Bobby Ho 395e8032dc fix: reject client_secret in the OAuth2 token and revocation URL (#29508) ...

Reject non-empty `client_secret` query parameters on token and revocation endpoints with `400 invalid_request`, enforcing OAuth 2.1 §2.4.1 (D6-04).

- **Breaking:** Send secrets in the request body or `Authorization` header, and rotate any previously sent in URLs. Rejections consume nothing, so clients can retry without reauthorization.
- Empty query secrets count as absent, but token requests also supplying a body secret still fail duplicate-parameter validation. Authorize ignores query secrets and logs a warning without the value.
- Sanitize and cap revocation parse errors, correctly report repeated token parameters, and update tests and API docs. Refusal logs include the app ID, never the secret.
- Other query parameters (`client_id`, `refresh_token`, `code`, and revocation tokens) remain accepted; body-only credential parsing is tracked in PLAT-660.

No migration or new error codes.

Refs PLAT-602.

2026-09-22 23:20:24 +00:00

..

agentapi

feat: report arbitrary workspace agent session types (#28338)

2026-09-19 00:32:51 +02:00

agentmetrics

…

aibridge

chore: add DeepSeek V4.1 Flash and other missed models to the known models catalog (#29585)

2026-09-18 21:04:59 +02:00

aibridged

fix(coderd/aibridged): ignore empty response body writes (#29728)

2026-09-22 19:02:06 +02:00

aibridgedserver

feat: attribute AI Gateway usage to workspaces (#29235)

2026-09-18 15:22:02 +01:00

aibridgedtest

feat: add stateless AI Gateway proxy mode (#29349)

2026-09-18 16:47:16 +02:00

aiseats

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

apidoc

fix: reject client_secret in the OAuth2 token and revocation URL (#29508)

2026-09-22 23:20:24 +00:00

apikey

fix: canonicalize API key scope aliases at ingress (#28322)

2026-08-25 17:12:51 -07:00

appearance

feat: add deployment setting to disable the Codernauts game (#27662)

2026-09-02 11:29:35 +02:00

audit

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

authlink

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

autobuild

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

awsidentity

…

azureidentity

test: fix azureidentity Verify test by replacing with recent token (#26720)

2026-06-26 07:24:21 -04:00

boundaryusage

refactor: use sync.WaitGroup.Go in tests (#26671)

2026-06-25 15:41:09 -06:00

cachecompress

…

coderdtest

chore: delete dead functions and skip-only or duplicated tests (#29461)

2026-09-17 18:14:08 +02:00

connectionlog

…

cryptokeys

feat: make NATS pubsub opt-out via no_nats_pubsub experiment (#29283)

2026-09-18 12:58:06 +00:00

database

fix: consolidate pg and nats pubsub metrics generation into one (#26843)

2026-09-22 14:00:44 -07:00

devtunnel

…

dynamicparameters

feat!: add a hidden flag to disable dynamic parameter closure evaluation (#29356)

2026-09-17 14:33:37 -05:00

entitlements

…

externalauth

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

files

…

gitsshkey

…

healthcheck

test(coderd/healthcheck/derphealth): use local STUN server (#29435)

2026-09-16 14:52:21 -07:00

httpapi

fix: make redirect_uris the source of truth for OAuth2 redirect URIs (#29440)

2026-09-22 10:49:19 -07:00

httpmw

fix: rate limit the OAuth2 endpoints (#29510)

2026-09-22 21:02:42 +00:00

idpsync

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

jobreaper

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

jwtutils

…

mcp

feat: gate the OAuth2 provider on CODER_OAUTH2_PROVIDER_ENABLE (#29251)

2026-09-14 13:47:48 -07:00

metricscache

feat: return per-app session counts from workspace agent stats queries (#29134)

2026-09-10 14:07:03 +02:00

notifications

test(coderd/notifications): share one pipeline across golden templates (#29459)

2026-09-17 20:28:06 +02:00

oauth2provider

fix: reject client_secret in the OAuth2 token and revocation URL (#29508)

2026-09-22 23:20:24 +00:00

oauthpki

…

portsharing

…

pproflabel

feat: add hourly hb_agent_runtime_v1 usage events for Coder Agent runtime (#27312)

2026-07-30 08:37:45 +01:00

prebuilds

…

prometheusmetrics

feat: store session usage per app and family in template usage stats (#29109)

2026-09-18 15:26:47 +02:00

promoauth

feat: log rate-limited external auth token validation (#26754)

2026-08-10 14:43:16 -05:00

provisionerdserver

feat: attribute AI Gateway usage to workspaces (#29235)

