14 Commits

Author	SHA1	Message	Date
Gani Georgiev	9b73295a7c	added dumy request info to directly return an error on invalid API rule	2025-11-22 10:58:32 +02:00
Gani Georgiev	6e739fd33d	added :changed request body modifier	2025-11-17 13:58:43 +02:00
Gani Georgiev	593721dcea	flatten relation joins	2025-11-03 14:21:01 +02:00
Gani Georgiev	67ee431585	add extra subquery check for client-side relation filtering	2025-10-31 22:22:28 +02:00
Gani Georgiev	7b6b71e18d	disallow client-side filtering and sorting of relations where the collection of the last targeted field has superusers only List/Search API rule	2025-10-23 17:22:47 +03:00
Gani Georgiev	d135b1e686	added more geoPoint field acccess tests	2025-04-02 23:25:42 +03:00
Gani Georgiev	4c5abd5bd9	added new geoPoint field	2025-04-02 11:52:50 +03:00
Gani Georgiev	24c4b63960	[#6590] apply nullifyMisingField for request.auth.* and request.body.* back relations when the relation field is pointing to a different collection	2025-03-14 23:00:40 +02:00
Gani Georgiev	33340a6977	[#6337] added support for case-insensitive password auth	2025-01-26 12:24:37 +02:00
Gani Georgiev	73f1b223ff	directly resolve to null for auth check with missing RequestInfo.Auth field	2025-01-01 17:19:30 +02:00
Gani Georgiev	a8952cfca2	[#6201] expanded the hidden fields check and allow targetting hidden fields in the List API rule	2024-12-29 17:31:58 +02:00
Gani Georgiev	c91d889da3	udpated :lower modifier to apply after all other normalizations	2024-12-06 22:09:29 +02:00
Gani Georgiev	e8f49c31e4	added :lower modifier	2024-12-06 16:10:11 +02:00
Gani Georgiev	844f18cac3	merge v0.23.0-rc changes	2024-09-29 21:09:46 +03:00