lmxopcua

Files

T

Joseph Doherty 5097444d56 fix(controlplane): condition the dispatch flip on the guard's RowVersion; one deadline source; align IdentityModel pins

Re-review 1: HandleDispatch's terminal guard and its AwaitingApplyAcks flip read the row separately, so a
lost-dispatch closure committed between them was silently reopened. The flip now carries the RowVersion the
guard read; a change in between is a concurrency conflict (nothing seeded, nothing published, coordinator
reset). Pinned on real SQL Server with a closure injected between the two reads (fails without the fix).

AdminOps' apply deadline and the coordinator's now both read DeployTimings.ApplyDeadline, passed explicitly
to both singletons. Microsoft.IdentityModel.Protocols(.OpenIdConnect) pinned to 8.11.0 and referenced
directly by the Security project, so the whole IdentityModel family resolves 8.11.0 (fresh restore clean
of NU190x/NU1605).

Refs #733
Claude-Session: https://claude.ai/code/session_01Ub9hGmYLQvn9XETzw7CMsT

2026-10-22 14:08:42 -04:00

Audit

fix(security): audit actor falls back to HttpContext when the server auth-state provider has no circuit

2026-10-22 13:36:51 -04:00

Auth

fix(security): first-party JwtBearer with HS256 pinned; /auth/token mints for a cookie session only

2026-10-22 13:35:54 -04:00

Endpoints

fix(security): first-party JwtBearer with HS256 pinned; /auth/token mints for a cookie session only

2026-10-22 13:35:54 -04:00

Jwt

fix(security): first-party JwtBearer with HS256 pinned; /auth/token mints for a cookie session only