[CRITICAL] App crashes with blank screen after login — all users affected (GRO-150) #139
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Bug
All data API endpoints return 403 after dev login, causing
TypeError: b.filter is not a functionand a blank admin screen.Root cause
resolveStaffMiddlewarein dev mode (AUTH_DISABLED=true) looks up staff byoidcSub, but theDevLoginSelectorsends the staff databaseidasX-Dev-User-Id. These are different values — the lookup finds no match and returns 403.Fix
PR #138 — changes the dev-mode lookup from
eq(staff.oidcSub, devUserId)toeq(staff.id, devUserId).Fixed by PR #138 (merged). Dev login staff resolution now uses
staff.idinstead ofstaff.oidcSub.