2026-09-18 15:22:02 +01:00

provisionerkey

…

proxyhealth

…

pubsub

feat: invalidate provisioner daemon sessions on key deletion (#26532)

2026-08-11 11:04:51 -05:00

rbac

feat: allow admins to configure an OAuth2 app's scope allowlist (#29313)

2026-09-18 11:58:49 -07:00

render

fix: prevent markdown injection in notifications (#28340)

2026-08-25 08:12:00 -07:00

runtimeconfig

chore: delete dead functions and skip-only or duplicated tests (#29461)

2026-09-17 18:14:08 +02:00

schedule

feat: plumb time_til_autostop_notify template field (#26439)

2026-06-23 17:32:47 -05:00

searchquery

feat: add user workspace search filter (#29442)

2026-09-18 12:57:21 -06:00

telemetry

chore: delete dead functions and skip-only or duplicated tests (#29461)

2026-09-17 18:14:08 +02:00

templatebuilder

test: fold near-identical test bodies into tables across eight packages (#29463)

2026-09-17 19:26:18 +02:00

testdata

chore: remove coder_secret Terraform integration (#25512)

2026-05-21 09:19:29 -06:00

tracing

feat!: remove the experimental chat API mounts after the transition window (#29548)

2026-09-21 17:42:31 +02:00

updatecheck

…

usage

feat(coderd): bill completed local tool batches in agent runtime (#28360)

2026-08-25 16:40:41 +07:00

userpassword

fix: use a random value for a simulated hash for built-in users (#26205)

2026-06-10 02:18:44 -05:00

util

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

webpush

test: use httptest server.Client() to isolate transport (#26409)

2026-06-17 00:22:41 +10:00

workspaceapps

test: bind more server tests to loopback (#29042)

2026-09-07 15:24:33 +02:00

workspaceconnwatcher

feat: promote MinimumImplicitMember experiment to GA (#27472)

2026-08-03 15:56:56 -05:00

workspacestats

feat: report arbitrary workspace agent session types (#28338)

2026-09-19 00:32:51 +02:00

wsbuilder

chore: remove stale TODO shims and dead code (#29252)

2026-09-18 10:27:26 -06:00

wsbuildorchestrator

feat: add workspace restart functionality to API (#25757)

2026-07-07 09:18:30 -07:00

wspubsub

feat: add workspace restart functionality to API (#25757)

2026-07-07 09:18:30 -07:00

x

refactor(coderd/x/chatd): unify model override resolution (#28754)

2026-09-22 23:25:58 +02:00

activitybump_test.go

…

ai_providers_backfill_test.go

chore!: remove env-based AI provider configuration (#29053)

2026-09-09 10:16:24 +02:00

ai_providers_backfill.go

feat: add custom AI provider icons and instance-based model picker grouping (#27026)

2026-07-06 23:00:09 +01:00

ai_providers_bedrock_test.go

feat: resolve bedrock inference profiles when a provider is written (#29112)

2026-09-11 16:03:44 +00:00

ai_providers_bedrock.go

feat: resolve bedrock inference profiles when a provider is written (#29112)

2026-09-11 16:03:44 +00:00

ai_providers_internal_test.go

feat: generate STS external ID for Bedrock role assumption (#26869)

2026-07-01 20:44:15 +00:00

ai_providers_pubsub_test.go

feat: hot-reload aibridged and aibridgeproxyd providers on DB changes (#25673)

2026-05-27 11:58:43 +02:00

ai_providers_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

ai_providers.go

feat: resolve bedrock inference profiles when a provider is written (#29112)

2026-09-11 16:03:44 +00:00

aibridge_test.go

refactor: route TransportFor by provider name (#25650)

2026-05-25 18:04:12 +02:00

aibridged.go

feat: gate the OAuth2 provider on CODER_OAUTH2_PROVIDER_ENABLE (#29251)

2026-09-14 13:47:48 -07:00

apikey_scopes_validation_test.go

…

apikey_test.go

fix: canonicalize API key scope aliases at ingress (#28322)

2026-08-25 17:12:51 -07:00

apikey.go

fix: canonicalize API key scope aliases at ingress (#28322)

2026-08-25 17:12:51 -07:00

apiroot.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

audit_internal_test.go

fix: improve chat audit log descriptions and diff rendering (#25728)

2026-05-28 18:37:57 +01:00

audit_test.go

feat: add organization picker to MCP server settings pages (#28150)

2026-08-19 19:46:23 +00:00

audit.go

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

authorize_anyorg_test.go

perf(coderd): batch authcheck permissions via rbac.Filter (#27309)

2026-08-06 09:18:46 -04:00

authorize_test.go

perf(coderd): batch authcheck permissions via rbac.Filter (#27309)

