Commit Graph

185 Commits

Author SHA1 Message Date
Miguel Ribeiro
7e7219adb5 fix: vulnerability would allow to bypass 2fa
fix: password reset tokens now expire after 60 minutes
2026-03-19 17:49:40 +00:00
Miguel Ribeiro
f5c9a3498e fix: remove extra line on languages.php causing headers already sent (#1019) 2026-03-19 01:12:42 +00:00
Miguel Ribeiro
e87387f0eb feat: add romanian translations (#1017)
fix: ai recommendation numbering when deleting a recommendation
feat: mask ai api key on the settings page
fix: unicode character on the css file
fix: retain first and last name when switching language during registration
fix: calendar ocurrences to respect subscriptions start date
fix: ssrf vulnerability on several endpoints
fix: logo search
fix: xss vulnerability on payment method rename endpoint
fix: set login cookie to httponly
2026-03-19 00:41:55 +00:00
Miguel Ribeiro
e8a513591d fix: ssrf vulnerability on all test notifications endpoint
fix: xss vulnerability on password reset page
fix: vulnerability allowed to delete avatars from other users
chore: bump version
2026-03-05 23:13:51 +01:00
Miguel Ribeiro
76a53df9cb fix: vulnerabily on add subscription endpoint (#991) 2026-02-10 22:03:40 +01:00
Miguel Ribeiro
f5746e76a5 feat: add catalan translation (#970)
feat: add robots.txt to disallow indexing.
feat: add serverchan notifications.
fix: use stable UID for iCal events to prevent duplicates.
fix: use RFC 5545 compliant date format in iCal exports.
feat: notifications for subscription can be triggered up to 180 days before payment date.
2025-12-20 15:50:53 +00:00
Miguel Ribeiro
3247ce2c87 feat: enforce CSRF protection and POST-only policy across endpoints (#940) 2025-10-18 23:58:50 +02:00
Miguel Ribeiro
d6329a7af5 fix: get_subscriptions api endpoint was not returning subscriptions (#937) 2025-10-12 17:36:26 +02:00
Miguel Ribeiro
5629a319bc feat: add mattermost notifications (#923) (#934)
feat: add openrouter ai endpoint (#922)
fix: add autocomplete attribute to inputes (#926)
feat: enhance get_subscriptions API with admin access (#928)
chore: update container to php8.3 (#933)
2025-10-12 15:52:08 +02:00
Miguel Ribeiro
852cb485a6 feat: add health endpoint and healthcheck to container (#919)
chore: update screenshots on readme
chore: document disabling healthcheck on readme
2025-09-15 19:30:37 +02:00
Miguel Ribeiro
27ac805141 feat: make container shutdown instant & graceful
feat: make container shutdown instant & graceful  (#916)
feat: add pushplus notification service  (#911)
feat: option to delete ai recommendations
fix: parsing ai recommendations from gemini (#909)
2025-09-14 16:46:42 +02:00
Miguel Ribeiro
3ecc160ccb fix: redirect from dashboard to subscriptions for new users
fix: wrong check for disabling password login
fix: missing apikey validation error on get_monthly_cost api endpoint
chore: update readme
2025-08-13 13:55:31 +02:00
Miguel Ribeiro
ba6dddf526 feat: add at a glance dashboard
fix: accept both api_key and apiKey as parameter on the api
feat: allow to disable password login when oidc is enabled
feat: add get_oidc_settings endpoint to the api
feat: refactor css colors
feat: ai recommendations with chatgpt, gemini or ollama
feat: display ai recommendations on the dashboard
2025-08-12 00:48:13 +02:00
Miguel Ribeiro
c0d53e4423 feat: add oauth/oidc support (#873) 2025-07-21 22:53:35 +02:00
Miguel Ribeiro
596cbc4246 fix: unicode issue on telegram notifications (#871)
fix: code of new taiwan dollar
fix: decoding of header from database on the webhook notifications
2025-07-19 22:49:07 +02:00
Miguel Ribeiro
d3fd9387d3 feat: set todays date on start subscription field for new subscriptions by default (#848) 2025-06-09 17:56:45 +02:00
Miguel Ribeiro
e2df8f7e24 fix: visual issue with date fields on ios (#846) 2025-06-09 17:44:59 +02:00
Miguel Ribeiro
a25eb0b39e V3.2.1 (#845) 2025-06-09 13:51:33 +02:00
Miguel Ribeiro
48db4e300d feat: add indonesian language (#842)
feat: add first and last names to the user profile
feat: enable IPv6 environments by configuring a dual-stack listen in nginx 
feat: add new currency
feat: add button to auto fill the next payment date
fix: vulnerability on test webhook endpoint
2025-06-08 18:52:21 +02:00
Miguel Ribeiro
bd20b56976 fix: issue listing prices when uah was added to the list of currencies (#823) 2025-05-15 17:15:52 +02:00
Miguel Ribeiro
0cfefc7f07 feat: add danish translation
fix: vulnerability adding logos from url
fix: gotify settings test
fix: disable totp with backup code
2025-05-08 17:30:43 +02:00
Miguel Ribeiro
69c7d52cf8 fix: vulnerability on delete avatar
fix: some strings not using translations on the calendar page
fix: delete avatar would not work if wallos is on a subfolder
2025-05-03 15:37:10 +02:00
Miguel Ribeiro
f6b8fb9162 fix: don't show budget alert when budget is 0
fix: allow to clear the budget field
2025-04-30 19:13:01 +02:00
Miguel Ribeiro
e0f204803e feat!: simplified webhook notifications without iterator (might break your current webhook settings)
feat: use mobile style toggles instead of checkboxes
