Repository navigation
fix(invite-only): signed-in members get the site, not "isn't open yet" - #273
Merged
Merged
Conversation
Anthony 2026-10-12: "its all live its just invite only". The offline gate let only admins through, so every invited member landed on /invite-only with "The site isn't open yet". Any verified account now passes the gate (an account can only be created with an invite); signed-out visitors still go to /invite-only, and the API answers them 401 instead of 503 "not open yet". Legal mode is unchanged: admins are still the only ones exempt. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
ThreatCrush Security Scan95 finding(s) HIGH/CRITICAL: 11 | MEDIUM: 29 | LOW: 55
…and 45 more. Full results in the Security tab. Snippets are redacted; ThreatCrush never prints matched credential material. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Anthony: "its all live its just invite only". Invited members were shown "You're in. The site isn't open yet…" because the offline gate admitted admins only.
admin-gate.ts:requestAccess/castAccessreturn{ member, admin }from one cached Supabase check;isAdminRequest/isAdminCastRequestkept as wrappers.proxy.ts: the invite-only gate admits any verified member; legal mode still exempts admins only.site-offline.ts: signed-out API callers get 401 "invite only. Sign in, or sign up with an invite." (was 503 "not open yet")./invite-onlysigned-in copy: "BitTorrented is live and invite only… Go to BitTorrented, or invite people below."Tests: gate tests updated (member in, legal mode still 410 for members on /dht, forged token → /invite-only); full vitest 3021 passed, tsc clean.
🤖 Generated with Claude Code