Gani Georgiev
|
b9b0e5ae80
|
added extra IP checks for the connected realtime client
|
2026-05-18 19:13:25 +03:00 |
|
Gani Georgiev
|
f7fbc6c2c3
|
added RealtimeConnectRequestEvent.MaxTimeout field
|
2026-05-18 11:40:46 +03:00 |
|
Gani Georgiev
|
b061673d9a
|
updated test to trigger the entire save hook chain
|
2026-05-13 23:11:10 +03:00 |
|
Gani Georgiev
|
3b98059a8a
|
force unset realtime connections auth state
|
2026-05-13 22:34:50 +03:00 |
|
Gani Georgiev
|
a8c236a54d
|
fixed ui extensions test
|
2026-05-10 14:41:53 +03:00 |
|
Gani Georgiev
|
81a5672498
|
updated ui extensions api to allow top-level await calls
|
2026-05-10 14:36:09 +03:00 |
|
Gani Georgiev
|
5a144e1342
|
[#6410] added rate limit option to exclude IPs/CIDR subnets
|
2026-05-05 17:29:25 +03:00 |
|
Gani Georgiev
|
21a5524fed
|
added superuser ips whitelist
|
2026-05-05 13:04:06 +03:00 |
|
Gani Georgiev
|
7542cd14e2
|
[#7677] fixed default ui csp to allow iframe/object previews
|
2026-05-04 13:39:21 +03:00 |
|
Gani Georgiev
|
4850da6f56
|
adjusted flaky test
|
2026-05-01 19:32:00 +03:00 |
|
Gani Georgiev
|
53ac0d29da
|
reordered change email validations to make enumerations slightly harder
|
2026-05-01 19:31:50 +03:00 |
|
Gani Georgiev
|
326f150db2
|
added more tests for internal record hooks
|
2026-04-26 20:47:47 +03:00 |
|
Gani Georgiev
|
555a4f1a1e
|
lowered the default mfa duration and reorganized internal record pre/post handling
|
2026-04-26 16:46:16 +03:00 |
|
Gani Georgiev
|
ca7cf1162f
|
added App.DeleteAllExternalAuthsByRecord
|
2026-04-26 11:40:09 +03:00 |
|
Gani Georgiev
|
5d55fc18ee
|
added dummy bcrypt check
|
2026-04-25 16:16:23 +03:00 |
|
Gani Georgiev
|
4c44044c0c
|
merge newui branch
|
2026-04-18 16:50:39 +03:00 |
|
Gani Georgiev
|
cb185ad6bf
|
ratelimit test flakiness adjustments
|
2026-04-09 10:31:03 +03:00 |
|
Gani Georgiev
|
89f3668da2
|
updated settings update test
|
2026-04-05 14:15:12 +03:00 |
|
Gani Georgiev
|
e9118fa6b6
|
removed unnecessery error return
|
2026-04-02 21:00:16 +03:00 |
|
Gani Georgiev
|
e49b64b114
|
attempt to reduce ratelimit test flakiness
|
2026-04-02 20:22:16 +03:00 |
|
Gani Georgiev
|
1204362e9c
|
use the raw address in the error message
|
2026-04-02 20:12:01 +03:00 |
|
Gani Georgiev
|
cb44d9e716
|
added extra OAuth2 avatar url download checks
|
2026-04-02 19:55:05 +03:00 |
|
Gani Georgiev
|
5cb66bd52f
|
updated .static jsvm docs
|
2026-04-02 08:06:51 +03:00 |
|
Gani Georgiev
|
9f3cdf4ad5
|
use the explicitly mapped username column name for the unique legacy checks
|
2026-03-30 08:51:11 +03:00 |
|
Gani Georgiev
|
e5390c3d86
|
added missing error return and fixed comment typo
|
2026-03-19 08:48:30 +02:00 |
|
Gani Georgiev
|
70d8d1ee9d
|
replace the custom ratelimiter strategy with a fixed window
|
2026-03-11 11:25:15 +02:00 |
|
Gani Georgiev
|
ba8b51af58
|
[#7575] use memory+file buffer when rereading the request body (fix #7572)
|
2026-03-09 17:19:09 +02:00 |
|
Gani Georgiev