2026-08-06 09:18:46 -04:00

authorize.go

perf(coderd): batch authcheck permissions via rbac.Filter (#27309)

2026-08-06 09:18:46 -04:00

boundary_logs_test.go

fix: create agent firewall sessions without requiring agent read access (#26990)

2026-07-07 10:42:01 +00:00

chat_routes_test.go

feat!: remove the experimental chat API mounts after the transition window (#29548)

2026-09-21 17:42:31 +02:00

chat_routes.go

feat!: remove the experimental chat API mounts after the transition window (#29548)

2026-09-21 17:42:31 +02:00

chat_testhooks.go

test(coderd): centralize chat test harness and stabilize flakes (#25171)

2026-05-12 22:13:55 +10:00

client_test.go

…

coderd_internal_test.go

refactor: deprecate AIGatewayRoutingEnabled, remove direct chat routing (#26862)

2026-07-01 20:15:03 +01:00

coderd_test.go

feat: add the CODER_OAUTH2_PROVIDER_ENABLE deployment flag (#29248)

2026-09-14 08:31:26 -07:00

coderd.go

fix: rate limit the OAuth2 endpoints (#29510)

2026-09-22 21:02:42 +00:00

csp_test.go

fix: enforce max body size on CSP violation report endpoint (#27243)

2026-07-14 12:29:38 -07:00

csp.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

debug_test.go

fix(coderd): deflake TestHealthSettings dismissal subtests (#28501)

2026-08-24 12:06:56 -07:00

debug.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

deployment_test.go

…

deployment.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

deprecated.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

exp_chats_acl_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

exp_chats_acl.go

feat: mount chat API routes under /api/v2 (#28496)

2026-08-26 16:17:06 +02:00

exp_chats_chatstate_test.go

feat!: remove the experimental chat API mounts after the transition window (#29548)

2026-09-21 17:42:31 +02:00

exp_chats_hooks_test.go

feat!: remove the experimental chat API mounts after the transition window (#29548)

2026-09-21 17:42:31 +02:00

exp_chats_internal_test.go

feat: add OpenAI Pro reasoning mode to chat model configs (#29584)

2026-09-21 15:58:18 +02:00

exp_chats_model_acl_test.go

feat!: remove the experimental chat API mounts after the transition window (#29548)

2026-09-21 17:42:31 +02:00

exp_chats_model_acl.go

fix: make chat model sharing work for sharers without directory access (#28542)

2026-08-27 10:49:13 +01:00

exp_chats_model_audit_test.go

feat: audit chat model config changes (#28439)

2026-08-24 11:20:26 +01:00

exp_chats_model_config_list_test.go

feat: enable Coder Agents for organization members (#28186)

2026-08-26 13:33:13 +02:00

exp_chats_reasoning_mode_test.go

feat: add OpenAI Pro reasoning mode to chat model configs (#29584)

2026-09-21 15:58:18 +02:00

exp_chats_test.go

fix(coderd): require read and update chat permissions for delegated chat owners (#29684)

2026-09-21 20:05:43 +00:00

exp_chats.go

fix(coderd): require read and update chat permissions for delegated chat owners (#29684)

2026-09-21 20:05:43 +00:00

experiments_test.go

…

experiments.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

export_test.go

refactor: remove legacy live-read and injected-history chat context paths (#26585)

2026-06-22 19:26:34 -06:00

externalauth_test.go

fix: prevent concurrent token refreshes (#26530)

2026-07-15 12:16:25 -08:00

externalauth.go

fix: add distributed protection for external auth refresh (#27479)

2026-08-19 13:00:31 -08:00

files_test.go

fix: reject oversized and invalid zip uploads (#25877)

2026-06-02 10:11:49 -07:00

files.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

gitsshkey_test.go

…

gitsshkey.go

feat: encrypt gitsshkeys.private_key at rest via dbcrypt (#25872)

2026-06-02 08:36:01 -06:00

inboxnotifications_internal_test.go

feat: notify users when chats are shared (#26914)

2026-07-06 13:15:58 +01:00

inboxnotifications_test.go

…

inboxnotifications.go

feat: notify users when chats are shared (#26914)

2026-07-06 13:15:58 +01:00

initscript_test.go

…

initscript.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

insights_internal_test.go

feat: store session usage per app and family in template usage stats (#29109)

2026-09-18 15:26:47 +02:00

insights_test.go

…

insights.go

feat: store session usage per app and family in template usage stats (#29109)

2026-09-18 15:26:47 +02:00

latencycheck.go

…

mcp_acl_available_test.go

feat: allow sharing MCP servers with users and groups (#28593)

