jbsmith7741 opened a new pull request, #8930:
URL: https://github.com/apache/devlake/pull/8930

   ### Summary
   
   Removes `auth.RequireAuth()` middleware from the `/proceed-db-migration` 
endpoint. When `AUTH_ENABLED=true`, auth tables (e.g. `auth_sessions`) may not 
exist yet if the pending migration is the one that creates them — resulting in 
a bootstrap deadlock where the migration endpoint requires auth but auth 
requires the migration to have run.
   
   This restores the pre-auth-hardening behavior for this endpoint, which is 
idempotent and only executes pending migration scripts.
   
   ### Does this close any open issues?
   
   N/A
   
   ### Other Information
   
   - The endpoint remains idempotent (only runs pending migrations) and is 
typically accessed via the config-ui proxy, not exposed publicly.
   - Config-ui's "Proceed" button already calls this endpoint without 
authentication handling.
   - This unblocks any PR that adds new migration scripts (e.g. Jira plugin 
schema changes) from failing on auth-enabled deployments.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to