731)
matt-aitken
committed
Latest lockfile… although it'll probably get conflicted again
matt-aitken
committed
RBAC: Roles page (TRI-8880)
matt-aitken
committed
RBAC: drop upfront UserRole inserts from org-creation and invite flows
matt-aitken
committed
RBAC: scrub "enterprise" / "OSS" / cloud-side references from comments
matt-aitken
committed
RBAC: scrub enterprise reference from rbac-force-fallback server-change note
matt-aitken
committed
RBAC: drop Wildcards group from Roles page client-side mapping
matt-aitken
committed
RBAC: extend Permission + RbacResource for CASL conditional rules (TRI-8893)
matt-aitken
committed
RBAC: rework Roles page as a permission × role comparison Table (TRI-8904)
matt-aitken
committed
RBAC: flex Roles page header + cell content horizontally with gap-1
matt-aitken
committed
RBAC: left-align Roles page role columns (header + cells)
matt-aitken
committed
RBAC: shrink-to-content sizing for non-Description columns on Roles page
matt-aitken
committed
RBAC: revert column shrink-to-content sizing on Roles page
matt-aitken
committed
RBAC: render conditional cells as plain dimmed text (no tick + badge)
matt-aitken
committed
RBAC: invite flow role picker via OrgMemberInvite.rbacRoleId (TRI-8892)
matt-aitken
committed
Tightened up comments and log an error for failed role assignments
matt-aitken
committed
RBAC: rbac.systemRoleIds() instead of duplicating role-id constants
matt-aitken
committed
RBAC: give upgrade-link rows a value so Ariakit handles the click
matt-aitken
committed
RBAC: preserve render prop in SelectItem outside Combobox context
matt-aitken
committed
Fixed role link
matt-aitken
committed
RBAC: replace systemRoleIds() with systemRoles() catalogue
matt-aitken
committed
RBAC: address PR review — batch trigger AND, fallback resilience, picker tightening
matt-aitken
committed
Consolidate plugin changesets into a single patch entry
matt-aitken
committed
Tighten plugin changeset description
matt-aitken
committed
Consolidate server-changes into a single entry
matt-aitken
committed
Hide the Roles page for non-cloud
matt-aitken
committed
Hardcode legacy OrgMember.role=MEMBER on invite
matt-aitken
committed
Invite picker: allow at-or-below the inviter's own role
matt-aitken
committed
Remove unneeded comment
matt-aitken
committed
Plugin: getUserRoles(userIds, orgId) batch lookup
matt-aitken
committed
Plugin owns permission display groups
matt-aitken
committed
Improved the team layout
matt-aitken
committed
Not enough permissions tooltip
matt-aitken
committed
dashboardLoader/Action can access the context data
matt-aitken
committed
Sessions routes: post-RBAC apiBuilder shape + preserve superScopes semantics
matt-aitken
committed
Plugin: authenticatePat for cap-and-floor PAT auth (TRI-9087)
matt-aitken
committed
ci: align e2e-webapp-auth-full pnpm pin with root packageManager
matt-aitken
committed
test(webapp): exclude *.e2e.full.test.ts from unit-test glob
matt-aitken
committed
Address PR review: fallback grace window + multi-table query AND + UX
matt-aitken
committed
test(webapp): every-table semantics for /api/v1/query
matt-aitken
committed
apiBuilder: require explicit anyResource() / everyResource() at multi-resource sites

matt-aitken
and
claude
committed
Address Devin review: 4 RBAC auth path fixes

matt-aitken
and
claude
committed
core: move sanitizeBranchName + isValidGitBranchName to @trigger.dev/core/v3/utils/gitBranch

matt-aitken
and
claude
committed
core/plugins/auth boundary: define slim AuthenticatedEnvironment, eliminate redundant findEnvironmentById

matt-aitken
and
claude
committed
lockfile updates for @trigger.dev/core dep on plugins
matt-aitken
committed
lockfile (cont)
matt-aitken
committed
e2e-webapp-auth-full.yml: SHA-pin actions, drop persisted credentials

matt-aitken
and
claude
committed
Address Devin review: Decimal coercion + replica plumbing + check-exports fix

matt-aitken
and
claude
committed
test(webapp): stop createInMemoryTracing from registering OTel globally

matt-aitken
and
claude
committed
test(testcontainers): fix assertNonNullable — drop the require("vitest") that collides with OTel auto-instrumentation

matt-aitken
and
claude
committed
fix(rbac,webapp): pass userId through plugin context, drop session-cookie helper

matt-aitken
and
claude
committed
fix(test/utils/tracing): disable OTel globals before re-registering in createInMemoryTracing

matt-aitken
and
claude
committed
fix(webapp): normalize PAT/OAT environments through the same toAuthenticated mapper

matt-aitken
and
claude
committed
fix(webapp): backwards-compat for type-level scope on runs list + tighten team action authz

matt-aitken
and
claude
committed
fix(rbac,webapp): isUsingPlugin() on the controller — drop sentinel-string coupling

matt-aitken
and
claude
committed
fix(rbac): preserve colons in scope resource ids

matt-aitken
and
claude
committed
refactor(webapp): drop ApiAuthenticationResultSuccess.scopes + delete dead authorization.server.ts

matt-aitken
and
claude
committed
fix(rbac,webapp): preserve read:runs access for batch retrieval + better OSS empty-state + dedupe orgId lookup

matt-aitken
and
claude
committed
copy(webapp): tighten OSS roles empty-state wording

matt-aitken
and
claude
committed
fix(rbac,webapp): consolidate apiBuilder PAT auth to a single roundtrip

matt-aitken
and
claude
committed
chore: regenerate pnpm-lock.yaml after rebase on origin/main

matt-aitken
and
claude
committed
test(webapp): delete dead authorization.test.ts, update batch e2e to match backwards-compat fix

matt-aitken
and
claude
committed
feat(webapp): hide Roles sidebar link when no RBAC plugin is installed

matt-aitken
and
claude
committed
Clean up code comments
matt-aitken
committed
Delete non-user facing package changeset
matt-aitken
committed
Set the @trigger.dev/plugins version to 4.4.6 (to match others)
matt-aitken
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.