2026-08-26 19:49:43 +02:00

mcp_acl.go

feat: allow sharing MCP servers with users and groups (#28593)

2026-08-26 19:49:43 +02:00

mcp_http.go

feat: add Coder Agents chat tools to the MCP toolsdk (#28025)

2026-08-13 18:32:47 +02:00

mcp_internal_test.go

fix(coderd): accept RFC 9728 resource metadata with array-valued resource (#28592)

2026-08-26 12:27:17 -04:00

mcp_test.go

feat: sign forwarded MCP identity headers (#29669)

2026-09-22 11:11:08 +02:00

mcp.go

feat: sign forwarded MCP identity headers (#29669)

2026-09-22 11:11:08 +02:00

members_test.go

refactor(coderd): restore agents-access cleanup migration (#28587)

2026-08-26 15:29:26 +02:00

members.go

refactor(coderd): restore agents-access cleanup migration (#28587)

2026-08-26 15:29:26 +02:00

notifications_test.go

…

notifications.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

oauth2_error_compliance_test.go

fix: bound OAuth2 request bodies and report the rejection per RFC (#28175)

2026-09-16 11:36:45 -07:00

oauth2_metadata_test.go

…

oauth2_metadata_validation_test.go

feat: negotiate and persist authorization scope (#28178)

2026-08-31 09:29:27 -07:00

oauth2_provider_settings_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

oauth2_provider_state_internal_test.go

feat: log the OAuth2 provider state and registered apps at startup (#29267)

2026-09-14 18:31:48 -07:00

oauth2_provider_state.go

feat: log the OAuth2 provider state and registered apps at startup (#29267)

2026-09-14 18:31:48 -07:00

oauth2_security_test.go

fix: reject PKCE code_verifier below RFC 7636 length floor (#28003)

2026-08-12 13:36:52 -07:00

oauth2_test.go

fix: reject client_secret in the OAuth2 token and revocation URL (#29508)

2026-09-22 23:20:24 +00:00

oauth2.go

fix: reject client_secret in the OAuth2 token and revocation URL (#29508)

2026-09-22 23:20:24 +00:00

organizations_test.go

…

organizations.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

pagination_test.go

…

pagination.go

…

parameters_test.go

fix(coderd): keep parameter values when the render is incomplete (#29108)

2026-09-08 17:20:53 +00:00

parameters.go

feat!: add a hidden flag to disable dynamic parameter closure evaluation (#29356)

2026-09-17 14:33:37 -05:00

premiumfunnel_test.go

feat: add premium paywall conversion telemetry (#28425)

2026-08-21 10:31:01 -04:00

premiumfunnel.go

feat: add premium paywall conversion telemetry (#28425)

2026-08-21 10:31:01 -04:00

presets_test.go

…

presets.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

provisionerdaemons_test.go

…

provisionerdaemons.go

fix: emit provisioner tags query param as string in swagger (#28311)

2026-08-31 11:36:43 -04:00

provisionerjobs_internal_test.go

feat: add coderd_api_websocket_probes_total metric (#25012)

2026-06-03 10:46:07 +01:00

provisionerjobs_test.go

feat: add workspace build transition to provisioner job list (#24131)

2026-04-10 09:50:11 -05:00

provisionerjobs.go

fix: emit provisioner tags query param as string in swagger (#28311)

2026-08-31 11:36:43 -04:00

roles_test.go

…

roles.go

feat: enable Coder Agents for organization members (#28186)

2026-08-26 13:33:13 +02:00

scopes_catalog_api_test.go

…

scopes_catalog.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

swagger_request_interceptor.js

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

tailnet_internal_test.go

fix(coderd): fetch the DERP map immediately in the server tailnet (#29462)

2026-09-17 18:12:24 +02:00

tailnet_test.go

test: use typed atomics in test files (#25071)

2026-05-11 08:41:17 -06:00

tailnet.go

fix(coderd): fetch the DERP map immediately in the server tailnet (#29462)

2026-09-17 18:12:24 +02:00

templatebuilder_compose_test.go

feat: expose template builder agents and per-module agent (#28905)

2026-09-02 12:51:33 -04:00

templatebuilder_handler_test.go

feat: report template builder build failure reasons in telemetry (#28586)

2026-09-10 08:21:29 -04:00

templatebuilder_handler.go

feat: report template builder build failure reasons in telemetry (#28586)

2026-09-10 08:21:29 -04:00

templates_meta_update_internal_test.go

feat: add deployment-level option to disable Terraform module caching (#29187)

2026-09-11 18:13:16 -05:00

templates_meta_update.go

feat: add deployment-level option to disable Terraform module caching (#29187)