fix: barely readable placeholder text on textarea on dark the
feat: webhooks can now be used for cancelation notifications
2025-04-27 17:28:29 +02:00
Miguel Ribeiro
af68c11abf fix: incorrect headers on the api (#802) 2025-04-26 13:03:51 +02:00
Miguel Ribeiro
b7712dc80d fix: error on statistics page when budget = 0 (#800) 2025-04-26 12:52:20 +02:00
Miguel Ribeiro
6d673195ba feat: new graph cost vs budget on statistics (#793) 2025-04-19 22:35:10 +02:00
Miguel Ribeiro
66a1a45f2d fix: timezone for cronjobs now comes from TZ env var first (#791)
Co-authored-by: Miguel Ribeiro <k.d.mintnick@gmail.com>
2025-04-19 19:11:06 +02:00
Miguel Ribeiro
88eae1002f feat: add over budget warnings on the calendar
fix: force correct timezone on the cronjobs
2025-04-18 15:43:51 +02:00
Miguel Ribeiro
c7b3fb4451 fix: localization on date on browsers not in english 2025-04-16 21:30:14 +02:00
Miguel Ribeiro
68f1d47577 feat: shorten date displayed on the list of subscriptions
feat: use user defined language for the date on the list of subscriptions
fix: use translations on the mobile menu
fix: limit name display, when sub has no logo to two lines
2025-04-16 12:20:25 +02:00
Miguel Ribeiro
eade2d9919 fix: version number 2025-04-14 00:34:34 +02:00
Miguel Ribeiro
9eb2907145 feat: show name on mobile view when subscription has no logo
feat: use symbol from db when currencyFormatter does not support the currency
feat: use currencyConverter for notifications as well
fix: date comparison check on sendnotifications cronjob
feat: show timezone on sendnotification cronjob on admin page
fix: emails with encryption set to none not working without ssl
fix: error when not setting custom headers for ntfy
2025-04-13 18:01:40 +02:00
Miguel Ribeiro
ba912a37d1 fix: notifications would also be sent x days after subscription was due in some cases 2025-03-27 23:00:06 +01:00
Miguel Ribeiro
3e0e88d6a2 feat: increase privacy by not sending referrer to external urls
feat: small layout change on the about page
feat: add update notification and release notes to the about page
2025-03-20 16:53:57 +00:00
Miguel Ribeiro
19d30672b2 fix: small layout inconsistencies on the dashboard 2025-03-19 23:26:46 +00:00
Miguel Ribeiro
1bec973803 feat: add ukranian translation (#756)
feat: add sort by renew type
feat: add filter by renew type
fix: state filter not cleared by clear button
fix: special chars on calendar exports
fix: special chars on notifications
feat: remove "Wallos" text from calendar export
fix: ical trigger to spec RFC5545
2025-03-19 18:53:39 +00:00
Miguel Ribeiro
77486ec92c fix: calculation of monthly cost progress graph (#747) 2025-03-06 17:17:06 +01:00
Miguel Ribeiro
51b22727bf fix: access to tmp folder by www-data
feat: sorting by category or payment method respects order from the settings page
2025-02-22 19:15:01 +01:00
Miguel Ribeiro
c43b08aa4c fix: typo on czech translation
fix: subscription progress above 100% for disabled subscriptions
fix: use gd if imagick is not available
fix: bug setting main currency for the first registered user
fix: deprecation message
fix: use first currency on the list of currencies if user has not selected a main currency
2025-02-05 12:45:15 +01:00
Miguel Ribeiro
e2dc269631 fix: improve japanese translation (#713)
fix: improve traditional chinese translation
fix: improve czech translation
fix: setting pgid and puid for the container
2025-01-28 22:57:36 +01:00
Miguel Ribeiro
426fdfa5c7 feat: add czech translations (#701)
Co-authored-by: Miguel Ribeiro <k.d.mintnick@gmail.com>
2025-01-19 14:38:11 +01:00
Miguel Ribeiro
d2f68c457e fix: error setting date of last exchange rates update (#699)
Co-authored-by: Miguel Ribeiro <k.d.mintnick@gmail.com>
2025-01-19 14:29:39 +01:00
Miguel Ribeiro
87f148d174 feat: allow notifications on due date
fix: email notification test always sending to admins email
fix: don't expose disabled notifications to ical feed
2025-01-12 16:26:49 +01:00
Miguel Ribeiro
b668d37d38 fix: edit / delete subscription menu not accessible (#689) 2025-01-12 12:05:29 +01:00
Miguel Ribeiro
ff13fcb654 feat: option to show progress of subscription cycle
fix: currency symbol for monthly budget
feat: new api endpoint that returns the version
chore: fix typo on documentation
2025-01-12 00:55:12 +01:00
Miguel Ribeiro
683a3662ff fix: version number (#668)
Co-authored-by: Miguel Ribeiro <k.d.mintnick@gmail.com>
2024-12-21 23:34:01 +00:00
Miguel Ribeiro
e7185f9257 fix: xss security vulnerability with the avatar selection
fix: don't update next payment date for disabled subscriptions
feat: add total monthly cost trend graph to the statistics page
feat: allow email notifications without authentication
2024-12-21 00:22:21 +00:00
Miguel Ribeiro
5e6bc903bc feat: add payment cycle to csv/json export
feat: run db migration after restoring database
feat: run db migration after importing db
feat: store weekly the total yearly cost of subscriptions
fix: double encoding in statistics labels
2024-12-12 00:09:51 +01:00
Miguel Ribeiro
b5a98806d1 feat: add dutch translation (#655) 2024-12-10 23:34:47 +01:00