 Gani Georgiev
|
4624e84b50
|
added some extra known write query keywords to the slq api and hide the Affected rows in case empty to avoid ambiguities
|
2026-06-06 19:25:41 +03:00 |
|
|
Gani Georgiev
|
5631d9b1c2
|
fixed typos
|
2026-06-03 16:14:28 +03:00 |
|
|
Gani Georgiev
|
1c3a912532
|
[#7721] return the hidden record data fields for superusers realtime subscribers
|
2026-05-30 14:58:34 +03:00 |
|
|
Gani Georgiev
|
167e23e9ba
|
added extra confirm verification guards
|
2026-05-27 09:56:16 +03:00 |
|
|
Gani Georgiev
|
19db35c48c
|
updated raw sql length limit to 5000 for consistency with the dry-run-view-query
|
2026-05-25 12:45:37 +03:00 |
|
|
Gani Georgiev
|
b022e138d4
|
minimal sql console API and UI
|
2026-05-24 09:30:30 +03:00 |
|
|
Gani Georgiev
|
b9b0e5ae80
|
added extra IP checks for the connected realtime client
|
2026-05-18 19:13:25 +03:00 |
|
|
Gani Georgiev
|
f7fbc6c2c3
|
added RealtimeConnectRequestEvent.MaxTimeout field
|
2026-05-18 11:40:46 +03:00 |
|
|
Gani Georgiev
|
b061673d9a
|
updated test to trigger the entire save hook chain
|
2026-05-13 23:11:10 +03:00 |
|
|
Gani Georgiev
|
3b98059a8a
|
force unset realtime connections auth state
|
2026-05-13 22:34:50 +03:00 |
|
|
Gani Georgiev
|
a8c236a54d
|
fixed ui extensions test
|
2026-05-10 14:41:53 +03:00 |
|
|
Gani Georgiev
|
81a5672498
|
updated ui extensions api to allow top-level await calls
|
2026-05-10 14:36:09 +03:00 |
|
|
Gani Georgiev
|
5a144e1342
|
[#6410] added rate limit option to exclude IPs/CIDR subnets
|
2026-05-05 17:29:25 +03:00 |
|
|
Gani Georgiev
|
21a5524fed
|
added superuser ips whitelist
|
2026-05-05 13:04:06 +03:00 |
|
|
Gani Georgiev
|
7542cd14e2
|
[#7677] fixed default ui csp to allow iframe/object previews
|
2026-05-04 13:39:21 +03:00 |
|
|
Gani Georgiev
|
4850da6f56
|
adjusted flaky test
|
2026-05-01 19:32:00 +03:00 |
|
|
Gani Georgiev
|
53ac0d29da
|
reordered change email validations to make enumerations slightly harder
|
2026-05-01 19:31:50 +03:00 |
|
|
Gani Georgiev
|
326f150db2
|
added more tests for internal record hooks
|
2026-04-26 20:47:47 +03:00 |
|
|
Gani Georgiev
|
555a4f1a1e
|
lowered the default mfa duration and reorganized internal record pre/post handling
|
2026-04-26 16:46:16 +03:00 |
|
|
Gani Georgiev
|
ca7cf1162f
|
added App.DeleteAllExternalAuthsByRecord
|
2026-04-26 11:40:09 +03:00 |
|
|
Gani Georgiev
|
5d55fc18ee
|
added dummy bcrypt check
|
2026-04-25 16:16:23 +03:00 |
|
|
Gani Georgiev
|
4c44044c0c
|
merge newui branch
|
2026-04-18 16:50:39 +03:00 |
|
|
Gani Georgiev
|
cb185ad6bf
|
ratelimit test flakiness adjustments
|
2026-04-09 10:31:03 +03:00 |
|
|
Gani Georgiev
|
89f3668da2
|
updated settings update test
|
2026-04-05 14:15:12 +03:00 |
|
|
Gani Georgiev
|
e9118fa6b6
|
removed unnecessery error return
|
2026-04-02 21:00:16 +03:00 |
|
|
Gani Georgiev
|
e49b64b114
|
attempt to reduce ratelimit test flakiness
|
2026-04-02 20:22:16 +03:00 |
|
|
Gani Georgiev
|
1204362e9c
|
