tylerg/auth-yes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(launchpad): populate all registered apps for Universal Sandbox guests on Launchpad and allow ForwardAuth access

Browse Source
This commit is contained in:
Tyler Gillispie 2026-08-27 23:33:30 -07:00
parent c221e32855
commit 964dd74f72
2 changed files with 17 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/features/admin/queries.ts
View File

@ -175,11 +175,22 @@ export const getDashboardApps = async (
ORDER BY name ASC
`;
} else {
const appNames = (customScopes || [])
const scopes = customScopes || [];
const appNames = scopes
.filter((s) => s.startsWith("app:"))
.map((s) => s.split(":")[1]);
if (appNames.length > 0) {
const isUniversalGuest = scopes.includes("*") ||
(scopes.includes("guest") && appNames.length === 0);
if (isUniversalGuest) {
return await sqlWrapper.sql`
SELECT id, name, description, domain, 'Guest (Viewer)' as role
FROM apps
WHERE domain IS NOT NULL
ORDER BY name ASC
`;
} else if (appNames.length > 0) {
return await sqlWrapper.sql`
SELECT a.id, a.name, a.description, a.domain, g.role
FROM apps a

5
src/features/forward_auth/routes.ts
View File

@ -130,8 +130,11 @@ forwardAuthRoutes.get("/api/forward-auth", async (c) => {
(auth.customScopes && auth.customScopes.length > 0)
) {
const customScopes = auth.customScopes || [];
const isUniversalGuest = customScopes.includes("guest") &&
!customScopes.some((s) => s.startsWith("app:"));
const hasAppScope = customScopes.includes(`app:${appRecord.name}`) ||
customScopes.includes("*");
customScopes.includes("*") ||
isUniversalGuest;
if (!hasAppScope) {
return c.text(