|
bb18799a0b
|
applied lint typo fixes
|
2026-03-04 22:31:27 +02:00 |
|
Gani Georgiev
|
bc72525013
|
[#7525] made Bearer prefix case-insensitive
|
2026-02-14 11:19:13 +02:00 |
|
Gani Georgiev
|
6500b8c518
|
renamed outdated rate limit struct name and added reminder to reavulate the algorithm
|
2025-11-18 22:23:59 +02:00 |
|
Gani Georgiev
|
0f5411d81c
|
[#7314] added ALERT_INFO placeholder to the auth alert mail template
|
2025-11-10 17:56:36 +02:00 |
|
Gani Georgiev
|
593721dcea
|
flatten relation joins
|
2025-11-03 14:21:01 +02:00 |
|
Gani Georgiev
|
67ee431585
|
add extra subquery check for client-side relation filtering
|
2025-10-31 22:22:28 +02:00 |
|
Gani Georgiev
|
7b6b71e18d
|
disallow client-side filtering and sorting of relations where the collection of the last targeted field has superusers only List/Search API rule
|
2025-10-23 17:22:47 +03:00 |
|
Gani Georgiev
|
afb942bc41
|
updated thumb error message
|
2025-10-23 11:55:19 +03:00 |
|
Gani Georgiev
|
83a26d436e
|
[#7268] added FileDownloadRequestEvent.ThumbError field
|
2025-10-23 11:48:59 +03:00 |
|
Gani Georgiev
|
acd12ce9dd
|
[#7256] fixed legacy identitity field priority check when a username is a valid email address
|
2025-10-15 17:25:51 +03:00 |
|
Gani Georgiev
|
40f2ba731c
|
added osutils.IsProbablyGoRun
|
2025-09-06 19:52:51 +03:00 |
|
Gani Georgiev
|
41cc4fd36b
|
increased slightly the wait time to minimize tests flakiness
|
2025-08-31 20:31:45 +03:00 |
|
Gani Georgiev
|
cc902f2df8
|
updated scaffold apis to use random id during the collections initialization and made index columns check on the UI case insensitive
|
2025-08-26 22:02:00 +03:00 |
|
Gani Georgiev
|
b8f18bd97d
|
added more tests and extra debug log
|
2025-08-20 22:41:33 +03:00 |
|
Gani Georgiev
|
50dbb7f94f
|
[#7090] try to forward the Apple OAuth2 redirect user's name to the auth handler
|
2025-08-16 21:30:43 +03:00 |
|
Gani Georgiev
|
6443f2f159
|
[#3233] added optional ServeEvent.Listener field
|
2025-06-29 15:41:55 +03:00 |
|
Gani Georgiev
|
a9c42d0282
|
[#718] enabled calling auth-refresh with impersonate token
|
2025-06-29 11:24:50 +03:00 |
|
Gani Georgiev
|
2c6f99418f
|
added the triggered rate limit rule in the error log details
|
2025-06-25 20:32:58 +03:00 |
|
Gani Georgiev
|
3f3b77dcd4
|
print go run in the superuser create installer suggestion if temp dir location is detected
|
2025-06-24 08:56:53 +03:00 |
|
Gani Georgiev
|
836fc77ddc
|
[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool
|
2025-05-02 10:27:41 +03:00 |
|
Gani Georgiev
|
dc350f0a3e
|
delay default response body write for *Request hooks wrapped in a transaction
|
2025-04-27 16:25:51 +03:00 |
|
Gani Georgiev
|
1a3efe96ac
|
[#6739] use rowid as count column for non-view collections to minimize the need of having the id field as covering index
|
2025-04-21 20:55:09 +03:00 |
|
Kev 🐶
|
5d46fb054e
|
[#6744] added partial webp tumbs support
|
2025-04-20 13:36:45 +03:00 |
|