use the raw address in the error message
|
2026-04-02 20:12:01 +03:00 |
|
|
Gani Georgiev
|
cb44d9e716
|
added extra OAuth2 avatar url download checks
|
2026-04-02 19:55:05 +03:00 |
|
|
Gani Georgiev
|
5cb66bd52f
|
updated .static jsvm docs
|
2026-04-02 08:06:51 +03:00 |
|
|
Gani Georgiev
|
9f3cdf4ad5
|
use the explicitly mapped username column name for the unique legacy checks
|
2026-03-30 08:51:11 +03:00 |
|
|
Gani Georgiev
|
e5390c3d86
|
added missing error return and fixed comment typo
|
2026-03-19 08:48:30 +02:00 |
|
|
Gani Georgiev
|
70d8d1ee9d
|
replace the custom ratelimiter strategy with a fixed window
|
2026-03-11 11:25:15 +02:00 |
|
|
Gani Georgiev
|
ba8b51af58
|
[#7575] use memory+file buffer when rereading the request body (fix #7572)
|
2026-03-09 17:19:09 +02:00 |
|
|
Gani Georgiev
|
bb18799a0b
|
applied lint typo fixes
|
2026-03-04 22:31:27 +02:00 |
|
|
Gani Georgiev
|
bc72525013
|
[#7525] made Bearer prefix case-insensitive
|
2026-02-14 11:19:13 +02:00 |
|
|
Gani Georgiev
|
6500b8c518
|
renamed outdated rate limit struct name and added reminder to reavulate the algorithm
|
2025-11-18 22:23:59 +02:00 |
|
|
Gani Georgiev
|
0f5411d81c
|
[#7314] added ALERT_INFO placeholder to the auth alert mail template
|
2025-11-10 17:56:36 +02:00 |
|
|
Gani Georgiev
|
593721dcea
|
flatten relation joins
|
2025-11-03 14:21:01 +02:00 |
|
|
Gani Georgiev
|
67ee431585
|
add extra subquery check for client-side relation filtering
|
2025-10-31 22:22:28 +02:00 |
|
|
Gani Georgiev
|
7b6b71e18d
|
disallow client-side filtering and sorting of relations where the collection of the last targeted field has superusers only List/Search API rule
|
2025-10-23 17:22:47 +03:00 |
|
|
Gani Georgiev
|
afb942bc41
|
updated thumb error message
|
2025-10-23 11:55:19 +03:00 |
|
|
Gani Georgiev
|
83a26d436e
|
[#7268] added FileDownloadRequestEvent.ThumbError field
|
2025-10-23 11:48:59 +03:00 |
|
|
Gani Georgiev
|
acd12ce9dd
|
[#7256] fixed legacy identitity field priority check when a username is a valid email address
|
2025-10-15 17:25:51 +03:00 |
|
|
Gani Georgiev
|
40f2ba731c
|
added osutils.IsProbablyGoRun
|
2025-09-06 19:52:51 +03:00 |
|
|
Gani Georgiev
|
41cc4fd36b
|
increased slightly the wait time to minimize tests flakiness
|
2025-08-31 20:31:45 +03:00 |
|
|
Gani Georgiev
|
cc902f2df8
|
updated scaffold apis to use random id during the collections initialization and made index columns check on the UI case insensitive
|
2025-08-26 22:02:00 +03:00 |
|
|
Gani Georgiev
|
b8f18bd97d
|
added more tests and extra debug log
|
2025-08-20 22:41:33 +03:00 |
|
|
Gani Georgiev
|
50dbb7f94f
|
[#7090] try to forward the Apple OAuth2 redirect user's name to the auth handler
|
2025-08-16 21:30:43 +03:00 |
|
|
Gani Georgiev
|
6443f2f159
|
[#3233] added optional ServeEvent.Listener field
|
2025-06-29 15:41:55 +03:00 |
|
|
Gani Georgiev
|
a9c42d0282
|
[#718] enabled calling auth-refresh with impersonate token
|
2025-06-29 11:24:50 +03:00 |
|