2026-09-11 18:13:16 -05:00

templates_test.go

feat: filter templates using classic parameters (#29171)

2026-09-17 11:11:38 +10:00

templates.go

feat: add deployment-level option to disable Terraform module caching (#29187)

2026-09-11 18:13:16 -05:00

templateversions_test.go

fix: only create workspace agents for start builds (#28276)

2026-08-19 16:16:51 -06:00

templateversions.go

feat!: add a hidden flag to disable dynamic parameter closure evaluation (#29356)

2026-09-17 14:33:37 -05:00

updatecheck_test.go

…

updatecheck.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

userauth_internal_test.go

fix!: reject OIDC login when email_verified claim is non-bool or absent (#25713)

2026-06-04 14:37:19 -04:00

userauth_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

userauth.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

users_test.go

chore: delete dead functions and skip-only or duplicated tests (#29461)

2026-09-17 18:14:08 +02:00

users.go

chore: remove stale TODO shims and dead code (#29252)

2026-09-18 10:27:26 -06:00

usersecrets_audit_test.go

feat: add enable/disable support for user secrets (#27537)

2026-07-28 09:58:33 -06:00

usersecrets_concurrency_test.go

feat: enforce user secret file policy (#28518)

2026-09-02 09:21:36 -07:00

usersecrets_filepath_policy_test.go

feat: enforce user secret file policy (#28518)

2026-09-02 09:21:36 -07:00

usersecrets_internal_test.go

feat: enforce user secret file policy (#28518)

2026-09-02 09:21:36 -07:00

usersecrets_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

usersecrets.go

feat: enforce user secret file policy (#28518)

2026-09-02 09:21:36 -07:00

usersecretsimport_test.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

userskills_test.go

feat: support personal skills in chats (#25366)

2026-05-20 19:50:50 +02:00

userskills.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

webpush_internal_test.go

fix(coderd): validate webpush subscription endpoints (#24347)

2026-04-15 11:31:43 +02:00

webpush_test.go

fix: recover web push subscriptions after PWA reinstall (#24720)

2026-04-26 14:49:10 -07:00

webpush.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspaceagentportshare_test.go

…

workspaceagentportshare.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspaceagents_active_chat_internal_test.go

refactor: drop chat_model_configs provider column (#26877)

2026-07-01 15:59:55 +03:00

workspaceagents_internal_test.go

fix: use backend-selected chat agent for desktop, git, terminal (#26959)

2026-07-14 13:50:25 +01:00

workspaceagents_test.go

feat: correlate coder CLI workspace sessions with client_session_id (#28313)

2026-09-02 19:31:01 +00:00

workspaceagents.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

workspaceagentsrpc_internal_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

workspaceagentsrpc_test.go

fix: prevent coderd crashes from unsupported Tailnet RPCs (#28429)

2026-09-03 13:29:17 -07:00

workspaceagentsrpc.go

feat: filter blocked user secret file targets (#28519)

2026-09-02 14:06:46 -07:00

workspaceapps_test.go

fix(coderd): reject workspace proxy hostname prefixes (#27544)

2026-07-28 13:20:59 -07:00

workspaceapps.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspacebuilds_internal_test.go

fix(coderd): remove stale coderd/wsrelated import in test (#29655)

2026-09-21 11:04:12 +00:00

workspacebuilds_on_success_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

workspacebuilds_test.go

fix: only create workspace agents for start builds (#28276)

2026-08-19 16:16:51 -06:00

workspacebuilds.go

feat: add include_related option to client.Workspace in codersdk (#29540)

2026-09-21 11:53:11 +02:00

workspaceproxies_test.go

…

workspaceproxies.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspaceresourceauth_test.go

fix: soft-delete stale workspace agents on new build (#25207)

2026-05-18 08:33:29 -04:00

workspaceresourceauth.go

fix: verify PKCS7 signature on Azure instance identity tokens (#25286)

2026-05-13 14:14:07 +00:00

workspaces_internal_test.go

feat: report arbitrary workspace agent session types (#28338)

2026-09-19 00:32:51 +02:00

workspaces_scoped_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

workspaces_test.go

feat: accept include_related query param on get workspace by ID (#29539)

2026-09-21 10:50:01 +02:00

workspaces.go

refactor(coderd): enforce workspace template authz in singleWorkspaceData (#29665)

2026-09-21 21:06:06 +02:00

workspaceupdates_test.go

…

workspaceupdates.go

…

wsrelateddata_internal_test.go

refactor(coderd): enforce workspace template authz in singleWorkspaceData (#29665)

2026-09-21 21:06:06 +02:00