Skip to content

fix: third-party login is broken#39534

Merged
dionisio-bot[bot] merged 1 commit intorelease-7.10.9from
backport-7.10.9-37707
Mar 12, 2026
Merged

fix: third-party login is broken#39534
dionisio-bot[bot] merged 1 commit intorelease-7.10.9from
backport-7.10.9-37707

Conversation

@dionisio-bot
Copy link
Copy Markdown
Contributor

@dionisio-bot dionisio-bot bot commented Mar 10, 2026

Backport of #37707

@dionisio-bot dionisio-bot bot requested a review from a team as a code owner March 10, 2026 23:55
@dionisio-bot dionisio-bot bot requested a review from d-gubert March 10, 2026 23:55
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Mar 10, 2026

🦋 Changeset detected

Latest commit: 019378e

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 39 packages
Name Type
@rocket.chat/meteor Patch
@rocket.chat/core-typings Patch
@rocket.chat/rest-typings Patch
@rocket.chat/uikit-playground Patch
@rocket.chat/api-client Patch
@rocket.chat/apps Patch
@rocket.chat/core-services Patch
@rocket.chat/cron Patch
@rocket.chat/ddp-client Patch
@rocket.chat/freeswitch Patch
@rocket.chat/fuselage-ui-kit Patch
@rocket.chat/gazzodown Patch
@rocket.chat/http-router Patch
@rocket.chat/livechat Patch
@rocket.chat/model-typings Patch
@rocket.chat/ui-avatar Patch
@rocket.chat/ui-client Patch
@rocket.chat/ui-contexts Patch
@rocket.chat/web-ui-registration Patch
@rocket.chat/account-service Patch
@rocket.chat/authorization-service Patch
@rocket.chat/ddp-streamer Patch
@rocket.chat/omnichannel-transcript Patch
@rocket.chat/presence-service Patch
@rocket.chat/queue-worker Patch
@rocket.chat/stream-hub-service Patch
@rocket.chat/license Patch
@rocket.chat/omnichannel-services Patch
@rocket.chat/pdf-worker Patch
@rocket.chat/presence Patch
rocketchat-services Patch
@rocket.chat/models Patch
@rocket.chat/network-broker Patch
@rocket.chat/mock-providers Patch
@rocket.chat/ui-video-conf Patch
@rocket.chat/ui-voip Patch
@rocket.chat/instance-status Patch
@rocket.chat/omni-core Patch
@rocket.chat/omni-core-ee Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@dionisio-bot dionisio-bot bot added the backport Used to inform backported PR label Mar 10, 2026
Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 issues found across 10 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="apps/meteor/app/oauth2-server-config/server/oauth/oauth2-server.ts">

<violation number="1" location="apps/meteor/app/oauth2-server-config/server/oauth/oauth2-server.ts:80">
P2: Avoid the unsafe cast on `queryParams`; it can hide non‑string values (like string arrays) and cause `getAccessToken` to receive a non‑string token. Narrow `access_token` to a string before passing it through.

(Based on your team's feedback about avoiding unsafe type casts.) [FEEDBACK_USED]</violation>
</file>

<file name="apps/meteor/lib/utils/isPlainObject.ts">

<violation number="1" location="apps/meteor/lib/utils/isPlainObject.ts:1">
P2: The type predicate is too narrow for the current runtime check. The function returns true for non-plain objects (e.g., `Date`, class instances), but the signature says it narrows to `Record<string | symbol, unknown>`, which isn’t guaranteed. Use a broader predicate or tighten the runtime check to match a plain-object shape.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

@codecov
Copy link
Copy Markdown

codecov bot commented Mar 11, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (release-7.10.9@b74fa11). Learn more about missing BASE report.

Additional details and impacted files

Impacted file tree graph

@@                Coverage Diff                @@
##             release-7.10.9   #39534   +/-   ##
=================================================
  Coverage                  ?   66.39%           
=================================================
  Files                     ?     3306           
  Lines                     ?   111042           
  Branches                  ?    21007           
=================================================
  Hits                      ?    73727           
  Misses                    ?    34581           
  Partials                  ?     2734           
Flag Coverage Δ
e2e 57.48% <ø> (?)
unit 71.73% <100.00%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@ricardogarim ricardogarim added the stat: QA assured Means it has been tested and approved by a company insider label Mar 12, 2026
@dionisio-bot
Copy link
Copy Markdown
Contributor Author

dionisio-bot bot commented Mar 12, 2026

Looks like this PR is not ready to merge, because of the following issues:

  • This PR is missing the required milestone or project

Please fix the issues and try again

If you have any trouble, please check the PR guidelines

@dionisio-bot dionisio-bot bot merged commit c9ecf0d into release-7.10.9 Mar 12, 2026
315 of 339 checks passed
@dionisio-bot dionisio-bot bot deleted the backport-7.10.9-37707 branch March 12, 2026 02:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport Used to inform backported PR community stat: QA assured Means it has been tested and approved by a company insider

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants