All issues

Search results

No test can complete an HTTPS exchange through the hardened fetcher, blocking two #112 criteria

Status: Open.

#959 In ELares/IronAuth;

· ELares opened on Aug 22, 2026

·  

M11: Eventing, Webhooks, Messaging, and Extensibility

replayWebhookDeadLetters has no plausibility floor on since_unix_ms, so seconds replay the whole backlog

Status: Open.

#958 In ELares/IronAuth;

· ELares opened on Aug 22, 2026

·  

M11: Eventing, Webhooks, Messaging, and Extensibility

Enrich async flow-target deliveries at delivery time rather than carrying data in the payload

Status: Open.

#954 In ELares/IronAuth;

· ELares opened on Aug 21, 2026

·  

M11: Eventing, Webhooks, Messaging, and Extensibility

Passwordless signup and admin create do not announce to async flow targets

Status: Open.

#953 In ELares/IronAuth;

· ELares opened on Aug 21, 2026

·  

M11: Eventing, Webhooks, Messaging, and Extensibility

Sync flow-target envelope does not say what the signup became

Status: Open.

#952 In ELares/IronAuth;

· ELares opened on Aug 21, 2026

·  

M11: Eventing, Webhooks, Messaging, and Extensibility

Most event producers bypass the commit-ordered appender, so the feed is not commit-ordered in production

Status: Open.

#945 In ELares/IronAuth;

· ELares opened on Aug 20, 2026

The IronBus outbox backbone is never signalled: notify() has zero production callers

Status: Open.

#944 In ELares/IronAuth;

· ELares opened on Aug 20, 2026

Shared PRM well-known-path fixture, so the SDK and the crate cannot drift apart by hand-reading

Status: Open.

#942 In ELares/IronAuth;

· ELares opened on Aug 20, 2026

CIBA auth_req_id uses '~', outside the CIBA Core 7.2 character set

Status: Open.

#941 In ELares/IronAuth;

· ELares opened on Aug 20, 2026

CIBA has no resource ceiling, so an issued token's audience is unbounded

Status: Open.

#937 In ELares/IronAuth;

· ELares opened on Aug 20, 2026

Catch stale generated bindings in the Rust-only gate with a diff predicate

Status: Open.

#935 In ELares/IronAuth;

· ELares opened on Aug 20, 2026

Device grant drops opaque token audiences and DPoP binding, and meters nothing

Status: Open.

#934 In ELares/IronAuth;

· ELares opened on Aug 20, 2026