Skip to content

Fix External Hub Antiforgery Cookies and Strengthen CSRF Regression Tests #695

Fix External Hub Antiforgery Cookies and Strengthen CSRF Regression Tests

Fix External Hub Antiforgery Cookies and Strengthen CSRF Regression Tests #695

Triggered via pull request November 7, 2026 11:58
Status Success
Total duration 7m 50s
Artifacts 2

ultimateauth-ci.yml

on: pull_request
Framework Validation
19s
Framework Validation
Tests & Coverage (.NET 10)
7m 26s
Tests & Coverage (.NET 10)
Identity Lab / Tests & Coverage
2m 7s
Identity Lab / Tests & Coverage
Matrix: build-compatibility
Fit to window
Zoom out
Zoom in

Annotations

53 warnings and 6 notices
Framework Validation
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (.NET 9)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-dotnet@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (.NET 9): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 9): src/CodeBeam.UltimateAuth.Server/Auth/Context/AuthFlowContextFactory.cs#L127
This async method lacks 'await' operators and will run synchronously. Consider using the 'await' operator to await non-blocking API calls, or 'await Task.Run(...)' to do CPU-bound work on a background thread.
Build (.NET 9): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1106
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 9): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1094
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 9): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1089
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 9): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L78
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 9): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L71
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 9): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 9): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 9): src/CodeBeam.UltimateAuth.Server/Auth/Context/AuthFlowContextFactory.cs#L127
This async method lacks 'await' operators and will run synchronously. Consider using the 'await' operator to await non-blocking API calls, or 'await Task.Run(...)' to do CPU-bound work on a background thread.
Build (.NET 8)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-dotnet@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (.NET 8): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 8): src/CodeBeam.UltimateAuth.Server/Auth/Context/AuthFlowContextFactory.cs#L127
This async method lacks 'await' operators and will run synchronously. Consider using the 'await' operator to await non-blocking API calls, or 'await Task.Run(...)' to do CPU-bound work on a background thread.
Build (.NET 8): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1106
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 8): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1094
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 8): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1089
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 8): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L78
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 8): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L71
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 8): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 8): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 8): src/CodeBeam.UltimateAuth.Server/Auth/Context/AuthFlowContextFactory.cs#L127
This async method lacks 'await' operators and will run synchronously. Consider using the 'await' operator to await non-blocking API calls, or 'await Task.Run(...)' to do CPU-bound work on a background thread.
Build (.NET 10)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-dotnet@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L71
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1106
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1094
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1089
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L78
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L71
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Build (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Identity Lab / Tests & Coverage
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-dotnet@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Identity Lab / Tests & Coverage: src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1106
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Identity Lab / Tests & Coverage: src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1094
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Identity Lab / Tests & Coverage: src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1089
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Identity Lab / Tests & Coverage: src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L78
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Identity Lab / Tests & Coverage: src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L71
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Identity Lab / Tests & Coverage: src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Identity Lab / Tests & Coverage: src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Tests & Coverage (.NET 10)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea, actions/setup-dotnet@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Tests & Coverage (.NET 10): tests/CodeBeam.UltimateAuth.Tests.Unit/EntityFrameworkCore/EfCoreSessionStoreTests.cs#L934
Calls to methods which accept CancellationToken should use TestContext.Current.CancellationToken to allow test cancellation to be more responsive. (https://xunit.net/xunit.analyzers/rules/xUnit1051)
Tests & Coverage (.NET 10): tests/CodeBeam.UltimateAuth.Tests.Unit/Users/UserIdentifierApplicationServiceTests.cs#L209
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Tests & Coverage (.NET 10): tests/CodeBeam.UltimateAuth.Tests.Unit/Users/UserIdentifierApplicationServiceTests.cs#L129
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Tests & Coverage (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1106
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Tests & Coverage (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1094
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Tests & Coverage (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserApplicationService.cs#L1089
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Tests & Coverage (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L78
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Tests & Coverage (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L71
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Tests & Coverage (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.WithinUser' is obsolete: 'WithinUser uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Tests & Coverage (.NET 10): src/users/CodeBeam.UltimateAuth.Users.Reference/Services/UserIdentifierAvailabilityService.cs#L53
'UniquenessScope.None' is obsolete: 'None uniqueness is not currently supported. Use Tenant until the v0.5.0 uniqueness expansion.'
Framework Validation
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Build (.NET 9)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Build (.NET 8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Build (.NET 10)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Identity Lab / Tests & Coverage
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Tests & Coverage (.NET 10)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Artifacts

Produced during runtime
Name Size Digest
framework-test-results
1.41 MB
sha256:d76f3b98e69e9abb3f60736becc2c31c1458abb1b4f98d200f58bcd86e880c17
identity-lab-test-results
121 KB
sha256:cac285bd68d0d5e37d1b15359eec14ba8186722f34ae711ba30c952c83cbe626