René's URL Explorer Experiment


Title: fix(security): harden deployment auth tokens by 3em0 · Pull Request #4760 · simstudioai/sim · GitHub

Open Graph Title: fix(security): harden deployment auth tokens by 3em0 · Pull Request #4760 · simstudioai/sim

X Title: fix(security): harden deployment auth tokens by 3em0 · Pull Request #4760 · simstudioai/sim

Description: Build, deploy, and orchestrate AI agents. Sim is the central intelligence layer for your AI workforce. - fix(security): harden deployment auth tokens by 3em0 · Pull Request #4760 · simstudioai/sim

Open Graph Description: Summary version deployment auth cookies as signed v2 tokens bind token signatures to the current encrypted deployment password without exposing the truncated password hash in the cookie payload ke...

X Description: Summary version deployment auth cookies as signed v2 tokens bind token signatures to the current encrypted deployment password without exposing the truncated password hash in the cookie payload ke...

Opengraph URL: https://github.com/simstudioai/sim/pull/4760

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:8bf211e4-8d3d-d517-e6eb-66118aae00bd
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idEB72:157A5D:A5CDDA:E152E0:6A62EEF0
html-safe-nonce190f058d47098f7cbdebf629a43adf596dba6026a5bce3f04f0262ceaf519ac4
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFQjcyOjE1N0E1RDpBNUNEREE6RTE1MkUwOjZBNjJFRUYwIiwidmlzaXRvcl9pZCI6IjEzNDk0MjgwOTcxMTM1ODMzNDQiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmac139ecfab03a528ea21f377bfc4691355a2736d93eec3b1208d0b2d41a32915e3
hovercard-subject-tagpull_request:3755233027
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/simstudioai/sim/4760/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/7f96c606afcfeabc9b030697ea6528c97fe55b3d5759d728c3448f589fdbf144/simstudioai/sim/pull/4760
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/7f96c606afcfeabc9b030697ea6528c97fe55b3d5759d728c3448f589fdbf144/simstudioai/sim/pull/4760
og:image:altSummary version deployment auth cookies as signed v2 tokens bind token signatures to the current encrypted deployment password without exposing the truncated password hash in the cookie payload ke...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:username3em0
hostnamegithub.com
expected-hostnamegithub.com
Noneb415018e190e73858133ddcaa36acce7b3f3572fe54dda84bd3b21a6ec714c30
turbo-cache-controlno-cache
go-importgithub.com/simstudioai/sim git https://github.com/simstudioai/sim.git
octolytics-dimension-user_id199344406
octolytics-dimension-user_loginsimstudioai
octolytics-dimension-repository_id912559512
octolytics-dimension-repository_nwosimstudioai/sim
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id912559512
octolytics-dimension-repository_network_root_nwosimstudioai/sim
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release22f98521e99f504294ab0812b66104d50eb75a70
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/simstudioai/sim/pull/4760#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fsimstudioai%2Fsim%2Fpull%2F4760
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
Code QualityEnforce quality at mergehttps://github.com/features/code-quality
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fsimstudioai%2Fsim%2Fpull%2F4760
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=simstudioai%2Fsim
Reloadhttps://github.com/simstudioai/sim/pull/4760
Reloadhttps://github.com/simstudioai/sim/pull/4760
Reloadhttps://github.com/simstudioai/sim/pull/4760
Please reload this pagehttps://github.com/simstudioai/sim/pull/4760
simstudioai https://github.com/simstudioai
simhttps://github.com/simstudioai/sim
Notifications https://github.com/login?return_to=%2Fsimstudioai%2Fsim
Fork 3.7k https://github.com/login?return_to=%2Fsimstudioai%2Fsim
Star 29.2k https://github.com/login?return_to=%2Fsimstudioai%2Fsim
Code https://github.com/simstudioai/sim
Issues 110 https://github.com/simstudioai/sim/issues
Pull requests 120 https://github.com/simstudioai/sim/pulls
Actions https://github.com/simstudioai/sim/actions
Projects https://github.com/simstudioai/sim/projects
Security and quality 0 https://github.com/simstudioai/sim/security
Insights https://github.com/simstudioai/sim/pulse
Code https://github.com/simstudioai/sim
Issues https://github.com/simstudioai/sim/issues
Pull requests https://github.com/simstudioai/sim/pulls
Actions https://github.com/simstudioai/sim/actions
Projects https://github.com/simstudioai/sim/projects
Security and quality https://github.com/simstudioai/sim/security
Insights https://github.com/simstudioai/sim/pulse
3em0https://github.com/3em0
simstudioai:mainhttps://github.com/simstudioai/sim/tree/main
3em0:fix-signed-deployment-auth-tokenshttps://github.com/3em0/sim/tree/fix-signed-deployment-auth-tokens
Conversationhttps://github.com/simstudioai/sim/pull/4760
Commits1 (1)https://github.com/simstudioai/sim/pull/4760/commits
Checkshttps://github.com/simstudioai/sim/pull/4760/checks
Files changedhttps://github.com/simstudioai/sim/pull/4760/files
fix(security): harden deployment auth tokenshttps://github.com/simstudioai/sim/pull/4760#top
3em0https://github.com/3em0
simstudioai:mainhttps://github.com/simstudioai/sim/tree/main
3em0:fix-signed-deployment-auth-tokenshttps://github.com/3em0/sim/tree/fix-signed-deployment-auth-tokens
https://github.com/3em0
3em0https://github.com/3em0
May 27, 2026https://github.com/simstudioai/sim/pull/4760#issue-4532519674
[BUG] Password-protected deployment auth tokens can be forged #4759https://github.com/simstudioai/sim/issues/4759
#4759https://github.com/simstudioai/sim/issues/4759
Please reload this pagehttps://github.com/simstudioai/sim/pull/4760
https://github.com/3em0
fix(security): harden deployment auth tokenshttps://github.com/simstudioai/sim/pull/4760/commits/f9e565b1781828a9638539ca1dca44adad91f0fe
f9e565bhttps://github.com/simstudioai/sim/pull/4760/commits/f9e565b1781828a9638539ca1dca44adad91f0fe
https://github.com/apps/vercel
vercelhttps://github.com/apps/vercel
May 27, 2026https://github.com/simstudioai/sim/pull/4760#issuecomment-4554740164
Vercel for GitHubhttps://vercel.link/github-learn-more
docshttps://vercel.com/sim-studio/docs
https://camo.githubusercontent.com/6af980227b4c827b4b58e336e17b2523b7763da7d328256138bdddcbbe31ecbb/68747470733a2f2f76657263656c2e636f6d2f7374617469632f7374617475732f63616e63656c65642e737667
Skippedhttps://vercel.com/sim-studio/docs/8hcauaYqKoRQkYLiZNubsXQynoo1
https://vercel.com/vercel-agent/request-review?owner=simstudioai&repo=sim&pr=4760
Please reload this pagehttps://github.com/simstudioai/sim/pull/4760
https://github.com/apps/vercel
vercelhttps://github.com/apps/vercel
temporarily deployedhttps://docs-kokzdaw7r-sim-studio.vercel.app
May 27, 2026 13:03https://github.com/simstudioai/sim/pull/4760#event-26015377623
https://github.com/apps/cursor
cursorhttps://github.com/apps/cursor
May 27, 2026https://github.com/simstudioai/sim/pull/4760#issuecomment-4554740946
Please reload this pagehttps://github.com/simstudioai/sim/pull/4760
Cursor Bugbothttps://cursor.com/bugbot
f9e565bhttps://github.com/simstudioai/sim/commit/f9e565b1781828a9638539ca1dca44adad91f0fe
herehttps://www.cursor.com/dashboard/bugbot
Please reload this pagehttps://github.com/simstudioai/sim/pull/4760
https://github.com/apps/greptile-apps
greptile-appshttps://github.com/apps/greptile-apps
May 27, 2026https://github.com/simstudioai/sim/pull/4760#issuecomment-4554794464
#4759https://github.com/simstudioai/sim/issues/4759
"fix(security): harden deployment auth to..."https://github.com/simstudioai/sim/commit/f9e565b1781828a9638539ca1dca44adad91f0fe
Re-trigger Greptilehttps://app.greptile.com/api/retrigger?id=34151327
Please reload this pagehttps://github.com/simstudioai/sim/pull/4760
https://github.com/apps/greptile-apps
greptile-appshttps://github.com/apps/greptile-apps
May 27, 2026 https://github.com/simstudioai/sim/pull/4760#pullrequestreview-4372572219
View reviewed changes https://github.com/simstudioai/sim/pull/4760/files/f9e565b1781828a9638539ca1dca44adad91f0fe
apps/sim/lib/core/security/deployment.tshttps://github.com/simstudioai/sim/pull/4760/files/f9e565b1781828a9638539ca1dca44adad91f0fe#diff-1634e62e54b822c14517ea3de8e24b01616e7048cb0509d47e99a69d09e98dcf
greptile-appshttps://github.com/apps/greptile-apps
May 27, 2026https://github.com/simstudioai/sim/pull/4760#discussion_r3310953905
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
https://github.com/simstudioai/sim/pull/4760
Please reload this pagehttps://github.com/simstudioai/sim/pull/4760
apps/sim/lib/core/security/deployment.test.tshttps://github.com/simstudioai/sim/pull/4760/files/f9e565b1781828a9638539ca1dca44adad91f0fe#diff-c9873dce9f82b7f279c241a90ea3044204ccce49ff4ad28707fda3108cea1488
greptile-appshttps://github.com/apps/greptile-apps
May 27, 2026https://github.com/simstudioai/sim/pull/4760#discussion_r3310954047
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
https://github.com/simstudioai/sim/pull/4760
Please reload this pagehttps://github.com/simstudioai/sim/pull/4760
apps/sim/lib/core/security/deployment.test.tshttps://github.com/simstudioai/sim/pull/4760/files/f9e565b1781828a9638539ca1dca44adad91f0fe#diff-c9873dce9f82b7f279c241a90ea3044204ccce49ff4ad28707fda3108cea1488
greptile-appshttps://github.com/apps/greptile-apps
May 27, 2026https://github.com/simstudioai/sim/pull/4760#discussion_r3310954203
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
https://github.com/simstudioai/sim/pull/4760
Please reload this pagehttps://github.com/simstudioai/sim/pull/4760
https://github.co/hiddenchars
https://github.com/simstudioai/sim/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fsimstudioai%2Fsim%2Fpull%2F4760
https://github.com/apps/greptile-apps
greptile-apps[bot] https://github.com/apps/greptile-apps
https://github.com/simstudioai/sim/pull/4760/files/f9e565b1781828a9638539ca1dca44adad91f0fe
[BUG] Password-protected deployment auth tokens can be forged https://github.com/simstudioai/sim/issues/4759
Please reload this pagehttps://github.com/simstudioai/sim/pull/4760
https://github.com/3em0
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.