Avatar for the Cap-go user
Cap-go
capgo
BlogDocsChangelog

[codex] fix hashed API key RLS auth bypass

#1948Merged
Comparing
codex/fix-hashed-apikey-rls-bypass
(
e43063d
) with
main
(
9b7ddc1
)
CodSpeed Performance Gauge
0%
Untouched
28

Benchmarks

28 total
sparse device with defaults
benches/device-comparison.bench.ts::toComparableDevice
CodSpeed Performance Gauge
0%
15.5 µs15.5 µs
null/undefined existing
benches/device-comparison.bench.ts::toComparableExisting
CodSpeed Performance Gauge
0%
15.8 µs15.8 µs
sparse existing row
benches/device-comparison.bench.ts::toComparableExisting
CodSpeed Performance Gauge
0%
16.3 µs16.3 µs
sparse device
benches/device-comparison.bench.ts::buildNormalizedDeviceForWrite
CodSpeed Performance Gauge
0%
17.2 µs17.2 µs
full existing row
benches/device-comparison.bench.ts::toComparableExisting
CodSpeed Performance Gauge
0%
39.9 µs39.9 µs
no changes detected
benches/device-comparison.bench.ts::hasComparableDeviceChanged
CodSpeed Performance Gauge
0%
1 ms1 ms
valid password against strict policy
benches/password-policy.bench.ts::getPasswordPolicyValidationErrors
CodSpeed Performance Gauge
0%
41.4 µs41.4 µs
full device
benches/device-comparison.bench.ts::buildNormalizedDeviceForWrite
CodSpeed Performance Gauge
0%
70.9 µs70.9 µs
changes detected (version_name differs)
benches/device-comparison.bench.ts::hasComparableDeviceChanged
CodSpeed Performance Gauge
0%
1.7 ms1.7 ms
with edge values
benches/password-policy.bench.ts::getEffectivePasswordMinLength
CodSpeed Performance Gauge
0%
18.3 µs18.3 µs
with undefined
benches/password-policy.bench.ts::getEffectivePasswordMinLength
CodSpeed Performance Gauge
0%
14.2 µs14.2 µs
with valid min length
benches/password-policy.bench.ts::getEffectivePasswordMinLength
CodSpeed Performance Gauge
0%
19.3 µs19.3 µs
multibyte password (emoji + accented)
benches/password-policy.bench.ts::getPasswordUtf8ByteLength
CodSpeed Performance Gauge
0%
22.8 µs22.8 µs
invalid password (all rules fail)
benches/password-policy.bench.ts::getPasswordPolicyValidationErrors
CodSpeed Performance Gauge
0%
38.4 µs38.4 µs
full device object
benches/device-comparison.bench.ts::toComparableDevice
CodSpeed Performance Gauge
0%
42.1 µs42.1 µs
sparse existing vs full device
benches/device-comparison.bench.ts::hasComparableDeviceChanged
CodSpeed Performance Gauge
0%
1.7 ms1.7 ms
multibyte password validation
benches/password-policy.bench.ts::getPasswordPolicyValidationErrors
CodSpeed Performance Gauge
0%
29.8 µs29.9 µs
empty policy
benches/password-policy.bench.ts::getPasswordPolicyValidationErrors
CodSpeed Performance Gauge
0%
26.8 µs26.9 µs
ASCII password
benches/password-policy.bench.ts::getPasswordUtf8ByteLength
CodSpeed Performance Gauge
0%
40.5 µs40.5 µs
NaN and Infinity
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
17.9 µs17.9 µs
number exceeding max
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
15.8 µs15.8 µs
negative number
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
15.1 µs15.1 µs
zero
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
15.1 µs15.1 µs
float truncation
benches/cloudflare-utils.bench.ts::normalizeAnalyticsLimit
CodSpeed Performance Gauge
0%
15 µs15 µs
long ASCII password (72 bytes)
benches/password-policy.bench.ts::getPasswordUtf8ByteLength
CodSpeed Performance Gauge
0%
29.4 µs29.5 µs

Commits

Click on a commit to change the comparison range
Base
main
9b7ddc1
-0.11%
fix(api): enforce hashed api key policy on rls auth path
abfb930
24 days ago
by riderx
+0.04%
test(api): use jwt when disabling hashed key enforcement
2e0a02a
24 days ago
by riderx
+0.02%
fix(api): ignore pending invites in hashed key enforcement
93577dc
23 days ago
by riderx
-0.07%
fix(api): enforce hashed key policy for rbac org access
c1e607d
21 days ago
by riderx
+0.09%
fix(api): allow guarded app ownership transfers
1151eee
21 days ago
by riderx
-0.05%
fix(api): transfer deploy history ownership
3618b6a
21 days ago
by riderx
+0.1%
fix(api): address hashed key review findings
941b047
21 days ago
by riderx
-0.15%
fix(api): tighten hashed key enforcement scope
e488e01
21 days ago
by riderx
+0.11%
test(api): isolate organization hashed enforcement fixture
a433d85
21 days ago
by riderx
-0.12%
fix(api): honor scoped org_users enforcement
794dda5
21 days ago
by riderx
+0.08%
test(api): extend admin stats hook timeout
e43063d
21 days ago
by riderx
© 2026 CodSpeed Technology
Home Terms Privacy Docs